Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-35398 Open Redirect in wegia (CVE-2026-35398)
vulnerability in wegia (CVE-2026-35398). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.9` or later.
CVE-2025-54601 Vulnerability in samsung (CVE-2025-54601)
vulnerability in samsung (CVE-2025-54601). Successful exploitation can lead to full system takeover.
CVE-2026-5681 Vulnerability in sqli (CVE-2026-5681)
vulnerability in sqli (CVE-2026-5681). Risk of unauthorized operations or information disclosure.
CVE-2026-35185 Vulnerability in psu (CVE-2026-35185)
vulnerability in psu (CVE-2026-35185). Confidential information can be exposed externally. Mitigation: upgrade to `25.0.0` or later.
CVE-2026-35199 Vulnerability in microsoft (CVE-2026-35199)
vulnerability in microsoft (CVE-2026-35199). Risk of unauthorized operations or information disclosure.
CVE-2026-35179 Vulnerability in wwbn (CVE-2026-35179)
vulnerability in wwbn (CVE-2026-35179). Risk of unauthorized operations or information disclosure.
CVE-2026-35180 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-35180)
vulnerability in csrf (CVE-2026-35180). Risk of unauthorized operations or information disclosure.
CVE-2026-35181 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-35181)
vulnerability in csrf (CVE-2026-35181). Risk of unauthorized operations or information disclosure.
CVE-2026-35182 Vulnerability in ajax30 (CVE-2026-35182)
vulnerability in ajax30 (CVE-2026-35182). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.0.6` or later.
CVE-2026-35183 Vulnerability in ajax30 (CVE-2026-35183)
vulnerability in ajax30 (CVE-2026-35183). Data can be tampered with by attackers. Mitigation: upgrade to `2.0.6` or later.
CVE-2026-35184 SQL Injection in sqli (CVE-2026-35184)
SQL injection in sqli (CVE-2026-35184). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.0` or later.
CVE-2025-57834 Vulnerability in dos (CVE-2025-57834)
vulnerability in dos (CVE-2025-57834). Risk of unauthorized operations or information disclosure.
CVE-2025-54328 Vulnerability in samsung (CVE-2025-54328)
vulnerability in samsung (CVE-2025-54328). Successful exploitation can lead to full system takeover.
CVE-2025-54602 Vulnerability in samsung (CVE-2025-54602)
vulnerability in samsung (CVE-2025-54602). Successful exploitation can lead to full system takeover.
CVE-2025-54324 Vulnerability in dos (CVE-2025-54324)
vulnerability in dos (CVE-2025-54324). Risk of unauthorized operations or information disclosure.
CVE-2025-58349 Vulnerability in samsung (CVE-2025-58349)
vulnerability in samsung (CVE-2025-58349). Confidential information can be exposed externally.
CVE-2026-0049 Vulnerability in dos (CVE-2026-0049)
vulnerability in dos (CVE-2026-0049). Risk of unauthorized operations or information disclosure.
CVE-2026-5672 Vulnerability in sqli (CVE-2026-5672)
vulnerability in sqli (CVE-2026-5672). Risk of unauthorized operations or information disclosure.
CVE-2026-5675 Vulnerability in sqli (CVE-2026-5675)
vulnerability in sqli (CVE-2026-5675). Risk of unauthorized operations or information disclosure.
CVE-2026-5671 Cross-Site Scripting (XSS) in CVE-2026-5671 (CVE-2026-5671)
cross-site scripting in CVE-2026-5671 (CVE-2026-5671). Risk of unauthorized operations or information disclosure.
CVE-2026-35470 SQL Injection in sqli (CVE-2026-35470)
SQL injection in sqli (CVE-2026-35470). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.10.2` or later.
CVE-2026-35174 Path Traversal in path-traversal (CVE-2026-35174)
path traversal in path-traversal (CVE-2026-35174). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.01` or later.
CVE-2026-5704 Unrestricted File Upload in gnu (CVE-2026-5704)
vulnerability in gnu (CVE-2026-5704). Data can be tampered with by attackers.
CVE-2026-31405 Out-of-Bounds Read in linux (CVE-2026-31405)
vulnerability in linux (CVE-2026-31405). Successful exploitation can lead to full system takeover.
CVE-2026-5636 Vulnerability in sqli (CVE-2026-5636)
vulnerability in sqli (CVE-2026-5636). Risk of unauthorized operations or information disclosure.
CVE-2026-5635 Vulnerability in sqli (CVE-2026-5635)
vulnerability in sqli (CVE-2026-5635). Risk of unauthorized operations or information disclosure.
CVE-2026-5634 Vulnerability in sqli (CVE-2026-5634)
vulnerability in sqli (CVE-2026-5634). Risk of unauthorized operations or information disclosure.
CVE-2026-31410 Vulnerability in linux (CVE-2026-31410)
vulnerability in linux (CVE-2026-31410). Risk of unauthorized operations or information disclosure.
CVE-2026-31406 Vulnerability in linux (CVE-2026-31406)
vulnerability in linux (CVE-2026-31406). Successful exploitation can lead to full system takeover.
CVE-2026-31407 Out-of-Bounds Write in linux (CVE-2026-31407)
out-of-bounds write in linux (CVE-2026-31407). Confidential information can be exposed externally.
CVE-2026-31408 Use-After-Free in linux (CVE-2026-31408)
vulnerability in linux (CVE-2026-31408). Successful exploitation can lead to full system takeover.
CVE-2026-31409 Vulnerability in linux (CVE-2026-31409)
vulnerability in linux (CVE-2026-31409). Successful exploitation can lead to full system takeover.
CVE-2026-5624 Cross-Site Request Forgery (CSRF) in CVE-2026-5624 (CVE-2026-5624)
vulnerability in CVE-2026-5624 (CVE-2026-5624). Risk of unauthorized operations or information disclosure.
CVE-2026-5620 Vulnerability in sqli (CVE-2026-5620)
vulnerability in sqli (CVE-2026-5620). Risk of unauthorized operations or information disclosure.
CVE-2026-5616 Authentication Bypass in CVE-2026-5616 (CVE-2026-5616)
authentication bypass in CVE-2026-5616 (CVE-2026-5616). Risk of unauthorized operations or information disclosure.
CVE-2026-5615 Cross-Site Scripting (XSS) in CVE-2026-5615 (CVE-2026-5615)
cross-site scripting in CVE-2026-5615 (CVE-2026-5615). Risk of unauthorized operations or information disclosure.
CVE-2026-5609 Buffer Overflow in tenda (CVE-2026-5609)
vulnerability in tenda (CVE-2026-5609). Successful exploitation can lead to full system takeover.
CVE-2026-5605 Buffer Overflow in tenda (CVE-2026-5605)
vulnerability in tenda (CVE-2026-5605). Successful exploitation can lead to full system takeover.
CVE-2026-5606 Vulnerability in sqli (CVE-2026-5606)
vulnerability in sqli (CVE-2026-5606). Risk of unauthorized operations or information disclosure.
CVE-2026-35616 KEV [KEV] Vulnerability in Fortinet forticlient-ems (CVE-2026-35616)
vulnerability in Fortinet forticlient-ems (CVE-2026-35616). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-5604 A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Parameter Handler. Perfor...
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Parameter Handler. Performing a manipulation of the argument standard results in stack-based buffer overflow. Remote exploita...
CVE-2019-25687 Path Traversal in wisdom (CVE-2019-25687)
path traversal in wisdom (CVE-2019-25687). Successful exploitation can lead to full system takeover.
CVE-2019-25682 Cross-Site Request Forgery (CSRF) in victoralagwu (CVE-2019-25682)
vulnerability in victoralagwu (CVE-2019-25682). Risk of unauthorized operations or information disclosure.
CVE-2019-25684 SQL Injection in sqli (CVE-2019-25684)
SQL injection in sqli (CVE-2019-25684). Confidential information can be exposed externally.
CVE-2019-25673 Unrestricted File Upload in laravel (CVE-2019-25673)
vulnerability in laravel (CVE-2019-25673). Successful exploitation can lead to full system takeover.
CVE-2019-25674 SQL Injection in sqli (CVE-2019-25674)
SQL injection in sqli (CVE-2019-25674). Confidential information can be exposed externally.
CVE-2019-25675 SQL Injection in sqli (CVE-2019-25675)
SQL injection in sqli (CVE-2019-25675). Confidential information can be exposed externally.
CVE-2019-25676 Cross-Site Scripting (XSS) in sqli (CVE-2019-25676)
cross-site scripting in sqli (CVE-2019-25676). Confidential information can be exposed externally.
CVE-2019-25678 Vulnerability in sqli (CVE-2019-25678)
vulnerability in sqli (CVE-2019-25678). Confidential information can be exposed externally.
CVE-2019-25677 Vulnerability in dos (CVE-2019-25677)
vulnerability in dos (CVE-2019-25677). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →