Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Tag: cwe-798 Clear
ID Title
CVE-2026-73847 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73847)
vulnerability in csrf (CVE-2026-73847). Confidential information can be exposed externally.
CVE-2026-63702 Vulnerability in dell (CVE-2026-63702)
vulnerability in dell (CVE-2026-63702). Confidential information can be exposed externally.
CVE-2026-13460 Vulnerability in ibm (CVE-2026-13460)
vulnerability in ibm (CVE-2026-13460). Confidential information can be exposed externally.
CVE-2026-14866 Vulnerability in ibm (CVE-2026-14866)
vulnerability in ibm (CVE-2026-14866). Confidential information can be exposed externally.
CVE-2025-15628 Vulnerability in tp-link (CVE-2025-15628)
vulnerability in tp-link (CVE-2025-15628). Confidential information can be exposed externally.
CVE-2026-13463 Vulnerability in ibm (CVE-2026-13463)
vulnerability in ibm (CVE-2026-13463). Confidential information can be exposed externally.
CVE-2021-32087 Vulnerability in quest (CVE-2021-32087)
vulnerability in quest (CVE-2021-32087). Successful exploitation can lead to full system takeover.
CVE-2021-32085 Vulnerability in quest (CVE-2021-32085)
vulnerability in quest (CVE-2021-32085). Successful exploitation can lead to full system takeover.
CVE-2026-13446 Vulnerability in langflow (CVE-2026-13446)
vulnerability in langflow (CVE-2026-13446). Successful exploitation can lead to full system takeover.
CVE-2026-55579 Vulnerability in pheditor/pheditor (CVE-2026-55579)
vulnerability in pheditor/pheditor (CVE-2026-55579). Successful exploitation can lead to full system takeover. Exploitable via ``admin``. Mitigation: upgrade to `2.0.6` or later.
CVE-2026-13728 Vulnerability in watchguard (CVE-2026-13728)
vulnerability in watchguard (CVE-2026-13728). Confidential information can be exposed externally.
CVE-2026-56278 Vulnerability in express (CVE-2026-56278)
vulnerability in express (CVE-2026-56278). Confidential information can be exposed externally.
CVE-2026-46386 Unsafe Deserialization in rails (CVE-2026-46386)
vulnerability in rails (CVE-2026-46386). Successful exploitation can lead to full system takeover.
CVE-2026-12628 Vulnerability in ibm (CVE-2026-12628)
vulnerability in ibm (CVE-2026-12628). Confidential information can be exposed externally.
CVE-2026-9260 Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
CVE-2026-47281 Vulnerability in microsoft (CVE-2026-47281)
vulnerability in microsoft (CVE-2026-47281). Successful exploitation can lead to full system takeover.
CVE-2026-44825 Vulnerability in solr (CVE-2026-44825)
vulnerability in solr (CVE-2026-44825). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.0.0` or later.
CVE-2026-46376 Vulnerability in sangoma (CVE-2026-46376)
vulnerability in sangoma (CVE-2026-46376). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `16.0.45` or later.
CVE-2026-24444 Vulnerability in CVE-2026-24444 (CVE-2026-24444)
vulnerability in CVE-2026-24444 (CVE-2026-24444). Successful exploitation can lead to full system takeover.
CVE-2026-5065 Vulnerability in ibm (CVE-2026-5065)
vulnerability in ibm (CVE-2026-5065). Successful exploitation can lead to full system takeover.
CVE-2026-48245 Vulnerability in CVE-2026-48245 (CVE-2026-48245)
vulnerability in CVE-2026-48245 (CVE-2026-48245). Risk of unauthorized operations or information disclosure.
CVE-2026-48244 Vulnerability in CVE-2026-48244 (CVE-2026-48244)
vulnerability in CVE-2026-48244 (CVE-2026-48244). Risk of unauthorized operations or information disclosure.
CVE-2026-48242 Vulnerability in CVE-2026-48242 (CVE-2026-48242)
vulnerability in CVE-2026-48242 (CVE-2026-48242). Successful exploitation can lead to full system takeover.
CVE-2026-48243 Vulnerability in CVE-2026-48243 (CVE-2026-48243)
vulnerability in CVE-2026-48243 (CVE-2026-48243). Risk of unauthorized operations or information disclosure.
CVE-2026-48241 Vulnerability in CVE-2026-48241 (CVE-2026-48241)
vulnerability in CVE-2026-48241 (CVE-2026-48241). Successful exploitation can lead to full system takeover.
CVE-2026-33893 Vulnerability in siemens (CVE-2026-33893)
vulnerability in siemens (CVE-2026-33893). Confidential information can be exposed externally.
CVE-2026-40636 Vulnerability in dell (CVE-2026-40636)
vulnerability in dell (CVE-2026-40636). Successful exploitation can lead to full system takeover.
CVE-2026-43117 Vulnerability in linux (CVE-2026-43117)
vulnerability in linux (CVE-2026-43117). Confidential information can be exposed externally.
CVE-2026-32834 Vulnerability in wordpress (CVE-2026-32834)
vulnerability in wordpress (CVE-2026-32834). Confidential information can be exposed externally.
CVE-2026-56269 Vulnerability in flowise (CVE-2026-56269)
vulnerability in flowise (CVE-2026-56269). Confidential information can be exposed externally. Mitigation: upgrade to `3.1.0` or later.
CVE-2026-1233 The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing...
The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing hardcoded MySQL database credentials for the vendor's external telemetry server in the `Mementor_TT...
CVE-2016-20026 Vulnerability in apache (CVE-2016-20026)
vulnerability in apache (CVE-2016-20026). Successful exploitation can lead to full system takeover.
CVE-2026-22769 KEV [KEV] Vulnerability in Dell recoverpoint-for-virtual-machines-rp4vms (CVE-2026-22769)
vulnerability in Dell recoverpoint-for-virtual-machines-rp4vms (CVE-2026-22769). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-20111 Vulnerability in cisco (CVE-2026-20111)
vulnerability in cisco (CVE-2026-20111). Risk of unauthorized operations or information disclosure.
CVE-2025-14611 KEV [KEV] Vulnerability in Gladinet centrestack-and-triofox (CVE-2025-14611)
vulnerability in Gladinet centrestack-and-triofox (CVE-2025-14611). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-6693 KEV [KEV] Vulnerability in Fortinet fortios (CVE-2019-6693)
vulnerability in Fortinet fortios (CVE-2019-6693). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2021-44207 KEV [KEV] Vulnerability in Acclaim systems acclaim-systems (CVE-2021-44207)
vulnerability in Acclaim systems acclaim-systems (CVE-2021-44207). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-20412 Vulnerability in cisco (CVE-2024-20412)
vulnerability in cisco (CVE-2024-20412). Successful exploitation can lead to full system takeover.
CVE-2024-28987 KEV [KEV] Vulnerability in Solarwinds web-help-desk (CVE-2024-28987)
vulnerability in Solarwinds web-help-desk (CVE-2024-28987). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-3272 KEV [KEV] Vulnerability in D-link multiple-nas-devices (CVE-2024-3272)
vulnerability in D-link multiple-nas-devices (CVE-2024-3272). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-26138 KEV [KEV] Vulnerability in Atlassian confluence (CVE-2022-26138)
vulnerability in Atlassian confluence (CVE-2022-26138). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-20773 A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance...
A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance...
CVE-2022-25521 UNNO v03.11.00 was discovered to contain access control issue.
UNNO v03.11.00 was discovered to contain access control issue.
CVE-2021-42635 Vulnerability in printerlogic (CVE-2021-42635)
vulnerability in printerlogic (CVE-2021-42635). Successful exploitation can lead to full system takeover.
CVE-2020-8657 KEV [KEV] Vulnerability in eyesofnetwork (CVE-2020-8657)
vulnerability in eyesofnetwork (CVE-2020-8657). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2017-14374 Vulnerability in dell (CVE-2017-14374)
vulnerability in dell (CVE-2017-14374). Successful exploitation can lead to full system takeover.
CVE-2017-11026 Vulnerability in google (CVE-2017-11026)
vulnerability in google (CVE-2017-11026). Successful exploitation can lead to full system takeover.
CVE-2017-12350 Vulnerability in cisco (CVE-2017-12350)
vulnerability in cisco (CVE-2017-12350). Successful exploitation can lead to full system takeover.
CVE-2017-12317 Vulnerability in cisco (CVE-2017-12317)
vulnerability in cisco (CVE-2017-12317). Successful exploitation can lead to full system takeover.
CVE-2017-10616 Vulnerability in c (CVE-2017-10616)
vulnerability in c (CVE-2017-10616). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →