Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-45648 Vulnerability in microsoft (CVE-2026-45648)
vulnerability in microsoft (CVE-2026-45648). Successful exploitation can lead to full system takeover.
CVE-2026-45642 Vulnerability in microsoft (CVE-2026-45642)
vulnerability in microsoft (CVE-2026-45642). Data can be tampered with by attackers.
CVE-2026-45644 Cross-Site Scripting (XSS) in microsoft (CVE-2026-45644)
cross-site scripting in microsoft (CVE-2026-45644). Successful exploitation can lead to full system takeover.
CVE-2026-45636 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVE-2026-45638 Vulnerability in microsoft (CVE-2026-45638)
vulnerability in microsoft (CVE-2026-45638). Successful exploitation can lead to full system takeover.
CVE-2026-45640 Use-After-Free in microsoft (CVE-2026-45640)
vulnerability in microsoft (CVE-2026-45640). Successful exploitation can lead to full system takeover.
CVE-2026-45605 Use-After-Free in microsoft (CVE-2026-45605)
vulnerability in microsoft (CVE-2026-45605). Successful exploitation can lead to full system takeover.
CVE-2026-45603 Vulnerability in microsoft (CVE-2026-45603)
vulnerability in microsoft (CVE-2026-45603). Successful exploitation can lead to full system takeover.
CVE-2026-45598 Vulnerability in microsoft (CVE-2026-45598)
vulnerability in microsoft (CVE-2026-45598). Successful exploitation can lead to full system takeover.
CVE-2026-45600 Vulnerability in microsoft (CVE-2026-45600)
vulnerability in microsoft (CVE-2026-45600). Successful exploitation can lead to full system takeover.
CVE-2026-45596 Vulnerability in microsoft (CVE-2026-45596)
vulnerability in microsoft (CVE-2026-45596). Successful exploitation can lead to full system takeover.
CVE-2026-45594 Information Disclosure in microsoft (CVE-2026-45594)
vulnerability in microsoft (CVE-2026-45594). Confidential information can be exposed externally.
CVE-2026-45586 Vulnerability in microsoft (CVE-2026-45586)
vulnerability in microsoft (CVE-2026-45586). Successful exploitation can lead to full system takeover.
CVE-2026-45591 Vulnerability in Microsoft.AspNetCore.App.Runtime.linux-x64 (CVE-2026-45591)
vulnerability in Microsoft.AspNetCore.App.Runtime.linux-x64 (CVE-2026-45591). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.0.9` or later.
CVE-2026-45503 Vulnerability in ssrf (CVE-2026-45503)
vulnerability in ssrf (CVE-2026-45503). Confidential information can be exposed externally.
CVE-2026-45491 Vulnerability in Microsoft.NETCore.App.Runtime.linux-x64 (CVE-2026-45491)
vulnerability in Microsoft.NETCore.App.Runtime.linux-x64 (CVE-2026-45491). Data can be tampered with by attackers. Mitigation: upgrade to `10.0.9` or later.
CVE-2026-8025 SQL Injection in sqli (CVE-2026-8025)
SQL injection in sqli (CVE-2026-8025). Successful exploitation can lead to full system takeover.
CVE-2026-8045 XXE (XML External Entity) in schneider-electric (CVE-2026-8045)
vulnerability in schneider-electric (CVE-2026-8045). Confidential information can be exposed externally.
CVE-2026-49948 Vulnerability in CVE-2026-49948 (CVE-2026-49948)
vulnerability in CVE-2026-49948 (CVE-2026-49948). Confidential information can be exposed externally. Exploitable via `POST /configure`.
CVE-2026-49938 Vulnerability in fortinet (CVE-2026-49938)
vulnerability in fortinet (CVE-2026-49938). Confidential information can be exposed externally.
CVE-2026-24064 Vulnerability in privilege-escalation (CVE-2026-24064)
vulnerability in privilege-escalation (CVE-2026-24064). Successful exploitation can lead to full system takeover.
CVE-2026-24065 Vulnerability in privilege-escalation (CVE-2026-24065)
vulnerability in privilege-escalation (CVE-2026-24065). Successful exploitation can lead to full system takeover.
CVE-2026-25089 KEV [KEV] OS Command Injection in Fortinet fortisandbox (CVE-2026-25089)
OS command injection in Fortinet fortisandbox (CVE-2026-25089). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-10520 KEV [KEV] OS Command Injection in Ivanti standalone-sentry (CVE-2026-10520)
OS command injection in Ivanti standalone-sentry (CVE-2026-10520). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-10727 OS Command Injection in CVE-2026-10727 (CVE-2026-10727)
OS command injection in CVE-2026-10727 (CVE-2026-10727). Successful exploitation can lead to full system takeover.
