Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-4729 Vulnerability in mozilla (CVE-2026-4729)
vulnerability in mozilla (CVE-2026-4729). Successful exploitation can lead to full system takeover.
CVE-2026-4720 Vulnerability in mozilla (CVE-2026-4720)
vulnerability in mozilla (CVE-2026-4720). Successful exploitation can lead to full system takeover.
CVE-2026-4721 Vulnerability in mozilla (CVE-2026-4721)
vulnerability in mozilla (CVE-2026-4721). Successful exploitation can lead to full system takeover.
CVE-2026-27654 Vulnerability in nginx (CVE-2026-27654)
vulnerability in nginx (CVE-2026-27654). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
CVE-2026-27784 Vulnerability in nginx-gateway (CVE-2026-27784)
vulnerability in nginx-gateway (CVE-2026-27784). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
CVE-2026-32647 Out-of-Bounds Read in nginx-gateway (CVE-2026-32647)
vulnerability in nginx-gateway (CVE-2026-32647). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
CVE-2026-27651 Vulnerability in nginx-gateway (CVE-2026-27651)
vulnerability in nginx-gateway (CVE-2026-27651). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
CVE-2026-4697 Vulnerability in mozilla (CVE-2026-4697)
vulnerability in mozilla (CVE-2026-4697). Risk of unauthorized operations or information disclosure.
CVE-2026-4699 Vulnerability in mozilla (CVE-2026-4699)
vulnerability in mozilla (CVE-2026-4699). Risk of unauthorized operations or information disclosure.
CVE-2026-4700 Vulnerability in mozilla (CVE-2026-4700)
vulnerability in mozilla (CVE-2026-4700). Successful exploitation can lead to full system takeover.
CVE-2026-4695 Vulnerability in mozilla (CVE-2026-4695)
vulnerability in mozilla (CVE-2026-4695). Risk of unauthorized operations or information disclosure.
CVE-2026-4694 Vulnerability in mozilla (CVE-2026-4694)
vulnerability in mozilla (CVE-2026-4694). Risk of unauthorized operations or information disclosure.
CVE-2026-4696 Use-After-Free in mozilla (CVE-2026-4696)
vulnerability in mozilla (CVE-2026-4696). Successful exploitation can lead to full system takeover.
CVE-2026-4688 Use-After-Free in mozilla (CVE-2026-4688)
vulnerability in mozilla (CVE-2026-4688). Successful exploitation can lead to full system takeover.
CVE-2026-4684 Vulnerability in mozilla (CVE-2026-4684)
vulnerability in mozilla (CVE-2026-4684). Successful exploitation can lead to full system takeover.
CVE-2026-4687 Vulnerability in mozilla (CVE-2026-4687)
vulnerability in mozilla (CVE-2026-4687). Risk of unauthorized operations or information disclosure.
CVE-2026-4690 Vulnerability in mozilla (CVE-2026-4690)
vulnerability in mozilla (CVE-2026-4690). Risk of unauthorized operations or information disclosure.
CVE-2026-4692 Vulnerability in mozilla (CVE-2026-4692)
vulnerability in mozilla (CVE-2026-4692). Successful exploitation can lead to full system takeover.
CVE-2026-4686 Vulnerability in mozilla (CVE-2026-4686)
vulnerability in mozilla (CVE-2026-4686). Risk of unauthorized operations or information disclosure.
CVE-2026-4685 Vulnerability in mozilla (CVE-2026-4685)
vulnerability in mozilla (CVE-2026-4685). Risk of unauthorized operations or information disclosure.
CVE-2026-4693 Vulnerability in mozilla (CVE-2026-4693)
vulnerability in mozilla (CVE-2026-4693). Risk of unauthorized operations or information disclosure.
CVE-2026-4689 Vulnerability in mozilla (CVE-2026-4689)
vulnerability in mozilla (CVE-2026-4689). Successful exploitation can lead to full system takeover.
CVE-2026-4691 Use-After-Free in mozilla (CVE-2026-4691)
vulnerability in mozilla (CVE-2026-4691). Successful exploitation can lead to full system takeover.
CVE-2026-4698 Vulnerability in mozilla (CVE-2026-4698)
vulnerability in mozilla (CVE-2026-4698). Successful exploitation can lead to full system takeover.
CVE-2026-32642 Authorization Flaw in apache (CVE-2026-32642)
vulnerability in apache (CVE-2026-32642). Risk of unauthorized operations or information disclosure.
CVE-2026-33195 Path Traversal in activestorage (CVE-2026-33195)
path traversal in activestorage (CVE-2026-33195). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.2.3.1` or later.
CVE-2026-33167 Cross-Site Scripting (XSS) in actionpack (CVE-2026-33167)
cross-site scripting in actionpack (CVE-2026-33167). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.1.2.1` or later.
CVE-2026-4647 Out-of-Bounds Read in gnu (CVE-2026-4647)
vulnerability in gnu (CVE-2026-4647). Risk of unauthorized operations or information disclosure.
CVE-2025-41008 SQL Injection in sqli (CVE-2025-41008)
SQL injection in sqli (CVE-2025-41008). Risk of unauthorized operations or information disclosure.
CVE-2025-41007 SQL Injection in sqli (CVE-2025-41007)
SQL injection in sqli (CVE-2025-41007). Risk of unauthorized operations or information disclosure.
CVE-2026-32067 Authorization Flaw in openclaw (CVE-2026-32067)
vulnerability in openclaw (CVE-2026-32067). Risk of unauthorized operations or information disclosure.
CVE-2026-32896 Vulnerability in openclaw (CVE-2026-32896)
vulnerability in openclaw (CVE-2026-32896). Risk of unauthorized operations or information disclosure.
CVE-2026-33180 Information Disclosure in CVE-2026-33180 (CVE-2026-33180)
vulnerability in CVE-2026-33180 (CVE-2026-33180). Confidential information can be exposed externally.
CVE-2026-4437 Out-of-Bounds Read in c (CVE-2026-4437)
vulnerability in c (CVE-2026-4437). Risk of unauthorized operations or information disclosure.
CVE-2026-4438 Vulnerability in c (CVE-2026-4438)
vulnerability in c (CVE-2026-4438). Risk of unauthorized operations or information disclosure.
CVE-2026-22895 Cross-Site Scripting (XSS) in qnap (CVE-2026-22895)
cross-site scripting in qnap (CVE-2026-22895). Risk of unauthorized operations or information disclosure.
CVE-2025-15608 Vulnerability in tp-link (CVE-2025-15608)
vulnerability in tp-link (CVE-2025-15608). Successful exploitation can lead to full system takeover.
CVE-2026-23277 Vulnerability in c (CVE-2026-23277)
vulnerability in c (CVE-2026-23277). Risk of unauthorized operations or information disclosure.
CVE-2026-23278 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always...
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always...
CVE-2026-23274 Vulnerability in Kernel (CVE-2026-23274)
vulnerability in Kernel (CVE-2026-23274). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.1.167, 6.6.130, 6.12.78, 6.18.19, 6.19.9` or later.
CVE-2026-23272 Vulnerability in linux (CVE-2026-23272)
vulnerability in linux (CVE-2026-23272). Successful exploitation can lead to full system takeover.
CVE-2026-23273 Use-After-Free in Kernel (CVE-2026-23273)
vulnerability in Kernel (CVE-2026-23273). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.10.252, 5.15.202, 6.1.165, 6.6.128, 6.12.75, 6.18.14, 6.19.4` or later.
CVE-2026-23271 Vulnerability in Kernel (CVE-2026-23271)
vulnerability in Kernel (CVE-2026-23271). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.1.167, 6.6.130, 6.12.77, 6.18.17, 6.19.7` or later.
CVE-2026-4447 Vulnerability in google (CVE-2026-4447)
vulnerability in google (CVE-2026-4447). Successful exploitation can lead to full system takeover.
CVE-2026-32935 Vulnerability in phpseclib/phpseclib (CVE-2026-32935)
vulnerability in phpseclib/phpseclib (CVE-2026-32935). Confidential information can be exposed externally. Mitigation: upgrade to `1.0.27` or later.
CVE-2025-54068 KEV [KEV] Code Injection in Laravel livewire (CVE-2025-54068)
code injection in Laravel livewire (CVE-2025-54068). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-32432 KEV [KEV] Code Injection in Craft cms craft-cms (CVE-2025-32432)
code injection in Craft cms craft-cms (CVE-2025-32432). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-43510 KEV [KEV] Vulnerability in Apple multiple-products (CVE-2025-43510)
vulnerability in Apple multiple-products (CVE-2025-43510). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-43520 KEV [KEV] Vulnerability in Apple multiple-products (CVE-2025-43520)
vulnerability in Apple multiple-products (CVE-2025-43520). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-31277 KEV [KEV] Buffer Overflow in Apple multiple-products (CVE-2025-31277)
vulnerability in Apple multiple-products (CVE-2025-31277). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →