Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-64299 |
|
Vulnerability in CVE-2026-64299 (CVE-2026-64299)
vulnerability in CVE-2026-64299 (CVE-2026-64299). Confidential information can be exposed externally.
|
| CVE-2026-64298 |
|
Vulnerability in linux (CVE-2026-64298)
vulnerability in linux (CVE-2026-64298). Data can be tampered with by attackers.
|
| CVE-2026-64296 |
|
Vulnerability in linux (CVE-2026-64296)
vulnerability in linux (CVE-2026-64296). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64293 |
|
Vulnerability in linux (CVE-2026-64293)
vulnerability in linux (CVE-2026-64293). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64287 |
|
Vulnerability in linux (CVE-2026-64287)
vulnerability in linux (CVE-2026-64287). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64286 |
|
Vulnerability in linux (CVE-2026-64286)
vulnerability in linux (CVE-2026-64286). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64284 |
|
Vulnerability in linux (CVE-2026-64284)
vulnerability in linux (CVE-2026-64284). Data can be tampered with by attackers.
|
| CVE-2026-64283 |
|
Vulnerability in linux (CVE-2026-64283)
vulnerability in linux (CVE-2026-64283). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64281 |
|
Vulnerability in linux (CVE-2026-64281)
vulnerability in linux (CVE-2026-64281). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64280 |
|
Vulnerability in linux (CVE-2026-64280)
vulnerability in linux (CVE-2026-64280). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64279 |
|
Vulnerability in linux (CVE-2026-64279)
vulnerability in linux (CVE-2026-64279). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64277 |
|
Out-of-Bounds Read in linux (CVE-2026-64277)
vulnerability in linux (CVE-2026-64277). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64276 |
|
Out-of-Bounds Write in linux (CVE-2026-64276)
out-of-bounds write in linux (CVE-2026-64276). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64274 |
|
Out-of-Bounds Write in linux (CVE-2026-64274)
out-of-bounds write in linux (CVE-2026-64274). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64273 |
|
Vulnerability in linux (CVE-2026-64273)
vulnerability in linux (CVE-2026-64273). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64272 |
|
Vulnerability in c (CVE-2026-64272)
vulnerability in c (CVE-2026-64272). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64271 |
|
Vulnerability in linux (CVE-2026-64271)
vulnerability in linux (CVE-2026-64271). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64270 |
|
Out-of-Bounds Write in linux (CVE-2026-64270)
out-of-bounds write in linux (CVE-2026-64270). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64266 |
|
Use-After-Free in linux (CVE-2026-64266)
vulnerability in linux (CVE-2026-64266). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64265 |
|
Use-After-Free in linux (CVE-2026-64265)
vulnerability in linux (CVE-2026-64265). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64261 |
|
Use-After-Free in linux (CVE-2026-64261)
vulnerability in linux (CVE-2026-64261). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64260 |
|
Vulnerability in linux (CVE-2026-64260)
vulnerability in linux (CVE-2026-64260). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64259 |
|
Use-After-Free in linux (CVE-2026-64259)
vulnerability in linux (CVE-2026-64259). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10818 |
|
Unrestricted File Upload in wordpress (CVE-2026-10818)
vulnerability in wordpress (CVE-2026-10818). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66374 |
|
Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the...
Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the...
|
| CVE-2026-66373 |
|
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,...
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,...
|
| CVE-2026-61892 |
|
Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.
Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.
|
| CVE-2026-60134 |
|
Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.
Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.
|
| CVE-2026-73568 |
|
Vulnerability in libp2p (CVE-2026-73568)
vulnerability in libp2p (CVE-2026-73568). Risk of unauthorized operations or information disclosure. Exploitable via ``length``.
|
| CVE-2026-73505 |
|
Code Injection in github.com/jandedobbeleer/oh-my-posh (CVE-2026-73505)
code injection in github.com/jandedobbeleer/oh-my-posh (CVE-2026-73505). Successful exploitation can lead to full system takeover. Exploitable via ``cmd``. Mitigation: upgrade to `29.35.1` or later.
|
| CVE-2026-73509 |
|
Path Traversal in github.com/OpenListTeam/OpenList/v4 (CVE-2026-73509)
path traversal in github.com/OpenListTeam/OpenList/v4 (CVE-2026-73509). Data can be tampered with by attackers. Exploitable via ``new_name``. Mitigation: upgrade to `4.2.4` or later.
|
| CVE-2026-73493 |
|
Vulnerability in org.http4s:http4s-blaze-server_2.13 (CVE-2026-73493)
vulnerability in org.http4s:http4s-blaze-server_2.13 (CVE-2026-73493). Risk of unauthorized operations or information disclosure. Exploitable via ``OutOfMemoryError``. Mitigation: upgrade to `1.0.0-M42` or later.
|
| CVE-2026-73495 |
|
Vulnerability in org.http4s:blaze-http_2.13 (CVE-2026-73495)
vulnerability in org.http4s:blaze-http_2.13 (CVE-2026-73495). Confidential information can be exposed externally. Exploitable via ``Request.headers``. Mitigation: upgrade to `1.0.0-M42` or later.
|
| CVE-2025-71408 |
|
Vulnerability in nltk (CVE-2025-71408)
vulnerability in nltk (CVE-2025-71408). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.9.3` or later.
|
| CVE-2026-73561 |
|
Vulnerability in @anephenix/hub (CVE-2026-73561)
vulnerability in @anephenix/hub (CVE-2026-73561). Risk of unauthorized operations or information disclosure. Exploitable via ``setInterval``. Mitigation: upgrade to `0.2.16` or later.
|
| CVE-2026-73410 |
|
Vulnerability in @budibase/server (CVE-2026-73410)
vulnerability in @budibase/server (CVE-2026-73410). Successful exploitation can lead to full system takeover. Exploitable via ``fetchWithBlacklist``.
|
| CVE-2026-73406 |
|
Information Disclosure in @budibase/server (CVE-2026-73406)
vulnerability in @budibase/server (CVE-2026-73406). Confidential information can be exposed externally. Exploitable via `GET /api/global/users/tenant/`.
|
| CVE-2026-73303 |
|
Vulnerability in @budibase/server (CVE-2026-73303)
vulnerability in @budibase/server (CVE-2026-73303). Confidential information can be exposed externally. Exploitable via `POST /api/v2/email`.
|
| CVE-2026-73305 |
|
Privilege Escalation in @budibase/server (CVE-2026-73305)
vulnerability in @budibase/server (CVE-2026-73305). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/public/v1/roles/assign`.
|
| CVE-2026-55502 |
|
Authorization Flaw in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55502)
vulnerability in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55502). Data can be tampered with by attackers. Exploitable via `POST /api/v4/admin/policy/oauth/signin`. Mitigation: upgrade to `4.17.0` or later.
|
| CVE-2026-66041 |
|
FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write...
FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write...
|
| CVE-2026-66040 |
|
FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability...
FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability...
|
| CVE-2026-66039 |
|
FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability...
FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability...
|
| CVE-2026-66036 |
|
FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability...
FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability...
|
| CVE-2026-54342 |
|
Vulnerability in CVE-2026-54342 (CVE-2026-54342)
vulnerability in CVE-2026-54342 (CVE-2026-54342). Confidential information can be exposed externally.
|
| CVE-2026-17107 |
|
Vulnerability in CVE-2026-17107 (CVE-2026-17107)
vulnerability in CVE-2026-17107 (CVE-2026-17107). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66035 |
|
Vulnerability in c (CVE-2026-66035)
vulnerability in c (CVE-2026-66035). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66034 |
|
Out-of-Bounds Read in libssh2 (CVE-2026-66034)
vulnerability in libssh2 (CVE-2026-66034). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66033 |
|
Out-of-Bounds Read in c (CVE-2026-66033)
vulnerability in c (CVE-2026-66033). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66032 |
|
Vulnerability in c (CVE-2026-66032)
vulnerability in c (CVE-2026-66032). Successful exploitation can lead to full system takeover.
|