Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-42358 |
|
Information Disclosure in airflow (CVE-2026-42358)
vulnerability in airflow (CVE-2026-42358). Confidential information can be exposed externally. Exploitable via ``password``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-45360 |
|
Unsafe Deserialization in apache-airflow (CVE-2026-45360)
vulnerability in apache-airflow (CVE-2026-45360). Risk of unauthorized operations or information disclosure. Exploitable via ``DeadlineReference``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-42359 |
|
Unsafe Deserialization in apache-airflow (CVE-2026-42359)
vulnerability in apache-airflow (CVE-2026-42359). Successful exploitation can lead to full system takeover. Exploitable via `PATCH /api/v2/xcomEntries/{key}`. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-45426 |
|
Authorization Flaw in apache-airflow (CVE-2026-45426)
vulnerability in apache-airflow (CVE-2026-45426). Risk of unauthorized operations or information disclosure. Exploitable via ``sub``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-42588 |
|
Vulnerability in activemq (CVE-2026-42588)
vulnerability in activemq (CVE-2026-42588). Confidential information can be exposed externally. Mitigation: upgrade to `5.19.7, 6.2.6` or later.
|
| CVE-2026-41084 |
|
Vulnerability in apache-airflow (CVE-2026-41084)
vulnerability in apache-airflow (CVE-2026-41084). Data can be tampered with by attackers. Exploitable via `DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances`. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-42360 |
|
Information Disclosure in apache-airflow (CVE-2026-42360)
vulnerability in apache-airflow (CVE-2026-42360). Confidential information can be exposed externally. Exploitable via ``password``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-45505 |
|
Vulnerability in activemq (CVE-2026-45505)
vulnerability in activemq (CVE-2026-45505). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.19.7, 6.2.6` or later.
|
| CVE-2026-40963 |
|
Vulnerability in airflow (CVE-2026-40963)
vulnerability in airflow (CVE-2026-40963). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-40861 |
|
Vulnerability in apache-airflow (CVE-2026-40861)
vulnerability in apache-airflow (CVE-2026-40861). Confidential information can be exposed externally. Exploitable via ``airflow.cfg``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-40961 |
|
Open Redirect in airflow (CVE-2026-40961)
vulnerability in airflow (CVE-2026-40961). Risk of unauthorized operations or information disclosure. Exploitable via ``is_safe_url``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-41014 |
|
Vulnerability in apache-airflow (CVE-2026-41014)
vulnerability in apache-airflow (CVE-2026-41014). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-41017 |
|
Vulnerability in apache-airflow (CVE-2026-41017)
vulnerability in apache-airflow (CVE-2026-41017). Confidential information can be exposed externally. Exploitable via ``JWTRefreshMiddleware``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-40548 |
|
Unrestricted File Upload in path-traversal (CVE-2026-40548)
vulnerability in path-traversal (CVE-2026-40548). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10236 |
|
Vulnerability in CVE-2026-10236 (CVE-2026-10236)
vulnerability in CVE-2026-10236 (CVE-2026-10236). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10242 |
|
Vulnerability in sqli (CVE-2026-10242)
vulnerability in sqli (CVE-2026-10242). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10235 |
|
Vulnerability in sqli (CVE-2026-10235)
vulnerability in sqli (CVE-2026-10235). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35563 |
|
Vulnerability in org.apache.directory.api:api-ldap-client-api (CVE-2026-35563)
vulnerability in org.apache.directory.api:api-ldap-client-api (CVE-2026-35563). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.8` or later.
|
| CVE-2026-45192 |
|
Information Disclosure in apache-airflow (CVE-2026-45192)
vulnerability in apache-airflow (CVE-2026-45192). Confidential information can be exposed externally. Exploitable via ``extra``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-10228 |
|
Cross-Site Scripting (XSS) in CVE-2026-10228 (CVE-2026-10228)
cross-site scripting in CVE-2026-10228 (CVE-2026-10228). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10227 |
|
Vulnerability in sqli (CVE-2026-10227)
vulnerability in sqli (CVE-2026-10227). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10225 |
|
Vulnerability in sqli (CVE-2026-10225)
vulnerability in sqli (CVE-2026-10225). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10226 |
|
Vulnerability in sqli (CVE-2026-10226)
vulnerability in sqli (CVE-2026-10226). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20454 |
|
Vulnerability in mediatek (CVE-2026-20454)
vulnerability in mediatek (CVE-2026-20454). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20455 |
|
Out-of-Bounds Write in mediatek (CVE-2026-20455)
out-of-bounds write in mediatek (CVE-2026-20455). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20456 |
|
Out-of-Bounds Write in dos (CVE-2026-20456)
out-of-bounds write in dos (CVE-2026-20456). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20452 |
|
Vulnerability in mediatek (CVE-2026-20452)
vulnerability in mediatek (CVE-2026-20452). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20453 |
|
Out-of-Bounds Write in mediatek (CVE-2026-20453)
out-of-bounds write in mediatek (CVE-2026-20453). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10209 |
|
Vulnerability in sqli (CVE-2026-10209)
vulnerability in sqli (CVE-2026-10209). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10215 |
|
Vulnerability in dolibarr/dolibarr (CVE-2026-10215)
vulnerability in dolibarr/dolibarr (CVE-2026-10215). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10208 |
|
Vulnerability in sqli (CVE-2026-10208)
vulnerability in sqli (CVE-2026-10208). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10202 |
|
Vulnerability in sqli (CVE-2026-10202)
vulnerability in sqli (CVE-2026-10202). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10204 |
|
Vulnerability in sqli (CVE-2026-10204)
vulnerability in sqli (CVE-2026-10204). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10203 |
|
Vulnerability in sqli (CVE-2026-10203)
vulnerability in sqli (CVE-2026-10203). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-21182 KEV |
|
Oracle WebLogic Server — Oracle WebLogic Server Unspecified Vulnerability
Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.
|
| CVE-2026-10193 |
|
Vulnerability in sqli (CVE-2026-10193)
vulnerability in sqli (CVE-2026-10193). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10192 |
|
A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function...
A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function...
|
| CVE-2026-10189 |
|
A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the...
A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the...
|
| CVE-2026-10191 |
|
A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function...
A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function...
|
| CVE-2026-10186 |
|
Vulnerability in sqli (CVE-2026-10186)
vulnerability in sqli (CVE-2026-10186). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10184 |
|
Vulnerability in sqli (CVE-2026-10184)
vulnerability in sqli (CVE-2026-10184). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10185 |
|
Vulnerability in sqli (CVE-2026-10185)
vulnerability in sqli (CVE-2026-10185). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49489 |
|
SQL Injection in sqli (CVE-2026-49489)
SQL injection in sqli (CVE-2026-49489). Confidential information can be exposed externally.
|
| CVE-2026-10178 |
|
Vulnerability in sqli (CVE-2026-10178)
vulnerability in sqli (CVE-2026-10178). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10172 |
|
Vulnerability in CVE-2026-10172 (CVE-2026-10172)
vulnerability in CVE-2026-10172 (CVE-2026-10172). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10171 |
|
Vulnerability in sqli (CVE-2026-10171)
vulnerability in sqli (CVE-2026-10171). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10170 |
|
Vulnerability in sqli (CVE-2026-10170)
vulnerability in sqli (CVE-2026-10170). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10168 |
|
Vulnerability in CVE-2026-10168 (CVE-2026-10168)
vulnerability in CVE-2026-10168 (CVE-2026-10168). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10169 |
|
Vulnerability in CVE-2026-10169 (CVE-2026-10169)
vulnerability in CVE-2026-10169 (CVE-2026-10169). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10167 |
|
Authentication Bypass in CVE-2026-10167 (CVE-2026-10167)
authentication bypass in CVE-2026-10167 (CVE-2026-10167). Risk of unauthorized operations or information disclosure.
|