Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2026-7762 Vulnerability in dos (CVE-2026-7762)
vulnerability in dos (CVE-2026-7762). Successful exploitation can lead to full system takeover.
CVE-2026-7763 Vulnerability in c (CVE-2026-7763)
vulnerability in c (CVE-2026-7763). Successful exploitation can lead to full system takeover.
CVE-2026-50591 IN Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences.
IN Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences.
CVE-2026-50592 Cross-Site Scripting (XSS) in CVE-2026-50592 (CVE-2026-50592)
cross-site scripting in CVE-2026-50592 (CVE-2026-50592). Risk of unauthorized operations or information disclosure.
CVE-2026-11326 Vulnerability in CVE-2026-11326 (CVE-2026-11326)
vulnerability in CVE-2026-11326 (CVE-2026-11326). Risk of unauthorized operations or information disclosure.
CVE-2026-11308 Privilege Escalation in privilege-escalation (CVE-2026-11308)
vulnerability in privilege-escalation (CVE-2026-11308). Risk of unauthorized operations or information disclosure.
CVE-2026-11295 Privilege Escalation in privilege-escalation (CVE-2026-11295)
vulnerability in privilege-escalation (CVE-2026-11295). Successful exploitation can lead to full system takeover.
CVE-2026-11296 Privilege Escalation in privilege-escalation (CVE-2026-11296)
vulnerability in privilege-escalation (CVE-2026-11296). Successful exploitation can lead to full system takeover.
CVE-2026-11290 Vulnerability in dos (CVE-2026-11290)
vulnerability in dos (CVE-2026-11290). Risk of unauthorized operations or information disclosure.
CVE-2026-11272 Vulnerability in privilege-escalation (CVE-2026-11272)
vulnerability in privilege-escalation (CVE-2026-11272). Successful exploitation can lead to full system takeover.
CVE-2026-11239 Vulnerability in privilege-escalation (CVE-2026-11239)
vulnerability in privilege-escalation (CVE-2026-11239). Successful exploitation can lead to full system takeover.
CVE-2026-11241 Vulnerability in privilege-escalation (CVE-2026-11241)
vulnerability in privilege-escalation (CVE-2026-11241). Successful exploitation can lead to full system takeover.
CVE-2026-10877 Vulnerability in sqli (CVE-2026-10877)
vulnerability in sqli (CVE-2026-10877). Risk of unauthorized operations or information disclosure.
CVE-2026-48567 Vulnerability in microsoft (CVE-2026-48567)
vulnerability in microsoft (CVE-2026-48567). Data can be tampered with by attackers.
CVE-2026-11229 Privilege Escalation in privilege-escalation (CVE-2026-11229)
vulnerability in privilege-escalation (CVE-2026-11229). Confidential information can be exposed externally.
CVE-2026-11170 Vulnerability in privilege-escalation (CVE-2026-11170)
vulnerability in privilege-escalation (CVE-2026-11170). Successful exploitation can lead to full system takeover.
CVE-2026-11149 Vulnerability in privilege-escalation (CVE-2026-11149)
vulnerability in privilege-escalation (CVE-2026-11149). Successful exploitation can lead to full system takeover.
CVE-2026-11115 Use-After-Free in privilege-escalation (CVE-2026-11115)
vulnerability in privilege-escalation (CVE-2026-11115). Successful exploitation can lead to full system takeover.
CVE-2026-11108 Privilege Escalation in privilege-escalation (CVE-2026-11108)
vulnerability in privilege-escalation (CVE-2026-11108). Successful exploitation can lead to full system takeover.
CVE-2026-11103 Privilege Escalation in privilege-escalation (CVE-2026-11103)
vulnerability in privilege-escalation (CVE-2026-11103). Successful exploitation can lead to full system takeover.
CVE-2026-11092 Vulnerability in privilege-escalation (CVE-2026-11092)
vulnerability in privilege-escalation (CVE-2026-11092). Successful exploitation can lead to full system takeover.
CVE-2026-11058 Vulnerability in privilege-escalation (CVE-2026-11058)
vulnerability in privilege-escalation (CVE-2026-11058). Successful exploitation can lead to full system takeover.
CVE-2026-11035 Vulnerability in privilege-escalation (CVE-2026-11035)
vulnerability in privilege-escalation (CVE-2026-11035). Successful exploitation can lead to full system takeover.
CVE-2026-10969 Vulnerability in privilege-escalation (CVE-2026-10969)
vulnerability in privilege-escalation (CVE-2026-10969). Successful exploitation can lead to full system takeover.
CVE-2026-10942 Vulnerability in privilege-escalation (CVE-2026-10942)
vulnerability in privilege-escalation (CVE-2026-10942). Successful exploitation can lead to full system takeover.
CVE-2026-10874 Vulnerability in sqli (CVE-2026-10874)
vulnerability in sqli (CVE-2026-10874). Risk of unauthorized operations or information disclosure.
CVE-2026-10875 Vulnerability in sqli (CVE-2026-10875)
vulnerability in sqli (CVE-2026-10875). Risk of unauthorized operations or information disclosure.
