Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-35398 |
|
Open Redirect in wegia (CVE-2026-35398)
vulnerability in wegia (CVE-2026-35398). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.9` or later.
|
| CVE-2025-54601 |
|
Vulnerability in samsung (CVE-2025-54601)
vulnerability in samsung (CVE-2025-54601). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5681 |
|
Vulnerability in sqli (CVE-2026-5681)
vulnerability in sqli (CVE-2026-5681). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35185 |
|
Vulnerability in psu (CVE-2026-35185)
vulnerability in psu (CVE-2026-35185). Confidential information can be exposed externally. Mitigation: upgrade to `25.0.0` or later.
|
| CVE-2026-35199 |
|
Vulnerability in microsoft (CVE-2026-35199)
vulnerability in microsoft (CVE-2026-35199). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35179 |
|
Vulnerability in wwbn (CVE-2026-35179)
vulnerability in wwbn (CVE-2026-35179). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35180 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-35180)
vulnerability in csrf (CVE-2026-35180). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35181 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-35181)
vulnerability in csrf (CVE-2026-35181). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35182 |
|
Vulnerability in ajax30 (CVE-2026-35182)
vulnerability in ajax30 (CVE-2026-35182). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.0.6` or later.
|
| CVE-2026-35183 |
|
Vulnerability in ajax30 (CVE-2026-35183)
vulnerability in ajax30 (CVE-2026-35183). Data can be tampered with by attackers. Mitigation: upgrade to `2.0.6` or later.
|
| CVE-2026-35184 |
|
SQL Injection in sqli (CVE-2026-35184)
SQL injection in sqli (CVE-2026-35184). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.0` or later.
|
| CVE-2025-57834 |
|
Vulnerability in dos (CVE-2025-57834)
vulnerability in dos (CVE-2025-57834). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-54328 |
|
Vulnerability in samsung (CVE-2025-54328)
vulnerability in samsung (CVE-2025-54328). Successful exploitation can lead to full system takeover.
|
| CVE-2025-54602 |
|
Vulnerability in samsung (CVE-2025-54602)
vulnerability in samsung (CVE-2025-54602). Successful exploitation can lead to full system takeover.
|
| CVE-2025-54324 |
|
Vulnerability in dos (CVE-2025-54324)
vulnerability in dos (CVE-2025-54324). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-58349 |
|
Vulnerability in samsung (CVE-2025-58349)
vulnerability in samsung (CVE-2025-58349). Confidential information can be exposed externally.
|
| CVE-2026-0049 |
|
Vulnerability in dos (CVE-2026-0049)
vulnerability in dos (CVE-2026-0049). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5672 |
|
Vulnerability in sqli (CVE-2026-5672)
vulnerability in sqli (CVE-2026-5672). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5675 |
|
Vulnerability in sqli (CVE-2026-5675)
vulnerability in sqli (CVE-2026-5675). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5671 |
|
Cross-Site Scripting (XSS) in CVE-2026-5671 (CVE-2026-5671)
cross-site scripting in CVE-2026-5671 (CVE-2026-5671). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35470 |
|
SQL Injection in sqli (CVE-2026-35470)
SQL injection in sqli (CVE-2026-35470). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.10.2` or later.
|
| CVE-2026-35174 |
|
Path Traversal in path-traversal (CVE-2026-35174)
path traversal in path-traversal (CVE-2026-35174). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.01` or later.
|
| CVE-2026-5704 |
|
Unrestricted File Upload in gnu (CVE-2026-5704)
vulnerability in gnu (CVE-2026-5704). Data can be tampered with by attackers.
|
| CVE-2026-31405 |
|
Out-of-Bounds Read in linux (CVE-2026-31405)
vulnerability in linux (CVE-2026-31405). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5636 |
|
Vulnerability in sqli (CVE-2026-5636)
vulnerability in sqli (CVE-2026-5636). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5635 |
|
Vulnerability in sqli (CVE-2026-5635)
vulnerability in sqli (CVE-2026-5635). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5634 |
|
Vulnerability in sqli (CVE-2026-5634)
vulnerability in sqli (CVE-2026-5634). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31410 |
|
Vulnerability in linux (CVE-2026-31410)
vulnerability in linux (CVE-2026-31410). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31406 |
|
Vulnerability in linux (CVE-2026-31406)
vulnerability in linux (CVE-2026-31406). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31407 |
|
Out-of-Bounds Write in linux (CVE-2026-31407)
out-of-bounds write in linux (CVE-2026-31407). Confidential information can be exposed externally.
|
| CVE-2026-31408 |
|
Use-After-Free in linux (CVE-2026-31408)
vulnerability in linux (CVE-2026-31408). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31409 |
|
Vulnerability in linux (CVE-2026-31409)
vulnerability in linux (CVE-2026-31409). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5624 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-5624 (CVE-2026-5624)
vulnerability in CVE-2026-5624 (CVE-2026-5624). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5620 |
|
Vulnerability in sqli (CVE-2026-5620)
vulnerability in sqli (CVE-2026-5620). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5616 |
|
Authentication Bypass in CVE-2026-5616 (CVE-2026-5616)
authentication bypass in CVE-2026-5616 (CVE-2026-5616). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5615 |
|
Cross-Site Scripting (XSS) in CVE-2026-5615 (CVE-2026-5615)
cross-site scripting in CVE-2026-5615 (CVE-2026-5615). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5609 |
|
Buffer Overflow in tenda (CVE-2026-5609)
vulnerability in tenda (CVE-2026-5609). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5605 |
|
Buffer Overflow in tenda (CVE-2026-5605)
vulnerability in tenda (CVE-2026-5605). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5606 |
|
Vulnerability in sqli (CVE-2026-5606)
vulnerability in sqli (CVE-2026-5606). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35616 KEV |
|
[KEV] Vulnerability in Fortinet forticlient-ems (CVE-2026-35616)
vulnerability in Fortinet forticlient-ems (CVE-2026-35616). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-5604 |
|
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Parameter Handler. Perfor...
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Parameter Handler. Performing a manipulation of the argument standard results in stack-based buffer overflow. Remote exploita...
|
| CVE-2019-25687 |
|
Path Traversal in wisdom (CVE-2019-25687)
path traversal in wisdom (CVE-2019-25687). Successful exploitation can lead to full system takeover.
|
| CVE-2019-25682 |
|
Cross-Site Request Forgery (CSRF) in victoralagwu (CVE-2019-25682)
vulnerability in victoralagwu (CVE-2019-25682). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-25684 |
|
SQL Injection in sqli (CVE-2019-25684)
SQL injection in sqli (CVE-2019-25684). Confidential information can be exposed externally.
|
| CVE-2019-25673 |
|
Unrestricted File Upload in laravel (CVE-2019-25673)
vulnerability in laravel (CVE-2019-25673). Successful exploitation can lead to full system takeover.
|
| CVE-2019-25674 |
|
SQL Injection in sqli (CVE-2019-25674)
SQL injection in sqli (CVE-2019-25674). Confidential information can be exposed externally.
|
| CVE-2019-25675 |
|
SQL Injection in sqli (CVE-2019-25675)
SQL injection in sqli (CVE-2019-25675). Confidential information can be exposed externally.
|
| CVE-2019-25676 |
|
Cross-Site Scripting (XSS) in sqli (CVE-2019-25676)
cross-site scripting in sqli (CVE-2019-25676). Confidential information can be exposed externally.
|
| CVE-2019-25678 |
|
Vulnerability in sqli (CVE-2019-25678)
vulnerability in sqli (CVE-2019-25678). Confidential information can be exposed externally.
|
| CVE-2019-25677 |
|
Vulnerability in dos (CVE-2019-25677)
vulnerability in dos (CVE-2019-25677). Risk of unauthorized operations or information disclosure.
|