Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: products Clear
ID Title
CVE-2025-53440 Vulnerability in CVE-2025-53440 (CVE-2025-53440)
vulnerability in CVE-2025-53440 (CVE-2025-53440). Successful exploitation can lead to full system takeover.
CVE-2025-58705 Vulnerability in CVE-2025-58705 (CVE-2025-58705)
vulnerability in CVE-2025-58705 (CVE-2025-58705). Successful exploitation can lead to full system takeover.
CVE-2025-58024 Vulnerability in CVE-2025-58024 (CVE-2025-58024)
vulnerability in CVE-2025-58024 (CVE-2025-58024). Successful exploitation can lead to full system takeover.
CVE-2026-49491 SQL Injection in sqli (CVE-2026-49491)
SQL injection in sqli (CVE-2026-49491). Confidential information can be exposed externally.
CVE-2026-10290 Vulnerability in sqli (CVE-2026-10290)
vulnerability in sqli (CVE-2026-10290). Risk of unauthorized operations or information disclosure.
CVE-2018-25429 SQL Injection in sqli (CVE-2018-25429)
SQL injection in sqli (CVE-2018-25429). Confidential information can be exposed externally.
CVE-2018-25430 SQL Injection in c (CVE-2018-25430)
SQL injection in c (CVE-2018-25430). Confidential information can be exposed externally.
CVE-2018-25433 SQL Injection in sqli (CVE-2018-25433)
SQL injection in sqli (CVE-2018-25433). Confidential information can be exposed externally.
CVE-2018-25434 SQL Injection in wordpress (CVE-2018-25434)
SQL injection in wordpress (CVE-2018-25434). Confidential information can be exposed externally.
CVE-2018-25428 SQL Injection in sqli (CVE-2018-25428)
SQL injection in sqli (CVE-2018-25428). Confidential information can be exposed externally.
CVE-2026-10287 SSRF (Server-Side Request Forgery) in CVE-2026-10287 (CVE-2026-10287)
SSRF in CVE-2026-10287 (CVE-2026-10287). Risk of unauthorized operations or information disclosure.
CVE-2026-10288 Authentication Bypass in CVE-2026-10288 (CVE-2026-10288)
authentication bypass in CVE-2026-10288 (CVE-2026-10288). Risk of unauthorized operations or information disclosure.
CVE-2026-47294 OS Command Injection in deserialization (CVE-2026-47294)
OS command injection in deserialization (CVE-2026-47294). Successful exploitation can lead to full system takeover.
CVE-2026-10273 Command Injection in CVE-2026-10273 (CVE-2026-10273)
command injection in CVE-2026-10273 (CVE-2026-10273). Risk of unauthorized operations or information disclosure.
CVE-2026-10261 Vulnerability in sqli (CVE-2026-10261)
vulnerability in sqli (CVE-2026-10261). Risk of unauthorized operations or information disclosure.
CVE-2026-10262 Vulnerability in sqli (CVE-2026-10262)
vulnerability in sqli (CVE-2026-10262). Risk of unauthorized operations or information disclosure.
CVE-2026-10263 Vulnerability in sqli (CVE-2026-10263)
vulnerability in sqli (CVE-2026-10263). Risk of unauthorized operations or information disclosure.
CVE-2026-10260 Vulnerability in sqli (CVE-2026-10260)
vulnerability in sqli (CVE-2026-10260). Risk of unauthorized operations or information disclosure.
CVE-2026-10251 Vulnerability in sqli (CVE-2026-10251)
vulnerability in sqli (CVE-2026-10251). Risk of unauthorized operations or information disclosure.
CVE-2026-10252 Vulnerability in sqli (CVE-2026-10252)
vulnerability in sqli (CVE-2026-10252). Risk of unauthorized operations or information disclosure.
CVE-2026-10253 Vulnerability in sqli (CVE-2026-10253)
vulnerability in sqli (CVE-2026-10253). Risk of unauthorized operations or information disclosure.
CVE-2026-10249 Vulnerability in sqli (CVE-2026-10249)
vulnerability in sqli (CVE-2026-10249). Risk of unauthorized operations or information disclosure.
CVE-2026-10250 Vulnerability in sqli (CVE-2026-10250)
vulnerability in sqli (CVE-2026-10250). Risk of unauthorized operations or information disclosure.
CVE-2026-49298 Vulnerability in airflow (CVE-2026-49298)
vulnerability in airflow (CVE-2026-49298). Successful exploitation can lead to full system takeover. Exploitable via ``KubernetesExecutor``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-49157 Vulnerability in activemq (CVE-2026-49157)
vulnerability in activemq (CVE-2026-49157). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.19.7, 6.2.6` or later.
