Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-501 Clear
ID Title
CVE-2026-44091 Vulnerability in CVE-2026-44091 (CVE-2026-44091)
vulnerability in CVE-2026-44091 (CVE-2026-44091). Data can be tampered with by attackers.
CVE-2026-48746 Vulnerability in vllm (CVE-2026-48746)
vulnerability in vllm (CVE-2026-48746). Confidential information can be exposed externally. Mitigation: upgrade to `0.22.0` or later.
CVE-2026-65902 Vulnerability in dompurify (CVE-2026-65902)
vulnerability in dompurify (CVE-2026-65902). Risk of unauthorized operations or information disclosure. Exploitable via ``data.allowedTags``. Mitigation: upgrade to `3.4.7` or later.
CVE-2026-49458 Vulnerability in dompurify (CVE-2026-49458)
vulnerability in dompurify (CVE-2026-49458). Risk of unauthorized operations or information disclosure. Exploitable via ``instanceof``. Mitigation: upgrade to `3.4.6` or later.
CVE-2026-33828 Vulnerability in microsoft (CVE-2026-33828)
vulnerability in microsoft (CVE-2026-33828). Successful exploitation can lead to full system takeover.
CVE-2026-35051 Vulnerability in github.com/traefik/traefik (CVE-2026-35051)
vulnerability in github.com/traefik/traefik (CVE-2026-35051). Confidential information can be exposed externally. Exploitable via ``ForwardAuth``. Mitigation: upgrade to `2.11.43` or later.
CVE-2026-34780 Vulnerability in electronjs (CVE-2026-34780)
vulnerability in electronjs (CVE-2026-34780). Successful exploitation can lead to full system takeover.
CVE-2026-24153 Vulnerability in nvidia (CVE-2026-24153)
vulnerability in nvidia (CVE-2026-24153). Confidential information can be exposed externally.
CVE-2026-27893 Vulnerability in vllm (CVE-2026-27893)
vulnerability in vllm (CVE-2026-27893). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.18.0` or later.
CVE-2026-4687 Vulnerability in mozilla (CVE-2026-4687)
vulnerability in mozilla (CVE-2026-4687). Risk of unauthorized operations or information disclosure.
CVE-2025-61884 KEV [KEV] Path Traversal in Oracle e-business-suite (CVE-2025-61884)
path traversal in Oracle e-business-suite (CVE-2025-61884). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2025-48938 Vulnerability in go-gh (CVE-2025-48938)
vulnerability in go-gh (CVE-2025-48938). Successful exploitation can lead to full system takeover.
CVE-2025-1118 Vulnerability in CVE-2025-1118 (CVE-2025-1118)
vulnerability in CVE-2025-1118 (CVE-2025-1118). Confidential information can be exposed externally.
CVE-2024-23682 Vulnerability in ls1intum (CVE-2024-23682)
vulnerability in ls1intum (CVE-2024-23682). Successful exploitation can lead to full system takeover.
CVE-2022-20826 Vulnerability in cisco (CVE-2022-20826)
vulnerability in cisco (CVE-2022-20826). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →