Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-43037 Out-of-Bounds Write in linux (CVE-2026-43037)
out-of-bounds write in linux (CVE-2026-43037). Successful exploitation can lead to full system takeover.
CVE-2026-43039 Vulnerability in linux (CVE-2026-43039)
vulnerability in linux (CVE-2026-43039). Successful exploitation can lead to full system takeover.
CVE-2026-43038 Vulnerability in linux (CVE-2026-43038)
vulnerability in linux (CVE-2026-43038). Successful exploitation can lead to full system takeover.
CVE-2026-43011 Vulnerability in c (CVE-2026-43011)
vulnerability in c (CVE-2026-43011). Successful exploitation can lead to full system takeover.
CVE-2026-31718 Use-After-Free in linux (CVE-2026-31718)
vulnerability in linux (CVE-2026-31718). Successful exploitation can lead to full system takeover.
CVE-2026-31705 Out-of-Bounds Write in linux (CVE-2026-31705)
out-of-bounds write in linux (CVE-2026-31705). Successful exploitation can lead to full system takeover.
CVE-2026-42249 Path Traversal in path-traversal (CVE-2026-42249)
path traversal in path-traversal (CVE-2026-42249). Successful exploitation can lead to full system takeover.
CVE-2026-42248 Vulnerability in ollama (CVE-2026-42248)
vulnerability in ollama (CVE-2026-42248). Successful exploitation can lead to full system takeover.
CVE-2026-7333 Use-After-Free in google (CVE-2026-7333)
vulnerability in google (CVE-2026-7333). Successful exploitation can lead to full system takeover.
CVE-2026-40976 Vulnerability in org.springframework.boot:spring-boot (CVE-2026-40976)
vulnerability in org.springframework.boot:spring-boot (CVE-2026-40976). Confidential information can be exposed externally. Mitigation: upgrade to `4.0.6` or later.
CVE-2026-33453 Vulnerability in apache (CVE-2026-33453)
vulnerability in apache (CVE-2026-33453). Successful exploitation can lead to full system takeover.
CVE-2026-33454 Unsafe Deserialization in apache (CVE-2026-33454)
vulnerability in apache (CVE-2026-33454). Confidential information can be exposed externally.
CVE-2026-40453 Vulnerability in org.apache.camel:camel-coap (CVE-2026-40453)
vulnerability in org.apache.camel:camel-coap (CVE-2026-40453). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.20.0` or later.
CVE-2026-40860 Unsafe Deserialization in org.apache.camel:camel-jms (CVE-2026-40860)
vulnerability in org.apache.camel:camel-jms (CVE-2026-40860). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.20.0` or later.
CVE-2026-31685 Vulnerability in linux (CVE-2026-31685)
vulnerability in linux (CVE-2026-31685). Confidential information can be exposed externally.
CVE-2026-31682 Vulnerability in linux (CVE-2026-31682)
vulnerability in linux (CVE-2026-31682). Confidential information can be exposed externally.
CVE-2026-31669 Use-After-Free in linux (CVE-2026-31669)
vulnerability in linux (CVE-2026-31669). Successful exploitation can lead to full system takeover.
CVE-2026-31657 Vulnerability in linux (CVE-2026-31657)
vulnerability in linux (CVE-2026-31657). Successful exploitation can lead to full system takeover.
CVE-2026-31649 Vulnerability in linux (CVE-2026-31649)
vulnerability in linux (CVE-2026-31649). Successful exploitation can lead to full system takeover.
CVE-2026-31637 Vulnerability in linux (CVE-2026-31637)
vulnerability in linux (CVE-2026-31637). Successful exploitation can lead to full system takeover.
CVE-2026-31607 Out-of-Bounds Write in c (CVE-2026-31607)
out-of-bounds write in c (CVE-2026-31607). Successful exploitation can lead to full system takeover.
CVE-2026-6919 Use-After-Free in google (CVE-2026-6919)
vulnerability in google (CVE-2026-6919). Successful exploitation can lead to full system takeover.
CVE-2026-6920 Out-of-Bounds Read in google (CVE-2026-6920)
vulnerability in google (CVE-2026-6920). Successful exploitation can lead to full system takeover.
CVE-2026-31533 Use-After-Free in linux (CVE-2026-31533)
vulnerability in linux (CVE-2026-31533). Successful exploitation can lead to full system takeover.
CVE-2026-34415 Vulnerability in path-traversal (CVE-2026-34415)
vulnerability in path-traversal (CVE-2026-34415). Successful exploitation can lead to full system takeover.
CVE-2026-31448 Vulnerability in c (CVE-2026-31448)
vulnerability in c (CVE-2026-31448). Data can be tampered with by attackers.
CVE-2026-31436 Vulnerability in linux (CVE-2026-31436)
vulnerability in linux (CVE-2026-31436). Successful exploitation can lead to full system takeover.
CVE-2026-6235 Vulnerability in wordpress (CVE-2026-6235)
vulnerability in wordpress (CVE-2026-6235). Successful exploitation can lead to full system takeover.
CVE-2026-33518 Vulnerability in esri (CVE-2026-33518)
vulnerability in esri (CVE-2026-33518). Successful exploitation can lead to full system takeover.
CVE-2026-33519 Vulnerability in esri (CVE-2026-33519)
vulnerability in esri (CVE-2026-33519). Successful exploitation can lead to full system takeover.
CVE-2026-40372 Vulnerability in aspnet-core (CVE-2026-40372)
vulnerability in aspnet-core (CVE-2026-40372). Confidential information can be exposed externally. Mitigation: upgrade to `10.0.7` or later.
CVE-2026-6748 Vulnerability in mozilla (CVE-2026-6748)
vulnerability in mozilla (CVE-2026-6748). Successful exploitation can lead to full system takeover.
CVE-2026-5450 Vulnerability in c (CVE-2026-5450)
vulnerability in c (CVE-2026-5450). Successful exploitation can lead to full system takeover.
CVE-2026-39918 Code Injection in CVE-2026-39918 (CVE-2026-39918)
code injection in CVE-2026-39918 (CVE-2026-39918). Successful exploitation can lead to full system takeover.
CVE-2026-33557 Vulnerability in kafka (CVE-2026-33557)
vulnerability in kafka (CVE-2026-33557). Confidential information can be exposed externally. Exploitable via ``sasl.oauthbearer.jwt.validator.class``. Mitigation: upgrade to `4.1.2` or later.
CVE-2026-40477 Vulnerability in thymeleaf (CVE-2026-40477)
vulnerability in thymeleaf (CVE-2026-40477). Successful exploitation can lead to full system takeover.
CVE-2026-40478 Vulnerability in thymeleaf (CVE-2026-40478)
vulnerability in thymeleaf (CVE-2026-40478). Successful exploitation can lead to full system takeover.
CVE-2026-43995 SSRF (Server-Side Request Forgery) in flowise (CVE-2026-43995)
SSRF in flowise (CVE-2026-43995). Successful exploitation can lead to full system takeover. Exploitable via ``httpSecurity.ts``. Mitigation: upgrade to `3.1.0` or later.
CVE-2026-31843 Vulnerability in goodoneuz/pay-uz (CVE-2026-31843)
vulnerability in goodoneuz/pay-uz (CVE-2026-31843). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.0.0` or later.
CVE-2026-6296 Vulnerability in google (CVE-2026-6296)
vulnerability in google (CVE-2026-6296). Successful exploitation can lead to full system takeover.
CVE-2026-20186 Command Injection in dos (CVE-2026-20186)
command injection in dos (CVE-2026-20186). Successful exploitation can lead to full system takeover.
CVE-2026-27304 Vulnerability in adobe (CVE-2026-27304)
vulnerability in adobe (CVE-2026-27304). Confidential information can be exposed externally.
CVE-2026-34615 Unsafe Deserialization in deserialization (CVE-2026-34615)
vulnerability in deserialization (CVE-2026-34615). Confidential information can be exposed externally.
CVE-2026-33824 KEV [KEV] Vulnerability in Microsoft windows-10-1607 (CVE-2026-33824)
vulnerability in Microsoft windows-10-1607 (CVE-2026-33824). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-27246 Cross-Site Scripting (XSS) in adobe (CVE-2026-27246)
cross-site scripting in adobe (CVE-2026-27246). Confidential information can be exposed externally.
CVE-2026-27303 Unsafe Deserialization in deserialization (CVE-2026-27303)
vulnerability in deserialization (CVE-2026-27303). Successful exploitation can lead to full system takeover.
CVE-2026-27243 Cross-Site Scripting (XSS) in adobe (CVE-2026-27243)
cross-site scripting in adobe (CVE-2026-27243). Confidential information can be exposed externally.
CVE-2026-27245 Cross-Site Scripting (XSS) in adobe (CVE-2026-27245)
cross-site scripting in adobe (CVE-2026-27245). Confidential information can be exposed externally.
CVE-2026-39813 Vulnerability in path-traversal (CVE-2026-39813)
vulnerability in path-traversal (CVE-2026-39813). Successful exploitation can lead to full system takeover.
CVE-2026-31414 Vulnerability in linux (CVE-2026-31414)
vulnerability in linux (CVE-2026-31414). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →