Vulnerabilities (2450)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU128730 - Improper Authorization CVE-2026-33186	CWE-285	High	No	No	-	01.05.2026	SB2026050106 SB2026050107 SB2026050108 and 68 more
#VU128368 - Uncontrolled Memory Allocation CVE-2026-42154	CWE-789	Medium	No	No	-	28.04.2026	SB20260428200 SB2026060464 SB2026060465 and 2 more
#VU128367 - Exposure of sensitive information to an unauthorized actor CVE-2026-42151	CWE-200	Medium	No	No	-	28.04.2026	SB20260428200 SB2026060464 SB2026060465 and 1 more
#VU125920 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-40179	CWE-79	Low	No	No	-	14.04.2026	SB2026041458 SB2026060464 SB2026060465
#VU124876 - Inefficient Regular Expression Complexity CVE-2026-25547	CWE-1333	Low	No	No	-	06.04.2026	SB2026040628 SB2026040631 SB2026040632 and 13 more
#VU124616 - Resource exhaustion CVE-2026-1519	CWE-400	Medium	No	No	-	25.03.2026	SB20260325207 SB20260325210 SB20260325211 and 40 more
#VU123913 - Improper Access Control CVE-2024-29371	CWE-284	Medium	No	No	-	12.03.2026	SB2026031212 SB2026031213 SB2026031310 and 26 more
#VU123311 - Improper Control of Generation of Code ('Code Injection') CVE-2026-1615	CWE-94	High	No	No	-	27.02.2026	SB2026022707 SB2026022708 SB2026032720 and 4 more
#VU123310 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2025-61140	CWE-1321	High	No	No	-	27.02.2026	SB2026022706 SB2026022708 SB2026030405 and 3 more
#VU123174 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-27606	CWE-22	High	Public exploit available	No	-	24.02.2026	SB2026022445 SB2026040631 SB2026040632 and 2 more
#VU122756 - Improper Access Control CVE-2026-21722	CWE-284	Low	No	No	-	12.02.2026	SB2026021238 SB20260325198 SB2026040631 and 1 more
#VU122160 - Resource Management Errors CVE-2026-21720	CWE-399	Medium	No	No	-	30.01.2026	SB2026013061 SB20260325198 SB2026040631
#VU122159 - Improper Privilege Management CVE-2026-21721	CWE-269	Low	Public exploit available	No	-	30.01.2026	SB2026013061 SB2026022335 SB2026030249 and 4 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2025-13465	CWE-1321	Medium	No	No	-	22.01.2026	SB2026012209 SB2026012701 SB2026012744 and 65 more
#VU120232 - Uncontrolled Recursion CVE-2025-68156	CWE-674	Medium	No	No	-	22.12.2025	SB2025122249 SB2025122250 SB2025122251 and 12 more
#VU119885 - Improper Neutralization of HTTP Headers for Scripting Syntax CVE-2025-67724	CWE-644	Low	No	No	-	12.12.2025	SB2025121205 SB2026010587 SB2026010938 and 35 more
#VU119884 - Excessive Iteration CVE-2025-67725	CWE-834	Low	No	No	-	12.12.2025	SB2025121205 SB2026010587 SB2026010938 and 41 more
#VU119233 - Resource exhaustion CVE-2025-13836	CWE-400	Medium	No	No	-	06.12.2025	SB2025120602 SB20251226352 SB2025123104 and 36 more
#VU119131 - Interpretation Conflict CVE-2025-12816	CWE-436	Medium	No	No	-	04.12.2025	SB2025120419 SB2025122219 SB20260116128 and 19 more
#VU113081 - Exposure of sensitive information to an unauthorized actor CVE-2025-3415	CWE-200	Medium	No	No	-	21.07.2025	SB2025072113 SB2025112453 SB2025112454 and 3 more



Showing elements 1 - 20 out of 2450