Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-42358 Information Disclosure in airflow (CVE-2026-42358)
vulnerability in airflow (CVE-2026-42358). Confidential information can be exposed externally. Exploitable via ``password``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-45360 Unsafe Deserialization in apache-airflow (CVE-2026-45360)
vulnerability in apache-airflow (CVE-2026-45360). Risk of unauthorized operations or information disclosure. Exploitable via ``DeadlineReference``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-42359 Unsafe Deserialization in apache-airflow (CVE-2026-42359)
vulnerability in apache-airflow (CVE-2026-42359). Successful exploitation can lead to full system takeover. Exploitable via `PATCH /api/v2/xcomEntries/{key}`. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-45426 Authorization Flaw in apache-airflow (CVE-2026-45426)
vulnerability in apache-airflow (CVE-2026-45426). Risk of unauthorized operations or information disclosure. Exploitable via ``sub``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-42588 Vulnerability in activemq (CVE-2026-42588)
vulnerability in activemq (CVE-2026-42588). Confidential information can be exposed externally. Mitigation: upgrade to `5.19.7, 6.2.6` or later.
CVE-2026-41084 Vulnerability in apache-airflow (CVE-2026-41084)
vulnerability in apache-airflow (CVE-2026-41084). Data can be tampered with by attackers. Exploitable via `DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances`. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-42360 Information Disclosure in apache-airflow (CVE-2026-42360)
vulnerability in apache-airflow (CVE-2026-42360). Confidential information can be exposed externally. Exploitable via ``password``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-45505 Vulnerability in activemq (CVE-2026-45505)
vulnerability in activemq (CVE-2026-45505). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.19.7, 6.2.6` or later.
CVE-2026-40963 Vulnerability in airflow (CVE-2026-40963)
vulnerability in airflow (CVE-2026-40963). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-40861 Vulnerability in apache-airflow (CVE-2026-40861)
vulnerability in apache-airflow (CVE-2026-40861). Confidential information can be exposed externally. Exploitable via ``airflow.cfg``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-40961 Open Redirect in airflow (CVE-2026-40961)
vulnerability in airflow (CVE-2026-40961). Risk of unauthorized operations or information disclosure. Exploitable via ``is_safe_url``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-41014 Vulnerability in apache-airflow (CVE-2026-41014)
vulnerability in apache-airflow (CVE-2026-41014). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-41017 Vulnerability in apache-airflow (CVE-2026-41017)
vulnerability in apache-airflow (CVE-2026-41017). Confidential information can be exposed externally. Exploitable via ``JWTRefreshMiddleware``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-40548 Unrestricted File Upload in path-traversal (CVE-2026-40548)
vulnerability in path-traversal (CVE-2026-40548). Risk of unauthorized operations or information disclosure.
CVE-2026-10236 Vulnerability in CVE-2026-10236 (CVE-2026-10236)
vulnerability in CVE-2026-10236 (CVE-2026-10236). Risk of unauthorized operations or information disclosure.
CVE-2026-10242 Vulnerability in sqli (CVE-2026-10242)
vulnerability in sqli (CVE-2026-10242). Risk of unauthorized operations or information disclosure.
CVE-2026-10235 Vulnerability in sqli (CVE-2026-10235)
vulnerability in sqli (CVE-2026-10235). Risk of unauthorized operations or information disclosure.
CVE-2026-35563 Vulnerability in org.apache.directory.api:api-ldap-client-api (CVE-2026-35563)
vulnerability in org.apache.directory.api:api-ldap-client-api (CVE-2026-35563). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.8` or later.
CVE-2026-45192 Information Disclosure in apache-airflow (CVE-2026-45192)
vulnerability in apache-airflow (CVE-2026-45192). Confidential information can be exposed externally. Exploitable via ``extra``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-10228 Cross-Site Scripting (XSS) in CVE-2026-10228 (CVE-2026-10228)
cross-site scripting in CVE-2026-10228 (CVE-2026-10228). Risk of unauthorized operations or information disclosure.
CVE-2026-10227 Vulnerability in sqli (CVE-2026-10227)
vulnerability in sqli (CVE-2026-10227). Risk of unauthorized operations or information disclosure.
CVE-2026-10225 Vulnerability in sqli (CVE-2026-10225)
vulnerability in sqli (CVE-2026-10225). Risk of unauthorized operations or information disclosure.
CVE-2026-10226 Vulnerability in sqli (CVE-2026-10226)
vulnerability in sqli (CVE-2026-10226). Risk of unauthorized operations or information disclosure.
CVE-2026-20454 Vulnerability in mediatek (CVE-2026-20454)
vulnerability in mediatek (CVE-2026-20454). Successful exploitation can lead to full system takeover.
CVE-2026-20455 Out-of-Bounds Write in mediatek (CVE-2026-20455)
out-of-bounds write in mediatek (CVE-2026-20455). Successful exploitation can lead to full system takeover.
CVE-2026-20456 Out-of-Bounds Write in dos (CVE-2026-20456)
out-of-bounds write in dos (CVE-2026-20456). Risk of unauthorized operations or information disclosure.
CVE-2026-20452 Vulnerability in mediatek (CVE-2026-20452)
vulnerability in mediatek (CVE-2026-20452). Successful exploitation can lead to full system takeover.
CVE-2026-20453 Out-of-Bounds Write in mediatek (CVE-2026-20453)
out-of-bounds write in mediatek (CVE-2026-20453). Successful exploitation can lead to full system takeover.
CVE-2026-10209 Vulnerability in sqli (CVE-2026-10209)
vulnerability in sqli (CVE-2026-10209). Risk of unauthorized operations or information disclosure.
CVE-2026-10215 Vulnerability in dolibarr/dolibarr (CVE-2026-10215)
vulnerability in dolibarr/dolibarr (CVE-2026-10215). Risk of unauthorized operations or information disclosure.
CVE-2026-10208 Vulnerability in sqli (CVE-2026-10208)
vulnerability in sqli (CVE-2026-10208). Risk of unauthorized operations or information disclosure.
CVE-2026-10202 Vulnerability in sqli (CVE-2026-10202)
vulnerability in sqli (CVE-2026-10202). Risk of unauthorized operations or information disclosure.
CVE-2026-10204 Vulnerability in sqli (CVE-2026-10204)
vulnerability in sqli (CVE-2026-10204). Risk of unauthorized operations or information disclosure.
CVE-2026-10203 Vulnerability in sqli (CVE-2026-10203)
vulnerability in sqli (CVE-2026-10203). Risk of unauthorized operations or information disclosure.
CVE-2024-21182 KEV Oracle WebLogic Server — Oracle WebLogic Server Unspecified Vulnerability
Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.
CVE-2026-10193 Vulnerability in sqli (CVE-2026-10193)
vulnerability in sqli (CVE-2026-10193). Risk of unauthorized operations or information disclosure.
CVE-2026-10192 A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function...
A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function...
CVE-2026-10189 A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the...
A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the...
CVE-2026-10191 A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function...
A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function...
CVE-2026-10186 Vulnerability in sqli (CVE-2026-10186)
vulnerability in sqli (CVE-2026-10186). Risk of unauthorized operations or information disclosure.
CVE-2026-10184 Vulnerability in sqli (CVE-2026-10184)
vulnerability in sqli (CVE-2026-10184). Risk of unauthorized operations or information disclosure.
CVE-2026-10185 Vulnerability in sqli (CVE-2026-10185)
vulnerability in sqli (CVE-2026-10185). Risk of unauthorized operations or information disclosure.
CVE-2026-49489 SQL Injection in sqli (CVE-2026-49489)
SQL injection in sqli (CVE-2026-49489). Confidential information can be exposed externally.
CVE-2026-10178 Vulnerability in sqli (CVE-2026-10178)
vulnerability in sqli (CVE-2026-10178). Risk of unauthorized operations or information disclosure.
CVE-2026-10172 Vulnerability in CVE-2026-10172 (CVE-2026-10172)
vulnerability in CVE-2026-10172 (CVE-2026-10172). Risk of unauthorized operations or information disclosure.
CVE-2026-10171 Vulnerability in sqli (CVE-2026-10171)
vulnerability in sqli (CVE-2026-10171). Risk of unauthorized operations or information disclosure.
CVE-2026-10170 Vulnerability in sqli (CVE-2026-10170)
vulnerability in sqli (CVE-2026-10170). Risk of unauthorized operations or information disclosure.
CVE-2026-10168 Vulnerability in CVE-2026-10168 (CVE-2026-10168)
vulnerability in CVE-2026-10168 (CVE-2026-10168). Risk of unauthorized operations or information disclosure.
CVE-2026-10169 Vulnerability in CVE-2026-10169 (CVE-2026-10169)
vulnerability in CVE-2026-10169 (CVE-2026-10169). Risk of unauthorized operations or information disclosure.
CVE-2026-10167 Authentication Bypass in CVE-2026-10167 (CVE-2026-10167)
authentication bypass in CVE-2026-10167 (CVE-2026-10167). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →