Vulnerabilities
DecJanFebMarAprMayJunJulAugSepOctNov
en
CyStack continuously tracks the latest global threats and develops solutions that help identify new vulnerabilities across your websites and systems.
Data is updated in the system
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Data is updated in the CyStack VulnScan system.Learn more
CVE-2026-121180CVE-2026-121180CVE-2026-121179CVE-2026-121179CVE-2026-121083CVE-2026-121083CVE-2026-121082CVE-2026-121082CVE-2026-121113CVE-2026-121113| Vulnerability | Exploitation status | Fix | Provider | Affected product | Published | Severity |
|---|---|---|---|---|---|---|
CVE-2026-121180CVE-2026-121180 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | Published11/03/2026 | SeverityHigh |
CVE-2026-121179CVE-2026-121179 | Exploitation statusActively exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121083CVE-2026-121083 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121082CVE-2026-121082 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121113CVE-2026-121113 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121188CVE-2026-121188 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121118CVE-2026-121118 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121124CVE-2026-121124 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121047CVE-2026-121047 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121166CVE-2026-121166 | Exploitation statusActively exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121185CVE-2026-121185 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121207CVE-2026-121207 | Exploitation statusNot confirmed | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121071CVE-2026-121071 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121095CVE-2026-121095 | Exploitation statusNot confirmed | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121140CVE-2026-121140 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121233CVE-2026-121233 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121173CVE-2026-121173 | Exploitation statusNot confirmed | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121074CVE-2026-121074 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121098CVE-2026-121098 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121174CVE-2026-121174 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121112CVE-2026-121112 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121197CVE-2026-121197 | Exploitation statusNot confirmed | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121107CVE-2026-121107 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121126CVE-2026-121126 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121203CVE-2026-121203 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121247CVE-2026-121247 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121035CVE-2026-121035 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121246CVE-2026-121246 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121229CVE-2026-121229 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-121156CVE-2026-121156 | Exploitation statusNot exploited | FixYes | ProviderGoogle | Affected productChrome | ||
CVE-2026-120716CVE-2026-120716 | Exploitation statusNot confirmed | FixYes | ProviderDevolutions | Affected productServer | ||
CVE-2026-115779Effect: Cookie attribute injection via domain, path, and name fields in @effect/platform makeCookie() | Exploitation statusNot exploited | FixNo | Provider@effect | |||
CVE-2026-115731Report Deserialization Code Execution | Exploitation statusNot confirmed | FixYes | ProviderPerforce | Affected productPuppet Enterprise | ||
CVE-2026-119636CVE-2026-119636 | Exploitation statusNot confirmed | FixYes | ProviderDevolutions | Affected productServer | ||
CVE-2026-115732Certificate Name Authorization Bypass | Exploitation statusNot confirmed | FixYes | ProviderPerforce | Affected productPuppet Enterprise | ||
CVE-2026-120734CVE-2026-120734 | Exploitation statusNot confirmed | FixYes | ProviderDevolutions | Affected productServer | ||
CVE-2026-120715CVE-2026-120715 | Exploitation statusNot confirmed | FixYes | ProviderDevolutions | Affected productServer | ||
CVE-2026-76894CKAN MCP Server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out) | Exploitation statusNot confirmed | FixYes | Providerondata | Affected product | ||
CVE-2026-120733CVE-2026-120733 | Exploitation statusNot confirmed | FixYes | ProviderDevolutions | Affected productServer | ||
CVE-2026-82155CVE-2026-82155 | Exploitation statusNot confirmed | FixYes | ProviderDell | Affected productOS Recovery tool | ||
CVE-2026-82154CVE-2026-82154 | Exploitation statusNot exploited | FixYes | ProviderDell | Affected productOS Recovery tool | ||
CVE-2026-121509Headless CMS Plugin REST API post get_required_post_data information disclosure | Exploitation statusActively exploited | FixNo | Provider- | Affected productHeadless CMS Plugin | ||
CVE-2026-121580CVE-2026-121580 | Exploitation statusNot confirmed | FixYes | ProviderDevolutions | Affected productServer | ||
CVE-2026-115878Stanza: RCE via pickle deserialization in the lemmatizer | Exploitation statusNot exploited | FixYes | Providerstanfordnlp | Affected productstanza | ||
CVE-2026-61497TinyUSB < 0.20.1 Integer Underflow via HID Report Descriptor Parser | Exploitation statusNot exploited | FixYes | Providerhathach | Affected productTinyUSB | ||
CVE-2026-120959MongoDB Atlas SQL ODBC Driver uses ignored SQLBindCol BufferLength as fixed-width row-array stride, causing out-of-bounds writes | Exploitation statusNot confirmed | FixYes | ProviderMongoDB | |||
CVE-2026-120952MongoDB Atlas SQL ODBC Driver writes 48-byte Extended JSON into fixed 16-byte SQL_C_GUID target, causing a 32-byte out-of-bounds write | Exploitation statusNot confirmed | FixYes | ProviderMongoDB | |||
CVE-2026-121502mathurvishal CloudClassroom-PHP-Project facultydetails.php sql injection | Exploitation statusActively exploited | FixNo | Providermathurvishal | Affected productCloudClassroom-PHP-Project | ||
CVE-2026-61495TinyUSB 0.21.0 Out-of-Bounds Write via mtp_container_get_string() | Exploitation statusNot exploited | FixYes | Providerhathach | Affected productTinyUSB | ||
CVE-2026-95860node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions | Exploitation statusNot confirmed | FixYes | Providernode-opcua |
421,264 Results | Page 13 of 8,426
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityCritical |
| Published11/03/2026 |
| SeverityUnknown |
| Published11/03/2026 |
| SeverityCritical |
| Published11/03/2026 |
| SeverityUnknown |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityUnknown |
| Published11/03/2026 |
| SeverityCritical |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityUnknown |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityCritical |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityCritical |
| Published11/03/2026 |
| SeverityCritical |
| Published11/03/2026 |
| SeverityCritical |
| Published11/03/2026 |
| SeverityCritical |
| Published11/03/2026 |
| SeverityCritical |
| Published11/03/2026 |
| SeverityUnknown |
| Published11/03/2026 |
| SeverityMedium |
| Published11/03/2026 |
| SeverityCritical |
| Published11/03/2026 |
| SeverityUnknown |
| Published11/03/2026 |
| SeverityCritical |
| Published11/03/2026 |
| SeverityUnknown |
| Published11/03/2026 |
| SeverityUnknown |
| Published11/03/2026 |
| SeverityLow |
| Published11/03/2026 |
| SeverityUnknown |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityLow |
| SeverityMedium |
| Published11/03/2026 |
| SeverityUnknown |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityMedium |
| Published11/03/2026 |
| SeverityLow |
| Published11/03/2026 |
| SeverityMedium |
| Published11/03/2026 |
| SeverityMedium |
| Published11/03/2026 |
| SeverityHigh |
| Published11/03/2026 |
| SeverityCritical |