Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-64299 Vulnerability in CVE-2026-64299 (CVE-2026-64299)
vulnerability in CVE-2026-64299 (CVE-2026-64299). Confidential information can be exposed externally.
CVE-2026-64298 Vulnerability in linux (CVE-2026-64298)
vulnerability in linux (CVE-2026-64298). Data can be tampered with by attackers.
CVE-2026-64296 Vulnerability in linux (CVE-2026-64296)
vulnerability in linux (CVE-2026-64296). Successful exploitation can lead to full system takeover.
CVE-2026-64293 Vulnerability in linux (CVE-2026-64293)
vulnerability in linux (CVE-2026-64293). Successful exploitation can lead to full system takeover.
CVE-2026-64287 Vulnerability in linux (CVE-2026-64287)
vulnerability in linux (CVE-2026-64287). Successful exploitation can lead to full system takeover.
CVE-2026-64286 Vulnerability in linux (CVE-2026-64286)
vulnerability in linux (CVE-2026-64286). Successful exploitation can lead to full system takeover.
CVE-2026-64284 Vulnerability in linux (CVE-2026-64284)
vulnerability in linux (CVE-2026-64284). Data can be tampered with by attackers.
CVE-2026-64283 Vulnerability in linux (CVE-2026-64283)
vulnerability in linux (CVE-2026-64283). Successful exploitation can lead to full system takeover.
CVE-2026-64281 Vulnerability in linux (CVE-2026-64281)
vulnerability in linux (CVE-2026-64281). Risk of unauthorized operations or information disclosure.
CVE-2026-64280 Vulnerability in linux (CVE-2026-64280)
vulnerability in linux (CVE-2026-64280). Successful exploitation can lead to full system takeover.
CVE-2026-64279 Vulnerability in linux (CVE-2026-64279)
vulnerability in linux (CVE-2026-64279). Successful exploitation can lead to full system takeover.
CVE-2026-64277 Out-of-Bounds Read in linux (CVE-2026-64277)
vulnerability in linux (CVE-2026-64277). Successful exploitation can lead to full system takeover.
CVE-2026-64276 Out-of-Bounds Write in linux (CVE-2026-64276)
out-of-bounds write in linux (CVE-2026-64276). Successful exploitation can lead to full system takeover.
CVE-2026-64274 Out-of-Bounds Write in linux (CVE-2026-64274)
out-of-bounds write in linux (CVE-2026-64274). Successful exploitation can lead to full system takeover.
CVE-2026-64273 Vulnerability in linux (CVE-2026-64273)
vulnerability in linux (CVE-2026-64273). Successful exploitation can lead to full system takeover.
CVE-2026-64272 Vulnerability in c (CVE-2026-64272)
vulnerability in c (CVE-2026-64272). Successful exploitation can lead to full system takeover.
CVE-2026-64271 Vulnerability in linux (CVE-2026-64271)
vulnerability in linux (CVE-2026-64271). Successful exploitation can lead to full system takeover.
CVE-2026-64270 Out-of-Bounds Write in linux (CVE-2026-64270)
out-of-bounds write in linux (CVE-2026-64270). Successful exploitation can lead to full system takeover.
CVE-2026-64266 Use-After-Free in linux (CVE-2026-64266)
vulnerability in linux (CVE-2026-64266). Successful exploitation can lead to full system takeover.
CVE-2026-64265 Use-After-Free in linux (CVE-2026-64265)
vulnerability in linux (CVE-2026-64265). Successful exploitation can lead to full system takeover.
CVE-2026-64261 Use-After-Free in linux (CVE-2026-64261)
vulnerability in linux (CVE-2026-64261). Successful exploitation can lead to full system takeover.
CVE-2026-64260 Vulnerability in linux (CVE-2026-64260)
vulnerability in linux (CVE-2026-64260). Successful exploitation can lead to full system takeover.
CVE-2026-64259 Use-After-Free in linux (CVE-2026-64259)
vulnerability in linux (CVE-2026-64259). Successful exploitation can lead to full system takeover.
CVE-2026-10818 Unrestricted File Upload in wordpress (CVE-2026-10818)
vulnerability in wordpress (CVE-2026-10818). Successful exploitation can lead to full system takeover.
CVE-2026-66374 Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the...
Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the...
CVE-2026-66373 Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,...
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,...
CVE-2026-61892 Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.
Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.
CVE-2026-60134 Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.
Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.
CVE-2026-73568 Vulnerability in libp2p (CVE-2026-73568)
vulnerability in libp2p (CVE-2026-73568). Risk of unauthorized operations or information disclosure. Exploitable via ``length``.
CVE-2026-73505 Code Injection in github.com/jandedobbeleer/oh-my-posh (CVE-2026-73505)
code injection in github.com/jandedobbeleer/oh-my-posh (CVE-2026-73505). Successful exploitation can lead to full system takeover. Exploitable via ``cmd``. Mitigation: upgrade to `29.35.1` or later.
CVE-2026-73509 Path Traversal in github.com/OpenListTeam/OpenList/v4 (CVE-2026-73509)
path traversal in github.com/OpenListTeam/OpenList/v4 (CVE-2026-73509). Data can be tampered with by attackers. Exploitable via ``new_name``. Mitigation: upgrade to `4.2.4` or later.
CVE-2026-73493 Vulnerability in org.http4s:http4s-blaze-server_2.13 (CVE-2026-73493)
vulnerability in org.http4s:http4s-blaze-server_2.13 (CVE-2026-73493). Risk of unauthorized operations or information disclosure. Exploitable via ``OutOfMemoryError``. Mitigation: upgrade to `1.0.0-M42` or later.
CVE-2026-73495 Vulnerability in org.http4s:blaze-http_2.13 (CVE-2026-73495)
vulnerability in org.http4s:blaze-http_2.13 (CVE-2026-73495). Confidential information can be exposed externally. Exploitable via ``Request.headers``. Mitigation: upgrade to `1.0.0-M42` or later.
CVE-2025-71408 Vulnerability in nltk (CVE-2025-71408)
vulnerability in nltk (CVE-2025-71408). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.9.3` or later.
CVE-2026-73561 Vulnerability in @anephenix/hub (CVE-2026-73561)
vulnerability in @anephenix/hub (CVE-2026-73561). Risk of unauthorized operations or information disclosure. Exploitable via ``setInterval``. Mitigation: upgrade to `0.2.16` or later.
CVE-2026-73410 Vulnerability in @budibase/server (CVE-2026-73410)
vulnerability in @budibase/server (CVE-2026-73410). Successful exploitation can lead to full system takeover. Exploitable via ``fetchWithBlacklist``.
CVE-2026-73406 Information Disclosure in @budibase/server (CVE-2026-73406)
vulnerability in @budibase/server (CVE-2026-73406). Confidential information can be exposed externally. Exploitable via `GET /api/global/users/tenant/`.
CVE-2026-73303 Vulnerability in @budibase/server (CVE-2026-73303)
vulnerability in @budibase/server (CVE-2026-73303). Confidential information can be exposed externally. Exploitable via `POST /api/v2/email`.
CVE-2026-73305 Privilege Escalation in @budibase/server (CVE-2026-73305)
vulnerability in @budibase/server (CVE-2026-73305). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/public/v1/roles/assign`.
CVE-2026-55502 Authorization Flaw in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55502)
vulnerability in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55502). Data can be tampered with by attackers. Exploitable via `POST /api/v4/admin/policy/oauth/signin`. Mitigation: upgrade to `4.17.0` or later.
CVE-2026-66041 FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write...
FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write...
CVE-2026-66040 FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability...
FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability...
CVE-2026-66039 FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability...
FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability...
CVE-2026-66036 FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability...
FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability...
CVE-2026-54342 Vulnerability in CVE-2026-54342 (CVE-2026-54342)
vulnerability in CVE-2026-54342 (CVE-2026-54342). Confidential information can be exposed externally.
CVE-2026-17107 Vulnerability in CVE-2026-17107 (CVE-2026-17107)
vulnerability in CVE-2026-17107 (CVE-2026-17107). Successful exploitation can lead to full system takeover.
CVE-2026-66035 Vulnerability in c (CVE-2026-66035)
vulnerability in c (CVE-2026-66035). Successful exploitation can lead to full system takeover.
CVE-2026-66034 Out-of-Bounds Read in libssh2 (CVE-2026-66034)
vulnerability in libssh2 (CVE-2026-66034). Successful exploitation can lead to full system takeover.
CVE-2026-66033 Out-of-Bounds Read in c (CVE-2026-66033)
vulnerability in c (CVE-2026-66033). Risk of unauthorized operations or information disclosure.
CVE-2026-66032 Vulnerability in c (CVE-2026-66032)
vulnerability in c (CVE-2026-66032). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →