Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-54230 |
|
Vulnerability in abrt-project (CVE-2026-54230)
vulnerability in abrt-project (CVE-2026-54230). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54231 |
|
Vulnerability in abrt-project (CVE-2026-54231)
vulnerability in abrt-project (CVE-2026-54231). Data can be tampered with by attackers.
|
| CVE-2026-44172 |
|
SQL Injection in mariadb (CVE-2026-44172)
SQL injection in mariadb (CVE-2026-44172). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11790 |
|
Vulnerability in dos (CVE-2026-11790)
vulnerability in dos (CVE-2026-11790). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11789 |
|
Vulnerability in redhat (CVE-2026-11789)
vulnerability in redhat (CVE-2026-11789). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11788 |
|
Vulnerability in redhat (CVE-2026-11788)
vulnerability in redhat (CVE-2026-11788). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11787 |
|
Vulnerability in redhat (CVE-2026-11787)
vulnerability in redhat (CVE-2026-11787). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11786 |
|
Out-of-Bounds Read in redhat (CVE-2026-11786)
vulnerability in redhat (CVE-2026-11786). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11785 |
|
Vulnerability in redhat (CVE-2026-11785)
vulnerability in redhat (CVE-2026-11785). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11611 |
|
Vulnerability in dos (CVE-2026-11611)
vulnerability in dos (CVE-2026-11611). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50264 |
|
Out-of-Bounds Write in privilege-escalation (CVE-2026-50264)
out-of-bounds write in privilege-escalation (CVE-2026-50264). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50263 |
|
Use-After-Free in xorg (CVE-2026-50263)
vulnerability in xorg (CVE-2026-50263). Confidential information can be exposed externally.
|
| CVE-2026-50262 |
|
Out-of-Bounds Read in xorg (CVE-2026-50262)
vulnerability in xorg (CVE-2026-50262). Confidential information can be exposed externally.
|
| CVE-2026-50261 |
|
Use-After-Free in privilege-escalation (CVE-2026-50261)
vulnerability in privilege-escalation (CVE-2026-50261). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50260 |
|
Use-After-Free in privilege-escalation (CVE-2026-50260)
vulnerability in privilege-escalation (CVE-2026-50260). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50259 |
|
Vulnerability in privilege-escalation (CVE-2026-50259)
vulnerability in privilege-escalation (CVE-2026-50259). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50258 |
|
Vulnerability in privilege-escalation (CVE-2026-50258)
vulnerability in privilege-escalation (CVE-2026-50258). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50256 |
|
Vulnerability in privilege-escalation (CVE-2026-50256)
vulnerability in privilege-escalation (CVE-2026-50256). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50257 |
|
Use-After-Free in privilege-escalation (CVE-2026-50257)
vulnerability in privilege-escalation (CVE-2026-50257). Successful exploitation can lead to full system takeover.
|
| CVE-2022-0492 KEV |
|
[KEV] Authentication Bypass in Linux c (CVE-2022-0492)
authentication bypass in Linux c (CVE-2022-0492). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-4408 |
|
OS Command Injection in redhat (CVE-2026-4408)
OS command injection in redhat (CVE-2026-4408). Successful exploitation can lead to full system takeover.
|
| CVE-2026-2340 |
|
Vulnerability in redhat (CVE-2026-2340)
vulnerability in redhat (CVE-2026-2340). Data can be tampered with by attackers.
|
| CVE-2026-1933 |
|
Vulnerability in redhat (CVE-2026-1933)
vulnerability in redhat (CVE-2026-1933). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3012 |
|
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate...
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate...
|
| CVE-2026-48864 |
|
Out-of-Bounds Write in dos (CVE-2026-48864)
out-of-bounds write in dos (CVE-2026-48864). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4480 |
|
OS Command Injection in redhat (CVE-2026-4480)
OS command injection in redhat (CVE-2026-4480). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9256 |
|
Vulnerability in nginx (CVE-2026-9256)
vulnerability in nginx (CVE-2026-9256). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.24.0, 1.30.2, 1.31.1` or later.
|
| CVE-2026-46625 |
|
Vulnerability in js-cookie (CVE-2026-46625)
vulnerability in js-cookie (CVE-2026-46625). Data can be tampered with by attackers. Exploitable via ``for...in``. Mitigation: upgrade to `3.0.7` or later.
|
| CVE-2026-9149 |
|
Vulnerability in dos (CVE-2026-9149)
vulnerability in dos (CVE-2026-9149). Risk of unauthorized operations or information disclosure. Exploitable via ``repo_add_solv``.
|
| CVE-2026-9150 |
|
Vulnerability in dos (CVE-2026-9150)
vulnerability in dos (CVE-2026-9150). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9064 |
|
Vulnerability in dos (CVE-2026-9064)
vulnerability in dos (CVE-2026-9064). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42009 |
|
Vulnerability in dos (CVE-2026-42009)
vulnerability in dos (CVE-2026-42009). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42010 |
|
Vulnerability in gnu (CVE-2026-42010)
vulnerability in gnu (CVE-2026-42010). Confidential information can be exposed externally.
|
| CVE-2025-7424 |
|
Vulnerability in java (CVE-2025-7424)
vulnerability in java (CVE-2025-7424). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0, 8.0.481` or later.
|
| CVE-2026-34002 |
|
Vulnerability in dos (CVE-2026-34002)
vulnerability in dos (CVE-2026-34002). Confidential information can be exposed externally.
|
| CVE-2026-34000 |
|
Out-of-Bounds Read in dos (CVE-2026-34000)
vulnerability in dos (CVE-2026-34000). Confidential information can be exposed externally. Exploitable via ``XkbAddGeomKeyAlias``.
|
| CVE-2026-31431 KEV |
|
[KEV] Vulnerability in Linux redhat (CVE-2026-31431)
vulnerability in Linux redhat (CVE-2026-31431). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-3833 |
|
Vulnerability in gnu (CVE-2026-3833)
vulnerability in gnu (CVE-2026-3833). Risk of unauthorized operations or information disclosure. Exploitable via ``nameConstraints``.
|
| CVE-2026-3832 |
|
Vulnerability in gnu (CVE-2026-3832)
vulnerability in gnu (CVE-2026-3832). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33845 |
|
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero...
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero...
|
| CVE-2026-6732 |
|
Vulnerability in dos (CVE-2026-6732)
vulnerability in dos (CVE-2026-6732). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6846 |
|
Vulnerability in dos (CVE-2026-6846)
vulnerability in dos (CVE-2026-6846). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6845 |
|
Vulnerability in dos (CVE-2026-6845)
vulnerability in dos (CVE-2026-6845). Risk of unauthorized operations or information disclosure. Exploitable via ``readelf``.
|
| CVE-2026-6844 |
|
Vulnerability in dos (CVE-2026-6844)
vulnerability in dos (CVE-2026-6844). Risk of unauthorized operations or information disclosure. Exploitable via ``readelf``.
|
| CVE-2026-6843 |
|
Vulnerability in dos (CVE-2026-6843)
vulnerability in dos (CVE-2026-6843). Risk of unauthorized operations or information disclosure. Exploitable via ``printf``.
|
| CVE-2026-41082 |
|
Vulnerability in ocaml (CVE-2026-41082)
vulnerability in ocaml (CVE-2026-41082). Data can be tampered with by attackers.
|
| CVE-2026-6384 |
|
Vulnerability in dos (CVE-2026-6384)
vulnerability in dos (CVE-2026-6384). Successful exploitation can lead to full system takeover. Exploitable via ``ReadJeffsImage``.
|
| CVE-2026-6245 |
|
Vulnerability in c (CVE-2026-6245)
vulnerability in c (CVE-2026-6245). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34486 KEV |
|
[KEV] Vulnerability in Apache tomcat (CVE-2026-34486)
vulnerability in Apache tomcat (CVE-2026-34486). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `9.0.117, 10.1.54, 11.0.21` or later.
|
| CVE-2026-4878 |
|
Vulnerability in privilege-escalation (CVE-2026-4878)
vulnerability in privilege-escalation (CVE-2026-4878). Successful exploitation can lead to full system takeover.
|