Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-45162 |
|
Unsafe Deserialization in pimcore/pimcore (CVE-2026-45162)
vulnerability in pimcore/pimcore (CVE-2026-45162). Successful exploitation can lead to full system takeover. Exploitable via ``allowed_classes``. Mitigation: upgrade to `2026.1.3` or later.
|
| CVE-2026-45065 |
|
Vulnerability in symfony/routing (CVE-2026-45065)
vulnerability in symfony/routing (CVE-2026-45065). Risk of unauthorized operations or information disclosure. Exploitable via ``UrlGenerator``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-45063 |
|
Vulnerability in symfony/security-http (CVE-2026-45063)
vulnerability in symfony/security-http (CVE-2026-45063). Confidential information can be exposed externally. Exploitable via ``X509Authenticator``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-45968 |
|
Vulnerability in c (CVE-2026-45968)
vulnerability in c (CVE-2026-45968). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45957 |
|
Out-of-Bounds Read in c (CVE-2026-45957)
vulnerability in c (CVE-2026-45957). Confidential information can be exposed externally.
|
| CVE-2026-45964 |
|
Vulnerability in c (CVE-2026-45964)
vulnerability in c (CVE-2026-45964). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45960 |
|
Vulnerability in c (CVE-2026-45960)
vulnerability in c (CVE-2026-45960). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45934 |
|
Vulnerability in c (CVE-2026-45934)
vulnerability in c (CVE-2026-45934). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45949 |
|
Vulnerability in c (CVE-2026-45949)
vulnerability in c (CVE-2026-45949). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45926 |
|
Vulnerability in linux (CVE-2026-45926)
vulnerability in linux (CVE-2026-45926). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45910 |
|
Vulnerability in c (CVE-2026-45910)
vulnerability in c (CVE-2026-45910). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45913 |
|
Vulnerability in c (CVE-2026-45913)
vulnerability in c (CVE-2026-45913). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45920 |
|
Vulnerability in c (CVE-2026-45920)
vulnerability in c (CVE-2026-45920). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45905 |
|
Vulnerability in c (CVE-2026-45905)
vulnerability in c (CVE-2026-45905). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45895 |
|
Vulnerability in c (CVE-2026-45895)
vulnerability in c (CVE-2026-45895). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45896 |
|
Vulnerability in c (CVE-2026-45896)
vulnerability in c (CVE-2026-45896). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45898 |
|
Vulnerability in c (CVE-2026-45898)
vulnerability in c (CVE-2026-45898). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45878 |
|
Vulnerability in c (CVE-2026-45878)
vulnerability in c (CVE-2026-45878). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45873 |
|
Vulnerability in c (CVE-2026-45873)
vulnerability in c (CVE-2026-45873). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45864 |
|
Vulnerability in c (CVE-2026-45864)
vulnerability in c (CVE-2026-45864). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-36044 |
|
OS Command Injection in CVE-2026-36044 (CVE-2026-36044)
OS command injection in CVE-2026-36044 (CVE-2026-36044). Successful exploitation can lead to full system takeover.
|
| CVE-2025-3633 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2025-3633)
cross-site scripting in ibm (CVE-2025-3633). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71305 |
|
Vulnerability in c (CVE-2025-71305)
vulnerability in c (CVE-2025-71305). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47119 |
|
Cross-Site Scripting (XSS) in CVE-2026-47119 (CVE-2026-47119)
cross-site scripting in CVE-2026-47119 (CVE-2026-47119). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-37713 |
|
Code Injection in CVE-2026-37713 (CVE-2026-37713)
code injection in CVE-2026-37713 (CVE-2026-37713). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42280 |
|
Authorization Flaw in auth0-js (CVE-2026-42280)
vulnerability in auth0-js (CVE-2026-42280). Confidential information can be exposed externally. Mitigation: upgrade to `10.0.0` or later.
|
| CVE-2026-37711 |
|
Code Injection in CVE-2026-37711 (CVE-2026-37711)
code injection in CVE-2026-37711 (CVE-2026-37711). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-37712 |
|
Code Injection in CVE-2026-37712 (CVE-2026-37712)
code injection in CVE-2026-37712 (CVE-2026-37712). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-30498 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-30498)
vulnerability in csrf (CVE-2026-30498). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48972 |
|
Vulnerability in CVE-2026-48972 (CVE-2026-48972)
vulnerability in CVE-2026-48972 (CVE-2026-48972). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4410 |
|
Vulnerability in c (CVE-2026-4410)
vulnerability in c (CVE-2026-4410). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47104 |
|
Out-of-Bounds Read in c (CVE-2026-47104)
vulnerability in c (CVE-2026-47104). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46055 |
|
Vulnerability in c (CVE-2026-46055)
vulnerability in c (CVE-2026-46055). Confidential information can be exposed externally.
|
| CVE-2026-46052 |
|
Vulnerability in c (CVE-2026-46052)
vulnerability in c (CVE-2026-46052). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46002 |
|
Vulnerability in c (CVE-2026-46002)
vulnerability in c (CVE-2026-46002). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45984 |
|
Use-After-Free in c (CVE-2026-45984)
vulnerability in c (CVE-2026-45984). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45961 |
|
Vulnerability in c (CVE-2026-45961)
vulnerability in c (CVE-2026-45961). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45846 |
|
Vulnerability in c (CVE-2026-45846)
vulnerability in c (CVE-2026-45846). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45839 |
|
Vulnerability in c (CVE-2026-45839)
vulnerability in c (CVE-2026-45839). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45840 |
|
Vulnerability in c (CVE-2026-45840)
vulnerability in c (CVE-2026-45840). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45841 |
|
Vulnerability in c (CVE-2026-45841)
vulnerability in c (CVE-2026-45841). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45842 |
|
Vulnerability in c (CVE-2026-45842)
vulnerability in c (CVE-2026-45842). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45844 |
|
Vulnerability in c (CVE-2026-45844)
vulnerability in c (CVE-2026-45844). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45845 |
|
Vulnerability in c (CVE-2026-45845)
vulnerability in c (CVE-2026-45845). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42762 |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
|
| CVE-2026-42746 |
|
Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for...
Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for...
|
| CVE-2026-42735 |
|
Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare...
Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare...
|
| CVE-2026-42737 |
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...
|
| CVE-2026-42745 |
|
Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online...
Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online...
|
| CVE-2026-42730 |
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
|