CVE-2026-42547 Authorization Flaw in CVE-2026-42547 (CVE-2026-42547)
vulnerability in CVE-2026-42547 (CVE-2026-42547). Risk of unauthorized operations or information disclosure.
CVE-2026-11322 Vulnerability in path-traversal (CVE-2026-11322)
vulnerability in path-traversal (CVE-2026-11322). Confidential information can be exposed externally.
CVE-2026-42538 Unrestricted File Upload in CVE-2026-42538 (CVE-2026-42538)
vulnerability in CVE-2026-42538 (CVE-2026-42538). Confidential information can be exposed externally.
CVE-2026-5066 Out-of-Bounds Write in c (CVE-2026-5066)
out-of-bounds write in c (CVE-2026-5066). Risk of unauthorized operations or information disclosure.
CVE-2026-5589 Out-of-Bounds Write in c (CVE-2026-5589)
out-of-bounds write in c (CVE-2026-5589). Risk of unauthorized operations or information disclosure.
CVE-2026-48013 SSRF (Server-Side Request Forgery) in shopware/core (CVE-2026-48013)
SSRF in shopware/core (CVE-2026-48013). Risk of unauthorized operations or information disclosure. Exploitable via ``uploadFromURL``. Mitigation: upgrade to `6.7.10.1` or later.
CVE-2026-36499 Vulnerability in dos (CVE-2026-36499)
vulnerability in dos (CVE-2026-36499). Risk of unauthorized operations or information disclosure.
CVE-2025-65640 Cross-Site Scripting (XSS) in CVE-2025-65640 (CVE-2025-65640)
cross-site scripting in CVE-2025-65640 (CVE-2025-65640). Confidential information can be exposed externally.
CVE-2026-54458 Cross-Site Scripting (XSS) in WWBN/AVideo (CVE-2026-54458)
cross-site scripting in WWBN/AVideo (CVE-2026-54458). Confidential information can be exposed externally. Exploitable via ``page_title``.
CVE-2026-50183 Cross-Site Scripting (XSS) in WWBN/AVideo (CVE-2026-50183)
cross-site scripting in WWBN/AVideo (CVE-2026-50183). Risk of unauthorized operations or information disclosure. Exploitable via ``snippet.title``.
CVE-2026-50182 Cross-Site Scripting (XSS) in WWBN/AVideo (CVE-2026-50182)
cross-site scripting in WWBN/AVideo (CVE-2026-50182). Risk of unauthorized operations or information disclosure. Exploitable via ``href``.
CVE-2026-49279 Cross-Site Scripting (XSS) in wwbn/avideo (CVE-2026-49279)
cross-site scripting in wwbn/avideo (CVE-2026-49279). Risk of unauthorized operations or information disclosure. Exploitable via ``autoEvalCodeOnHTML``.
CVE-2026-25550 Vulnerability in csharp (CVE-2026-25550)
vulnerability in csharp (CVE-2026-25550). Successful exploitation can lead to full system takeover.
CVE-2026-10880 SQL Injection in sqli (CVE-2026-10880)
SQL injection in sqli (CVE-2026-10880). Successful exploitation can lead to full system takeover.
CVE-2026-25551 Unsafe Deserialization in csharp (CVE-2026-25551)
vulnerability in csharp (CVE-2026-25551). Successful exploitation can lead to full system takeover.
CVE-2025-67448 Cross-Site Scripting (XSS) in CVE-2025-67448 (CVE-2025-67448)
cross-site scripting in CVE-2025-67448 (CVE-2025-67448). Confidential information can be exposed externally.
CVE-2026-49941 Vulnerability in dos (CVE-2026-49941)
vulnerability in dos (CVE-2026-49941). Risk of unauthorized operations or information disclosure.
CVE-2026-50076 Unsafe Deserialization in org.apache.fory:fory-core (CVE-2026-50076)
vulnerability in org.apache.fory:fory-core (CVE-2026-50076). Confidential information can be exposed externally. Mitigation: upgrade to `1.1.0` or later.
CVE-2025-67446 Vulnerability in CVE-2025-67446 (CVE-2025-67446)
vulnerability in CVE-2025-67446 (CVE-2025-67446). Successful exploitation can lead to full system takeover.
CVE-2026-43986 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-43986)
SSRF in ssrf (CVE-2026-43986). Confidential information can be exposed externally. Exploitable via ``image_hash_lookup``.
CVE-2026-43985 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-43985)
vulnerability in csrf (CVE-2026-43985). Successful exploitation can lead to full system takeover. Exploitable via ``configUpdate``.
CVE-2026-43984 Cross-Site Scripting (XSS) in CVE-2026-43984 (CVE-2026-43984)
cross-site scripting in CVE-2026-43984 (CVE-2026-43984). Confidential information can be exposed externally. Exploitable via ``log_js_errors``.
CVE-2026-38570 Out-of-Bounds Read in dos (CVE-2026-38570)
vulnerability in dos (CVE-2026-38570). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →