Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: products Clear
ID Title
CVE-2026-9941 Use-After-Free in google (CVE-2026-9941)
vulnerability in google (CVE-2026-9941). Successful exploitation can lead to full system takeover.
CVE-2026-9939 Vulnerability in google (CVE-2026-9939)
vulnerability in google (CVE-2026-9939). Successful exploitation can lead to full system takeover.
CVE-2026-9940 Vulnerability in google (CVE-2026-9940)
vulnerability in google (CVE-2026-9940). Successful exploitation can lead to full system takeover.
CVE-2026-9945 Use-After-Free in google (CVE-2026-9945)
vulnerability in google (CVE-2026-9945). Successful exploitation can lead to full system takeover.
CVE-2026-9936 Use-After-Free in google (CVE-2026-9936)
vulnerability in google (CVE-2026-9936). Successful exploitation can lead to full system takeover.
CVE-2026-9922 Use-After-Free in google (CVE-2026-9922)
vulnerability in google (CVE-2026-9922). Successful exploitation can lead to full system takeover.
CVE-2026-9924 Vulnerability in google (CVE-2026-9924)
vulnerability in google (CVE-2026-9924). Successful exploitation can lead to full system takeover.
CVE-2026-9914 Vulnerability in google (CVE-2026-9914)
vulnerability in google (CVE-2026-9914). Successful exploitation can lead to full system takeover.
CVE-2026-9915 Vulnerability in google (CVE-2026-9915)
vulnerability in google (CVE-2026-9915). Successful exploitation can lead to full system takeover.
CVE-2026-9906 Out-of-Bounds Write in google (CVE-2026-9906)
out-of-bounds write in google (CVE-2026-9906). Successful exploitation can lead to full system takeover.
CVE-2026-46827 Privilege Escalation in c (CVE-2026-46827)
vulnerability in c (CVE-2026-46827). Successful exploitation can lead to full system takeover.
CVE-2026-46826 Vulnerability in c (CVE-2026-46826)
vulnerability in c (CVE-2026-46826). Successful exploitation can lead to full system takeover.
CVE-2026-46828 Vulnerability in c (CVE-2026-46828)
vulnerability in c (CVE-2026-46828). Confidential information can be exposed externally.
CVE-2026-46837 Privilege Escalation in c (CVE-2026-46837)
vulnerability in c (CVE-2026-46837). Successful exploitation can lead to full system takeover.
CVE-2026-46818 Vulnerability in c (CVE-2026-46818)
vulnerability in c (CVE-2026-46818). Confidential information can be exposed externally.
CVE-2026-42398 SSRF (Server-Side Request Forgery) in elk (CVE-2026-42398)
SSRF in elk (CVE-2026-42398). Confidential information can be exposed externally. Mitigation: upgrade to `9.2.8, 9.3.2` or later.
CVE-2026-30761 Unrestricted File Upload in CVE-2026-30761 (CVE-2026-30761)
vulnerability in CVE-2026-30761 (CVE-2026-30761). Risk of unauthorized operations or information disclosure.
CVE-2026-45756 Vulnerability in symfony/json-path (CVE-2026-45756)
vulnerability in symfony/json-path (CVE-2026-45756). Risk of unauthorized operations or information disclosure. Exploitable via ``JsonPath``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-49237 Vulnerability in privilege-escalation (CVE-2026-49237)
vulnerability in privilege-escalation (CVE-2026-49237). Successful exploitation can lead to full system takeover.
CVE-2026-37266 Vulnerability in CVE-2026-37266 (CVE-2026-37266)
vulnerability in CVE-2026-37266 (CVE-2026-37266). Successful exploitation can lead to full system takeover.
CVE-2026-9227 Unrestricted File Upload in wordpress (CVE-2026-9227)
vulnerability in wordpress (CVE-2026-9227). Successful exploitation can lead to full system takeover.
CVE-2026-7797 SQL Injection in wordpress (CVE-2026-7797)
SQL injection in wordpress (CVE-2026-7797). Confidential information can be exposed externally.
CVE-2026-6455 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-6455)
vulnerability in wordpress (CVE-2026-6455). Data can be tampered with by attackers.
CVE-2026-9009 Unrestricted File Upload in wordpress (CVE-2026-9009)
vulnerability in wordpress (CVE-2026-9009). Successful exploitation can lead to full system takeover.
CVE-2026-2374 Cross-Site Scripting (XSS) in wordpress (CVE-2026-2374)
cross-site scripting in wordpress (CVE-2026-2374). Risk of unauthorized operations or information disclosure. Exploitable via ``login_nocaptcha_error``.
CVE-2026-45305 Vulnerability in symfony/yaml (CVE-2026-45305)
vulnerability in symfony/yaml (CVE-2026-45305). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45304 Vulnerability in symfony/yaml (CVE-2026-45304)
vulnerability in symfony/yaml (CVE-2026-45304). Risk of unauthorized operations or information disclosure. Exploitable via ``stdClass``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45133 Vulnerability in symfony/yaml (CVE-2026-45133)
vulnerability in symfony/yaml (CVE-2026-45133). Risk of unauthorized operations or information disclosure. Exploitable via ``Parser``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45077 Unsafe Deserialization in symfony/monolog-bridge (CVE-2026-45077)
vulnerability in symfony/monolog-bridge (CVE-2026-45077). Risk of unauthorized operations or information disclosure. Exploitable via ``allowed_classes``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45075 Authorization Flaw in symfony/http-kernel (CVE-2026-45075)
vulnerability in symfony/http-kernel (CVE-2026-45075). Data can be tampered with by attackers. Exploitable via ``HEAD``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45074 Vulnerability in symfony/security-http (CVE-2026-45074)
vulnerability in symfony/security-http (CVE-2026-45074). Confidential information can be exposed externally. Exploitable via `Host header`. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45073 SQL Injection in symfony/cache (CVE-2026-45073)
SQL injection in symfony/cache (CVE-2026-45073). Risk of unauthorized operations or information disclosure. Exploitable via ``AbstractAdapterTrait``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45071 XXE (XML External Entity) in symfony/dom-crawler (CVE-2026-45071)
vulnerability in symfony/dom-crawler (CVE-2026-45071). Confidential information can be exposed externally. Exploitable via ``Crawler``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45068 Vulnerability in symfony/mailer (CVE-2026-45068)
vulnerability in symfony/mailer (CVE-2026-45068). Data can be tampered with by attackers. Exploitable via ``MAILER_DSN``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-4868 Vulnerability in gitlab (CVE-2026-4868)
vulnerability in gitlab (CVE-2026-4868). Confidential information can be exposed externally. Mitigation: upgrade to `18.10.7, 18.11.4, 19.0.2` or later.
CVE-2026-44460 Information Disclosure in CVE-2026-44460 (CVE-2026-44460)
vulnerability in CVE-2026-44460 (CVE-2026-44460). Confidential information can be exposed externally. Mitigation: upgrade to `3.12.0` or later.
CVE-2026-45260 Vulnerability in pimcore/pimcore (CVE-2026-45260)
vulnerability in pimcore/pimcore (CVE-2026-45260). Data can be tampered with by attackers. Exploitable via ``MOVE``. Mitigation: upgrade to `11.5.17` or later.
CVE-2026-42790 Vulnerability in erlang (CVE-2026-42790)
vulnerability in erlang (CVE-2026-42790). Confidential information can be exposed externally.
CVE-2026-45162 Unsafe Deserialization in pimcore/pimcore (CVE-2026-45162)
vulnerability in pimcore/pimcore (CVE-2026-45162). Successful exploitation can lead to full system takeover. Exploitable via ``allowed_classes``. Mitigation: upgrade to `2026.1.3` or later.
CVE-2026-1933 Vulnerability in redhat (CVE-2026-1933)
vulnerability in redhat (CVE-2026-1933). Risk of unauthorized operations or information disclosure.
CVE-2026-48920 Vulnerability in org.jenkins-ci.plugins:email-ext (CVE-2026-48920)
vulnerability in org.jenkins-ci.plugins:email-ext (CVE-2026-48920). Successful exploitation can lead to full system takeover. Exploitable via ``base64``. Mitigation: upgrade to `1933.1935.v276319e3cc47` or later.
CVE-2026-48921 Vulnerability in io.jenkins.plugins:pipeline-groovy-lib (CVE-2026-48921)
vulnerability in io.jenkins.plugins:pipeline-groovy-lib (CVE-2026-48921). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `798.v5cc688825312` or later.
CVE-2026-48922 Path Traversal in org.jenkins-ci.plugins:credentials-binding (CVE-2026-48922)
path traversal in org.jenkins-ci.plugins:credentials-binding (CVE-2026-48922). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `725.ve52b` or later.
CVE-2026-37713 Code Injection in CVE-2026-37713 (CVE-2026-37713)
code injection in CVE-2026-37713 (CVE-2026-37713). Risk of unauthorized operations or information disclosure.
CVE-2026-37712 Code Injection in CVE-2026-37712 (CVE-2026-37712)
code injection in CVE-2026-37712 (CVE-2026-37712). Risk of unauthorized operations or information disclosure.
CVE-2026-37711 Code Injection in CVE-2026-37711 (CVE-2026-37711)
code injection in CVE-2026-37711 (CVE-2026-37711). Risk of unauthorized operations or information disclosure.
CVE-2026-7528 Vulnerability in dos (CVE-2026-7528)
vulnerability in dos (CVE-2026-7528). Risk of unauthorized operations or information disclosure.
CVE-2026-48972 Vulnerability in CVE-2026-48972 (CVE-2026-48972)
vulnerability in CVE-2026-48972 (CVE-2026-48972). Successful exploitation can lead to full system takeover.
CVE-2026-46052 Vulnerability in c (CVE-2026-46052)
vulnerability in c (CVE-2026-46052). Risk of unauthorized operations or information disclosure.
CVE-2026-42762 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →