Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-2758 Use-After-Free in mozilla (CVE-2026-2758)
vulnerability in mozilla (CVE-2026-2758). Successful exploitation can lead to full system takeover.
CVE-2026-2761 Vulnerability in mozilla (CVE-2026-2761)
vulnerability in mozilla (CVE-2026-2761). Successful exploitation can lead to full system takeover.
CVE-2026-2759 Vulnerability in mozilla (CVE-2026-2759)
vulnerability in mozilla (CVE-2026-2759). Successful exploitation can lead to full system takeover.
CVE-2026-2786 Use-After-Free in mozilla (CVE-2026-2786)
vulnerability in mozilla (CVE-2026-2786). Successful exploitation can lead to full system takeover.
CVE-2026-25985 Vulnerability in imagemagick (CVE-2026-25985)
vulnerability in imagemagick (CVE-2026-25985). Risk of unauthorized operations or information disclosure.
CVE-2026-25968 Vulnerability in c (CVE-2026-25968)
vulnerability in c (CVE-2026-25968). Confidential information can be exposed externally.
CVE-2026-25969 Vulnerability in c (CVE-2026-25969)
vulnerability in c (CVE-2026-25969). Risk of unauthorized operations or information disclosure. Exploitable via ``WriteASHLARImage``.
CVE-2026-25965 Path Traversal in path-traversal (CVE-2026-25965)
path traversal in path-traversal (CVE-2026-25965). Confidential information can be exposed externally.
CVE-2026-25794 Vulnerability in c (CVE-2026-25794)
vulnerability in c (CVE-2026-25794). Risk of unauthorized operations or information disclosure. Exploitable via ``WriteUHDRImage``.
CVE-2026-25108 KEV [KEV] OS Command Injection in Soliton systems k.k soliton-systems-kk (CVE-2026-25108)
OS command injection in Soliton systems k.k soliton-systems-kk (CVE-2026-25108). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-27623 Vulnerability in valkey (CVE-2026-27623)
vulnerability in valkey (CVE-2026-27623). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.0.3` or later.
CVE-2026-21863 Out-of-Bounds Read in valkey (CVE-2026-21863)
vulnerability in valkey (CVE-2026-21863). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.2.12, 8.0.7, 8.1.6, 9.0.2` or later.
CVE-2025-67733 Vulnerability in valkey (CVE-2025-67733)
vulnerability in valkey (CVE-2025-67733). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.2.12, 8.0.7, 8.1.6, 9.0.2` or later.
CVE-2026-25747 Unsafe Deserialization in apache (CVE-2026-25747)
vulnerability in apache (CVE-2026-25747). Successful exploitation can lead to full system takeover.
CVE-2026-27134 Authentication Bypass in apache (CVE-2026-27134)
authentication bypass in apache (CVE-2026-27134). Successful exploitation can lead to full system takeover.
CVE-2026-27504 Cross-Site Scripting (XSS) in radioinorr (CVE-2026-27504)
cross-site scripting in radioinorr (CVE-2026-27504). Risk of unauthorized operations or information disclosure.
CVE-2026-27505 Cross-Site Scripting (XSS) in radioinorr (CVE-2026-27505)
cross-site scripting in radioinorr (CVE-2026-27505). Risk of unauthorized operations or information disclosure.
CVE-2026-27506 Cross-Site Scripting (XSS) in radioinorr (CVE-2026-27506)
cross-site scripting in radioinorr (CVE-2026-27506). Risk of unauthorized operations or information disclosure.
CVE-2026-27502 Cross-Site Scripting (XSS) in radioinorr (CVE-2026-27502)
cross-site scripting in radioinorr (CVE-2026-27502). Risk of unauthorized operations or information disclosure.
CVE-2026-27503 Cross-Site Scripting (XSS) in radioinorr (CVE-2026-27503)
cross-site scripting in radioinorr (CVE-2026-27503). Risk of unauthorized operations or information disclosure.
CVE-2025-49113 KEV [KEV] Unsafe Deserialization in Roundcube webmail (CVE-2025-49113)
vulnerability in Roundcube webmail (CVE-2025-49113). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-68461 KEV [KEV] Cross-Site Scripting (XSS) in Roundcube webmail (CVE-2025-68461)
cross-site scripting in Roundcube webmail (CVE-2025-68461). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-13590 Unrestricted File Upload in org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.admin.v1 (CVE-2025-13590)
vulnerability in org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.admin.v1 (CVE-2025-13590). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.32.167` or later.
CVE-2025-12107 Command Injection in wso2 (CVE-2025-12107)
command injection in wso2 (CVE-2025-12107). Successful exploitation can lead to full system takeover.
CVE-2026-0974 Vulnerability in wordpress (CVE-2026-0974)
vulnerability in wordpress (CVE-2026-0974). Successful exploitation can lead to full system takeover.
CVE-2026-23228 Vulnerability in linux (CVE-2026-23228)
vulnerability in linux (CVE-2026-23228). Risk of unauthorized operations or information disclosure.
CVE-2026-23229 Vulnerability in linux (CVE-2026-23229)
vulnerability in linux (CVE-2026-23229). Risk of unauthorized operations or information disclosure.
CVE-2026-23230 In the Linux kernel, the following vulnerability has been resolved: smb: client: split...
In the Linux kernel, the following vulnerability has been resolved: smb: client: split...
CVE-2026-23220 Vulnerability in linux (CVE-2026-23220)
vulnerability in linux (CVE-2026-23220). Risk of unauthorized operations or information disclosure.
CVE-2026-23222 Vulnerability in linux (CVE-2026-23222)
vulnerability in linux (CVE-2026-23222). Successful exploitation can lead to full system takeover.
CVE-2025-71234 Out-of-Bounds Write in linux (CVE-2025-71234)
out-of-bounds write in linux (CVE-2025-71234). Successful exploitation can lead to full system takeover.
CVE-2025-71236 Vulnerability in linux (CVE-2025-71236)
vulnerability in linux (CVE-2025-71236). Risk of unauthorized operations or information disclosure.
CVE-2026-22769 KEV [KEV] Vulnerability in Dell recoverpoint-for-virtual-machines-rp4vms (CVE-2026-22769)
vulnerability in Dell recoverpoint-for-virtual-machines-rp4vms (CVE-2026-22769). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-22175 KEV [KEV] SSRF (Server-Side Request Forgery) in gitlab (CVE-2021-22175)
SSRF in gitlab (CVE-2021-22175). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-24734 Vulnerability in apache (CVE-2026-24734)
vulnerability in apache (CVE-2026-24734). Data can be tampered with by attackers.
CVE-2020-7796 KEV [KEV] SSRF (Server-Side Request Forgery) in Synacor zimbra-collaboration-suite (CVE-2020-7796)
SSRF in Synacor zimbra-collaboration-suite (CVE-2020-7796). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-7694 KEV [KEV] Unrestricted File Upload in Teamt5 threatsonar-anti-ransomware (CVE-2024-7694)
vulnerability in Teamt5 threatsonar-anti-ransomware (CVE-2024-7694). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-2441 KEV [KEV] Use-After-Free in Google chromium (CVE-2026-2441)
vulnerability in Google chromium (CVE-2026-2441). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2008-0015 KEV [KEV] Vulnerability in Microsoft windows (CVE-2008-0015)
vulnerability in Microsoft windows (CVE-2008-0015). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-2447 Vulnerability in mozilla (CVE-2026-2447)
vulnerability in mozilla (CVE-2026-2447). Successful exploitation can lead to full system takeover.
CVE-2026-23185 Use-After-Free in linux (CVE-2026-23185)
vulnerability in linux (CVE-2026-23185). Successful exploitation can lead to full system takeover.
CVE-2025-71204 Vulnerability in linux (CVE-2025-71204)
vulnerability in linux (CVE-2025-71204). Risk of unauthorized operations or information disclosure.
CVE-2025-71221 Vulnerability in linux (CVE-2025-71221)
vulnerability in linux (CVE-2025-71221). Successful exploitation can lead to full system takeover.
CVE-2026-23204 Out-of-Bounds Read in c (CVE-2026-23204)
vulnerability in c (CVE-2026-23204). Confidential information can be exposed externally.
CVE-2026-23171 Use-After-Free in c (CVE-2026-23171)
vulnerability in c (CVE-2026-23171). Successful exploitation can lead to full system takeover.
CVE-2026-23151 Vulnerability in linux (CVE-2026-23151)
vulnerability in linux (CVE-2026-23151). Risk of unauthorized operations or information disclosure.
CVE-2026-23157 Vulnerability in linux (CVE-2026-23157)
vulnerability in linux (CVE-2026-23157). Risk of unauthorized operations or information disclosure.
CVE-2026-23154 Vulnerability in linux (CVE-2026-23154)
vulnerability in linux (CVE-2026-23154). Risk of unauthorized operations or information disclosure.
CVE-2026-23141 Vulnerability in linux (CVE-2026-23141)
vulnerability in linux (CVE-2026-23141). Risk of unauthorized operations or information disclosure.
CVE-2025-71201 Out-of-Bounds Read in c (CVE-2025-71201)
vulnerability in c (CVE-2025-71201). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →