Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-75548 |
|
Vulnerability in CVE-2026-75548 (CVE-2026-75548)
vulnerability in CVE-2026-75548 (CVE-2026-75548). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18534 |
|
Vulnerability in CVE-2026-18534 (CVE-2026-18534)
vulnerability in CVE-2026-18534 (CVE-2026-18534). Data can be tampered with by attackers.
|
| CVE-2026-74978 |
|
Vulnerability in mozilla (CVE-2026-74978)
vulnerability in mozilla (CVE-2026-74978). Confidential information can be exposed externally.
|
| CVE-2026-74980 |
|
Vulnerability in mozilla (CVE-2026-74980)
vulnerability in mozilla (CVE-2026-74980). Data can be tampered with by attackers.
|
| CVE-2026-74958 |
|
Vulnerability in mozilla (CVE-2026-74958)
vulnerability in mozilla (CVE-2026-74958). Confidential information can be exposed externally.
|
| CVE-2026-74951 |
|
Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154.
Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154.
|
| CVE-2026-44762 |
|
Vulnerability in CVE-2026-44762 (CVE-2026-44762)
vulnerability in CVE-2026-44762 (CVE-2026-44762). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70608 |
|
Vulnerability in electron (CVE-2026-70608)
vulnerability in electron (CVE-2026-70608). Risk of unauthorized operations or information disclosure. Exploitable via ``setWindowOpenHandler``. Mitigation: upgrade to `39.8.10` or later.
|
| CVE-2026-70600 |
|
Vulnerability in electron (CVE-2026-70600)
vulnerability in electron (CVE-2026-70600). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `42.0.0-beta.3` or later.
|
| CVE-2026-70486 |
|
Cross-Site Scripting (XSS) in open-webui (CVE-2026-70486)
cross-site scripting in open-webui (CVE-2026-70486). Confidential information can be exposed externally. Exploitable via ``TERMINAL_SERVER_CONNECTIONS``. Mitigation: upgrade to `0.11.0` or later.
|
| CVE-2026-60370 |
|
Vulnerability in c (CVE-2026-60370)
vulnerability in c (CVE-2026-60370). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16397 |
|
Vulnerability in mozilla (CVE-2026-16397)
vulnerability in mozilla (CVE-2026-16397). Data can be tampered with by attackers.
|
| CVE-2026-40957 |
|
Vulnerability in absolute (CVE-2026-40957)
vulnerability in absolute (CVE-2026-40957). Confidential information can be exposed externally.
|
| CVE-2026-58595 |
|
Vulnerability in microsoft (CVE-2026-58595)
vulnerability in microsoft (CVE-2026-58595). Data can be tampered with by attackers.
|
| CVE-2026-59791 |
|
In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possible
In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possible
|
| CVE-2026-38979 |
|
Vulnerability in CVE-2026-38979 (CVE-2026-38979)
vulnerability in CVE-2026-38979 (CVE-2026-38979). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14142 |
|
Vulnerability in c (CVE-2026-14142)
vulnerability in c (CVE-2026-14142). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14110 |
|
Vulnerability in google (CVE-2026-14110)
vulnerability in google (CVE-2026-14110). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44727 |
|
Cross-Site Scripting (XSS) in jupyter-server (CVE-2026-44727)
cross-site scripting in jupyter-server (CVE-2026-44727). Risk of unauthorized operations or information disclosure. Exploitable via ``nbconvert.HTMLExporter``. Mitigation: upgrade to `2.20.0` or later.
|
| CVE-2026-12348 |
|
Vulnerability in CVE-2026-12348 (CVE-2026-12348)
vulnerability in CVE-2026-12348 (CVE-2026-12348). Data can be tampered with by attackers.
|
| CVE-2026-12323 |
|
Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152.
Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152.
|
| CVE-2026-12322 |
|
Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152.
Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152.
|
| CVE-2026-10733 |
|
Vulnerability in gitlab (CVE-2026-10733)
vulnerability in gitlab (CVE-2026-10733). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `18.10.8, 18.11.5, 19.0.2` or later.
|
| CVE-2026-47723 |
|
Vulnerability in github.com/juev/nebula-mesh (CVE-2026-47723)
vulnerability in github.com/juev/nebula-mesh (CVE-2026-47723). Risk of unauthorized operations or information disclosure. Exploitable via ``grep``. Mitigation: upgrade to `0.3.1` or later.
|
| CVE-2026-28577 |
|
Vulnerability in google (CVE-2026-28577)
vulnerability in google (CVE-2026-28577). Successful exploitation can lead to full system takeover.
|
| CVE-2026-0061 |
|
Vulnerability in google (CVE-2026-0061)
vulnerability in google (CVE-2026-0061). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0036 |
|
Vulnerability in google (CVE-2026-0036)
vulnerability in google (CVE-2026-0036). Successful exploitation can lead to full system takeover.
|
| CVE-2026-21785 |
|
Vulnerability in CVE-2026-21785 (CVE-2026-21785)
vulnerability in CVE-2026-21785 (CVE-2026-21785). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9396 |
|
Vulnerability in CVE-2026-9396 (CVE-2026-9396)
vulnerability in CVE-2026-9396 (CVE-2026-9396). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-37470 |
|
Vulnerability in CVE-2026-37470 (CVE-2026-37470)
vulnerability in CVE-2026-37470 (CVE-2026-37470). Confidential information can be exposed externally.
|
| CVE-2026-42502 |
|
Vulnerability in golang.org/x/net (CVE-2026-42502)
vulnerability in golang.org/x/net (CVE-2026-42502). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.55.0` or later.
|
| CVE-2026-25681 |
|
Vulnerability in golang.org/x/net (CVE-2026-25681)
vulnerability in golang.org/x/net (CVE-2026-25681). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.55.0` or later.
|
| CVE-2026-27136 |
|
Vulnerability in golang.org/x/net (CVE-2026-27136)
vulnerability in golang.org/x/net (CVE-2026-27136). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.55.0` or later.
|
| CVE-2025-62316 |
|
Vulnerability in CVE-2025-62316 (CVE-2025-62316)
vulnerability in CVE-2025-62316 (CVE-2025-62316). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28971 |
|
Vulnerability in apple (CVE-2026-28971)
vulnerability in apple (CVE-2026-28971). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-0421 |
|
Vulnerability in CVE-2025-0421 (CVE-2025-0421)
vulnerability in CVE-2025-0421 (CVE-2025-0421). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-0546 |
|
Cross-Site Scripting (XSS) in CVE-2025-0546 (CVE-2025-0546)
cross-site scripting in CVE-2025-0546 (CVE-2025-0546). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-13066 |
|
Vulnerability in CVE-2024-13066 (CVE-2024-13066)
vulnerability in CVE-2024-13066 (CVE-2024-13066). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-7523 |
|
Vulnerability in mozilla (CVE-2024-7523)
vulnerability in mozilla (CVE-2024-7523). Confidential information can be exposed externally.
|
| CVE-2021-41657 |
|
Vulnerability in smartbear (CVE-2021-41657)
vulnerability in smartbear (CVE-2021-41657). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11290 |
|
Vulnerability in adobe (CVE-2017-11290)
vulnerability in adobe (CVE-2017-11290). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-5697 |
|
Vulnerability in intel (CVE-2017-5697)
vulnerability in intel (CVE-2017-5697). Data can be tampered with by attackers.
|
| CVE-2017-4015 |
|
Vulnerability in mcafee (CVE-2017-4015)
vulnerability in mcafee (CVE-2017-4015). Data can be tampered with by attackers.
|
| CVE-2017-7440 |
|
Vulnerability in gfi (CVE-2017-7440)
vulnerability in gfi (CVE-2017-7440). Data can be tampered with by attackers.
|
| CVE-2017-0492 |
|
Vulnerability in google (CVE-2017-0492)
vulnerability in google (CVE-2017-0492). Data can be tampered with by attackers.
|
| CVE-2017-5026 |
|
Vulnerability in google (CVE-2017-5026)
vulnerability in google (CVE-2017-5026). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-5016 |
|
Vulnerability in google (CVE-2017-5016)
vulnerability in google (CVE-2017-5016). Data can be tampered with by attackers.
|