Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2026-47473 Vulnerability in dos (CVE-2026-47473)
vulnerability in dos (CVE-2026-47473). Successful exploitation can lead to full system takeover.
CVE-2026-47475 Vulnerability in dos (CVE-2026-47475)
vulnerability in dos (CVE-2026-47475). Risk of unauthorized operations or information disclosure.
CVE-2026-24271 Vulnerability in dos (CVE-2026-24271)
vulnerability in dos (CVE-2026-24271). Risk of unauthorized operations or information disclosure.
CVE-2026-24227 Unsafe Deserialization in deserialization (CVE-2026-24227)
vulnerability in deserialization (CVE-2026-24227). Risk of unauthorized operations or information disclosure.
CVE-2026-50649 Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
CVE-2026-44891 Vulnerability in io.netty:netty-codec-stomp (CVE-2026-44891)
vulnerability in io.netty:netty-codec-stomp (CVE-2026-44891). Risk of unauthorized operations or information disclosure. Exploitable via ``maxLineLength``. Mitigation: upgrade to `4.1.136.Final` or later.
CVE-2026-47303 Vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47303)
vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47303). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.29` or later.
CVE-2026-15712 Out-of-Bounds Read in c (CVE-2026-15712)
vulnerability in c (CVE-2026-15712). Risk of unauthorized operations or information disclosure.
CVE-2026-15720 Out-of-Bounds Read in dos (CVE-2026-15720)
vulnerability in dos (CVE-2026-15720). Risk of unauthorized operations or information disclosure.
CVE-2026-50509 Unsafe Deserialization in deserialization (CVE-2026-50509)
vulnerability in deserialization (CVE-2026-50509). Successful exploitation can lead to full system takeover.
CVE-2026-50454 Vulnerability in path-traversal (CVE-2026-50454)
vulnerability in path-traversal (CVE-2026-50454). Successful exploitation can lead to full system takeover.
CVE-2026-50426 Vulnerability in path-traversal (CVE-2026-50426)
vulnerability in path-traversal (CVE-2026-50426). Successful exploitation can lead to full system takeover.
CVE-2026-15715 Cross-Site Scripting (XSS) in CVE-2026-15715 (CVE-2026-15715)
cross-site scripting in CVE-2026-15715 (CVE-2026-15715). Risk of unauthorized operations or information disclosure.
CVE-2026-15747 Vulnerability in csrf (CVE-2026-15747)
vulnerability in csrf (CVE-2026-15747). Confidential information can be exposed externally. Exploitable via ``csrf_token``.
CVE-2026-47295 SQL Injection in sqli (CVE-2026-47295)
SQL injection in sqli (CVE-2026-47295). Successful exploitation can lead to full system takeover.
CVE-2026-57101 Cross-Site Scripting (XSS) in microsoft (CVE-2026-57101)
cross-site scripting in microsoft (CVE-2026-57101). Confidential information can be exposed externally.
CVE-2026-56196 Vulnerability in path-traversal (CVE-2026-56196)
vulnerability in path-traversal (CVE-2026-56196). Successful exploitation can lead to full system takeover.
CVE-2026-55944 Unsafe Deserialization in deserialization (CVE-2026-55944)
vulnerability in deserialization (CVE-2026-55944). Successful exploitation can lead to full system takeover.
CVE-2026-55135 Cross-Site Scripting (XSS) in microsoft (CVE-2026-55135)
cross-site scripting in microsoft (CVE-2026-55135). Risk of unauthorized operations or information disclosure.
CVE-2026-55126 Cross-Site Scripting (XSS) in microsoft (CVE-2026-55126)
cross-site scripting in microsoft (CVE-2026-55126). Confidential information can be exposed externally.
CVE-2026-55051 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-55051)
SSRF in ssrf (CVE-2026-55051). Confidential information can be exposed externally.
CVE-2026-55034 Cross-Site Scripting (XSS) in microsoft (CVE-2026-55034)
cross-site scripting in microsoft (CVE-2026-55034). Confidential information can be exposed externally.
CVE-2026-55030 Cross-Site Scripting (XSS) in microsoft (CVE-2026-55030)
cross-site scripting in microsoft (CVE-2026-55030). Risk of unauthorized operations or information disclosure.
CVE-2026-55016 Cross-Site Scripting (XSS) in microsoft (CVE-2026-55016)
cross-site scripting in microsoft (CVE-2026-55016). Risk of unauthorized operations or information disclosure.
CVE-2026-55019 Cross-Site Scripting (XSS) in microsoft (CVE-2026-55019)
cross-site scripting in microsoft (CVE-2026-55019). Risk of unauthorized operations or information disclosure.
CVE-2026-55020 Cross-Site Scripting (XSS) in microsoft (CVE-2026-55020)
cross-site scripting in microsoft (CVE-2026-55020). Risk of unauthorized operations or information disclosure.
CVE-2026-55021 Cross-Site Scripting (XSS) in microsoft (CVE-2026-55021)
cross-site scripting in microsoft (CVE-2026-55021). Confidential information can be exposed externally.
CVE-2026-50684 Cross-Site Scripting (XSS) in microsoft (CVE-2026-50684)
cross-site scripting in microsoft (CVE-2026-50684). Risk of unauthorized operations or information disclosure.
CVE-2026-58647 Cross-Site Scripting (XSS) in microsoft (CVE-2026-58647)
cross-site scripting in microsoft (CVE-2026-58647). Successful exploitation can lead to full system takeover.
CVE-2026-58644 KEV [KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-58644)
vulnerability in Microsoft deserialization (CVE-2026-58644). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-55009 Unsafe Deserialization in deserialization (CVE-2026-55009)
vulnerability in deserialization (CVE-2026-55009). Successful exploitation can lead to full system takeover.
CVE-2026-55008 Cross-Site Scripting (XSS) in microsoft (CVE-2026-55008)
cross-site scripting in microsoft (CVE-2026-55008). Successful exploitation can lead to full system takeover.
CVE-2026-54432 Cross-Site Scripting (XSS) in CVE-2026-54432 (CVE-2026-54432)
cross-site scripting in CVE-2026-54432 (CVE-2026-54432). Risk of unauthorized operations or information disclosure.
CVE-2026-54433 Cross-Site Scripting (XSS) in roundcube (CVE-2026-54433)
cross-site scripting in roundcube (CVE-2026-54433). Risk of unauthorized operations or information disclosure.
CVE-2026-54117 Unsafe Deserialization in deserialization (CVE-2026-54117)
vulnerability in deserialization (CVE-2026-54117). Successful exploitation can lead to full system takeover.
CVE-2026-54118 Unsafe Deserialization in deserialization (CVE-2026-54118)
vulnerability in deserialization (CVE-2026-54118). Successful exploitation can lead to full system takeover.
CVE-2026-50522 KEV [KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-50522)
vulnerability in Microsoft deserialization (CVE-2026-50522). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-50652 Unsafe Deserialization in deserialization (CVE-2026-50652)
vulnerability in deserialization (CVE-2026-50652). Risk of unauthorized operations or information disclosure.
CVE-2026-50663 Vulnerability in path-traversal (CVE-2026-50663)
vulnerability in path-traversal (CVE-2026-50663). Successful exploitation can lead to full system takeover.
CVE-2026-45496 Path Traversal in path-traversal (CVE-2026-45496)
path traversal in path-traversal (CVE-2026-45496). Confidential information can be exposed externally.
CVE-2026-47296 SQL Injection in sqli (CVE-2026-47296)
SQL injection in sqli (CVE-2026-47296). Successful exploitation can lead to full system takeover.
CVE-2026-40400 Vulnerability in path-traversal (CVE-2026-40400)
vulnerability in path-traversal (CVE-2026-40400). Successful exploitation can lead to full system takeover.
CVE-2026-36214 Cross-Site Scripting (XSS) in CVE-2026-36214 (CVE-2026-36214)
cross-site scripting in CVE-2026-36214 (CVE-2026-36214). Risk of unauthorized operations or information disclosure.
CVE-2026-15700 Path Traversal in path-traversal (CVE-2026-15700)
path traversal in path-traversal (CVE-2026-15700). Risk of unauthorized operations or information disclosure.
CVE-2026-15703 Vulnerability in sqli (CVE-2026-15703)
vulnerability in sqli (CVE-2026-15703). Risk of unauthorized operations or information disclosure.
CVE-2026-15428 OS Command Injection in tp-link (CVE-2026-15428)
OS command injection in tp-link (CVE-2026-15428). Successful exploitation can lead to full system takeover.
CVE-2026-14646 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-14646)
SSRF in ssrf (CVE-2026-14646). Risk of unauthorized operations or information disclosure.
CVE-2026-15429 Vulnerability in privilege-escalation (CVE-2026-15429)
vulnerability in privilege-escalation (CVE-2026-15429). Successful exploitation can lead to full system takeover.
CVE-2026-9108 Path Traversal in path-traversal (CVE-2026-9108)
path traversal in path-traversal (CVE-2026-9108). Successful exploitation can lead to full system takeover.
CVE-2026-9292 Cross-Site Scripting (XSS) in CVE-2026-9292 (CVE-2026-9292)
cross-site scripting in CVE-2026-9292 (CVE-2026-9292). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →