Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-70324 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-70324)
SSRF in ssrf (CVE-2026-70324). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70326 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-70326)
SSRF in ssrf (CVE-2026-70326). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70321 |
|
Unsafe Deserialization in deserialization (CVE-2026-70321)
vulnerability in deserialization (CVE-2026-70321). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70306 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-70306)
cross-site scripting in microsoft (CVE-2026-70306). Confidential information can be exposed externally.
|
| CVE-2026-69223 |
|
SSRF (Server-Side Request Forgery) in apache (CVE-2026-69223)
SSRF in apache (CVE-2026-69223). Confidential information can be exposed externally.
|
| CVE-2026-66808 |
|
Unsafe Deserialization in deserialization (CVE-2026-66808)
vulnerability in deserialization (CVE-2026-66808). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66805 |
|
Unsafe Deserialization in deserialization (CVE-2026-66805)
vulnerability in deserialization (CVE-2026-66805). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65815 |
|
Unsafe Deserialization in deserialization (CVE-2026-65815)
vulnerability in deserialization (CVE-2026-65815). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65810 |
|
Vulnerability in csharp (CVE-2026-65810)
vulnerability in csharp (CVE-2026-65810). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65813 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-65813)
SSRF in ssrf (CVE-2026-65813). Confidential information can be exposed externally.
|
| CVE-2026-65795 |
|
No cwe for this issue in Windows DNS allows an authorized attacker to elevate privileges locally.
No cwe for this issue in Windows DNS allows an authorized attacker to elevate privileges locally.
|
| CVE-2026-65768 |
|
Path Traversal in path-traversal (CVE-2026-65768)
path traversal in path-traversal (CVE-2026-65768). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65767 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-65767)
cross-site scripting in microsoft (CVE-2026-65767). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65673 |
|
CVET-EOP
CVET-EOP
|
| CVE-2026-65665 |
|
Unsafe Deserialization in deserialization (CVE-2026-65665)
vulnerability in deserialization (CVE-2026-65665). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65663 |
|
Unsafe Deserialization in deserialization (CVE-2026-65663)
vulnerability in deserialization (CVE-2026-65663). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65658 |
|
Unsafe Deserialization in deserialization (CVE-2026-65658)
vulnerability in deserialization (CVE-2026-65658). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64922 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-64922)
cross-site scripting in microsoft (CVE-2026-64922). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64916 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-64916)
cross-site scripting in microsoft (CVE-2026-64916). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64902 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-64902)
cross-site scripting in microsoft (CVE-2026-64902). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64897 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-64897)
cross-site scripting in microsoft (CVE-2026-64897). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64900 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-64900)
cross-site scripting in microsoft (CVE-2026-64900). Confidential information can be exposed externally.
|
| CVE-2026-64901 |
|
Unsafe Deserialization in deserialization (CVE-2026-64901)
vulnerability in deserialization (CVE-2026-64901). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63516 |
|
Unsafe Deserialization in deserialization (CVE-2026-63516)
vulnerability in deserialization (CVE-2026-63516). Confidential information can be exposed externally.
|
| CVE-2026-63514 |
|
Unsafe Deserialization in deserialization (CVE-2026-63514)
vulnerability in deserialization (CVE-2026-63514). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62911 |
|
Vulnerability in microsoft (CVE-2026-62911)
vulnerability in microsoft (CVE-2026-62911). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62912 |
|
Unsafe Deserialization in deserialization (CVE-2026-62912)
vulnerability in deserialization (CVE-2026-62912). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62914 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-62914)
cross-site scripting in microsoft (CVE-2026-62914). Confidential information can be exposed externally.
|
| CVE-2026-62837 |
|
Vulnerability in path-traversal (CVE-2026-62837)
vulnerability in path-traversal (CVE-2026-62837). Confidential information can be exposed externally.
|
| CVE-2026-62829 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-62829)
cross-site scripting in microsoft (CVE-2026-62829). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62819 |
|
Use-After-Free in microsoft (CVE-2026-62819)
vulnerability in microsoft (CVE-2026-62819). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48483 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-48483)
SSRF in ssrf (CVE-2026-48483). Risk of unauthorized operations or information disclosure. Exploitable via ``safeKy``.
|
| CVE-2026-73079 |
|
Path Traversal in path-traversal (CVE-2026-73079)
path traversal in path-traversal (CVE-2026-73079). Confidential information can be exposed externally. Exploitable via `POST /responses/`. Mitigation: upgrade to `0.1.169` or later.
|
| CVE-2026-56721 |
|
Vulnerability in privilege-escalation (CVE-2026-56721)
vulnerability in privilege-escalation (CVE-2026-56721). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53414 |
|
Vulnerability in dos (CVE-2026-53414)
vulnerability in dos (CVE-2026-53414). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53416 |
|
Vulnerability in path-traversal (CVE-2026-53416)
vulnerability in path-traversal (CVE-2026-53416). Confidential information can be exposed externally.
|
| CVE-2026-53415 |
|
Use-After-Free in CVE-2026-53415 (CVE-2026-53415)
vulnerability in CVE-2026-53415 (CVE-2026-53415). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53413 |
|
Out-of-Bounds Write in CVE-2026-53413 (CVE-2026-53413)
out-of-bounds write in CVE-2026-53413 (CVE-2026-53413). Successful exploitation can lead to full system takeover.
|
| CVE-2025-31114 |
|
Vulnerability in CVE-2025-31114 (CVE-2025-31114)
vulnerability in CVE-2025-31114 (CVE-2025-31114). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17535 |
|
Out-of-Bounds Read in dos (CVE-2026-17535)
vulnerability in dos (CVE-2026-17535). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17061 |
|
Unsafe Deserialization in deserialization (CVE-2026-17061)
vulnerability in deserialization (CVE-2026-17061). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47702 |
|
Vulnerability in sqli (CVE-2026-47702)
vulnerability in sqli (CVE-2026-47702). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73210 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-73210)
SSRF in ssrf (CVE-2026-73210). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51583 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-51583)
SSRF in ssrf (CVE-2026-51583). Confidential information can be exposed externally.
|
| CVE-2026-48046 |
|
Vulnerability in CVE-2026-48046 (CVE-2026-48046)
vulnerability in CVE-2026-48046 (CVE-2026-48046). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19434 |
|
Cross-Site Scripting (XSS) in CVE-2026-19434 (CVE-2026-19434)
cross-site scripting in CVE-2026-19434 (CVE-2026-19434). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72784 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-72784)
SSRF in ssrf (CVE-2026-72784). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72783 |
|
Path Traversal in path-traversal (CVE-2026-72783)
path traversal in path-traversal (CVE-2026-72783). Confidential information can be exposed externally.
|
| CVE-2026-72775 |
|
SQL Injection in sqli (CVE-2026-72775)
SQL injection in sqli (CVE-2026-72775). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72781 |
|
Vulnerability in CVE-2026-72781 (CVE-2026-72781)
vulnerability in CVE-2026-72781 (CVE-2026-72781). Successful exploitation can lead to full system takeover.
|