Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-7541 Vulnerability in dos (CVE-2026-7541)
vulnerability in dos (CVE-2026-7541). Risk of unauthorized operations or information disclosure.
CVE-2026-6736 Vulnerability in CVE-2026-6736 (CVE-2026-6736)
vulnerability in CVE-2026-6736 (CVE-2026-6736). Risk of unauthorized operations or information disclosure.
CVE-2026-41105 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-41105)
SSRF in ssrf (CVE-2026-41105). Confidential information can be exposed externally.
CVE-2026-40214 Vulnerability in dos (CVE-2026-40214)
vulnerability in dos (CVE-2026-40214). Risk of unauthorized operations or information disclosure.
CVE-2026-41928 Vulnerability in CVE-2026-41928 (CVE-2026-41928)
vulnerability in CVE-2026-41928 (CVE-2026-41928). Risk of unauthorized operations or information disclosure.
CVE-2026-42826 Information Disclosure in microsoft (CVE-2026-42826)
vulnerability in microsoft (CVE-2026-42826). Successful exploitation can lead to full system takeover.
CVE-2026-41929 Cross-Site Scripting (XSS) in CVE-2026-41929 (CVE-2026-41929)
cross-site scripting in CVE-2026-41929 (CVE-2026-41929). Risk of unauthorized operations or information disclosure.
CVE-2026-33109 Vulnerability in apache (CVE-2026-33109)
vulnerability in apache (CVE-2026-33109). Successful exploitation can lead to full system takeover.
CVE-2026-35435 Vulnerability in microsoft (CVE-2026-35435)
vulnerability in microsoft (CVE-2026-35435). Confidential information can be exposed externally.
CVE-2026-33823 Vulnerability in microsoft (CVE-2026-33823)
vulnerability in microsoft (CVE-2026-33823). Confidential information can be exposed externally.
CVE-2026-40213 Authorization Flaw in CVE-2026-40213 (CVE-2026-40213)
vulnerability in CVE-2026-40213 (CVE-2026-40213). Risk of unauthorized operations or information disclosure.
CVE-2026-33844 Vulnerability in apache (CVE-2026-33844)
vulnerability in apache (CVE-2026-33844). Successful exploitation can lead to full system takeover.
CVE-2026-34327 Vulnerability in microsoft (CVE-2026-34327)
vulnerability in microsoft (CVE-2026-34327). Confidential information can be exposed externally.
CVE-2026-35428 Command Injection in microsoft (CVE-2026-35428)
command injection in microsoft (CVE-2026-35428). Successful exploitation can lead to full system takeover.
CVE-2026-33111 Command Injection in CVE-2026-33111 (CVE-2026-33111)
command injection in CVE-2026-33111 (CVE-2026-33111). Confidential information can be exposed externally.
CVE-2026-26129 Vulnerability in microsoft (CVE-2026-26129)
vulnerability in microsoft (CVE-2026-26129). Confidential information can be exposed externally.
CVE-2026-32207 Cross-Site Scripting (XSS) in microsoft (CVE-2026-32207)
cross-site scripting in microsoft (CVE-2026-32207). Successful exploitation can lead to full system takeover.
CVE-2026-26164 Vulnerability in microsoft (CVE-2026-26164)
vulnerability in microsoft (CVE-2026-26164). Confidential information can be exposed externally.
CVE-2026-42449 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-42449)
SSRF in ssrf (CVE-2026-42449). Confidential information can be exposed externally.
CVE-2026-41691 Path Traversal in path-traversal (CVE-2026-41691)
path traversal in path-traversal (CVE-2026-41691). Risk of unauthorized operations or information disclosure.
CVE-2026-42047 Information Disclosure in express (CVE-2026-42047)
vulnerability in express (CVE-2026-42047). Confidential information can be exposed externally.
CVE-2026-41692 Cross-Site Scripting (XSS) in CVE-2026-41692 (CVE-2026-41692)
cross-site scripting in CVE-2026-41692 (CVE-2026-41692). Risk of unauthorized operations or information disclosure.
CVE-2026-8087 Buffer Overflow in c (CVE-2026-8087)
vulnerability in c (CVE-2026-8087). Risk of unauthorized operations or information disclosure.
CVE-2026-8088 Buffer Overflow in c (CVE-2026-8088)
vulnerability in c (CVE-2026-8088). Risk of unauthorized operations or information disclosure.
CVE-2026-42259 Open Redirect in CVE-2026-42259 (CVE-2026-42259)
vulnerability in CVE-2026-42259 (CVE-2026-42259). Risk of unauthorized operations or information disclosure.
CVE-2026-42501 Vulnerability in CVE-2026-42501 (CVE-2026-42501)
vulnerability in CVE-2026-42501 (CVE-2026-42501). Successful exploitation can lead to full system takeover.
CVE-2026-8086 Buffer Overflow in gdal (CVE-2026-8086)
vulnerability in gdal (CVE-2026-8086). Risk of unauthorized operations or information disclosure.
CVE-2026-8084 Buffer Overflow in gdal (CVE-2026-8084)
vulnerability in gdal (CVE-2026-8084). Risk of unauthorized operations or information disclosure.
CVE-2026-42215 OS Command Injection in GitPython (CVE-2026-42215)
OS command injection in GitPython (CVE-2026-42215). Successful exploitation can lead to full system takeover. Exploitable via ``upload_pack``. Mitigation: upgrade to `3.1.47` or later.
CVE-2026-42284 Vulnerability in GitPython (CVE-2026-42284)
vulnerability in GitPython (CVE-2026-42284). Successful exploitation can lead to full system takeover. Exploitable via ``multi_options``. Mitigation: upgrade to `3.1.47` or later.
CVE-2026-7413 Vulnerability in CVE-2026-7413 (CVE-2026-7413)
vulnerability in CVE-2026-7413 (CVE-2026-7413). Successful exploitation can lead to full system takeover.
CVE-2025-63703 Vulnerability in npm (CVE-2025-63703)
vulnerability in npm (CVE-2025-63703). Successful exploitation can lead to full system takeover.
CVE-2025-63704 Vulnerability in prototype-pollution (CVE-2025-63704)
vulnerability in prototype-pollution (CVE-2025-63704). Successful exploitation can lead to full system takeover.
CVE-2026-44349 SQL Injection in github.com/daptin/daptin (CVE-2026-44349)
SQL injection in github.com/daptin/daptin (CVE-2026-44349). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/`. Mitigation: upgrade to `0.11.5` or later.
CVE-2026-32686 Vulnerability in dos (CVE-2026-32686)
vulnerability in dos (CVE-2026-32686). Risk of unauthorized operations or information disclosure.
CVE-2026-36458 Code Injection in sqli (CVE-2026-36458)
code injection in sqli (CVE-2026-36458). Successful exploitation can lead to full system takeover.
CVE-2025-63705 OS Command Injection in CVE-2025-63705 (CVE-2025-63705)
OS command injection in CVE-2025-63705 (CVE-2025-63705). Successful exploitation can lead to full system takeover.
CVE-2025-63706 Code Injection in npm (CVE-2025-63706)
code injection in npm (CVE-2025-63706). Successful exploitation can lead to full system takeover.
CVE-2025-67202 Cross-Site Scripting (XSS) in CVE-2025-67202 (CVE-2025-67202)
cross-site scripting in CVE-2025-67202 (CVE-2025-67202). Risk of unauthorized operations or information disclosure.
CVE-2026-30496 Vulnerability in android (CVE-2026-30496)
vulnerability in android (CVE-2026-30496). Successful exploitation can lead to full system takeover.
CVE-2026-30495 Vulnerability in CVE-2026-30495 (CVE-2026-30495)
vulnerability in CVE-2026-30495 (CVE-2026-30495). Successful exploitation can lead to full system takeover.
CVE-2026-8091 Vulnerability in firefox (CVE-2026-8091)
vulnerability in firefox (CVE-2026-8091). Successful exploitation can lead to full system takeover.
CVE-2026-8093 Buffer Overflow in CVE-2026-8093 (CVE-2026-8093)
vulnerability in CVE-2026-8093 (CVE-2026-8093). Successful exploitation can lead to full system takeover.
CVE-2026-8094 Code Injection in firefox (CVE-2026-8094)
code injection in firefox (CVE-2026-8094). Successful exploitation can lead to full system takeover.
CVE-2026-8092 Out-of-Bounds Read in CVE-2026-8092 (CVE-2026-8092)
vulnerability in CVE-2026-8092 (CVE-2026-8092). Successful exploitation can lead to full system takeover.
CVE-2026-8090 Use-After-Free in mozilla (CVE-2026-8090)
vulnerability in mozilla (CVE-2026-8090). Risk of unauthorized operations or information disclosure.
CVE-2026-4430 Out-of-Bounds Write in libreoffice (CVE-2026-4430)
out-of-bounds write in libreoffice (CVE-2026-4430). Successful exploitation can lead to full system takeover.
CVE-2026-44406 Vulnerability in privilege-escalation (CVE-2026-44406)
vulnerability in privilege-escalation (CVE-2026-44406). Risk of unauthorized operations or information disclosure.
CVE-2025-9661 OS Command Injection in hitachi (CVE-2025-9661)
OS command injection in hitachi (CVE-2025-9661). Successful exploitation can lead to full system takeover.
CVE-2026-41413 SSRF (Server-Side Request Forgery) in istio.io/istio (CVE-2026-41413)
SSRF in istio.io/istio (CVE-2026-41413). Risk of unauthorized operations or information disclosure. Exploitable via ``ValidatingAdmissionPolicy``. Mitigation: upgrade to `0.0.0-20260410004459-189832a289c1` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →