Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-27292 |
|
Use-After-Free in adobe (CVE-2026-27292)
vulnerability in adobe (CVE-2026-27292). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25125 |
|
Code Injection in october/rain (CVE-2026-25125)
code injection in october/rain (CVE-2026-25125). Confidential information can be exposed externally. Exploitable via ``cms.safe_mode``. Mitigation: upgrade to `3.7.14` or later.
|
| CVE-2026-35196 |
|
OS Command Injection in chamilo (CVE-2026-35196)
OS command injection in chamilo (CVE-2026-35196). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34631 |
|
Out-of-Bounds Write in adobe (CVE-2026-34631)
out-of-bounds write in adobe (CVE-2026-34631). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34619 |
|
Path Traversal in path-traversal (CVE-2026-34619)
path traversal in path-traversal (CVE-2026-34619). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27308 |
|
Vulnerability in adobe (CVE-2026-27308)
vulnerability in adobe (CVE-2026-27308). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27282 |
|
Vulnerability in adobe (CVE-2026-27282)
vulnerability in adobe (CVE-2026-27282). Data can be tampered with by attackers.
|
| CVE-2026-27304 |
|
Vulnerability in adobe (CVE-2026-27304)
vulnerability in adobe (CVE-2026-27304). Confidential information can be exposed externally.
|
| CVE-2026-27305 |
|
Path Traversal in path-traversal (CVE-2026-27305)
path traversal in path-traversal (CVE-2026-27305). Confidential information can be exposed externally.
|
| CVE-2026-27306 |
|
Vulnerability in adobe (CVE-2026-27306)
vulnerability in adobe (CVE-2026-27306). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27307 |
|
Vulnerability in adobe (CVE-2026-27307)
vulnerability in adobe (CVE-2026-27307). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33715 |
|
Vulnerability in symfony (CVE-2026-33715)
vulnerability in symfony (CVE-2026-33715). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34160 |
|
Vulnerability in ssrf (CVE-2026-34160)
vulnerability in ssrf (CVE-2026-34160). Confidential information can be exposed externally.
|
| CVE-2026-33714 |
|
SQL Injection in sqli (CVE-2026-33714)
SQL injection in sqli (CVE-2026-33714). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27287 |
|
Out-of-Bounds Read in adobe (CVE-2026-27287)
vulnerability in adobe (CVE-2026-27287). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34618 |
|
Out-of-Bounds Write in adobe (CVE-2026-34618)
out-of-bounds write in adobe (CVE-2026-34618). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34630 |
|
Vulnerability in adobe (CVE-2026-34630)
vulnerability in adobe (CVE-2026-34630). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27310 |
|
Vulnerability in adobe (CVE-2026-27310)
vulnerability in adobe (CVE-2026-27310). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27311 |
|
Vulnerability in adobe (CVE-2026-27311)
vulnerability in adobe (CVE-2026-27311). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27312 |
|
Vulnerability in adobe (CVE-2026-27312)
vulnerability in adobe (CVE-2026-27312). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27313 |
|
Vulnerability in adobe (CVE-2026-27313)
vulnerability in adobe (CVE-2026-27313). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27222 |
|
Vulnerability in adobe (CVE-2026-27222)
vulnerability in adobe (CVE-2026-27222). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-23666 |
|
Vulnerability in csharp (CVE-2026-23666)
vulnerability in csharp (CVE-2026-23666). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-65134 |
|
Cross-Site Scripting (XSS) in CVE-2025-65134 (CVE-2025-65134)
cross-site scripting in CVE-2025-65134 (CVE-2025-65134). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34614 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-34614)
cross-site scripting in adobe (CVE-2026-34614). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34615 |
|
Unsafe Deserialization in deserialization (CVE-2026-34615)
vulnerability in deserialization (CVE-2026-34615). Confidential information can be exposed externally.
|
| CVE-2026-34617 |
|
Cross-Site Scripting (XSS) in privilege-escalation (CVE-2026-34617)
cross-site scripting in privilege-escalation (CVE-2026-34617). Confidential information can be exposed externally.
|
| CVE-2026-33116 |
|
Vulnerability in dotnet-sdk (CVE-2026-33116)
vulnerability in dotnet-sdk (CVE-2026-33116). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.26, 9.0.15, 10.0.6` or later.
|
| CVE-2026-32226 |
|
Vulnerability in csharp (CVE-2026-32226)
vulnerability in csharp (CVE-2026-32226). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32203 |
|
Vulnerability in System.Security.Cryptography.Xml (CVE-2026-32203)
vulnerability in System.Security.Cryptography.Xml (CVE-2026-32203). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.3` or later.
|
| CVE-2026-27246 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27246)
cross-site scripting in adobe (CVE-2026-27246). Confidential information can be exposed externally.
|
| CVE-2026-27303 |
|
Unsafe Deserialization in deserialization (CVE-2026-27303)
vulnerability in deserialization (CVE-2026-27303). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27243 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27243)
cross-site scripting in adobe (CVE-2026-27243). Confidential information can be exposed externally.
|
| CVE-2026-27245 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27245)
cross-site scripting in adobe (CVE-2026-27245). Confidential information can be exposed externally.
|
| CVE-2026-21331 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-21331)
cross-site scripting in adobe (CVE-2026-21331). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34622 |
|
Vulnerability in adobe (CVE-2026-34622)
vulnerability in adobe (CVE-2026-34622). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34626 |
|
Vulnerability in adobe (CVE-2026-34626)
vulnerability in adobe (CVE-2026-34626). Confidential information can be exposed externally.
|
| CVE-2026-27284 |
|
Out-of-Bounds Read in adobe (CVE-2026-27284)
vulnerability in adobe (CVE-2026-27284). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27285 |
|
Vulnerability in adobe (CVE-2026-27285)
vulnerability in adobe (CVE-2026-27285). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27286 |
|
Vulnerability in adobe (CVE-2026-27286)
vulnerability in adobe (CVE-2026-27286). Confidential information can be exposed externally.
|
| CVE-2026-27238 |
|
Vulnerability in adobe (CVE-2026-27238)
vulnerability in adobe (CVE-2026-27238). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27283 |
|
Use-After-Free in adobe (CVE-2026-27283)
vulnerability in adobe (CVE-2026-27283). Successful exploitation can lead to full system takeover.
|
| CVE-2025-61624 |
|
Path Traversal in path-traversal (CVE-2025-61624)
path traversal in path-traversal (CVE-2025-61624). Data can be tampered with by attackers.
|
| CVE-2025-61848 |
|
SQL Injection in sqli (CVE-2025-61848)
SQL injection in sqli (CVE-2025-61848). Successful exploitation can lead to full system takeover.
|
| CVE-2025-53847 |
|
Vulnerability in fortinet (CVE-2025-53847)
vulnerability in fortinet (CVE-2025-53847). Data can be tampered with by attackers.
|
| CVE-2009-0238 KEV |
|
[KEV] Code Injection in Microsoft office (CVE-2009-0238)
code injection in Microsoft office (CVE-2009-0238). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-32201 KEV |
|
[KEV] Vulnerability in Microsoft sharepoint-server (CVE-2026-32201)
vulnerability in Microsoft sharepoint-server (CVE-2026-32201). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-33908 |
|
Vulnerability in dos (CVE-2026-33908)
vulnerability in dos (CVE-2026-33908). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33901 |
|
Vulnerability in imagemagick (CVE-2026-33901)
vulnerability in imagemagick (CVE-2026-33901). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-69627 |
|
Use-After-Free in gonitro (CVE-2025-69627)
vulnerability in gonitro (CVE-2025-69627). Successful exploitation can lead to full system takeover.
|