Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-64215 |
|
Vulnerability in linux (CVE-2026-64215)
vulnerability in linux (CVE-2026-64215). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64217 |
|
Out-of-Bounds Write in linux (CVE-2026-64217)
out-of-bounds write in linux (CVE-2026-64217). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64220 |
|
Vulnerability in linux (CVE-2026-64220)
vulnerability in linux (CVE-2026-64220). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64209 |
|
Out-of-Bounds Read in linux (CVE-2026-64209)
vulnerability in linux (CVE-2026-64209). Confidential information can be exposed externally.
|
| CVE-2026-64212 |
|
Vulnerability in linux (CVE-2026-64212)
vulnerability in linux (CVE-2026-64212). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17039 |
|
Authorization Flaw in CVE-2026-17039 (CVE-2026-17039)
vulnerability in CVE-2026-17039 (CVE-2026-17039). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73851 |
|
Path Traversal in Microsoft.OpenApi.Kiota (CVE-2026-73851)
path traversal in Microsoft.OpenApi.Kiota (CVE-2026-73851). Risk of unauthorized operations or information disclosure. Exploitable via ``static_template``. Mitigation: upgrade to `1.29.1` or later.
|
| CVE-2026-59952 |
|
Vulnerability in valibot (CVE-2026-59952)
vulnerability in valibot (CVE-2026-59952). Risk of unauthorized operations or information disclosure. Exploitable via ``valibot``. Mitigation: upgrade to `1.2.0` or later.
|
| CVE-2026-59940 |
|
Unsafe Deserialization in seroval (CVE-2026-59940)
vulnerability in seroval (CVE-2026-59940). Successful exploitation can lead to full system takeover. Exploitable via ``seroval``. Mitigation: upgrade to `1.5.3` or later.
|
| CVE-2026-59949 |
|
Vulnerability in at.yawk.lz4:lz4-java (CVE-2026-59949)
vulnerability in at.yawk.lz4:lz4-java (CVE-2026-59949). Risk of unauthorized operations or information disclosure. Exploitable via ``off``. Mitigation: upgrade to `1.11.1` or later.
|
| CVE-2026-63632 |
|
Out-of-Bounds Read in onnx (CVE-2026-63632)
vulnerability in onnx (CVE-2026-63632). Risk of unauthorized operations or information disclosure. Exploitable via ``B_shape``. Mitigation: upgrade to `1.22.0` or later.
|
| CVE-2026-66004 |
|
Path Traversal in path-traversal (CVE-2026-66004)
path traversal in path-traversal (CVE-2026-66004). Data can be tampered with by attackers.
|
| CVE-2026-55729 |
|
Information Disclosure in CVE-2026-55729 (CVE-2026-55729)
vulnerability in CVE-2026-55729 (CVE-2026-55729). Risk of unauthorized operations or information disclosure. Exploitable via ``localStorage``.
|
| CVE-2026-66006 |
|
Vulnerability in lakefs (CVE-2026-66006)
vulnerability in lakefs (CVE-2026-66006). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8308 |
|
Cross-Site Scripting (XSS) in CVE-2026-8308 (CVE-2026-8308)
cross-site scripting in CVE-2026-8308 (CVE-2026-8308). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8789 |
|
Authorization Flaw in wordpress (CVE-2026-8789)
vulnerability in wordpress (CVE-2026-8789). Data can be tampered with by attackers. Exploitable via ``ea_delete_multiple_connections``.
|
| CVE-2026-66007 |
|
Path Traversal in path-traversal (CVE-2026-66007)
path traversal in path-traversal (CVE-2026-66007). Confidential information can be exposed externally.
|
| CVE-2026-16799 |
|
Vulnerability in devolutions (CVE-2026-16799)
vulnerability in devolutions (CVE-2026-16799). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49326 |
|
Vulnerability in apache (CVE-2026-49326)
vulnerability in apache (CVE-2026-49326). Confidential information can be exposed externally.
|
| CVE-2026-57106 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-57106)
SSRF in ssrf (CVE-2026-57106). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58630 |
|
Vulnerability in microsoft (CVE-2026-58630)
vulnerability in microsoft (CVE-2026-58630). Confidential information can be exposed externally.
|
| CVE-2026-56163 |
|
Vulnerability in microsoft (CVE-2026-56163)
vulnerability in microsoft (CVE-2026-56163). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16802 |
|
Vulnerability in devolutions (CVE-2026-16802)
vulnerability in devolutions (CVE-2026-16802). Confidential information can be exposed externally.
|
| CVE-2026-55728 |
|
Vulnerability in CVE-2026-55728 (CVE-2026-55728)
vulnerability in CVE-2026-55728 (CVE-2026-55728). Risk of unauthorized operations or information disclosure. Exploitable via ``cmd_ipaddr_conflict``.
|
| CVE-2026-55732 |
|
Out-of-Bounds Read in CVE-2026-55732 (CVE-2026-55732)
vulnerability in CVE-2026-55732 (CVE-2026-55732). Risk of unauthorized operations or information disclosure. Exploitable via ``bacdt_datetime_to_tod``.
|
| CVE-2026-16801 |
|
Code Injection in devolutions (CVE-2026-16801)
code injection in devolutions (CVE-2026-16801). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16800 |
|
Code Injection in devolutions (CVE-2026-16800)
code injection in devolutions (CVE-2026-16800). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55730 |
|
Cross-Site Scripting (XSS) in CVE-2026-55730 (CVE-2026-55730)
cross-site scripting in CVE-2026-55730 (CVE-2026-55730). Risk of unauthorized operations or information disclosure. Exploitable via ``project``.
|
| CVE-2026-46452 |
|
Vulnerability in apache (CVE-2026-46452)
vulnerability in apache (CVE-2026-46452). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66010 |
|
Cross-Site Scripting (XSS) in cure53 (CVE-2026-66010)
cross-site scripting in cure53 (CVE-2026-66010). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12496 |
|
Cross-Site Scripting (XSS) in CVE-2026-12496 (CVE-2026-12496)
cross-site scripting in CVE-2026-12496 (CVE-2026-12496). Risk of unauthorized operations or information disclosure. Exploitable via `POST /da`.
|
| CVE-2026-17048 |
|
Information Disclosure in redhat (CVE-2026-17048)
vulnerability in redhat (CVE-2026-17048). Confidential information can be exposed externally.
|
| CVE-2026-45811 |
|
Vulnerability in apache (CVE-2026-45811)
vulnerability in apache (CVE-2026-45811). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12502 |
|
Privilege Escalation in CVE-2026-12502 (CVE-2026-12502)
vulnerability in CVE-2026-12502 (CVE-2026-12502). Risk of unauthorized operations or information disclosure. Exploitable via ``superadmin``.
|
| CVE-2026-12503 |
|
Vulnerability in privilege-escalation (CVE-2026-12503)
vulnerability in privilege-escalation (CVE-2026-12503). Risk of unauthorized operations or information disclosure. Exploitable via ``larmapp``.
|
| CVE-2026-66009 |
|
Vulnerability in CVE-2026-66009 (CVE-2026-66009)
vulnerability in CVE-2026-66009 (CVE-2026-66009). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66008 |
|
Vulnerability in CVE-2026-66008 (CVE-2026-66008)
vulnerability in CVE-2026-66008 (CVE-2026-66008). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7484 |
|
Vulnerability in CVE-2026-7484 (CVE-2026-7484)
vulnerability in CVE-2026-7484 (CVE-2026-7484). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45812 |
|
Vulnerability in apache (CVE-2026-45812)
vulnerability in apache (CVE-2026-45812). Confidential information can be exposed externally.
|
| CVE-2026-66144 |
|
Vulnerability in dos (CVE-2026-66144)
vulnerability in dos (CVE-2026-66144). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66142 |
|
Vulnerability in apache (CVE-2026-66142)
vulnerability in apache (CVE-2026-66142). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66143 |
|
Vulnerability in apache (CVE-2026-66143)
vulnerability in apache (CVE-2026-66143). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12504 |
|
Authentication Bypass in CVE-2026-12504 (CVE-2026-12504)
authentication bypass in CVE-2026-12504 (CVE-2026-12504). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9765 |
|
Vulnerability in privilege-escalation (CVE-2026-9765)
vulnerability in privilege-escalation (CVE-2026-9765). Data can be tampered with by attackers.
|
| CVE-2026-45816 |
|
Vulnerability in apache (CVE-2026-45816)
vulnerability in apache (CVE-2026-45816). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45813 |
|
Vulnerability in c (CVE-2026-45813)
vulnerability in c (CVE-2026-45813). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16743 |
|
Privilege Escalation in CVE-2026-16743 (CVE-2026-16743)
vulnerability in CVE-2026-16743 (CVE-2026-16743). Confidential information can be exposed externally.
|
| CVE-2026-55685 |
|
Vulnerability in react-router (CVE-2026-55685)
vulnerability in react-router (CVE-2026-55685). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.18.0` or later.
|
| CVE-2026-15810 |
|
Cross-Site Scripting (XSS) in CVE-2026-15810 (CVE-2026-15810)
cross-site scripting in CVE-2026-15810 (CVE-2026-15810). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10610 |
|
Privilege Escalation in privilege-escalation (CVE-2026-10610)
vulnerability in privilege-escalation (CVE-2026-10610). Risk of unauthorized operations or information disclosure.
|