Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2025-71337 Vulnerability in flowiseai (CVE-2025-71337)
vulnerability in flowiseai (CVE-2025-71337). Confidential information can be exposed externally.
CVE-2026-8172 Vulnerability in wordpress (CVE-2026-8172)
vulnerability in wordpress (CVE-2026-8172). Risk of unauthorized operations or information disclosure.
CVE-2026-8378 Vulnerability in wordpress (CVE-2026-8378)
vulnerability in wordpress (CVE-2026-8378). Risk of unauthorized operations or information disclosure.
CVE-2026-8379 Vulnerability in wordpress (CVE-2026-8379)
vulnerability in wordpress (CVE-2026-8379). Confidential information can be exposed externally.
CVE-2026-7842 Vulnerability in wordpress (CVE-2026-7842)
vulnerability in wordpress (CVE-2026-7842). Confidential information can be exposed externally.
CVE-2026-8163 Vulnerability in wordpress (CVE-2026-8163)
vulnerability in wordpress (CVE-2026-8163). Successful exploitation can lead to full system takeover.
CVE-2026-55654 Out-of-Bounds Read in dos (CVE-2026-55654)
vulnerability in dos (CVE-2026-55654). Risk of unauthorized operations or information disclosure.
CVE-2026-55655 Vulnerability in openbsd (CVE-2026-55655)
vulnerability in openbsd (CVE-2026-55655). Confidential information can be exposed externally.
CVE-2026-55653 Vulnerability in dos (CVE-2026-55653)
vulnerability in dos (CVE-2026-55653). Risk of unauthorized operations or information disclosure.
CVE-2026-48500 Vulnerability in filament/filament (CVE-2026-48500)
vulnerability in filament/filament (CVE-2026-48500). Risk of unauthorized operations or information disclosure. Exploitable via ``WithFileUploads``. Mitigation: upgrade to `3.3.52` or later.
CVE-2026-48505 Vulnerability in filament/filament (CVE-2026-48505)
vulnerability in filament/filament (CVE-2026-48505). Confidential information can be exposed externally. Mitigation: upgrade to `5.6.5` or later.
CVE-2026-48166 Vulnerability in filament/filament (CVE-2026-48166)
vulnerability in filament/filament (CVE-2026-48166). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.6.5` or later.
CVE-2026-48167 Cross-Site Scripting (XSS) in filament/infolists (CVE-2026-48167)
cross-site scripting in filament/infolists (CVE-2026-48167). Risk of unauthorized operations or information disclosure. Exploitable via ``ImageColumn``. Mitigation: upgrade to `5.6.5` or later.
CVE-2026-10852 Vulnerability in dos (CVE-2026-10852)
vulnerability in dos (CVE-2026-10852). Risk of unauthorized operations or information disclosure.
CVE-2026-44273 Vulnerability in dell (CVE-2026-44273)
vulnerability in dell (CVE-2026-44273). Confidential information can be exposed externally.
CVE-2026-44274 Vulnerability in dell (CVE-2026-44274)
vulnerability in dell (CVE-2026-44274). Successful exploitation can lead to full system takeover.
CVE-2026-44272 SQL Injection in sqli (CVE-2026-44272)
SQL injection in sqli (CVE-2026-44272). Successful exploitation can lead to full system takeover.
CVE-2026-44271 SQL Injection in sqli (CVE-2026-44271)
SQL injection in sqli (CVE-2026-44271). Confidential information can be exposed externally.
CVE-2026-55599 SSRF (Server-Side Request Forgery) in phpseclib/phpseclib (CVE-2026-55599)
SSRF in phpseclib/phpseclib (CVE-2026-55599). Risk of unauthorized operations or information disclosure. Exploitable via `GET /ssrf`. Mitigation: upgrade to `3.0.54` or later.
CVE-2026-44795 Vulnerability in io.spinnaker.rosco:rosco-core (CVE-2026-44795)
vulnerability in io.spinnaker.rosco:rosco-core (CVE-2026-44795). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2025.3.3` or later.
CVE-2026-33731 Vulnerability in wwbn/avideo (CVE-2026-33731)
vulnerability in wwbn/avideo (CVE-2026-33731). Data can be tampered with by attackers. Exploitable via ``users_id``. Mitigation: upgrade to `29.0` or later.
CVE-2026-33692 Vulnerability in wwbn/avideo (CVE-2026-33692)
vulnerability in wwbn/avideo (CVE-2026-33692). Confidential information can be exposed externally. Exploitable via `GET /.env`. Mitigation: upgrade to `29.0` or later.
CVE-2026-11994 Cross-Site Scripting (XSS) in CVE-2026-11994 (CVE-2026-11994)
cross-site scripting in CVE-2026-11994 (CVE-2026-11994). Risk of unauthorized operations or information disclosure.
CVE-2026-9006 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-9006)
SSRF in ssrf (CVE-2026-9006). Confidential information can be exposed externally.
CVE-2026-9071 Vulnerability in dos (CVE-2026-9071)
vulnerability in dos (CVE-2026-9071). Risk of unauthorized operations or information disclosure.
CVE-2026-9320 Vulnerability in dos (CVE-2026-9320)
vulnerability in dos (CVE-2026-9320). Risk of unauthorized operations or information disclosure.
CVE-2026-9072 Code Injection in dos (CVE-2026-9072)
code injection in dos (CVE-2026-9072). Successful exploitation can lead to full system takeover.
CVE-2026-9610 Vulnerability in ibm (CVE-2026-9610)
vulnerability in ibm (CVE-2026-9610). Risk of unauthorized operations or information disclosure.
CVE-2026-8636 Vulnerability in ibm (CVE-2026-8636)
vulnerability in ibm (CVE-2026-8636). Confidential information can be exposed externally.
CVE-2026-8858 Code Injection in dos (CVE-2026-8858)
code injection in dos (CVE-2026-8858). Successful exploitation can lead to full system takeover.
CVE-2026-8646 Vulnerability in ibm (CVE-2026-8646)
vulnerability in ibm (CVE-2026-8646). Confidential information can be exposed externally.
CVE-2026-7664 Authentication Bypass in langflow (CVE-2026-7664)
authentication bypass in langflow (CVE-2026-7664). Successful exploitation can lead to full system takeover.
CVE-2026-7253 SQL Injection in ssrf (CVE-2026-7253)
SQL injection in ssrf (CVE-2026-7253). Confidential information can be exposed externally.
CVE-2026-8059 Cross-Site Scripting (XSS) in ibm (CVE-2026-8059)
cross-site scripting in ibm (CVE-2026-8059). Risk of unauthorized operations or information disclosure.
CVE-2026-12628 Vulnerability in ibm (CVE-2026-12628)
vulnerability in ibm (CVE-2026-12628). Confidential information can be exposed externally.
CVE-2026-11372 Cross-Site Scripting (XSS) in ibm (CVE-2026-11372)
cross-site scripting in ibm (CVE-2026-11372). Risk of unauthorized operations or information disclosure.
CVE-2026-10845 Authentication Bypass in ibm (CVE-2026-10845)
authentication bypass in ibm (CVE-2026-10845). Risk of unauthorized operations or information disclosure.
CVE-2023-33854 Vulnerability in ibm (CVE-2023-33854)
vulnerability in ibm (CVE-2023-33854). Data can be tampered with by attackers.
CVE-2024-51454 Vulnerability in ibm (CVE-2024-51454)
vulnerability in ibm (CVE-2024-51454). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
CVE-2026-20055 Vulnerability in cisco (CVE-2026-20055)
vulnerability in cisco (CVE-2026-20055). Risk of unauthorized operations or information disclosure.
CVE-2026-56425 Vulnerability in csrf (CVE-2026-56425)
vulnerability in csrf (CVE-2026-56425). Successful exploitation can lead to full system takeover. Exploitable via `Referer header`.
CVE-2026-56446 Code Injection in misp-project (CVE-2026-56446)
code injection in misp-project (CVE-2026-56446). Successful exploitation can lead to full system takeover.
CVE-2026-10561 Code Injection in langflow (CVE-2026-10561)
code injection in langflow (CVE-2026-10561). Successful exploitation can lead to full system takeover.
CVE-2025-66389 Vulnerability in microsoft (CVE-2025-66389)
vulnerability in microsoft (CVE-2025-66389). Confidential information can be exposed externally.
CVE-2025-33128 Cross-Site Scripting (XSS) in ibm (CVE-2025-33128)
cross-site scripting in ibm (CVE-2025-33128). Risk of unauthorized operations or information disclosure.
CVE-2024-54178 Vulnerability in dos (CVE-2024-54178)
vulnerability in dos (CVE-2024-54178). Risk of unauthorized operations or information disclosure.
CVE-2025-2669 Vulnerability in ibm (CVE-2025-2669)
vulnerability in ibm (CVE-2025-2669). Data can be tampered with by attackers.
CVE-2025-62198 Vulnerability in apache (CVE-2025-62198)
vulnerability in apache (CVE-2025-62198). Risk of unauthorized operations or information disclosure.
CVE-2026-54665 Vulnerability in nifi (CVE-2026-54665)
vulnerability in nifi (CVE-2026-54665). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `2.10.0` or later.
CVE-2026-44911 Authorization Flaw in nifi (CVE-2026-44911)
vulnerability in nifi (CVE-2026-44911). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.10.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →