Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-14479 |
|
Vulnerability in CVE-2026-14479 (CVE-2026-14479)
vulnerability in CVE-2026-14479 (CVE-2026-14479). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18485 |
|
Vulnerability in privilege-escalation (CVE-2026-18485)
vulnerability in privilege-escalation (CVE-2026-18485). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53530 |
|
Vulnerability in ratex-parser (CVE-2026-53530)
vulnerability in ratex-parser (CVE-2026-53530). Risk of unauthorized operations or information disclosure. Exploitable via ``parse_symbol_inner``. Mitigation: upgrade to `0.1.11` or later.
|
| CVE-2026-12681 |
|
Vulnerability in github.com/google/go-attestation (CVE-2026-12681)
vulnerability in github.com/google/go-attestation (CVE-2026-12681). Risk of unauthorized operations or information disclosure. Exploitable via ``SignatureHeaderSize``. Mitigation: upgrade to `0.6.1` or later.
|
| CVE-2026-8036 |
|
Vulnerability in privilege-escalation (CVE-2026-8036)
vulnerability in privilege-escalation (CVE-2026-8036). Confidential information can be exposed externally.
|
| CVE-2026-45352 |
|
Vulnerability in c (CVE-2026-45352)
vulnerability in c (CVE-2026-45352). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.43.4` or later.
|
| CVE-2026-9100 |
|
Vulnerability in c (CVE-2026-9100)
vulnerability in c (CVE-2026-9100). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44004 |
|
Vulnerability in vm2 (CVE-2026-44004)
vulnerability in vm2 (CVE-2026-44004). Risk of unauthorized operations or information disclosure. Exploitable via ``Buffer.alloc``. Mitigation: upgrade to `3.11.0` or later.
|
| CVE-2026-43868 |
|
Vulnerability in thrift (CVE-2026-43868)
vulnerability in thrift (CVE-2026-43868). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.23.0` or later.
|
| CVE-2026-40886 |
|
Vulnerability in github.com/argoproj/argo-workflows/v4 (CVE-2026-40886)
vulnerability in github.com/argoproj/argo-workflows/v4 (CVE-2026-40886). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.0.5` or later.
|
| CVE-2026-33557 |
|
Vulnerability in kafka (CVE-2026-33557)
vulnerability in kafka (CVE-2026-33557). Confidential information can be exposed externally. Exploitable via ``sasl.oauthbearer.jwt.validator.class``. Mitigation: upgrade to `4.1.2` or later.
|
| CVE-2026-32286 |
|
Vulnerability in github.com/jackc/pgproto3/v2 (CVE-2026-32286)
vulnerability in github.com/jackc/pgproto3/v2 (CVE-2026-32286). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32285 |
|
Vulnerability in github.com/buger/jsonparser (CVE-2026-32285)
vulnerability in github.com/buger/jsonparser (CVE-2026-32285). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.2` or later.
|
| CVE-2025-2399 |
|
Vulnerability in CVE-2025-2399 (CVE-2025-2399)
vulnerability in CVE-2025-2399 (CVE-2025-2399). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2006 |
|
Vulnerability in postgresql (CVE-2026-2006)
vulnerability in postgresql (CVE-2026-2006). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `14.21.0, 15.16.0, 16.12.0, 17.8.0, 18.2.0` or later.
|
| CVE-2025-67268 |
|
Vulnerability in c (CVE-2025-67268)
vulnerability in c (CVE-2025-67268). Successful exploitation can lead to full system takeover.
|
| CVE-2025-8291 |
|
Vulnerability in CVE-2025-8291 (CVE-2025-8291)
vulnerability in CVE-2025-8291 (CVE-2025-8291). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-24521 KEV |
|
[KEV] Out-of-Bounds Write in Microsoft windows (CVE-2022-24521)
out-of-bounds write in Microsoft windows (CVE-2022-24521). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-1647 KEV |
|
[KEV] Vulnerability in Microsoft defender (CVE-2021-1647)
vulnerability in Microsoft defender (CVE-2021-1647). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|