Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-56167 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-56167)
SSRF in ssrf (CVE-2026-56167). Confidential information can be exposed externally.
CVE-2026-56160 Vulnerability in microsoft (CVE-2026-56160)
vulnerability in microsoft (CVE-2026-56160). Successful exploitation can lead to full system takeover.
CVE-2026-56165 Vulnerability in microsoft (CVE-2026-56165)
vulnerability in microsoft (CVE-2026-56165). Successful exploitation can lead to full system takeover.
CVE-2026-54120 Vulnerability in microsoft (CVE-2026-54120)
vulnerability in microsoft (CVE-2026-54120). Successful exploitation can lead to full system takeover.
CVE-2026-50517 Unsafe Deserialization in deserialization (CVE-2026-50517)
vulnerability in deserialization (CVE-2026-50517). Successful exploitation can lead to full system takeover.
CVE-2026-49159 Information Disclosure in microsoft (CVE-2026-49159)
vulnerability in microsoft (CVE-2026-49159). Confidential information can be exposed externally.
CVE-2026-35425 Vulnerability in microsoft (CVE-2026-35425)
vulnerability in microsoft (CVE-2026-35425). Successful exploitation can lead to full system takeover.
CVE-2026-16767 Path Traversal in path-traversal (CVE-2026-16767)
path traversal in path-traversal (CVE-2026-16767). Risk of unauthorized operations or information disclosure.
CVE-2026-44955 Vulnerability in CVE-2026-44955 (CVE-2026-44955)
vulnerability in CVE-2026-44955 (CVE-2026-44955). Risk of unauthorized operations or information disclosure.
CVE-2026-28698 Vulnerability in CVE-2026-28698 (CVE-2026-28698)
vulnerability in CVE-2026-28698 (CVE-2026-28698). Confidential information can be exposed externally.
CVE-2026-42933 Vulnerability in CVE-2026-42933 (CVE-2026-42933)
vulnerability in CVE-2026-42933 (CVE-2026-42933). Successful exploitation can lead to full system takeover.
CVE-2026-50044 Vulnerability in CVE-2026-50044 (CVE-2026-50044)
vulnerability in CVE-2026-50044 (CVE-2026-50044). Confidential information can be exposed externally.
CVE-2026-16807 Out-of-Bounds Write in Google chrome (CVE-2026-16807)
out-of-bounds write in Google chrome (CVE-2026-16807). Successful exploitation can lead to full system takeover.
CVE-2026-63732 OS Command Injection in CVE-2026-63732 (CVE-2026-63732)
OS command injection in CVE-2026-63732 (CVE-2026-63732). Successful exploitation can lead to full system takeover. Exploitable via `Host header`. Mitigation: upgrade to `0.4.60` or later.
CVE-2026-65604 Vulnerability in CVE-2026-65604 (CVE-2026-65604)
vulnerability in CVE-2026-65604 (CVE-2026-65604). Confidential information can be exposed externally.
CVE-2026-65694 Path Traversal in path-traversal (CVE-2026-65694)
path traversal in path-traversal (CVE-2026-65694). Confidential information can be exposed externally.
CVE-2026-63313 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-63313)
SSRF in ssrf (CVE-2026-63313). Confidential information can be exposed externally.
CVE-2026-16765 Vulnerability in sqli (CVE-2026-16765)
vulnerability in sqli (CVE-2026-16765). Risk of unauthorized operations or information disclosure.
CVE-2026-16804 Use-After-Free in google (CVE-2026-16804)
vulnerability in google (CVE-2026-16804). Successful exploitation can lead to full system takeover.
CVE-2026-16805 Use-After-Free in google (CVE-2026-16805)
vulnerability in google (CVE-2026-16805). Successful exploitation can lead to full system takeover.
CVE-2026-16806 Use-After-Free in google (CVE-2026-16806)
vulnerability in google (CVE-2026-16806). Successful exploitation can lead to full system takeover.
CVE-2026-16764 Vulnerability in CVE-2026-16764 (CVE-2026-16764)
vulnerability in CVE-2026-16764 (CVE-2026-16764). Risk of unauthorized operations or information disclosure.
CVE-2024-58353 Vulnerability in react (CVE-2024-58353)
vulnerability in react (CVE-2024-58353). Confidential information can be exposed externally.
CVE-2024-58355 Vulnerability in react (CVE-2024-58355)
vulnerability in react (CVE-2024-58355). Confidential information can be exposed externally. Mitigation: upgrade to `4.7.16` or later.
CVE-2024-58354 Command Injection in CVE-2024-58354 (CVE-2024-58354)
command injection in CVE-2024-58354 (CVE-2024-58354). Data can be tampered with by attackers.
CVE-2026-16763 Command Injection in CVE-2026-16763 (CVE-2026-16763)
command injection in CVE-2026-16763 (CVE-2026-16763). Risk of unauthorized operations or information disclosure.
CVE-2025-71389 Code Injection in react (CVE-2025-71389)
code injection in react (CVE-2025-71389). Successful exploitation can lead to full system takeover.
CVE-2026-50032 Vulnerability in CVE-2026-50032 (CVE-2026-50032)
vulnerability in CVE-2026-50032 (CVE-2026-50032). Risk of unauthorized operations or information disclosure.
CVE-2026-52439 Vulnerability in CVE-2026-52439 (CVE-2026-52439)
vulnerability in CVE-2026-52439 (CVE-2026-52439). Successful exploitation can lead to full system takeover.
CVE-2026-49035 Vulnerability in dos (CVE-2026-49035)
vulnerability in dos (CVE-2026-49035). Successful exploitation can lead to full system takeover.
CVE-2026-50039 Vulnerability in CVE-2026-50039 (CVE-2026-50039)
vulnerability in CVE-2026-50039 (CVE-2026-50039). Risk of unauthorized operations or information disclosure.
CVE-2026-38764 Privilege Escalation in CVE-2026-38764 (CVE-2026-38764)
vulnerability in CVE-2026-38764 (CVE-2026-38764). Successful exploitation can lead to full system takeover.
CVE-2026-34496 Privilege Escalation in CVE-2026-34496 (CVE-2026-34496)
vulnerability in CVE-2026-34496 (CVE-2026-34496). Risk of unauthorized operations or information disclosure.
CVE-2026-15630 Privilege Escalation in CVE-2026-15630 (CVE-2026-15630)
vulnerability in CVE-2026-15630 (CVE-2026-15630). Successful exploitation can lead to full system takeover.
CVE-2026-21655 Unsafe Deserialization in deserialization (CVE-2026-21655)
vulnerability in deserialization (CVE-2026-21655). Risk of unauthorized operations or information disclosure.
CVE-2026-21653 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-21653)
SSRF in ssrf (CVE-2026-21653). Risk of unauthorized operations or information disclosure.
CVE-2026-10697 Authentication Bypass in progress (CVE-2026-10697)
authentication bypass in progress (CVE-2026-10697). Successful exploitation can lead to full system takeover.
CVE-2026-15981 Authentication Bypass in wordpress (CVE-2026-15981)
authentication bypass in wordpress (CVE-2026-15981). Successful exploitation can lead to full system takeover.
CVE-2026-15968 Cross-Site Scripting (XSS) in progress (CVE-2026-15968)
cross-site scripting in progress (CVE-2026-15968). Successful exploitation can lead to full system takeover.
CVE-2026-16002 Out-of-Bounds Read in dos (CVE-2026-16002)
vulnerability in dos (CVE-2026-16002). Risk of unauthorized operations or information disclosure.
CVE-2026-16796 Vulnerability in Amazon bedrock-agentcore (CVE-2026-16796)
vulnerability in Amazon bedrock-agentcore (CVE-2026-16796). Confidential information can be exposed externally. Mitigation: upgrade to `1.18.1` or later.
CVE-2026-65705 Vulnerability in ffmpeg (CVE-2026-65705)
vulnerability in ffmpeg (CVE-2026-65705). Successful exploitation can lead to full system takeover.
CVE-2026-65706 Vulnerability in ffmpeg (CVE-2026-65706)
vulnerability in ffmpeg (CVE-2026-65706). Successful exploitation can lead to full system takeover.
CVE-2026-65703 Out-of-Bounds Write in ffmpeg (CVE-2026-65703)
out-of-bounds write in ffmpeg (CVE-2026-65703). Successful exploitation can lead to full system takeover.
CVE-2026-65704 Vulnerability in ffmpeg (CVE-2026-65704)
vulnerability in ffmpeg (CVE-2026-65704). Successful exploitation can lead to full system takeover.
CVE-2026-64785 Vulnerability in swift-nio-http2 (CVE-2026-64785)
vulnerability in swift-nio-http2 (CVE-2026-64785). Risk of unauthorized operations or information disclosure. Exploitable via ``enableOutboundHeaderValidation``. Mitigation: upgrade to `48bfd90` or later.
CVE-2026-63359 SQL Injection in CVE-2026-63359 (CVE-2026-63359)
SQL injection in CVE-2026-63359 (CVE-2026-63359). Successful exploitation can lead to full system takeover.
CVE-2026-60122 Code Injection in CVE-2026-60122 (CVE-2026-60122)
code injection in CVE-2026-60122 (CVE-2026-60122). Successful exploitation can lead to full system takeover.
CVE-2026-15212 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15212)
vulnerability in wordpress (CVE-2026-15212). Successful exploitation can lead to full system takeover.
CVE-2026-12353 Vulnerability in CVE-2026-12353 (CVE-2026-12353)
vulnerability in CVE-2026-12353 (CVE-2026-12353). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →