Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-61246 |
|
Privilege Escalation in c (CVE-2026-61246)
vulnerability in c (CVE-2026-61246). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60455 |
|
Privilege Escalation in c (CVE-2026-60455)
vulnerability in c (CVE-2026-60455). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60439 |
|
Privilege Escalation in c (CVE-2026-60439)
vulnerability in c (CVE-2026-60439). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60373 |
|
Privilege Escalation in c (CVE-2026-60373)
vulnerability in c (CVE-2026-60373). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60371 |
|
Information Disclosure in c (CVE-2026-60371)
vulnerability in c (CVE-2026-60371). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60370 |
|
Vulnerability in c (CVE-2026-60370)
vulnerability in c (CVE-2026-60370). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60368 |
|
Vulnerability in c (CVE-2026-60368)
vulnerability in c (CVE-2026-60368). Successful exploitation can lead to full system takeover.
|
| CVE-2026-38766 |
|
Privilege Escalation in CVE-2026-38766 (CVE-2026-38766)
vulnerability in CVE-2026-38766 (CVE-2026-38766). Successful exploitation can lead to full system takeover.
|
| CVE-2026-38765 |
|
Privilege Escalation in CVE-2026-38765 (CVE-2026-38765)
vulnerability in CVE-2026-38765 (CVE-2026-38765). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64642 |
|
Vulnerability in next (CVE-2026-64642)
vulnerability in next (CVE-2026-64642). Confidential information can be exposed externally. Exploitable via ``config.i18n.locales``. Mitigation: upgrade to `16.2.11` or later.
|
| CVE-2026-64641 |
|
Vulnerability in next (CVE-2026-64641)
vulnerability in next (CVE-2026-64641). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.2.11` or later.
|
| CVE-2026-59942 |
|
Vulnerability in dompdf/dompdf (CVE-2026-59942)
vulnerability in dompdf/dompdf (CVE-2026-59942). Risk of unauthorized operations or information disclosure. Exploitable via ``exploit.py``. Mitigation: upgrade to `3.1.6` or later.
|
| CVE-2026-59941 |
|
Vulnerability in dompdf/dompdf (CVE-2026-59941)
vulnerability in dompdf/dompdf (CVE-2026-59941). Risk of unauthorized operations or information disclosure. Exploitable via `POST /render`. Mitigation: upgrade to `3.1.6` or later.
|
| CVE-2026-59901 |
|
Vulnerability in io.netty:netty-codec-compression (CVE-2026-59901)
vulnerability in io.netty:netty-codec-compression (CVE-2026-59901). Risk of unauthorized operations or information disclosure. Exploitable via ``Bzip2Decoder``. Mitigation: upgrade to `4.2.16.Final` or later.
|
| CVE-2026-59899 |
|
Vulnerability in io.netty:netty-codec-http (CVE-2026-59899)
vulnerability in io.netty:netty-codec-http (CVE-2026-59899). Risk of unauthorized operations or information disclosure. Exploitable via ``HttpContentEncoder``. Mitigation: upgrade to `4.1.136.Final` or later.
|
| CVE-2026-59898 |
|
Vulnerability in io.netty:netty-codec-http (CVE-2026-59898)
vulnerability in io.netty:netty-codec-http (CVE-2026-59898). Data can be tampered with by attackers. Mitigation: upgrade to `4.1.136.Final` or later.
|
| CVE-2026-56822 |
|
Vulnerability in io.netty:netty-handler-ssl-ocsp (CVE-2026-56822)
vulnerability in io.netty:netty-handler-ssl-ocsp (CVE-2026-56822). Confidential information can be exposed externally. Exploitable via ``SslHandshakeCompletionEvent``. Mitigation: upgrade to `4.1.136.Final` or later.
|
| CVE-2026-56821 |
|
Vulnerability in io.netty:netty-handler-ssl-ocsp (CVE-2026-56821)
vulnerability in io.netty:netty-handler-ssl-ocsp (CVE-2026-56821). Confidential information can be exposed externally. Exploitable via ``OcspServerCertificateValidator``. Mitigation: upgrade to `4.1.136.Final` or later.
|
| CVE-2026-56820 |
|
Vulnerability in io.netty:netty-handler-ssl-ocsp (CVE-2026-56820)
vulnerability in io.netty:netty-handler-ssl-ocsp (CVE-2026-56820). Confidential information can be exposed externally. Exploitable via ``GOOD``. Mitigation: upgrade to `4.1.136.Final` or later.
|
| CVE-2026-56816 |
|
Vulnerability in io.netty:netty-codec-http3 (CVE-2026-56816)
vulnerability in io.netty:netty-codec-http3 (CVE-2026-56816). Risk of unauthorized operations or information disclosure. Exploitable via ``payLoadLength``. Mitigation: upgrade to `4.2.16.Final` or later.
|
| CVE-2026-56745 |
|
Vulnerability in io.netty:netty-codec-http (CVE-2026-56745)
vulnerability in io.netty:netty-codec-http (CVE-2026-56745). Risk of unauthorized operations or information disclosure. Exploitable via ``SpdyHttpDecoder``. Mitigation: upgrade to `4.1.136.Final` or later.
|
| CVE-2026-63265 |
|
Vulnerability in csrf (CVE-2026-63265)
vulnerability in csrf (CVE-2026-63265). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64797 |
|
Vulnerability in CVE-2026-64797 (CVE-2026-64797)
vulnerability in CVE-2026-64797 (CVE-2026-64797). Data can be tampered with by attackers.
|
| CVE-2026-63685 |
|
Vulnerability in csrf (CVE-2026-63685)
vulnerability in csrf (CVE-2026-63685). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63684 |
|
Vulnerability in csrf (CVE-2026-63684)
vulnerability in csrf (CVE-2026-63684). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64792 |
|
Vulnerability in CVE-2026-64792 (CVE-2026-64792)
vulnerability in CVE-2026-64792 (CVE-2026-64792). Confidential information can be exposed externally.
|
| CVE-2026-64791 |
|
Vulnerability in csrf (CVE-2026-64791)
vulnerability in csrf (CVE-2026-64791). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63280 |
|
Vulnerability in csrf (CVE-2026-63280)
vulnerability in csrf (CVE-2026-63280). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63683 |
|
Vulnerability in CVE-2026-63683 (CVE-2026-63683)
vulnerability in CVE-2026-63683 (CVE-2026-63683). Data can be tampered with by attackers.
|
| CVE-2026-13089 |
|
Vulnerability in CVE-2026-13089 (CVE-2026-13089)
vulnerability in CVE-2026-13089 (CVE-2026-13089). Data can be tampered with by attackers.
|
| CVE-2025-60835 |
|
An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal.
An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal.
|
| CVE-2025-50327 |
|
Vulnerability in CVE-2025-50327 (CVE-2025-50327)
vulnerability in CVE-2025-50327 (CVE-2025-50327). Successful exploitation can lead to full system takeover.
|
| CVE-2025-50324 |
|
Vulnerability in CVE-2025-50324 (CVE-2025-50324)
vulnerability in CVE-2025-50324 (CVE-2025-50324). Successful exploitation can lead to full system takeover.
|
| CVE-2025-44089 |
|
Vulnerability in CVE-2025-44089 (CVE-2025-44089)
vulnerability in CVE-2025-44089 (CVE-2025-44089). Successful exploitation can lead to full system takeover.
|
| CVE-2025-44090 |
|
Vulnerability in CVE-2025-44090 (CVE-2025-44090)
vulnerability in CVE-2025-44090 (CVE-2025-44090). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64829 |
|
Vulnerability in CVE-2026-64829 (CVE-2026-64829)
vulnerability in CVE-2026-64829 (CVE-2026-64829). Confidential information can be exposed externally.
|
| CVE-2025-50330 |
|
Vulnerability in CVE-2025-50330 (CVE-2025-50330)
vulnerability in CVE-2025-50330 (CVE-2025-50330). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14899 |
|
Vulnerability in mozilla (CVE-2026-14899)
vulnerability in mozilla (CVE-2026-14899). Confidential information can be exposed externally.
|
| CVE-2026-13077 |
|
Out-of-Bounds Read in mongodb (CVE-2026-13077)
vulnerability in mongodb (CVE-2026-13077). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13078 |
|
Vulnerability in mongodb (CVE-2026-13078)
vulnerability in mongodb (CVE-2026-13078). Confidential information can be exposed externally.
|
| CVE-2026-14881 |
|
OS Command Injection in CVE-2026-14881 (CVE-2026-14881)
OS command injection in CVE-2026-14881 (CVE-2026-14881). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13072 |
|
Vulnerability in mongodb (CVE-2026-13072)
vulnerability in mongodb (CVE-2026-13072). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13059 |
|
Vulnerability in mongodb (CVE-2026-13059)
vulnerability in mongodb (CVE-2026-13059). Confidential information can be exposed externally.
|
| CVE-2026-22049 |
|
Vulnerability in netapp (CVE-2026-22049)
vulnerability in netapp (CVE-2026-22049). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55851 |
|
Vulnerability in io.netty:netty-codec-haproxy (CVE-2026-55851)
vulnerability in io.netty:netty-codec-haproxy (CVE-2026-55851). Risk of unauthorized operations or information disclosure. Exploitable via ``HAProxyMessageDecoder``. Mitigation: upgrade to `4.1.136.Final` or later.
|
| CVE-2026-55555 |
|
Vulnerability in dompdf/dompdf (CVE-2026-55555)
vulnerability in dompdf/dompdf (CVE-2026-55555). Confidential information can be exposed externally. Exploitable via ``CHROOT``. Mitigation: upgrade to `3.1.6` or later.
|
| CVE-2026-55554 |
|
Vulnerability in dompdf/dompdf (CVE-2026-55554)
vulnerability in dompdf/dompdf (CVE-2026-55554). Confidential information can be exposed externally. Exploitable via ``jpg``. Mitigation: upgrade to `3.1.6` or later.
|
| CVE-2026-64835 |
|
Out-of-Bounds Write in c (CVE-2026-64835)
out-of-bounds write in c (CVE-2026-64835). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64834 |
|
Vulnerability in c (CVE-2026-64834)
vulnerability in c (CVE-2026-64834). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64833 |
|
Out-of-Bounds Read in ffmpeg (CVE-2026-64833)
vulnerability in ffmpeg (CVE-2026-64833). Risk of unauthorized operations or information disclosure.
|