Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-50645 |
|
Vulnerability in org.apache.cxf:cxf-core (CVE-2026-50645)
vulnerability in org.apache.cxf:cxf-core (CVE-2026-50645). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.12` or later.
|
| CVE-2026-50633 |
|
Vulnerability in org.apache.cxf:cxf-integration-jca (CVE-2026-50633)
vulnerability in org.apache.cxf:cxf-integration-jca (CVE-2026-50633). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50632 |
|
Vulnerability in org.apache.cxf:cxf-rt-transports-jms (CVE-2026-50632)
vulnerability in org.apache.cxf:cxf-rt-transports-jms (CVE-2026-50632). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-50631 |
|
Vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50631)
vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50631). Confidential information can be exposed externally. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-11846 |
|
Path Traversal in CVE-2026-11846 (CVE-2026-11846)
path traversal in CVE-2026-11846 (CVE-2026-11846). Data can be tampered with by attackers.
|
| CVE-2026-11845 |
|
OS Command Injection in CVE-2026-11845 (CVE-2026-11845)
OS command injection in CVE-2026-11845 (CVE-2026-11845). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12059 |
|
Vulnerability in CVE-2026-12059 (CVE-2026-12059)
vulnerability in CVE-2026-12059 (CVE-2026-12059). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45169 |
|
Vulnerability in dos (CVE-2026-45169)
vulnerability in dos (CVE-2026-45169). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48612 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-48612 (CVE-2026-48612)
vulnerability in CVE-2026-48612 (CVE-2026-48612). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47368 |
|
Path Traversal in path-traversal (CVE-2026-47368)
path traversal in path-traversal (CVE-2026-47368). Confidential information can be exposed externally.
|
| CVE-2026-48610 |
|
Vulnerability in CVE-2026-48610 (CVE-2026-48610)
vulnerability in CVE-2026-48610 (CVE-2026-48610). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47366 |
|
Vulnerability in privilege-escalation (CVE-2026-47366)
vulnerability in privilege-escalation (CVE-2026-47366). Successful exploitation can lead to full system takeover.
|
| CVE-2025-7737 |
|
Vulnerability in jvn (CVE-2025-7737)
vulnerability in jvn (CVE-2025-7737). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45170 |
|
Vulnerability in paloaltonetworks (CVE-2026-45170)
vulnerability in paloaltonetworks (CVE-2026-45170). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11933 |
|
Post-authentication use-after-free in server-side JavaScript BSON-to-array conversion
Post-authentication use-after-free in server-side JavaScript BSON-to-array conversion
|
| CVE-2026-45418 |
|
SQL Injection in sqli (CVE-2026-45418)
SQL injection in sqli (CVE-2026-45418). Successful exploitation can lead to full system takeover. Exploitable via `POST /actions/subtitle_edit.php`.
|
| CVE-2026-6250 |
|
Vulnerability in tp-link (CVE-2026-6250)
vulnerability in tp-link (CVE-2026-6250). Data can be tampered with by attackers.
|
| CVE-2026-45174 |
|
Vulnerability in paloaltonetworks (CVE-2026-45174)
vulnerability in paloaltonetworks (CVE-2026-45174). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45172 |
|
OS Command Injection in paloaltonetworks (CVE-2026-45172)
OS command injection in paloaltonetworks (CVE-2026-45172). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45171 |
|
Path Traversal in paloaltonetworks (CVE-2026-45171)
path traversal in paloaltonetworks (CVE-2026-45171). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42653 |
|
Cross-Site Scripting (XSS) in CVE-2026-42653 (CVE-2026-42653)
cross-site scripting in CVE-2026-42653 (CVE-2026-42653). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12035 |
|
Use-After-Free in google (CVE-2026-12035)
vulnerability in google (CVE-2026-12035). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12028 |
|
Use-After-Free in google (CVE-2026-12028)
vulnerability in google (CVE-2026-12028). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12034 |
|
Vulnerability in Google chrome (CVE-2026-12034)
vulnerability in Google chrome (CVE-2026-12034). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12031 |
|
Vulnerability in google (CVE-2026-12031)
vulnerability in google (CVE-2026-12031). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12030 |
|
Vulnerability in google (CVE-2026-12030)
vulnerability in google (CVE-2026-12030). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12029 |
|
Use-After-Free in google (CVE-2026-12029)
vulnerability in google (CVE-2026-12029). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12019 |
|
Out-of-Bounds Write in google (CVE-2026-12019)
out-of-bounds write in google (CVE-2026-12019). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12018 |
|
Privilege Escalation in privilege-escalation (CVE-2026-12018)
vulnerability in privilege-escalation (CVE-2026-12018). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12016 |
|
Vulnerability in google (CVE-2026-12016)
vulnerability in google (CVE-2026-12016). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12020 |
|
Use-After-Free in google (CVE-2026-12020)
vulnerability in google (CVE-2026-12020). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12022 |
|
Vulnerability in google (CVE-2026-12022)
vulnerability in google (CVE-2026-12022). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12023 |
|
Use-After-Free in google (CVE-2026-12023)
vulnerability in google (CVE-2026-12023). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12009 |
|
Vulnerability in google (CVE-2026-12009)
vulnerability in google (CVE-2026-12009). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12008 |
|
Use-After-Free in google (CVE-2026-12008)
vulnerability in google (CVE-2026-12008). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12011 |
|
Use-After-Free in google (CVE-2026-12011)
vulnerability in google (CVE-2026-12011). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12010 |
|
Vulnerability in google (CVE-2026-12010)
vulnerability in google (CVE-2026-12010). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12012 |
|
Use-After-Free in google (CVE-2026-12012)
vulnerability in google (CVE-2026-12012). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12014 |
|
Use-After-Free in google (CVE-2026-12014)
vulnerability in google (CVE-2026-12014). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12013 |
|
Use-After-Free in google (CVE-2026-12013)
vulnerability in google (CVE-2026-12013). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12007 |
|
Use-After-Free in Google chrome (CVE-2026-12007)
vulnerability in Google chrome (CVE-2026-12007). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50005 |
|
Vulnerability in CVE-2026-50005 (CVE-2026-50005)
vulnerability in CVE-2026-50005 (CVE-2026-50005). Confidential information can be exposed externally.
|
| CVE-2026-53807 |
|
Authorization Flaw in openclaw (CVE-2026-53807)
vulnerability in openclaw (CVE-2026-53807). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53819 |
|
Vulnerability in openclaw (CVE-2026-53819)
vulnerability in openclaw (CVE-2026-53819). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.27` or later.
|
| CVE-2026-53810 |
|
Vulnerability in openclaw (CVE-2026-53810)
vulnerability in openclaw (CVE-2026-53810). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.18` or later.
|
| CVE-2026-53817 |
|
Vulnerability in openclaw (CVE-2026-53817)
vulnerability in openclaw (CVE-2026-53817). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.22` or later.
|
| CVE-2026-53816 |
|
Vulnerability in openclaw (CVE-2026-53816)
vulnerability in openclaw (CVE-2026-53816). Successful exploitation can lead to full system takeover. Exploitable via ``system.run``. Mitigation: upgrade to `2026.5.18` or later.
|
| CVE-2026-53814 |
|
Information Disclosure in openclaw (CVE-2026-53814)
vulnerability in openclaw (CVE-2026-53814). Confidential information can be exposed externally. Mitigation: upgrade to `2026.5.20` or later.
|
| CVE-2026-53813 |
|
Vulnerability in openclaw (CVE-2026-53813)
vulnerability in openclaw (CVE-2026-53813). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.4.25` or later.
|
| CVE-2026-53812 |
|
Vulnerability in openclaw (CVE-2026-53812)
vulnerability in openclaw (CVE-2026-53812). Confidential information can be exposed externally. Exploitable via ``act``. Mitigation: upgrade to `2026.5.18` or later.
|