Open Source vulnerabilities

Products

• Openclinic Ga 21
• Nagios Core 7
• Joomla 4
• Grub 3
• Opentofu 3
• Gzip 2
• Keepass 2
• Nmap 2
• Pgadmin 2

Newest

• gnu emacs emacs, open source gnu emacs, red hat enterprise linux 10 +4 more +6 more Emacs: emacs: arbitrary code execution in flymake mode CVE-2026-96442 Fix available 7.8 HighSeptember 23, 2026
• keepass KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size CVE-2026-86776 4.6 MediumSeptember 9, 2026
• nagios enterprises xi, nagios enterprises, llc. core, open source nagios core +2 more Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie CVE-2026-48549 Fix available 6.9 MediumAugust 26, 2026
• nagios enterprises, llc. core, open source nagios core +1 more Nagios Core CSRF via cmd.cgi CVE-2026-48548 Fix available 6.9 MediumAugust 26, 2026
• nagios enterprises xi, nagios enterprises, llc. core, open source nagios core +2 more Nagios Core / XI Authenticated RCE via Unfiltered NOTIFICATION-Family Macro Substitution CVE-2026-48554 Fix available 7.7 HighAugust 12, 2026
• nagios enterprises xi, nagios enterprises, llc. core, open source nagios core +2 more Nagios Core / XI Authenticated RCE via Custom-Variable Macro Injection CVE-2026-48553 Fix available 7.7 HighAugust 12, 2026
• nagios enterprises xi, nagios enterprises, llc. core, open source nagios core +2 more Nagios Core / XI DOM-based XSS via jsonquery.js CVE-2026-48552 Fix available 5.1 MediumAugust 12, 2026
• nagios enterprises xi, nagios enterprises, llc. core, open source nagios core +2 more Nagios Core / XI CSRF Protection Bypass via Double-Submit Cookie CVE-2026-48551 Fix available 6.1 MediumAugust 12, 2026
• nagios enterprises xi, nagios enterprises, llc. core, open source nagios core +2 more Nagios Core / XI cmd.cgi Reflected XSS via NagFormId Parameter CVE-2026-48550 Fix available 5.1 MediumAugust 12, 2026
• nmap project nmap Nmap 7.99 Denial of Service via Zero-Length TCP Option Packet CVE-2026-72712 Fix available 6.9 MediumAugust 11, 2026
• gnu gzip Global Buffer Overflow in GNU gzip CVE-2026-41992 Fix available 6.9 MediumJune 29, 2026
• gnu gzip Predictable Temporary File in GNU gzip CVE-2026-41991 Fix available 2.0 LowJune 29, 2026
• nmap Nmap - Integer Underflow in IPv6 Extension Header Parsing CVE-2026-58058 Public exploitFix available 6.9 MediumJune 28, 2026
• open source tortoisegit Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') in TortoiseGit CVE-2026-11968 5.5 MediumJune 24, 2026
• open source opentofu OpenTofu before 1.11.7 Symlink Following Path Traversal CVE-2026-74796 Fix available 7.0 HighJune 23, 2026
• frankverbeke openclinic ga OpenClinic GA 5.351.19 Reflected XSS via DICOM Image Upload Handler CVE-2026-25860 Public exploit 5.3 MediumJune 9, 2026
• bzip2 Off-by-One Leading to Out-of-Bounds Write in bzip2 CVE-2026-42250 Fix available 4.8 MediumMay 28, 2026
• open source opentofu OpenTofu before 1.11.4 Denial of Service via malicious zip CVE-2026-74797 Fix available 2.3 LowJanuary 21, 2026
• open source opentofu OpenTofu before 1.8.3 Secret Variable Leaking via Static Evaluation CVE-2024-58375 Fix available 8.7 HighOctober 3, 2024
• open source pgadmin, pgadmin 4 +1 more pgAdmin 4 vulnerable to directory traversal CVE-2023-0241 Fix available 6.5 MediumMarch 27, 2023
• open source pgadmin, pgadmin 4 +1 more pgAdmin 4 Path Traversal vulnerability CVE-2022-0959 Fix available 6.5 MediumMarch 16, 2022
• keepass, fedoraproject extra packages for enterprise linux, fedora +2 more A flaw was found in KeePass. The vulnerability occurs due to logging the plain text passwords in... CVE-2022-0725 Public exploit 7.5 HighMarch 7, 2022
• open source joomla, joomla joomla\! +1 more Joomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow... CVE-2010-1435 9.8 CriticalJune 21, 2021
• open source joomla, joomla joomla\! +1 more Joomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to... CVE-2010-1434 7.5 HighJune 21, 2021
• open source joomla, joomla joomla\! +1 more Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the... CVE-2010-1433 9.8 CriticalJune 21, 2021
• open source joomla, joomla joomla\! +1 more Joomla! Core is prone to an information disclosure vulnerability. Attackers can exploit this... CVE-2010-1432 7.5 HighJune 21, 2021
• open source openclinic ga, openclinic ga project ga +1 more An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5... CVE-2020-27246 6.4 MediumMay 11, 2021
• open source openclinic ga, openclinic ga project ga +1 more An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5... CVE-2020-27245 6.4 MediumMay 11, 2021
• open source openclinic ga, openclinic ga project ga +1 more An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5... CVE-2020-27244 6.4 MediumMay 11, 2021
• open source openclinic ga, openclinic ga project ga +1 more An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5... CVE-2020-27243 6.4 MediumMay 11, 2021
• open source openclinic ga, openclinic ga project ga +1 more An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5... CVE-2020-27242 6.4 MediumMay 11, 2021
• open source openclinic ga, openclinic ga project ga +1 more An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic... CVE-2020-27232 6.4 MediumMay 10, 2021
• open source openclinic ga, openclinic ga project ga +1 more A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of... CVE-2020-27231 6.4 MediumMay 10, 2021
• open source openclinic ga, openclinic ga project ga +1 more A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of... CVE-2020-27230 6.4 MediumMay 10, 2021
• open source openclinic ga, openclinic ga project ga +1 more A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of... CVE-2020-27229 6.4 MediumMay 10, 2021
• freemedsoftware openclinic ga OpenClinic GA CVE-2020-14487 9.4 CriticalJuly 29, 2020
• open source openclinic ga, openclinic ga project ga +1 more OpenClinic GA CVE-2020-14486 6.3 MediumJuly 29, 2020
• freemedsoftware openclinic ga OpenClinic GA CVE-2020-14488 8.8 HighJuly 29, 2020
• open source openclinic ga, openclinic ga project ga +1 more OpenClinic GA CVE-2020-14492 5.4 MediumJuly 29, 2020
• open source openclinic ga, openclinic ga project ga +1 more OpenClinic GA CVE-2020-14493 8.8 HighJuly 29, 2020
• open source openclinic ga, openclinic ga project ga +1 more OpenClinic GA CVE-2020-14490 8.8 HighJuly 29, 2020
• open source openclinic ga, openclinic ga project ga +1 more OpenClinic GA CVE-2020-14489 6.2 MediumJuly 29, 2020
• gnu grub2, open source grub, opensuse leap +2 more There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems... CVE-2020-14309 Fix available 6.7 MediumJuly 29, 2020
• gnu grub2, open source grub, opensuse leap +2 more In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic... CVE-2020-14308 Fix available 6.4 MediumJuly 29, 2020
• gnu grub2, open source grub, debian linux +2 more +4 more A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack... CVE-2020-10713 Public exploitFix available 8.2 HighJuly 29, 2020
• open source openclinic ga, openclinic ga project ga +1 more OpenClinic GA versions 5.09.02 and 5.89.05b do not properly check permissions before executing... CVE-2020-14491 6.5 MediumJuly 20, 2020
• open source openclinic ga, openclinic ga project ga +1 more OpenClinic GA versions 5.09.02 and 5.89.05b contain an authentication mechanism within the system... CVE-2020-14494 9.8 CriticalJuly 20, 2020
• open source openclinic ga, openclinic ga project ga +1 more OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass the system’s account... CVE-2020-14484 9.8 CriticalJuly 20, 2020
• open source openclinic ga, openclinic ga project ga +1 more OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access... CVE-2020-14485 9.8 CriticalJuly 20, 2020
• open source alpine linux, f5 big-ip controller, gliderlabs docker-alpine +1 more +3 more Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the ... CVE-2019-5021 Fix available 9.8 CriticalMay 8, 2019