Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-43037 |
|
Out-of-Bounds Write in linux (CVE-2026-43037)
out-of-bounds write in linux (CVE-2026-43037). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43039 |
|
Vulnerability in linux (CVE-2026-43039)
vulnerability in linux (CVE-2026-43039). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43038 |
|
Vulnerability in linux (CVE-2026-43038)
vulnerability in linux (CVE-2026-43038). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43011 |
|
Vulnerability in c (CVE-2026-43011)
vulnerability in c (CVE-2026-43011). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31718 |
|
Use-After-Free in linux (CVE-2026-31718)
vulnerability in linux (CVE-2026-31718). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31705 |
|
Out-of-Bounds Write in linux (CVE-2026-31705)
out-of-bounds write in linux (CVE-2026-31705). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42249 |
|
Path Traversal in path-traversal (CVE-2026-42249)
path traversal in path-traversal (CVE-2026-42249). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42248 |
|
Vulnerability in ollama (CVE-2026-42248)
vulnerability in ollama (CVE-2026-42248). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7333 |
|
Use-After-Free in google (CVE-2026-7333)
vulnerability in google (CVE-2026-7333). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40976 |
|
Vulnerability in org.springframework.boot:spring-boot (CVE-2026-40976)
vulnerability in org.springframework.boot:spring-boot (CVE-2026-40976). Confidential information can be exposed externally. Mitigation: upgrade to `4.0.6` or later.
|
| CVE-2026-33453 |
|
Vulnerability in apache (CVE-2026-33453)
vulnerability in apache (CVE-2026-33453). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33454 |
|
Unsafe Deserialization in apache (CVE-2026-33454)
vulnerability in apache (CVE-2026-33454). Confidential information can be exposed externally.
|
| CVE-2026-40453 |
|
Vulnerability in org.apache.camel:camel-coap (CVE-2026-40453)
vulnerability in org.apache.camel:camel-coap (CVE-2026-40453). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.20.0` or later.
|
| CVE-2026-40860 |
|
Unsafe Deserialization in org.apache.camel:camel-jms (CVE-2026-40860)
vulnerability in org.apache.camel:camel-jms (CVE-2026-40860). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.20.0` or later.
|
| CVE-2026-31685 |
|
Vulnerability in linux (CVE-2026-31685)
vulnerability in linux (CVE-2026-31685). Confidential information can be exposed externally.
|
| CVE-2026-31682 |
|
Vulnerability in linux (CVE-2026-31682)
vulnerability in linux (CVE-2026-31682). Confidential information can be exposed externally.
|
| CVE-2026-31669 |
|
Use-After-Free in linux (CVE-2026-31669)
vulnerability in linux (CVE-2026-31669). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31657 |
|
Vulnerability in linux (CVE-2026-31657)
vulnerability in linux (CVE-2026-31657). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31649 |
|
Vulnerability in linux (CVE-2026-31649)
vulnerability in linux (CVE-2026-31649). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31637 |
|
Vulnerability in linux (CVE-2026-31637)
vulnerability in linux (CVE-2026-31637). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31607 |
|
Out-of-Bounds Write in c (CVE-2026-31607)
out-of-bounds write in c (CVE-2026-31607). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6919 |
|
Use-After-Free in google (CVE-2026-6919)
vulnerability in google (CVE-2026-6919). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6920 |
|
Out-of-Bounds Read in google (CVE-2026-6920)
vulnerability in google (CVE-2026-6920). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31533 |
|
Use-After-Free in linux (CVE-2026-31533)
vulnerability in linux (CVE-2026-31533). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34415 |
|
Vulnerability in path-traversal (CVE-2026-34415)
vulnerability in path-traversal (CVE-2026-34415). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31448 |
|
Vulnerability in c (CVE-2026-31448)
vulnerability in c (CVE-2026-31448). Data can be tampered with by attackers.
|
| CVE-2026-31436 |
|
Vulnerability in linux (CVE-2026-31436)
vulnerability in linux (CVE-2026-31436). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6235 |
|
Vulnerability in wordpress (CVE-2026-6235)
vulnerability in wordpress (CVE-2026-6235). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33518 |
|
Vulnerability in esri (CVE-2026-33518)
vulnerability in esri (CVE-2026-33518). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33519 |
|
Vulnerability in esri (CVE-2026-33519)
vulnerability in esri (CVE-2026-33519). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40372 |
|
Vulnerability in aspnet-core (CVE-2026-40372)
vulnerability in aspnet-core (CVE-2026-40372). Confidential information can be exposed externally. Mitigation: upgrade to `10.0.7` or later.
|
| CVE-2026-6748 |
|
Vulnerability in mozilla (CVE-2026-6748)
vulnerability in mozilla (CVE-2026-6748). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5450 |
|
Vulnerability in c (CVE-2026-5450)
vulnerability in c (CVE-2026-5450). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39918 |
|
Code Injection in CVE-2026-39918 (CVE-2026-39918)
code injection in CVE-2026-39918 (CVE-2026-39918). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33557 |
|
Vulnerability in kafka (CVE-2026-33557)
vulnerability in kafka (CVE-2026-33557). Confidential information can be exposed externally. Exploitable via ``sasl.oauthbearer.jwt.validator.class``. Mitigation: upgrade to `4.1.2` or later.
|
| CVE-2026-40477 |
|
Vulnerability in thymeleaf (CVE-2026-40477)
vulnerability in thymeleaf (CVE-2026-40477). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40478 |
|
Vulnerability in thymeleaf (CVE-2026-40478)
vulnerability in thymeleaf (CVE-2026-40478). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43995 |
|
SSRF (Server-Side Request Forgery) in flowise (CVE-2026-43995)
SSRF in flowise (CVE-2026-43995). Successful exploitation can lead to full system takeover. Exploitable via ``httpSecurity.ts``. Mitigation: upgrade to `3.1.0` or later.
|
| CVE-2026-31843 |
|
Vulnerability in goodoneuz/pay-uz (CVE-2026-31843)
vulnerability in goodoneuz/pay-uz (CVE-2026-31843). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.0.0` or later.
|
| CVE-2026-6296 |
|
Vulnerability in google (CVE-2026-6296)
vulnerability in google (CVE-2026-6296). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20186 |
|
Command Injection in dos (CVE-2026-20186)
command injection in dos (CVE-2026-20186). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27304 |
|
Vulnerability in adobe (CVE-2026-27304)
vulnerability in adobe (CVE-2026-27304). Confidential information can be exposed externally.
|
| CVE-2026-34615 |
|
Unsafe Deserialization in deserialization (CVE-2026-34615)
vulnerability in deserialization (CVE-2026-34615). Confidential information can be exposed externally.
|
| CVE-2026-33824 KEV |
|
[KEV] Vulnerability in Microsoft windows-10-1607 (CVE-2026-33824)
vulnerability in Microsoft windows-10-1607 (CVE-2026-33824). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-27246 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27246)
cross-site scripting in adobe (CVE-2026-27246). Confidential information can be exposed externally.
|
| CVE-2026-27303 |
|
Unsafe Deserialization in deserialization (CVE-2026-27303)
vulnerability in deserialization (CVE-2026-27303). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27243 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27243)
cross-site scripting in adobe (CVE-2026-27243). Confidential information can be exposed externally.
|
| CVE-2026-27245 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27245)
cross-site scripting in adobe (CVE-2026-27245). Confidential information can be exposed externally.
|
| CVE-2026-39813 |
|
Vulnerability in path-traversal (CVE-2026-39813)
vulnerability in path-traversal (CVE-2026-39813). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31414 |
|
Vulnerability in linux (CVE-2026-31414)
vulnerability in linux (CVE-2026-31414). Successful exploitation can lead to full system takeover.
|