Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
DEBIAN-CVE-2026-9120 Vulnerability in chromium (DEBIAN-CVE-2026-9120)
vulnerability in chromium (DEBIAN-CVE-2026-9120). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `148.0.7778.178-1~deb12u1` or later.
DEBIAN-CVE-2026-9118 Vulnerability in chromium (DEBIAN-CVE-2026-9118)
vulnerability in chromium (DEBIAN-CVE-2026-9118). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `148.0.7778.178-1~deb12u1` or later.
DEBIAN-CVE-2026-9117 Vulnerability in chromium (DEBIAN-CVE-2026-9117)
vulnerability in chromium (DEBIAN-CVE-2026-9117). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `148.0.7778.178-1~deb12u1` or later.
CVE-2026-9120 Use-After-Free in google (CVE-2026-9120)
vulnerability in google (CVE-2026-9120). Successful exploitation can lead to full system takeover.
CVE-2026-9119 Vulnerability in google (CVE-2026-9119)
vulnerability in google (CVE-2026-9119). Successful exploitation can lead to full system takeover.
CVE-2026-9118 Use-After-Free in google (CVE-2026-9118)
vulnerability in google (CVE-2026-9118). Successful exploitation can lead to full system takeover.
CVE-2026-9117 Vulnerability in google (CVE-2026-9117)
vulnerability in google (CVE-2026-9117). Successful exploitation can lead to full system takeover.
DEBIAN-CVE-2026-9114 Vulnerability in chromium (DEBIAN-CVE-2026-9114)
vulnerability in chromium (DEBIAN-CVE-2026-9114). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `148.0.7778.178-1~deb12u1` or later.
DEBIAN-CVE-2026-9115 Vulnerability in chromium (DEBIAN-CVE-2026-9115)
vulnerability in chromium (DEBIAN-CVE-2026-9115). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `148.0.7778.178-1~deb12u1` or later.
DEBIAN-CVE-2026-9116 Vulnerability in chromium (DEBIAN-CVE-2026-9116)
vulnerability in chromium (DEBIAN-CVE-2026-9116). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `148.0.7778.178-1~deb12u1` or later.
DEBIAN-CVE-2026-9113 Vulnerability in chromium (DEBIAN-CVE-2026-9113)
vulnerability in chromium (DEBIAN-CVE-2026-9113). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `148.0.7778.178-1~deb12u1` or later.
DEBIAN-CVE-2026-9112 Vulnerability in chromium (DEBIAN-CVE-2026-9112)
vulnerability in chromium (DEBIAN-CVE-2026-9112). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `148.0.7778.178-1~deb12u1` or later.
CVE-2026-9116 Vulnerability in google (CVE-2026-9116)
vulnerability in google (CVE-2026-9116). Risk of unauthorized operations or information disclosure.
CVE-2026-9115 Vulnerability in google (CVE-2026-9115)
vulnerability in google (CVE-2026-9115). Risk of unauthorized operations or information disclosure.
CVE-2026-9114 Use-After-Free in google (CVE-2026-9114)
vulnerability in google (CVE-2026-9114). Successful exploitation can lead to full system takeover.
CVE-2026-9113 Out-of-Bounds Read in google (CVE-2026-9113)
vulnerability in google (CVE-2026-9113). Risk of unauthorized operations or information disclosure.
CVE-2026-9112 Use-After-Free in google (CVE-2026-9112)
vulnerability in google (CVE-2026-9112). Successful exploitation can lead to full system takeover.
DEBIAN-CVE-2026-9111 Vulnerability in chromium (DEBIAN-CVE-2026-9111)
vulnerability in chromium (DEBIAN-CVE-2026-9111). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `148.0.7778.178-1~deb12u1` or later.
DEBIAN-CVE-2026-9110 Vulnerability in chromium (DEBIAN-CVE-2026-9110)
vulnerability in chromium (DEBIAN-CVE-2026-9110). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `148.0.7778.178-1~deb12u1` or later.
CVE-2026-9111 Use-After-Free in Google chrome (CVE-2026-9111)
vulnerability in Google chrome (CVE-2026-9111). Successful exploitation can lead to full system takeover.
CVE-2026-9110 Vulnerability in google (CVE-2026-9110)
vulnerability in google (CVE-2026-9110). Risk of unauthorized operations or information disclosure.
CVE-2026-9102 Path Traversal in path-traversal (CVE-2026-9102)
path traversal in path-traversal (CVE-2026-9102). Risk of unauthorized operations or information disclosure.
CVE-2026-9082 KEV [KEV] SQL Injection in drupal/core (CVE-2026-9082)
SQL injection in drupal/core (CVE-2026-9082). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `11.3.10` or later.
CVE-2026-45444 Unrestricted File Upload in CVE-2026-45444 (CVE-2026-45444)
vulnerability in CVE-2026-45444 (CVE-2026-45444). Successful exploitation can lead to full system takeover.
CVE-2026-39405 Path Traversal in CVE-2026-39405 (CVE-2026-39405)
path traversal in CVE-2026-39405 (CVE-2026-39405). Risk of unauthorized operations or information disclosure.
CVE-2026-39352 Path Traversal in path-traversal (CVE-2026-39352)
path traversal in path-traversal (CVE-2026-39352). Risk of unauthorized operations or information disclosure.
CVE-2026-39311 Cross-Site Scripting (XSS) in CVE-2026-39311 (CVE-2026-39311)
cross-site scripting in CVE-2026-39311 (CVE-2026-39311). Risk of unauthorized operations or information disclosure.
CVE-2026-39310 Vulnerability in csrf (CVE-2026-39310)
vulnerability in csrf (CVE-2026-39310). Data can be tampered with by attackers.
CVE-2026-35016 Cross-Site Scripting (XSS) in CVE-2026-35016 (CVE-2026-35016)
cross-site scripting in CVE-2026-35016 (CVE-2026-35016). Risk of unauthorized operations or information disclosure.
CVE-2026-35015 Cross-Site Scripting (XSS) in CVE-2026-35015 (CVE-2026-35015)
cross-site scripting in CVE-2026-35015 (CVE-2026-35015). Risk of unauthorized operations or information disclosure.
CVE-2026-35014 Cross-Site Scripting (XSS) in CVE-2026-35014 (CVE-2026-35014)
cross-site scripting in CVE-2026-35014 (CVE-2026-35014). Risk of unauthorized operations or information disclosure.
CVE-2026-35013 Cross-Site Scripting (XSS) in CVE-2026-35013 (CVE-2026-35013)
cross-site scripting in CVE-2026-35013 (CVE-2026-35013). Risk of unauthorized operations or information disclosure.
CVE-2026-35012 Cross-Site Scripting (XSS) in CVE-2026-35012 (CVE-2026-35012)
cross-site scripting in CVE-2026-35012 (CVE-2026-35012). Risk of unauthorized operations or information disclosure.
CVE-2026-35011 Cross-Site Scripting (XSS) in CVE-2026-35011 (CVE-2026-35011)
cross-site scripting in CVE-2026-35011 (CVE-2026-35011). Risk of unauthorized operations or information disclosure.
CVE-2026-35010 Cross-Site Scripting (XSS) in CVE-2026-35010 (CVE-2026-35010)
cross-site scripting in CVE-2026-35010 (CVE-2026-35010). Risk of unauthorized operations or information disclosure.
CVE-2026-35009 Cross-Site Scripting (XSS) in CVE-2026-35009 (CVE-2026-35009)
cross-site scripting in CVE-2026-35009 (CVE-2026-35009). Risk of unauthorized operations or information disclosure.
CVE-2026-35008 Cross-Site Scripting (XSS) in CVE-2026-35008 (CVE-2026-35008)
cross-site scripting in CVE-2026-35008 (CVE-2026-35008). Risk of unauthorized operations or information disclosure.
CVE-2026-35007 Cross-Site Scripting (XSS) in CVE-2026-35007 (CVE-2026-35007)
cross-site scripting in CVE-2026-35007 (CVE-2026-35007). Risk of unauthorized operations or information disclosure.
CVE-2026-33137 Vulnerability in org.xwiki.platform:xwiki-platform-rest-server (CVE-2026-33137)
vulnerability in org.xwiki.platform:xwiki-platform-rest-server (CVE-2026-33137). Risk of unauthorized operations or information disclosure. Exploitable via `POST /wikis/{wikiName}`. Mitigation: upgrade to `18.1.0-rc-1` or later.
CVE-2026-2813 Open Redirect in esri (CVE-2026-2813)
vulnerability in esri (CVE-2026-2813). Risk of unauthorized operations or information disclosure.
CVE-2026-2812 Authentication Bypass in esri (CVE-2026-2812)
authentication bypass in esri (CVE-2026-2812). Risk of unauthorized operations or information disclosure.
CVE-2026-26028 Cross-Site Scripting (XSS) in cryptpad (CVE-2026-26028)
cross-site scripting in cryptpad (CVE-2026-26028). Risk of unauthorized operations or information disclosure. Exploitable via ``jscolor.js``.
CVE-2026-24218 Vulnerability in dos (CVE-2026-24218)
vulnerability in dos (CVE-2026-24218). Successful exploitation can lead to full system takeover.
CVE-2026-24217 Vulnerability in path-traversal (CVE-2026-24217)
vulnerability in path-traversal (CVE-2026-24217). Successful exploitation can lead to full system takeover.
CVE-2026-24216 Unsafe Deserialization in dos (CVE-2026-24216)
vulnerability in dos (CVE-2026-24216). Successful exploitation can lead to full system takeover.
CVE-2026-24188 Out-of-Bounds Write in nvidia (CVE-2026-24188)
out-of-bounds write in nvidia (CVE-2026-24188). Data can be tampered with by attackers.
CVE-2026-23734 Vulnerability in org.xwiki.commons:xwiki-commons-classloader-api (CVE-2026-23734)
vulnerability in org.xwiki.commons:xwiki-commons-classloader-api (CVE-2026-23734). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `18.0.0-rc-1` or later.
MAL-2026-4403 Vulnerability in @link-assistant/hive-mind (MAL-2026-4403)
vulnerability in @link-assistant/hive-mind (MAL-2026-4403). Risk of unauthorized operations or information disclosure. Exploitable via ``fetch``.
CVE-2026-9133 Vulnerability in Amazon aws (CVE-2026-9133)
vulnerability in Amazon aws (CVE-2026-9133). Confidential information can be exposed externally. Exploitable via `PUT /api/aws/arn/validate`.
DEBIAN-CVE-2026-44231 DEBIAN-CVE-2026-44231

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →