Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-77915 |
|
Vulnerability in CVE-2026-77915 (CVE-2026-77915)
vulnerability in CVE-2026-77915 (CVE-2026-77915). Successful exploitation can lead to full system takeover. Exploitable via `POST /register`.
|
| CVE-2026-66066 |
|
Vulnerability in activestorage (CVE-2026-66066)
vulnerability in activestorage (CVE-2026-66066). Risk of unauthorized operations or information disclosure. Exploitable via ``secret_key_base``. Mitigation: upgrade to `8.1.3.1` or later.
|
| CVE-2026-46386 |
|
Unsafe Deserialization in rails (CVE-2026-46386)
vulnerability in rails (CVE-2026-46386). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50519 |
|
Vulnerability in microsoft (CVE-2026-50519)
vulnerability in microsoft (CVE-2026-50519). Confidential information can be exposed externally.
|
| CVE-2026-0134 |
|
Vulnerability in cpp (CVE-2026-0134)
vulnerability in cpp (CVE-2026-0134). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9262 |
|
Vulnerability in canon (CVE-2026-9262)
vulnerability in canon (CVE-2026-9262). Confidential information can be exposed externally.
|
| CVE-2026-44825 |
|
Vulnerability in solr (CVE-2026-44825)
vulnerability in solr (CVE-2026-44825). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.0.0` or later.
|
| CVE-2026-6866 |
|
Vulnerability in schneider-electric (CVE-2026-6866)
vulnerability in schneider-electric (CVE-2026-6866). Confidential information can be exposed externally.
|
| CVE-2025-38523 |
|
Vulnerability in c (CVE-2025-38523)
vulnerability in c (CVE-2025-38523). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-48927 KEV |
|
[KEV] Vulnerability in Telemessage tm-sgnl (CVE-2025-48927)
vulnerability in Telemessage tm-sgnl (CVE-2025-48927). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-27809 |
|
Vulnerability in arm (CVE-2025-27809)
vulnerability in arm (CVE-2025-27809). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-47343 |
|
Vulnerability in linux (CVE-2021-47343)
vulnerability in linux (CVE-2021-47343). Successful exploitation can lead to full system takeover.
|
| CVE-2023-27524 KEV |
|
[KEV] Vulnerability in Apache superset (CVE-2023-27524)
vulnerability in Apache superset (CVE-2023-27524). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-6448 KEV |
|
[KEV] Vulnerability in Unitronics vision-plc-and-hmi (CVE-2023-6448)
vulnerability in Unitronics vision-plc-and-hmi (CVE-2023-6448). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-2196 |
|
Vulnerability in linux (CVE-2022-2196)
vulnerability in linux (CVE-2022-2196). Data can be tampered with by attackers.
|
| CVE-2022-24706 KEV |
|
[KEV] Vulnerability in Apache couchdb (CVE-2022-24706)
vulnerability in Apache couchdb (CVE-2022-24706). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2020-13927 KEV |
|
[KEV] Vulnerability in Apache airflows-experimental-api (CVE-2020-13927)
vulnerability in Apache airflows-experimental-api (CVE-2020-13927). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2017-12736 |
|
Vulnerability in siemens (CVE-2017-12736)
vulnerability in siemens (CVE-2017-12736). Successful exploitation can lead to full system takeover.
|
| CVE-2017-12739 |
|
Vulnerability in siemens (CVE-2017-12739)
vulnerability in siemens (CVE-2017-12739). Successful exploitation can lead to full system takeover.
|
| CVE-2017-8021 |
|
Vulnerability in dell (CVE-2017-8021)
vulnerability in dell (CVE-2017-8021). Successful exploitation can lead to full system takeover.
|
| CVE-2017-6750 |
|
Vulnerability in cisco (CVE-2017-6750)
vulnerability in cisco (CVE-2017-6750). Data can be tampered with by attackers.
|
| CVE-2017-6684 |
|
Vulnerability in cisco (CVE-2017-6684)
vulnerability in cisco (CVE-2017-6684). Successful exploitation can lead to full system takeover.
|
| CVE-2017-6685 |
|
Vulnerability in cisco (CVE-2017-6685)
vulnerability in cisco (CVE-2017-6685). Successful exploitation can lead to full system takeover.
|
| CVE-2017-6692 |
|
Vulnerability in cisco (CVE-2017-6692)
vulnerability in cisco (CVE-2017-6692). Successful exploitation can lead to full system takeover.
|
| CVE-2017-6689 |
|
Vulnerability in cisco (CVE-2017-6689)
vulnerability in cisco (CVE-2017-6689). Successful exploitation can lead to full system takeover.
|
| CVE-2017-6688 |
|
Vulnerability in cisco (CVE-2017-6688)
vulnerability in cisco (CVE-2017-6688). Successful exploitation can lead to full system takeover.
|
| CVE-2017-6687 |
|
Vulnerability in cisco (CVE-2017-6687)
vulnerability in cisco (CVE-2017-6687). Successful exploitation can lead to full system takeover.
|
| CVE-2017-6686 |
|
Vulnerability in cisco (CVE-2017-6686)
vulnerability in cisco (CVE-2017-6686). Successful exploitation can lead to full system takeover.
|
| CVE-2017-8218 |
|
Vulnerability in tp-link (CVE-2017-8218)
vulnerability in tp-link (CVE-2017-8218). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7964 |
|
Vulnerability in zyxel (CVE-2017-7964)
vulnerability in zyxel (CVE-2017-7964). Successful exploitation can lead to full system takeover.
|
| CVE-2017-3834 |
|
Vulnerability in express (CVE-2017-3834)
vulnerability in express (CVE-2017-3834). Successful exploitation can lead to full system takeover.
|
| CVE-2017-5178 |
|
Vulnerability in schneider-electric (CVE-2017-5178)
vulnerability in schneider-electric (CVE-2017-5178). Successful exploitation can lead to full system takeover.
|
| CVE-2017-5155 |
|
Vulnerability in schneider-electric (CVE-2017-5155)
vulnerability in schneider-electric (CVE-2017-5155). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-5491 |
|
Vulnerability in wordpress (CVE-2017-5491)
vulnerability in wordpress (CVE-2017-5491). Risk of unauthorized operations or information disclosure.
|