Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
UBUNTU-CVE-2026-54513 Vulnerability in jackson-databind (UBUNTU-CVE-2026-54513)
vulnerability in jackson-databind (UBUNTU-CVE-2026-54513). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.18.8` or later.
UBUNTU-CVE-2026-50193 Vulnerability in jackson-databind (UBUNTU-CVE-2026-50193)
vulnerability in jackson-databind (UBUNTU-CVE-2026-50193). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.14.0` or later.
UBUNTU-CVE-2026-54517 Vulnerability in jackson-databind (UBUNTU-CVE-2026-54517)
vulnerability in jackson-databind (UBUNTU-CVE-2026-54517). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.21.4` or later.
UBUNTU-CVE-2026-54516 Vulnerability in jackson-databind (UBUNTU-CVE-2026-54516)
vulnerability in jackson-databind (UBUNTU-CVE-2026-54516). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.4` or later.
UBUNTU-CVE-2026-54515 Vulnerability in jackson-databind (UBUNTU-CVE-2026-54515)
vulnerability in jackson-databind (UBUNTU-CVE-2026-54515). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.18.9` or later.
UBUNTU-CVE-2026-54514 Vulnerability in jackson-databind (UBUNTU-CVE-2026-54514)
vulnerability in jackson-databind (UBUNTU-CVE-2026-54514). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.18.8` or later.
UBUNTU-CVE-2026-54512 Vulnerability in jackson-databind (UBUNTU-CVE-2026-54512)
vulnerability in jackson-databind (UBUNTU-CVE-2026-54512). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.18.8` or later.
CVE-2026-41862 Unsafe Deserialization in CVE-2026-41862 (CVE-2026-41862)
vulnerability in CVE-2026-41862 (CVE-2026-41862). Successful exploitation can lead to full system takeover.
CVE-2026-23513 Authorization Flaw in CVE-2026-23513 (CVE-2026-23513)
vulnerability in CVE-2026-23513 (CVE-2026-23513). Risk of unauthorized operations or information disclosure.
CVE-2026-12892 Out-of-Bounds Read in gstreamer (CVE-2026-12892)
vulnerability in gstreamer (CVE-2026-12892). Risk of unauthorized operations or information disclosure.
CVE-2026-12891 Out-of-Bounds Read in gstreamer (CVE-2026-12891)
vulnerability in gstreamer (CVE-2026-12891). Risk of unauthorized operations or information disclosure.
CVE-2026-12112 Authentication Bypass in privilege-escalation (CVE-2026-12112)
authentication bypass in privilege-escalation (CVE-2026-12112). Successful exploitation can lead to full system takeover.
CVE-2026-11820 Vulnerability in c (CVE-2026-11820)
vulnerability in c (CVE-2026-11820). Confidential information can be exposed externally.
CVE-2026-11819 Vulnerability in c (CVE-2026-11819)
vulnerability in c (CVE-2026-11819). Confidential information can be exposed externally.
CVE-2026-11807 Vulnerability in CVE-2026-11807 (CVE-2026-11807)
vulnerability in CVE-2026-11807 (CVE-2026-11807). Confidential information can be exposed externally.
CVE-2025-64105 Vulnerability in CVE-2025-64105 (CVE-2025-64105)
vulnerability in CVE-2025-64105 (CVE-2025-64105). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-12892 Vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-12892)
vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-12892). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-12891 Vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-12891)
vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-12891). Risk of unauthorized operations or information disclosure.
MAL-2026-6347 Vulnerability in wagmi_util (MAL-2026-6347)
vulnerability in wagmi_util (MAL-2026-6347). Risk of unauthorized operations or information disclosure. Exploitable via ``wagmi_util``.
ECHO-bc9c-5617-0a3c ECHO-bc9c-5617-0a3c
GHSA-fphr-9c8m-c35g Vulnerability in react-check-error (GHSA-fphr-9c8m-c35g)
vulnerability in react-check-error (GHSA-fphr-9c8m-c35g). Risk of unauthorized operations or information disclosure. Exploitable via ``cookie``.
MAL-2026-6346 Vulnerability in triage-bot (MAL-2026-6346)
vulnerability in triage-bot (MAL-2026-6346). Risk of unauthorized operations or information disclosure. Exploitable via ``https``.
CVE-2026-54555 Authorization Flaw in CVE-2026-54555 (CVE-2026-54555)
vulnerability in CVE-2026-54555 (CVE-2026-54555). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.42.2` or later.
CVE-2026-39253 Unsafe Deserialization in CVE-2026-39253 (CVE-2026-39253)
vulnerability in CVE-2026-39253 (CVE-2026-39253). Successful exploitation can lead to full system takeover.
GHSA-29mh-6rgm-mmfw Vulnerability in hunsterx-package (GHSA-29mh-6rgm-mmfw)
vulnerability in hunsterx-package (GHSA-29mh-6rgm-mmfw). Risk of unauthorized operations or information disclosure.
CVE-2026-55736 Vulnerability in privilege-escalation (CVE-2026-55736)
vulnerability in privilege-escalation (CVE-2026-55736). Risk of unauthorized operations or information disclosure.
CVE-2026-55249 OS Command Injection in c (CVE-2026-55249)
OS command injection in c (CVE-2026-55249). Confidential information can be exposed externally.
CVE-2026-54320 Authentication Bypass in CVE-2026-54320 (CVE-2026-54320)
authentication bypass in CVE-2026-54320 (CVE-2026-54320). Confidential information can be exposed externally. Mitigation: upgrade to `0.184.0` or later.
GHSA-7cqp-7cfv-6c3q Cross-Site Scripting (XSS) in wwbn/avideo (GHSA-7cqp-7cfv-6c3q)
cross-site scripting in wwbn/avideo (GHSA-7cqp-7cfv-6c3q). Risk of unauthorized operations or information disclosure. Exploitable via ``meet_join_log.user_agent``.
USN-8193-2 Vulnerability in libcap2 (USN-8193-2)
vulnerability in libcap2 (USN-8193-2). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:2.24-0ubuntu2+esm2` or later.
GHSA-phv5-334h-mxcw Vulnerability in motioneye (GHSA-phv5-334h-mxcw)
vulnerability in motioneye (GHSA-phv5-334h-mxcw). Risk of unauthorized operations or information disclosure. Exploitable via `GET /movie/`. Mitigation: upgrade to `0.44.0` or later.
GHSA-qxvg-h7q2-hcxh Path Traversal in motioneye (GHSA-qxvg-h7q2-hcxh)
path traversal in motioneye (GHSA-qxvg-h7q2-hcxh). Successful exploitation can lead to full system takeover. Exploitable via ``CONF_PATH``. Mitigation: upgrade to `0.44.0` or later.
CVE-2026-55863 Vulnerability in motioneye (CVE-2026-55863)
vulnerability in motioneye (CVE-2026-55863). Risk of unauthorized operations or information disclosure. Exploitable via `POST /action/1/snapshot`. Mitigation: upgrade to `0.44.0` or later.
CVE-2026-55488 Path Traversal in motioneye (CVE-2026-55488)
path traversal in motioneye (CVE-2026-55488). Risk of unauthorized operations or information disclosure. Exploitable via `GET /movie/`. Mitigation: upgrade to `0.44.0` or later.
CVE-2026-57062 Vulnerability in CVE-2026-57062 (CVE-2026-57062)
vulnerability in CVE-2026-57062 (CVE-2026-57062). Risk of unauthorized operations or information disclosure.
CVE-2026-57053 Vulnerability in gnu (CVE-2026-57053)
vulnerability in gnu (CVE-2026-57053). Risk of unauthorized operations or information disclosure.
CVE-2026-50221 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-50221)
SSRF in ssrf (CVE-2026-50221). Risk of unauthorized operations or information disclosure.
CVE-2025-71382 Vulnerability in c (CVE-2025-71382)
vulnerability in c (CVE-2025-71382). Risk of unauthorized operations or information disclosure.
CVE-2026-0864 Vulnerability in CVE-2026-0864 (CVE-2026-0864)
vulnerability in CVE-2026-0864 (CVE-2026-0864). Data can be tampered with by attackers.
CVE-2025-61029 SQL Injection in dos (CVE-2025-61029)
SQL injection in dos (CVE-2025-61029). Risk of unauthorized operations or information disclosure.
CVE-2020-9711 Out-of-Bounds Read in adobe (CVE-2020-9711)
vulnerability in adobe (CVE-2020-9711). Confidential information can be exposed externally.
CVE-2025-61024 SQL Injection in dos (CVE-2025-61024)
SQL injection in dos (CVE-2025-61024). Risk of unauthorized operations or information disclosure.
CVE-2020-9713 Out-of-Bounds Read in adobe (CVE-2020-9713)
vulnerability in adobe (CVE-2020-9713). Confidential information can be exposed externally.
CVE-2020-9695 Out-of-Bounds Write in adobe (CVE-2020-9695)
out-of-bounds write in adobe (CVE-2020-9695). Successful exploitation can lead to full system takeover.
CVE-2026-55448 OS Command Injection in mise (CVE-2026-55448)
OS command injection in mise (CVE-2026-55448). Confidential information can be exposed externally. Exploitable via ``mise``. Mitigation: upgrade to `2026.6.4` or later.
CVE-2026-55441 Vulnerability in mise (CVE-2026-55441)
vulnerability in mise (CVE-2026-55441). Successful exploitation can lead to full system takeover. Exploitable via ``mise.toml``. Mitigation: upgrade to `2026.6.4` or later.
CVE-2026-54323 Vulnerability in CVE-2026-54323 (CVE-2026-54323)
vulnerability in CVE-2026-54323 (CVE-2026-54323). Confidential information can be exposed externally. Exploitable via `Authorization header`. Mitigation: upgrade to `0.185.0` or later.
CVE-2026-54318 Vulnerability in home-assistant (CVE-2026-54318)
vulnerability in home-assistant (CVE-2026-54318). Data can be tampered with by attackers. Mitigation: upgrade to `2026.5.3` or later.
CVE-2026-53662 Cross-Site Scripting (XSS) in CVE-2026-53662 (CVE-2026-53662)
cross-site scripting in CVE-2026-53662 (CVE-2026-53662). Successful exploitation can lead to full system takeover.
UBUNTU-CVE-2026-57053 Vulnerability in libidn (UBUNTU-CVE-2026-57053)
vulnerability in libidn (UBUNTU-CVE-2026-57053). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.38-4ubuntu1.1` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →