Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-47473 |
|
Vulnerability in dos (CVE-2026-47473)
vulnerability in dos (CVE-2026-47473). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47475 |
|
Vulnerability in dos (CVE-2026-47475)
vulnerability in dos (CVE-2026-47475). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24271 |
|
Vulnerability in dos (CVE-2026-24271)
vulnerability in dos (CVE-2026-24271). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24227 |
|
Unsafe Deserialization in deserialization (CVE-2026-24227)
vulnerability in deserialization (CVE-2026-24227). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50649 |
|
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
|
| CVE-2026-44891 |
|
Vulnerability in io.netty:netty-codec-stomp (CVE-2026-44891)
vulnerability in io.netty:netty-codec-stomp (CVE-2026-44891). Risk of unauthorized operations or information disclosure. Exploitable via ``maxLineLength``. Mitigation: upgrade to `4.1.136.Final` or later.
|
| CVE-2026-47303 |
|
Vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47303)
vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47303). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.29` or later.
|
| CVE-2026-15712 |
|
Out-of-Bounds Read in c (CVE-2026-15712)
vulnerability in c (CVE-2026-15712). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15720 |
|
Out-of-Bounds Read in dos (CVE-2026-15720)
vulnerability in dos (CVE-2026-15720). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50509 |
|
Unsafe Deserialization in deserialization (CVE-2026-50509)
vulnerability in deserialization (CVE-2026-50509). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50454 |
|
Vulnerability in path-traversal (CVE-2026-50454)
vulnerability in path-traversal (CVE-2026-50454). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50426 |
|
Vulnerability in path-traversal (CVE-2026-50426)
vulnerability in path-traversal (CVE-2026-50426). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15715 |
|
Cross-Site Scripting (XSS) in CVE-2026-15715 (CVE-2026-15715)
cross-site scripting in CVE-2026-15715 (CVE-2026-15715). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15747 |
|
Vulnerability in csrf (CVE-2026-15747)
vulnerability in csrf (CVE-2026-15747). Confidential information can be exposed externally. Exploitable via ``csrf_token``.
|
| CVE-2026-47295 |
|
SQL Injection in sqli (CVE-2026-47295)
SQL injection in sqli (CVE-2026-47295). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57101 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-57101)
cross-site scripting in microsoft (CVE-2026-57101). Confidential information can be exposed externally.
|
| CVE-2026-56196 |
|
Vulnerability in path-traversal (CVE-2026-56196)
vulnerability in path-traversal (CVE-2026-56196). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55944 |
|
Unsafe Deserialization in deserialization (CVE-2026-55944)
vulnerability in deserialization (CVE-2026-55944). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55135 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55135)
cross-site scripting in microsoft (CVE-2026-55135). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55126 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55126)
cross-site scripting in microsoft (CVE-2026-55126). Confidential information can be exposed externally.
|
| CVE-2026-55051 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-55051)
SSRF in ssrf (CVE-2026-55051). Confidential information can be exposed externally.
|
| CVE-2026-55034 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55034)
cross-site scripting in microsoft (CVE-2026-55034). Confidential information can be exposed externally.
|
| CVE-2026-55030 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55030)
cross-site scripting in microsoft (CVE-2026-55030). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55016 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55016)
cross-site scripting in microsoft (CVE-2026-55016). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55019 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55019)
cross-site scripting in microsoft (CVE-2026-55019). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55020 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55020)
cross-site scripting in microsoft (CVE-2026-55020). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55021 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55021)
cross-site scripting in microsoft (CVE-2026-55021). Confidential information can be exposed externally.
|
| CVE-2026-50684 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-50684)
cross-site scripting in microsoft (CVE-2026-50684). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58647 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-58647)
cross-site scripting in microsoft (CVE-2026-58647). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58644 KEV |
|
[KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-58644)
vulnerability in Microsoft deserialization (CVE-2026-58644). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-55009 |
|
Unsafe Deserialization in deserialization (CVE-2026-55009)
vulnerability in deserialization (CVE-2026-55009). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55008 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55008)
cross-site scripting in microsoft (CVE-2026-55008). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54432 |
|
Cross-Site Scripting (XSS) in CVE-2026-54432 (CVE-2026-54432)
cross-site scripting in CVE-2026-54432 (CVE-2026-54432). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54433 |
|
Cross-Site Scripting (XSS) in roundcube (CVE-2026-54433)
cross-site scripting in roundcube (CVE-2026-54433). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54117 |
|
Unsafe Deserialization in deserialization (CVE-2026-54117)
vulnerability in deserialization (CVE-2026-54117). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54118 |
|
Unsafe Deserialization in deserialization (CVE-2026-54118)
vulnerability in deserialization (CVE-2026-54118). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50522 KEV |
|
[KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-50522)
vulnerability in Microsoft deserialization (CVE-2026-50522). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-50652 |
|
Unsafe Deserialization in deserialization (CVE-2026-50652)
vulnerability in deserialization (CVE-2026-50652). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50663 |
|
Vulnerability in path-traversal (CVE-2026-50663)
vulnerability in path-traversal (CVE-2026-50663). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45496 |
|
Path Traversal in path-traversal (CVE-2026-45496)
path traversal in path-traversal (CVE-2026-45496). Confidential information can be exposed externally.
|
| CVE-2026-47296 |
|
SQL Injection in sqli (CVE-2026-47296)
SQL injection in sqli (CVE-2026-47296). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40400 |
|
Vulnerability in path-traversal (CVE-2026-40400)
vulnerability in path-traversal (CVE-2026-40400). Successful exploitation can lead to full system takeover.
|
| CVE-2026-36214 |
|
Cross-Site Scripting (XSS) in CVE-2026-36214 (CVE-2026-36214)
cross-site scripting in CVE-2026-36214 (CVE-2026-36214). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15700 |
|
Path Traversal in path-traversal (CVE-2026-15700)
path traversal in path-traversal (CVE-2026-15700). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15703 |
|
Vulnerability in sqli (CVE-2026-15703)
vulnerability in sqli (CVE-2026-15703). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15428 |
|
OS Command Injection in tp-link (CVE-2026-15428)
OS command injection in tp-link (CVE-2026-15428). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14646 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-14646)
SSRF in ssrf (CVE-2026-14646). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15429 |
|
Vulnerability in privilege-escalation (CVE-2026-15429)
vulnerability in privilege-escalation (CVE-2026-15429). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9108 |
|
Path Traversal in path-traversal (CVE-2026-9108)
path traversal in path-traversal (CVE-2026-9108). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9292 |
|
Cross-Site Scripting (XSS) in CVE-2026-9292 (CVE-2026-9292)
cross-site scripting in CVE-2026-9292 (CVE-2026-9292). Risk of unauthorized operations or information disclosure.
|