Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-330 Clear
ID Title
CVE-2026-19485 Vulnerability in CVE-2026-19485 (CVE-2026-19485)
vulnerability in CVE-2026-19485 (CVE-2026-19485). Risk of unauthorized operations or information disclosure.
CVE-2026-62862 Vulnerability in csrf (CVE-2026-62862)
vulnerability in csrf (CVE-2026-62862). Risk of unauthorized operations or information disclosure.
CVE-2026-56706 Vulnerability in csrf (CVE-2026-56706)
vulnerability in csrf (CVE-2026-56706). Data can be tampered with by attackers.
CVE-2026-27490 Combodo iTop is a web based IT service management tool. Prior to 3.2.3, inline images that are accessible without being authenticated are protected by a weak 24-bit pseudo-random secret. This issue ha...
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, inline images that are accessible without being authenticated are protected by a weak 24-bit pseudo-random secret. This issue has been fixed in version 3.2.3.
CVE-2026-19906 Vulnerability in CVE-2026-19906 (CVE-2026-19906)
vulnerability in CVE-2026-19906 (CVE-2026-19906). Risk of unauthorized operations or information disclosure.
CVE-2026-19896 Vulnerability in flask (CVE-2026-19896)
vulnerability in flask (CVE-2026-19896). Risk of unauthorized operations or information disclosure.
CVE-2026-19748 Vulnerability in CVE-2026-19748 (CVE-2026-19748)
vulnerability in CVE-2026-19748 (CVE-2026-19748). Risk of unauthorized operations or information disclosure.
CVE-2026-18531 Vulnerability in ibm (CVE-2026-18531)
vulnerability in ibm (CVE-2026-18531). Risk of unauthorized operations or information disclosure.
CVE-2026-71225 Vulnerability in redhat (CVE-2026-71225)
vulnerability in redhat (CVE-2026-71225). Confidential information can be exposed externally.
CVE-2026-66391 Vulnerability in apache (CVE-2026-66391)
vulnerability in apache (CVE-2026-66391). Risk of unauthorized operations or information disclosure.
CVE-2026-46351 Vulnerability in CVE-2026-46351 (CVE-2026-46351)
vulnerability in CVE-2026-46351 (CVE-2026-46351). Confidential information can be exposed externally.
CVE-2026-14702 Vulnerability in CVE-2026-14702 (CVE-2026-14702)
vulnerability in CVE-2026-14702 (CVE-2026-14702). Risk of unauthorized operations or information disclosure.
CVE-2026-14570 Vulnerability in CVE-2026-14570 (CVE-2026-14570)
vulnerability in CVE-2026-14570 (CVE-2026-14570). Confidential information can be exposed externally.
CVE-2026-57082 Vulnerability in CVE-2026-57082 (CVE-2026-57082)
vulnerability in CVE-2026-57082 (CVE-2026-57082). Confidential information can be exposed externally.
CVE-2026-11374 Authentication Bypass in CVE-2026-11374 (CVE-2026-11374)
authentication bypass in CVE-2026-11374 (CVE-2026-11374). Successful exploitation can lead to full system takeover.
CVE-2026-50009 Information Disclosure in io.netty:netty-codec-classes-quic (CVE-2026-50009)
vulnerability in io.netty:netty-codec-classes-quic (CVE-2026-50009). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.2.15.Final` or later.
CVE-2026-41701 Vulnerability in org.springframework.amqp:spring-amqp (CVE-2026-41701)
vulnerability in org.springframework.amqp:spring-amqp (CVE-2026-41701). Risk of unauthorized operations or information disclosure.
CVE-2026-41838 Vulnerability in org.springframework:spring-websocket (CVE-2026-41838)
vulnerability in org.springframework:spring-websocket (CVE-2026-41838). Confidential information can be exposed externally.
CVE-2026-45673 Vulnerability in io.netty:netty-resolver-dns (CVE-2026-45673)
vulnerability in io.netty:netty-resolver-dns (CVE-2026-45673). Data can be tampered with by attackers. Exploitable via ``DnsQueryIdSpace``. Mitigation: upgrade to `4.1.135.Final` or later.
CVE-2026-47703 Vulnerability in github.com/AdguardTeam/AdGuardHome (CVE-2026-47703)
vulnerability in github.com/AdguardTeam/AdGuardHome (CVE-2026-47703). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.107.75` or later.
CVE-2026-50208 Vulnerability in acer (CVE-2026-50208)
vulnerability in acer (CVE-2026-50208). Confidential information can be exposed externally.
CVE-2026-41207 Vulnerability in io.netty.incubator:netty-incubator-codec-ohttp (CVE-2026-41207)
vulnerability in io.netty.incubator:netty-incubator-codec-ohttp (CVE-2026-41207). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.0.21.Final` or later.
CVE-2026-44054 Vulnerability in dos (CVE-2026-44054)
vulnerability in dos (CVE-2026-44054). Risk of unauthorized operations or information disclosure.
CVE-2026-42155 Vulnerability in openmage/magento-lts (CVE-2026-42155)
vulnerability in openmage/magento-lts (CVE-2026-42155). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/xmlrpc/`. Mitigation: upgrade to `20.18.0` or later.
CVE-2026-7847 Vulnerability in langchain-chatchat (CVE-2026-7847)
vulnerability in langchain-chatchat (CVE-2026-7847). Risk of unauthorized operations or information disclosure.
CVE-2026-40975 Vulnerability in spring (CVE-2026-40975)
vulnerability in spring (CVE-2026-40975). Risk of unauthorized operations or information disclosure.
CVE-2026-34511 Vulnerability in openclaw (CVE-2026-34511)
vulnerability in openclaw (CVE-2026-34511). Confidential information can be exposed externally.
CVE-2026-20101 Vulnerability in dos (CVE-2026-20101)
vulnerability in dos (CVE-2026-20101). Risk of unauthorized operations or information disclosure.
CVE-2025-13955 Vulnerability in CVE-2025-13955 (CVE-2025-13955)
vulnerability in CVE-2025-13955 (CVE-2025-13955). Risk of unauthorized operations or information disclosure.
CVE-2024-52615 Vulnerability in CVE-2024-52615 (CVE-2024-52615)
vulnerability in CVE-2024-52615 (CVE-2024-52615). Risk of unauthorized operations or information disclosure.
CVE-2024-20331 Vulnerability in c (CVE-2024-20331)
vulnerability in c (CVE-2024-20331). Risk of unauthorized operations or information disclosure.
CVE-2024-23688 Vulnerability in consensys (CVE-2024-23688)
vulnerability in consensys (CVE-2024-23688). Risk of unauthorized operations or information disclosure.
CVE-2023-48056 Vulnerability in pypinksign (CVE-2023-48056)
vulnerability in pypinksign (CVE-2023-48056). Confidential information can be exposed externally.
CVE-2023-2884 Vulnerability in cbot (CVE-2023-2884)
vulnerability in cbot (CVE-2023-2884). Successful exploitation can lead to full system takeover.
CVE-2023-30797 Vulnerability in netflix (CVE-2023-30797)
vulnerability in netflix (CVE-2023-30797). Confidential information can be exposed externally.
CVE-2022-36536 Vulnerability in syncovery (CVE-2022-36536)
vulnerability in syncovery (CVE-2022-36536). Successful exploitation can lead to full system takeover.
CVE-2022-29330 Vulnerability in vitalpbx (CVE-2022-29330)
vulnerability in vitalpbx (CVE-2022-29330). Confidential information can be exposed externally.
CVE-2021-46010 Vulnerability in totolink (CVE-2021-46010)
vulnerability in totolink (CVE-2021-46010). Successful exploitation can lead to full system takeover.
CVE-2021-20322 Vulnerability in linux (CVE-2021-20322)
vulnerability in linux (CVE-2021-20322). Confidential information can be exposed externally.
CVE-2020-1472 KEV [KEV] Vulnerability in Microsoft netlogon (CVE-2020-1472)
vulnerability in Microsoft netlogon (CVE-2020-1472). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-11840 Vulnerability in c (CVE-2019-11840)
vulnerability in c (CVE-2019-11840). Confidential information can be exposed externally.
CVE-2017-17704 Vulnerability in swhouse (CVE-2017-17704)
vulnerability in swhouse (CVE-2017-17704). Data can be tampered with by attackers.
CVE-2017-17910 Vulnerability in hoermann (CVE-2017-17910)
vulnerability in hoermann (CVE-2017-17910). Risk of unauthorized operations or information disclosure.
CVE-2017-17091 Vulnerability in wordpress (CVE-2017-17091)
vulnerability in wordpress (CVE-2017-17091). Successful exploitation can lead to full system takeover.
CVE-2017-10874 Vulnerability in ntt-east (CVE-2017-10874)
vulnerability in ntt-east (CVE-2017-10874). Data can be tampered with by attackers.
CVE-2017-12361 Information Disclosure in cisco (CVE-2017-12361)
vulnerability in cisco (CVE-2017-12361). Risk of unauthorized operations or information disclosure.
CVE-2017-1000246 Vulnerability in pysaml2-project (CVE-2017-1000246)
vulnerability in pysaml2-project (CVE-2017-1000246). Risk of unauthorized operations or information disclosure.
CVE-2017-13088 Vulnerability in canonical (CVE-2017-13088)
vulnerability in canonical (CVE-2017-13088). Data can be tampered with by attackers.
CVE-2017-13081 Vulnerability in canonical (CVE-2017-13081)
vulnerability in canonical (CVE-2017-13081). Data can be tampered with by attackers.
CVE-2017-13084 Vulnerability in canonical (CVE-2017-13084)
vulnerability in canonical (CVE-2017-13084). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →