Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-53362 KEV |
|
[KEV] Out-of-Bounds Write in linux (CVE-2026-53362)
out-of-bounds write in linux (CVE-2026-53362). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-14622 |
|
Authentication Bypass in CVE-2026-14622 (CVE-2026-14622)
authentication bypass in CVE-2026-14622 (CVE-2026-14622). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71380 |
|
OS Command Injection in n8n-nodes-base (CVE-2025-71380)
OS command injection in n8n-nodes-base (CVE-2025-71380). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12252 |
|
Code Injection in nltk (CVE-2026-12252)
code injection in nltk (CVE-2026-12252). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.9.4` or later.
|
| CVE-2025-71373 |
|
Unsafe Deserialization in picklescan (CVE-2025-71373)
vulnerability in picklescan (CVE-2025-71373). Confidential information can be exposed externally. Exploitable via ``operator.methodcaller``. Mitigation: upgrade to `0.0.33` or later.
|
| CVE-2025-71375 |
|
Unsafe Deserialization in picklescan (CVE-2025-71375)
vulnerability in picklescan (CVE-2025-71375). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.34` or later.
|
| CVE-2025-71372 |
|
Unsafe Deserialization in picklescan (CVE-2025-71372)
vulnerability in picklescan (CVE-2025-71372). Confidential information can be exposed externally. Exploitable via ``numpy.f2py.crackfortran.getlincoef``. Mitigation: upgrade to `0.0.33` or later.
|
| CVE-2025-71369 |
|
Unsafe Deserialization in picklescan (CVE-2025-71369)
vulnerability in picklescan (CVE-2025-71369). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.28` or later.
|
| CVE-2025-71356 |
|
Vulnerability in picklescan (CVE-2025-71356)
vulnerability in picklescan (CVE-2025-71356). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.28` or later.
|
| CVE-2025-71366 |
|
Vulnerability in picklescan (CVE-2025-71366)
vulnerability in picklescan (CVE-2025-71366). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.28` or later.
|
| CVE-2025-71360 |
|
Unsafe Deserialization in picklescan (CVE-2025-71360)
vulnerability in picklescan (CVE-2025-71360). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.29` or later.
|
| CVE-2025-71359 |
|
Unsafe Deserialization in picklescan (CVE-2025-71359)
vulnerability in picklescan (CVE-2025-71359). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.29` or later.
|
| CVE-2025-71364 |
|
Unsafe Deserialization in picklescan (CVE-2025-71364)
vulnerability in picklescan (CVE-2025-71364). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.30` or later.
|
| CVE-2025-71362 |
|
Unsafe Deserialization in picklescan (CVE-2025-71362)
vulnerability in picklescan (CVE-2025-71362). Confidential information can be exposed externally. Exploitable via ``numpy.f2py.crackfortran``. Mitigation: upgrade to `0.0.33` or later.
|
| CVE-2025-71367 |
|
Unsafe Deserialization in picklescan (CVE-2025-71367)
vulnerability in picklescan (CVE-2025-71367). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.34` or later.
|
| CVE-2025-71353 |
|
Vulnerability in picklescan (CVE-2025-71353)
vulnerability in picklescan (CVE-2025-71353). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.28` or later.
|
| CVE-2025-71345 |
|
Unsafe Deserialization in picklescan (CVE-2025-71345)
vulnerability in picklescan (CVE-2025-71345). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.30` or later.
|
| CVE-2025-71343 |
|
Unsafe Deserialization in picklescan (CVE-2025-71343)
vulnerability in picklescan (CVE-2025-71343). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.30` or later.
|
| CVE-2025-71342 |
|
Unsafe Deserialization in picklescan (CVE-2025-71342)
vulnerability in picklescan (CVE-2025-71342). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.30` or later.
|
| CVE-2025-71347 |
|
Unsafe Deserialization in picklescan (CVE-2025-71347)
vulnerability in picklescan (CVE-2025-71347). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.33` or later.
|
| CVE-2026-54424 |
|
Vulnerability in CVE-2026-54424 (CVE-2026-54424)
vulnerability in CVE-2026-54424 (CVE-2026-54424). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58299 |
|
Vulnerability in microsoft (CVE-2026-58299)
vulnerability in microsoft (CVE-2026-58299). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58298 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-58298)
cross-site scripting in microsoft (CVE-2026-58298). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58294 |
|
Use-After-Free in microsoft (CVE-2026-58294)
vulnerability in microsoft (CVE-2026-58294). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58293 |
|
Vulnerability in microsoft (CVE-2026-58293)
vulnerability in microsoft (CVE-2026-58293). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58286 |
|
Vulnerability in microsoft (CVE-2026-58286)
vulnerability in microsoft (CVE-2026-58286). Data can be tampered with by attackers.
|
| CVE-2026-58297 |
|
Vulnerability in microsoft (CVE-2026-58297)
vulnerability in microsoft (CVE-2026-58297). Confidential information can be exposed externally.
|
| CVE-2026-58292 |
|
Vulnerability in microsoft (CVE-2026-58292)
vulnerability in microsoft (CVE-2026-58292). Data can be tampered with by attackers.
|
| CVE-2026-58295 |
|
Vulnerability in microsoft (CVE-2026-58295)
vulnerability in microsoft (CVE-2026-58295). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58296 |
|
Vulnerability in microsoft (CVE-2026-58296)
vulnerability in microsoft (CVE-2026-58296). Confidential information can be exposed externally.
|
| CVE-2026-58284 |
|
Vulnerability in microsoft (CVE-2026-58284)
vulnerability in microsoft (CVE-2026-58284). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58290 |
|
Vulnerability in microsoft (CVE-2026-58290)
vulnerability in microsoft (CVE-2026-58290). Data can be tampered with by attackers.
|
| CVE-2026-58285 |
|
Vulnerability in microsoft (CVE-2026-58285)
vulnerability in microsoft (CVE-2026-58285). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58287 |
|
Use-After-Free in microsoft (CVE-2026-58287)
vulnerability in microsoft (CVE-2026-58287). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58288 |
|
Use-After-Free in microsoft (CVE-2026-58288)
vulnerability in microsoft (CVE-2026-58288). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58283 |
|
Vulnerability in microsoft (CVE-2026-58283)
vulnerability in microsoft (CVE-2026-58283). Data can be tampered with by attackers.
|
| CVE-2026-58276 |
|
Use-After-Free in microsoft (CVE-2026-58276)
vulnerability in microsoft (CVE-2026-58276). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57993 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-57993)
SSRF in ssrf (CVE-2026-57993). Confidential information can be exposed externally.
|
| CVE-2026-58282 |
|
Vulnerability in microsoft (CVE-2026-58282)
vulnerability in microsoft (CVE-2026-58282). Data can be tampered with by attackers.
|
| CVE-2026-57991 |
|
Vulnerability in microsoft (CVE-2026-57991)
vulnerability in microsoft (CVE-2026-57991). Confidential information can be exposed externally.
|
| CVE-2026-57992 |
|
Use-After-Free in microsoft (CVE-2026-57992)
vulnerability in microsoft (CVE-2026-57992). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57988 |
|
Vulnerability in path-traversal (CVE-2026-57988)
vulnerability in path-traversal (CVE-2026-57988). Data can be tampered with by attackers.
|
| CVE-2026-57984 |
|
Use-After-Free in microsoft (CVE-2026-57984)
vulnerability in microsoft (CVE-2026-57984). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57975 |
|
Vulnerability in microsoft (CVE-2026-57975)
vulnerability in microsoft (CVE-2026-57975). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57986 |
|
Use-After-Free in microsoft (CVE-2026-57986)
vulnerability in microsoft (CVE-2026-57986). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57985 |
|
Vulnerability in microsoft (CVE-2026-57985)
vulnerability in microsoft (CVE-2026-57985). Data can be tampered with by attackers.
|
| CVE-2026-57977 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-57977)
cross-site scripting in microsoft (CVE-2026-57977). Data can be tampered with by attackers.
|
| CVE-2026-57981 |
|
Use-After-Free in microsoft (CVE-2026-57981)
vulnerability in microsoft (CVE-2026-57981). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57983 |
|
Vulnerability in microsoft (CVE-2026-57983)
vulnerability in microsoft (CVE-2026-57983). Confidential information can be exposed externally.
|
| CVE-2026-56645 |
|
Vulnerability in microsoft (CVE-2026-56645)
vulnerability in microsoft (CVE-2026-56645). Successful exploitation can lead to full system takeover.
|