Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-40956 |
|
Information Disclosure in absolute (CVE-2026-40956)
vulnerability in absolute (CVE-2026-40956). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40952 |
|
Vulnerability in absolute (CVE-2026-40952)
vulnerability in absolute (CVE-2026-40952). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40955 |
|
Vulnerability in dos (CVE-2026-40955)
vulnerability in dos (CVE-2026-40955). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40957 |
|
Vulnerability in absolute (CVE-2026-40957)
vulnerability in absolute (CVE-2026-40957). Confidential information can be exposed externally.
|
| CVE-2026-20153 |
|
Vulnerability in cisco (CVE-2026-20153)
vulnerability in cisco (CVE-2026-20153). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20156 |
|
Buffer Overflow in cisco (CVE-2026-20156)
vulnerability in cisco (CVE-2026-20156). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20157 |
|
Vulnerability in cisco (CVE-2026-20157)
vulnerability in cisco (CVE-2026-20157). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20158 |
|
Vulnerability in cisco (CVE-2026-20158)
vulnerability in cisco (CVE-2026-20158). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20187 |
|
Vulnerability in cisco (CVE-2026-20187)
vulnerability in cisco (CVE-2026-20187). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20150 |
|
Vulnerability in Cisco roomos (CVE-2026-20150)
vulnerability in Cisco roomos (CVE-2026-20150). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42936 |
|
Vulnerability in jvn (CVE-2026-42936)
vulnerability in jvn (CVE-2026-42936). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45710 |
|
Cross-Site Scripting (XSS) in facturascripts/facturascripts (CVE-2026-45710)
cross-site scripting in facturascripts/facturascripts (CVE-2026-45710). Risk of unauthorized operations or information disclosure. Exploitable via ``referencia``.
|
| CVE-2026-59083 |
|
Vulnerability in apache (CVE-2026-59083)
vulnerability in apache (CVE-2026-59083). Confidential information can be exposed externally.
|
| CVE-2020-12265 |
|
Vulnerability in jvn (CVE-2020-12265)
vulnerability in jvn (CVE-2020-12265). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-6947 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2025-6947)
cross-site scripting in jvn (CVE-2025-6947). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-1071 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2025-1071)
cross-site scripting in jvn (CVE-2025-1071). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13938 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2025-13938)
cross-site scripting in jvn (CVE-2025-13938). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13937 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2025-13937)
cross-site scripting in jvn (CVE-2025-13937). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13936 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2025-13936)
cross-site scripting in jvn (CVE-2025-13936). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13236 |
|
Vulnerability in drupal/ai_agents (CVE-2026-13236)
vulnerability in drupal/ai_agents (CVE-2026-13236). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.4, 1.2.5, 1.3.1` or later.
|
| CVE-2025-66169 |
|
Vulnerability in jvn (CVE-2025-66169)
vulnerability in jvn (CVE-2025-66169). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56437 |
|
Vulnerability in jvn (CVE-2026-56437)
vulnerability in jvn (CVE-2026-56437). Successful exploitation can lead to full system takeover.
|
| CVE-2025-49656 |
|
Vulnerability in jvn (CVE-2025-49656)
vulnerability in jvn (CVE-2025-49656). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48828 |
|
Information Disclosure in apache (CVE-2026-48828)
vulnerability in apache (CVE-2026-48828). Confidential information can be exposed externally. Exploitable via ``should_hide_value_for_key``.
|
| CVE-2026-33264 |
|
Unsafe Deserialization in apache (CVE-2026-33264)
vulnerability in apache (CVE-2026-33264). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58315 |
|
Cross-Site Request Forgery (CSRF) in jvn (CVE-2026-58315)
vulnerability in jvn (CVE-2026-58315). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46590 |
|
Unsafe Deserialization in org.apache.camel:camel-pqc (CVE-2026-46590)
vulnerability in org.apache.camel:camel-pqc (CVE-2026-46590). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-50043 |
|
OS Command Injection in jvn (CVE-2026-50043)
OS command injection in jvn (CVE-2026-50043). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56808 |
|
OS Command Injection in jvn (CVE-2026-56808)
OS command injection in jvn (CVE-2026-56808). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56809 |
|
Cross-Site Scripting (XSS) in jvn (CVE-2026-56809)
cross-site scripting in jvn (CVE-2026-56809). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56137 |
|
OS Command Injection in jvn (CVE-2026-56137)
OS command injection in jvn (CVE-2026-56137). Successful exploitation can lead to full system takeover.
|
| CVE-2025-61984 |
|
Vulnerability in jvn (CVE-2025-61984)
vulnerability in jvn (CVE-2025-61984). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55957 |
|
Vulnerability in tomcat (CVE-2026-55957)
vulnerability in tomcat (CVE-2026-55957). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.0.101, 10.1.37, 11.0.5` or later.
|
| CVE-2026-44024 |
|
Path Traversal in fluentd (CVE-2026-44024)
path traversal in fluentd (CVE-2026-44024). Successful exploitation can lead to full system takeover. Exploitable via ``path``. Mitigation: upgrade to `1.19.3` or later.
|
| CVE-2026-8797 |
|
Vulnerability in jvn (CVE-2026-8797)
vulnerability in jvn (CVE-2026-8797). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11833 |
|
Vulnerability in jvn (CVE-2026-11833)
vulnerability in jvn (CVE-2026-11833). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8805 |
|
Vulnerability in dos (CVE-2026-8805)
vulnerability in dos (CVE-2026-8805). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12046 |
|
Vulnerability in flask (CVE-2026-12046)
vulnerability in flask (CVE-2026-12046). Successful exploitation can lead to full system takeover. Exploitable via `DELETE /sqleditor/close/`.
|
| CVE-2026-12045 |
|
Command Injection in pgadmin (CVE-2026-12045)
command injection in pgadmin (CVE-2026-12045). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12044 |
|
SQL Injection in sqli (CVE-2026-12044)
SQL injection in sqli (CVE-2026-12044). Successful exploitation can lead to full system takeover. Exploitable via ``qtLiteral``.
|
| CVE-2026-9678 |
|
Vulnerability in undici (CVE-2026-9678)
vulnerability in undici (CVE-2026-9678). Confidential information can be exposed externally. Exploitable via ``private``. Mitigation: upgrade to `8.5.0` or later.
|
| CVE-2026-5667 |
|
Vulnerability in jvn (CVE-2026-5667)
vulnerability in jvn (CVE-2026-5667). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50100 |
|
Vulnerability in jvn (CVE-2026-50100)
vulnerability in jvn (CVE-2026-50100). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50645 |
|
Vulnerability in org.apache.cxf:cxf-core (CVE-2026-50645)
vulnerability in org.apache.cxf:cxf-core (CVE-2026-50645). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.12` or later.
|
| CVE-2025-7737 |
|
Vulnerability in jvn (CVE-2025-7737)
vulnerability in jvn (CVE-2025-7737). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33828 |
|
Vulnerability in microsoft (CVE-2026-33828)
vulnerability in microsoft (CVE-2026-33828). Successful exploitation can lead to full system takeover.
|
| CVE-2025-10263 |
|
Vulnerability in jvn (CVE-2025-10263)
vulnerability in jvn (CVE-2025-10263). Confidential information can be exposed externally.
|
| CVE-2026-49975 |
|
Vulnerability in apache (CVE-2026-49975)
vulnerability in apache (CVE-2026-49975). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.68` or later.
|
| CVE-2026-48913 |
|
Use-After-Free in apache (CVE-2026-48913)
vulnerability in apache (CVE-2026-48913). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.68` or later.
|
| CVE-2026-43951 |
|
Out-of-Bounds Read in apache (CVE-2026-43951)
vulnerability in apache (CVE-2026-43951). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.68` or later.
|