Recent Vulnerabilities

Sources: amazon_linux archlinux azure_linux bitnami_vulndb capec capec_enrichment_dashboard certeu certfr circl_kev cisa_known_exploited cna_scorecard cnvd csaf_abb csaf_adstecindustrialitgmbh csaf_amd csaf_aumariestergmbhcokg csaf_baadem2mproductsgmbh csaf_beckhoffautomationgmbhcokg csaf_bendergmbhcokg csaf_bosch csaf_bsi csaf_bsi_aggregator csaf_bsi_cvd_white csaf_bsi_white csaf_bsi_wid_white csaf_carlogavazziautomation csaf_certbund csaf_certvde csaf_cisa csaf_cisa_it csaf_cisa_ot csaf_cisco csaf_claaskgaa csaf_codesysgmbh csaf_dell csaf_duraggmbh csaf_endresshauserag csaf_ericsson csaf_euchnergmbhcokg csaf_festosecokg csaf_frauschersensortechnikgmbh csaf_hancom csaf_harmaninternational csaf_helmholzgmbhcokg csaf_himapaulhildebrandtgmbh csaf_hitachi csaf_hpe csaf_huawei csaf_hydacinternationalgmbh csaf_ibm csaf_ifmelectronicgmbh csaf_janitzaelectronicsgmbh csaf_jumogmbhcokg csaf_juniper csaf_kebautomationkg csaf_kukaag csaf_lenovo csaf_lenzese csaf_mbconnectlinegmbh csaf_mettlertoledogmbh csaf_metzconnectgmbh csaf_microsoft csaf_mieleciekg csaf_moxa csaf_murrelektronikgmbh csaf_ncscnl csaf_ndaal csaf_netapp csaf_nozomi csaf_nozominetworks csaf_nvidia csaf_opcfoundation csaf_openeuler csaf_opensuse csaf_oracle csaf_ox csaf_paloalto csaf_panasonic csaf_pentagrid csaf_pepperlfuchsse csaf_phoenix csaf_pilzgmbhcokg csaf_qnap csaf_redhat csaf_samsung csaf_sauterag csaf_schneider csaf_sick csaf_siemens csaf_smasolartechnologyag csaf_suse csaf_swarcotrafficsystemsgmbh csaf_synology csaf_tibco csaf_trend csaf_trumpfsecokg csaf_trustsource csaf_tuxcare csaf_ubiquiti csaf_vartastoragegmbh csaf_vegagrieshaberkg csaf_vmware csaf_wagogmbhcokg csaf_weidmuellerinterfacegmbhcokg csaf_welotecgmbh csaf_wiesemanntheisgmbh csaf_yaskawaeuropegmbh csaf_yokogawa csaf_zyxel cve_forecast cve_icu cve_vs_github_dashboard cvelistv5 cwe_dashboard cwe_enrichment cwec debian_rustsec debian_security_tracker drupal emb3d emb3d_dashboard epss_dashboard epss_history epss_kev_enrichment euvd_kev fedora fkie_nvd freebsd gcve gcve_enriched gcve_enrichment gcve_enrichment_dashboard gentoo github gsd jvn kev_ransomware mitre_attack moksha ndaal_kev netbsd nuclei_dashboard nuclei_enrichment nvd nvd_cpe_dictionary openbsd opencve oracle_linux ossf_malicious_packages osv_almalinux osv_alpine osv_android osv_bellsoft osv_chainguard osv_cran osv_github_actions osv_golang osv_haskell osv_hex osv_linux osv_maven osv_npm osv_nuget osv_ocaml osv_ossfuzz osv_packagist osv_pub osv_rocky osv_rubygems osv_rustsec osv_swift osv_ubuntu osv_wolfi publish_stats pysec sadp_pilot ssvc ssvc_dashboard tailscale tsunami_enrichment variot vulncheck_kev vulnrichment Clear
ID Title Severity CVSS Source Updated
ghsa-c6q7-wqw2-h65w NationalSecurityAgency/emissary has an incomplete fix for CVE-2026-35571 UNKNOWN 4.8 ghsa unknown
ghsa-3p24-9x7v-7789 Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix UNKNOWN 8.8 ghsa unknown
ghsa-cpm7-cfpx-3hvp Emissary has Stored XSS via Navigation Template Link Injection UNKNOWN 4.8 ghsa unknown
ghsa-6c37-7w4p-jg9v Emissary has a Command Injection via PLACE_NAME Configuration in Executrix UNKNOWN 7.2 ghsa unknown
ghsa-8v4x-mgvp-p658 Undertow is Vulnerable to HTTP Request/Response Smuggling UNKNOWN 8.7 ghsa unknown
ghsa-3gv6-g396-9v4r Undertow is Vulnerable to HTTP Request/Response Smuggling UNKNOWN 8.7 ghsa unknown
ghsa-vqqj-9cmv-hx43 Undertow is Vulnerable to HTTP Request/Response Smuggling UNKNOWN 8.7 ghsa unknown
ghsa-748j-wm96-4wh5 Apicurio Registry is vulnerable to denial of service through XML entity expansion UNKNOWN 6.5 ghsa unknown
ghsa-rcmh-vfq7-8gf4 Apicurio Registry allows upload of WSDL raising HTTP request UNKNOWN 7.4 ghsa unknown
ghsa-7g64-f2hm-vjxp Apicurio Registry utilities allow SSRF and denial of service through XML parsing UNKNOWN 8.5 ghsa unknown
ghsa-h792-v28v-ppgr Apache Tomcat's rewrite valve has an Always-Incorrect Control Flow Implementation vulnerability UNKNOWN 7.3 ghsa unknown
ghsa-pg42-rg8c-j886 Apache Tomcat has a Cross-site Scripting vulnerability UNKNOWN 6.1 ghsa unknown
ghsa-mqg3-r7h5-24x4 Apache Tomcat has an Always-Incorrect Control Flow Implementation vulnerability UNKNOWN 9.1 ghsa unknown
ghsa-c5ph-rghf-fjfj Apache Tomcat has an Improper Authentication vulnerability UNKNOWN 6.5 ghsa unknown
ghsa-5v3h-fjv2-54fg Apache Tomcat has an Improper Authorization vulnerability UNKNOWN 6.5 ghsa unknown
ghsa-7895-gffq-w6jq Apache Tomcat has a Missing Critical Step in Authentication vulnerability UNKNOWN 7.3 ghsa unknown
ghsa-9qj4-v6r6-3wmx Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have a Denial of Service via Out of Memory vulnerability UNKNOWN 7.5 ghsa unknown
ghsa-7259-vf48-52q3 Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All has a Memory Allocation with Excessive Size Value vulnerability UNKNOWN 7.5 ghsa unknown
ghsa-f892-4h9f-j7g9 Apache ActiveMQ Improper Authorization vulnerability UNKNOWN 8.1 ghsa unknown
ghsa-f77w-px59-cqf5 Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker have Memory Allocation with Excessive Size Value vulnerability UNKNOWN 7.5 ghsa unknown
ghsa-h5gm-rvw6-2xpx Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Improper Input Validation vulnerability UNKNOWN 7.5 ghsa unknown
ghsa-v3vg-332r-mw99 Camel-PQC Vulnerable to Deserialization of Untrusted Data UNKNOWN 7.8 ghsa unknown
ghsa-mgp5-rv84-w37q Apache Tomcat has an Improper Input Validation vulnerability UNKNOWN 7.5 ghsa unknown
ghsa-c3fc-8qff-9hwx Bouncy Castle has an LDAP injection UNKNOWN 5.5 ghsa unknown
ghsa-p93r-85wp-75v3 Bouncy Castle Has Covert Timing Channel Vulnerability UNKNOWN 8.9 ghsa unknown
ghsa-659w-93r5-9j6m Apache OpenNLP AbstractModelReader has an OOM Denial of Service via Unbounded Array Allocation UNKNOWN 7.5 ghsa unknown
ghsa-xrvj-h9w2-3q69 Apache IoTDB has a Path Traversal vulnerability UNKNOWN 9.1 ghsa unknown
ghsa-h548-jhj8-q85h Apache IoTDB has a Path Traversal vulnerability UNKNOWN 9.1 ghsa unknown
ghsa-262p-fj3f-xh7v Apache Kerby has a bypass the Kerberos pre-authentication check UNKNOWN 7.3 ghsa unknown
ghsa-x6vc-x4v4-hjhr Apache Kerby vulnerable to denial of service UNKNOWN 6.5 ghsa unknown