Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-20 Clear
ID Title
CVE-2026-41654 Vulnerability in weblate (CVE-2026-41654)
vulnerability in weblate (CVE-2026-41654). Confidential information can be exposed externally. Exploitable via ``project.add``. Mitigation: upgrade to `5.17.1` or later.
CVE-2025-14576 Vulnerability in dos (CVE-2025-14576)
vulnerability in dos (CVE-2025-14576). Successful exploitation can lead to full system takeover.
CVE-2026-7360 Vulnerability in google (CVE-2026-7360)
vulnerability in google (CVE-2026-7360). Risk of unauthorized operations or information disclosure.
CVE-2026-7345 Vulnerability in google (CVE-2026-7345)
vulnerability in google (CVE-2026-7345). Successful exploitation can lead to full system takeover.
CVE-2024-54011 Vulnerability in hanwhavision (CVE-2024-54011)
vulnerability in hanwhavision (CVE-2024-54011). Risk of unauthorized operations or information disclosure.
CVE-2026-40068 Vulnerability in @anthropic-ai/claude-code (CVE-2026-40068)
vulnerability in @anthropic-ai/claude-code (CVE-2026-40068). Successful exploitation can lead to full system takeover. Exploitable via ``commondir``. Mitigation: upgrade to `2.1.84` or later.
CVE-2026-40466 Vulnerability in org.apache.activemq:apache-activemq (CVE-2026-40466)
vulnerability in org.apache.activemq:apache-activemq (CVE-2026-40466). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.2.5` or later.
CVE-2026-41044 Vulnerability in org.apache.activemq:apache-activemq (CVE-2026-41044)
vulnerability in org.apache.activemq:apache-activemq (CVE-2026-41044). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.2.5` or later.
CVE-2026-31192 Vulnerability in raindrop (CVE-2026-31192)
vulnerability in raindrop (CVE-2026-31192). Risk of unauthorized operations or information disclosure.
CVE-2025-13826 Vulnerability in dos (CVE-2025-13826)
vulnerability in dos (CVE-2025-13826). Risk of unauthorized operations or information disclosure.
CVE-2026-33436 Vulnerability in stirlingpdf (CVE-2026-33436)
vulnerability in stirlingpdf (CVE-2026-33436). Risk of unauthorized operations or information disclosure.
CVE-2026-21733 Vulnerability in imaginationtech (CVE-2026-21733)
vulnerability in imaginationtech (CVE-2026-21733). Confidential information can be exposed externally.
CVE-2026-34197 KEV [KEV] Vulnerability in Apache activemq (CVE-2026-34197)
vulnerability in Apache activemq (CVE-2026-34197). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-40176 Vulnerability in composer/composer (CVE-2026-40176)
vulnerability in composer/composer (CVE-2026-40176). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.2.27` or later.
CVE-2026-40261 Vulnerability in composer/composer (CVE-2026-40261)
vulnerability in composer/composer (CVE-2026-40261). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.2.27` or later.
CVE-2026-6328 Vulnerability in CVE-2026-6328 (CVE-2026-6328)
vulnerability in CVE-2026-6328 (CVE-2026-6328). Risk of unauthorized operations or information disclosure.
CVE-2026-39399 Vulnerability in CVE-2026-39399 (CVE-2026-39399)
vulnerability in CVE-2026-39399 (CVE-2026-39399). Data can be tampered with by attackers.
CVE-2026-35031 Vulnerability in path-traversal (CVE-2026-35031)
vulnerability in path-traversal (CVE-2026-35031). Successful exploitation can lead to full system takeover. Exploitable via `POST /Videos/{itemId}/Subtitles`.
CVE-2026-27299 Vulnerability in adobe (CVE-2026-27299)
vulnerability in adobe (CVE-2026-27299). Confidential information can be exposed externally.
CVE-2026-27306 Vulnerability in adobe (CVE-2026-27306)
vulnerability in adobe (CVE-2026-27306). Successful exploitation can lead to full system takeover.
CVE-2026-27304 Vulnerability in adobe (CVE-2026-27304)
vulnerability in adobe (CVE-2026-27304). Confidential information can be exposed externally.
CVE-2026-27282 Vulnerability in adobe (CVE-2026-27282)
vulnerability in adobe (CVE-2026-27282). Data can be tampered with by attackers.
CVE-2026-24893 Vulnerability in it-novum (CVE-2026-24893)
vulnerability in it-novum (CVE-2026-24893). Successful exploitation can lead to full system takeover.
CVE-2026-33826 Vulnerability in microsoft (CVE-2026-33826)
vulnerability in microsoft (CVE-2026-33826). Successful exploitation can lead to full system takeover.
CVE-2026-33116 Vulnerability in dotnet-sdk (CVE-2026-33116)
vulnerability in dotnet-sdk (CVE-2026-33116). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.26, 9.0.15, 10.0.6` or later.
CVE-2026-32203 Vulnerability in System.Security.Cryptography.Xml (CVE-2026-32203)
vulnerability in System.Security.Cryptography.Xml (CVE-2026-32203). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.3` or later.
CVE-2026-32201 KEV [KEV] Vulnerability in Microsoft sharepoint-server (CVE-2026-32201)
vulnerability in Microsoft sharepoint-server (CVE-2026-32201). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2012-1854 KEV [KEV] Vulnerability in Microsoft visual-basic-for-applications-vba (CVE-2012-1854)
vulnerability in Microsoft visual-basic-for-applications-vba (CVE-2012-1854). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-5915 Vulnerability in google (CVE-2026-5915)
vulnerability in google (CVE-2026-5915). Data can be tampered with by attackers.
CVE-2026-5919 Vulnerability in c (CVE-2026-5919)
vulnerability in c (CVE-2026-5919). Data can be tampered with by attackers.
CVE-2026-5884 Vulnerability in google (CVE-2026-5884)
vulnerability in google (CVE-2026-5884). Successful exploitation can lead to full system takeover.
CVE-2026-5885 Vulnerability in c (CVE-2026-5885)
vulnerability in c (CVE-2026-5885). Confidential information can be exposed externally.
CVE-2026-5887 Vulnerability in google (CVE-2026-5887)
vulnerability in google (CVE-2026-5887). Risk of unauthorized operations or information disclosure.
CVE-2026-5879 Vulnerability in google (CVE-2026-5879)
vulnerability in google (CVE-2026-5879). Successful exploitation can lead to full system takeover.
CVE-2026-39410 Vulnerability in hono (CVE-2026-39410)
vulnerability in hono (CVE-2026-39410). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.12.12` or later.
CVE-2025-48651 Vulnerability in google (CVE-2025-48651)
vulnerability in google (CVE-2025-48651). Confidential information can be exposed externally.
CVE-2025-57834 Vulnerability in dos (CVE-2025-57834)
vulnerability in dos (CVE-2025-57834). Risk of unauthorized operations or information disclosure.
CVE-2026-5536 Vulnerability in deserialization (CVE-2026-5536)
vulnerability in deserialization (CVE-2026-5536). Risk of unauthorized operations or information disclosure.
CVE-2026-34773 Vulnerability in electronjs (CVE-2026-34773)
vulnerability in electronjs (CVE-2026-34773). Data can be tampered with by attackers.
CVE-2026-34980 Vulnerability in openprinting (CVE-2026-34980)
vulnerability in openprinting (CVE-2026-34980). Successful exploitation can lead to full system takeover.
CVE-2026-28797 Vulnerability in infiniflow (CVE-2026-28797)
vulnerability in infiniflow (CVE-2026-28797). Successful exploitation can lead to full system takeover.
CVE-2020-37216 Vulnerability in dos (CVE-2020-37216)
vulnerability in dos (CVE-2020-37216). Risk of unauthorized operations or information disclosure.
CVE-2026-5473 Vulnerability in deserialization (CVE-2026-5473)
vulnerability in deserialization (CVE-2026-5473). Risk of unauthorized operations or information disclosure.
CVE-2026-34760 Vulnerability in vllm (CVE-2026-34760)
vulnerability in vllm (CVE-2026-34760). Data can be tampered with by attackers. Exploitable via ``numpy.mean``. Mitigation: upgrade to `0.18.0` or later.
CVE-2026-34762 Vulnerability in github.com/ellanetworks/core (CVE-2026-34762)
vulnerability in github.com/ellanetworks/core (CVE-2026-34762). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/v1/subscriber/{imsi}`. Mitigation: upgrade to `1.8.0` or later.
CVE-2026-35038 Vulnerability in signalk (CVE-2026-35038)
vulnerability in signalk (CVE-2026-35038). Confidential information can be exposed externally. Exploitable via ``from``.
CVE-2026-20097 Vulnerability in cisco (CVE-2026-20097)
vulnerability in cisco (CVE-2026-20097). Confidential information can be exposed externally.
CVE-2026-34442 Vulnerability in laravel (CVE-2026-34442)
vulnerability in laravel (CVE-2026-34442). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
CVE-2026-3470 Vulnerability in sonicwall (CVE-2026-3470)
vulnerability in sonicwall (CVE-2026-3470). Risk of unauthorized operations or information disclosure.
CVE-2026-3469 Vulnerability in dos (CVE-2026-3469)
vulnerability in dos (CVE-2026-3469). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →