Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-20 Clear
ID Title
CVE-2026-34383 Vulnerability in csrf (CVE-2026-34383)
vulnerability in csrf (CVE-2026-34383). Risk of unauthorized operations or information disclosure.
CVE-2025-14213 Vulnerability in CVE-2025-14213 (CVE-2025-14213)
vulnerability in CVE-2025-14213 (CVE-2025-14213). Risk of unauthorized operations or information disclosure.
CVE-2026-21712 Vulnerability in nodejs (CVE-2026-21712)
vulnerability in nodejs (CVE-2026-21712). Risk of unauthorized operations or information disclosure.
CVE-2026-33894 Vulnerability in digitalbazaar (CVE-2026-33894)
vulnerability in digitalbazaar (CVE-2026-33894). Data can be tampered with by attackers.
CVE-2026-33758 Vulnerability in openbao (CVE-2026-33758)
vulnerability in openbao (CVE-2026-33758). Risk of unauthorized operations or information disclosure. Exploitable via ``error_description``.
CVE-2025-59032 Vulnerability in dovecot (CVE-2025-59032)
vulnerability in dovecot (CVE-2025-59032). Risk of unauthorized operations or information disclosure.
CVE-2026-33218 Vulnerability in nats (CVE-2026-33218)
vulnerability in nats (CVE-2026-33218). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.11.15, 2.12.6` or later.
CVE-2026-4438 Vulnerability in c (CVE-2026-4438)
vulnerability in c (CVE-2026-4438). Risk of unauthorized operations or information disclosure.
CVE-2026-4519 Vulnerability in CVE-2026-4519 (CVE-2026-4519)
vulnerability in CVE-2026-4519 (CVE-2026-4519). Risk of unauthorized operations or information disclosure.
CVE-2026-4342 Vulnerability in nginx (CVE-2026-4342)
vulnerability in nginx (CVE-2026-4342). Successful exploitation can lead to full system takeover.
CVE-2026-3644 Vulnerability in CVE-2026-3644 (CVE-2026-3644)
vulnerability in CVE-2026-3644 (CVE-2026-3644). Data can be tampered with by attackers.
CVE-2025-13462 Vulnerability in CVE-2025-13462 (CVE-2025-13462)
vulnerability in CVE-2025-13462 (CVE-2025-13462). Risk of unauthorized operations or information disclosure.
CVE-2026-30901 Vulnerability in zoom (CVE-2026-30901)
vulnerability in zoom (CVE-2026-30901). Successful exploitation can lead to full system takeover.
CVE-2026-21310 Vulnerability in adobe (CVE-2026-21310)
vulnerability in adobe (CVE-2026-21310). Risk of unauthorized operations or information disclosure.
CVE-2026-21282 Vulnerability in adobe (CVE-2026-21282)
vulnerability in adobe (CVE-2026-21282). Risk of unauthorized operations or information disclosure.
CVE-2026-20020 Vulnerability in dos (CVE-2026-20020)
vulnerability in dos (CVE-2026-20020). Risk of unauthorized operations or information disclosure.
CVE-2026-2590 Vulnerability in devolutions (CVE-2026-2590)
vulnerability in devolutions (CVE-2026-2590). Successful exploitation can lead to full system takeover.
CVE-2026-2880 Vulnerability in fastify (CVE-2026-2880)
vulnerability in fastify (CVE-2026-2880). Confidential information can be exposed externally.
CVE-2026-27959 Vulnerability in koajs (CVE-2026-27959)
vulnerability in koajs (CVE-2026-27959). Data can be tampered with by attackers. Exploitable via `Host header`.
CVE-2026-27623 Vulnerability in valkey (CVE-2026-27623)
vulnerability in valkey (CVE-2026-27623). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.0.3` or later.
CVE-2026-24734 Vulnerability in apache (CVE-2026-24734)
vulnerability in apache (CVE-2026-24734). Data can be tampered with by attackers.
CVE-2026-20627 Vulnerability in apple (CVE-2026-20627)
vulnerability in apple (CVE-2026-20627). Confidential information can be exposed externally.
CVE-2026-21229 Improper input validation in Power BI allows an authorized attacker to execute code over a network.
Improper input validation in Power BI allows an authorized attacker to execute code over a network.
CVE-2025-12131 A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service.
A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service.
CVE-2024-4027 Vulnerability in dos (CVE-2024-4027)
vulnerability in dos (CVE-2024-4027). Risk of unauthorized operations or information disclosure.
CVE-2026-0976 Vulnerability in CVE-2026-0976 (CVE-2026-0976)
vulnerability in CVE-2026-0976 (CVE-2026-0976). Risk of unauthorized operations or information disclosure.
CVE-2025-65397 Vulnerability in blurams (CVE-2025-65397)
vulnerability in blurams (CVE-2025-65397). Successful exploitation can lead to full system takeover.
CVE-2026-21272 Vulnerability in adobe (CVE-2026-21272)
vulnerability in adobe (CVE-2026-21272). Successful exploitation can lead to full system takeover.
CVE-2026-21271 Vulnerability in adobe (CVE-2026-21271)
vulnerability in adobe (CVE-2026-21271). Successful exploitation can lead to full system takeover.
CVE-2026-21268 Vulnerability in adobe (CVE-2026-21268)
vulnerability in adobe (CVE-2026-21268). Successful exploitation can lead to full system takeover.
CVE-2026-20856 Vulnerability in microsoft (CVE-2026-20856)
vulnerability in microsoft (CVE-2026-20856). Successful exploitation can lead to full system takeover.
CVE-2026-20812 Vulnerability in microsoft (CVE-2026-20812)
vulnerability in microsoft (CVE-2026-20812). Data can be tampered with by attackers.
CVE-2026-0878 Vulnerability in mozilla (CVE-2026-0878)
vulnerability in mozilla (CVE-2026-0878). Confidential information can be exposed externally.
CVE-2025-12543 Vulnerability in redhat (CVE-2025-12543)
vulnerability in redhat (CVE-2025-12543). Confidential information can be exposed externally. Exploitable via `Host header`.
CVE-2025-20393 KEV [KEV] Vulnerability in Cisco multiple-products (CVE-2025-20393)
vulnerability in Cisco multiple-products (CVE-2025-20393). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-64666 Vulnerability in microsoft (CVE-2025-64666)
vulnerability in microsoft (CVE-2025-64666). Successful exploitation can lead to full system takeover.
CVE-2025-12945 Vulnerability in netgear (CVE-2025-12945)
vulnerability in netgear (CVE-2025-12945). Risk of unauthorized operations or information disclosure.
CVE-2025-48612 Vulnerability in google (CVE-2025-48612)
vulnerability in google (CVE-2025-48612). Successful exploitation can lead to full system takeover.
CVE-2024-3884 Vulnerability in dos (CVE-2024-3884)
vulnerability in dos (CVE-2024-3884). Risk of unauthorized operations or information disclosure.
CVE-2025-63397 Vulnerability in oneflow (CVE-2025-63397)
vulnerability in oneflow (CVE-2025-63397). Risk of unauthorized operations or information disclosure.
CVE-2025-54236 KEV [KEV] Vulnerability in Adobe commerce (CVE-2025-54236)
vulnerability in Adobe commerce (CVE-2025-54236). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2025-59248 Vulnerability in microsoft (CVE-2025-59248)
vulnerability in microsoft (CVE-2025-59248). Confidential information can be exposed externally.
CVE-2025-60787 Vulnerability in motioneye (CVE-2025-60787)
vulnerability in motioneye (CVE-2025-60787). Successful exploitation can lead to full system takeover. Exploitable via ``image_file_name``. Mitigation: upgrade to `0.43.1b5` or later.
CVE-2025-11226 Vulnerability in spring (CVE-2025-11226)
vulnerability in spring (CVE-2025-11226). Risk of unauthorized operations or information disclosure.
CVE-2025-34161 Vulnerability in coollabs (CVE-2025-34161)
vulnerability in coollabs (CVE-2025-34161). Successful exploitation can lead to full system takeover.
CVE-2025-34159 Vulnerability in coollabs (CVE-2025-34159)
vulnerability in coollabs (CVE-2025-34159). Successful exploitation can lead to full system takeover.
CVE-2025-34157 Vulnerability in coollabs (CVE-2025-34157)
vulnerability in coollabs (CVE-2025-34157). Successful exploitation can lead to full system takeover.
CVE-2025-50674 Vulnerability in openmediavault (CVE-2025-50674)
vulnerability in openmediavault (CVE-2025-50674). Successful exploitation can lead to full system takeover.
CVE-2025-25005 Vulnerability in microsoft (CVE-2025-25005)
vulnerability in microsoft (CVE-2025-25005). Confidential information can be exposed externally.
CVE-2025-50492 Vulnerability in phpgurukul (CVE-2025-50492)
vulnerability in phpgurukul (CVE-2025-50492). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →