Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-72847 |
|
Vulnerability in CVE-2026-72847 (CVE-2026-72847)
vulnerability in CVE-2026-72847 (CVE-2026-72847). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75483 |
|
Vulnerability in CVE-2026-75483 (CVE-2026-75483)
vulnerability in CVE-2026-75483 (CVE-2026-75483). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73036 |
|
Vulnerability in CVE-2026-73036 (CVE-2026-73036)
vulnerability in CVE-2026-73036 (CVE-2026-73036). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73035 |
|
Vulnerability in CVE-2026-73035 (CVE-2026-73035)
vulnerability in CVE-2026-73035 (CVE-2026-73035). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72913 |
|
Command Injection in CVE-2026-72913 (CVE-2026-72913)
command injection in CVE-2026-72913 (CVE-2026-72913). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64654 |
|
Vulnerability in CVE-2026-64654 (CVE-2026-64654)
vulnerability in CVE-2026-64654 (CVE-2026-64654). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73506 |
|
Vulnerability in github.com/jandedobbeleer/oh-my-posh (CVE-2026-73506)
vulnerability in github.com/jandedobbeleer/oh-my-posh (CVE-2026-73506). Risk of unauthorized operations or information disclosure. Exploitable via ``formats.EscapeSequences``. Mitigation: upgrade to `29.35.1` or later.
|
| CVE-2026-73414 |
|
OS Command Injection in shescape (CVE-2026-73414)
OS command injection in shescape (CVE-2026-73414). Risk of unauthorized operations or information disclosure. Exploitable via ``shell``. Mitigation: upgrade to `3.0.1` or later.
|
| CVE-2026-39879 |
|
Vulnerability in c (CVE-2026-39879)
vulnerability in c (CVE-2026-39879). Risk of unauthorized operations or information disclosure. Exploitable via ``afsql_dd_run_query``.
|
| CVE-2026-62948 |
|
Cross-Site Scripting (XSS) in c (CVE-2026-62948)
cross-site scripting in c (CVE-2026-62948). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `25.12.5` or later.
|
| CVE-2026-49147 |
|
Vulnerability in c (CVE-2026-49147)
vulnerability in c (CVE-2026-49147). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11373 |
|
Vulnerability in CVE-2026-11373 (CVE-2026-11373)
vulnerability in CVE-2026-11373 (CVE-2026-11373). Confidential information can be exposed externally.
|
| CVE-2026-54057 |
|
Code Injection in kovidgoyal (CVE-2026-54057)
code injection in kovidgoyal (CVE-2026-54057). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50639 |
|
Vulnerability in pevans (CVE-2026-50639)
vulnerability in pevans (CVE-2026-50639). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50638 |
|
Vulnerability in pevans (CVE-2026-50638)
vulnerability in pevans (CVE-2026-50638). Confidential information can be exposed externally.
|
| CVE-2026-50637 |
|
Vulnerability in pevans (CVE-2026-50637)
vulnerability in pevans (CVE-2026-50637). Data can be tampered with by attackers.
|
| CVE-2026-9270 |
|
Vulnerability in binary (CVE-2026-9270)
vulnerability in binary (CVE-2026-9270). Confidential information can be exposed externally.
|
| CVE-2026-11362 |
|
Vulnerability in binary (CVE-2026-11362)
vulnerability in binary (CVE-2026-11362). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46741 |
|
Vulnerability in sanbeg (CVE-2026-46741)
vulnerability in sanbeg (CVE-2026-46741). Data can be tampered with by attackers.
|
| CVE-2026-46739 |
|
Vulnerability in cosimo (CVE-2026-46739)
vulnerability in cosimo (CVE-2026-46739). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8722 |
|
Vulnerability in team (CVE-2026-8722)
vulnerability in team (CVE-2026-8722). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46740 |
|
Vulnerability in CVE-2026-46740 (CVE-2026-46740)
vulnerability in CVE-2026-46740 (CVE-2026-46740). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47090 |
|
Vulnerability in jarrodwatts (CVE-2026-47090)
vulnerability in jarrodwatts (CVE-2026-47090). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8788 |
|
Vulnerability in CVE-2026-8788 (CVE-2026-8788)
vulnerability in CVE-2026-8788 (CVE-2026-8788). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46720 |
|
Vulnerability in CVE-2026-46720 (CVE-2026-46720)
vulnerability in CVE-2026-46720 (CVE-2026-46720). Data can be tampered with by attackers.
|
| CVE-2026-46719 |
|
Vulnerability in CVE-2026-46719 (CVE-2026-46719)
vulnerability in CVE-2026-46719 (CVE-2026-46719). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45038 |
|
Vulnerability in tabby (CVE-2026-45038)
vulnerability in tabby (CVE-2026-45038). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.0.233` or later.
|
| CVE-2026-45803 |
|
Vulnerability in github.com/cli/cli/v2 (CVE-2026-45803)
vulnerability in github.com/cli/cli/v2 (CVE-2026-45803). Risk of unauthorized operations or information disclosure. Exploitable via ``screen``. Mitigation: upgrade to `2.92.0` or later.
|
| CVE-2026-6019 |
|
Vulnerability in libpython (CVE-2026-6019)
vulnerability in libpython (CVE-2026-6019). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.13.14, 3.14.5` or later.
|
| CVE-2026-40505 |
|
Vulnerability in artifex (CVE-2026-40505)
vulnerability in artifex (CVE-2026-40505). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-55754 |
|
Vulnerability in org.apache.tomcat:tomcat (CVE-2025-55754)
vulnerability in org.apache.tomcat:tomcat (CVE-2025-55754). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.0.109, 10.1.45, 11.0.11` or later.
|
| CVE-2024-28085 |
|
Vulnerability in kernel (CVE-2024-28085)
vulnerability in kernel (CVE-2024-28085). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-0899 |
|
Vulnerability in rubygems (CVE-2017-0899)
vulnerability in rubygems (CVE-2017-0899). Successful exploitation can lead to full system takeover.
|