Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-48771 |
|
Information Disclosure in CVE-2026-48771 (CVE-2026-48771)
vulnerability in CVE-2026-48771 (CVE-2026-48771). Confidential information can be exposed externally.
|
| CVE-2026-48767 |
|
Information Disclosure in CVE-2026-48767 (CVE-2026-48767)
vulnerability in CVE-2026-48767 (CVE-2026-48767). Confidential information can be exposed externally. Exploitable via ``getAccessToken``.
|
| CVE-2026-48447 |
|
Authorization Flaw in adobe (CVE-2026-48447)
vulnerability in adobe (CVE-2026-48447). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48441 |
|
Path Traversal in path-traversal (CVE-2026-48441)
path traversal in path-traversal (CVE-2026-48441). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48416 |
|
Authorization Flaw in CVE-2026-48416 (CVE-2026-48416)
vulnerability in CVE-2026-48416 (CVE-2026-48416). Confidential information can be exposed externally.
|
| CVE-2026-48415 |
|
Authorization Flaw in CVE-2026-48415 (CVE-2026-48415)
vulnerability in CVE-2026-48415 (CVE-2026-48415). Data can be tampered with by attackers.
|
| CVE-2026-48414 |
|
Cross-Site Scripting (XSS) in CVE-2026-48414 (CVE-2026-48414)
cross-site scripting in CVE-2026-48414 (CVE-2026-48414). Confidential information can be exposed externally.
|
| CVE-2026-48413 |
|
Cross-Site Scripting (XSS) in CVE-2026-48413 (CVE-2026-48413)
cross-site scripting in CVE-2026-48413 (CVE-2026-48413). Confidential information can be exposed externally.
|
| CVE-2026-48410 |
|
Out-of-Bounds Write in adobe (CVE-2026-48410)
out-of-bounds write in adobe (CVE-2026-48410). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48409 |
|
Out-of-Bounds Write in adobe (CVE-2026-48409)
out-of-bounds write in adobe (CVE-2026-48409). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48408 |
|
Out-of-Bounds Write in adobe (CVE-2026-48408)
out-of-bounds write in adobe (CVE-2026-48408). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48407 |
|
Out-of-Bounds Write in adobe (CVE-2026-48407)
out-of-bounds write in adobe (CVE-2026-48407). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48406 |
|
Out-of-Bounds Write in adobe (CVE-2026-48406)
out-of-bounds write in adobe (CVE-2026-48406). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48405 |
|
Out-of-Bounds Write in adobe (CVE-2026-48405)
out-of-bounds write in adobe (CVE-2026-48405). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48404 |
|
Out-of-Bounds Write in adobe (CVE-2026-48404)
out-of-bounds write in adobe (CVE-2026-48404). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48397 |
|
Unsafe Deserialization in deserialization (CVE-2026-48397)
vulnerability in deserialization (CVE-2026-48397). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47940 |
|
Vulnerability in adobe (CVE-2026-47940)
vulnerability in adobe (CVE-2026-47940). Successful exploitation can lead to full system takeover.
|
| CVE-2022-50997 |
|
SQL Injection in sqli (CVE-2022-50997)
SQL injection in sqli (CVE-2022-50997). Confidential information can be exposed externally.
|
| CVE-2016-20097 |
|
SQL Injection in sqli (CVE-2016-20097)
SQL injection in sqli (CVE-2016-20097). Confidential information can be exposed externally.
|
| CVE-2026-20349 KEV |
|
[KEV] Vulnerability in Cisco dos (CVE-2026-20349)
vulnerability in Cisco dos (CVE-2026-20349). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-73089 |
|
Vulnerability in CVE-2026-73089 (CVE-2026-73089)
vulnerability in CVE-2026-73089 (CVE-2026-73089). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73088 |
|
Vulnerability in CVE-2026-73088 (CVE-2026-73088)
vulnerability in CVE-2026-73088 (CVE-2026-73088). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73086 |
|
Vulnerability in csrf (CVE-2026-73086)
vulnerability in csrf (CVE-2026-73086). Confidential information can be exposed externally.
|
| CVE-2026-71387 |
|
Authorization Flaw in adobe (CVE-2026-71387)
vulnerability in adobe (CVE-2026-71387). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71386 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-71386)
cross-site scripting in adobe (CVE-2026-71386). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71383 |
|
Authorization Flaw in adobe (CVE-2026-71383)
vulnerability in adobe (CVE-2026-71383). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71331 |
|
Vulnerability in microsoft (CVE-2026-71331)
vulnerability in microsoft (CVE-2026-71331). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70355 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-70355)
cross-site scripting in microsoft (CVE-2026-70355). Confidential information can be exposed externally.
|
| CVE-2026-70354 |
|
Out-of-Bounds Write in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-70354)
out-of-bounds write in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-70354). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-70347 |
|
Vulnerability in microsoft (CVE-2026-70347)
vulnerability in microsoft (CVE-2026-70347). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70346 |
|
Vulnerability in microsoft (CVE-2026-70346)
vulnerability in microsoft (CVE-2026-70346). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70345 |
|
Vulnerability in microsoft (CVE-2026-70345)
vulnerability in microsoft (CVE-2026-70345). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70344 |
|
Vulnerability in microsoft (CVE-2026-70344)
vulnerability in microsoft (CVE-2026-70344). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70340 |
|
Vulnerability in microsoft (CVE-2026-70340)
vulnerability in microsoft (CVE-2026-70340). Data can be tampered with by attackers.
|
| CVE-2026-70338 |
|
Code Injection in microsoft (CVE-2026-70338)
code injection in microsoft (CVE-2026-70338). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70337 |
|
Vulnerability in path-traversal (CVE-2026-70337)
vulnerability in path-traversal (CVE-2026-70337). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70336 |
|
Code Injection in microsoft (CVE-2026-70336)
code injection in microsoft (CVE-2026-70336). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70335 |
|
OS Command Injection in microsoft (CVE-2026-70335)
OS command injection in microsoft (CVE-2026-70335). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70329 |
|
Vulnerability in microsoft (CVE-2026-70329)
vulnerability in microsoft (CVE-2026-70329). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70326 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-70326)
SSRF in ssrf (CVE-2026-70326). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70324 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-70324)
SSRF in ssrf (CVE-2026-70324). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70321 |
|
Unsafe Deserialization in deserialization (CVE-2026-70321)
vulnerability in deserialization (CVE-2026-70321). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70313 |
|
Vulnerability in microsoft (CVE-2026-70313)
vulnerability in microsoft (CVE-2026-70313). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70311 |
|
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
|
| CVE-2026-70307 |
|
Use-After-Free in microsoft (CVE-2026-70307)
vulnerability in microsoft (CVE-2026-70307). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70130 |
|
Vulnerability in microsoft (CVE-2026-70130)
vulnerability in microsoft (CVE-2026-70130). Successful exploitation can lead to full system takeover.
|
| CVE-2026-69320 |
|
OS Command Injection in microsoft (CVE-2026-69320)
OS command injection in microsoft (CVE-2026-69320). Successful exploitation can lead to full system takeover.
|
| CVE-2026-69306 |
|
Vulnerability in microsoft (CVE-2026-69306)
vulnerability in microsoft (CVE-2026-69306). Confidential information can be exposed externally.
|
| CVE-2026-69278 |
|
Vulnerability in microsoft (CVE-2026-69278)
vulnerability in microsoft (CVE-2026-69278). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68821 |
|
Privilege Escalation in microsoft (CVE-2026-68821)
vulnerability in microsoft (CVE-2026-68821). Successful exploitation can lead to full system takeover.
|