Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: products Clear
ID Title
CVE-2026-74989 Buffer Overflow in mozilla (CVE-2026-74989)
vulnerability in mozilla (CVE-2026-74989). Successful exploitation can lead to full system takeover.
CVE-2026-74985 Privilege Escalation in privilege-escalation (CVE-2026-74985)
vulnerability in privilege-escalation (CVE-2026-74985). Successful exploitation can lead to full system takeover.
CVE-2026-74979 Vulnerability in mozilla (CVE-2026-74979)
vulnerability in mozilla (CVE-2026-74979). Successful exploitation can lead to full system takeover.
CVE-2026-74964 Vulnerability in mozilla (CVE-2026-74964)
vulnerability in mozilla (CVE-2026-74964). Successful exploitation can lead to full system takeover.
CVE-2026-74961 Vulnerability in mozilla (CVE-2026-74961)
vulnerability in mozilla (CVE-2026-74961). Confidential information can be exposed externally.
CVE-2026-74959 Vulnerability in mozilla (CVE-2026-74959)
vulnerability in mozilla (CVE-2026-74959). Confidential information can be exposed externally.
CVE-2026-74956 Vulnerability in mozilla (CVE-2026-74956)
vulnerability in mozilla (CVE-2026-74956). Confidential information can be exposed externally.
CVE-2026-74938 Vulnerability in mozilla (CVE-2026-74938)
vulnerability in mozilla (CVE-2026-74938). Confidential information can be exposed externally.
CVE-2026-74940 Use-After-Free in mozilla (CVE-2026-74940)
vulnerability in mozilla (CVE-2026-74940). Successful exploitation can lead to full system takeover.
CVE-2026-74944 Use-After-Free in mozilla (CVE-2026-74944)
vulnerability in mozilla (CVE-2026-74944). Successful exploitation can lead to full system takeover.
CVE-2026-74943 Use-After-Free in mozilla (CVE-2026-74943)
vulnerability in mozilla (CVE-2026-74943). Successful exploitation can lead to full system takeover.
CVE-2026-74936 Use-After-Free in mozilla (CVE-2026-74936)
vulnerability in mozilla (CVE-2026-74936). Successful exploitation can lead to full system takeover.
CVE-2026-34884 SSRF (Server-Side Request Forgery) in apache (CVE-2026-34884)
SSRF in apache (CVE-2026-34884). Successful exploitation can lead to full system takeover.
CVE-2026-67960 Code Injection in CVE-2026-67960 (CVE-2026-67960)
code injection in CVE-2026-67960 (CVE-2026-67960). Successful exploitation can lead to full system takeover.
CVE-2026-50769 SQL Injection in sqli (CVE-2026-50769)
SQL injection in sqli (CVE-2026-50769). Successful exploitation can lead to full system takeover.
CVE-2024-13784 Unsafe Deserialization in wordpress (CVE-2024-13784)
vulnerability in wordpress (CVE-2024-13784). Successful exploitation can lead to full system takeover.
CVE-2026-14524 Path Traversal in wordpress (CVE-2026-14524)
path traversal in wordpress (CVE-2026-14524). Data can be tampered with by attackers.
CVE-2026-18855 Path Traversal in wordpress (CVE-2026-18855)
path traversal in wordpress (CVE-2026-18855). Data can be tampered with by attackers.
CVE-2026-19598 Authorization Flaw in wordpress (CVE-2026-19598)
vulnerability in wordpress (CVE-2026-19598). Successful exploitation can lead to full system takeover.
CVE-2026-14484 Path Traversal in wordpress (CVE-2026-14484)
path traversal in wordpress (CVE-2026-14484). Data can be tampered with by attackers.
CVE-2026-73849 Vulnerability in CVE-2026-73849 (CVE-2026-73849)
vulnerability in CVE-2026-73849 (CVE-2026-73849). Successful exploitation can lead to full system takeover.
CVE-2026-48528 SQL Injection in tomcat (CVE-2026-48528)
SQL injection in tomcat (CVE-2026-48528). Successful exploitation can lead to full system takeover. Exploitable via ``nodeId``.
CVE-2026-19297 Vulnerability in langflow (CVE-2026-19297)
vulnerability in langflow (CVE-2026-19297). Confidential information can be exposed externally.
CVE-2026-14525 Vulnerability in ibm (CVE-2026-14525)
vulnerability in ibm (CVE-2026-14525). Confidential information can be exposed externally.
CVE-2026-73532 Vulnerability in CVE-2026-73532 (CVE-2026-73532)
vulnerability in CVE-2026-73532 (CVE-2026-73532). Successful exploitation can lead to full system takeover.
CVE-2026-73533 Vulnerability in CVE-2026-73533 (CVE-2026-73533)
vulnerability in CVE-2026-73533 (CVE-2026-73533). Successful exploitation can lead to full system takeover.
CVE-2026-28149 Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
CVE-2026-49827 Vulnerability in CVE-2026-49827 (CVE-2026-49827)
vulnerability in CVE-2026-49827 (CVE-2026-49827). Successful exploitation can lead to full system takeover.
CVE-2026-73240 Vulnerability in apache (CVE-2026-73240)
vulnerability in apache (CVE-2026-73240). Successful exploitation can lead to full system takeover.
CVE-2026-18391 Unrestricted File Upload in wordpress (CVE-2026-18391)
vulnerability in wordpress (CVE-2026-18391). Successful exploitation can lead to full system takeover.
CVE-2026-15039 Unrestricted File Upload in wordpress (CVE-2026-15039)
vulnerability in wordpress (CVE-2026-15039). Successful exploitation can lead to full system takeover.
CVE-2026-71290 Vulnerability in apache (CVE-2026-71290)
vulnerability in apache (CVE-2026-71290). Confidential information can be exposed externally.
CVE-2026-48362 OS Command Injection in adobe (CVE-2026-48362)
OS command injection in adobe (CVE-2026-48362). Successful exploitation can lead to full system takeover.
CVE-2026-71384 Authorization Flaw in adobe (CVE-2026-71384)
vulnerability in adobe (CVE-2026-71384). Successful exploitation can lead to full system takeover.
CVE-2026-70306 Cross-Site Scripting (XSS) in microsoft (CVE-2026-70306)
cross-site scripting in microsoft (CVE-2026-70306). Confidential information can be exposed externally.
CVE-2026-69223 SSRF (Server-Side Request Forgery) in apache (CVE-2026-69223)
SSRF in apache (CVE-2026-69223). Confidential information can be exposed externally.
CVE-2026-72748 Vulnerability in dos (CVE-2026-72748)
vulnerability in dos (CVE-2026-72748). Data can be tampered with by attackers.
CVE-2026-72898 KEV [KEV] SQL Injection in metabase (CVE-2026-72898)
SQL injection in metabase (CVE-2026-72898). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-47754 Path Traversal in tomcat (CVE-2026-47754)
path traversal in tomcat (CVE-2026-47754). Confidential information can be exposed externally. Exploitable via ``archiveEntryName``.
CVE-2026-18412 Vulnerability in path-traversal (CVE-2026-18412)
vulnerability in path-traversal (CVE-2026-18412). Confidential information can be exposed externally.
CVE-2026-63106 SQL Injection in sqli (CVE-2026-63106)
SQL injection in sqli (CVE-2026-63106). Successful exploitation can lead to full system takeover.
CVE-2026-72592 Unrestricted File Upload in CVE-2026-72592 (CVE-2026-72592)
vulnerability in CVE-2026-72592 (CVE-2026-72592). Successful exploitation can lead to full system takeover.
CVE-2026-44416 Code Injection in apache (CVE-2026-44416)
code injection in apache (CVE-2026-44416). Successful exploitation can lead to full system takeover.
CVE-2026-55799 Code Injection in apache (CVE-2026-55799)
code injection in apache (CVE-2026-55799). Successful exploitation can lead to full system takeover.
CVE-2026-32227 SQL Injection in apache (CVE-2026-32227)
SQL injection in apache (CVE-2026-32227). Successful exploitation can lead to full system takeover.
CVE-2026-40920 Vulnerability in apache (CVE-2026-40920)
vulnerability in apache (CVE-2026-40920). Successful exploitation can lead to full system takeover.
CVE-2026-42537 Vulnerability in apache (CVE-2026-42537)
vulnerability in apache (CVE-2026-42537). Successful exploitation can lead to full system takeover.
CVE-2026-28672 Command Injection in apache (CVE-2026-28672)
command injection in apache (CVE-2026-28672). Successful exploitation can lead to full system takeover.
CVE-2026-71558 Unsafe Deserialization in c (CVE-2026-71558)
vulnerability in c (CVE-2026-71558). Successful exploitation can lead to full system takeover.
CVE-2026-71560 Out-of-Bounds Read in c (CVE-2026-71560)
vulnerability in c (CVE-2026-71560). Data can be tampered with by attackers.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →