Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-0847 Path Traversal in nltk (CVE-2026-0847)
path traversal in nltk (CVE-2026-0847). Confidential information can be exposed externally. Mitigation: upgrade to `3.9.3` or later.
CVE-2026-20105 Vulnerability in dos (CVE-2026-20105)
vulnerability in dos (CVE-2026-20105). Risk of unauthorized operations or information disclosure.
CVE-2026-20101 Vulnerability in dos (CVE-2026-20101)
vulnerability in dos (CVE-2026-20101). Risk of unauthorized operations or information disclosure.
CVE-2026-20103 Vulnerability in dos (CVE-2026-20103)
vulnerability in dos (CVE-2026-20103). Risk of unauthorized operations or information disclosure.
CVE-2026-20100 Vulnerability in dos (CVE-2026-20100)
vulnerability in dos (CVE-2026-20100). Risk of unauthorized operations or information disclosure.
CVE-2026-20039 Vulnerability in dos (CVE-2026-20039)
vulnerability in dos (CVE-2026-20039). Risk of unauthorized operations or information disclosure.
CVE-2026-20049 Vulnerability in c (CVE-2026-20049)
vulnerability in c (CVE-2026-20049). Risk of unauthorized operations or information disclosure.
CVE-2026-20014 Vulnerability in dos (CVE-2026-20014)
vulnerability in dos (CVE-2026-20014). Risk of unauthorized operations or information disclosure.
CVE-2026-20002 SQL Injection in sqli (CVE-2026-20002)
SQL injection in sqli (CVE-2026-20002). Confidential information can be exposed externally.
CVE-2026-3520 Vulnerability in dos (CVE-2026-3520)
vulnerability in dos (CVE-2026-3520). Risk of unauthorized operations or information disclosure.
CVE-2025-15558 Vulnerability in docker-cli (CVE-2025-15558)
vulnerability in docker-cli (CVE-2025-15558). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `29.2.1` or later.
CVE-2026-23236 Vulnerability in linux (CVE-2026-23236)
vulnerability in linux (CVE-2026-23236). Data can be tampered with by attackers.
CVE-2026-23231 Use-After-Free in linux (CVE-2026-23231)
vulnerability in linux (CVE-2026-23231). Successful exploitation can lead to full system takeover.
CVE-2026-27622 Out-of-Bounds Write in openexr (CVE-2026-27622)
out-of-bounds write in openexr (CVE-2026-27622). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.2.6` or later.
CVE-2026-29022 Vulnerability in mackron (CVE-2026-29022)
vulnerability in mackron (CVE-2026-29022). Data can be tampered with by attackers.
CVE-2026-3437 Buffer Overflow in portwell (CVE-2026-3437)
vulnerability in portwell (CVE-2026-3437). Successful exploitation can lead to full system takeover.
CVE-2025-63912 Vulnerability in cohesity (CVE-2025-63912)
vulnerability in cohesity (CVE-2025-63912). Confidential information can be exposed externally.
CVE-2026-28518 Path Traversal in path-traversal (CVE-2026-28518)
path traversal in path-traversal (CVE-2026-28518). Successful exploitation can lead to full system takeover.
CVE-2026-25673 Vulnerability in django (CVE-2026-25673)
vulnerability in django (CVE-2026-25673). Risk of unauthorized operations or information disclosure.
CVE-2026-22719 KEV [KEV] Command Injection in Broadcom vmware-aria-operations (CVE-2026-22719)
command injection in Broadcom vmware-aria-operations (CVE-2026-22719). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-21385 KEV [KEV] Vulnerability in Qualcomm multiple-chipsets (CVE-2026-21385)
vulnerability in Qualcomm multiple-chipsets (CVE-2026-21385). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-3338 Vulnerability in amazon (CVE-2026-3338)
vulnerability in amazon (CVE-2026-3338). Data can be tampered with by attackers.
CVE-2026-0010 Out-of-Bounds Write in cpp (CVE-2026-0010)
out-of-bounds write in cpp (CVE-2026-0010). Successful exploitation can lead to full system takeover.
CVE-2026-0011 Vulnerability in google (CVE-2026-0011)
vulnerability in google (CVE-2026-0011). Successful exploitation can lead to full system takeover.
CVE-2026-0013 Vulnerability in google (CVE-2026-0013)
vulnerability in google (CVE-2026-0013). Successful exploitation can lead to full system takeover.
CVE-2026-28516 SQL Injection in sqli (CVE-2026-28516)
SQL injection in sqli (CVE-2026-28516). Successful exploitation can lead to full system takeover.
CVE-2026-28515 Vulnerability in opendcim (CVE-2026-28515)
vulnerability in opendcim (CVE-2026-28515). Successful exploitation can lead to full system takeover.
CVE-2026-28406 Path Traversal in chainguard (CVE-2026-28406)
path traversal in chainguard (CVE-2026-28406). Data can be tampered with by attackers. Exploitable via ``dest``.
CVE-2026-3304 Vulnerability in dos (CVE-2026-3304)
vulnerability in dos (CVE-2026-3304). Risk of unauthorized operations or information disclosure.
CVE-2026-2359 Vulnerability in dos (CVE-2026-2359)
vulnerability in dos (CVE-2026-2359). Risk of unauthorized operations or information disclosure.
CVE-2025-10990 Vulnerability in dos (CVE-2025-10990)
vulnerability in dos (CVE-2025-10990). Risk of unauthorized operations or information disclosure.
CVE-2026-28364 Vulnerability in c (CVE-2026-28364)
vulnerability in c (CVE-2026-28364). Confidential information can be exposed externally.
CVE-2026-25109 OS Command Injection in copeland (CVE-2026-25109)
OS command injection in copeland (CVE-2026-25109). Successful exploitation can lead to full system takeover.
CVE-2026-20910 OS Command Injection in copeland (CVE-2026-20910)
OS command injection in copeland (CVE-2026-20910). Successful exploitation can lead to full system takeover.
CVE-2026-27509 Vulnerability in unitree (CVE-2026-27509)
vulnerability in unitree (CVE-2026-27509). Successful exploitation can lead to full system takeover.
CVE-2026-23750 Vulnerability in CVE-2026-23750 (CVE-2026-23750)
vulnerability in CVE-2026-23750 (CVE-2026-23750). Data can be tampered with by attackers.
CVE-2025-71057 Authentication Bypass in CVE-2025-71057 (CVE-2025-71057)
authentication bypass in CVE-2025-71057 (CVE-2025-71057). Data can be tampered with by attackers.
CVE-2026-56351 SQL Injection in n8n (CVE-2026-56351)
SQL injection in n8n (CVE-2026-56351). Confidential information can be exposed externally. Exploitable via ``NODES_EXCLUDE``. Mitigation: upgrade to `2.4.0` or later.
CVE-2025-14343 Cross-Site Scripting (XSS) in CVE-2025-14343 (CVE-2025-14343)
cross-site scripting in CVE-2025-14343 (CVE-2025-14343). Risk of unauthorized operations or information disclosure.
CVE-2026-1693 Vulnerability in arcinfo (CVE-2026-1693)
vulnerability in arcinfo (CVE-2026-1693). Confidential information can be exposed externally.
CVE-2026-27959 Vulnerability in koajs (CVE-2026-27959)
vulnerability in koajs (CVE-2026-27959). Data can be tampered with by attackers. Exploitable via `Host header`.
CVE-2026-27896 Vulnerability in lfprojects (CVE-2026-27896)
vulnerability in lfprojects (CVE-2026-27896). Data can be tampered with by attackers.
CVE-2026-27830 Code Injection in deserialization (CVE-2026-27830)
code injection in deserialization (CVE-2026-27830). Successful exploitation can lead to full system takeover. Exploitable via ``javax.naming.Reference``.
CVE-2026-26965 Out-of-Bounds Write in freerdp (CVE-2026-26965)
out-of-bounds write in freerdp (CVE-2026-26965). Successful exploitation can lead to full system takeover. Exploitable via ``pDstData``.
CVE-2026-26955 Out-of-Bounds Write in c (CVE-2026-26955)
out-of-bounds write in c (CVE-2026-26955). Successful exploitation can lead to full system takeover. Exploitable via ``xfreerdp``.
CVE-2026-26103 Vulnerability in redhat (CVE-2026-26103)
vulnerability in redhat (CVE-2026-26103). Data can be tampered with by attackers.
CVE-2026-27595 Vulnerability in csrf (CVE-2026-27595)
vulnerability in csrf (CVE-2026-27595). Data can be tampered with by attackers. Exploitable via ``readOnlyMasterKey``.
CVE-2026-27608 Vulnerability in parseplatform (CVE-2026-27608)
vulnerability in parseplatform (CVE-2026-27608). Confidential information can be exposed externally. Exploitable via `POST /apps/`.
CVE-2022-20775 KEV [KEV] Vulnerability in Cisco sd-wan (CVE-2022-20775)
vulnerability in Cisco sd-wan (CVE-2022-20775). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-63409 Vulnerability in privilege-escalation (CVE-2025-63409)
vulnerability in privilege-escalation (CVE-2025-63409). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →