Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-44966 |
|
Vulnerability in velocityjs (CVE-2026-44966)
vulnerability in velocityjs (CVE-2026-44966). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42343 |
|
Vulnerability in dos (CVE-2026-42343)
vulnerability in dos (CVE-2026-42343). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44328 |
|
Vulnerability in github.com/free5gc/smf (CVE-2026-44328)
vulnerability in github.com/free5gc/smf (CVE-2026-44328). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /upi/v1/upNodesLinks/{upNodeRef}`. Mitigation: upgrade to `1.4.3` or later.
|
| CVE-2026-42209 |
|
Vulnerability in dos (CVE-2026-42209)
vulnerability in dos (CVE-2026-42209). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42212 |
|
Vulnerability in csharp (CVE-2026-42212)
vulnerability in csharp (CVE-2026-42212). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-29203 |
|
Vulnerability in privilege-escalation (CVE-2026-29203)
vulnerability in privilege-escalation (CVE-2026-29203). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42793 |
|
Vulnerability in absinthe (CVE-2026-42793)
vulnerability in absinthe (CVE-2026-42793). Risk of unauthorized operations or information disclosure. Exploitable via ``node.name``. Mitigation: upgrade to `1.10.2` or later.
|
| CVE-2026-43967 |
|
Vulnerability in absinthe (CVE-2026-43967)
vulnerability in absinthe (CVE-2026-43967). Risk of unauthorized operations or information disclosure. Exploitable via ``input.fragments``. Mitigation: upgrade to `1.10.2` or later.
|
| CVE-2026-41690 |
|
Vulnerability in i18next-http-middleware (CVE-2026-41690)
vulnerability in i18next-http-middleware (CVE-2026-41690). Data can be tampered with by attackers. Exploitable via `GET /locales/resources.json`. Mitigation: upgrade to `3.9.3` or later.
|
| CVE-2026-29975 |
|
Vulnerability in c (CVE-2026-29975)
vulnerability in c (CVE-2026-29975). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43424 |
|
Vulnerability in dos (CVE-2026-43424)
vulnerability in dos (CVE-2026-43424). Risk of unauthorized operations or information disclosure. Exploitable via ``tv_nexus``.
|
| CVE-2026-38361 |
|
Vulnerability in dash-uploader (CVE-2026-38361)
vulnerability in dash-uploader (CVE-2026-38361). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.7.0a1` or later.
|
| CVE-2026-25077 |
|
Code Injection in apache (CVE-2026-25077)
code injection in apache (CVE-2026-25077). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69233 |
|
Vulnerability in apache (CVE-2025-69233)
vulnerability in apache (CVE-2025-69233). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13836 |
|
Vulnerability in python (CVE-2025-13836)
vulnerability in python (CVE-2025-13836). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.10.20, 3.11.15, 3.12.13, 3.13.11, 3.14.1` or later.
|
| CVE-2024-27686 |
|
Vulnerability in dos (CVE-2024-27686)
vulnerability in dos (CVE-2024-27686). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-26523 |
|
Vulnerability in dos (CVE-2022-26523)
vulnerability in dos (CVE-2022-26523). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-26522 |
|
Vulnerability in dos (CVE-2022-26522)
vulnerability in dos (CVE-2022-26522). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8123 |
|
Vulnerability in c (CVE-2026-8123)
vulnerability in c (CVE-2026-8123). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8122 |
|
Vulnerability in c (CVE-2026-8122)
vulnerability in c (CVE-2026-8122). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8120 |
|
Vulnerability in c (CVE-2026-8120)
vulnerability in c (CVE-2026-8120). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8121 |
|
Vulnerability in c (CVE-2026-8121)
vulnerability in c (CVE-2026-8121). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8119 |
|
Vulnerability in c (CVE-2026-8119)
vulnerability in c (CVE-2026-8119). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7541 |
|
Vulnerability in dos (CVE-2026-7541)
vulnerability in dos (CVE-2026-7541). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40214 |
|
Vulnerability in openstack-cyborg (CVE-2026-40214)
vulnerability in openstack-cyborg (CVE-2026-40214). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.0.1` or later.
|
| CVE-2026-42499 |
|
Vulnerability in golang (CVE-2026-42499)
vulnerability in golang (CVE-2026-42499). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.10, 1.26.3` or later.
|
| CVE-2025-63703 |
|
Vulnerability in npm (CVE-2025-63703)
vulnerability in npm (CVE-2025-63703). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32686 |
|
Vulnerability in decimal (CVE-2026-32686)
vulnerability in decimal (CVE-2026-32686). Risk of unauthorized operations or information disclosure. Exploitable via ``decimal``. Mitigation: upgrade to `3.0.0` or later.
|
| CVE-2026-44407 |
|
Vulnerability in dos (CVE-2026-44407)
vulnerability in dos (CVE-2026-44407). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-30923 |
|
Out-of-Bounds Read in modsecurity2 (CVE-2026-30923)
vulnerability in modsecurity2 (CVE-2026-30923). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.15` or later.
|
| SUSE-SU-2026:1745-1 |
|
Vulnerability in dos (SUSE-SU-2026:1745-1)
vulnerability in dos (SUSE-SU-2026:1745-1). Risk of unauthorized operations or information disclosure. Exploitable via ``header_rules``.
|
| SUSE-SU-2026:1744-1 |
|
Vulnerability in dos (SUSE-SU-2026:1744-1)
vulnerability in dos (SUSE-SU-2026:1744-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:1743-1 |
|
Vulnerability in dos (SUSE-SU-2026:1743-1)
vulnerability in dos (SUSE-SU-2026:1743-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:1742-1 |
|
Vulnerability in dos (SUSE-SU-2026:1742-1)
vulnerability in dos (SUSE-SU-2026:1742-1). Risk of unauthorized operations or information disclosure. Exploitable via ``setContext``.
|
| SUSE-SU-2026:1740-1 |
|
Vulnerability in django (SUSE-SU-2026:1740-1)
vulnerability in django (SUSE-SU-2026:1740-1). Risk of unauthorized operations or information disclosure. Exploitable via ``ASGIRequest``.
|
| CVE-2026-42216 |
|
Out-of-Bounds Read in openexr (CVE-2026-42216)
vulnerability in openexr (CVE-2026-42216). Confidential information can be exposed externally. Exploitable via ``c13e0e1320a6652e02c5c90c6dbd984d532efe44``.
|
| SUSE-SU-2026:1732-1 |
|
Vulnerability in dos (SUSE-SU-2026:1732-1)
vulnerability in dos (SUSE-SU-2026:1732-1). Risk of unauthorized operations or information disclosure. Exploitable via ``tt_var_load_item_variation_store``.
|
| SUSE-SU-2026:1731-1 |
|
Vulnerability in dos (SUSE-SU-2026:1731-1)
vulnerability in dos (SUSE-SU-2026:1731-1). Risk of unauthorized operations or information disclosure. Exploitable via ``tt_var_load_item_variation_store``.
|
| CVE-2026-44240 |
|
Vulnerability in basic-ftp (CVE-2026-44240)
vulnerability in basic-ftp (CVE-2026-44240). Risk of unauthorized operations or information disclosure. Exploitable via ``FtpContext._partialResponse``. Mitigation: upgrade to `5.3.1` or later.
|
| CVE-2026-33079 |
|
Vulnerability in mistune (CVE-2026-33079)
vulnerability in mistune (CVE-2026-33079). Risk of unauthorized operations or information disclosure. Exploitable via ``LINK_TITLE_RE``. Mitigation: upgrade to `3.2.1` or later.
|
| CVE-2026-34282 |
|
Vulnerability in java (CVE-2026-34282)
vulnerability in java (CVE-2026-34282). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0, 8.0.491, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1` or later.
|
| CVE-2026-22021 |
|
Vulnerability in java (CVE-2026-22021)
vulnerability in java (CVE-2026-22021). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0, 8.0.491, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1` or later.
|
| CVE-2026-22003 |
|
Vulnerability in java (CVE-2026-22003)
vulnerability in java (CVE-2026-22003). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0, 8.0.491` or later.
|
| CVE-2026-21945 |
|
Vulnerability in java (CVE-2026-21945)
vulnerability in java (CVE-2026-21945). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0, 8.0.481, 11.0.30, 17.0.18, 21.0.10, 25.0.2` or later.
|
| CVE-2025-7424 |
|
Vulnerability in java (CVE-2025-7424)
vulnerability in java (CVE-2025-7424). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0, 8.0.481` or later.
|
| CVE-2025-30752 |
|
Vulnerability in java (CVE-2025-30752)
vulnerability in java (CVE-2025-30752). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `24.0.2` or later.
|
| CVE-2024-47776 |
|
Out-of-Bounds Read in java (CVE-2024-47776)
vulnerability in java (CVE-2024-47776). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.24.10` or later.
|
| CVE-2024-47775 |
|
Out-of-Bounds Read in java (CVE-2024-47775)
vulnerability in java (CVE-2024-47775). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.24.10` or later.
|
| CVE-2024-21217 |
|
Vulnerability in java (CVE-2024-21217)
vulnerability in java (CVE-2024-21217). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0, 8.0.431, 11.0.25, 17.0.13, 21.0.5, 23.0.1` or later.
|
| CVE-2024-21208 |
|
Vulnerability in java (CVE-2024-21208)
vulnerability in java (CVE-2024-21208). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0, 8.0.431, 11.0.25, 17.0.13, 21.0.5, 23.0.1` or later.
|