Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-14409 Vulnerability in google (CVE-2026-14409)
vulnerability in google (CVE-2026-14409). Successful exploitation can lead to full system takeover.
CVE-2026-14399 Vulnerability in google (CVE-2026-14399)
vulnerability in google (CVE-2026-14399). Confidential information can be exposed externally.
CVE-2026-14401 Vulnerability in google (CVE-2026-14401)
vulnerability in google (CVE-2026-14401). Successful exploitation can lead to full system takeover.
CVE-2026-14384 Out-of-Bounds Read in google (CVE-2026-14384)
vulnerability in google (CVE-2026-14384). Confidential information can be exposed externally.
CVE-2026-14385 Vulnerability in google (CVE-2026-14385)
vulnerability in google (CVE-2026-14385). Successful exploitation can lead to full system takeover.
CVE-2026-14381 Vulnerability in google (CVE-2026-14381)
vulnerability in google (CVE-2026-14381). Data can be tampered with by attackers.
CVE-2026-14383 Code Injection in google (CVE-2026-14383)
code injection in google (CVE-2026-14383). Successful exploitation can lead to full system takeover.
CVE-2026-54704 Vulnerability in io.opentelemetry.javaagent:opentelemetry-javaagent (CVE-2026-54704)
vulnerability in io.opentelemetry.javaagent:opentelemetry-javaagent (CVE-2026-54704). Confidential information can be exposed externally. Mitigation: upgrade to `2.28.0-alpha` or later.
CVE-2026-54712 Vulnerability in io.opentelemetry.javaagent:opentelemetry-javaagent (CVE-2026-54712)
vulnerability in io.opentelemetry.javaagent:opentelemetry-javaagent (CVE-2026-54712). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.27.0` or later.
CVE-2026-58451 Path Traversal in csrf (CVE-2026-58451)
path traversal in csrf (CVE-2026-58451). Confidential information can be exposed externally.
CVE-2026-50521 Use-After-Free in microsoft (CVE-2026-50521)
vulnerability in microsoft (CVE-2026-50521). Confidential information can be exposed externally.
CVE-2026-41121 Vulnerability in dell (CVE-2026-41121)
vulnerability in dell (CVE-2026-41121). Successful exploitation can lead to full system takeover.
CVE-2026-54720 Cross-Site Scripting (XSS) in silverstripe/framework (CVE-2026-54720)
cross-site scripting in silverstripe/framework (CVE-2026-54720). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.2.2` or later.
CVE-2026-55153 Vulnerability in com.mchange:mchange-commons-java (CVE-2026-55153)
vulnerability in com.mchange:mchange-commons-java (CVE-2026-55153). Successful exploitation can lead to full system takeover. Exploitable via ``ObjectFactory``. Mitigation: upgrade to `0.6.0` or later.
CVE-2026-44935 Authorization Flaw in github.com/rancher/fleet (CVE-2026-44935)
vulnerability in github.com/rancher/fleet (CVE-2026-44935). Successful exploitation can lead to full system takeover. Exploitable via ``HelmOp``. Mitigation: upgrade to `0.12.15` or later.
CVE-2026-44936 SSRF (Server-Side Request Forgery) in github.com/rancher/fleet (CVE-2026-44936)
SSRF in github.com/rancher/fleet (CVE-2026-44936). Risk of unauthorized operations or information disclosure. Exploitable via ``helmRepoURLRegex``. Mitigation: upgrade to `0.12.15` or later.
CVE-2026-44937 Vulnerability in github.com/rancher/fleet (CVE-2026-44937)
vulnerability in github.com/rancher/fleet (CVE-2026-44937). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.12.15` or later.
CVE-2026-14265 Unsafe Deserialization in Amazon aws (CVE-2026-14265)
vulnerability in Amazon aws (CVE-2026-14265). Successful exploitation can lead to full system takeover.
CVE-2026-55688 Vulnerability in org.asynchttpclient:async-http-client (CVE-2026-55688)
vulnerability in org.asynchttpclient:async-http-client (CVE-2026-55688). Risk of unauthorized operations or information disclosure. Exploitable via ``ThreadSafeCookieStore``. Mitigation: upgrade to `3.0.11` or later.
CVE-2026-54164 Vulnerability in api-platform/core (CVE-2026-54164)
vulnerability in api-platform/core (CVE-2026-54164). Data can be tampered with by attackers. Exploitable via ``AbstractItemNormalizer``. Mitigation: upgrade to `4.3.12` or later.
CVE-2026-55594 Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-55594)
vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-55594). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.15.0` or later.
CVE-2026-55595 Vulnerability in imagemagick (CVE-2026-55595)
vulnerability in imagemagick (CVE-2026-55595). Risk of unauthorized operations or information disclosure.
CVE-2026-55597 Vulnerability in imagemagick (CVE-2026-55597)
vulnerability in imagemagick (CVE-2026-55597). Risk of unauthorized operations or information disclosure.
CVE-2026-53466 Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-53466)
vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-53466). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.15.0` or later.
CVE-2026-53467 Information Disclosure in Magick.NET-Q16-AnyCPU (CVE-2026-53467)
vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-53467). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.15.0` or later.
CVE-2026-55510 Use-After-Free in Magick.NET-Q16-AnyCPU (CVE-2026-55510)
vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-55510). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.15.0` or later.
CVE-2026-55577 Vulnerability in imagemagick (CVE-2026-55577)
vulnerability in imagemagick (CVE-2026-55577). Risk of unauthorized operations or information disclosure.
CVE-2026-49981 Vulnerability in twig/twig (CVE-2026-49981)
vulnerability in twig/twig (CVE-2026-49981). Confidential information can be exposed externally. Exploitable via ``Template``. Mitigation: upgrade to `3.27.0` or later.
CVE-2026-54428 Vulnerability in org.apache.httpcomponents.core5:httpcore5-h2 (CVE-2026-54428)
vulnerability in org.apache.httpcomponents.core5:httpcore5-h2 (CVE-2026-54428). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.5-beta2` or later.
CVE-2026-49090 Vulnerability in elasticsearch (CVE-2026-49090)
vulnerability in elasticsearch (CVE-2026-49090). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.17.24, 8.15.0` or later.
CVE-2026-49091 Vulnerability in elastic (CVE-2026-49091)
vulnerability in elastic (CVE-2026-49091). Successful exploitation can lead to full system takeover.
CVE-2026-54399 Vulnerability in org.apache.httpcomponents.core5:httpcore5 (CVE-2026-54399)
vulnerability in org.apache.httpcomponents.core5:httpcore5 (CVE-2026-54399). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.5-beta2` or later.
CVE-2026-56148 Vulnerability in elasticsearch (CVE-2026-56148)
vulnerability in elasticsearch (CVE-2026-56148). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.17, 9.3.6, 9.4.3` or later.
CVE-2026-56149 Vulnerability in elasticsearch (CVE-2026-56149)
vulnerability in elasticsearch (CVE-2026-56149). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.17, 9.3.6, 9.4.3` or later.
CVE-2026-56150 Vulnerability in dos (CVE-2026-56150)
vulnerability in dos (CVE-2026-56150). Risk of unauthorized operations or information disclosure.
CVE-2026-56152 Authorization Flaw in elastic (CVE-2026-56152)
vulnerability in elastic (CVE-2026-56152). Confidential information can be exposed externally.
CVE-2026-56151 Vulnerability in dos (CVE-2026-56151)
vulnerability in dos (CVE-2026-56151). Risk of unauthorized operations or information disclosure.
CVE-2026-49087 Vulnerability in dos (CVE-2026-49087)
vulnerability in dos (CVE-2026-49087). Risk of unauthorized operations or information disclosure.
CVE-2026-49088 Vulnerability in elastic (CVE-2026-49088)
vulnerability in elastic (CVE-2026-49088). Confidential information can be exposed externally.
CVE-2026-34112 OS Command Injection in CVE-2026-34112 (CVE-2026-34112)
OS command injection in CVE-2026-34112 (CVE-2026-34112). Successful exploitation can lead to full system takeover.
CVE-2026-34114 OS Command Injection in CVE-2026-34114 (CVE-2026-34114)
OS command injection in CVE-2026-34114 (CVE-2026-34114). Successful exploitation can lead to full system takeover.
CVE-2026-34117 OS Command Injection in CVE-2026-34117 (CVE-2026-34117)
OS command injection in CVE-2026-34117 (CVE-2026-34117). Successful exploitation can lead to full system takeover.
CVE-2026-34110 OS Command Injection in CVE-2026-34110 (CVE-2026-34110)
OS command injection in CVE-2026-34110 (CVE-2026-34110). Successful exploitation can lead to full system takeover.
CVE-2026-34113 OS Command Injection in CVE-2026-34113 (CVE-2026-34113)
OS command injection in CVE-2026-34113 (CVE-2026-34113). Successful exploitation can lead to full system takeover.
CVE-2026-34108 OS Command Injection in CVE-2026-34108 (CVE-2026-34108)
OS command injection in CVE-2026-34108 (CVE-2026-34108). Successful exploitation can lead to full system takeover.
CVE-2026-34111 OS Command Injection in CVE-2026-34111 (CVE-2026-34111)
OS command injection in CVE-2026-34111 (CVE-2026-34111). Successful exploitation can lead to full system takeover.
CVE-2026-34116 OS Command Injection in CVE-2026-34116 (CVE-2026-34116)
OS command injection in CVE-2026-34116 (CVE-2026-34116). Successful exploitation can lead to full system takeover.
CVE-2026-34115 OS Command Injection in CVE-2026-34115 (CVE-2026-34115)
OS command injection in CVE-2026-34115 (CVE-2026-34115). Successful exploitation can lead to full system takeover.
CVE-2026-34104 SQL Injection in sqli (CVE-2026-34104)
SQL injection in sqli (CVE-2026-34104). Successful exploitation can lead to full system takeover.
CVE-2026-34103 SQL Injection in sqli (CVE-2026-34103)
SQL injection in sqli (CVE-2026-34103). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →