Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| BELL-CVE-2026-47254 |
|
BELL-CVE-2026-47254 |
| BELL-CVE-2026-13574 |
|
BELL-CVE-2026-13574 |
| RLSA-2026:34155 |
|
Vulnerability in rrdtool (RLSA-2026:34155)
vulnerability in rrdtool (RLSA-2026:34155). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:1.7.0-17.el8_10` or later.
|
| RLSA-2026:33445 |
|
Vulnerability in thunderbird (RLSA-2026:33445)
vulnerability in thunderbird (RLSA-2026:33445). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:140.12.0-1.el8_10` or later.
|
| CVE-2026-12252 |
|
Code Injection in nltk (CVE-2026-12252)
code injection in nltk (CVE-2026-12252). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.9.4` or later.
|
| CVE-2025-71380 |
|
OS Command Injection in n8n-nodes-base (CVE-2025-71380)
OS command injection in n8n-nodes-base (CVE-2025-71380). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71375 |
|
Unsafe Deserialization in picklescan (CVE-2025-71375)
vulnerability in picklescan (CVE-2025-71375). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.34` or later.
|
| CVE-2025-71373 |
|
Unsafe Deserialization in picklescan (CVE-2025-71373)
vulnerability in picklescan (CVE-2025-71373). Confidential information can be exposed externally. Exploitable via ``operator.methodcaller``. Mitigation: upgrade to `0.0.33` or later.
|
| CVE-2025-71372 |
|
Unsafe Deserialization in picklescan (CVE-2025-71372)
vulnerability in picklescan (CVE-2025-71372). Confidential information can be exposed externally. Exploitable via ``numpy.f2py.crackfortran.getlincoef``. Mitigation: upgrade to `0.0.33` or later.
|
| CVE-2025-71369 |
|
Unsafe Deserialization in picklescan (CVE-2025-71369)
vulnerability in picklescan (CVE-2025-71369). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.28` or later.
|
| CVE-2025-71367 |
|
Unsafe Deserialization in picklescan (CVE-2025-71367)
vulnerability in picklescan (CVE-2025-71367). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.34` or later.
|
| CVE-2025-71366 |
|
Vulnerability in picklescan (CVE-2025-71366)
vulnerability in picklescan (CVE-2025-71366). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.28` or later.
|
| CVE-2025-71364 |
|
Unsafe Deserialization in picklescan (CVE-2025-71364)
vulnerability in picklescan (CVE-2025-71364). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.30` or later.
|
| CVE-2025-71362 |
|
Unsafe Deserialization in picklescan (CVE-2025-71362)
vulnerability in picklescan (CVE-2025-71362). Confidential information can be exposed externally. Exploitable via ``numpy.f2py.crackfortran``. Mitigation: upgrade to `0.0.33` or later.
|
| CVE-2025-71360 |
|
Unsafe Deserialization in picklescan (CVE-2025-71360)
vulnerability in picklescan (CVE-2025-71360). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.29` or later.
|
| CVE-2025-71359 |
|
Unsafe Deserialization in picklescan (CVE-2025-71359)
vulnerability in picklescan (CVE-2025-71359). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.29` or later.
|
| CVE-2025-71356 |
|
Vulnerability in picklescan (CVE-2025-71356)
vulnerability in picklescan (CVE-2025-71356). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.28` or later.
|
| CVE-2025-71353 |
|
Vulnerability in picklescan (CVE-2025-71353)
vulnerability in picklescan (CVE-2025-71353). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.28` or later.
|
| CVE-2025-71347 |
|
Unsafe Deserialization in picklescan (CVE-2025-71347)
vulnerability in picklescan (CVE-2025-71347). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.33` or later.
|
| CVE-2025-71345 |
|
Unsafe Deserialization in picklescan (CVE-2025-71345)
vulnerability in picklescan (CVE-2025-71345). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.30` or later.
|
| CVE-2025-71343 |
|
Unsafe Deserialization in picklescan (CVE-2025-71343)
vulnerability in picklescan (CVE-2025-71343). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.30` or later.
|
| CVE-2025-71342 |
|
Unsafe Deserialization in picklescan (CVE-2025-71342)
vulnerability in picklescan (CVE-2025-71342). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.30` or later.
|
| UBUNTU-CVE-2026-12252 |
|
Vulnerability in nltk (UBUNTU-CVE-2026-12252)
vulnerability in nltk (UBUNTU-CVE-2026-12252). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54424 |
|
Vulnerability in CVE-2026-54424 (CVE-2026-54424)
vulnerability in CVE-2026-54424 (CVE-2026-54424). Successful exploitation can lead to full system takeover.
|
| ECHO-fc0e-ca5a-02ac |
|
ECHO-fc0e-ca5a-02ac |
| ECHO-9e9b-2656-ec45 |
|
ECHO-9e9b-2656-ec45 |
| openSUSE-SU-2026:11183-1 |
|
Vulnerability in python-joserfc (openSUSE-SU-2026:11183-1)
vulnerability in python-joserfc (openSUSE-SU-2026:11183-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.2-2.1` or later.
|
| openSUSE-SU-2026:11182-1 |
|
Vulnerability in clamav (openSUSE-SU-2026:11182-1)
vulnerability in clamav (openSUSE-SU-2026:11182-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.3-1.1` or later.
|
| MAL-2026-6751 |
|
Vulnerability in bytekit (MAL-2026-6751)
vulnerability in bytekit (MAL-2026-6751). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-6753 |
|
Vulnerability in schemavault (MAL-2026-6753)
vulnerability in schemavault (MAL-2026-6753). Risk of unauthorized operations or information disclosure. Exploitable via ``_ep``.
|
| MAL-2026-6752 |
|
Vulnerability in confighub (MAL-2026-6752)
vulnerability in confighub (MAL-2026-6752). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-6750 |
|
Vulnerability in procwire (MAL-2026-6750)
vulnerability in procwire (MAL-2026-6750). Risk of unauthorized operations or information disclosure. Exploitable via ``_PW_DIST``.
|
| MAL-2026-6749 |
|
Vulnerability in ipa-user-collector (MAL-2026-6749)
vulnerability in ipa-user-collector (MAL-2026-6749). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-6748 |
|
Vulnerability in haproxy-config-client (MAL-2026-6748)
vulnerability in haproxy-config-client (MAL-2026-6748). Risk of unauthorized operations or information disclosure.
|
| CGA-8hcq-26qx-894x |
|
CGA-8hcq-26qx-894x |
| CVE-2026-58523 |
|
Vulnerability in microsoft (CVE-2026-58523)
vulnerability in microsoft (CVE-2026-58523). Confidential information can be exposed externally.
|
| CVE-2026-14617 |
|
Vulnerability in CVE-2026-14617 (CVE-2026-14617)
vulnerability in CVE-2026-14617 (CVE-2026-14617). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58522 |
|
Vulnerability in path-traversal (CVE-2026-58522)
vulnerability in path-traversal (CVE-2026-58522). Confidential information can be exposed externally.
|
| CVE-2026-58597 |
|
Vulnerability in microsoft (CVE-2026-58597)
vulnerability in microsoft (CVE-2026-58597). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58299 |
|
Vulnerability in microsoft (CVE-2026-58299)
vulnerability in microsoft (CVE-2026-58299). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58524 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-58524)
cross-site scripting in microsoft (CVE-2026-58524). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58300 |
|
Vulnerability in path-traversal (CVE-2026-58300)
vulnerability in path-traversal (CVE-2026-58300). Confidential information can be exposed externally.
|
| CVE-2026-58298 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-58298)
cross-site scripting in microsoft (CVE-2026-58298). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58293 |
|
Vulnerability in microsoft (CVE-2026-58293)
vulnerability in microsoft (CVE-2026-58293). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58294 |
|
Use-After-Free in microsoft (CVE-2026-58294)
vulnerability in microsoft (CVE-2026-58294). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58286 |
|
Vulnerability in microsoft (CVE-2026-58286)
vulnerability in microsoft (CVE-2026-58286). Data can be tampered with by attackers.
|
| CVE-2026-58291 |
|
Vulnerability in microsoft (CVE-2026-58291)
vulnerability in microsoft (CVE-2026-58291). Confidential information can be exposed externally.
|
| CVE-2026-58289 |
|
Vulnerability in microsoft (CVE-2026-58289)
vulnerability in microsoft (CVE-2026-58289). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58284 |
|
Vulnerability in microsoft (CVE-2026-58284)
vulnerability in microsoft (CVE-2026-58284). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58290 |
|
Vulnerability in microsoft (CVE-2026-58290)
vulnerability in microsoft (CVE-2026-58290). Data can be tampered with by attackers.
|