Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2023-54353 |
|
Vulnerability in c (CVE-2023-54353)
vulnerability in c (CVE-2023-54353). Successful exploitation can lead to full system takeover.
|
| CVE-2026-21768 |
|
Vulnerability in CVE-2026-21768 (CVE-2026-21768)
vulnerability in CVE-2026-21768 (CVE-2026-21768). Confidential information can be exposed externally.
|
| CVE-2026-52908 |
|
Vulnerability in linux (CVE-2026-52908)
vulnerability in linux (CVE-2026-52908). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71326 |
|
Vulnerability in CVE-2025-71326 (CVE-2025-71326)
vulnerability in CVE-2025-71326 (CVE-2025-71326). Successful exploitation can lead to full system takeover.
|
| CVE-2022-50971 |
|
Vulnerability in malwarebytes (CVE-2022-50971)
vulnerability in malwarebytes (CVE-2022-50971). Successful exploitation can lead to full system takeover.
|
| CVE-2020-37254 |
|
Vulnerability in privilege-escalation (CVE-2020-37254)
vulnerability in privilege-escalation (CVE-2020-37254). Successful exploitation can lead to full system takeover.
|
| CVE-2021-47985 |
|
Vulnerability in CVE-2021-47985 (CVE-2021-47985)
vulnerability in CVE-2021-47985 (CVE-2021-47985). Successful exploitation can lead to full system takeover.
|
| CVE-2020-37253 |
|
Vulnerability in CVE-2020-37253 (CVE-2020-37253)
vulnerability in CVE-2020-37253 (CVE-2020-37253). Successful exploitation can lead to full system takeover.
|
| CVE-2019-25747 |
|
Vulnerability in CVE-2019-25747 (CVE-2019-25747)
vulnerability in CVE-2019-25747 (CVE-2019-25747). Successful exploitation can lead to full system takeover.
|
| CVE-2020-37250 |
|
Vulnerability in CVE-2020-37250 (CVE-2020-37250)
vulnerability in CVE-2020-37250 (CVE-2020-37250). Successful exploitation can lead to full system takeover.
|
| CVE-2016-20094 |
|
Vulnerability in anydesk (CVE-2016-20094)
vulnerability in anydesk (CVE-2016-20094). Successful exploitation can lead to full system takeover.
|
| CVE-2016-20088 |
|
Vulnerability in CVE-2016-20088 (CVE-2016-20088)
vulnerability in CVE-2016-20088 (CVE-2016-20088). Successful exploitation can lead to full system takeover.
|
| CVE-2016-20090 |
|
Vulnerability in privilege-escalation (CVE-2016-20090)
vulnerability in privilege-escalation (CVE-2016-20090). Successful exploitation can lead to full system takeover.
|
| CVE-2020-37251 |
|
Vulnerability in CVE-2020-37251 (CVE-2020-37251)
vulnerability in CVE-2020-37251 (CVE-2020-37251). Successful exploitation can lead to full system takeover.
|
| CVE-2016-20087 |
|
Vulnerability in CVE-2016-20087 (CVE-2016-20087)
vulnerability in CVE-2016-20087 (CVE-2016-20087). Successful exploitation can lead to full system takeover.
|
| CVE-2016-20089 |
|
Vulnerability in CVE-2016-20089 (CVE-2016-20089)
vulnerability in CVE-2016-20089 (CVE-2016-20089). Successful exploitation can lead to full system takeover.
|
| CVE-2016-20092 |
|
Vulnerability in privilege-escalation (CVE-2016-20092)
vulnerability in privilege-escalation (CVE-2016-20092). Successful exploitation can lead to full system takeover.
|
| CVE-2016-20091 |
|
Vulnerability in CVE-2016-20091 (CVE-2016-20091)
vulnerability in CVE-2016-20091 (CVE-2016-20091). Successful exploitation can lead to full system takeover.
|
| CVE-2020-37252 |
|
Vulnerability in CVE-2020-37252 (CVE-2020-37252)
vulnerability in CVE-2020-37252 (CVE-2020-37252). Successful exploitation can lead to full system takeover.
|
| CVE-2016-20093 |
|
Vulnerability in CVE-2016-20093 (CVE-2016-20093)
vulnerability in CVE-2016-20093 (CVE-2016-20093). Successful exploitation can lead to full system takeover.
|
| CVE-2016-20095 |
|
Vulnerability in CVE-2016-20095 (CVE-2016-20095)
vulnerability in CVE-2016-20095 (CVE-2016-20095). Successful exploitation can lead to full system takeover.
|
| CVE-2016-20086 |
|
Vulnerability in CVE-2016-20086 (CVE-2016-20086)
vulnerability in CVE-2016-20086 (CVE-2016-20086). Successful exploitation can lead to full system takeover.
|
| CVE-2016-20085 |
|
Vulnerability in CVE-2016-20085 (CVE-2016-20085)
vulnerability in CVE-2016-20085 (CVE-2016-20085). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49230 |
|
Vulnerability in apisix (CVE-2026-49230)
vulnerability in apisix (CVE-2026-49230). Confidential information can be exposed externally. Mitigation: upgrade to `3.17.0` or later.
|
| CVE-2026-49231 |
|
Vulnerability in apache (CVE-2026-49231)
vulnerability in apache (CVE-2026-49231). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48895 |
|
Open Redirect in apisix (CVE-2026-48895)
vulnerability in apisix (CVE-2026-48895). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.17.0` or later.
|
| CVE-2026-4026 |
|
Vulnerability in CVE-2026-4026 (CVE-2026-4026)
vulnerability in CVE-2026-4026 (CVE-2026-4026). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49871 |
|
Cross-Site Request Forgery (CSRF) in apisix (CVE-2026-49871)
vulnerability in apisix (CVE-2026-49871). Confidential information can be exposed externally. Mitigation: upgrade to `3.17.0` or later.
|
| CVE-2026-4027 |
|
Vulnerability in CVE-2026-4027 (CVE-2026-4027)
vulnerability in CVE-2026-4027 (CVE-2026-4027). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49872 |
|
Authentication Bypass in apisix (CVE-2026-49872)
authentication bypass in apisix (CVE-2026-49872). Confidential information can be exposed externally. Mitigation: upgrade to `3.17.0` or later.
|
| CVE-2026-39998 |
|
Vulnerability in apisix (CVE-2026-39998)
vulnerability in apisix (CVE-2026-39998). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.17.0` or later.
|
| CVE-2026-44046 |
|
Vulnerability in apisix (CVE-2026-44046)
vulnerability in apisix (CVE-2026-44046). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.17.0` or later.
|
| CVE-2026-44915 |
|
Open Redirect in apisix (CVE-2026-44915)
vulnerability in apisix (CVE-2026-44915). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.17.0` or later.
|
| CVE-2026-47339 |
|
Authorization Flaw in apisix (CVE-2026-47339)
vulnerability in apisix (CVE-2026-47339). Confidential information can be exposed externally. Mitigation: upgrade to `3.17.0` or later.
|
| CVE-2026-39999 |
|
Vulnerability in apisix (CVE-2026-39999)
vulnerability in apisix (CVE-2026-39999). Confidential information can be exposed externally. Mitigation: upgrade to `3.17.0` or later.
|
| CVE-2026-47341 |
|
Vulnerability in apache (CVE-2026-47341)
vulnerability in apache (CVE-2026-47341). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44087 |
|
Vulnerability in apisix (CVE-2026-44087)
vulnerability in apisix (CVE-2026-44087). Confidential information can be exposed externally. Mitigation: upgrade to `3.17.0` or later.
|
| CVE-2026-12104 |
|
OS Command Injection in CVE-2026-12104 (CVE-2026-12104)
OS command injection in CVE-2026-12104 (CVE-2026-12104). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-62821 |
|
Out-of-Bounds Read in microsoft (CVE-2025-62821)
vulnerability in microsoft (CVE-2025-62821). Confidential information can be exposed externally.
|
| MAL-2026-6216 |
|
Vulnerability in aikaf668897 (MAL-2026-6216)
vulnerability in aikaf668897 (MAL-2026-6216). Risk of unauthorized operations or information disclosure. Exploitable via ``powershell.exe``.
|
| MAL-2026-6215 |
|
Vulnerability in aikaf6688812 (MAL-2026-6215)
vulnerability in aikaf6688812 (MAL-2026-6215). Risk of unauthorized operations or information disclosure. Exploitable via ``postinstall``.
|
| MAL-2026-6217 |
|
Vulnerability in aikaf788812 (MAL-2026-6217)
vulnerability in aikaf788812 (MAL-2026-6217). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-6222 |
|
Vulnerability in create-mono-package (MAL-2026-6222)
vulnerability in create-mono-package (MAL-2026-6222). Risk of unauthorized operations or information disclosure. Exploitable via ``npm_lifecycle``.
|
| CVE-2026-49358 |
|
Vulnerability in pontedilana/php-weasyprint (CVE-2026-49358)
vulnerability in pontedilana/php-weasyprint (CVE-2026-49358). Risk of unauthorized operations or information disclosure. Exploitable via ``realpath``. Mitigation: upgrade to `2.6.0` or later.
|
| ECHO-9a07-626d-d8ae |
|
ECHO-9a07-626d-d8ae |
| ECHO-a065-4d1e-ce4b |
|
ECHO-a065-4d1e-ce4b |
| GHSA-vcv2-r9jh-99m5 |
|
OS Command Injection in agentic-flow (GHSA-vcv2-r9jh-99m5)
OS command injection in agentic-flow (GHSA-vcv2-r9jh-99m5). Risk of unauthorized operations or information disclosure. Exploitable via ``agent``. Mitigation: upgrade to `2.0.14` or later.
|
| GHSA-8x7w-vjr2-7q4m |
|
Vulnerability in @apexcraft/nano-key (GHSA-8x7w-vjr2-7q4m)
vulnerability in @apexcraft/nano-key (GHSA-8x7w-vjr2-7q4m). Risk of unauthorized operations or information disclosure. Exploitable via ``require``.
|
| GHSA-jv2h-4p9v-wf5w |
|
Vulnerability in ouroboros-ai (GHSA-jv2h-4p9v-wf5w)
vulnerability in ouroboros-ai (GHSA-jv2h-4p9v-wf5w). Risk of unauthorized operations or information disclosure. Exploitable via ``_UNTRUSTED_ENV_DENYLIST``. Mitigation: upgrade to `0.42.1` or later.
|
| GHSA-vmhf-c436-hxj4 |
|
Vulnerability in jupyterlab (GHSA-vmhf-c436-hxj4)
vulnerability in jupyterlab (GHSA-vmhf-c436-hxj4). Risk of unauthorized operations or information disclosure. Exploitable via ``homepage_url``. Mitigation: upgrade to `4.5.9` or later.
|