Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-10885 Use-After-Free in google (CVE-2026-10885)
vulnerability in google (CVE-2026-10885). Successful exploitation can lead to full system takeover.
CVE-2026-10884 Use-After-Free in google (CVE-2026-10884)
vulnerability in google (CVE-2026-10884). Successful exploitation can lead to full system takeover.
CVE-2026-10883 Out-of-Bounds Write in google (CVE-2026-10883)
out-of-bounds write in google (CVE-2026-10883). Successful exploitation can lead to full system takeover.
CVE-2026-10882 Use-After-Free in google (CVE-2026-10882)
vulnerability in google (CVE-2026-10882). Successful exploitation can lead to full system takeover.
CVE-2026-10875 Vulnerability in sqli (CVE-2026-10875)
vulnerability in sqli (CVE-2026-10875). Risk of unauthorized operations or information disclosure.
CVE-2026-10874 Vulnerability in sqli (CVE-2026-10874)
vulnerability in sqli (CVE-2026-10874). Risk of unauthorized operations or information disclosure.
CVE-2026-10873 Command Injection in CVE-2026-10873 (CVE-2026-10873)
command injection in CVE-2026-10873 (CVE-2026-10873). Successful exploitation can lead to full system takeover.
CVE-2026-10872 Command Injection in CVE-2026-10872 (CVE-2026-10872)
command injection in CVE-2026-10872 (CVE-2026-10872). Successful exploitation can lead to full system takeover.
CVE-2025-8873 Vulnerability in CVE-2025-8873 (CVE-2025-8873)
vulnerability in CVE-2025-8873 (CVE-2025-8873). Risk of unauthorized operations or information disclosure.
CVE-2024-27892 Vulnerability in CVE-2024-27892 (CVE-2024-27892)
vulnerability in CVE-2024-27892 (CVE-2024-27892). Data can be tampered with by attackers.
CVE-2024-27891 Vulnerability in CVE-2024-27891 (CVE-2024-27891)
vulnerability in CVE-2024-27891 (CVE-2024-27891). Risk of unauthorized operations or information disclosure.
CVE-2024-27890 Vulnerability in CVE-2024-27890 (CVE-2024-27890)
vulnerability in CVE-2024-27890 (CVE-2024-27890). Data can be tampered with by attackers.
CVE-2023-5502 Authentication Bypass in CVE-2023-5502 (CVE-2023-5502)
authentication bypass in CVE-2023-5502 (CVE-2023-5502). Data can be tampered with by attackers.
USN-8387-1 Vulnerability in inetutils (USN-8387-1)
vulnerability in inetutils (USN-8387-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:1.9.2-1ubuntu0.1~esm4` or later.
CVE-2026-10881 Out-of-Bounds Read in Google chrome (CVE-2026-10881)
vulnerability in Google chrome (CVE-2026-10881). Successful exploitation can lead to full system takeover.
MINI-wh3w-ff76-hp6p MINI-wh3w-ff76-hp6p
MINI-v9w3-xr9r-2vxv MINI-v9w3-xr9r-2vxv
MINI-4pcp-qh2w-p26j MINI-4pcp-qh2w-p26j
MINI-6m9v-6f2g-grw4 MINI-6m9v-6f2g-grw4
MINI-gmp4-qfc8-4mf3 MINI-gmp4-qfc8-4mf3
DEBIAN-CVE-2026-49837 DEBIAN-CVE-2026-49837
GHSA-6fwm-7v73-876j Vulnerability in hbsig (GHSA-6fwm-7v73-876j)
vulnerability in hbsig (GHSA-6fwm-7v73-876j). Risk of unauthorized operations or information disclosure.
MAL-2026-5194 Vulnerability in yaml-javascript (MAL-2026-5194)
vulnerability in yaml-javascript (MAL-2026-5194). Risk of unauthorized operations or information disclosure.
MAL-2026-5193 Vulnerability in javascript-yaml (MAL-2026-5193)
vulnerability in javascript-yaml (MAL-2026-5193). Risk of unauthorized operations or information disclosure.
MAL-2026-5190 Vulnerability in hbsig (MAL-2026-5190)
vulnerability in hbsig (MAL-2026-5190). Risk of unauthorized operations or information disclosure.
MAL-2026-5189 Vulnerability in arjson (MAL-2026-5189)
vulnerability in arjson (MAL-2026-5189). Risk of unauthorized operations or information disclosure. Exploitable via ``LIBBPF_0.0``.
MAL-2026-5192 Vulnerability in weavedb-contracts (MAL-2026-5192)
vulnerability in weavedb-contracts (MAL-2026-5192). Risk of unauthorized operations or information disclosure.
MAL-2026-5191 Vulnerability in wdb-core (MAL-2026-5191)
vulnerability in wdb-core (MAL-2026-5191). Risk of unauthorized operations or information disclosure.
CVE-2026-42547 Authorization Flaw in CVE-2026-42547 (CVE-2026-42547)
vulnerability in CVE-2026-42547 (CVE-2026-42547). Risk of unauthorized operations or information disclosure.
CVE-2026-42543 Vulnerability in CVE-2026-42543 (CVE-2026-42543)
vulnerability in CVE-2026-42543 (CVE-2026-42543). Risk of unauthorized operations or information disclosure. Exploitable via ``GET``.
CVE-2026-42540 Vulnerability in CVE-2026-42540 (CVE-2026-42540)
vulnerability in CVE-2026-42540 (CVE-2026-42540). Risk of unauthorized operations or information disclosure.
CVE-2026-42539 Vulnerability in CVE-2026-42539 (CVE-2026-42539)
vulnerability in CVE-2026-42539 (CVE-2026-42539). Confidential information can be exposed externally.
CVE-2026-11322 Vulnerability in path-traversal (CVE-2026-11322)
vulnerability in path-traversal (CVE-2026-11322). Confidential information can be exposed externally.
CVE-2026-10871 Command Injection in CVE-2026-10871 (CVE-2026-10871)
command injection in CVE-2026-10871 (CVE-2026-10871). Successful exploitation can lead to full system takeover.
CVE-2024-6858 Vulnerability in CVE-2024-6858 (CVE-2024-6858)
vulnerability in CVE-2024-6858 (CVE-2024-6858). Data can be tampered with by attackers.
USN-8393-1 Vulnerability in linux-azure-fips (USN-8393-1)
vulnerability in linux-azure-fips (USN-8393-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-1059.65+fips1` or later.
USN-8361-2 Vulnerability in linux-fips (USN-8361-2)
vulnerability in linux-fips (USN-8361-2). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.0-1125.132` or later.
CVE-2026-10870 Command Injection in CVE-2026-10870 (CVE-2026-10870)
command injection in CVE-2026-10870 (CVE-2026-10870). Successful exploitation can lead to full system takeover.
USN-8392-1 Vulnerability in linux-aws-5.4 (USN-8392-1)
vulnerability in linux-aws-5.4 (USN-8392-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.4.0-1160.170~18.04.1` or later.
USN-8391-1 Vulnerability in linux-raspi-5.4 (USN-8391-1)
vulnerability in linux-raspi-5.4 (USN-8391-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.4.0-1143.156~18.04.1` or later.
CVE-2026-5066 Out-of-Bounds Write in c (CVE-2026-5066)
out-of-bounds write in c (CVE-2026-5066). Risk of unauthorized operations or information disclosure.
CVE-2026-42538 Unrestricted File Upload in CVE-2026-42538 (CVE-2026-42538)
vulnerability in CVE-2026-42538 (CVE-2026-42538). Confidential information can be exposed externally.
CVE-2026-42329 Vulnerability in CVE-2026-42329 (CVE-2026-42329)
vulnerability in CVE-2026-42329 (CVE-2026-42329). Risk of unauthorized operations or information disclosure.
ECHO-d2db-9152-3e07 ECHO-d2db-9152-3e07
USN-8390-1 Vulnerability in linux-azure (USN-8390-1)
vulnerability in linux-azure (USN-8390-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.15.0-1202.217~14.04.1` or later.
USN-8389-1 Vulnerability in linux-azure-5.4 (USN-8389-1)
vulnerability in linux-azure-5.4 (USN-8389-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.4.0-1164.170~18.04.1` or later.
ROOT-APP-NPM-CVE-2026-1528 Vulnerability in @rootio/undici (ROOT-APP-NPM-CVE-2026-1528)
vulnerability in @rootio/undici (ROOT-APP-NPM-CVE-2026-1528). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.21.3-root.io.1, 6.21.3-root.io.2, 6.21.3-root.io.3, 6.21.3-root.io.4, 6.21.3-root.io.5, 7.5.0-root.io.1, 6.21.2-root.io.2, 7.5.0-root.io.2, 7.5.0-root.io.3, 6.21.2-root.io.3, 6.21.3-root.io.6, 6.21.2-root.io.4, 7.5.0-root.io.4, 6.21.2-root.io.5, 7.5.0-root.io.5, 6.21.3-root.io.7, 6.19.2-root.io.5, 6.19.2-root.io.6, 6.21.2-root.io.6, 6.19.2-root.io.7, 6.21.3-root.io.8, 7.5.0-root.io.6` or later.
ROOT-APP-NPM-CVE-2025-12758 Vulnerability in @rootio/validator (ROOT-APP-NPM-CVE-2025-12758)
vulnerability in @rootio/validator (ROOT-APP-NPM-CVE-2025-12758). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `13.12.0-root.io.1, 7.2.0-root.io.2, 7.2.0-root.io.3, 13.12.0-root.io.2, 13.12.0-root.io.3` or later.
ROOT-APP-NPM-CVE-2025-22150 Vulnerability in @rootio/undici (ROOT-APP-NPM-CVE-2025-22150)
vulnerability in @rootio/undici (ROOT-APP-NPM-CVE-2025-22150). Confidential information can be exposed externally. Mitigation: upgrade to `6.19.2-root.io.1, 6.19.2-root.io.2, 6.19.2-root.io.3, 6.19.2-root.io.4, 6.19.2-root.io.5, 6.19.2-root.io.6, 6.19.2-root.io.7` or later.
ROOT-APP-NPM-CVE-2025-64118 Vulnerability in @rootio/tar (ROOT-APP-NPM-CVE-2025-64118)
vulnerability in @rootio/tar (ROOT-APP-NPM-CVE-2025-64118). Confidential information can be exposed externally. Mitigation: upgrade to `7.5.1-root.io.1, 7.5.1-root.io.2, 7.5.1-root.io.3, 7.5.1-root.io.4, 7.5.1-root.io.5, 7.5.1-root.io.6, 7.5.1-root.io.7, 7.5.1-root.io.8, 7.5.1-root.io.9` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →