Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-44091 |
|
Vulnerability in CVE-2026-44091 (CVE-2026-44091)
vulnerability in CVE-2026-44091 (CVE-2026-44091). Data can be tampered with by attackers.
|
| CVE-2026-48746 |
|
Vulnerability in vllm (CVE-2026-48746)
vulnerability in vllm (CVE-2026-48746). Confidential information can be exposed externally. Mitigation: upgrade to `0.22.0` or later.
|
| CVE-2026-65902 |
|
Vulnerability in dompurify (CVE-2026-65902)
vulnerability in dompurify (CVE-2026-65902). Risk of unauthorized operations or information disclosure. Exploitable via ``data.allowedTags``. Mitigation: upgrade to `3.4.7` or later.
|
| CVE-2026-49458 |
|
Vulnerability in dompurify (CVE-2026-49458)
vulnerability in dompurify (CVE-2026-49458). Risk of unauthorized operations or information disclosure. Exploitable via ``instanceof``. Mitigation: upgrade to `3.4.6` or later.
|
| CVE-2026-33828 |
|
Vulnerability in microsoft (CVE-2026-33828)
vulnerability in microsoft (CVE-2026-33828). Successful exploitation can lead to full system takeover.
|
| CVE-2026-35051 |
|
Vulnerability in github.com/traefik/traefik (CVE-2026-35051)
vulnerability in github.com/traefik/traefik (CVE-2026-35051). Confidential information can be exposed externally. Exploitable via ``ForwardAuth``. Mitigation: upgrade to `2.11.43` or later.
|
| CVE-2026-34780 |
|
Vulnerability in electronjs (CVE-2026-34780)
vulnerability in electronjs (CVE-2026-34780). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24153 |
|
Vulnerability in nvidia (CVE-2026-24153)
vulnerability in nvidia (CVE-2026-24153). Confidential information can be exposed externally.
|
| CVE-2026-27893 |
|
Vulnerability in vllm (CVE-2026-27893)
vulnerability in vllm (CVE-2026-27893). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.18.0` or later.
|
| CVE-2026-4687 |
|
Vulnerability in mozilla (CVE-2026-4687)
vulnerability in mozilla (CVE-2026-4687). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-61884 KEV |
|
[KEV] Path Traversal in Oracle e-business-suite (CVE-2025-61884)
path traversal in Oracle e-business-suite (CVE-2025-61884). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2025-48938 |
|
Vulnerability in go-gh (CVE-2025-48938)
vulnerability in go-gh (CVE-2025-48938). Successful exploitation can lead to full system takeover.
|
| CVE-2025-1118 |
|
Vulnerability in CVE-2025-1118 (CVE-2025-1118)
vulnerability in CVE-2025-1118 (CVE-2025-1118). Confidential information can be exposed externally.
|
| CVE-2024-23682 |
|
Vulnerability in ls1intum (CVE-2024-23682)
vulnerability in ls1intum (CVE-2024-23682). Successful exploitation can lead to full system takeover.
|
| CVE-2022-20826 |
|
Vulnerability in cisco (CVE-2022-20826)
vulnerability in cisco (CVE-2022-20826). Successful exploitation can lead to full system takeover.
|