Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-31709 |
|
Vulnerability in linux (CVE-2026-31709)
vulnerability in linux (CVE-2026-31709). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31707 |
|
Out-of-Bounds Write in c (CVE-2026-31707)
out-of-bounds write in c (CVE-2026-31707). Confidential information can be exposed externally.
|
| CVE-2026-31701 |
|
Vulnerability in linux (CVE-2026-31701)
vulnerability in linux (CVE-2026-31701). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31702 |
|
Use-After-Free in c (CVE-2026-31702)
vulnerability in c (CVE-2026-31702). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31704 |
|
Vulnerability in c (CVE-2026-31704)
vulnerability in c (CVE-2026-31704). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31705 |
|
Out-of-Bounds Write in linux (CVE-2026-31705)
out-of-bounds write in linux (CVE-2026-31705). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31708 |
|
Out-of-Bounds Read in linux (CVE-2026-31708)
vulnerability in linux (CVE-2026-31708). Confidential information can be exposed externally.
|
| CVE-2026-31703 |
|
Use-After-Free in linux (CVE-2026-31703)
vulnerability in linux (CVE-2026-31703). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31694 |
|
Vulnerability in linux (CVE-2026-31694)
vulnerability in linux (CVE-2026-31694). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31696 |
|
Out-of-Bounds Write in c (CVE-2026-31696)
out-of-bounds write in c (CVE-2026-31696). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31697 |
|
Out-of-Bounds Write in c (CVE-2026-31697)
out-of-bounds write in c (CVE-2026-31697). Confidential information can be exposed externally.
|
| CVE-2026-31698 |
|
Out-of-Bounds Write in c (CVE-2026-31698)
out-of-bounds write in c (CVE-2026-31698). Confidential information can be exposed externally.
|
| CVE-2026-31699 |
|
Out-of-Bounds Write in c (CVE-2026-31699)
out-of-bounds write in c (CVE-2026-31699). Confidential information can be exposed externally.
|
| CVE-2026-31700 |
|
Vulnerability in c (CVE-2026-31700)
vulnerability in c (CVE-2026-31700). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31431 KEV |
|
[KEV] Vulnerability in Linux redhat (CVE-2026-31431)
vulnerability in Linux redhat (CVE-2026-31431). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-6543 |
|
Code Injection in langflow (CVE-2026-6543)
code injection in langflow (CVE-2026-6543). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3345 |
|
Path Traversal in langflow (CVE-2026-3345)
path traversal in langflow (CVE-2026-3345). Confidential information can be exposed externally.
|
| CVE-2026-1577 |
|
Vulnerability in dos (CVE-2026-1577)
vulnerability in dos (CVE-2026-1577). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-36180 |
|
Vulnerability in ibm (CVE-2025-36180)
vulnerability in ibm (CVE-2025-36180). Data can be tampered with by attackers.
|
| CVE-2025-36335 |
|
Vulnerability in ibm (CVE-2025-36335)
vulnerability in ibm (CVE-2025-36335). Confidential information can be exposed externally.
|
| CVE-2026-4502 |
|
Path Traversal in langflow (CVE-2026-4502)
path traversal in langflow (CVE-2026-4502). Data can be tampered with by attackers.
|
| CVE-2026-4503 |
|
Vulnerability in langflow (CVE-2026-4503)
vulnerability in langflow (CVE-2026-4503). Confidential information can be exposed externally.
|
| CVE-2026-3340 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-3340)
SSRF in ssrf (CVE-2026-3340). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3346 |
|
SQL Injection in langflow (CVE-2026-3346)
SQL injection in langflow (CVE-2026-3346). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3832 |
|
Vulnerability in gnu (CVE-2026-3832)
vulnerability in gnu (CVE-2026-3832). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3833 |
|
Vulnerability in gnu (CVE-2026-3833)
vulnerability in gnu (CVE-2026-3833). Risk of unauthorized operations or information disclosure. Exploitable via ``nameConstraints``.
|
| CVE-2026-33845 |
|
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero...
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero...
|
| CVE-2026-41940 KEV |
|
[KEV] Vulnerability in Webpros cpanel-whm-and-wp2-wordpress-squared (CVE-2026-41940)
vulnerability in Webpros cpanel-whm-and-wp2-wordpress-squared (CVE-2026-41940). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-44015 |
|
SSRF (Server-Side Request Forgery) in github.com/0xJacky/Nginx-UI (CVE-2026-44015)
SSRF in github.com/0xJacky/Nginx-UI (CVE-2026-44015). Confidential information can be exposed externally. Exploitable via `GET /api/settings`.
|
| CVE-2026-5141 |
|
Improper Privilege Management, Improper Access Control, Incorrect privilege assignment...
Improper Privilege Management, Improper Access Control, Incorrect privilege assignment...
|
| CVE-2026-42249 |
|
Path Traversal in path-traversal (CVE-2026-42249)
path traversal in path-traversal (CVE-2026-42249). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42248 |
|
Vulnerability in ollama (CVE-2026-42248)
vulnerability in ollama (CVE-2026-42248). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7355 |
|
Use after free in Media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
Use after free in Media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
|
| CVE-2026-7356 |
|
Use after free in Navigation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Use after free in Navigation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
|
| CVE-2026-7357 |
|
Use-After-Free in google (CVE-2026-7357)
vulnerability in google (CVE-2026-7357). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7358 |
|
Use after free in Animation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Animation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
|
| CVE-2026-7359 |
|
Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Ch...
Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
|
| CVE-2026-7360 |
|
Vulnerability in google (CVE-2026-7360)
vulnerability in google (CVE-2026-7360). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7361 |
|
Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
|
| CVE-2026-7345 |
|
Vulnerability in google (CVE-2026-7345)
vulnerability in google (CVE-2026-7345). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7346 |
|
Buffer Overflow in google (CVE-2026-7346)
vulnerability in google (CVE-2026-7346). Confidential information can be exposed externally.
|
| CVE-2026-7347 |
|
Use-After-Free in google (CVE-2026-7347)
vulnerability in google (CVE-2026-7347). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7348 |
|
Use after free in Codecs in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Codecs in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
|
| CVE-2026-7349 |
|
Use-After-Free in google (CVE-2026-7349)
vulnerability in google (CVE-2026-7349). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7350 |
|
Use-After-Free in google (CVE-2026-7350)
vulnerability in google (CVE-2026-7350). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7351 |
|
Vulnerability in google (CVE-2026-7351)
vulnerability in google (CVE-2026-7351). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7352 |
|
Use-After-Free in google (CVE-2026-7352)
vulnerability in google (CVE-2026-7352). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7353 |
|
Vulnerability in google (CVE-2026-7353)
vulnerability in google (CVE-2026-7353). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7354 |
|
Out of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: H...
Out of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
|
| CVE-2026-7335 |
|
Use after free in media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
|