Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-10585 |
|
Cross-Site Scripting (XSS) in c (CVE-2026-10585)
cross-site scripting in c (CVE-2026-10585). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-54903 |
|
Vulnerability in ruby-oj (UBUNTU-CVE-2026-54903)
vulnerability in ruby-oj (UBUNTU-CVE-2026-54903). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-54900 |
|
Vulnerability in ruby-oj (UBUNTU-CVE-2026-54900)
vulnerability in ruby-oj (UBUNTU-CVE-2026-54900). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-54899 |
|
Vulnerability in ruby-oj (UBUNTU-CVE-2026-54899)
vulnerability in ruby-oj (UBUNTU-CVE-2026-54899). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-54898 |
|
Vulnerability in ruby-oj (UBUNTU-CVE-2026-54898)
vulnerability in ruby-oj (UBUNTU-CVE-2026-54898). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-54500 |
|
Vulnerability in ruby-oj (UBUNTU-CVE-2026-54500)
vulnerability in ruby-oj (UBUNTU-CVE-2026-54500). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-54902 |
|
Vulnerability in ruby-oj (UBUNTU-CVE-2026-54902)
vulnerability in ruby-oj (UBUNTU-CVE-2026-54902). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-54901 |
|
Vulnerability in ruby-oj (UBUNTU-CVE-2026-54901)
vulnerability in ruby-oj (UBUNTU-CVE-2026-54901). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-54897 |
|
Vulnerability in ruby-oj (UBUNTU-CVE-2026-54897)
vulnerability in ruby-oj (UBUNTU-CVE-2026-54897). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-54896 |
|
Vulnerability in ruby-oj (UBUNTU-CVE-2026-54896)
vulnerability in ruby-oj (UBUNTU-CVE-2026-54896). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-54502 |
|
Vulnerability in ruby-oj (UBUNTU-CVE-2026-54502)
vulnerability in ruby-oj (UBUNTU-CVE-2026-54502). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-54592 |
|
Vulnerability in ruby-oj (UBUNTU-CVE-2026-54592)
vulnerability in ruby-oj (UBUNTU-CVE-2026-54592). Risk of unauthorized operations or information disclosure.
|
| ALSA-2026:34357 |
|
Vulnerability in opentelemetry-collector (ALSA-2026:34357)
vulnerability in opentelemetry-collector (ALSA-2026:34357). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.152.1-1.el10_2` or later.
|
| ALSA-2026:34359 |
|
Vulnerability in opentelemetry-collector (ALSA-2026:34359)
vulnerability in opentelemetry-collector (ALSA-2026:34359). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.152.1-1.el9_8` or later.
|
| openSUSE-SU-2026:11170-1 |
|
Vulnerability in python-python-engineio (openSUSE-SU-2026:11170-1)
vulnerability in python-python-engineio (openSUSE-SU-2026:11170-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.13.3-1.1` or later.
|
| openSUSE-SU-2026:11171-1 |
|
Vulnerability in python-python-socketio (openSUSE-SU-2026:11171-1)
vulnerability in python-python-socketio (openSUSE-SU-2026:11171-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.16.3-1.1` or later.
|
| openSUSE-SU-2026:11169-1 |
|
Vulnerability in python-onionshare (openSUSE-SU-2026:11169-1)
vulnerability in python-onionshare (openSUSE-SU-2026:11169-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.4-1.1` or later.
|
| openSUSE-SU-2026:11167-1 |
|
Vulnerability in kubectl-cnpg (openSUSE-SU-2026:11167-1)
vulnerability in kubectl-cnpg (openSUSE-SU-2026:11167-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.29.2-1.1` or later.
|
| openSUSE-SU-2026:11168-1 |
|
Vulnerability in perl-CGI-Session (openSUSE-SU-2026:11168-1)
vulnerability in perl-CGI-Session (openSUSE-SU-2026:11168-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.490.0-1.1` or later.
|
| openSUSE-SU-2026:11166-1 |
|
Vulnerability in c3p0 (openSUSE-SU-2026:11166-1)
vulnerability in c3p0 (openSUSE-SU-2026:11166-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.14.1-1.1` or later.
|
| openSUSE-SU-2026:11165-1 |
|
Vulnerability in alloy (openSUSE-SU-2026:11165-1)
vulnerability in alloy (openSUSE-SU-2026:11165-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.17.1-1.1` or later.
|
| openSUSE-SU-2026:11164-1 |
|
Vulnerability in MozillaThunderbird (openSUSE-SU-2026:11164-1)
vulnerability in MozillaThunderbird (openSUSE-SU-2026:11164-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `140.12.1-1.1` or later.
|
| ALSA-2026:34354 |
|
Vulnerability in apcu-panel (ALSA-2026:34354)
vulnerability in apcu-panel (ALSA-2026:34354). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.1.18-1.module_el8.6.0+2750+78feabcb` or later.
|
| ALSA-2026:34355 |
|
Vulnerability in mod_http2 (ALSA-2026:34355)
vulnerability in mod_http2 (ALSA-2026:34355). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.29-4.el10_2.2` or later.
|
| ALSA-2026:34156 |
|
Vulnerability in python3-rrdtool (ALSA-2026:34156)
vulnerability in python3-rrdtool (ALSA-2026:34156). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.2-22.el9_8` or later.
|
| ALSA-2026:34155 |
|
Vulnerability in python3-rrdtool (ALSA-2026:34155)
vulnerability in python3-rrdtool (ALSA-2026:34155). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0-17.el8_10` or later.
|
| ALSA-2026:34109 |
|
Vulnerability in httpd (ALSA-2026:34109)
vulnerability in httpd (ALSA-2026:34109). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.63-13.el10_2.4` or later.
|
| CVE-2026-13774 |
|
Use-After-Free in Google chrome (CVE-2026-13774)
vulnerability in Google chrome (CVE-2026-13774). Successful exploitation can lead to full system takeover.
|
| DEBIAN-CVE-2026-56369 |
|
Vulnerability in imagemagick (DEBIAN-CVE-2026-56369)
vulnerability in imagemagick (DEBIAN-CVE-2026-56369). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8:7.1.2.23+dfsg1-1` or later.
|
| CVE-2026-55223 |
|
Unsafe Deserialization in com.mchange:c3p0 (CVE-2026-55223)
vulnerability in com.mchange:c3p0 (CVE-2026-55223). Risk of unauthorized operations or information disclosure. Exploitable via ``DataSource``. Mitigation: upgrade to `0.14.0` or later.
|
| CVE-2026-54696 |
|
Vulnerability in json (CVE-2026-54696)
vulnerability in json (CVE-2026-54696). Risk of unauthorized operations or information disclosure. Exploitable via ``FBUFFER_IO_BUFFER_SIZE``. Mitigation: upgrade to `2.19.9` or later.
|
| CVE-2026-54673 |
|
Information Disclosure in builder-util-runtime (CVE-2026-54673)
vulnerability in builder-util-runtime (CVE-2026-54673). Confidential information can be exposed externally. Exploitable via ``HttpExecutor.prepareRedirectUrlOptions``. Mitigation: upgrade to `9.7.0` or later.
|
| CVE-2026-54672 |
|
Vulnerability in app-builder-lib (CVE-2026-54672)
vulnerability in app-builder-lib (CVE-2026-54672). Successful exploitation can lead to full system takeover. Exploitable via ``AppImage``. Mitigation: upgrade to `26.15.0` or later.
|
| UBUNTU-CVE-2026-13885 |
|
Vulnerability in libskia (UBUNTU-CVE-2026-13885)
vulnerability in libskia (UBUNTU-CVE-2026-13885). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-13971 |
|
Vulnerability in libskia (UBUNTU-CVE-2026-13971)
vulnerability in libskia (UBUNTU-CVE-2026-13971). Confidential information can be exposed externally.
|
| UBUNTU-CVE-2026-13841 |
|
Vulnerability in libskia (UBUNTU-CVE-2026-13841)
vulnerability in libskia (UBUNTU-CVE-2026-13841). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-13820 |
|
Vulnerability in libskia (UBUNTU-CVE-2026-13820)
vulnerability in libskia (UBUNTU-CVE-2026-13820). Confidential information can be exposed externally.
|
| UBUNTU-CVE-2026-13781 |
|
Vulnerability in libskia (UBUNTU-CVE-2026-13781)
vulnerability in libskia (UBUNTU-CVE-2026-13781). Successful exploitation can lead to full system takeover.
|
| SUSE-SU-2026:22436-1 |
|
Vulnerability in kernel-default (SUSE-SU-2026:22436-1)
vulnerability in kernel-default (SUSE-SU-2026:22436-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.4.0-48.1` or later.
|
| SUSE-SU-2026:22459-1 |
|
Vulnerability in pcr-oracle (SUSE-SU-2026:22459-1)
vulnerability in pcr-oracle (SUSE-SU-2026:22459-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.6.3-slfo.1.1_1.1` or later.
|
| CVE-2026-57585 |
|
Use-After-Free in dos (CVE-2026-57585)
vulnerability in dos (CVE-2026-57585). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57204 |
|
Vulnerability in pypdf (CVE-2026-57204)
vulnerability in pypdf (CVE-2026-57204). Risk of unauthorized operations or information disclosure. Exploitable via ``MAX_DECLARED_STREAM_LENGTH``. Mitigation: upgrade to `6.13.3` or later.
|
| UBUNTU-CVE-2026-57204 |
|
Vulnerability in pypdf (UBUNTU-CVE-2026-57204)
vulnerability in pypdf (UBUNTU-CVE-2026-57204). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-57585 |
|
Vulnerability in python-pip (UBUNTU-CVE-2026-57585)
vulnerability in python-pip (UBUNTU-CVE-2026-57585). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-52868 |
|
Vulnerability in dcmtk (UBUNTU-CVE-2026-52868)
vulnerability in dcmtk (UBUNTU-CVE-2026-52868). Confidential information can be exposed externally.
|
| UBUNTU-CVE-2026-50254 |
|
Vulnerability in dcmtk (UBUNTU-CVE-2026-50254)
vulnerability in dcmtk (UBUNTU-CVE-2026-50254). Confidential information can be exposed externally.
|
| UBUNTU-CVE-2026-50003 |
|
Vulnerability in dcmtk (UBUNTU-CVE-2026-50003)
vulnerability in dcmtk (UBUNTU-CVE-2026-50003). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-35505 |
|
Vulnerability in dcmtk (UBUNTU-CVE-2026-35505)
vulnerability in dcmtk (UBUNTU-CVE-2026-35505). Confidential information can be exposed externally.
|
| USN-8487-1 |
|
Vulnerability in curl (USN-8487-1)
vulnerability in curl (USN-8487-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.35.0-1ubuntu2.20+esm20` or later.
|
| CVE-2025-36328 |
|
Vulnerability in ibm (CVE-2025-36328)
vulnerability in ibm (CVE-2025-36328). Risk of unauthorized operations or information disclosure.
|