Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-27215 |
|
Vulnerability in adobe (CVE-2026-27215)
vulnerability in adobe (CVE-2026-27215). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-21364 |
|
Vulnerability in adobe (CVE-2026-21364)
vulnerability in adobe (CVE-2026-21364). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-21365 |
|
Out-of-Bounds Read in adobe (CVE-2026-21365)
vulnerability in adobe (CVE-2026-21365). Confidential information can be exposed externally.
|
| CVE-2026-21363 |
|
Vulnerability in adobe (CVE-2026-21363)
vulnerability in adobe (CVE-2026-21363). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-25187 |
|
Vulnerability in microsoft (CVE-2026-25187)
vulnerability in microsoft (CVE-2026-25187). Successful exploitation can lead to full system takeover.
|
| CVE-2026-26128 |
|
Authentication Bypass in microsoft (CVE-2026-26128)
authentication bypass in microsoft (CVE-2026-26128). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24294 |
|
Authentication Bypass in microsoft (CVE-2026-24294)
authentication bypass in microsoft (CVE-2026-24294). Successful exploitation can lead to full system takeover.
|
| CVE-2025-11739 |
|
Unsafe Deserialization in deserialization (CVE-2025-11739)
vulnerability in deserialization (CVE-2025-11739). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3843 |
|
SQL Injection in sqli (CVE-2026-3843)
SQL injection in sqli (CVE-2026-3843). Successful exploitation can lead to full system takeover.
|
| CVE-2026-2273 |
|
Code Injection in schneider-electric (CVE-2026-2273)
code injection in schneider-electric (CVE-2026-2273). Successful exploitation can lead to full system takeover.
|
| CVE-2026-26134 |
|
Vulnerability in microsoft (CVE-2026-26134)
vulnerability in microsoft (CVE-2026-26134). Successful exploitation can lead to full system takeover.
|
| CVE-2026-26130 |
|
Vulnerability in aspnet-core (CVE-2026-26130)
vulnerability in aspnet-core (CVE-2026-26130). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.25, 9.0.14, 10.0.4` or later.
|
| CVE-2026-26110 |
|
Vulnerability in microsoft (CVE-2026-26110)
vulnerability in microsoft (CVE-2026-26110). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25836 |
|
OS Command Injection in fortinet (CVE-2026-25836)
OS command injection in fortinet (CVE-2026-25836). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25180 |
|
Out-of-Bounds Read in microsoft (CVE-2026-25180)
vulnerability in microsoft (CVE-2026-25180). Confidential information can be exposed externally.
|
| CVE-2026-24293 |
|
Vulnerability in microsoft (CVE-2026-24293)
vulnerability in microsoft (CVE-2026-24293). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24289 |
|
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
| CVE-2026-24285 |
|
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
| CVE-2026-23239 |
|
Vulnerability in Kernel (CVE-2026-23239)
vulnerability in Kernel (CVE-2026-23239). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.12.75, 6.18.16, 6.19.6` or later.
|
| CVE-2026-23240 |
|
Vulnerability in Kernel (CVE-2026-23240)
vulnerability in Kernel (CVE-2026-23240). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.12.75, 6.18.16, 6.19.6` or later.
|
| CVE-2026-21262 |
|
Vulnerability in microsoft (CVE-2026-21262)
vulnerability in microsoft (CVE-2026-21262). Successful exploitation can lead to full system takeover.
|
| CVE-2026-1286 |
|
Unsafe Deserialization in deserialization (CVE-2026-1286)
vulnerability in deserialization (CVE-2026-1286). Successful exploitation can lead to full system takeover.
|
| CVE-2025-13901 |
|
Vulnerability in dos (CVE-2025-13901)
vulnerability in dos (CVE-2025-13901). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13902 |
|
Cross-Site Scripting (XSS) in schneider-electric (CVE-2025-13902)
cross-site scripting in schneider-electric (CVE-2025-13902). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27688 |
|
Vulnerability in sap (CVE-2026-27688)
vulnerability in sap (CVE-2026-27688). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24310 |
|
Vulnerability in sap (CVE-2026-24310)
vulnerability in sap (CVE-2026-24310). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24316 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-24316)
SSRF in ssrf (CVE-2026-24316). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24309 |
|
Vulnerability in sap (CVE-2026-24309)
vulnerability in sap (CVE-2026-24309). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28691 |
|
Vulnerability in imagemagick (CVE-2026-28691)
vulnerability in imagemagick (CVE-2026-28691). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.2-16` or later.
|
| CVE-2026-28693 |
|
Out-of-Bounds Read in imagemagick (CVE-2026-28693)
vulnerability in imagemagick (CVE-2026-28693). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.1.2-16` or later.
|
| CVE-2024-14027 |
|
Vulnerability in Kernel (CVE-2024-14027)
vulnerability in Kernel (CVE-2024-14027). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.77` or later.
|
| CVE-2026-25604 |
|
Vulnerability in apache (CVE-2026-25604)
vulnerability in apache (CVE-2026-25604). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1603 KEV |
|
[KEV] Vulnerability in Ivanti endpoint-manager-epm (CVE-2026-1603)
vulnerability in Ivanti endpoint-manager-epm (CVE-2026-1603). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-22054 KEV |
|
[KEV] SSRF (Server-Side Request Forgery) in Omnissa workspace-one-uem (CVE-2021-22054)
SSRF in Omnissa workspace-one-uem (CVE-2021-22054). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-26399 KEV |
|
[KEV] Unsafe Deserialization in Solarwinds web-help-desk (CVE-2025-26399)
vulnerability in Solarwinds web-help-desk (CVE-2025-26399). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-24281 |
|
Vulnerability in zookeeper (CVE-2026-24281)
vulnerability in zookeeper (CVE-2026-24281). Confidential information can be exposed externally. Mitigation: upgrade to `3.8.6, 3.9.5` or later.
|
| CVE-2026-24308 |
|
Vulnerability in zookeeper (CVE-2026-24308)
vulnerability in zookeeper (CVE-2026-24308). Confidential information can be exposed externally. Mitigation: upgrade to `3.8.6, 3.9.5` or later.
|
| CVE-2026-23925 |
|
Authorization Flaw in zabbix (CVE-2026-23925)
vulnerability in zabbix (CVE-2026-23925). Confidential information can be exposed externally.
|
| CVE-2026-29062 |
|
Vulnerability in dos (CVE-2026-29062)
vulnerability in dos (CVE-2026-29062). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28395 |
|
Vulnerability in openclaw (CVE-2026-28395)
vulnerability in openclaw (CVE-2026-28395). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56272 |
|
Vulnerability in flowise (CVE-2026-56272)
vulnerability in flowise (CVE-2026-56272). Confidential information can be exposed externally. Mitigation: upgrade to `3.0.13` or later.
|
| CVE-2026-30789 |
|
Vulnerability in rustdesk (CVE-2026-30789)
vulnerability in rustdesk (CVE-2026-30789). Successful exploitation can lead to full system takeover.
|
| CVE-2026-30798 |
|
Vulnerability in rustdesk (CVE-2026-30798)
vulnerability in rustdesk (CVE-2026-30798). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-30796 |
|
Vulnerability in rustdesk (CVE-2026-30796)
vulnerability in rustdesk (CVE-2026-30796). Confidential information can be exposed externally.
|
| CVE-2026-30794 |
|
Vulnerability in rustdesk (CVE-2026-30794)
vulnerability in rustdesk (CVE-2026-30794). Successful exploitation can lead to full system takeover.
|
| CVE-2026-30792 |
|
Vulnerability in rustdesk (CVE-2026-30792)
vulnerability in rustdesk (CVE-2026-30792). Successful exploitation can lead to full system takeover.
|
| CVE-2026-30790 |
|
Vulnerability in rustdesk (CVE-2026-30790)
vulnerability in rustdesk (CVE-2026-30790). Successful exploitation can lead to full system takeover.
|
| CVE-2026-30783 |
|
Vulnerability in rustdesk (CVE-2026-30783)
vulnerability in rustdesk (CVE-2026-30783). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7921 KEV |
|
[KEV] Authentication Bypass in Hikvision multiple-products (CVE-2017-7921)
authentication bypass in Hikvision multiple-products (CVE-2017-7921). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-22681 KEV |
|
[KEV] Vulnerability in Rockwell multiple-products (CVE-2021-22681)
vulnerability in Rockwell multiple-products (CVE-2021-22681). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|