Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| ROOT-APP-MAVEN-CVE-2026-42580 |
|
Vulnerability in io.root.io.netty:netty-codec-http (ROOT-APP-MAVEN-CVE-2026-42580)
vulnerability in io.root.io.netty:netty-codec-http (ROOT-APP-MAVEN-CVE-2026-42580). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.126.Final-root.io.11, 4.1.126.Final-root.io.12, 4.1.126.Final-root.io.13, 4.1.126.Final-root.io.14, 4.1.118.Final-root.io.16, 4.1.126.Final-root.io.15, 4.1.126.Final-root.io.16, 4.1.118.Final-root.io.17, 4.1.118.Final-root.io.18` or later.
|
| SUSE-SU-2026:1830-1 |
|
Vulnerability in SUSE-SU-2026:1830-1 (SUSE-SU-2026:1830-1)
vulnerability in SUSE-SU-2026:1830-1 (SUSE-SU-2026:1830-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:1829-1 |
|
Vulnerability in SUSE-SU-2026:1829-1 (SUSE-SU-2026:1829-1)
vulnerability in SUSE-SU-2026:1829-1 (SUSE-SU-2026:1829-1). Risk of unauthorized operations or information disclosure.
|
| RUSTSEC-2026-0183 |
|
Vulnerability in git2 (RUSTSEC-2026-0183)
vulnerability in git2 (RUSTSEC-2026-0183). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.21.0` or later.
|
| MAL-2026-3693 |
|
Vulnerability in kaggle-runner (MAL-2026-3693)
vulnerability in kaggle-runner (MAL-2026-3693). Risk of unauthorized operations or information disclosure.
|
| ROOT-OS-DEBIAN-12-CVE-2026-40226 |
|
Vulnerability in rootio-systemd (ROOT-OS-DEBIAN-12-CVE-2026-40226)
vulnerability in rootio-systemd (ROOT-OS-DEBIAN-12-CVE-2026-40226). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `252.38-1~deb12u1.root.io.4, 252.38-1~deb12u1.root.io.3` or later.
|
| ROOT-OS-DEBIAN-12-CVE-2026-40225 |
|
Vulnerability in rootio-systemd (ROOT-OS-DEBIAN-12-CVE-2026-40225)
vulnerability in rootio-systemd (ROOT-OS-DEBIAN-12-CVE-2026-40225). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `252.38-1~deb12u1.root.io.4` or later.
|
| ROOT-OS-DEBIAN-12-CVE-2026-29111 |
|
Vulnerability in rootio-systemd (ROOT-OS-DEBIAN-12-CVE-2026-29111)
vulnerability in rootio-systemd (ROOT-OS-DEBIAN-12-CVE-2026-29111). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `252.38-1~deb12u1.root.io.4, 252.38-1~deb12u1.root.io.3, 252.38-1~deb12u1.root.io.2` or later.
|
| ROOT-OS-DEBIAN-12-CVE-2026-4105 |
|
Vulnerability in rootio-systemd (ROOT-OS-DEBIAN-12-CVE-2026-4105)
vulnerability in rootio-systemd (ROOT-OS-DEBIAN-12-CVE-2026-4105). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `252.38-1~deb12u1.root.io.4, 252.38-1~deb12u1.root.io.3, 252.38-1~deb12u1.root.io.1, 252.38-1~deb12u1.root.io.2` or later.
|
| GHSA-69rh-554m-m3w8 |
|
Vulnerability in jwscube (GHSA-69rh-554m-m3w8)
vulnerability in jwscube (GHSA-69rh-554m-m3w8). Risk of unauthorized operations or information disclosure.
|
| GHSA-fm9w-85jx-h7r4 |
|
Vulnerability in justenv (GHSA-fm9w-85jx-h7r4)
vulnerability in justenv (GHSA-fm9w-85jx-h7r4). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45218 |
|
SQL Injection in wordpress (CVE-2026-45218)
SQL injection in wordpress (CVE-2026-45218). Confidential information can be exposed externally.
|
| CVE-2026-45215 |
|
Vulnerability in wordpress (CVE-2026-45215)
vulnerability in wordpress (CVE-2026-45215). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45214 |
|
SQL Injection in sqli (CVE-2026-45214)
SQL injection in sqli (CVE-2026-45214). Confidential information can be exposed externally.
|
| CVE-2026-45213 |
|
SQL Injection in sqli (CVE-2026-45213)
SQL injection in sqli (CVE-2026-45213). Confidential information can be exposed externally.
|
| CVE-2026-45212 |
|
Vulnerability in c (CVE-2026-45212)
vulnerability in c (CVE-2026-45212). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45211 |
|
SQL Injection in sqli (CVE-2026-45211)
SQL injection in sqli (CVE-2026-45211). Confidential information can be exposed externally.
|
| CVE-2026-45210 |
|
Vulnerability in CVE-2026-45210 (CVE-2026-45210)
vulnerability in CVE-2026-45210 (CVE-2026-45210). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42742 |
|
SQL Injection in sqli (CVE-2026-42742)
SQL injection in sqli (CVE-2026-42742). Confidential information can be exposed externally.
|
| CVE-2026-42741 |
|
SQL Injection in sqli (CVE-2026-42741)
SQL injection in sqli (CVE-2026-42741). Confidential information can be exposed externally.
|
| CVE-2026-41713 |
|
Vulnerability in org.springframework.ai:spring-ai-client-chat (CVE-2026-41713)
vulnerability in org.springframework.ai:spring-ai-client-chat (CVE-2026-41713). Data can be tampered with by attackers. Mitigation: upgrade to `1.1.6` or later.
|
| CVE-2026-41712 |
|
Vulnerability in org.springframework.ai:spring-ai-client-chat (CVE-2026-41712)
vulnerability in org.springframework.ai:spring-ai-client-chat (CVE-2026-41712). Confidential information can be exposed externally. Mitigation: upgrade to `2.0.0-M6` or later.
|
| CVE-2026-32684 |
|
Vulnerability in CVE-2026-32684 (CVE-2026-32684)
vulnerability in CVE-2026-32684 (CVE-2026-32684). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2465 |
|
Authorization Flaw in privilege-escalation (CVE-2026-2465)
vulnerability in privilege-escalation (CVE-2026-2465). Successful exploitation can lead to full system takeover.
|
| CLSA-2026-1778583971 |
|
Vulnerability in libssl-dev (CLSA-2026-1778583971)
vulnerability in libssl-dev (CLSA-2026-1778583971). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.1f-1ubuntu2.24+tuxcare.els4` or later.
|
| MAL-2026-3618 |
|
Vulnerability in mimecast-web-components (MAL-2026-3618)
vulnerability in mimecast-web-components (MAL-2026-3618). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21625-1 |
|
Vulnerability in SUSE-SU-2026:21625-1 (SUSE-SU-2026:21625-1)
vulnerability in SUSE-SU-2026:21625-1 (SUSE-SU-2026:21625-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21607-1 |
|
Vulnerability in SUSE-SU-2026:21607-1 (SUSE-SU-2026:21607-1)
vulnerability in SUSE-SU-2026:21607-1 (SUSE-SU-2026:21607-1). Risk of unauthorized operations or information disclosure.
|
| openSUSE-SU-2026:20717-1 |
|
Vulnerability in openSUSE-SU-2026:20717-1 (openSUSE-SU-2026:20717-1)
vulnerability in openSUSE-SU-2026:20717-1 (openSUSE-SU-2026:20717-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21635-1 |
|
Vulnerability in SUSE-SU-2026:21635-1 (SUSE-SU-2026:21635-1)
vulnerability in SUSE-SU-2026:21635-1 (SUSE-SU-2026:21635-1). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-8162 |
|
Vulnerability in node-multiparty (DEBIAN-CVE-2026-8162)
vulnerability in node-multiparty (DEBIAN-CVE-2026-8162). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.0-1` or later.
|
| CVE-2026-8162 |
|
Vulnerability in multiparty (CVE-2026-8162)
vulnerability in multiparty (CVE-2026-8162). Risk of unauthorized operations or information disclosure. Exploitable via ``decodeURI``. Mitigation: upgrade to `4.3.0` or later.
|
| DEBIAN-CVE-2026-8159 |
|
Vulnerability in node-multiparty (DEBIAN-CVE-2026-8159)
vulnerability in node-multiparty (DEBIAN-CVE-2026-8159). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.0-1` or later.
|
| DEBIAN-CVE-2026-8161 |
|
Vulnerability in node-multiparty (DEBIAN-CVE-2026-8161)
vulnerability in node-multiparty (DEBIAN-CVE-2026-8161). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.0-1` or later.
|
| CVE-2026-8161 |
|
Vulnerability in multiparty (CVE-2026-8161)
vulnerability in multiparty (CVE-2026-8161). Risk of unauthorized operations or information disclosure. Exploitable via ``Object.prototype``. Mitigation: upgrade to `4.3.0` or later.
|
| CVE-2026-8159 |
|
Vulnerability in multiparty (CVE-2026-8159)
vulnerability in multiparty (CVE-2026-8159). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.0` or later.
|
| CVE-2026-8072 |
|
Vulnerability in privilege-escalation (CVE-2026-8072)
vulnerability in privilege-escalation (CVE-2026-8072). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7428 |
|
Vulnerability in CVE-2026-7428 (CVE-2026-7428)
vulnerability in CVE-2026-7428 (CVE-2026-7428). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6813 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6813)
cross-site scripting in wordpress (CVE-2026-6813). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6800 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6800)
cross-site scripting in wordpress (CVE-2026-6800). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6001 |
|
Vulnerability in CVE-2026-6001 (CVE-2026-6001)
vulnerability in CVE-2026-6001 (CVE-2026-6001). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5029 |
|
Vulnerability in CVE-2026-5029 (CVE-2026-5029)
vulnerability in CVE-2026-5029 (CVE-2026-5029). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44412 |
|
Vulnerability in CVE-2026-44412 (CVE-2026-44412)
vulnerability in CVE-2026-44412 (CVE-2026-44412). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44411 |
|
Vulnerability in siemens (CVE-2026-44411)
vulnerability in siemens (CVE-2026-44411). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41551 |
|
Vulnerability in path-traversal (CVE-2026-41551)
vulnerability in path-traversal (CVE-2026-41551). Confidential information can be exposed externally.
|
| CVE-2026-41125 |
|
SQL Injection in sqli (CVE-2026-41125)
SQL injection in sqli (CVE-2026-41125). Data can be tampered with by attackers.
|
| CVE-2026-33893 |
|
Vulnerability in siemens (CVE-2026-33893)
vulnerability in siemens (CVE-2026-33893). Confidential information can be exposed externally.
|
| CVE-2026-33862 |
|
Cross-Site Scripting (XSS) in siemens (CVE-2026-33862)
cross-site scripting in siemens (CVE-2026-33862). Confidential information can be exposed externally.
|
| CVE-2026-27662 |
|
Vulnerability in CVE-2026-27662 (CVE-2026-27662)
vulnerability in CVE-2026-27662 (CVE-2026-27662). Data can be tampered with by attackers.
|
| CVE-2026-25789 |
|
Cross-Site Scripting (XSS) in CVE-2026-25789 (CVE-2026-25789)
cross-site scripting in CVE-2026-25789 (CVE-2026-25789). Successful exploitation can lead to full system takeover.
|