Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: products Clear
ID Title
CVE-2026-50623 Authentication Bypass in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50623)
authentication bypass in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50623). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.7` or later.
CVE-2026-49875 XXE (XML External Entity) in apache (CVE-2026-49875)
vulnerability in apache (CVE-2026-49875). Successful exploitation can lead to full system takeover.
CVE-2026-45060 SQL Injection in sqli (CVE-2026-45060)
SQL injection in sqli (CVE-2026-45060). Successful exploitation can lead to full system takeover.
CVE-2026-45418 SQL Injection in sqli (CVE-2026-45418)
SQL injection in sqli (CVE-2026-45418). Successful exploitation can lead to full system takeover. Exploitable via `POST /actions/subtitle_edit.php`.
CVE-2026-45173 Vulnerability in paloaltonetworks (CVE-2026-45173)
vulnerability in paloaltonetworks (CVE-2026-45173). Data can be tampered with by attackers.
CVE-2026-12035 Use-After-Free in google (CVE-2026-12035)
vulnerability in google (CVE-2026-12035). Successful exploitation can lead to full system takeover.
CVE-2026-12034 Vulnerability in Google chrome (CVE-2026-12034)
vulnerability in Google chrome (CVE-2026-12034). Successful exploitation can lead to full system takeover.
CVE-2026-12032 Vulnerability in google (CVE-2026-12032)
vulnerability in google (CVE-2026-12032). Risk of unauthorized operations or information disclosure.
CVE-2026-12030 Vulnerability in google (CVE-2026-12030)
vulnerability in google (CVE-2026-12030). Successful exploitation can lead to full system takeover.
CVE-2026-12028 Use-After-Free in google (CVE-2026-12028)
vulnerability in google (CVE-2026-12028). Successful exploitation can lead to full system takeover.
CVE-2026-12026 Out-of-Bounds Read in google (CVE-2026-12026)
vulnerability in google (CVE-2026-12026). Confidential information can be exposed externally.
CVE-2026-12025 Vulnerability in google (CVE-2026-12025)
vulnerability in google (CVE-2026-12025). Confidential information can be exposed externally.
CVE-2026-12027 Vulnerability in google (CVE-2026-12027)
vulnerability in google (CVE-2026-12027). Successful exploitation can lead to full system takeover.
CVE-2026-12029 Use-After-Free in google (CVE-2026-12029)
vulnerability in google (CVE-2026-12029). Successful exploitation can lead to full system takeover.
CVE-2026-12031 Vulnerability in google (CVE-2026-12031)
vulnerability in google (CVE-2026-12031). Successful exploitation can lead to full system takeover.
CVE-2026-12033 Out-of-Bounds Read in google (CVE-2026-12033)
vulnerability in google (CVE-2026-12033). Confidential information can be exposed externally.
CVE-2026-12020 Use-After-Free in google (CVE-2026-12020)
vulnerability in google (CVE-2026-12020). Successful exploitation can lead to full system takeover.
CVE-2026-12022 Vulnerability in google (CVE-2026-12022)
vulnerability in google (CVE-2026-12022). Successful exploitation can lead to full system takeover.
CVE-2026-12023 Use-After-Free in google (CVE-2026-12023)
vulnerability in google (CVE-2026-12023). Successful exploitation can lead to full system takeover.
CVE-2026-12019 Out-of-Bounds Write in google (CVE-2026-12019)
out-of-bounds write in google (CVE-2026-12019). Successful exploitation can lead to full system takeover.
CVE-2026-12015 Use-After-Free in google (CVE-2026-12015)
vulnerability in google (CVE-2026-12015). Confidential information can be exposed externally.
CVE-2026-12016 Vulnerability in google (CVE-2026-12016)
vulnerability in google (CVE-2026-12016). Successful exploitation can lead to full system takeover.
CVE-2026-12017 Vulnerability in google (CVE-2026-12017)
vulnerability in google (CVE-2026-12017). Risk of unauthorized operations or information disclosure.
CVE-2026-12018 Privilege Escalation in privilege-escalation (CVE-2026-12018)
vulnerability in privilege-escalation (CVE-2026-12018). Successful exploitation can lead to full system takeover.
CVE-2026-12024 Vulnerability in google (CVE-2026-12024)
vulnerability in google (CVE-2026-12024). Data can be tampered with by attackers.
CVE-2026-12009 Vulnerability in google (CVE-2026-12009)
vulnerability in google (CVE-2026-12009). Successful exploitation can lead to full system takeover.
CVE-2026-12010 Vulnerability in google (CVE-2026-12010)
vulnerability in google (CVE-2026-12010). Successful exploitation can lead to full system takeover.
CVE-2026-12008 Use-After-Free in google (CVE-2026-12008)
vulnerability in google (CVE-2026-12008). Successful exploitation can lead to full system takeover.
CVE-2026-12011 Use-After-Free in google (CVE-2026-12011)
vulnerability in google (CVE-2026-12011). Successful exploitation can lead to full system takeover.
CVE-2026-12012 Use-After-Free in google (CVE-2026-12012)
vulnerability in google (CVE-2026-12012). Successful exploitation can lead to full system takeover.
CVE-2026-12013 Use-After-Free in google (CVE-2026-12013)
vulnerability in google (CVE-2026-12013). Successful exploitation can lead to full system takeover.
CVE-2026-12014 Use-After-Free in google (CVE-2026-12014)
vulnerability in google (CVE-2026-12014). Successful exploitation can lead to full system takeover.
CVE-2026-12007 Use-After-Free in Google chrome (CVE-2026-12007)
vulnerability in Google chrome (CVE-2026-12007). Successful exploitation can lead to full system takeover.
CVE-2025-27511 Vulnerability in org.geoserver.extension:gs-db2 (CVE-2025-27511)
vulnerability in org.geoserver.extension:gs-db2 (CVE-2025-27511). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.27.0` or later.
CVE-2026-45175 Vulnerability in paloaltonetworks (CVE-2026-45175)
vulnerability in paloaltonetworks (CVE-2026-45175). Successful exploitation can lead to full system takeover.
CVE-2026-45176 Privilege Escalation in paloaltonetworks (CVE-2026-45176)
vulnerability in paloaltonetworks (CVE-2026-45176). Successful exploitation can lead to full system takeover.
CVE-2025-46293 Vulnerability in apple (CVE-2025-46293)
vulnerability in apple (CVE-2025-46293). Confidential information can be exposed externally.
CVE-2025-46308 Vulnerability in apple (CVE-2025-46308)
vulnerability in apple (CVE-2025-46308). Risk of unauthorized operations or information disclosure.
CVE-2025-46313 Vulnerability in apple (CVE-2025-46313)
vulnerability in apple (CVE-2025-46313). Confidential information can be exposed externally.
CVE-2025-46315 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
CVE-2025-43278 Vulnerability in apple (CVE-2025-43278)
vulnerability in apple (CVE-2025-43278). Confidential information can be exposed externally.
CVE-2025-43339 Vulnerability in apple (CVE-2025-43339)
vulnerability in apple (CVE-2025-43339). Confidential information can be exposed externally.
CVE-2025-24268 Path Traversal in apple (CVE-2025-24268)
path traversal in apple (CVE-2025-24268). Confidential information can be exposed externally.
CVE-2025-24284 This issue was addressed with improved checks to prevent unauthorized actions. This issue is...
This issue was addressed with improved checks to prevent unauthorized actions. This issue is...
CVE-2025-30431 Vulnerability in apple (CVE-2025-30431)
vulnerability in apple (CVE-2025-30431). Confidential information can be exposed externally.
CVE-2025-30459 Vulnerability in apple (CVE-2025-30459)
vulnerability in apple (CVE-2025-30459). Confidential information can be exposed externally.
CVE-2025-31272 The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app...
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app...
CVE-2025-24165 Vulnerability in apple (CVE-2025-24165)
vulnerability in apple (CVE-2025-24165). Risk of unauthorized operations or information disclosure.
CVE-2026-46698 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-46698)
SSRF in wordpress (CVE-2026-46698). Risk of unauthorized operations or information disclosure.
CVE-2026-46697 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-46697)
SSRF in wordpress (CVE-2026-46697). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →