Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Tag: cwe-90 Clear
ID Title
CVE-2026-75020 Vulnerability in apache (CVE-2026-75020)
vulnerability in apache (CVE-2026-75020). Risk of unauthorized operations or information disclosure.
CVE-2026-19930 Vulnerability in CVE-2026-19930 (CVE-2026-19930)
vulnerability in CVE-2026-19930 (CVE-2026-19930). Risk of unauthorized operations or information disclosure.
CVE-2026-59652 In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.
In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.
CVE-2026-44616 Vulnerability in apache (CVE-2026-44616)
vulnerability in apache (CVE-2026-44616). Confidential information can be exposed externally.
CVE-2026-44617 Vulnerability in apache (CVE-2026-44617)
vulnerability in apache (CVE-2026-44617). Risk of unauthorized operations or information disclosure.
CVE-2026-47303 Vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47303)
vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47303). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.29` or later.
CVE-2026-57288 Vulnerability in jenkins (CVE-2026-57288)
vulnerability in jenkins (CVE-2026-57288). Risk of unauthorized operations or information disclosure.
CVE-2026-49268 Vulnerability in org.apache.shiro:shiro-core (CVE-2026-49268)
vulnerability in org.apache.shiro:shiro-core (CVE-2026-49268). Confidential information can be exposed externally. Mitigation: upgrade to `3.0.0-alpha-2` or later.
CVE-2026-45559 Vulnerability in nginx (CVE-2026-45559)
vulnerability in nginx (CVE-2026-45559). Confidential information can be exposed externally.
CVE-2026-46745 Vulnerability in apache-airflow-providers-fab (CVE-2026-46745)
vulnerability in apache-airflow-providers-fab (CVE-2026-46745). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.4` or later.
CVE-2026-44930 Vulnerability in org.apache.cxf.services.xkms:cxf-services-xkms-x509-repo-ldap (CVE-2026-44930)
vulnerability in org.apache.cxf.services.xkms:cxf-services-xkms-x509-repo-ldap (CVE-2026-44930). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.6.11` or later.
CVE-2026-41919 Vulnerability in apache (CVE-2026-41919)
vulnerability in apache (CVE-2026-41919). Confidential information can be exposed externally.
CVE-2026-0636 Vulnerability in CVE-2026-0636 (CVE-2026-0636)
vulnerability in CVE-2026-0636 (CVE-2026-0636). Risk of unauthorized operations or information disclosure.
CVE-2026-39962 Vulnerability in misp-project (CVE-2026-39962)
vulnerability in misp-project (CVE-2026-39962). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.5.36` or later.
CVE-2017-4927 Vulnerability in dos (CVE-2017-4927)
vulnerability in dos (CVE-2017-4927). Risk of unauthorized operations or information disclosure.
CVE-2017-14596 Vulnerability in joomla (CVE-2017-14596)
vulnerability in joomla (CVE-2017-14596). Successful exploitation can lead to full system takeover.
CVE-2017-8790 Vulnerability in accellion (CVE-2017-8790)
vulnerability in accellion (CVE-2017-8790). Successful exploitation can lead to full system takeover.
CVE-2016-9299 Vulnerability in jenkins (CVE-2016-9299)
vulnerability in jenkins (CVE-2016-9299). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →