Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-31426 |
|
Use-After-Free in c (CVE-2026-31426)
vulnerability in c (CVE-2026-31426). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31427 |
|
Vulnerability in c (CVE-2026-31427)
vulnerability in c (CVE-2026-31427). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31428 |
|
Vulnerability in linux (CVE-2026-31428)
vulnerability in linux (CVE-2026-31428). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31420 |
|
Vulnerability in linux (CVE-2026-31420)
vulnerability in linux (CVE-2026-31420). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31421 |
|
Vulnerability in c (CVE-2026-31421)
vulnerability in c (CVE-2026-31421). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31422 |
|
Vulnerability in c (CVE-2026-31422)
vulnerability in c (CVE-2026-31422). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31417 |
|
Vulnerability in linux (CVE-2026-31417)
vulnerability in linux (CVE-2026-31417). Risk of unauthorized operations or information disclosure. Exploitable via ``x25_sock.fraglen``.
|
| CVE-2026-31418 |
|
Vulnerability in linux (CVE-2026-31418)
vulnerability in linux (CVE-2026-31418). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31419 |
|
Use-After-Free in c (CVE-2026-31419)
vulnerability in c (CVE-2026-31419). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31414 |
|
Vulnerability in linux (CVE-2026-31414)
vulnerability in linux (CVE-2026-31414). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31415 |
|
Vulnerability in c (CVE-2026-31415)
vulnerability in c (CVE-2026-31415). Risk of unauthorized operations or information disclosure. Exploitable via ``__u16``.
|
| CVE-2026-31416 |
|
Vulnerability in linux (CVE-2026-31416)
vulnerability in linux (CVE-2026-31416). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-36874 |
|
SQL Injection in sqli (CVE-2026-36874)
SQL injection in sqli (CVE-2026-36874). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39414 |
|
Vulnerability in minio (CVE-2026-39414)
vulnerability in minio (CVE-2026-39414). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.04.10` or later.
|
| CVE-2026-0233 |
|
Vulnerability in paloaltonetworks (CVE-2026-0233)
vulnerability in paloaltonetworks (CVE-2026-0233). Successful exploitation can lead to full system takeover.
|
| CVE-2026-0232 |
|
Vulnerability in paloaltonetworks (CVE-2026-0232)
vulnerability in paloaltonetworks (CVE-2026-0232). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40447 |
|
Vulnerability in samsung (CVE-2026-40447)
vulnerability in samsung (CVE-2026-40447). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40446 |
|
Vulnerability in samsung (CVE-2026-40446)
vulnerability in samsung (CVE-2026-40446). Data can be tampered with by attackers.
|
| CVE-2026-25204 |
|
Unsafe Deserialization in dos (CVE-2026-25204)
vulnerability in dos (CVE-2026-25204). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-21643 KEV |
|
[KEV] SQL Injection in Fortinet forticlient-ems (CVE-2026-21643)
SQL injection in Fortinet forticlient-ems (CVE-2026-21643). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2020-9715 KEV |
|
[KEV] Use-After-Free in Adobe acrobat (CVE-2020-9715)
vulnerability in Adobe acrobat (CVE-2020-9715). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-34621 KEV |
|
[KEV] Vulnerability in Adobe acrobat-and-reader (CVE-2026-34621)
vulnerability in Adobe acrobat-and-reader (CVE-2026-34621). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2012-1854 KEV |
|
[KEV] Vulnerability in Microsoft visual-basic-for-applications-vba (CVE-2012-1854)
vulnerability in Microsoft visual-basic-for-applications-vba (CVE-2012-1854). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-60710 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2025-60710)
vulnerability in Microsoft windows (CVE-2025-60710). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-21529 KEV |
|
[KEV] Unsafe Deserialization in Microsoft exchange-server (CVE-2023-21529)
vulnerability in Microsoft exchange-server (CVE-2023-21529). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-36424 KEV |
|
[KEV] Out-of-Bounds Read in Microsoft windows (CVE-2023-36424)
vulnerability in Microsoft windows (CVE-2023-36424). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-31413 |
|
Out-of-Bounds Read in linux (CVE-2026-31413)
vulnerability in linux (CVE-2026-31413). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31845 |
|
Cross-Site Scripting (XSS) in CVE-2026-31845 (CVE-2026-31845)
cross-site scripting in CVE-2026-31845 (CVE-2026-31845). Confidential information can be exposed externally.
|
| CVE-2026-33118 |
|
Vulnerability in microsoft (CVE-2026-33118)
vulnerability in microsoft (CVE-2026-33118). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40194 |
|
Vulnerability in phpseclib/phpseclib (CVE-2026-40194)
vulnerability in phpseclib/phpseclib (CVE-2026-40194). Risk of unauthorized operations or information disclosure. Exploitable via ``e819a163c``. Mitigation: upgrade to `1.0.28` or later.
|
| CVE-2026-40175 |
|
Vulnerability in axios (CVE-2026-40175)
vulnerability in axios (CVE-2026-40175). Risk of unauthorized operations or information disclosure. Exploitable via `GET /pings`. Mitigation: upgrade to `0.31.0` or later.
|
| CVE-2026-34481 |
|
Vulnerability in apache (CVE-2026-34481)
vulnerability in apache (CVE-2026-34481). Data can be tampered with by attackers.
|
| CVE-2026-39304 |
|
Vulnerability in activemq (CVE-2026-39304)
vulnerability in activemq (CVE-2026-39304). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.19.4, 6.2.4` or later.
|
| CVE-2026-31412 |
|
Vulnerability in linux (CVE-2026-31412)
vulnerability in linux (CVE-2026-31412). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5525 |
|
Vulnerability in notepad-plus-plus (CVE-2026-5525)
vulnerability in notepad-plus-plus (CVE-2026-5525). Confidential information can be exposed externally.
|
| CVE-2026-22750 |
|
Vulnerability in vmware (CVE-2026-22750)
vulnerability in vmware (CVE-2026-22750). Data can be tampered with by attackers.
|
| CVE-2026-4482 |
|
Vulnerability in rapid7 (CVE-2026-4482)
vulnerability in rapid7 (CVE-2026-4482). Confidential information can be exposed externally.
|
| CVE-2026-21915 |
|
Vulnerability in juniper (CVE-2026-21915)
vulnerability in juniper (CVE-2026-21915). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39848 |
|
Vulnerability in csrf (CVE-2026-39848)
vulnerability in csrf (CVE-2026-39848). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.0` or later.
|
| CVE-2026-33788 |
|
Vulnerability in juniper (CVE-2026-33788)
vulnerability in juniper (CVE-2026-33788). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33784 |
|
Vulnerability in juniper (CVE-2026-33784)
vulnerability in juniper (CVE-2026-33784). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33771 |
|
Vulnerability in juniper (CVE-2026-33771)
vulnerability in juniper (CVE-2026-33771). Confidential information can be exposed externally.
|
| CVE-2026-33774 |
|
Vulnerability in juniper (CVE-2026-33774)
vulnerability in juniper (CVE-2026-33774). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-21904 |
|
Cross-Site Scripting (XSS) in juniper (CVE-2026-21904)
cross-site scripting in juniper (CVE-2026-21904). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13914 |
|
Vulnerability in juniper (CVE-2025-13914)
vulnerability in juniper (CVE-2025-13914). Confidential information can be exposed externally.
|
| CVE-2026-34486 KEV |
|
[KEV] Vulnerability in Apache tomcat (CVE-2026-34486)
vulnerability in Apache tomcat (CVE-2026-34486). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `9.0.117, 10.1.54, 11.0.21` or later.
|
| CVE-2026-29146 |
|
Vulnerability in apache (CVE-2026-29146)
vulnerability in apache (CVE-2026-29146). Confidential information can be exposed externally.
|
| CVE-2026-1584 |
|
Vulnerability in dos (CVE-2026-1584)
vulnerability in dos (CVE-2026-1584). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-62718 |
|
Vulnerability in axios (CVE-2025-62718)
vulnerability in axios (CVE-2025-62718). Confidential information can be exposed externally. Exploitable via ``NO_PROXY``. Mitigation: upgrade to `0.31.0` or later.
|
| CVE-2026-39976 |
|
Authentication Bypass in laravel (CVE-2026-39976)
authentication bypass in laravel (CVE-2026-39976). Confidential information can be exposed externally. Mitigation: upgrade to `13.7.1` or later.
|