Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-12212 |
|
Vulnerability in CVE-2026-12212 (CVE-2026-12212)
vulnerability in CVE-2026-12212 (CVE-2026-12212). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12203 |
|
Information Disclosure in CVE-2026-12203 (CVE-2026-12203)
vulnerability in CVE-2026-12203 (CVE-2026-12203). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53520 |
|
Vulnerability in github.com/nezhahq/nezha (CVE-2026-53520)
vulnerability in github.com/nezhahq/nezha (CVE-2026-53520). Risk of unauthorized operations or information disclosure. Exploitable via ``domain``. Mitigation: upgrade to `2.1.0` or later.
|
| CVE-2026-44783 |
|
Vulnerability in discourse (CVE-2026-44783)
vulnerability in discourse (CVE-2026-44783). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.1.4, 2026.3.1, 2026.4.1` or later.
|
| CVE-2026-53982 |
|
Vulnerability in CVE-2026-53982 (CVE-2026-53982)
vulnerability in CVE-2026-53982 (CVE-2026-53982). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47182 |
|
Vulnerability in CVE-2026-47182 (CVE-2026-47182)
vulnerability in CVE-2026-47182 (CVE-2026-47182). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44976 |
|
Vulnerability in CVE-2026-44976 (CVE-2026-44976)
vulnerability in CVE-2026-44976 (CVE-2026-44976). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44208 |
|
Vulnerability in CVE-2026-44208 (CVE-2026-44208)
vulnerability in CVE-2026-44208 (CVE-2026-44208). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48610 |
|
Vulnerability in CVE-2026-48610 (CVE-2026-48610)
vulnerability in CVE-2026-48610 (CVE-2026-48610). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47366 |
|
Vulnerability in privilege-escalation (CVE-2026-47366)
vulnerability in privilege-escalation (CVE-2026-47366). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45178 |
|
Vulnerability in dos (CVE-2026-45178)
vulnerability in dos (CVE-2026-45178). Confidential information can be exposed externally.
|
| CVE-2026-45177 |
|
Vulnerability in paloaltonetworks (CVE-2026-45177)
vulnerability in paloaltonetworks (CVE-2026-45177). Confidential information can be exposed externally.
|
| CVE-2025-46308 |
|
Vulnerability in apple (CVE-2025-46308)
vulnerability in apple (CVE-2025-46308). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-46315 |
|
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
|
| CVE-2025-43339 |
|
Vulnerability in apple (CVE-2025-43339)
vulnerability in apple (CVE-2025-43339). Confidential information can be exposed externally.
|
| CVE-2025-24165 |
|
Vulnerability in apple (CVE-2025-24165)
vulnerability in apple (CVE-2025-24165). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41856 |
|
Vulnerability in org.springframework.graphql:spring-graphql (CVE-2026-41856)
vulnerability in org.springframework.graphql:spring-graphql (CVE-2026-41856). Confidential information can be exposed externally.
|
| CVE-2026-20259 |
|
Vulnerability in splunk (CVE-2026-20259)
vulnerability in splunk (CVE-2026-20259). Confidential information can be exposed externally. Exploitable via ``edit_saved_search_owner``.
|
| CVE-2026-50545 |
|
Privilege Escalation in github.com/fission/fission (CVE-2026-50545)
vulnerability in github.com/fission/fission (CVE-2026-50545). Successful exploitation can lead to full system takeover. Exploitable via ``Environment.spec.runtime.podSpec``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-50563 |
|
Privilege Escalation in github.com/fission/fission (CVE-2026-50563)
vulnerability in github.com/fission/fission (CVE-2026-50563). Successful exploitation can lead to full system takeover. Exploitable via ``Function.spec.podspec``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-50564 |
|
Privilege Escalation in github.com/fission/fission (CVE-2026-50564)
vulnerability in github.com/fission/fission (CVE-2026-50564). Successful exploitation can lead to full system takeover. Exploitable via ``Environment``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-49822 |
|
Vulnerability in github.com/fission/fission (CVE-2026-49822)
vulnerability in github.com/fission/fission (CVE-2026-49822). Confidential information can be exposed externally. Exploitable via ``KubernetesWatchTrigger``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-49823 |
|
Vulnerability in github.com/fission/fission (CVE-2026-49823)
vulnerability in github.com/fission/fission (CVE-2026-49823). Confidential information can be exposed externally. Exploitable via ``PackageRef.Namespace``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-49824 |
|
Vulnerability in github.com/fission/fission (CVE-2026-49824)
vulnerability in github.com/fission/fission (CVE-2026-49824). Confidential information can be exposed externally. Exploitable via ``spec.environment.namespace``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-48034 |
|
Vulnerability in @hulumi/policies (CVE-2026-48034)
vulnerability in @hulumi/policies (CVE-2026-48034). Risk of unauthorized operations or information disclosure. Exploitable via ``SecureBucket``. Mitigation: upgrade to `1.4.0` or later.
|
| CVE-2026-41728 |
|
Vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41728)
vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41728). Data can be tampered with by attackers.
|
| CVE-2026-41837 |
|
Vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41837)
vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41837). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47907 |
|
Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Access Control...
Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Access Control...
|
| CVE-2026-39169 |
|
SEMCMS 5.0 is vulnerable to unauthorized access in SEMCMS_copy.php.
SEMCMS 5.0 is vulnerable to unauthorized access in SEMCMS_copy.php.
|
| CVE-2026-36720 |
|
Vulnerability in CVE-2026-36720 (CVE-2026-36720)
vulnerability in CVE-2026-36720 (CVE-2026-36720). Confidential information can be exposed externally.
|
| CVE-2026-42829 |
|
Vulnerability in microsoft (CVE-2026-42829)
vulnerability in microsoft (CVE-2026-42829). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41092 |
|
Vulnerability in microsoft (CVE-2026-41092)
vulnerability in microsoft (CVE-2026-41092). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49161 |
|
Vulnerability in microsoft (CVE-2026-49161)
vulnerability in microsoft (CVE-2026-49161). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48578 |
|
Vulnerability in microsoft (CVE-2026-48578)
vulnerability in microsoft (CVE-2026-48578). Confidential information can be exposed externally.
|
| CVE-2026-45658 |
|
Vulnerability in microsoft (CVE-2026-45658)
vulnerability in microsoft (CVE-2026-45658). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45649 |
|
Vulnerability in microsoft (CVE-2026-45649)
vulnerability in microsoft (CVE-2026-45649). Confidential information can be exposed externally.
|
| CVE-2026-45654 |
|
Vulnerability in microsoft (CVE-2026-45654)
vulnerability in microsoft (CVE-2026-45654). Confidential information can be exposed externally.
|
| CVE-2026-49938 |
|
Vulnerability in fortinet (CVE-2026-49938)
vulnerability in fortinet (CVE-2026-49938). Confidential information can be exposed externally.
|
| CVE-2026-41984 |
|
Vulnerability in CVE-2026-41984 (CVE-2026-41984)
vulnerability in CVE-2026-41984 (CVE-2026-41984). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41985 |
|
Vulnerability in CVE-2026-41985 (CVE-2026-41985)
vulnerability in CVE-2026-41985 (CVE-2026-41985). Data can be tampered with by attackers.
|
| CVE-2026-41847 |
|
Vulnerability in org.springframework:spring-webflux (CVE-2026-41847)
vulnerability in org.springframework:spring-webflux (CVE-2026-41847). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41006 |
|
Vulnerability in org.springframework.hateoas:spring-hateoas (CVE-2026-41006)
vulnerability in org.springframework.hateoas:spring-hateoas (CVE-2026-41006). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11621 |
|
Vulnerability in CVE-2026-11621 (CVE-2026-11621)
vulnerability in CVE-2026-11621 (CVE-2026-11621). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44249 |
|
Vulnerability in io.netty:netty-handler (CVE-2026-44249)
vulnerability in io.netty:netty-handler (CVE-2026-44249). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.135.Final` or later.
|
| CVE-2026-11532 |
|
Vulnerability in CVE-2026-11532 (CVE-2026-11532)
vulnerability in CVE-2026-11532 (CVE-2026-11532). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11474 |
|
Vulnerability in CVE-2026-11474 (CVE-2026-11474)
vulnerability in CVE-2026-11474 (CVE-2026-11474). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11466 |
|
Vulnerability in deepsearcher (CVE-2026-11466)
vulnerability in deepsearcher (CVE-2026-11466). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11464 |
|
Information Disclosure in CVE-2026-11464 (CVE-2026-11464)
vulnerability in CVE-2026-11464 (CVE-2026-11464). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11459 |
|
Information Disclosure in CVE-2026-11459 (CVE-2026-11459)
vulnerability in CVE-2026-11459 (CVE-2026-11459). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11458 |
|
Information Disclosure in CVE-2026-11458 (CVE-2026-11458)
vulnerability in CVE-2026-11458 (CVE-2026-11458). Risk of unauthorized operations or information disclosure.
|