Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-31580 |
|
Use-After-Free in linux (CVE-2026-31580)
vulnerability in linux (CVE-2026-31580). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31581 |
|
Use-After-Free in c (CVE-2026-31581)
vulnerability in c (CVE-2026-31581). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31560 |
|
Vulnerability in linux (CVE-2026-31560)
vulnerability in linux (CVE-2026-31560). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31563 |
|
Vulnerability in c (CVE-2026-31563)
vulnerability in c (CVE-2026-31563). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31565 |
|
Vulnerability in linux (CVE-2026-31565)
vulnerability in linux (CVE-2026-31565). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31555 |
|
Vulnerability in c (CVE-2026-31555)
vulnerability in c (CVE-2026-31555). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31546 |
|
Vulnerability in c (CVE-2026-31546)
vulnerability in c (CVE-2026-31546). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40466 |
|
Vulnerability in org.apache.activemq:apache-activemq (CVE-2026-40466)
vulnerability in org.apache.activemq:apache-activemq (CVE-2026-40466). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.2.5` or later.
|
| CVE-2026-41044 |
|
Vulnerability in org.apache.activemq:apache-activemq (CVE-2026-41044)
vulnerability in org.apache.activemq:apache-activemq (CVE-2026-41044). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.2.5` or later.
|
| CVE-2026-5428 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5428)
cross-site scripting in wordpress (CVE-2026-5428). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5488 |
|
Vulnerability in wordpress (CVE-2026-5488)
vulnerability in wordpress (CVE-2026-5488). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33317 |
|
OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. In versions 3.13.0 through 4.10.0, mis...
OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. In versions 3.13.0 through 4.10.0, missing checks in `entry_get_attribute_value()` in `ta/pkcs11/src/object.c` can lead to out-of-bounds...
|
| CVE-2026-32952 |
|
Vulnerability in microsoft (CVE-2026-32952)
vulnerability in microsoft (CVE-2026-32952). Risk of unauthorized operations or information disclosure. Exploitable via ``ntlmssp.Negotiator``.
|
| CVE-2024-57728 KEV |
|
[KEV] Path Traversal in Simplehelp path-traversal (CVE-2024-57728)
path traversal in Simplehelp path-traversal (CVE-2024-57728). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-29635 KEV |
|
[KEV] Command Injection in D-link dir-823x (CVE-2025-29635)
command injection in D-link dir-823x (CVE-2025-29635). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-7399 KEV |
|
[KEV] Path Traversal in Samsung magicinfo-9-server (CVE-2024-7399)
path traversal in Samsung magicinfo-9-server (CVE-2024-7399). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-57726 KEV |
|
[KEV] Vulnerability in Simplehelp auth (CVE-2024-57726)
vulnerability in Simplehelp auth (CVE-2024-57726). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-6732 |
|
Vulnerability in dos (CVE-2026-6732)
vulnerability in dos (CVE-2026-6732). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41355 |
|
Vulnerability in openclaw (CVE-2026-41355)
vulnerability in openclaw (CVE-2026-41355). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6919 |
|
Use-After-Free in google (CVE-2026-6919)
vulnerability in google (CVE-2026-6919). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6920 |
|
Out-of-Bounds Read in google (CVE-2026-6920)
vulnerability in google (CVE-2026-6920). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6921 |
|
Vulnerability in google (CVE-2026-6921)
vulnerability in google (CVE-2026-6921). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31533 |
|
Use-After-Free in linux (CVE-2026-31533)
vulnerability in linux (CVE-2026-31533). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31532 |
|
Use-After-Free in linux (CVE-2026-31532)
vulnerability in linux (CVE-2026-31532). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5926 |
|
Vulnerability in ibm (CVE-2026-5926)
vulnerability in ibm (CVE-2026-5926). Confidential information can be exposed externally.
|
| CVE-2026-5935 |
|
OS Command Injection in ibm (CVE-2026-5935)
OS command injection in ibm (CVE-2026-5935). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3621 |
|
Privilege Escalation in ibm (CVE-2026-3621)
vulnerability in ibm (CVE-2026-3621). Successful exploitation can lead to full system takeover.
|
| CVE-2026-1726 |
|
Privilege Escalation in privilege-escalation (CVE-2026-1726)
vulnerability in privilege-escalation (CVE-2026-1726). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-36074 |
|
Unrestricted File Upload in ibm (CVE-2025-36074)
vulnerability in ibm (CVE-2025-36074). Data can be tampered with by attackers.
|
| CVE-2026-39987 KEV |
|
[KEV] Vulnerability in Marimo remote-attack (CVE-2026-39987)
vulnerability in Marimo remote-attack (CVE-2026-39987). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-28950 |
|
Vulnerability in apple (CVE-2026-28950)
vulnerability in apple (CVE-2026-28950). Confidential information can be exposed externally.
|
| CVE-2026-41134 |
|
Code Injection in kiota (CVE-2026-41134)
code injection in kiota (CVE-2026-41134). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.31.1` or later.
|
| CVE-2026-41459 |
|
Vulnerability in path-traversal (CVE-2026-41459)
vulnerability in path-traversal (CVE-2026-41459). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34414 |
|
Path Traversal in path-traversal (CVE-2026-34414)
path traversal in path-traversal (CVE-2026-34414). Data can be tampered with by attackers.
|
| CVE-2026-34415 |
|
Vulnerability in path-traversal (CVE-2026-34415)
vulnerability in path-traversal (CVE-2026-34415). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34413 |
|
Vulnerability in path-traversal (CVE-2026-34413)
vulnerability in path-traversal (CVE-2026-34413). Data can be tampered with by attackers.
|
| CVE-2026-32885 |
|
Path Traversal in github.com/ddev/ddev (CVE-2026-32885)
path traversal in github.com/ddev/ddev (CVE-2026-32885). Data can be tampered with by attackers. Exploitable via ``os.MkdirAll``. Mitigation: upgrade to `1.25.2` or later.
|
| CVE-2026-31499 |
|
Vulnerability in linux (CVE-2026-31499)
vulnerability in linux (CVE-2026-31499). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31502 |
|
Vulnerability in linux (CVE-2026-31502)
vulnerability in linux (CVE-2026-31502). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31474 |
|
Use-After-Free in linux (CVE-2026-31474)
vulnerability in linux (CVE-2026-31474). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31451 |
|
Vulnerability in linux (CVE-2026-31451)
vulnerability in linux (CVE-2026-31451). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31434 |
|
Vulnerability in linux (CVE-2026-31434)
vulnerability in linux (CVE-2026-31434). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31527 |
|
Use-After-Free in linux (CVE-2026-31527)
vulnerability in linux (CVE-2026-31527). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31518 |
|
Vulnerability in linux (CVE-2026-31518)
vulnerability in linux (CVE-2026-31518). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31521 |
|
Out-of-Bounds Write in linux (CVE-2026-31521)
out-of-bounds write in linux (CVE-2026-31521). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31515 |
|
Vulnerability in c (CVE-2026-31515)
vulnerability in c (CVE-2026-31515). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31511 |
|
Use-After-Free in linux (CVE-2026-31511)
vulnerability in linux (CVE-2026-31511). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31504 |
|
Use-After-Free in linux (CVE-2026-31504)
vulnerability in linux (CVE-2026-31504). Successful exploitation can lead to full system takeover. Exploitable via ``NETDEV_UP``.
|
| CVE-2026-31507 |
|
Vulnerability in linux (CVE-2026-31507)
vulnerability in linux (CVE-2026-31507). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31508 |
|
Vulnerability in linux (CVE-2026-31508)
vulnerability in linux (CVE-2026-31508). Successful exploitation can lead to full system takeover.
|