Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2024-20432 |
|
Vulnerability in cisco (CVE-2024-20432)
vulnerability in cisco (CVE-2024-20432). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20114 |
|
Vulnerability in cisco (CVE-2026-20114)
vulnerability in cisco (CVE-2026-20114). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20113 |
|
Vulnerability in cisco (CVE-2026-20113)
vulnerability in cisco (CVE-2026-20113). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20112 |
|
Vulnerability in cisco (CVE-2026-20112)
vulnerability in cisco (CVE-2026-20112). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20084 |
|
Vulnerability in cisco (CVE-2026-20084)
vulnerability in cisco (CVE-2026-20084). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20125 |
|
Vulnerability in cisco (CVE-2026-20125)
vulnerability in cisco (CVE-2026-20125). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20012 |
|
Vulnerability in cisco (CVE-2026-20012)
vulnerability in cisco (CVE-2026-20012). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20108 |
|
Cross-Site Scripting (XSS) in Cisco catalyst-sd-wan-manager (CVE-2026-20108)
cross-site scripting in Cisco catalyst-sd-wan-manager (CVE-2026-20108). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20188 |
|
Vulnerability in Cisco dos (CVE-2026-20188)
vulnerability in Cisco dos (CVE-2026-20188). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20185 |
|
Vulnerability in cisco (CVE-2026-20185)
vulnerability in cisco (CVE-2026-20185). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-20204 |
|
Cross-Site Scripting (XSS) in Cisco identity-services-engine (CVE-2025-20204)
cross-site scripting in Cisco identity-services-engine (CVE-2025-20204). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20147 |
|
Command Injection in Cisco dos (CVE-2026-20147)
command injection in Cisco dos (CVE-2026-20147). Successful exploitation can lead to full system takeover.
|
| CVE-2023-20185 |
|
Vulnerability in cisco (CVE-2023-20185)
vulnerability in cisco (CVE-2023-20185). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20085 |
|
Cross-Site Scripting (XSS) in Cisco enterprise-nfv-infrastructure-software (CVE-2026-20085)
cross-site scripting in Cisco enterprise-nfv-infrastructure-software (CVE-2026-20085). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20094 |
|
Command Injection in Cisco unified-computing-system (CVE-2026-20094)
command injection in Cisco unified-computing-system (CVE-2026-20094). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20184 |
|
Vulnerability in cisco (CVE-2026-20184)
vulnerability in cisco (CVE-2026-20184). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20152 |
|
Vulnerability in cisco (CVE-2026-20152)
vulnerability in cisco (CVE-2026-20152). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20180 |
|
Path Traversal in Cisco dos (CVE-2026-20180)
path traversal in Cisco dos (CVE-2026-20180). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20136 |
|
Vulnerability in Cisco identity-services-engine (CVE-2026-20136)
vulnerability in Cisco identity-services-engine (CVE-2026-20136). Confidential information can be exposed externally.
|
| CVE-2026-20132 |
|
Cross-Site Scripting (XSS) in Cisco identity-services-engine (CVE-2026-20132)
cross-site scripting in Cisco identity-services-engine (CVE-2026-20132). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20161 |
|
Vulnerability in cisco (CVE-2026-20161)
vulnerability in cisco (CVE-2026-20161). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20078 |
|
Vulnerability in cisco (CVE-2026-20078)
vulnerability in cisco (CVE-2026-20078). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20059 |
|
Vulnerability in cisco (CVE-2026-20059)
vulnerability in cisco (CVE-2026-20059). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20170 |
|
Vulnerability in Cisco webex-contact-center (CVE-2026-20170)
vulnerability in Cisco webex-contact-center (CVE-2026-20170). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20034 |
|
Vulnerability in Cisco unity-connection (CVE-2026-20034)
vulnerability in Cisco unity-connection (CVE-2026-20034). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20172 |
|
Vulnerability in cisco (CVE-2026-20172)
vulnerability in cisco (CVE-2026-20172). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20193 |
|
Vulnerability in Cisco identity-services-engine (CVE-2026-20193)
vulnerability in Cisco identity-services-engine (CVE-2026-20193). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20189 |
|
Vulnerability in Cisco prime-infrastructure (CVE-2026-20189)
vulnerability in Cisco prime-infrastructure (CVE-2026-20189). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20219 |
|
Vulnerability in cisco (CVE-2026-20219)
vulnerability in cisco (CVE-2026-20219). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20167 |
|
Vulnerability in Cisco dos (CVE-2026-20167)
vulnerability in Cisco dos (CVE-2026-20167). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6297 |
|
Use-After-Free in Google chrome (CVE-2026-6297)
vulnerability in Google chrome (CVE-2026-6297). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7363 |
|
Use-After-Free in Google chrome (CVE-2026-7363)
vulnerability in Google chrome (CVE-2026-7363). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7896 |
|
Vulnerability in Google chrome (CVE-2026-7896)
vulnerability in Google chrome (CVE-2026-7896). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6074 |
|
Vulnerability in cisa (CVE-2026-6074)
vulnerability in cisa (CVE-2026-6074). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20074 |
|
Vulnerability in Cisco dos (CVE-2026-20074)
vulnerability in Cisco dos (CVE-2026-20074). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8198 |
|
Information Disclosure in wordpress (CVE-2026-8198)
vulnerability in wordpress (CVE-2026-8198). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`.
|
| CVE-2026-8209 |
|
Vulnerability in path-traversal (CVE-2026-8209)
vulnerability in path-traversal (CVE-2026-8209). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8208 |
|
Vulnerability in CVE-2026-8208 (CVE-2026-8208)
vulnerability in CVE-2026-8208 (CVE-2026-8208). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8207 |
|
SQL Injection in sqli (CVE-2026-8207)
SQL injection in sqli (CVE-2026-8207). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7652 |
|
Vulnerability in wordpress (CVE-2026-7652)
vulnerability in wordpress (CVE-2026-7652). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41705 |
|
Vulnerability in org.springframework.ai:spring-ai-milvus-store (CVE-2026-41705)
vulnerability in org.springframework.ai:spring-ai-milvus-store (CVE-2026-41705). Confidential information can be exposed externally. Mitigation: upgrade to `1.1.6` or later.
|
| CVE-2026-44966 |
|
Vulnerability in velocityjs (CVE-2026-44966)
vulnerability in velocityjs (CVE-2026-44966). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44313 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-44313)
SSRF in ssrf (CVE-2026-44313). Confidential information can be exposed externally. Exploitable via `GET /api/v1/archives/{linkId}`.
|
| CVE-2026-44900 |
|
Vulnerability in com.oviva.telematik:epa4all-client (CVE-2026-44900)
vulnerability in com.oviva.telematik:epa4all-client (CVE-2026-44900). Confidential information can be exposed externally. Mitigation: upgrade to `1.2.1` or later.
|
| CVE-2026-44837 |
|
Vulnerability in view_component (CVE-2026-44837)
vulnerability in view_component (CVE-2026-44837). Confidential information can be exposed externally. Exploitable via `GET /_system_test_entrypoint`. Mitigation: upgrade to `4.9.0` or later.
|
| CVE-2026-44836 |
|
Vulnerability in view_component (CVE-2026-44836)
vulnerability in view_component (CVE-2026-44836). Confidential information can be exposed externally. Exploitable via `GET /rails/view_components/my_component/render_with_template`. Mitigation: upgrade to `4.9.0` or later.
|
| CVE-2026-42454 |
|
OS Command Injection in docker (CVE-2026-42454)
OS command injection in docker (CVE-2026-42454). Successful exploitation can lead to full system takeover. Exploitable via `GET /docker/containers/`.
|
| CVE-2026-42298 |
|
Code Injection in docker (CVE-2026-42298)
code injection in docker (CVE-2026-42298). Successful exploitation can lead to full system takeover. Exploitable via ``GITHUB_TOKEN``. Mitigation: upgrade to `>= 0` or later.
|
| CVE-2026-42302 |
|
Vulnerability in openai-sdk (CVE-2026-42302)
vulnerability in openai-sdk (CVE-2026-42302). Successful exploitation can lead to full system takeover. Exploitable via ``entrypoint.sh``.
|
| CVE-2026-42224 |
|
Cross-Site Scripting (XSS) in ipl/web (CVE-2026-42224)
cross-site scripting in ipl/web (CVE-2026-42224). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.10.3` or later.
|