Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-45208 |
|
A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker...
A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker...
|
| CVE-2025-71215 |
|
Vulnerability in trendmicro (CVE-2025-71215)
vulnerability in trendmicro (CVE-2025-71215). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71216 |
|
Vulnerability in trendmicro (CVE-2025-71216)
vulnerability in trendmicro (CVE-2025-71216). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7837 |
|
Vulnerability in CVE-2026-7837 (CVE-2026-7837)
vulnerability in CVE-2026-7837 (CVE-2026-7837). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45804 |
|
Vulnerability in diffusers (CVE-2026-45804)
vulnerability in diffusers (CVE-2026-45804). Successful exploitation can lead to full system takeover. Exploitable via ``diffusers``. Mitigation: upgrade to `0.38.0` or later.
|
| CVE-2026-5947 |
|
Vulnerability in isc (CVE-2026-5947)
vulnerability in isc (CVE-2026-5947). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-29518 |
|
Vulnerability in privilege-escalation (CVE-2026-29518)
vulnerability in privilege-escalation (CVE-2026-29518). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43619 |
|
Vulnerability in samba (CVE-2026-43619)
vulnerability in samba (CVE-2026-43619). Confidential information can be exposed externally.
|
| CVE-2026-42306 |
|
Vulnerability in github.com/docker/docker (CVE-2026-42306)
vulnerability in github.com/docker/docker (CVE-2026-42306). Data can be tampered with by attackers. Exploitable via `PUT /containers/{id}/archive`. Mitigation: upgrade to `2.0.0-beta.14` or later.
|
| CVE-2026-41568 |
|
Vulnerability in github.com/docker/docker (CVE-2026-41568)
vulnerability in github.com/docker/docker (CVE-2026-41568). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /containers/{id}/archive`. Mitigation: upgrade to `2.0.0-beta.14` or later.
|
| CVE-2026-45619 |
|
Vulnerability in WWBN/AVideo (CVE-2026-45619)
vulnerability in WWBN/AVideo (CVE-2026-45619). Confidential information can be exposed externally. Exploitable via ``EpgParser.php``.
|
| CVE-2026-41702 |
|
VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an...
VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an...
|
| CVE-2025-52532 |
|
Vulnerability in CVE-2025-52532 (CVE-2025-52532)
vulnerability in CVE-2025-52532 (CVE-2025-52532). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-23826 |
|
Vulnerability in CVE-2022-23826 (CVE-2022-23826)
vulnerability in CVE-2022-23826 (CVE-2022-23826). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42592 |
|
Vulnerability in github.com/gotenberg/gotenberg/v8 (CVE-2026-42592)
vulnerability in github.com/gotenberg/gotenberg/v8 (CVE-2026-42592). Risk of unauthorized operations or information disclosure. Exploitable via ``FilterOutboundURL``.
|
| CVE-2026-41051 |
|
Vulnerability in CVE-2026-41051 (CVE-2026-41051)
vulnerability in CVE-2026-41051 (CVE-2026-41051). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35418 |
|
Vulnerability in microsoft (CVE-2026-35418)
vulnerability in microsoft (CVE-2026-35418). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42344 |
|
Vulnerability in CVE-2026-42344 (CVE-2026-42344)
vulnerability in CVE-2026-42344 (CVE-2026-42344). Confidential information can be exposed externally.
|
| CVE-2026-44694 |
|
Vulnerability in n8n-mcp (CVE-2026-44694)
vulnerability in n8n-mcp (CVE-2026-44694). Confidential information can be exposed externally. Exploitable via ``N8N_API_URL``. Mitigation: upgrade to `2.50.2` or later.
|
| CVE-2026-34354 |
|
Vulnerability in privilege-escalation (CVE-2026-34354)
vulnerability in privilege-escalation (CVE-2026-34354). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69233 |
|
Vulnerability in apache (CVE-2025-69233)
vulnerability in apache (CVE-2025-69233). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-26522 |
|
Vulnerability in dos (CVE-2022-26522)
vulnerability in dos (CVE-2022-26522). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41002 |
|
Vulnerability in org.springframework.cloud:spring-cloud-config-server (CVE-2026-41002)
vulnerability in org.springframework.cloud:spring-cloud-config-server (CVE-2026-41002). Confidential information can be exposed externally. Exploitable via ``spring.cloud.config.server.git.basedir``.
