Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-41018 |
|
Vulnerability in apache-airflow-providers-elasticsearch (CVE-2026-41018)
vulnerability in apache-airflow-providers-elasticsearch (CVE-2026-41018). Confidential information can be exposed externally. Exploitable via ``host``. Mitigation: upgrade to `6.5.3` or later.
|
| CVE-2026-42282 |
|
Vulnerability in n8n-mcp (CVE-2026-42282)
vulnerability in n8n-mcp (CVE-2026-42282). Risk of unauthorized operations or information disclosure. Exploitable via ``n8n_manage_credentials.data``. Mitigation: upgrade to `2.47.13` or later.
|
| CVE-2026-41495 |
|
Vulnerability in n8n-mcp (CVE-2026-41495)
vulnerability in n8n-mcp (CVE-2026-41495). Risk of unauthorized operations or information disclosure. Exploitable via `POST /mcp`. Mitigation: upgrade to `2.47.11` or later.
|
| CVE-2026-41004 |
|
Vulnerability in org.springframework.cloud:spring-cloud-config-server (CVE-2026-41004)
vulnerability in org.springframework.cloud:spring-cloud-config-server (CVE-2026-41004). Confidential information can be exposed externally.
|
| CVE-2026-41182 |
|
Information Disclosure in CVE-2026-41182 (CVE-2026-41182)
vulnerability in CVE-2026-41182 (CVE-2026-41182). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4901 |
|
Vulnerability in hydrosystempoznan (CVE-2026-4901)
vulnerability in hydrosystempoznan (CVE-2026-4901). Confidential information can be exposed externally.
|
| CVE-2026-28261 |
|
Vulnerability in dell (CVE-2026-28261)
vulnerability in dell (CVE-2026-28261). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4788 |
|
Vulnerability in ibm (CVE-2026-4788)
vulnerability in ibm (CVE-2026-4788). Successful exploitation can lead to full system takeover.
|
| CVE-2026-35185 |
|
Vulnerability in psu (CVE-2026-35185)
vulnerability in psu (CVE-2026-35185). Confidential information can be exposed externally. Mitigation: upgrade to `25.0.0` or later.
|
| CVE-2019-25683 |
|
Vulnerability in dos (CVE-2019-25683)
vulnerability in dos (CVE-2019-25683). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4819 |
|
Vulnerability in search-guard (CVE-2026-4819)
vulnerability in search-guard (CVE-2026-4819). Confidential information can be exposed externally.
|
| CVE-2026-32982 |
|
Vulnerability in openclaw (CVE-2026-32982)
vulnerability in openclaw (CVE-2026-32982). Confidential information can be exposed externally.
|
| CVE-2026-0520 |
|
Vulnerability in lenovo (CVE-2026-0520)
vulnerability in lenovo (CVE-2026-0520). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-70040 |
|
Vulnerability in lupinlin1 (CVE-2025-70040)
vulnerability in lupinlin1 (CVE-2025-70040). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24308 |
|
Vulnerability in zookeeper (CVE-2026-24308)
vulnerability in zookeeper (CVE-2026-24308). Confidential information can be exposed externally. Mitigation: upgrade to `3.8.6, 3.9.5` or later.
|
| CVE-2026-22778 |
|
Vulnerability in vllm (CVE-2026-22778)
vulnerability in vllm (CVE-2026-22778). Successful exploitation can lead to full system takeover. Exploitable via `POST /v1/chat/completions`. Mitigation: upgrade to `0.14.1` or later.
|
| CVE-2025-14010 |
|
Information Disclosure in ansible (CVE-2025-14010)
vulnerability in ansible (CVE-2025-14010). Confidential information can be exposed externally. Mitigation: upgrade to `12.2.0` or later.
|
| CVE-2025-31514 |
|
Vulnerability in fortinet (CVE-2025-31514)
vulnerability in fortinet (CVE-2025-31514). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-27391 |
|
Vulnerability in apache (CVE-2025-27391)
vulnerability in apache (CVE-2025-27391). Confidential information can be exposed externally.
|
| CVE-2025-24984 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2025-24984)
vulnerability in Microsoft windows (CVE-2025-24984). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-9621 |
|
Vulnerability in CVE-2024-9621 (CVE-2024-9621)
vulnerability in CVE-2024-9621 (CVE-2024-9621). Confidential information can be exposed externally.
|
| CVE-2024-8609 |
|
Vulnerability in oceanicsoft (CVE-2024-8609)
vulnerability in oceanicsoft (CVE-2024-8609). Confidential information can be exposed externally.
|
| CVE-2022-25477 |
|
Vulnerability in realtek (CVE-2022-25477)
vulnerability in realtek (CVE-2022-25477). Confidential information can be exposed externally.
|
| CVE-2024-31245 |
|
Vulnerability in convertkit (CVE-2024-31245)
vulnerability in convertkit (CVE-2024-31245). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-31249 |
|
Vulnerability in wpkube (CVE-2024-31249)
vulnerability in wpkube (CVE-2024-31249). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-51702 |
|
Vulnerability in apache (CVE-2023-51702)
vulnerability in apache (CVE-2023-51702). Confidential information can be exposed externally.
|
| CVE-2024-23686 |
|
Vulnerability in owasp (CVE-2024-23686)
vulnerability in owasp (CVE-2024-23686). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-43261 |
|
Vulnerability in milesight (CVE-2023-43261)
vulnerability in milesight (CVE-2023-43261). Confidential information can be exposed externally.
|
| CVE-2023-21492 KEV |
|
[KEV] Vulnerability in Samsung mobile-devices (CVE-2023-21492)
vulnerability in Samsung mobile-devices (CVE-2023-21492). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-4311 |
|
Vulnerability in arcinfo (CVE-2022-4311)
vulnerability in arcinfo (CVE-2022-4311). Confidential information can be exposed externally.
|
| CVE-2017-17675 |
|
Vulnerability in bmc (CVE-2017-17675)
vulnerability in bmc (CVE-2017-17675). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-1961 |
|
Vulnerability in cisco (CVE-2019-1961)
vulnerability in cisco (CVE-2019-1961). Confidential information can be exposed externally.
|
| CVE-2019-1953 |
|
Vulnerability in cisco (CVE-2019-1953)
vulnerability in cisco (CVE-2019-1953). Confidential information can be exposed externally.
|
| CVE-2021-39913 |
|
Privilege Escalation in gitlab (CVE-2021-39913)
vulnerability in gitlab (CVE-2021-39913). Confidential information can be exposed externally.
|
| CVE-2017-6139 |
|
Vulnerability in f5 (CVE-2017-6139)
vulnerability in f5 (CVE-2017-6139). Confidential information can be exposed externally.
|
| CVE-2017-8001 |
|
Vulnerability in dell (CVE-2017-8001)
vulnerability in dell (CVE-2017-8001). Successful exploitation can lead to full system takeover.
|
| CVE-2017-16946 |
|
Vulnerability in misp (CVE-2017-16946)
vulnerability in misp (CVE-2017-16946). Confidential information can be exposed externally.
|
| CVE-2017-7550 |
|
Vulnerability in ansible (CVE-2017-7550)
vulnerability in ansible (CVE-2017-7550). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.3.3.0, 2.4.1.0` or later.
|
| CVE-2017-1000171 |
|
Vulnerability in mahara (CVE-2017-1000171)
vulnerability in mahara (CVE-2017-1000171). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15366 |
|
Vulnerability in ndocsoftware (CVE-2017-15366)
vulnerability in ndocsoftware (CVE-2017-15366). Successful exploitation can lead to full system takeover.
|
| CVE-2017-6165 |
|
Vulnerability in f5 (CVE-2017-6165)
vulnerability in f5 (CVE-2017-6165). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15572 |
|
Vulnerability in redmine (CVE-2017-15572)
vulnerability in redmine (CVE-2017-15572). Confidential information can be exposed externally.
|
| CVE-2017-0380 |
|
Vulnerability in c (CVE-2017-0380)
vulnerability in c (CVE-2017-0380). Confidential information can be exposed externally.
|
| CVE-2017-11134 |
|
Vulnerability in stashcat (CVE-2017-11134)
vulnerability in stashcat (CVE-2017-11134). Confidential information can be exposed externally.
|
| CVE-2015-3243 |
|
Vulnerability in rsyslog (CVE-2015-3243)
vulnerability in rsyslog (CVE-2015-3243). Confidential information can be exposed externally.
|
| CVE-2017-6709 |
|
Information Disclosure in cisco (CVE-2017-6709)
vulnerability in cisco (CVE-2017-6709). Successful exploitation can lead to full system takeover.
|
| CVE-2017-9615 |
|
Vulnerability in cognito (CVE-2017-9615)
vulnerability in cognito (CVE-2017-9615). Successful exploitation can lead to full system takeover.
|
| CVE-2017-3744 |
|
Vulnerability in lenovo (CVE-2017-3744)
vulnerability in lenovo (CVE-2017-3744). Confidential information can be exposed externally.
|
| CVE-2016-10362 |
|
Vulnerability in elasticsearch (CVE-2016-10362)
vulnerability in elasticsearch (CVE-2016-10362). Confidential information can be exposed externally.
|
| CVE-2017-4955 |
|
Vulnerability in pivotal-software (CVE-2017-4955)
vulnerability in pivotal-software (CVE-2017-4955). Successful exploitation can lead to full system takeover.
|