Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-2758 |
|
Use-After-Free in mozilla (CVE-2026-2758)
vulnerability in mozilla (CVE-2026-2758). Successful exploitation can lead to full system takeover.
|
| CVE-2026-2761 |
|
Vulnerability in mozilla (CVE-2026-2761)
vulnerability in mozilla (CVE-2026-2761). Successful exploitation can lead to full system takeover.
|
| CVE-2026-2759 |
|
Vulnerability in mozilla (CVE-2026-2759)
vulnerability in mozilla (CVE-2026-2759). Successful exploitation can lead to full system takeover.
|
| CVE-2026-2786 |
|
Use-After-Free in mozilla (CVE-2026-2786)
vulnerability in mozilla (CVE-2026-2786). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25985 |
|
Vulnerability in imagemagick (CVE-2026-25985)
vulnerability in imagemagick (CVE-2026-25985). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-25968 |
|
Vulnerability in c (CVE-2026-25968)
vulnerability in c (CVE-2026-25968). Confidential information can be exposed externally.
|
| CVE-2026-25969 |
|
Vulnerability in c (CVE-2026-25969)
vulnerability in c (CVE-2026-25969). Risk of unauthorized operations or information disclosure. Exploitable via ``WriteASHLARImage``.
|
| CVE-2026-25965 |
|
Path Traversal in path-traversal (CVE-2026-25965)
path traversal in path-traversal (CVE-2026-25965). Confidential information can be exposed externally.
|
| CVE-2026-25794 |
|
Vulnerability in c (CVE-2026-25794)
vulnerability in c (CVE-2026-25794). Risk of unauthorized operations or information disclosure. Exploitable via ``WriteUHDRImage``.
|
| CVE-2026-25108 KEV |
|
[KEV] OS Command Injection in Soliton systems k.k soliton-systems-kk (CVE-2026-25108)
OS command injection in Soliton systems k.k soliton-systems-kk (CVE-2026-25108). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-27623 |
|
Vulnerability in valkey (CVE-2026-27623)
vulnerability in valkey (CVE-2026-27623). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.0.3` or later.
|
| CVE-2026-21863 |
|
Out-of-Bounds Read in valkey (CVE-2026-21863)
vulnerability in valkey (CVE-2026-21863). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.2.12, 8.0.7, 8.1.6, 9.0.2` or later.
|
| CVE-2025-67733 |
|
Vulnerability in valkey (CVE-2025-67733)
vulnerability in valkey (CVE-2025-67733). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.2.12, 8.0.7, 8.1.6, 9.0.2` or later.
|
| CVE-2026-25747 |
|
Unsafe Deserialization in apache (CVE-2026-25747)
vulnerability in apache (CVE-2026-25747). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27134 |
|
Authentication Bypass in apache (CVE-2026-27134)
authentication bypass in apache (CVE-2026-27134). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27504 |
|
Cross-Site Scripting (XSS) in radioinorr (CVE-2026-27504)
cross-site scripting in radioinorr (CVE-2026-27504). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27505 |
|
Cross-Site Scripting (XSS) in radioinorr (CVE-2026-27505)
cross-site scripting in radioinorr (CVE-2026-27505). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27506 |
|
Cross-Site Scripting (XSS) in radioinorr (CVE-2026-27506)
cross-site scripting in radioinorr (CVE-2026-27506). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27502 |
|
Cross-Site Scripting (XSS) in radioinorr (CVE-2026-27502)
cross-site scripting in radioinorr (CVE-2026-27502). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27503 |
|
Cross-Site Scripting (XSS) in radioinorr (CVE-2026-27503)
cross-site scripting in radioinorr (CVE-2026-27503). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-49113 KEV |
|
[KEV] Unsafe Deserialization in Roundcube webmail (CVE-2025-49113)
vulnerability in Roundcube webmail (CVE-2025-49113). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-68461 KEV |
|
[KEV] Cross-Site Scripting (XSS) in Roundcube webmail (CVE-2025-68461)
cross-site scripting in Roundcube webmail (CVE-2025-68461). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-13590 |
|
Unrestricted File Upload in org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.admin.v1 (CVE-2025-13590)
vulnerability in org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.admin.v1 (CVE-2025-13590). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.32.167` or later.
|
| CVE-2025-12107 |
|
Command Injection in wso2 (CVE-2025-12107)
command injection in wso2 (CVE-2025-12107). Successful exploitation can lead to full system takeover.
|
| CVE-2026-0974 |
|
Vulnerability in wordpress (CVE-2026-0974)
vulnerability in wordpress (CVE-2026-0974). Successful exploitation can lead to full system takeover.
|
| CVE-2026-23228 |
|
Vulnerability in linux (CVE-2026-23228)
vulnerability in linux (CVE-2026-23228). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-23229 |
|
Vulnerability in linux (CVE-2026-23229)
vulnerability in linux (CVE-2026-23229). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-23230 |
|
In the Linux kernel, the following vulnerability has been resolved:
smb: client: split...
In the Linux kernel, the following vulnerability has been resolved:
smb: client: split...
|
| CVE-2026-23220 |
|
Vulnerability in linux (CVE-2026-23220)
vulnerability in linux (CVE-2026-23220). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-23222 |
|
Vulnerability in linux (CVE-2026-23222)
vulnerability in linux (CVE-2026-23222). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71234 |
|
Out-of-Bounds Write in linux (CVE-2025-71234)
out-of-bounds write in linux (CVE-2025-71234). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71236 |
|
Vulnerability in linux (CVE-2025-71236)
vulnerability in linux (CVE-2025-71236). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-22769 KEV |
|
[KEV] Vulnerability in Dell recoverpoint-for-virtual-machines-rp4vms (CVE-2026-22769)
vulnerability in Dell recoverpoint-for-virtual-machines-rp4vms (CVE-2026-22769). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-22175 KEV |
|
[KEV] SSRF (Server-Side Request Forgery) in gitlab (CVE-2021-22175)
SSRF in gitlab (CVE-2021-22175). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-24734 |
|
Vulnerability in apache (CVE-2026-24734)
vulnerability in apache (CVE-2026-24734). Data can be tampered with by attackers.
|
| CVE-2020-7796 KEV |
|
[KEV] SSRF (Server-Side Request Forgery) in Synacor zimbra-collaboration-suite (CVE-2020-7796)
SSRF in Synacor zimbra-collaboration-suite (CVE-2020-7796). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-7694 KEV |
|
[KEV] Unrestricted File Upload in Teamt5 threatsonar-anti-ransomware (CVE-2024-7694)
vulnerability in Teamt5 threatsonar-anti-ransomware (CVE-2024-7694). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-2441 KEV |
|
[KEV] Use-After-Free in Google chromium (CVE-2026-2441)
vulnerability in Google chromium (CVE-2026-2441). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2008-0015 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2008-0015)
vulnerability in Microsoft windows (CVE-2008-0015). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-2447 |
|
Vulnerability in mozilla (CVE-2026-2447)
vulnerability in mozilla (CVE-2026-2447). Successful exploitation can lead to full system takeover.
|
| CVE-2026-23185 |
|
Use-After-Free in linux (CVE-2026-23185)
vulnerability in linux (CVE-2026-23185). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71204 |
|
Vulnerability in linux (CVE-2025-71204)
vulnerability in linux (CVE-2025-71204). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71221 |
|
Vulnerability in linux (CVE-2025-71221)
vulnerability in linux (CVE-2025-71221). Successful exploitation can lead to full system takeover.
|
| CVE-2026-23204 |
|
Out-of-Bounds Read in c (CVE-2026-23204)
vulnerability in c (CVE-2026-23204). Confidential information can be exposed externally.
|
| CVE-2026-23171 |
|
Use-After-Free in c (CVE-2026-23171)
vulnerability in c (CVE-2026-23171). Successful exploitation can lead to full system takeover.
|
| CVE-2026-23151 |
|
Vulnerability in linux (CVE-2026-23151)
vulnerability in linux (CVE-2026-23151). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-23157 |
|
Vulnerability in linux (CVE-2026-23157)
vulnerability in linux (CVE-2026-23157). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-23154 |
|
Vulnerability in linux (CVE-2026-23154)
vulnerability in linux (CVE-2026-23154). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-23141 |
|
Vulnerability in linux (CVE-2026-23141)
vulnerability in linux (CVE-2026-23141). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71201 |
|
Out-of-Bounds Read in c (CVE-2025-71201)
vulnerability in c (CVE-2025-71201). Confidential information can be exposed externally.
|