Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-40281 |
|
Vulnerability in github.com/gotenberg/gotenberg/v8 (CVE-2026-40281)
vulnerability in github.com/gotenberg/gotenberg/v8 (CVE-2026-40281). Data can be tampered with by attackers. Exploitable via ``WriteMetadata``. Mitigation: upgrade to `8.31.0` or later.
|
| CVE-2025-14543 |
|
XXE (XML External Entity) in rti (CVE-2025-14543)
vulnerability in rti (CVE-2025-14543). Confidential information can be exposed externally.
|
| CVE-2026-5166 |
|
Path Traversal in path-traversal (CVE-2026-5166)
path traversal in path-traversal (CVE-2026-5166). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42249 |
|
Path Traversal in path-traversal (CVE-2026-42249)
path traversal in path-traversal (CVE-2026-42249). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42248 |
|
Vulnerability in ollama (CVE-2026-42248)
vulnerability in ollama (CVE-2026-42248). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7333 |
|
Use-After-Free in google (CVE-2026-7333)
vulnerability in google (CVE-2026-7333). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41446 |
|
Vulnerability in CVE-2026-41446 (CVE-2026-41446)
vulnerability in CVE-2026-41446 (CVE-2026-41446). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3893 |
|
Vulnerability in CVE-2026-3893 (CVE-2026-3893)
vulnerability in CVE-2026-3893 (CVE-2026-3893). Data can be tampered with by attackers.
|
| CVE-2025-60889 |
|
Unsafe Deserialization in deserialization (CVE-2025-60889)
vulnerability in deserialization (CVE-2025-60889). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7202 |
|
Command Injection in CVE-2026-7202 (CVE-2026-7202)
command injection in CVE-2026-7202 (CVE-2026-7202). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7204 |
|
Command Injection in CVE-2026-7204 (CVE-2026-7204)
command injection in CVE-2026-7204 (CVE-2026-7204). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7203 |
|
Command Injection in CVE-2026-7203 (CVE-2026-7203)
command injection in CVE-2026-7203 (CVE-2026-7203). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32644 |
|
Vulnerability in CVE-2026-32644 (CVE-2026-32644)
vulnerability in CVE-2026-32644 (CVE-2026-32644). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40976 |
|
Vulnerability in org.springframework.boot:spring-boot (CVE-2026-40976)
vulnerability in org.springframework.boot:spring-boot (CVE-2026-40976). Confidential information can be exposed externally. Mitigation: upgrade to `4.0.6` or later.
|
| CVE-2026-30352 |
|
Command Injection in CVE-2026-30352 (CVE-2026-30352)
command injection in CVE-2026-30352 (CVE-2026-30352). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33453 |
|
Vulnerability in apache (CVE-2026-33453)
vulnerability in apache (CVE-2026-33453). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33454 |
|
Unsafe Deserialization in apache (CVE-2026-33454)
vulnerability in apache (CVE-2026-33454). Confidential information can be exposed externally.
|
| CVE-2026-40453 |
|
Vulnerability in org.apache.camel:camel-coap (CVE-2026-40453)
vulnerability in org.apache.camel:camel-coap (CVE-2026-40453). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.20.0` or later.
|
| CVE-2026-40860 |
|
Unsafe Deserialization in org.apache.camel:camel-jms (CVE-2026-40860)
vulnerability in org.apache.camel:camel-jms (CVE-2026-40860). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.20.0` or later.
|
| CVE-2026-42363 |
|
Vulnerability in CVE-2026-42363 (CVE-2026-42363)
vulnerability in CVE-2026-42363 (CVE-2026-42363). Confidential information can be exposed externally.
|
| CVE-2026-31685 |
|
Vulnerability in linux (CVE-2026-31685)
vulnerability in linux (CVE-2026-31685). Confidential information can be exposed externally.
|
| CVE-2026-31682 |
|
Vulnerability in linux (CVE-2026-31682)
vulnerability in linux (CVE-2026-31682). Confidential information can be exposed externally.
|
| CVE-2026-6951 |
|
Code Injection in simple-git (CVE-2026-6951)
code injection in simple-git (CVE-2026-6951). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.36.0` or later.
|
| CVE-2026-41473 |
|
Vulnerability in dos (CVE-2026-41473)
vulnerability in dos (CVE-2026-41473). Data can be tampered with by attackers.
|
| CVE-2026-31669 |
|
Use-After-Free in linux (CVE-2026-31669)
vulnerability in linux (CVE-2026-31669). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31657 |
|
Vulnerability in linux (CVE-2026-31657)
vulnerability in linux (CVE-2026-31657). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31649 |
|
Vulnerability in linux (CVE-2026-31649)
vulnerability in linux (CVE-2026-31649). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31637 |
|
Vulnerability in linux (CVE-2026-31637)
vulnerability in linux (CVE-2026-31637). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31607 |
|
Out-of-Bounds Write in c (CVE-2026-31607)
out-of-bounds write in c (CVE-2026-31607). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41176 |
|
Vulnerability in rclone (CVE-2026-41176)
vulnerability in rclone (CVE-2026-41176). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.73.5` or later.
|
| CVE-2026-1951 |
|
Vulnerability in deltaww (CVE-2026-1951)
vulnerability in deltaww (CVE-2026-1951). Successful exploitation can lead to full system takeover.
|
| CVE-2026-1952 |
|
Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability.
Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability.
|
| CVE-2026-1950 |
|
Vulnerability in deltaww (CVE-2026-1950)
vulnerability in deltaww (CVE-2026-1950). Successful exploitation can lead to full system takeover.
|
| CVE-2026-1949 |
|
Vulnerability in deltaww (CVE-2026-1949)
vulnerability in deltaww (CVE-2026-1949). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25775 |
|
Vulnerability in CVE-2026-25775 (CVE-2026-25775)
vulnerability in CVE-2026-25775 (CVE-2026-25775). Successful exploitation can lead to full system takeover.
|
| CVE-2026-26210 |
|
Unsafe Deserialization in deserialization (CVE-2026-26210)
vulnerability in deserialization (CVE-2026-26210). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6942 |
|
OS Command Injection in radare (CVE-2026-6942)
OS command injection in radare (CVE-2026-6942). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25874 |
|
Unsafe Deserialization in deserialization (CVE-2026-25874)
vulnerability in deserialization (CVE-2026-25874). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6919 |
|
Use-After-Free in google (CVE-2026-6919)
vulnerability in google (CVE-2026-6919). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6920 |
|
Out-of-Bounds Read in google (CVE-2026-6920)
vulnerability in google (CVE-2026-6920). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31533 |
|
Use-After-Free in linux (CVE-2026-31533)
vulnerability in linux (CVE-2026-31533). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6885 |
|
Unrestricted File Upload in CVE-2026-6885 (CVE-2026-6885)
vulnerability in CVE-2026-6885 (CVE-2026-6885). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6886 |
|
Vulnerability in CVE-2026-6886 (CVE-2026-6886)
vulnerability in CVE-2026-6886 (CVE-2026-6886). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6887 |
|
SQL Injection in sqli (CVE-2026-6887)
SQL injection in sqli (CVE-2026-6887). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3960 |
|
Code Injection in ai.h2o:h2o-core (CVE-2026-3960)
code injection in ai.h2o:h2o-core (CVE-2026-3960). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.46.0.10` or later.
|
| CVE-2026-41196 |
|
Code Injection in minetest (CVE-2026-41196)
code injection in minetest (CVE-2026-41196). Successful exploitation can lead to full system takeover.
|
| CVE-2026-29198 |
|
SQL Injection in rocketchat (CVE-2026-29198)
SQL injection in rocketchat (CVE-2026-29198). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34415 |
|
Vulnerability in path-traversal (CVE-2026-34415)
vulnerability in path-traversal (CVE-2026-34415). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41179 |
|
OS Command Injection in github.com/rclone/rclone (CVE-2026-41179)
OS command injection in github.com/rclone/rclone (CVE-2026-41179). Successful exploitation can lead to full system takeover. Exploitable via ``bearer_token_command``. Mitigation: upgrade to `1.73.5` or later.
|
| CVE-2026-6356 |
|
Vulnerability in augmentt (CVE-2026-6356)
vulnerability in augmentt (CVE-2026-6356). Confidential information can be exposed externally.
|