Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-38703 Command Injection in inhandnetworks (CVE-2026-38703)
command injection in inhandnetworks (CVE-2026-38703). Successful exploitation can lead to full system takeover.
CVE-2026-38704 Command Injection in inhandnetworks (CVE-2026-38704)
command injection in inhandnetworks (CVE-2026-38704). Successful exploitation can lead to full system takeover.
CVE-2026-38707 Command Injection in inhandnetworks (CVE-2026-38707)
command injection in inhandnetworks (CVE-2026-38707). Successful exploitation can lead to full system takeover.
CVE-2026-24444 Vulnerability in CVE-2026-24444 (CVE-2026-24444)
vulnerability in CVE-2026-24444 (CVE-2026-24444). Successful exploitation can lead to full system takeover.
CVE-2026-22872 Vulnerability in github.com/projectcapsule/capsule (CVE-2026-22872)
vulnerability in github.com/projectcapsule/capsule (CVE-2026-22872). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.13.0` or later.
CVE-2026-30963 Vulnerability in github.com/projectcapsule/capsule (CVE-2026-30963)
vulnerability in github.com/projectcapsule/capsule (CVE-2026-30963). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.13.0` or later.
CVE-2026-45753 Cross-Site Scripting (XSS) in symfony/html-sanitizer (CVE-2026-45753)
cross-site scripting in symfony/html-sanitizer (CVE-2026-45753). Risk of unauthorized operations or information disclosure. Exploitable via ``UrlAttributeSanitizer``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-6824 Cross-Site Scripting (XSS) in cisa (CVE-2026-6824)
cross-site scripting in cisa (CVE-2026-6824). Successful exploitation can lead to full system takeover.
CVE-2026-7786 Vulnerability in cisa (CVE-2026-7786)
vulnerability in cisa (CVE-2026-7786). Successful exploitation can lead to full system takeover.
CVE-2026-9037 Vulnerability in cisa (CVE-2026-9037)
vulnerability in cisa (CVE-2026-9037). Risk of unauthorized operations or information disclosure.
CVE-2026-48524 Vulnerability in pyjwt (CVE-2026-48524)
vulnerability in pyjwt (CVE-2026-48524). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.13.0` or later.
CVE-2026-48735 Vulnerability in pypdf (CVE-2026-48735)
vulnerability in pypdf (CVE-2026-48735). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.1` or later.
CVE-2026-48525 Vulnerability in pyjwt (CVE-2026-48525)
vulnerability in pyjwt (CVE-2026-48525). Risk of unauthorized operations or information disclosure. Exploitable via `POST /verify`. Mitigation: upgrade to `2.13.0` or later.
CVE-2026-48522 Vulnerability in pyjwt (CVE-2026-48522)
vulnerability in pyjwt (CVE-2026-48522). Risk of unauthorized operations or information disclosure. Exploitable via ``uri``. Mitigation: upgrade to `2.13.0` or later.
CVE-2026-48526 Authentication Bypass in pyjwt (CVE-2026-48526)
authentication bypass in pyjwt (CVE-2026-48526). Confidential information can be exposed externally. Mitigation: upgrade to `2.13.0` or later.
CVE-2026-48523 Vulnerability in pyjwt (CVE-2026-48523)
vulnerability in pyjwt (CVE-2026-48523). Risk of unauthorized operations or information disclosure. Exploitable via ``PyJWK``. Mitigation: upgrade to `2.13.0` or later.
CVE-2026-47759 Cross-Site Scripting (XSS) in tinymce (CVE-2026-47759)
cross-site scripting in tinymce (CVE-2026-47759). Confidential information can be exposed externally. Mitigation: upgrade to `8.5.1` or later.
CVE-2026-47760 Cross-Site Scripting (XSS) in tinymce (CVE-2026-47760)
cross-site scripting in tinymce (CVE-2026-47760). Confidential information can be exposed externally. Mitigation: upgrade to `7.1.0` or later.
CVE-2026-47761 Cross-Site Scripting (XSS) in tinymce (CVE-2026-47761)
cross-site scripting in tinymce (CVE-2026-47761). Confidential information can be exposed externally. Mitigation: upgrade to `8.5.1` or later.
CVE-2026-47762 Cross-Site Scripting (XSS) in tinymce (CVE-2026-47762)
cross-site scripting in tinymce (CVE-2026-47762). Confidential information can be exposed externally. Mitigation: upgrade to `8.5.1` or later.
CVE-2026-48155 Vulnerability in pypdf (CVE-2026-48155)
vulnerability in pypdf (CVE-2026-48155). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.0` or later.
CVE-2026-44358 Vulnerability in CVE-2026-44358 (CVE-2026-44358)
vulnerability in CVE-2026-44358 (CVE-2026-44358). Data can be tampered with by attackers. Mitigation: upgrade to `1.0.1` or later.
CVE-2026-41565 Vulnerability in CVE-2026-41565 (CVE-2026-41565)
vulnerability in CVE-2026-41565 (CVE-2026-41565). Risk of unauthorized operations or information disclosure.
CVE-2026-9828 Unsafe Deserialization in ch.qos.logback:logback-core (CVE-2026-9828)
vulnerability in ch.qos.logback:logback-core (CVE-2026-9828). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.33` or later.
CVE-2026-8980 Privilege Escalation in privilege-escalation (CVE-2026-8980)
vulnerability in privilege-escalation (CVE-2026-8980). Risk of unauthorized operations or information disclosure.
CVE-2026-8990 Vulnerability in CVE-2026-8990 (CVE-2026-8990)
vulnerability in CVE-2026-8990 (CVE-2026-8990). Risk of unauthorized operations or information disclosure.
CVE-2026-49238 Path Traversal in cpp (CVE-2026-49238)
path traversal in cpp (CVE-2026-49238). Confidential information can be exposed externally.
CVE-2026-8979 Authentication Bypass in CVE-2026-8979 (CVE-2026-8979)
authentication bypass in CVE-2026-8979 (CVE-2026-8979). Risk of unauthorized operations or information disclosure.
CVE-2026-49237 Vulnerability in privilege-escalation (CVE-2026-49237)
vulnerability in privilege-escalation (CVE-2026-49237). Successful exploitation can lead to full system takeover.
CVE-2026-42250 Out-of-Bounds Write in dos (CVE-2026-42250)
out-of-bounds write in dos (CVE-2026-42250). Risk of unauthorized operations or information disclosure.
CVE-2026-37579 Unsafe Deserialization in CVE-2026-37579 (CVE-2026-37579)
vulnerability in CVE-2026-37579 (CVE-2026-37579). Risk of unauthorized operations or information disclosure.
CVE-2026-37266 Vulnerability in CVE-2026-37266 (CVE-2026-37266)
vulnerability in CVE-2026-37266 (CVE-2026-37266). Successful exploitation can lead to full system takeover.
CVE-2026-9818 Vulnerability in CVE-2026-9818 (CVE-2026-9818)
vulnerability in CVE-2026-9818 (CVE-2026-9818). Risk of unauthorized operations or information disclosure.
CVE-2026-9658 Vulnerability in CVE-2026-9658 (CVE-2026-9658)
vulnerability in CVE-2026-9658 (CVE-2026-9658). Risk of unauthorized operations or information disclosure. Exploitable via `GET /path`.
CVE-2026-40914 Authorization Flaw in org.apache.artemis:artemis-stomp-protocol (CVE-2026-40914)
vulnerability in org.apache.artemis:artemis-stomp-protocol (CVE-2026-40914). Risk of unauthorized operations or information disclosure.
CVE-2026-9813 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-9813)
SSRF in ssrf (CVE-2026-9813). Successful exploitation can lead to full system takeover.
CVE-2026-4377 Vulnerability in CVE-2026-4377 (CVE-2026-4377)
vulnerability in CVE-2026-4377 (CVE-2026-4377). Risk of unauthorized operations or information disclosure.
CVE-2026-46240 Use-After-Free in linux (CVE-2026-46240)
vulnerability in linux (CVE-2026-46240). Successful exploitation can lead to full system takeover. Exploitable via ``buffer``.
CVE-2026-46241 Use-After-Free in linux (CVE-2026-46241)
vulnerability in linux (CVE-2026-46241). Successful exploitation can lead to full system takeover.
CVE-2026-46235 Vulnerability in linux (CVE-2026-46235)
vulnerability in linux (CVE-2026-46235). Risk of unauthorized operations or information disclosure.
CVE-2026-46234 Out-of-Bounds Write in linux (CVE-2026-46234)
out-of-bounds write in linux (CVE-2026-46234). Successful exploitation can lead to full system takeover.
CVE-2026-47074 Vulnerability in ex_aws_sns (CVE-2026-47074)
vulnerability in ex_aws_sns (CVE-2026-47074). Risk of unauthorized operations or information disclosure. Exploitable via ``SigningCertURL``. Mitigation: upgrade to `2.3.5` or later.
CVE-2026-46230 Out-of-Bounds Read in linux (CVE-2026-46230)
vulnerability in linux (CVE-2026-46230). Confidential information can be exposed externally.
CVE-2026-46227 Use-After-Free in linux (CVE-2026-46227)
vulnerability in linux (CVE-2026-46227). Successful exploitation can lead to full system takeover.
CVE-2026-46233 Vulnerability in linux (CVE-2026-46233)
vulnerability in linux (CVE-2026-46233). Risk of unauthorized operations or information disclosure.
CVE-2026-46224 Vulnerability in linux (CVE-2026-46224)
vulnerability in linux (CVE-2026-46224). Risk of unauthorized operations or information disclosure.
CVE-2026-46228 Vulnerability in linux (CVE-2026-46228)
vulnerability in linux (CVE-2026-46228). Risk of unauthorized operations or information disclosure.
CVE-2026-46215 Use-After-Free in linux (CVE-2026-46215)
vulnerability in linux (CVE-2026-46215). Successful exploitation can lead to full system takeover.
CVE-2026-46219 Use-After-Free in linux (CVE-2026-46219)
vulnerability in linux (CVE-2026-46219). Successful exploitation can lead to full system takeover.
CVE-2026-46216 Vulnerability in linux (CVE-2026-46216)
vulnerability in linux (CVE-2026-46216). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →