Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-57996 |
|
Privilege Escalation in privilege-escalation (CVE-2026-57996)
vulnerability in privilege-escalation (CVE-2026-57996). Successful exploitation can lead to full system takeover. Exploitable via `POST /admin/api/user/add`.
|
| CVE-2026-56400 |
|
Vulnerability in openwebui (CVE-2026-56400)
vulnerability in openwebui (CVE-2026-56400). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58655 |
|
Code Injection in CVE-2026-58655 (CVE-2026-58655)
code injection in CVE-2026-58655 (CVE-2026-58655). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56339 |
|
Vulnerability in CVE-2026-56339 (CVE-2026-56339)
vulnerability in CVE-2026-56339 (CVE-2026-56339). Confidential information can be exposed externally.
|
| CVE-2026-56287 |
|
SQL Injection in apache (CVE-2026-56287)
SQL injection in apache (CVE-2026-56287). Confidential information can be exposed externally. Exploitable via `GET /api/v1/clients`.
|
| CVE-2026-35152 |
|
SQL Injection in apache (CVE-2026-35152)
SQL injection in apache (CVE-2026-35152). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57821 |
|
SQL Injection in apache (CVE-2026-57821)
SQL injection in apache (CVE-2026-57821). Confidential information can be exposed externally. Exploitable via `GET /api/v1/offices`.
|
| CVE-2026-40633 |
|
Vulnerability in dell (CVE-2026-40633)
vulnerability in dell (CVE-2026-40633). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15804 |
|
SQL Injection in sqli (CVE-2026-15804)
SQL injection in sqli (CVE-2026-15804). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14251 |
|
Vulnerability in dos (CVE-2026-14251)
vulnerability in dos (CVE-2026-14251). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15583 |
|
Vulnerability in ssrf (CVE-2026-15583)
vulnerability in ssrf (CVE-2026-15583). Confidential information can be exposed externally.
|
| CVE-2026-12281 |
|
Authentication Bypass in wordpress (CVE-2026-12281)
authentication bypass in wordpress (CVE-2026-12281). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42936 |
|
Vulnerability in jvn (CVE-2026-42936)
vulnerability in jvn (CVE-2026-42936). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12512 |
|
SQL Injection in wordpress (CVE-2026-12512)
SQL injection in wordpress (CVE-2026-12512). Confidential information can be exposed externally.
|
| CVE-2023-4346 KEV |
|
[KEV] Vulnerability in Knx association knx (CVE-2023-4346)
vulnerability in Knx association knx (CVE-2023-4346). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-15752 |
|
Vulnerability in CVE-2026-15752 (CVE-2026-15752)
vulnerability in CVE-2026-15752 (CVE-2026-15752). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-56363 |
|
Vulnerability in dos (CVE-2025-56363)
vulnerability in dos (CVE-2025-56363). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-56362 |
|
Vulnerability in dos (CVE-2025-56362)
vulnerability in dos (CVE-2025-56362). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-56364 |
|
Vulnerability in dos (CVE-2025-56364)
vulnerability in dos (CVE-2025-56364). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-56365 |
|
Vulnerability in csa-iot (CVE-2025-56365)
vulnerability in csa-iot (CVE-2025-56365). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59733 |
|
Path Traversal in github.com/rclone/rclone (CVE-2026-59733)
path traversal in github.com/rclone/rclone (CVE-2026-59733). Successful exploitation can lead to full system takeover. Exploitable via `GET /test/../victim/config`. Mitigation: upgrade to `1.74.4` or later.
|
| CVE-2026-54684 |
|
Path Traversal in CVE-2026-54684 (CVE-2026-54684)
path traversal in CVE-2026-54684 (CVE-2026-54684). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54572 |
|
Vulnerability in github.com/rclone/rclone (CVE-2026-54572)
vulnerability in github.com/rclone/rclone (CVE-2026-54572). Data can be tampered with by attackers. Exploitable via ``mkdirAll``. Mitigation: upgrade to `1.74.4` or later.
|
| CVE-2026-50130 |
|
Vulnerability in pi-hole (CVE-2026-50130)
vulnerability in pi-hole (CVE-2026-50130). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48352 |
|
Vulnerability in adobe (CVE-2026-48352)
vulnerability in adobe (CVE-2026-48352). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48337 |
|
Out-of-Bounds Write in adobe (CVE-2026-48337)
out-of-bounds write in adobe (CVE-2026-48337). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48351 |
|
Vulnerability in adobe (CVE-2026-48351)
vulnerability in adobe (CVE-2026-48351). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48336 |
|
Out-of-Bounds Write in adobe (CVE-2026-48336)
out-of-bounds write in adobe (CVE-2026-48336). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48335 |
|
Out-of-Bounds Write in adobe (CVE-2026-48335)
out-of-bounds write in adobe (CVE-2026-48335). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48290 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-48290)
SSRF in ssrf (CVE-2026-48290). Confidential information can be exposed externally.
|
| CVE-2026-48287 |
|
Vulnerability in adobe (CVE-2026-48287)
vulnerability in adobe (CVE-2026-48287). Confidential information can be exposed externally.
|
| CVE-2026-48275 |
|
Vulnerability in adobe (CVE-2026-48275)
vulnerability in adobe (CVE-2026-48275). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48295 |
|
Vulnerability in adobe (CVE-2026-48295)
vulnerability in adobe (CVE-2026-48295). Confidential information can be exposed externally.
|
| CVE-2025-56361 |
|
Vulnerability in dos (CVE-2025-56361)
vulnerability in dos (CVE-2025-56361). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47976 |
|
Out-of-Bounds Write in adobe (CVE-2026-47976)
out-of-bounds write in adobe (CVE-2026-47976). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15776 |
|
Vulnerability in google (CVE-2026-15776)
vulnerability in google (CVE-2026-15776). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24272 |
|
Vulnerability in nvidia (CVE-2026-24272)
vulnerability in nvidia (CVE-2026-24272). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15767 |
|
Vulnerability in google (CVE-2026-15767)
vulnerability in google (CVE-2026-15767). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47471 |
|
Vulnerability in dos (CVE-2026-47471)
vulnerability in dos (CVE-2026-47471). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24233 |
|
Unsafe Deserialization in deserialization (CVE-2026-24233)
vulnerability in deserialization (CVE-2026-24233). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24229 |
|
Vulnerability in dos (CVE-2026-24229)
vulnerability in dos (CVE-2026-24229). Confidential information can be exposed externally.
|
| CVE-2026-15769 |
|
Vulnerability in google (CVE-2026-15769)
vulnerability in google (CVE-2026-15769). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15772 |
|
Use-After-Free in google (CVE-2026-15772)
vulnerability in google (CVE-2026-15772). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15764 |
|
Use-After-Free in Google chrome (CVE-2026-15764)
vulnerability in Google chrome (CVE-2026-15764). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15765 |
|
Use-After-Free in google (CVE-2026-15765)
vulnerability in google (CVE-2026-15765). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48348 |
|
Authorization Flaw in adobe (CVE-2026-48348)
vulnerability in adobe (CVE-2026-48348). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48350 |
|
Path Traversal in path-traversal (CVE-2026-48350)
path traversal in path-traversal (CVE-2026-48350). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48349 |
|
Authorization Flaw in adobe (CVE-2026-48349)
vulnerability in adobe (CVE-2026-48349). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48347 |
|
OS Command Injection in c (CVE-2026-48347)
OS command injection in c (CVE-2026-48347). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48345 |
|
OS Command Injection in c (CVE-2026-48345)
OS command injection in c (CVE-2026-48345). Successful exploitation can lead to full system takeover.
|