CVE-2026-49361 Vulnerability in org.apache.fluss:fluss-common (CVE-2026-49361)
vulnerability in org.apache.fluss:fluss-common (CVE-2026-49361). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.9.1-incubating` or later.
CVE-2026-48827 Path Traversal in org.apache.sshd:sshd-git (CVE-2026-48827)
path traversal in org.apache.sshd:sshd-git (CVE-2026-48827). Confidential information can be exposed externally. Mitigation: upgrade to `3.0.0-M4` or later.
CVE-2026-42588 Vulnerability in activemq (CVE-2026-42588)
vulnerability in activemq (CVE-2026-42588). Confidential information can be exposed externally. Mitigation: upgrade to `5.19.7, 6.2.6` or later.
CVE-2026-45505 Vulnerability in activemq (CVE-2026-45505)
vulnerability in activemq (CVE-2026-45505). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.19.7, 6.2.6` or later.
CVE-2026-41084 Vulnerability in apache-airflow (CVE-2026-41084)
vulnerability in apache-airflow (CVE-2026-41084). Data can be tampered with by attackers. Exploitable via `DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances`. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-44825 Vulnerability in solr (CVE-2026-44825)
vulnerability in solr (CVE-2026-44825). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.0.0` or later.
CVE-2026-45360 Unsafe Deserialization in apache-airflow (CVE-2026-45360)
vulnerability in apache-airflow (CVE-2026-45360). Risk of unauthorized operations or information disclosure. Exploitable via ``DeadlineReference``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-42359 Unsafe Deserialization in apache-airflow (CVE-2026-42359)
vulnerability in apache-airflow (CVE-2026-42359). Successful exploitation can lead to full system takeover. Exploitable via `PATCH /api/v2/xcomEntries/{key}`. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-40961 Open Redirect in airflow (CVE-2026-40961)
vulnerability in airflow (CVE-2026-40961). Risk of unauthorized operations or information disclosure. Exploitable via ``is_safe_url``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-10236 Vulnerability in CVE-2026-10236 (CVE-2026-10236)
vulnerability in CVE-2026-10236 (CVE-2026-10236). Risk of unauthorized operations or information disclosure.
CVE-2026-35563 Vulnerability in org.apache.directory.api:api-ldap-client-api (CVE-2026-35563)
vulnerability in org.apache.directory.api:api-ldap-client-api (CVE-2026-35563). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.8` or later.
CVE-2026-10227 Vulnerability in sqli (CVE-2026-10227)
vulnerability in sqli (CVE-2026-10227). Risk of unauthorized operations or information disclosure.
CVE-2026-10225 Vulnerability in sqli (CVE-2026-10225)
vulnerability in sqli (CVE-2026-10225). Risk of unauthorized operations or information disclosure.
CVE-2026-10226 Vulnerability in sqli (CVE-2026-10226)
vulnerability in sqli (CVE-2026-10226). Risk of unauthorized operations or information disclosure.
CVE-2026-10208 Vulnerability in sqli (CVE-2026-10208)
vulnerability in sqli (CVE-2026-10208). Risk of unauthorized operations or information disclosure.
CVE-2024-21182 KEV Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...
CVE-2026-10185 Vulnerability in sqli (CVE-2026-10185)
vulnerability in sqli (CVE-2026-10185). Risk of unauthorized operations or information disclosure.
CVE-2026-10184 Vulnerability in sqli (CVE-2026-10184)
vulnerability in sqli (CVE-2026-10184). Risk of unauthorized operations or information disclosure.
CVE-2026-10186 Vulnerability in sqli (CVE-2026-10186)
vulnerability in sqli (CVE-2026-10186). Risk of unauthorized operations or information disclosure.
CVE-2026-49489 SQL Injection in sqli (CVE-2026-49489)
SQL injection in sqli (CVE-2026-49489). Confidential information can be exposed externally.
CVE-2026-10178 Vulnerability in sqli (CVE-2026-10178)
vulnerability in sqli (CVE-2026-10178). Risk of unauthorized operations or information disclosure.
CVE-2026-10167 Authentication Bypass in CVE-2026-10167 (CVE-2026-10167)
authentication bypass in CVE-2026-10167 (CVE-2026-10167). Risk of unauthorized operations or information disclosure.
CVE-2018-25424 SQL Injection in sqli (CVE-2018-25424)
SQL injection in sqli (CVE-2018-25424). Confidential information can be exposed externally.
CVE-2018-25420 SQL Injection in sqli (CVE-2018-25420)
SQL injection in sqli (CVE-2018-25420). Confidential information can be exposed externally.
CVE-2018-25422 SQL Injection in sqli (CVE-2018-25422)
SQL injection in sqli (CVE-2018-25422). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →