Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2022-0995 KEV |
|
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event...
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event...
|
| CVE-2026-54231 |
|
Vulnerability in abrt-project (CVE-2026-54231)
vulnerability in abrt-project (CVE-2026-54231). Data can be tampered with by attackers.
|
| CVE-2026-54230 |
|
Vulnerability in abrt-project (CVE-2026-54230)
vulnerability in abrt-project (CVE-2026-54230). Successful exploitation can lead to full system takeover.
|
| CVE-2022-0492 KEV |
|
[KEV] Authentication Bypass in Linux c (CVE-2022-0492)
authentication bypass in Linux c (CVE-2022-0492). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2022-39399 |
|
Vulnerability in java (CVE-2022-39399)
vulnerability in java (CVE-2022-39399). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.17, 17.0.5, 19.0.1` or later.
|
| CVE-2022-21619 |
|
Vulnerability in java (CVE-2022-21619)
vulnerability in java (CVE-2022-21619). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0, 8.0.351, 11.0.17, 17.0.5, 19.0.1` or later.
|
| CVE-2022-21618 |
|
Authentication Bypass in java (CVE-2022-21618)
authentication bypass in java (CVE-2022-21618). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `17.0.5, 19.0.1` or later.
|
| CVE-2022-21549 |
|
Unsafe Deserialization in java (CVE-2022-21549)
vulnerability in java (CVE-2022-21549). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `17.0.4` or later.
|
| CVE-2022-21540 |
|
Use-After-Free in java (CVE-2022-21540)
vulnerability in java (CVE-2022-21540). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.351, 8.0.341, 11.0.16, 17.0.4, 18.0.2` or later.
|
| CVE-2022-21293 |
|
Vulnerability in java (CVE-2022-21293)
vulnerability in java (CVE-2022-21293). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.331, 8.0.321, 11.0.14, 17.0.2` or later.
|
| CVE-2022-21291 |
|
Vulnerability in java (CVE-2022-21291)
vulnerability in java (CVE-2022-21291). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.331, 8.0.321, 11.0.14, 17.0.2` or later.
|
| CVE-2022-21283 |
|
Vulnerability in java (CVE-2022-21283)
vulnerability in java (CVE-2022-21283). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.14, 17.0.2` or later.
|
| CVE-2021-35556 |
|
Vulnerability in java (CVE-2021-35556)
vulnerability in java (CVE-2021-35556). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.321, 8.0.311, 11.0.13, 17.0.1` or later.
|
| CVE-2026-35093 |
|
Code Injection in freedesktop (CVE-2026-35093)
code injection in freedesktop (CVE-2026-35093). Successful exploitation can lead to full system takeover.
|
| CVE-2024-1086 KEV |
|
[KEV] Use-After-Free in Linux kernel (CVE-2024-1086)
vulnerability in Linux kernel (CVE-2024-1086). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2024-35949 |
|
Out-of-Bounds Write in linux (CVE-2024-35949)
out-of-bounds write in linux (CVE-2024-35949). Successful exploitation can lead to full system takeover.
|
| CVE-2024-27401 |
|
Vulnerability in linux (CVE-2024-27401)
vulnerability in linux (CVE-2024-27401). Successful exploitation can lead to full system takeover.
|
| CVE-2024-27400 |
|
Vulnerability in linux (CVE-2024-27400)
vulnerability in linux (CVE-2024-27400). Successful exploitation can lead to full system takeover.
|
| CVE-2024-27398 |
|
Use-After-Free in fedoraproject (CVE-2024-27398)
vulnerability in fedoraproject (CVE-2024-27398). Successful exploitation can lead to full system takeover.
|
| CVE-2024-34397 |
|
Vulnerability in gnome (CVE-2024-34397)
vulnerability in gnome (CVE-2024-34397). Data can be tampered with by attackers.
|
| CVE-2024-27004 |
|
Vulnerability in linux (CVE-2024-27004)
vulnerability in linux (CVE-2024-27004). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-27013 |
|
Vulnerability in linux (CVE-2024-27013)
vulnerability in linux (CVE-2024-27013). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-26988 |
|
Out-of-Bounds Write in c (CVE-2024-26988)
out-of-bounds write in c (CVE-2024-26988). Successful exploitation can lead to full system takeover.
|
| CVE-2024-27019 |
|
Vulnerability in linux (CVE-2024-27019)
vulnerability in linux (CVE-2024-27019). Successful exploitation can lead to full system takeover.
|
| CVE-2024-27018 |
|
Vulnerability in c (CVE-2024-27018)
vulnerability in c (CVE-2024-27018). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-27017 |
|
Vulnerability in linux (CVE-2024-27017)
vulnerability in linux (CVE-2024-27017). Successful exploitation can lead to full system takeover.
|
| CVE-2024-27016 |
|
Vulnerability in linux (CVE-2024-27016)
vulnerability in linux (CVE-2024-27016). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-27012 |
|
Vulnerability in linux (CVE-2024-27012)
vulnerability in linux (CVE-2024-27012). Successful exploitation can lead to full system takeover.
|
| CVE-2024-26994 |
|
Vulnerability in linux (CVE-2024-26994)
vulnerability in linux (CVE-2024-26994). Successful exploitation can lead to full system takeover.
|
| CVE-2024-22373 |
|
Buffer Overflow in malaterre (CVE-2024-22373)
vulnerability in malaterre (CVE-2024-22373). Successful exploitation can lead to full system takeover.
|
| CVE-2024-26922 |
|
Vulnerability in c (CVE-2024-26922)
vulnerability in c (CVE-2024-26922). Successful exploitation can lead to full system takeover.
|
| CVE-2024-28960 |
|
An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto. The PSA Crypto API mishandles shared memory.
An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto. The PSA Crypto API mishandles shared memory.
|
| CVE-2024-21626 |
|
Vulnerability in github.com/opencontainers/runc (CVE-2024-21626)
vulnerability in github.com/opencontainers/runc (CVE-2024-21626). Successful exploitation can lead to full system takeover. Exploitable via ``process.cwd``. Mitigation: upgrade to `1.1.12` or later.
|
| CVE-2023-6246 |
|
Vulnerability in privilege-escalation (CVE-2023-6246)
vulnerability in privilege-escalation (CVE-2023-6246). Successful exploitation can lead to full system takeover.
|
| CVE-2023-6779 |
|
Vulnerability in gnu (CVE-2023-6779)
vulnerability in gnu (CVE-2023-6779). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-6780 |
|
Vulnerability in gnu (CVE-2023-6780)
vulnerability in gnu (CVE-2023-6780). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-40548 |
|
Vulnerability in redhat (CVE-2023-40548)
vulnerability in redhat (CVE-2023-40548). Successful exploitation can lead to full system takeover.
|
| CVE-2024-0443 |
|
Vulnerability in c (CVE-2024-0443)
vulnerability in c (CVE-2024-0443). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-22049 |
|
Vulnerability in httparty (CVE-2024-22049)
vulnerability in httparty (CVE-2024-22049). Data can be tampered with by attackers. Exploitable via ``body.rb``. Mitigation: upgrade to `0.21.0` or later.
|
| CVE-2023-6879 |
|
Vulnerability in aomedia (CVE-2023-6879)
vulnerability in aomedia (CVE-2023-6879). Successful exploitation can lead to full system takeover.
|
| CVE-2023-51767 |
|
Vulnerability in openbsd (CVE-2023-51767)
vulnerability in openbsd (CVE-2023-51767). Successful exploitation can lead to full system takeover.
|
| CVE-2023-6546 |
|
Vulnerability in linux (CVE-2023-6546)
vulnerability in linux (CVE-2023-6546). Successful exploitation can lead to full system takeover.
|
| CVE-2023-48795 |
|
Vulnerability in russh (CVE-2023-48795)
vulnerability in russh (CVE-2023-48795). Data can be tampered with by attackers. Mitigation: upgrade to `0.40.2` or later.
|
| CVE-2023-46219 |
|
Vulnerability in haxx (CVE-2023-46219)
vulnerability in haxx (CVE-2023-46219). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-46218 |
|
Vulnerability in haxx (CVE-2023-46218)
vulnerability in haxx (CVE-2023-46218). Risk of unauthorized operations or information disclosure. Exploitable via ``curl.co.uk``.
|
| CVE-2023-4911 KEV |
|
[KEV] Vulnerability in Gnu c (CVE-2023-4911)
vulnerability in Gnu c (CVE-2023-4911). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2023-48237 |
|
Vulnerability in vim (CVE-2023-48237)
vulnerability in vim (CVE-2023-48237). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-48234 |
|
Vulnerability in vim (CVE-2023-48234)
vulnerability in vim (CVE-2023-48234). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-48235 |
|
Vulnerability in vim (CVE-2023-48235)
vulnerability in vim (CVE-2023-48235). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-48236 |
|
Vulnerability in vim (CVE-2023-48236)
vulnerability in vim (CVE-2023-48236). Risk of unauthorized operations or information disclosure.
|