|
| CVE-2026-34596 |
|
Vulnerability in sandboxie-plus (CVE-2026-34596)
vulnerability in sandboxie-plus (CVE-2026-34596). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7846 |
|
Vulnerability in langchain-chatchat (CVE-2026-7846)
vulnerability in langchain-chatchat (CVE-2026-7846). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6180 |
|
Vulnerability in papercut (CVE-2026-6180)
vulnerability in papercut (CVE-2026-6180). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44113 |
|
Vulnerability in openclaw (CVE-2026-44113)
vulnerability in openclaw (CVE-2026-44113). Confidential information can be exposed externally. Mitigation: upgrade to `2026.4.22` or later.
|
| CVE-2026-44112 |
|
Vulnerability in openclaw (CVE-2026-44112)
vulnerability in openclaw (CVE-2026-44112). Data can be tampered with by attackers. Mitigation: upgrade to `2026.4.22` or later.
|
| CVE-2026-37531 |
|
Path Traversal in c (CVE-2026-37531)
path traversal in c (CVE-2026-37531). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41651 |
|
Vulnerability in c (CVE-2026-41651)
vulnerability in c (CVE-2026-41651). Successful exploitation can lead to full system takeover. Exploitable via ``RUNNING``.
|
| CVE-2026-5958 |
|
Vulnerability in CVE-2026-5958 (CVE-2026-5958)
vulnerability in CVE-2026-5958 (CVE-2026-5958). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4878 |
|
Vulnerability in privilege-escalation (CVE-2026-4878)
vulnerability in privilege-escalation (CVE-2026-4878). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27456 |
|
Vulnerability in kernel (CVE-2026-27456)
vulnerability in kernel (CVE-2026-27456). Confidential information can be exposed externally.
|
| CVE-2026-30332 |
|
Vulnerability in CVE-2026-30332 (CVE-2026-30332)
vulnerability in CVE-2026-30332 (CVE-2026-30332). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34452 |
|
Vulnerability in anthropic (CVE-2026-34452)
vulnerability in anthropic (CVE-2026-34452). Confidential information can be exposed externally.
|
| CVE-2026-34224 |
|
Vulnerability in parseplatform (CVE-2026-34224)
vulnerability in parseplatform (CVE-2026-34224). Data can be tampered with by attackers.
|
| CVE-2026-32988 |
|
Vulnerability in openclaw (CVE-2026-32988)
vulnerability in openclaw (CVE-2026-32988). Data can be tampered with by attackers.
|
| CVE-2026-32977 |
|
Vulnerability in openclaw (CVE-2026-32977)
vulnerability in openclaw (CVE-2026-32977). Data can be tampered with by attackers.
|
| CVE-2026-32921 |
|
Vulnerability in openclaw (CVE-2026-32921)
vulnerability in openclaw (CVE-2026-32921). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-26017 |
|
Vulnerability in corednsio (CVE-2026-26017)
vulnerability in corednsio (CVE-2026-26017). Confidential information can be exposed externally.
|
| CVE-2026-21725 |
|
Vulnerability in grafana (CVE-2026-21725)
vulnerability in grafana (CVE-2026-21725). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20677 |
|
Vulnerability in apple (CVE-2026-20677)
vulnerability in apple (CVE-2026-20677). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25536 |
|
Vulnerability in lfprojects (CVE-2026-25536)
vulnerability in lfprojects (CVE-2026-25536). Confidential information can be exposed externally.
|
| CVE-2026-23950 |
|
Vulnerability in isaacs (CVE-2026-23950)
vulnerability in isaacs (CVE-2026-23950). Data can be tampered with by attackers. Exploitable via ``PathReservations``.
|
| CVE-2026-20831 |
|
Vulnerability in microsoft (CVE-2026-20831)
vulnerability in microsoft (CVE-2026-20831). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20816 |
|
Vulnerability in microsoft (CVE-2026-20816)
vulnerability in microsoft (CVE-2026-20816). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20809 |
|
Vulnerability in microsoft (CVE-2026-20809)
vulnerability in microsoft (CVE-2026-20809). Successful exploitation can lead to full system takeover.
|
| CVE-2025-34290 |
|
Vulnerability in c (CVE-2025-34290)
vulnerability in c (CVE-2025-34290). Successful exploitation can lead to full system takeover.
|
| CVE-2025-39713 |
|
Vulnerability in linux (CVE-2025-39713)
vulnerability in linux (CVE-2025-39713). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-38352 KEV |
|
[KEV] Vulnerability in Linux kernel (CVE-2025-38352)
vulnerability in Linux kernel (CVE-2025-38352). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|