Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-34383 |
|
Vulnerability in csrf (CVE-2026-34383)
vulnerability in csrf (CVE-2026-34383). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-14213 |
|
Vulnerability in CVE-2025-14213 (CVE-2025-14213)
vulnerability in CVE-2025-14213 (CVE-2025-14213). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-21712 |
|
Vulnerability in nodejs (CVE-2026-21712)
vulnerability in nodejs (CVE-2026-21712). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33894 |
|
Vulnerability in digitalbazaar (CVE-2026-33894)
vulnerability in digitalbazaar (CVE-2026-33894). Data can be tampered with by attackers.
|
| CVE-2026-33758 |
|
Vulnerability in openbao (CVE-2026-33758)
vulnerability in openbao (CVE-2026-33758). Risk of unauthorized operations or information disclosure. Exploitable via ``error_description``.
|
| CVE-2025-59032 |
|
Vulnerability in dovecot (CVE-2025-59032)
vulnerability in dovecot (CVE-2025-59032). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33218 |
|
Vulnerability in nats (CVE-2026-33218)
vulnerability in nats (CVE-2026-33218). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.11.15, 2.12.6` or later.
|
| CVE-2026-4438 |
|
Vulnerability in c (CVE-2026-4438)
vulnerability in c (CVE-2026-4438). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4519 |
|
Vulnerability in CVE-2026-4519 (CVE-2026-4519)
vulnerability in CVE-2026-4519 (CVE-2026-4519). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4342 |
|
Vulnerability in nginx (CVE-2026-4342)
vulnerability in nginx (CVE-2026-4342). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3644 |
|
Vulnerability in CVE-2026-3644 (CVE-2026-3644)
vulnerability in CVE-2026-3644 (CVE-2026-3644). Data can be tampered with by attackers.
|
| CVE-2025-13462 |
|
Vulnerability in CVE-2025-13462 (CVE-2025-13462)
vulnerability in CVE-2025-13462 (CVE-2025-13462). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-30901 |
|
Vulnerability in zoom (CVE-2026-30901)
vulnerability in zoom (CVE-2026-30901). Successful exploitation can lead to full system takeover.
|
| CVE-2026-21310 |
|
Vulnerability in adobe (CVE-2026-21310)
vulnerability in adobe (CVE-2026-21310). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-21282 |
|
Vulnerability in adobe (CVE-2026-21282)
vulnerability in adobe (CVE-2026-21282). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20020 |
|
Vulnerability in dos (CVE-2026-20020)
vulnerability in dos (CVE-2026-20020). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2590 |
|
Vulnerability in devolutions (CVE-2026-2590)
vulnerability in devolutions (CVE-2026-2590). Successful exploitation can lead to full system takeover.
|
| CVE-2026-2880 |
|
Vulnerability in fastify (CVE-2026-2880)
vulnerability in fastify (CVE-2026-2880). Confidential information can be exposed externally.
|
| CVE-2026-27959 |
|
Vulnerability in koajs (CVE-2026-27959)
vulnerability in koajs (CVE-2026-27959). Data can be tampered with by attackers. Exploitable via `Host header`.
|
| CVE-2026-27623 |
|
Vulnerability in valkey (CVE-2026-27623)
vulnerability in valkey (CVE-2026-27623). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.0.3` or later.
|
| CVE-2026-24734 |
|
Vulnerability in apache (CVE-2026-24734)
vulnerability in apache (CVE-2026-24734). Data can be tampered with by attackers.
|
| CVE-2026-20627 |
|
Vulnerability in apple (CVE-2026-20627)
vulnerability in apple (CVE-2026-20627). Confidential information can be exposed externally.
|
| CVE-2026-21229 |
|
Improper input validation in Power BI allows an authorized attacker to execute code over a network.
Improper input validation in Power BI allows an authorized attacker to execute code over a network.
|
| CVE-2025-12131 |
|
A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service.
A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service.
|
| CVE-2024-4027 |
|
Vulnerability in dos (CVE-2024-4027)
vulnerability in dos (CVE-2024-4027). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0976 |
|
Vulnerability in CVE-2026-0976 (CVE-2026-0976)
vulnerability in CVE-2026-0976 (CVE-2026-0976). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-65397 |
|
Vulnerability in blurams (CVE-2025-65397)
vulnerability in blurams (CVE-2025-65397). Successful exploitation can lead to full system takeover.
|
| CVE-2026-21272 |
|
Vulnerability in adobe (CVE-2026-21272)
vulnerability in adobe (CVE-2026-21272). Successful exploitation can lead to full system takeover.
|
| CVE-2026-21271 |
|
Vulnerability in adobe (CVE-2026-21271)
vulnerability in adobe (CVE-2026-21271). Successful exploitation can lead to full system takeover.
|
| CVE-2026-21268 |
|
Vulnerability in adobe (CVE-2026-21268)
vulnerability in adobe (CVE-2026-21268). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20856 |
|
Vulnerability in microsoft (CVE-2026-20856)
vulnerability in microsoft (CVE-2026-20856). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20812 |
|
Vulnerability in microsoft (CVE-2026-20812)
vulnerability in microsoft (CVE-2026-20812). Data can be tampered with by attackers.
|
| CVE-2026-0878 |
|
Vulnerability in mozilla (CVE-2026-0878)
vulnerability in mozilla (CVE-2026-0878). Confidential information can be exposed externally.
|
| CVE-2025-12543 |
|
Vulnerability in redhat (CVE-2025-12543)
vulnerability in redhat (CVE-2025-12543). Confidential information can be exposed externally. Exploitable via `Host header`.
|
| CVE-2025-20393 KEV |
|
[KEV] Vulnerability in Cisco multiple-products (CVE-2025-20393)
vulnerability in Cisco multiple-products (CVE-2025-20393). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-64666 |
|
Vulnerability in microsoft (CVE-2025-64666)
vulnerability in microsoft (CVE-2025-64666). Successful exploitation can lead to full system takeover.
|
| CVE-2025-12945 |
|
Vulnerability in netgear (CVE-2025-12945)
vulnerability in netgear (CVE-2025-12945). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-48612 |
|
Vulnerability in google (CVE-2025-48612)
vulnerability in google (CVE-2025-48612). Successful exploitation can lead to full system takeover.
|
| CVE-2024-3884 |
|
Vulnerability in dos (CVE-2024-3884)
vulnerability in dos (CVE-2024-3884). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-63397 |
|
Vulnerability in oneflow (CVE-2025-63397)
vulnerability in oneflow (CVE-2025-63397). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-54236 KEV |
|
[KEV] Vulnerability in Adobe commerce (CVE-2025-54236)
vulnerability in Adobe commerce (CVE-2025-54236). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2025-59248 |
|
Vulnerability in microsoft (CVE-2025-59248)
vulnerability in microsoft (CVE-2025-59248). Confidential information can be exposed externally.
|
| CVE-2025-60787 |
|
Vulnerability in motioneye (CVE-2025-60787)
vulnerability in motioneye (CVE-2025-60787). Successful exploitation can lead to full system takeover. Exploitable via ``image_file_name``. Mitigation: upgrade to `0.43.1b5` or later.
|
| CVE-2025-11226 |
|
Vulnerability in spring (CVE-2025-11226)
vulnerability in spring (CVE-2025-11226). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-34161 |
|
Vulnerability in coollabs (CVE-2025-34161)
vulnerability in coollabs (CVE-2025-34161). Successful exploitation can lead to full system takeover.
|
| CVE-2025-34159 |
|
Vulnerability in coollabs (CVE-2025-34159)
vulnerability in coollabs (CVE-2025-34159). Successful exploitation can lead to full system takeover.
|
| CVE-2025-34157 |
|
Vulnerability in coollabs (CVE-2025-34157)
vulnerability in coollabs (CVE-2025-34157). Successful exploitation can lead to full system takeover.
|
| CVE-2025-50674 |
|
Vulnerability in openmediavault (CVE-2025-50674)
vulnerability in openmediavault (CVE-2025-50674). Successful exploitation can lead to full system takeover.
|
| CVE-2025-25005 |
|
Vulnerability in microsoft (CVE-2025-25005)
vulnerability in microsoft (CVE-2025-25005). Confidential information can be exposed externally.
|
| CVE-2025-50492 |
|
Vulnerability in phpgurukul (CVE-2025-50492)
vulnerability in phpgurukul (CVE-2025-50492). Risk of unauthorized operations or information disclosure.
|