Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2025-40551 KEV |
|
[KEV] Unsafe Deserialization in Solarwinds web-help-desk (CVE-2025-40551)
vulnerability in Solarwinds web-help-desk (CVE-2025-40551). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-39935 KEV |
|
[KEV] SSRF (Server-Side Request Forgery) in Gitlab community-and-enterprise-editions (CVE-2021-39935)
SSRF in Gitlab community-and-enterprise-editions (CVE-2021-39935). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-64328 KEV |
|
[KEV] OS Command Injection in Sangoma freepbx (CVE-2025-64328)
OS command injection in Sangoma freepbx (CVE-2025-64328). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2019-19006 KEV |
|
[KEV] Authentication Bypass in Sangoma freepbx (CVE-2019-19006)
authentication bypass in Sangoma freepbx (CVE-2019-19006). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-22226 |
|
OS Command Injection in tp-link (CVE-2026-22226)
OS command injection in tp-link (CVE-2026-22226). Successful exploitation can lead to full system takeover.
|
| CVE-2026-0631 |
|
OS Command Injection in tp-link (CVE-2026-0631)
OS command injection in tp-link (CVE-2026-0631). Successful exploitation can lead to full system takeover.
|
| CVE-2026-23019 |
|
Vulnerability in linux (CVE-2026-23019)
vulnerability in linux (CVE-2026-23019). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-23025 |
|
Vulnerability in c (CVE-2026-23025)
vulnerability in c (CVE-2026-23025). Successful exploitation can lead to full system takeover.
|
| CVE-2026-23026 |
|
Vulnerability in linux (CVE-2026-23026)
vulnerability in linux (CVE-2026-23026). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71188 |
|
Vulnerability in linux (CVE-2025-71188)
vulnerability in linux (CVE-2025-71188). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71189 |
|
Vulnerability in linux (CVE-2025-71189)
vulnerability in linux (CVE-2025-71189). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71190 |
|
Vulnerability in linux (CVE-2025-71190)
vulnerability in linux (CVE-2025-71190). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71191 |
|
Vulnerability in linux (CVE-2025-71191)
vulnerability in linux (CVE-2025-71191). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71185 |
|
Vulnerability in linux (CVE-2025-71185)
vulnerability in linux (CVE-2025-71185). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71186 |
|
Vulnerability in linux (CVE-2025-71186)
vulnerability in linux (CVE-2025-71186). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71183 |
|
Vulnerability in Kernel (CVE-2025-71183)
vulnerability in Kernel (CVE-2025-71183). Data can be tampered with by attackers. Mitigation: upgrade to `6.1.161, 6.6.121, 6.12.66, 6.18.6` or later.
|
| CVE-2025-24293 |
|
Command Injection in CVE-2025-24293 (CVE-2025-24293)
command injection in CVE-2025-24293 (CVE-2025-24293). Successful exploitation can lead to full system takeover.
|
| CGA-7jqj-8457-jm46 |
|
Vulnerability in amazon-ecs-agent-fips (CGA-7jqj-8457-jm46)
vulnerability in amazon-ecs-agent-fips (CGA-7jqj-8457-jm46). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.100.1-r2` or later.
|
| CVE-2026-1281 KEV |
|
[KEV] Code Injection in Ivanti endpoint-manager-mobile-epmm (CVE-2026-1281)
code injection in Ivanti endpoint-manager-mobile-epmm (CVE-2026-1281). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-24869 |
|
Use-After-Free in mozilla (CVE-2026-24869)
vulnerability in mozilla (CVE-2026-24869). Successful exploitation can lead to full system takeover.
|
| CVE-2026-22795 |
|
Vulnerability in dos (CVE-2026-22795)
vulnerability in dos (CVE-2026-22795). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-69419 |
|
Out-of-Bounds Write in dos (CVE-2025-69419)
out-of-bounds write in dos (CVE-2025-69419). Confidential information can be exposed externally.
|
| CVE-2025-69420 |
|
Vulnerability in dos (CVE-2025-69420)
vulnerability in dos (CVE-2025-69420). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-69421 |
|
Vulnerability in dos (CVE-2025-69421)
vulnerability in dos (CVE-2025-69421). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-69418 |
|
Vulnerability in openssl (CVE-2025-69418)
vulnerability in openssl (CVE-2025-69418). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-68160 |
|
Out-of-Bounds Write in dos (CVE-2025-68160)
out-of-bounds write in dos (CVE-2025-68160). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-15467 |
|
Out-of-Bounds Write in cisa (CVE-2025-15467)
out-of-bounds write in cisa (CVE-2025-15467). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24858 KEV |
|
[KEV] Vulnerability in Fortinet multiple-products (CVE-2026-24858)
vulnerability in Fortinet multiple-products (CVE-2026-24858). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2025-52691 KEV |
|
[KEV] Unrestricted File Upload in Smartertools smartermail (CVE-2025-52691)
vulnerability in Smartertools smartermail (CVE-2025-52691). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-23760 KEV |
|
[KEV] Vulnerability in Smartertools smartermail (CVE-2026-23760)
vulnerability in Smartertools smartermail (CVE-2026-23760). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-24061 KEV |
|
[KEV] Vulnerability in Gnu inetutils (CVE-2026-24061)
vulnerability in Gnu inetutils (CVE-2026-24061). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2018-14634 KEV |
|
[KEV] Vulnerability in Linux kernel (CVE-2018-14634)
vulnerability in Linux kernel (CVE-2018-14634). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-21509 KEV |
|
[KEV] Vulnerability in Microsoft office (CVE-2026-21509)
vulnerability in Microsoft office (CVE-2026-21509). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-23003 |
|
Vulnerability in c (CVE-2026-23003)
vulnerability in c (CVE-2026-23003). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-23005 |
|
Vulnerability in c (CVE-2026-23005)
vulnerability in c (CVE-2026-23005). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-23010 |
|
Use-After-Free in c (CVE-2026-23010)
vulnerability in c (CVE-2026-23010). Successful exploitation can lead to full system takeover.
|
| CVE-2026-23011 |
|
Vulnerability in c (CVE-2026-23011)
vulnerability in c (CVE-2026-23011). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71163 |
|
Vulnerability in linux (CVE-2025-71163)
vulnerability in linux (CVE-2025-71163). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71162 |
|
Use-After-Free in linux (CVE-2025-71162)
vulnerability in linux (CVE-2025-71162). Successful exploitation can lead to full system takeover.
|
| CVE-2025-14843 |
|
Vulnerability in wordpress (CVE-2025-14843)
vulnerability in wordpress (CVE-2025-14843). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-52023 |
|
Vulnerability in aptsys (CVE-2025-52023)
vulnerability in aptsys (CVE-2025-52023). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-52022 |
|
Vulnerability in aptsys (CVE-2025-52022)
vulnerability in aptsys (CVE-2025-52022). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-22992 |
|
Vulnerability in linux (CVE-2026-22992)
vulnerability in linux (CVE-2026-22992). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-22994 |
|
Vulnerability in linux (CVE-2026-22994)
vulnerability in linux (CVE-2026-22994). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-22980 |
|
Use-After-Free in linux (CVE-2026-22980)
vulnerability in linux (CVE-2026-22980). Successful exploitation can lead to full system takeover.
|
| CVE-2026-22982 |
|
Vulnerability in c (CVE-2026-22982)
vulnerability in c (CVE-2026-22982). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-22979 |
|
Vulnerability in linux (CVE-2026-22979)
vulnerability in linux (CVE-2026-22979). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71161 |
|
Vulnerability in linux (CVE-2025-71161)
vulnerability in linux (CVE-2025-71161). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71158 |
|
Vulnerability in linux (CVE-2025-71158)
vulnerability in linux (CVE-2025-71158). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71159 |
|
Use-After-Free in linux (CVE-2025-71159)
vulnerability in linux (CVE-2025-71159). Successful exploitation can lead to full system takeover.
|