Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-20464 |
|
Out-of-Bounds Write in CVE-2026-20464 (CVE-2026-20464)
out-of-bounds write in CVE-2026-20464 (CVE-2026-20464). Confidential information can be exposed externally.
|
| CVE-2026-20469 |
|
Vulnerability in CVE-2026-20469 (CVE-2026-20469)
vulnerability in CVE-2026-20469 (CVE-2026-20469). Confidential information can be exposed externally.
|
| CVE-2026-20465 |
|
Vulnerability in CVE-2026-20465 (CVE-2026-20465)
vulnerability in CVE-2026-20465 (CVE-2026-20465). Confidential information can be exposed externally.
|
| CVE-2026-18582 |
|
Vulnerability in c (CVE-2026-18582)
vulnerability in c (CVE-2026-18582). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20466 |
|
Out-of-Bounds Write in CVE-2026-20466 (CVE-2026-20466)
out-of-bounds write in CVE-2026-20466 (CVE-2026-20466). Confidential information can be exposed externally.
|
| CVE-2024-38798 |
|
Vulnerability in jvn (CVE-2024-38798)
vulnerability in jvn (CVE-2024-38798). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8763 |
|
Vulnerability in CVE-2026-8763 (CVE-2026-8763)
vulnerability in CVE-2026-8763 (CVE-2026-8763). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65875 |
|
Vulnerability in jvn (CVE-2026-65875)
vulnerability in jvn (CVE-2026-65875). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59652 |
|
In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.
In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.
|
| CVE-2026-59651 |
|
Vulnerability in CVE-2026-59651 (CVE-2026-59651)
vulnerability in CVE-2026-59651 (CVE-2026-59651). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59650 |
|
Vulnerability in CVE-2026-59650 (CVE-2026-59650)
vulnerability in CVE-2026-59650 (CVE-2026-59650). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59649 |
|
Vulnerability in CVE-2026-59649 (CVE-2026-59649)
vulnerability in CVE-2026-59649 (CVE-2026-59649). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59648 |
|
Vulnerability in bouncycastle (CVE-2026-59648)
vulnerability in bouncycastle (CVE-2026-59648). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59647 |
|
Vulnerability in bouncycastle (CVE-2026-59647)
vulnerability in bouncycastle (CVE-2026-59647). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59646 |
|
Vulnerability in bouncycastle (CVE-2026-59646)
vulnerability in bouncycastle (CVE-2026-59646). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59645 |
|
Vulnerability in bouncycastle (CVE-2026-59645)
vulnerability in bouncycastle (CVE-2026-59645). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59644 |
|
Vulnerability in CVE-2026-59644 (CVE-2026-59644)
vulnerability in CVE-2026-59644 (CVE-2026-59644). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59643 |
|
Vulnerability in CVE-2026-59643 (CVE-2026-59643)
vulnerability in CVE-2026-59643 (CVE-2026-59643). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59642 |
|
Vulnerability in bouncycastle (CVE-2026-59642)
vulnerability in bouncycastle (CVE-2026-59642). Data can be tampered with by attackers.
|
| CVE-2026-59641 |
|
Vulnerability in bouncycastle (CVE-2026-59641)
vulnerability in bouncycastle (CVE-2026-59641). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59640 |
|
Vulnerability in bouncycastle (CVE-2026-59640)
vulnerability in bouncycastle (CVE-2026-59640). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59639 |
|
Vulnerability in bouncycastle (CVE-2026-59639)
vulnerability in bouncycastle (CVE-2026-59639). Data can be tampered with by attackers.
|
| CVE-2026-59638 |
|
Vulnerability in bouncycastle (CVE-2026-59638)
vulnerability in bouncycastle (CVE-2026-59638). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18581 |
|
Vulnerability in cpp (CVE-2026-18581)
vulnerability in cpp (CVE-2026-18581). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15055 |
|
Vulnerability in bouncycastle (CVE-2026-15055)
vulnerability in bouncycastle (CVE-2026-15055). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12185 |
|
Vulnerability in bouncycastle (CVE-2026-12185)
vulnerability in bouncycastle (CVE-2026-12185). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3245 |
|
Unsafe Deserialization in deserialization (CVE-2026-3245)
vulnerability in deserialization (CVE-2026-3245). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18577 KEV |
|
[KEV] Vulnerability in N-able n-central (CVE-2026-18577)
vulnerability in N-able n-central (CVE-2026-18577). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-10848 |
|
Out-of-Bounds Read in c (CVE-2026-10848)
vulnerability in c (CVE-2026-10848). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9856 |
|
Path Traversal in path-traversal (CVE-2026-9856)
path traversal in path-traversal (CVE-2026-9856). Data can be tampered with by attackers. Exploitable via ``PreTrainedTokenizerBase``.
|
| CVE-2026-65321 |
|
SQL Injection in sqli (CVE-2026-65321)
SQL injection in sqli (CVE-2026-65321). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10774 |
|
Vulnerability in c (CVE-2026-10774)
vulnerability in c (CVE-2026-10774). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68583 |
|
Cross-Site Scripting (XSS) in CVE-2026-68583 (CVE-2026-68583)
cross-site scripting in CVE-2026-68583 (CVE-2026-68583). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68582 |
|
Vulnerability in CVE-2026-68582 (CVE-2026-68582)
vulnerability in CVE-2026-68582 (CVE-2026-68582). Confidential information can be exposed externally. Exploitable via `GET /api/v1/projects/{project}/views/{view}/tasks`. Mitigation: upgrade to `2.4.0` or later.
|
| CVE-2026-68581 |
|
Authorization Flaw in CVE-2026-68581 (CVE-2026-68581)
vulnerability in CVE-2026-68581 (CVE-2026-68581). Confidential information can be exposed externally.
|
| CVE-2026-68580 |
|
Vulnerability in dos (CVE-2026-68580)
vulnerability in dos (CVE-2026-68580). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68579 |
|
Out-of-Bounds Write in c (CVE-2026-68579)
out-of-bounds write in c (CVE-2026-68579). Data can be tampered with by attackers.
|
| CVE-2026-68578 |
|
Vulnerability in CVE-2026-68578 (CVE-2026-68578)
vulnerability in CVE-2026-68578 (CVE-2026-68578). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67357 |
|
Information Disclosure in CVE-2026-67357 (CVE-2026-67357)
vulnerability in CVE-2026-67357 (CVE-2026-67357). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67356 |
|
Privilege Escalation in CVE-2026-67356 (CVE-2026-67356)
vulnerability in CVE-2026-67356 (CVE-2026-67356). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71401 |
|
Vulnerability in dos (CVE-2025-71401)
vulnerability in dos (CVE-2025-71401). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71400 |
|
Vulnerability in CVE-2025-71400 (CVE-2025-71400)
vulnerability in CVE-2025-71400 (CVE-2025-71400). Data can be tampered with by attackers.
|
| CVE-2025-71399 |
|
Vulnerability in CVE-2025-71399 (CVE-2025-71399)
vulnerability in CVE-2025-71399 (CVE-2025-71399). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12231 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12231)
cross-site scripting in wordpress (CVE-2026-12231). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16540 |
|
Authorization Flaw in wordpress (CVE-2026-16540)
vulnerability in wordpress (CVE-2026-16540). Confidential information can be exposed externally.
|
| CVE-2026-18570 |
|
Vulnerability in redhat (CVE-2026-18570)
vulnerability in redhat (CVE-2026-18570). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16292 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-16292)
vulnerability in wordpress (CVE-2026-16292). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18573 |
|
Vulnerability in redhat (CVE-2026-18573)
vulnerability in redhat (CVE-2026-18573). Data can be tampered with by attackers.
|
| CVE-2026-18572 |
|
Authorization Flaw in redhat (CVE-2026-18572)
vulnerability in redhat (CVE-2026-18572). Data can be tampered with by attackers.
|
| CVE-2026-18571 |
|
Vulnerability in redhat (CVE-2026-18571)
vulnerability in redhat (CVE-2026-18571). Successful exploitation can lead to full system takeover.
|