Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-29091 |
|
Vulnerability in locutus (CVE-2026-29091)
vulnerability in locutus (CVE-2026-29091). Successful exploitation can lead to full system takeover.
|
| CVE-2026-29783 |
|
OS Command Injection in github (CVE-2026-29783)
OS command injection in github (CVE-2026-29783). Successful exploitation can lead to full system takeover.
|
| CVE-2025-70363 |
|
Vulnerability in ibexa (CVE-2025-70363)
vulnerability in ibexa (CVE-2025-70363). Confidential information can be exposed externally.
|
| CVE-2026-26017 |
|
Vulnerability in corednsio (CVE-2026-26017)
vulnerability in corednsio (CVE-2026-26017). Confidential information can be exposed externally.
|
| CVE-2026-26018 |
|
Vulnerability in dos (CVE-2026-26018)
vulnerability in dos (CVE-2026-26018). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2753 |
|
Vulnerability in path-traversal (CVE-2026-2753)
vulnerability in path-traversal (CVE-2026-2753). Confidential information can be exposed externally.
|
| CVE-2026-2754 |
|
Vulnerability in navtor (CVE-2026-2754)
vulnerability in navtor (CVE-2026-2754). Confidential information can be exposed externally.
|
| CVE-2026-23925 |
|
Authorization Flaw in zabbix (CVE-2026-23925)
vulnerability in zabbix (CVE-2026-23925). Confidential information can be exposed externally.
|
| CVE-2026-29062 |
|
Vulnerability in dos (CVE-2026-29062)
vulnerability in dos (CVE-2026-29062). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-29074 |
|
Vulnerability in svgo (CVE-2026-29074)
vulnerability in svgo (CVE-2026-29074). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3009 |
|
Authorization Flaw in redhat (CVE-2026-3009)
vulnerability in redhat (CVE-2026-3009). Confidential information can be exposed externally.
|
| CVE-2026-3047 |
|
Vulnerability in redhat (CVE-2026-3047)
vulnerability in redhat (CVE-2026-3047). Successful exploitation can lead to full system takeover.
|
| CVE-2026-29054 |
|
Vulnerability in traefik (CVE-2026-29054)
vulnerability in traefik (CVE-2026-29054). Data can be tampered with by attackers.
|
| CVE-2026-26999 |
|
Vulnerability in traefik (CVE-2026-26999)
vulnerability in traefik (CVE-2026-26999). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-45691 |
|
Path Traversal in ragas (CVE-2025-45691)
path traversal in ragas (CVE-2025-45691). Confidential information can be exposed externally. Mitigation: upgrade to `0.3.0-rc1` or later.
|
| CVE-2026-30796 |
|
Vulnerability in rustdesk (CVE-2026-30796)
vulnerability in rustdesk (CVE-2026-30796). Confidential information can be exposed externally.
|
| CVE-2026-30798 |
|
Vulnerability in rustdesk (CVE-2026-30798)
vulnerability in rustdesk (CVE-2026-30798). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-30794 |
|
Vulnerability in rustdesk (CVE-2026-30794)
vulnerability in rustdesk (CVE-2026-30794). Successful exploitation can lead to full system takeover.
|
| CVE-2026-30792 |
|
Vulnerability in rustdesk (CVE-2026-30792)
vulnerability in rustdesk (CVE-2026-30792). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25048 |
|
Vulnerability in xgrammar (CVE-2026-25048)
vulnerability in xgrammar (CVE-2026-25048). Risk of unauthorized operations or information disclosure. Exploitable via ``torch_dtype``. Mitigation: upgrade to `0.1.32` or later.
|
| CVE-2025-69534 |
|
Vulnerability in markdown (CVE-2025-69534)
vulnerability in markdown (CVE-2025-69534). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.8.1` or later.
|
| CVE-2026-1605 |
|
Vulnerability in eclipse (CVE-2026-1605)
vulnerability in eclipse (CVE-2026-1605). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-7921 KEV |
|
[KEV] Authentication Bypass in Hikvision multiple-products (CVE-2017-7921)
authentication bypass in Hikvision multiple-products (CVE-2017-7921). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-22681 KEV |
|
[KEV] Vulnerability in Rockwell multiple-products (CVE-2021-22681)
vulnerability in Rockwell multiple-products (CVE-2021-22681). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-43000 KEV |
|
[KEV] Use-After-Free in Apple multiple-products (CVE-2023-43000)
vulnerability in Apple multiple-products (CVE-2023-43000). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-30952 KEV |
|
[KEV] Vulnerability in Apple multiple-products (CVE-2021-30952)
vulnerability in Apple multiple-products (CVE-2021-30952). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-41974 KEV |
|
[KEV] Use-After-Free in Apple ios-and-ipados (CVE-2023-41974)
vulnerability in Apple ios-and-ipados (CVE-2023-41974). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-0847 |
|
Path Traversal in nltk (CVE-2026-0847)
path traversal in nltk (CVE-2026-0847). Confidential information can be exposed externally. Mitigation: upgrade to `3.9.3` or later.
|
| CVE-2026-20105 |
|
Vulnerability in dos (CVE-2026-20105)
vulnerability in dos (CVE-2026-20105). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20101 |
|
Vulnerability in dos (CVE-2026-20101)
vulnerability in dos (CVE-2026-20101). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20103 |
|
Vulnerability in dos (CVE-2026-20103)
vulnerability in dos (CVE-2026-20103). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20100 |
|
Vulnerability in dos (CVE-2026-20100)
vulnerability in dos (CVE-2026-20100). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20039 |
|
Vulnerability in dos (CVE-2026-20039)
vulnerability in dos (CVE-2026-20039). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20049 |
|
Vulnerability in c (CVE-2026-20049)
vulnerability in c (CVE-2026-20049). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20014 |
|
Vulnerability in dos (CVE-2026-20014)
vulnerability in dos (CVE-2026-20014). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20002 |
|
SQL Injection in sqli (CVE-2026-20002)
SQL injection in sqli (CVE-2026-20002). Confidential information can be exposed externally.
|
| CVE-2026-3520 |
|
Vulnerability in dos (CVE-2026-3520)
vulnerability in dos (CVE-2026-3520). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-15558 |
|
Vulnerability in docker-cli (CVE-2025-15558)
vulnerability in docker-cli (CVE-2025-15558). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `29.2.1` or later.
|
| CVE-2026-23236 |
|
Vulnerability in linux (CVE-2026-23236)
vulnerability in linux (CVE-2026-23236). Data can be tampered with by attackers.
|
| CVE-2026-23231 |
|
Use-After-Free in linux (CVE-2026-23231)
vulnerability in linux (CVE-2026-23231). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27622 |
|
Out-of-Bounds Write in openexr (CVE-2026-27622)
out-of-bounds write in openexr (CVE-2026-27622). Successful exploitation can lead to full system takeover. Exploitable via ``MultiPartInputFile``. Mitigation: upgrade to `3.2.6, 3.3.8, 3.4.6` or later.
|
| CVE-2026-29022 |
|
Vulnerability in mackron (CVE-2026-29022)
vulnerability in mackron (CVE-2026-29022). Data can be tampered with by attackers.
|
| CVE-2026-3437 |
|
Buffer Overflow in portwell (CVE-2026-3437)
vulnerability in portwell (CVE-2026-3437). Successful exploitation can lead to full system takeover.
|
| CVE-2025-63912 |
|
Vulnerability in cohesity (CVE-2025-63912)
vulnerability in cohesity (CVE-2025-63912). Confidential information can be exposed externally.
|
| CVE-2026-28518 |
|
Path Traversal in openviking (CVE-2026-28518)
path traversal in openviking (CVE-2026-28518). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25673 |
|
Vulnerability in django (CVE-2026-25673)
vulnerability in django (CVE-2026-25673). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-22719 KEV |
|
[KEV] Command Injection in Broadcom vmware-aria-operations (CVE-2026-22719)
command injection in Broadcom vmware-aria-operations (CVE-2026-22719). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-21385 KEV |
|
[KEV] Vulnerability in Qualcomm multiple-chipsets (CVE-2026-21385)
vulnerability in Qualcomm multiple-chipsets (CVE-2026-21385). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-3338 |
|
Vulnerability in amazon (CVE-2026-3338)
vulnerability in amazon (CVE-2026-3338). Data can be tampered with by attackers.
|
| CVE-2026-0010 |
|
Out-of-Bounds Write in cpp (CVE-2026-0010)
out-of-bounds write in cpp (CVE-2026-0010). Successful exploitation can lead to full system takeover.
|