Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-75014 |
|
Vulnerability in sqli (CVE-2026-75014)
vulnerability in sqli (CVE-2026-75014). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74234 |
|
Vulnerability in CVE-2026-74234 (CVE-2026-74234)
vulnerability in CVE-2026-74234 (CVE-2026-74234). Confidential information can be exposed externally.
|
| CVE-2026-71553 |
|
Vulnerability in dos (CVE-2026-71553)
vulnerability in dos (CVE-2026-71553). Risk of unauthorized operations or information disclosure. Exploitable via `PATCH /api/v1/article/`.
|
| CVE-2026-68005 |
|
Vulnerability in dos (CVE-2026-68005)
vulnerability in dos (CVE-2026-68005). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50776 |
|
Path Traversal in path-traversal (CVE-2026-50776)
path traversal in path-traversal (CVE-2026-50776). Confidential information can be exposed externally.
|
| CVE-2026-50775 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-50775)
SSRF in ssrf (CVE-2026-50775). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17639 |
|
Vulnerability in dos (CVE-2026-17639)
vulnerability in dos (CVE-2026-17639). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74254 |
|
SQL Injection in sqli (CVE-2026-74254)
SQL injection in sqli (CVE-2026-74254). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74253 |
|
Code Injection in CVE-2026-74253 (CVE-2026-74253)
code injection in CVE-2026-74253 (CVE-2026-74253). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50771 |
|
Cross-Site Scripting (XSS) in CVE-2026-50771 (CVE-2026-50771)
cross-site scripting in CVE-2026-50771 (CVE-2026-50771). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51346 |
|
SQL Injection in sqli (CVE-2026-51346)
SQL injection in sqli (CVE-2026-51346). Confidential information can be exposed externally.
|
| CVE-2026-50769 |
|
SQL Injection in sqli (CVE-2026-50769)
SQL injection in sqli (CVE-2026-50769). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73522 |
|
Vulnerability in dos (CVE-2026-73522)
vulnerability in dos (CVE-2026-73522). Data can be tampered with by attackers.
|
| CVE-2026-75053 |
|
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint
|
| CVE-2026-75054 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-75054)
SSRF in ssrf (CVE-2026-75054). Confidential information can be exposed externally.
|
| CVE-2026-75056 |
|
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible
|
| CVE-2026-75050 |
|
Vulnerability in dos (CVE-2026-75050)
vulnerability in dos (CVE-2026-75050). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75047 |
|
Vulnerability in dos (CVE-2026-75047)
vulnerability in dos (CVE-2026-75047). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75048 |
|
Cross-Site Scripting (XSS) in CVE-2026-75048 (CVE-2026-75048)
cross-site scripting in CVE-2026-75048 (CVE-2026-75048). Confidential information can be exposed externally.
|
| CVE-2026-68762 |
|
In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible
In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible
|
| CVE-2026-33437 |
|
Cross-Site Scripting (XSS) in CVE-2026-33437 (CVE-2026-33437)
cross-site scripting in CVE-2026-33437 (CVE-2026-33437). Confidential information can be exposed externally.
|
| CVE-2026-55090 |
|
Cross-Site Scripting (XSS) in ep_etherpad-lite (CVE-2026-55090)
cross-site scripting in ep_etherpad-lite (CVE-2026-55090). Risk of unauthorized operations or information disclosure. Exploitable via ``getHTMLFromAtext``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-9771 |
|
Vulnerability in c (CVE-2026-9771)
vulnerability in c (CVE-2026-9771). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12629 |
|
Vulnerability in c (CVE-2026-12629)
vulnerability in c (CVE-2026-12629). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12519 |
|
Out-of-Bounds Write in c (CVE-2026-12519)
out-of-bounds write in c (CVE-2026-12519). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-27772 |
|
Vulnerability in CVE-2025-27772 (CVE-2025-27772)
vulnerability in CVE-2025-27772 (CVE-2025-27772). Risk of unauthorized operations or information disclosure. Exploitable via ``checks``.
|
| CVE-2025-27771 |
|
Vulnerability in CVE-2025-27771 (CVE-2025-27771)
vulnerability in CVE-2025-27771 (CVE-2025-27771). Risk of unauthorized operations or information disclosure. Exploitable via ``checks``.
|
| CVE-2025-27770 |
|
Vulnerability in CVE-2025-27770 (CVE-2025-27770)
vulnerability in CVE-2025-27770 (CVE-2025-27770). Risk of unauthorized operations or information disclosure. Exploitable via ``checks``.
|
| CVE-2026-59909 |
|
Vulnerability in path-traversal (CVE-2026-59909)
vulnerability in path-traversal (CVE-2026-59909). Data can be tampered with by attackers.
|
| CVE-2026-56089 |
|
Vulnerability in path-traversal (CVE-2026-56089)
vulnerability in path-traversal (CVE-2026-56089). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74999 |
|
Cross-Site Scripting (XSS) in CVE-2026-74999 (CVE-2026-74999)
cross-site scripting in CVE-2026-74999 (CVE-2026-74999). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16137 |
|
Path Traversal in path-traversal (CVE-2026-16137)
path traversal in path-traversal (CVE-2026-16137). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75006 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-75006)
SSRF in ssrf (CVE-2026-75006). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16139 |
|
Vulnerability in CVE-2026-16139 (CVE-2026-16139)
vulnerability in CVE-2026-16139 (CVE-2026-16139). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15218 |
|
Vulnerability in CVE-2026-15218 (CVE-2026-15218)
vulnerability in CVE-2026-15218 (CVE-2026-15218). Confidential information can be exposed externally.
|
| CVE-2026-16138 |
|
Unsafe Deserialization in deserialization (CVE-2026-16138)
vulnerability in deserialization (CVE-2026-16138). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75002 |
|
Command Injection in privilege-escalation (CVE-2026-75002)
command injection in privilege-escalation (CVE-2026-75002). Confidential information can be exposed externally.
|
| CVE-2026-75000 |
|
Vulnerability in privilege-escalation (CVE-2026-75000)
vulnerability in privilege-escalation (CVE-2026-75000). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75003 |
|
Vulnerability in privilege-escalation (CVE-2026-75003)
vulnerability in privilege-escalation (CVE-2026-75003). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75007 |
|
Command Injection in privilege-escalation (CVE-2026-75007)
command injection in privilege-escalation (CVE-2026-75007). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74998 |
|
Cross-Site Scripting (XSS) in CVE-2026-74998 (CVE-2026-74998)
cross-site scripting in CVE-2026-74998 (CVE-2026-74998). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74997 |
|
OS Command Injection in CVE-2026-74997 (CVE-2026-74997)
OS command injection in CVE-2026-74997 (CVE-2026-74997). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40126 |
|
Cross-Site Scripting (XSS) in CVE-2026-40126 (CVE-2026-40126)
cross-site scripting in CVE-2026-40126 (CVE-2026-40126). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74901 |
|
Vulnerability in CVE-2026-74901 (CVE-2026-74901)
vulnerability in CVE-2026-74901 (CVE-2026-74901). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74894 |
|
Authentication Bypass in CVE-2026-74894 (CVE-2026-74894)
authentication bypass in CVE-2026-74894 (CVE-2026-74894). Successful exploitation can lead to full system takeover. Exploitable via `Authorization header`.
|
| CVE-2026-74890 |
|
Vulnerability in CVE-2026-74890 (CVE-2026-74890)
vulnerability in CVE-2026-74890 (CVE-2026-74890). Data can be tampered with by attackers.
|
| CVE-2026-74884 |
|
Vulnerability in path-traversal (CVE-2026-74884)
vulnerability in path-traversal (CVE-2026-74884). Confidential information can be exposed externally.
|
| CVE-2026-74800 |
|
Cross-Site Scripting (XSS) in CVE-2026-74800 (CVE-2026-74800)
cross-site scripting in CVE-2026-74800 (CVE-2026-74800). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74798 |
|
Path Traversal in path-traversal (CVE-2026-74798)
path traversal in path-traversal (CVE-2026-74798). Confidential information can be exposed externally.
|
| CVE-2026-19998 |
|
Cross-Site Scripting (XSS) in CVE-2026-19998 (CVE-2026-19998)
cross-site scripting in CVE-2026-19998 (CVE-2026-19998). Risk of unauthorized operations or information disclosure.
|