CVE-2026-10523 Vulnerability in ivanti (CVE-2026-10523)
vulnerability in ivanti (CVE-2026-10523). Successful exploitation can lead to full system takeover.
CVE-2026-9277 Command Injection in shell-quote (CVE-2026-9277)
command injection in shell-quote (CVE-2026-9277). Successful exploitation can lead to full system takeover. Exploitable via ``envFn``. Mitigation: upgrade to `1.8.4` or later.
CVE-2026-7486 SQL Injection in sqli (CVE-2026-7486)
SQL injection in sqli (CVE-2026-7486). Successful exploitation can lead to full system takeover.
CVE-2026-9279 OS Command Injection in CVE-2026-9279 (CVE-2026-9279)
OS command injection in CVE-2026-9279 (CVE-2026-9279). Risk of unauthorized operations or information disclosure. Exploitable via ``git``.
CVE-2026-52907 Vulnerability in linux (CVE-2026-52907)
vulnerability in linux (CVE-2026-52907). Successful exploitation can lead to full system takeover.
CVE-2026-49762 Vulnerability in dos (CVE-2026-49762)
vulnerability in dos (CVE-2026-49762). Risk of unauthorized operations or information disclosure.
CVE-2026-52904 Vulnerability in linux (CVE-2026-52904)
vulnerability in linux (CVE-2026-52904). Risk of unauthorized operations or information disclosure.
CVE-2026-47899 Vulnerability in CVE-2026-47899 (CVE-2026-47899)
vulnerability in CVE-2026-47899 (CVE-2026-47899). Risk of unauthorized operations or information disclosure.
CVE-2026-47900 Cross-Site Scripting (XSS) in CVE-2026-47900 (CVE-2026-47900)
cross-site scripting in CVE-2026-47900 (CVE-2026-47900). Risk of unauthorized operations or information disclosure.
CVE-2026-47901 Cross-Site Scripting (XSS) in CVE-2026-47901 (CVE-2026-47901)
cross-site scripting in CVE-2026-47901 (CVE-2026-47901). Risk of unauthorized operations or information disclosure.
CVE-2026-46330 Use-After-Free in linux (CVE-2026-46330)
vulnerability in linux (CVE-2026-46330). Successful exploitation can lead to full system takeover.
CVE-2026-46332 Vulnerability in linux (CVE-2026-46332)
vulnerability in linux (CVE-2026-46332). Successful exploitation can lead to full system takeover.
CVE-2026-11792 Vulnerability in c (CVE-2026-11792)
vulnerability in c (CVE-2026-11792). Risk of unauthorized operations or information disclosure.
CVE-2026-11793 Vulnerability in c (CVE-2026-11793)
vulnerability in c (CVE-2026-11793). Risk of unauthorized operations or information disclosure.
CVE-2026-11789 Vulnerability in redhat (CVE-2026-11789)
vulnerability in redhat (CVE-2026-11789). Risk of unauthorized operations or information disclosure.
CVE-2026-11790 Vulnerability in dos (CVE-2026-11790)
vulnerability in dos (CVE-2026-11790). Risk of unauthorized operations or information disclosure.
CVE-2026-11786 Out-of-Bounds Read in redhat (CVE-2026-11786)
vulnerability in redhat (CVE-2026-11786). Risk of unauthorized operations or information disclosure.
CVE-2026-11788 Vulnerability in redhat (CVE-2026-11788)
vulnerability in redhat (CVE-2026-11788). Risk of unauthorized operations or information disclosure.
CVE-2026-11785 Vulnerability in redhat (CVE-2026-11785)
vulnerability in redhat (CVE-2026-11785). Risk of unauthorized operations or information disclosure.
CVE-2026-46319 Use-After-Free in csharp (CVE-2026-46319)
vulnerability in csharp (CVE-2026-46319). Successful exploitation can lead to full system takeover.
CVE-2026-46323 Use-After-Free in linux (CVE-2026-46323)
vulnerability in linux (CVE-2026-46323). Successful exploitation can lead to full system takeover.
CVE-2017-20251 Code Injection in wordpress (CVE-2017-20251)
code injection in wordpress (CVE-2017-20251). Successful exploitation can lead to full system takeover.
CVE-2026-2638 Vulnerability in CVE-2026-2638 (CVE-2026-2638)
vulnerability in CVE-2026-2638 (CVE-2026-2638). Risk of unauthorized operations or information disclosure.
CVE-2026-11764 Vulnerability in CVE-2026-11764 (CVE-2026-11764)
vulnerability in CVE-2026-11764 (CVE-2026-11764). Risk of unauthorized operations or information disclosure.
CVE-2017-20248 Path Traversal in path-traversal (CVE-2017-20248)
path traversal in path-traversal (CVE-2017-20248). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →