Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-69245 |
|
Vulnerability in guzzlehttp/guzzle (CVE-2026-69245)
vulnerability in guzzlehttp/guzzle (CVE-2026-69245). Risk of unauthorized operations or information disclosure. Exploitable via ``Domain``. Mitigation: upgrade to `7.15.2` or later.
|
| CVE-2021-32088 |
|
Vulnerability in quest (CVE-2021-32088)
vulnerability in quest (CVE-2021-32088). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59883 |
|
Information Disclosure in guzzlehttp/guzzle (CVE-2026-59883)
vulnerability in guzzlehttp/guzzle (CVE-2026-59883). Risk of unauthorized operations or information disclosure. Exploitable via ``CookieJar``. Mitigation: upgrade to `7.12.3` or later.
|
| CVE-2026-13707 |
|
Vulnerability in mediawiki (CVE-2026-13707)
vulnerability in mediawiki (CVE-2026-13707). Confidential information can be exposed externally.
|
| CVE-2026-40082 |
|
Vulnerability in cacti (CVE-2026-40082)
vulnerability in cacti (CVE-2026-40082). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56425 |
|
Vulnerability in csrf (CVE-2026-56425)
vulnerability in csrf (CVE-2026-56425). Successful exploitation can lead to full system takeover. Exploitable via `Referer header`.
|
| CVE-2026-53900 |
|
Vulnerability in mozilla (CVE-2026-53900)
vulnerability in mozilla (CVE-2026-53900). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41839 |
|
Vulnerability in org.springframework:spring-webflux (CVE-2026-41839)
vulnerability in org.springframework:spring-webflux (CVE-2026-41839). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11335 |
|
Vulnerability in CVE-2026-11335 (CVE-2026-11335)
vulnerability in CVE-2026-11335 (CVE-2026-11335). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43827 |
|
Vulnerability in org.apache.shiro:shiro-core (CVE-2026-43827)
vulnerability in org.apache.shiro:shiro-core (CVE-2026-43827). Confidential information can be exposed externally. Mitigation: upgrade to `3.0.0-alpha-2` or later.
|
| CVE-2026-41613 |
|
OS Command Injection in microsoft (CVE-2026-41613)
OS command injection in microsoft (CVE-2026-41613). Successful exploitation can lead to full system takeover.
|
| CVE-2025-46605 |
|
Vulnerability in dell (CVE-2025-46605)
vulnerability in dell (CVE-2025-46605). Confidential information can be exposed externally.
|
| CVE-2025-45953 |
|
Vulnerability in phpgurukul (CVE-2025-45953)
vulnerability in phpgurukul (CVE-2025-45953). Confidential information can be exposed externally.
|
| CVE-2025-45949 |
|
Vulnerability in phpgurukul (CVE-2025-45949)
vulnerability in phpgurukul (CVE-2025-45949). Successful exploitation can lead to full system takeover.
|
| CVE-2023-50176 |
|
Vulnerability in fortinet (CVE-2023-50176)
vulnerability in fortinet (CVE-2023-50176). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-2351 |
|
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unau...
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Su...
|
| CVE-2017-1270 |
|
Vulnerability in ibm (CVE-2017-1270)
vulnerability in ibm (CVE-2017-1270). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11562 |
|
Vulnerability in mt4 (CVE-2017-11562)
vulnerability in mt4 (CVE-2017-11562). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15304 |
|
Vulnerability in airtame (CVE-2017-15304)
vulnerability in airtame (CVE-2017-15304). Successful exploitation can lead to full system takeover.
|
| CVE-2017-12225 |
|
Authentication Bypass in cisco (CVE-2017-12225)
authentication bypass in cisco (CVE-2017-12225). Data can be tampered with by attackers.
|
| CVE-2016-10405 |
|
Vulnerability in d-link (CVE-2016-10405)
vulnerability in d-link (CVE-2016-10405). Successful exploitation can lead to full system takeover.
|
| CVE-2017-12868 |
|
Vulnerability in simplesamlphp (CVE-2017-12868)
vulnerability in simplesamlphp (CVE-2017-12868). Successful exploitation can lead to full system takeover.
|
| CVE-2016-9981 |
|
Vulnerability in ibm (CVE-2016-9981)
vulnerability in ibm (CVE-2016-9981). Successful exploitation can lead to full system takeover.
|
| CVE-2017-4014 |
|
Vulnerability in mcafee (CVE-2017-4014)
vulnerability in mcafee (CVE-2017-4014). Successful exploitation can lead to full system takeover.
|
| CVE-2017-5656 |
|
Vulnerability in apache (CVE-2017-5656)
vulnerability in apache (CVE-2017-5656). Confidential information can be exposed externally.
|
| CVE-2017-1152 |
|
Vulnerability in ibm (CVE-2017-1152)
vulnerability in ibm (CVE-2017-1152). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6412 |
|
In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.
In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.
|
| CVE-2016-9703 |
|
Vulnerability in ibm (CVE-2016-9703)
vulnerability in ibm (CVE-2016-9703). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-6043 |
|
Vulnerability in ibm (CVE-2016-6043)
vulnerability in ibm (CVE-2016-6043). Successful exploitation can lead to full system takeover.
|
| CVE-2016-6040 |
|
Vulnerability in ibm (CVE-2016-6040)
vulnerability in ibm (CVE-2016-6040). Risk of unauthorized operations or information disclosure.
|