Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2023-54353 Vulnerability in c (CVE-2023-54353)
vulnerability in c (CVE-2023-54353). Successful exploitation can lead to full system takeover.
CVE-2026-21768 Vulnerability in CVE-2026-21768 (CVE-2026-21768)
vulnerability in CVE-2026-21768 (CVE-2026-21768). Confidential information can be exposed externally.
CVE-2026-52908 Vulnerability in linux (CVE-2026-52908)
vulnerability in linux (CVE-2026-52908). Successful exploitation can lead to full system takeover.
CVE-2025-71326 Vulnerability in CVE-2025-71326 (CVE-2025-71326)
vulnerability in CVE-2025-71326 (CVE-2025-71326). Successful exploitation can lead to full system takeover.
CVE-2022-50971 Vulnerability in malwarebytes (CVE-2022-50971)
vulnerability in malwarebytes (CVE-2022-50971). Successful exploitation can lead to full system takeover.
CVE-2020-37254 Vulnerability in privilege-escalation (CVE-2020-37254)
vulnerability in privilege-escalation (CVE-2020-37254). Successful exploitation can lead to full system takeover.
CVE-2021-47985 Vulnerability in CVE-2021-47985 (CVE-2021-47985)
vulnerability in CVE-2021-47985 (CVE-2021-47985). Successful exploitation can lead to full system takeover.
CVE-2020-37253 Vulnerability in CVE-2020-37253 (CVE-2020-37253)
vulnerability in CVE-2020-37253 (CVE-2020-37253). Successful exploitation can lead to full system takeover.
CVE-2019-25747 Vulnerability in CVE-2019-25747 (CVE-2019-25747)
vulnerability in CVE-2019-25747 (CVE-2019-25747). Successful exploitation can lead to full system takeover.
CVE-2020-37250 Vulnerability in CVE-2020-37250 (CVE-2020-37250)
vulnerability in CVE-2020-37250 (CVE-2020-37250). Successful exploitation can lead to full system takeover.
CVE-2016-20094 Vulnerability in anydesk (CVE-2016-20094)
vulnerability in anydesk (CVE-2016-20094). Successful exploitation can lead to full system takeover.
CVE-2016-20088 Vulnerability in CVE-2016-20088 (CVE-2016-20088)
vulnerability in CVE-2016-20088 (CVE-2016-20088). Successful exploitation can lead to full system takeover.
CVE-2016-20090 Vulnerability in privilege-escalation (CVE-2016-20090)
vulnerability in privilege-escalation (CVE-2016-20090). Successful exploitation can lead to full system takeover.
CVE-2020-37251 Vulnerability in CVE-2020-37251 (CVE-2020-37251)
vulnerability in CVE-2020-37251 (CVE-2020-37251). Successful exploitation can lead to full system takeover.
CVE-2016-20087 Vulnerability in CVE-2016-20087 (CVE-2016-20087)
vulnerability in CVE-2016-20087 (CVE-2016-20087). Successful exploitation can lead to full system takeover.
CVE-2016-20089 Vulnerability in CVE-2016-20089 (CVE-2016-20089)
vulnerability in CVE-2016-20089 (CVE-2016-20089). Successful exploitation can lead to full system takeover.
CVE-2016-20092 Vulnerability in privilege-escalation (CVE-2016-20092)
vulnerability in privilege-escalation (CVE-2016-20092). Successful exploitation can lead to full system takeover.
CVE-2016-20091 Vulnerability in CVE-2016-20091 (CVE-2016-20091)
vulnerability in CVE-2016-20091 (CVE-2016-20091). Successful exploitation can lead to full system takeover.
CVE-2020-37252 Vulnerability in CVE-2020-37252 (CVE-2020-37252)
vulnerability in CVE-2020-37252 (CVE-2020-37252). Successful exploitation can lead to full system takeover.
CVE-2016-20093 Vulnerability in CVE-2016-20093 (CVE-2016-20093)
vulnerability in CVE-2016-20093 (CVE-2016-20093). Successful exploitation can lead to full system takeover.
CVE-2016-20095 Vulnerability in CVE-2016-20095 (CVE-2016-20095)
vulnerability in CVE-2016-20095 (CVE-2016-20095). Successful exploitation can lead to full system takeover.
CVE-2016-20086 Vulnerability in CVE-2016-20086 (CVE-2016-20086)
vulnerability in CVE-2016-20086 (CVE-2016-20086). Successful exploitation can lead to full system takeover.
CVE-2016-20085 Vulnerability in CVE-2016-20085 (CVE-2016-20085)
vulnerability in CVE-2016-20085 (CVE-2016-20085). Successful exploitation can lead to full system takeover.
CVE-2026-49230 Vulnerability in apisix (CVE-2026-49230)
vulnerability in apisix (CVE-2026-49230). Confidential information can be exposed externally. Mitigation: upgrade to `3.17.0` or later.
CVE-2026-49231 Vulnerability in apache (CVE-2026-49231)
vulnerability in apache (CVE-2026-49231). Risk of unauthorized operations or information disclosure.
CVE-2026-48895 Open Redirect in apisix (CVE-2026-48895)
vulnerability in apisix (CVE-2026-48895). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.17.0` or later.
CVE-2026-4026 Vulnerability in CVE-2026-4026 (CVE-2026-4026)
vulnerability in CVE-2026-4026 (CVE-2026-4026). Risk of unauthorized operations or information disclosure.
CVE-2026-49871 Cross-Site Request Forgery (CSRF) in apisix (CVE-2026-49871)
vulnerability in apisix (CVE-2026-49871). Confidential information can be exposed externally. Mitigation: upgrade to `3.17.0` or later.
CVE-2026-4027 Vulnerability in CVE-2026-4027 (CVE-2026-4027)
vulnerability in CVE-2026-4027 (CVE-2026-4027). Risk of unauthorized operations or information disclosure.
CVE-2026-49872 Authentication Bypass in apisix (CVE-2026-49872)
authentication bypass in apisix (CVE-2026-49872). Confidential information can be exposed externally. Mitigation: upgrade to `3.17.0` or later.
CVE-2026-39998 Vulnerability in apisix (CVE-2026-39998)
vulnerability in apisix (CVE-2026-39998). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.17.0` or later.
CVE-2026-44046 Vulnerability in apisix (CVE-2026-44046)
vulnerability in apisix (CVE-2026-44046). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.17.0` or later.
CVE-2026-44915 Open Redirect in apisix (CVE-2026-44915)
vulnerability in apisix (CVE-2026-44915). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.17.0` or later.
CVE-2026-47339 Authorization Flaw in apisix (CVE-2026-47339)
vulnerability in apisix (CVE-2026-47339). Confidential information can be exposed externally. Mitigation: upgrade to `3.17.0` or later.
CVE-2026-39999 Vulnerability in apisix (CVE-2026-39999)
vulnerability in apisix (CVE-2026-39999). Confidential information can be exposed externally. Mitigation: upgrade to `3.17.0` or later.
CVE-2026-47341 Vulnerability in apache (CVE-2026-47341)
vulnerability in apache (CVE-2026-47341). Risk of unauthorized operations or information disclosure.
CVE-2026-44087 Vulnerability in apisix (CVE-2026-44087)
vulnerability in apisix (CVE-2026-44087). Confidential information can be exposed externally. Mitigation: upgrade to `3.17.0` or later.
CVE-2026-12104 OS Command Injection in CVE-2026-12104 (CVE-2026-12104)
OS command injection in CVE-2026-12104 (CVE-2026-12104). Risk of unauthorized operations or information disclosure.
CVE-2025-62821 Out-of-Bounds Read in microsoft (CVE-2025-62821)
vulnerability in microsoft (CVE-2025-62821). Confidential information can be exposed externally.
MAL-2026-6216 Vulnerability in aikaf668897 (MAL-2026-6216)
vulnerability in aikaf668897 (MAL-2026-6216). Risk of unauthorized operations or information disclosure. Exploitable via ``powershell.exe``.
MAL-2026-6215 Vulnerability in aikaf6688812 (MAL-2026-6215)
vulnerability in aikaf6688812 (MAL-2026-6215). Risk of unauthorized operations or information disclosure. Exploitable via ``postinstall``.
MAL-2026-6217 Vulnerability in aikaf788812 (MAL-2026-6217)
vulnerability in aikaf788812 (MAL-2026-6217). Risk of unauthorized operations or information disclosure.
MAL-2026-6222 Vulnerability in create-mono-package (MAL-2026-6222)
vulnerability in create-mono-package (MAL-2026-6222). Risk of unauthorized operations or information disclosure. Exploitable via ``npm_lifecycle``.
CVE-2026-49358 Vulnerability in pontedilana/php-weasyprint (CVE-2026-49358)
vulnerability in pontedilana/php-weasyprint (CVE-2026-49358). Risk of unauthorized operations or information disclosure. Exploitable via ``realpath``. Mitigation: upgrade to `2.6.0` or later.
ECHO-9a07-626d-d8ae ECHO-9a07-626d-d8ae
ECHO-a065-4d1e-ce4b ECHO-a065-4d1e-ce4b
GHSA-vcv2-r9jh-99m5 OS Command Injection in agentic-flow (GHSA-vcv2-r9jh-99m5)
OS command injection in agentic-flow (GHSA-vcv2-r9jh-99m5). Risk of unauthorized operations or information disclosure. Exploitable via ``agent``. Mitigation: upgrade to `2.0.14` or later.
GHSA-8x7w-vjr2-7q4m Vulnerability in @apexcraft/nano-key (GHSA-8x7w-vjr2-7q4m)
vulnerability in @apexcraft/nano-key (GHSA-8x7w-vjr2-7q4m). Risk of unauthorized operations or information disclosure. Exploitable via ``require``.
GHSA-jv2h-4p9v-wf5w Vulnerability in ouroboros-ai (GHSA-jv2h-4p9v-wf5w)
vulnerability in ouroboros-ai (GHSA-jv2h-4p9v-wf5w). Risk of unauthorized operations or information disclosure. Exploitable via ``_UNTRUSTED_ENV_DENYLIST``. Mitigation: upgrade to `0.42.1` or later.
GHSA-vmhf-c436-hxj4 Vulnerability in jupyterlab (GHSA-vmhf-c436-hxj4)
vulnerability in jupyterlab (GHSA-vmhf-c436-hxj4). Risk of unauthorized operations or information disclosure. Exploitable via ``homepage_url``. Mitigation: upgrade to `4.5.9` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →