Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-0847 |
|
Path Traversal in nltk (CVE-2026-0847)
path traversal in nltk (CVE-2026-0847). Confidential information can be exposed externally. Mitigation: upgrade to `3.9.3` or later.
|
| CVE-2026-20105 |
|
Vulnerability in dos (CVE-2026-20105)
vulnerability in dos (CVE-2026-20105). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20101 |
|
Vulnerability in dos (CVE-2026-20101)
vulnerability in dos (CVE-2026-20101). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20103 |
|
Vulnerability in dos (CVE-2026-20103)
vulnerability in dos (CVE-2026-20103). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20100 |
|
Vulnerability in dos (CVE-2026-20100)
vulnerability in dos (CVE-2026-20100). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20039 |
|
Vulnerability in dos (CVE-2026-20039)
vulnerability in dos (CVE-2026-20039). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20049 |
|
Vulnerability in c (CVE-2026-20049)
vulnerability in c (CVE-2026-20049). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20014 |
|
Vulnerability in dos (CVE-2026-20014)
vulnerability in dos (CVE-2026-20014). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20002 |
|
SQL Injection in sqli (CVE-2026-20002)
SQL injection in sqli (CVE-2026-20002). Confidential information can be exposed externally.
|
| CVE-2026-3520 |
|
Vulnerability in dos (CVE-2026-3520)
vulnerability in dos (CVE-2026-3520). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-15558 |
|
Vulnerability in docker-cli (CVE-2025-15558)
vulnerability in docker-cli (CVE-2025-15558). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `29.2.1` or later.
|
| CVE-2026-23236 |
|
Vulnerability in linux (CVE-2026-23236)
vulnerability in linux (CVE-2026-23236). Data can be tampered with by attackers.
|
| CVE-2026-23231 |
|
Use-After-Free in linux (CVE-2026-23231)
vulnerability in linux (CVE-2026-23231). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27622 |
|
Out-of-Bounds Write in openexr (CVE-2026-27622)
out-of-bounds write in openexr (CVE-2026-27622). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-29022 |
|
Vulnerability in mackron (CVE-2026-29022)
vulnerability in mackron (CVE-2026-29022). Data can be tampered with by attackers.
|
| CVE-2026-3437 |
|
Buffer Overflow in portwell (CVE-2026-3437)
vulnerability in portwell (CVE-2026-3437). Successful exploitation can lead to full system takeover.
|
| CVE-2025-63912 |
|
Vulnerability in cohesity (CVE-2025-63912)
vulnerability in cohesity (CVE-2025-63912). Confidential information can be exposed externally.
|
| CVE-2026-28518 |
|
Path Traversal in path-traversal (CVE-2026-28518)
path traversal in path-traversal (CVE-2026-28518). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25673 |
|
Vulnerability in django (CVE-2026-25673)
vulnerability in django (CVE-2026-25673). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-22719 KEV |
|
[KEV] Command Injection in Broadcom vmware-aria-operations (CVE-2026-22719)
command injection in Broadcom vmware-aria-operations (CVE-2026-22719). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-21385 KEV |
|
[KEV] Vulnerability in Qualcomm multiple-chipsets (CVE-2026-21385)
vulnerability in Qualcomm multiple-chipsets (CVE-2026-21385). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-3338 |
|
Vulnerability in amazon (CVE-2026-3338)
vulnerability in amazon (CVE-2026-3338). Data can be tampered with by attackers.
|
| CVE-2026-0010 |
|
Out-of-Bounds Write in cpp (CVE-2026-0010)
out-of-bounds write in cpp (CVE-2026-0010). Successful exploitation can lead to full system takeover.
|
| CVE-2026-0011 |
|
Vulnerability in google (CVE-2026-0011)
vulnerability in google (CVE-2026-0011). Successful exploitation can lead to full system takeover.
|
| CVE-2026-0013 |
|
Vulnerability in google (CVE-2026-0013)
vulnerability in google (CVE-2026-0013). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28516 |
|
SQL Injection in sqli (CVE-2026-28516)
SQL injection in sqli (CVE-2026-28516). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28515 |
|
Vulnerability in opendcim (CVE-2026-28515)
vulnerability in opendcim (CVE-2026-28515). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28406 |
|
Path Traversal in chainguard (CVE-2026-28406)
path traversal in chainguard (CVE-2026-28406). Data can be tampered with by attackers. Exploitable via ``dest``.
|
| CVE-2026-3304 |
|
Vulnerability in dos (CVE-2026-3304)
vulnerability in dos (CVE-2026-3304). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2359 |
|
Vulnerability in dos (CVE-2026-2359)
vulnerability in dos (CVE-2026-2359). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-10990 |
|
Vulnerability in dos (CVE-2025-10990)
vulnerability in dos (CVE-2025-10990). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28364 |
|
Vulnerability in c (CVE-2026-28364)
vulnerability in c (CVE-2026-28364). Confidential information can be exposed externally.
|
| CVE-2026-25109 |
|
OS Command Injection in copeland (CVE-2026-25109)
OS command injection in copeland (CVE-2026-25109). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20910 |
|
OS Command Injection in copeland (CVE-2026-20910)
OS command injection in copeland (CVE-2026-20910). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27509 |
|
Vulnerability in unitree (CVE-2026-27509)
vulnerability in unitree (CVE-2026-27509). Successful exploitation can lead to full system takeover.
|
| CVE-2026-23750 |
|
Vulnerability in CVE-2026-23750 (CVE-2026-23750)
vulnerability in CVE-2026-23750 (CVE-2026-23750). Data can be tampered with by attackers.
|
| CVE-2025-71057 |
|
Authentication Bypass in CVE-2025-71057 (CVE-2025-71057)
authentication bypass in CVE-2025-71057 (CVE-2025-71057). Data can be tampered with by attackers.
|
| CVE-2026-56351 |
|
SQL Injection in n8n (CVE-2026-56351)
SQL injection in n8n (CVE-2026-56351). Confidential information can be exposed externally. Exploitable via ``NODES_EXCLUDE``. Mitigation: upgrade to `2.4.0` or later.
|
| CVE-2025-14343 |
|
Cross-Site Scripting (XSS) in CVE-2025-14343 (CVE-2025-14343)
cross-site scripting in CVE-2025-14343 (CVE-2025-14343). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1693 |
|
Vulnerability in arcinfo (CVE-2026-1693)
vulnerability in arcinfo (CVE-2026-1693). Confidential information can be exposed externally.
|
| CVE-2026-27959 |
|
Vulnerability in koajs (CVE-2026-27959)
vulnerability in koajs (CVE-2026-27959). Data can be tampered with by attackers. Exploitable via `Host header`.
|
| CVE-2026-27896 |
|
Vulnerability in lfprojects (CVE-2026-27896)
vulnerability in lfprojects (CVE-2026-27896). Data can be tampered with by attackers.
|
| CVE-2026-27830 |
|
Code Injection in deserialization (CVE-2026-27830)
code injection in deserialization (CVE-2026-27830). Successful exploitation can lead to full system takeover. Exploitable via ``javax.naming.Reference``.
|
| CVE-2026-26965 |
|
Out-of-Bounds Write in freerdp (CVE-2026-26965)
out-of-bounds write in freerdp (CVE-2026-26965). Successful exploitation can lead to full system takeover. Exploitable via ``pDstData``.
|
| CVE-2026-26955 |
|
Out-of-Bounds Write in c (CVE-2026-26955)
out-of-bounds write in c (CVE-2026-26955). Successful exploitation can lead to full system takeover. Exploitable via ``xfreerdp``.
|
| CVE-2026-26103 |
|
Vulnerability in redhat (CVE-2026-26103)
vulnerability in redhat (CVE-2026-26103). Data can be tampered with by attackers.
|
| CVE-2026-27595 |
|
Vulnerability in csrf (CVE-2026-27595)
vulnerability in csrf (CVE-2026-27595). Data can be tampered with by attackers. Exploitable via ``readOnlyMasterKey``.
|
| CVE-2026-27608 |
|
Vulnerability in parseplatform (CVE-2026-27608)
vulnerability in parseplatform (CVE-2026-27608). Confidential information can be exposed externally. Exploitable via `POST /apps/`.
|
| CVE-2022-20775 KEV |
|
[KEV] Vulnerability in Cisco sd-wan (CVE-2022-20775)
vulnerability in Cisco sd-wan (CVE-2022-20775). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-63409 |
|
Vulnerability in privilege-escalation (CVE-2025-63409)
vulnerability in privilege-escalation (CVE-2025-63409). Successful exploitation can lead to full system takeover.
|