Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: jpcert Clear
ID Title
CVE-2026-40956 Information Disclosure in absolute (CVE-2026-40956)
vulnerability in absolute (CVE-2026-40956). Risk of unauthorized operations or information disclosure.
CVE-2026-40952 Vulnerability in absolute (CVE-2026-40952)
vulnerability in absolute (CVE-2026-40952). Successful exploitation can lead to full system takeover.
CVE-2026-40955 Vulnerability in dos (CVE-2026-40955)
vulnerability in dos (CVE-2026-40955). Risk of unauthorized operations or information disclosure.
CVE-2026-40957 Vulnerability in absolute (CVE-2026-40957)
vulnerability in absolute (CVE-2026-40957). Confidential information can be exposed externally.
CVE-2026-20153 Vulnerability in cisco (CVE-2026-20153)
vulnerability in cisco (CVE-2026-20153). Risk of unauthorized operations or information disclosure.
CVE-2026-20156 Buffer Overflow in cisco (CVE-2026-20156)
vulnerability in cisco (CVE-2026-20156). Successful exploitation can lead to full system takeover.
CVE-2026-20157 Vulnerability in cisco (CVE-2026-20157)
vulnerability in cisco (CVE-2026-20157). Successful exploitation can lead to full system takeover.
CVE-2026-20158 Vulnerability in cisco (CVE-2026-20158)
vulnerability in cisco (CVE-2026-20158). Risk of unauthorized operations or information disclosure.
CVE-2026-20187 Vulnerability in cisco (CVE-2026-20187)
vulnerability in cisco (CVE-2026-20187). Risk of unauthorized operations or information disclosure.
CVE-2026-20150 Vulnerability in Cisco roomos (CVE-2026-20150)
vulnerability in Cisco roomos (CVE-2026-20150). Successful exploitation can lead to full system takeover.
CVE-2026-42936 Vulnerability in jvn (CVE-2026-42936)
vulnerability in jvn (CVE-2026-42936). Successful exploitation can lead to full system takeover.
CVE-2026-45710 Cross-Site Scripting (XSS) in facturascripts/facturascripts (CVE-2026-45710)
cross-site scripting in facturascripts/facturascripts (CVE-2026-45710). Risk of unauthorized operations or information disclosure. Exploitable via ``referencia``.
CVE-2026-59083 Vulnerability in apache (CVE-2026-59083)
vulnerability in apache (CVE-2026-59083). Confidential information can be exposed externally.
CVE-2020-12265 Vulnerability in jvn (CVE-2020-12265)
vulnerability in jvn (CVE-2020-12265). Risk of unauthorized operations or information disclosure.
CVE-2025-6947 Cross-Site Scripting (XSS) in jvn (CVE-2025-6947)
cross-site scripting in jvn (CVE-2025-6947). Risk of unauthorized operations or information disclosure.
CVE-2025-1071 Cross-Site Scripting (XSS) in jvn (CVE-2025-1071)
cross-site scripting in jvn (CVE-2025-1071). Risk of unauthorized operations or information disclosure.
CVE-2025-13938 Cross-Site Scripting (XSS) in jvn (CVE-2025-13938)
cross-site scripting in jvn (CVE-2025-13938). Risk of unauthorized operations or information disclosure.
CVE-2025-13937 Cross-Site Scripting (XSS) in jvn (CVE-2025-13937)
cross-site scripting in jvn (CVE-2025-13937). Risk of unauthorized operations or information disclosure.
CVE-2025-13936 Cross-Site Scripting (XSS) in jvn (CVE-2025-13936)
cross-site scripting in jvn (CVE-2025-13936). Risk of unauthorized operations or information disclosure.
CVE-2026-13236 Vulnerability in drupal/ai_agents (CVE-2026-13236)
vulnerability in drupal/ai_agents (CVE-2026-13236). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.4, 1.2.5, 1.3.1` or later.
CVE-2025-66169 Vulnerability in jvn (CVE-2025-66169)
vulnerability in jvn (CVE-2025-66169). Risk of unauthorized operations or information disclosure.
CVE-2026-56437 Vulnerability in jvn (CVE-2026-56437)
vulnerability in jvn (CVE-2026-56437). Successful exploitation can lead to full system takeover.
CVE-2025-49656 Vulnerability in jvn (CVE-2025-49656)
vulnerability in jvn (CVE-2025-49656). Risk of unauthorized operations or information disclosure.
CVE-2026-48828 Information Disclosure in apache (CVE-2026-48828)
vulnerability in apache (CVE-2026-48828). Confidential information can be exposed externally. Exploitable via ``should_hide_value_for_key``.
CVE-2026-33264 Unsafe Deserialization in apache (CVE-2026-33264)
vulnerability in apache (CVE-2026-33264). Successful exploitation can lead to full system takeover.
CVE-2026-58315 Cross-Site Request Forgery (CSRF) in jvn (CVE-2026-58315)
vulnerability in jvn (CVE-2026-58315). Risk of unauthorized operations or information disclosure.
CVE-2026-46590 Unsafe Deserialization in org.apache.camel:camel-pqc (CVE-2026-46590)
vulnerability in org.apache.camel:camel-pqc (CVE-2026-46590). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.21.0` or later.
CVE-2026-50043 OS Command Injection in jvn (CVE-2026-50043)
OS command injection in jvn (CVE-2026-50043). Successful exploitation can lead to full system takeover.
CVE-2026-56808 OS Command Injection in jvn (CVE-2026-56808)
OS command injection in jvn (CVE-2026-56808). Successful exploitation can lead to full system takeover.
CVE-2026-56809 Cross-Site Scripting (XSS) in jvn (CVE-2026-56809)
cross-site scripting in jvn (CVE-2026-56809). Risk of unauthorized operations or information disclosure.
CVE-2026-56137 OS Command Injection in jvn (CVE-2026-56137)
OS command injection in jvn (CVE-2026-56137). Successful exploitation can lead to full system takeover.
CVE-2025-61984 Vulnerability in jvn (CVE-2025-61984)
vulnerability in jvn (CVE-2025-61984). Risk of unauthorized operations or information disclosure.
CVE-2026-55957 Vulnerability in tomcat (CVE-2026-55957)
vulnerability in tomcat (CVE-2026-55957). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.0.101, 10.1.37, 11.0.5` or later.
CVE-2026-44024 Path Traversal in fluentd (CVE-2026-44024)
path traversal in fluentd (CVE-2026-44024). Successful exploitation can lead to full system takeover. Exploitable via ``path``. Mitigation: upgrade to `1.19.3` or later.
CVE-2026-8797 Vulnerability in jvn (CVE-2026-8797)
vulnerability in jvn (CVE-2026-8797). Risk of unauthorized operations or information disclosure.
CVE-2026-11833 Vulnerability in jvn (CVE-2026-11833)
vulnerability in jvn (CVE-2026-11833). Risk of unauthorized operations or information disclosure.
CVE-2026-8805 Vulnerability in dos (CVE-2026-8805)
vulnerability in dos (CVE-2026-8805). Risk of unauthorized operations or information disclosure.
CVE-2026-12046 Vulnerability in flask (CVE-2026-12046)
vulnerability in flask (CVE-2026-12046). Successful exploitation can lead to full system takeover. Exploitable via `DELETE /sqleditor/close/`.
CVE-2026-12045 Command Injection in pgadmin (CVE-2026-12045)
command injection in pgadmin (CVE-2026-12045). Successful exploitation can lead to full system takeover.
CVE-2026-12044 SQL Injection in sqli (CVE-2026-12044)
SQL injection in sqli (CVE-2026-12044). Successful exploitation can lead to full system takeover. Exploitable via ``qtLiteral``.
CVE-2026-9678 Vulnerability in undici (CVE-2026-9678)
vulnerability in undici (CVE-2026-9678). Confidential information can be exposed externally. Exploitable via ``private``. Mitigation: upgrade to `8.5.0` or later.
CVE-2026-5667 Vulnerability in jvn (CVE-2026-5667)
vulnerability in jvn (CVE-2026-5667). Risk of unauthorized operations or information disclosure.
CVE-2026-50100 Vulnerability in jvn (CVE-2026-50100)
vulnerability in jvn (CVE-2026-50100). Successful exploitation can lead to full system takeover.
CVE-2026-50645 Vulnerability in org.apache.cxf:cxf-core (CVE-2026-50645)
vulnerability in org.apache.cxf:cxf-core (CVE-2026-50645). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.12` or later.
CVE-2025-7737 Vulnerability in jvn (CVE-2025-7737)
vulnerability in jvn (CVE-2025-7737). Risk of unauthorized operations or information disclosure.
CVE-2026-33828 Vulnerability in microsoft (CVE-2026-33828)
vulnerability in microsoft (CVE-2026-33828). Successful exploitation can lead to full system takeover.
CVE-2025-10263 Vulnerability in jvn (CVE-2025-10263)
vulnerability in jvn (CVE-2025-10263). Confidential information can be exposed externally.
CVE-2026-49975 Vulnerability in apache (CVE-2026-49975)
vulnerability in apache (CVE-2026-49975). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.68` or later.
CVE-2026-48913 Use-After-Free in apache (CVE-2026-48913)
vulnerability in apache (CVE-2026-48913). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.68` or later.
CVE-2026-43951 Out-of-Bounds Read in apache (CVE-2026-43951)
vulnerability in apache (CVE-2026-43951). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.68` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →