Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-41654 |
|
Vulnerability in weblate (CVE-2026-41654)
vulnerability in weblate (CVE-2026-41654). Confidential information can be exposed externally. Exploitable via ``project.add``. Mitigation: upgrade to `5.17.1` or later.
|
| CVE-2025-14576 |
|
Vulnerability in dos (CVE-2025-14576)
vulnerability in dos (CVE-2025-14576). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7360 |
|
Vulnerability in google (CVE-2026-7360)
vulnerability in google (CVE-2026-7360). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7345 |
|
Vulnerability in google (CVE-2026-7345)
vulnerability in google (CVE-2026-7345). Successful exploitation can lead to full system takeover.
|
| CVE-2024-54011 |
|
Vulnerability in hanwhavision (CVE-2024-54011)
vulnerability in hanwhavision (CVE-2024-54011). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40068 |
|
Vulnerability in @anthropic-ai/claude-code (CVE-2026-40068)
vulnerability in @anthropic-ai/claude-code (CVE-2026-40068). Successful exploitation can lead to full system takeover. Exploitable via ``commondir``. Mitigation: upgrade to `2.1.84` or later.
|
| CVE-2026-40466 |
|
Vulnerability in org.apache.activemq:apache-activemq (CVE-2026-40466)
vulnerability in org.apache.activemq:apache-activemq (CVE-2026-40466). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.2.5` or later.
|
| CVE-2026-41044 |
|
Vulnerability in org.apache.activemq:apache-activemq (CVE-2026-41044)
vulnerability in org.apache.activemq:apache-activemq (CVE-2026-41044). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.2.5` or later.
|
| CVE-2026-31192 |
|
Vulnerability in raindrop (CVE-2026-31192)
vulnerability in raindrop (CVE-2026-31192). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13826 |
|
Vulnerability in dos (CVE-2025-13826)
vulnerability in dos (CVE-2025-13826). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33436 |
|
Vulnerability in stirlingpdf (CVE-2026-33436)
vulnerability in stirlingpdf (CVE-2026-33436). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-21733 |
|
Vulnerability in imaginationtech (CVE-2026-21733)
vulnerability in imaginationtech (CVE-2026-21733). Confidential information can be exposed externally.
|
| CVE-2026-34197 KEV |
|
[KEV] Vulnerability in Apache activemq (CVE-2026-34197)
vulnerability in Apache activemq (CVE-2026-34197). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-40176 |
|
Vulnerability in composer/composer (CVE-2026-40176)
vulnerability in composer/composer (CVE-2026-40176). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.2.27` or later.
|
| CVE-2026-40261 |
|
Vulnerability in composer/composer (CVE-2026-40261)
vulnerability in composer/composer (CVE-2026-40261). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.2.27` or later.
|
| CVE-2026-6328 |
|
Vulnerability in CVE-2026-6328 (CVE-2026-6328)
vulnerability in CVE-2026-6328 (CVE-2026-6328). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39399 |
|
Vulnerability in CVE-2026-39399 (CVE-2026-39399)
vulnerability in CVE-2026-39399 (CVE-2026-39399). Data can be tampered with by attackers.
|
| CVE-2026-35031 |
|
Vulnerability in path-traversal (CVE-2026-35031)
vulnerability in path-traversal (CVE-2026-35031). Successful exploitation can lead to full system takeover. Exploitable via `POST /Videos/{itemId}/Subtitles`.
|
| CVE-2026-27299 |
|
Vulnerability in adobe (CVE-2026-27299)
vulnerability in adobe (CVE-2026-27299). Confidential information can be exposed externally.
|
| CVE-2026-27306 |
|
Vulnerability in adobe (CVE-2026-27306)
vulnerability in adobe (CVE-2026-27306). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27304 |
|
Vulnerability in adobe (CVE-2026-27304)
vulnerability in adobe (CVE-2026-27304). Confidential information can be exposed externally.
|
| CVE-2026-27282 |
|
Vulnerability in adobe (CVE-2026-27282)
vulnerability in adobe (CVE-2026-27282). Data can be tampered with by attackers.
|
| CVE-2026-24893 |
|
Vulnerability in it-novum (CVE-2026-24893)
vulnerability in it-novum (CVE-2026-24893). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33826 |
|
Vulnerability in microsoft (CVE-2026-33826)
vulnerability in microsoft (CVE-2026-33826). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33116 |
|
Vulnerability in dotnet-sdk (CVE-2026-33116)
vulnerability in dotnet-sdk (CVE-2026-33116). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.26, 9.0.15, 10.0.6` or later.
|
| CVE-2026-32203 |
|
Vulnerability in System.Security.Cryptography.Xml (CVE-2026-32203)
vulnerability in System.Security.Cryptography.Xml (CVE-2026-32203). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.3` or later.
|
| CVE-2026-32201 KEV |
|
[KEV] Vulnerability in Microsoft sharepoint-server (CVE-2026-32201)
vulnerability in Microsoft sharepoint-server (CVE-2026-32201). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2012-1854 KEV |
|
[KEV] Vulnerability in Microsoft visual-basic-for-applications-vba (CVE-2012-1854)
vulnerability in Microsoft visual-basic-for-applications-vba (CVE-2012-1854). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-5915 |
|
Vulnerability in google (CVE-2026-5915)
vulnerability in google (CVE-2026-5915). Data can be tampered with by attackers.
|
| CVE-2026-5919 |
|
Vulnerability in c (CVE-2026-5919)
vulnerability in c (CVE-2026-5919). Data can be tampered with by attackers.
|
| CVE-2026-5884 |
|
Vulnerability in google (CVE-2026-5884)
vulnerability in google (CVE-2026-5884). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5885 |
|
Vulnerability in c (CVE-2026-5885)
vulnerability in c (CVE-2026-5885). Confidential information can be exposed externally.
|
| CVE-2026-5887 |
|
Vulnerability in google (CVE-2026-5887)
vulnerability in google (CVE-2026-5887). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5879 |
|
Vulnerability in google (CVE-2026-5879)
vulnerability in google (CVE-2026-5879). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39410 |
|
Vulnerability in hono (CVE-2026-39410)
vulnerability in hono (CVE-2026-39410). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.12.12` or later.
|
| CVE-2025-48651 |
|
Vulnerability in google (CVE-2025-48651)
vulnerability in google (CVE-2025-48651). Confidential information can be exposed externally.
|
| CVE-2025-57834 |
|
Vulnerability in dos (CVE-2025-57834)
vulnerability in dos (CVE-2025-57834). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5536 |
|
Vulnerability in deserialization (CVE-2026-5536)
vulnerability in deserialization (CVE-2026-5536). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34773 |
|
Vulnerability in electronjs (CVE-2026-34773)
vulnerability in electronjs (CVE-2026-34773). Data can be tampered with by attackers.
|
| CVE-2026-34980 |
|
Vulnerability in openprinting (CVE-2026-34980)
vulnerability in openprinting (CVE-2026-34980). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28797 |
|
Vulnerability in infiniflow (CVE-2026-28797)
vulnerability in infiniflow (CVE-2026-28797). Successful exploitation can lead to full system takeover.
|
| CVE-2020-37216 |
|
Vulnerability in dos (CVE-2020-37216)
vulnerability in dos (CVE-2020-37216). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5473 |
|
Vulnerability in deserialization (CVE-2026-5473)
vulnerability in deserialization (CVE-2026-5473). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34760 |
|
Vulnerability in vllm (CVE-2026-34760)
vulnerability in vllm (CVE-2026-34760). Data can be tampered with by attackers. Exploitable via ``numpy.mean``. Mitigation: upgrade to `0.18.0` or later.
|
| CVE-2026-34762 |
|
Vulnerability in github.com/ellanetworks/core (CVE-2026-34762)
vulnerability in github.com/ellanetworks/core (CVE-2026-34762). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/v1/subscriber/{imsi}`. Mitigation: upgrade to `1.8.0` or later.
|
| CVE-2026-35038 |
|
Vulnerability in signalk (CVE-2026-35038)
vulnerability in signalk (CVE-2026-35038). Confidential information can be exposed externally. Exploitable via ``from``.
|
| CVE-2026-20097 |
|
Vulnerability in cisco (CVE-2026-20097)
vulnerability in cisco (CVE-2026-20097). Confidential information can be exposed externally.
|
| CVE-2026-34442 |
|
Vulnerability in laravel (CVE-2026-34442)
vulnerability in laravel (CVE-2026-34442). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
|
| CVE-2026-3470 |
|
Vulnerability in sonicwall (CVE-2026-3470)
vulnerability in sonicwall (CVE-2026-3470). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3469 |
|
Vulnerability in dos (CVE-2026-3469)
vulnerability in dos (CVE-2026-3469). Risk of unauthorized operations or information disclosure.
|