Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-57852 |
|
Vulnerability in CVE-2026-57852 (CVE-2026-57852)
vulnerability in CVE-2026-57852 (CVE-2026-57852). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51025 |
|
Cross-Site Scripting (XSS) in CVE-2026-51025 (CVE-2026-51025)
cross-site scripting in CVE-2026-51025 (CVE-2026-51025). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51031 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-51031)
SSRF in ssrf (CVE-2026-51031). Confidential information can be exposed externally.
|
| CVE-2026-12900 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12900)
cross-site scripting in wordpress (CVE-2026-12900). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-51316 |
|
Vulnerability in dos (CVE-2024-51316)
vulnerability in dos (CVE-2024-51316). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53596 |
|
Vulnerability in laravel (CVE-2026-53596)
vulnerability in laravel (CVE-2026-53596). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56623 |
|
Path Traversal in apache (CVE-2026-56623)
path traversal in apache (CVE-2026-56623). Confidential information can be exposed externally.
|
| CVE-2026-56452 |
|
Path Traversal in c (CVE-2026-56452)
path traversal in c (CVE-2026-56452). Data can be tampered with by attackers.
|
| CVE-2026-63767 |
|
Unsafe Deserialization in deserialization (CVE-2026-63767)
vulnerability in deserialization (CVE-2026-63767). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44231 |
|
Information Disclosure in privilege-escalation (CVE-2026-44231)
vulnerability in privilege-escalation (CVE-2026-44231). Confidential information can be exposed externally.
|
| CVE-2026-16337 |
|
Privilege Escalation in CVE-2026-16337 (CVE-2026-16337)
vulnerability in CVE-2026-16337 (CVE-2026-16337). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44230 |
|
Cross-Site Scripting (XSS) in bestpractical (CVE-2026-44230)
cross-site scripting in bestpractical (CVE-2026-44230). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44229 |
|
Cross-Site Scripting (XSS) in bestpractical (CVE-2026-44229)
cross-site scripting in bestpractical (CVE-2026-44229). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64194 |
|
Vulnerability in c (CVE-2026-64194)
vulnerability in c (CVE-2026-64194). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61425 |
|
Vulnerability in CVE-2026-61425 (CVE-2026-61425)
vulnerability in CVE-2026-61425 (CVE-2026-61425). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61424 |
|
Unrestricted File Upload in CVE-2026-61424 (CVE-2026-61424)
vulnerability in CVE-2026-61424 (CVE-2026-61424). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61900 |
|
Unrestricted File Upload in CVE-2026-61900 (CVE-2026-61900)
vulnerability in CVE-2026-61900 (CVE-2026-61900). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60032 |
|
Unrestricted File Upload in CVE-2026-60032 (CVE-2026-60032)
vulnerability in CVE-2026-60032 (CVE-2026-60032). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60034 |
|
Cross-Site Scripting (XSS) in CVE-2026-60034 (CVE-2026-60034)
cross-site scripting in CVE-2026-60034 (CVE-2026-60034). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60029 |
|
Cross-Site Scripting (XSS) in CVE-2026-60029 (CVE-2026-60029)
cross-site scripting in CVE-2026-60029 (CVE-2026-60029). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60028 |
|
Cross-Site Scripting (XSS) in CVE-2026-60028 (CVE-2026-60028)
cross-site scripting in CVE-2026-60028 (CVE-2026-60028). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60033 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-60033)
SSRF in ssrf (CVE-2026-60033). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60027 |
|
Path Traversal in path-traversal (CVE-2026-60027)
path traversal in path-traversal (CVE-2026-60027). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64612 |
|
Vulnerability in dos (CVE-2026-64612)
vulnerability in dos (CVE-2026-64612). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-26483 |
|
Cross-Site Scripting (XSS) in CVE-2026-26483 (CVE-2026-26483)
cross-site scripting in CVE-2026-26483 (CVE-2026-26483). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44228 |
|
Cross-Site Scripting (XSS) in bestpractical (CVE-2026-44228)
cross-site scripting in bestpractical (CVE-2026-44228). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44227 |
|
Cross-Site Scripting (XSS) in bestpractical (CVE-2026-44227)
cross-site scripting in bestpractical (CVE-2026-44227). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34239 |
|
Vulnerability in CVE-2026-34239 (CVE-2026-34239)
vulnerability in CVE-2026-34239 (CVE-2026-34239). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39878 |
|
Cross-Site Scripting (XSS) in CVE-2026-39878 (CVE-2026-39878)
cross-site scripting in CVE-2026-39878 (CVE-2026-39878). Confidential information can be exposed externally. Mitigation: upgrade to `1.11.40` or later.
|
| CVE-2026-58482 |
|
Cross-Site Request Forgery (CSRF) in ssrf (CVE-2026-58482)
vulnerability in ssrf (CVE-2026-58482). Data can be tampered with by attackers. Exploitable via `POST /approvals/`. Mitigation: upgrade to `5.12.2` or later.
|
| CVE-2026-55238 |
|
Vulnerability in dos (CVE-2026-55238)
vulnerability in dos (CVE-2026-55238). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55645 |
|
Out-of-Bounds Read in dos (CVE-2026-55645)
vulnerability in dos (CVE-2026-55645). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50743 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-50743)
vulnerability in csrf (CVE-2026-50743). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47275 |
|
Vulnerability in c (CVE-2026-47275)
vulnerability in c (CVE-2026-47275). Risk of unauthorized operations or information disclosure. Exploitable via ``prop``.
|
| CVE-2026-44178 |
|
Vulnerability in dos (CVE-2026-44178)
vulnerability in dos (CVE-2026-44178). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44978 |
|
Vulnerability in dos (CVE-2026-44978)
vulnerability in dos (CVE-2026-44978). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46555 |
|
Path Traversal in path-traversal (CVE-2026-46555)
path traversal in path-traversal (CVE-2026-46555). Confidential information can be exposed externally. Exploitable via `Host header`.
|
| CVE-2026-41252 |
|
Vulnerability in dos (CVE-2026-41252)
vulnerability in dos (CVE-2026-41252). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41521 |
|
Vulnerability in dos (CVE-2026-41521)
vulnerability in dos (CVE-2026-41521). Confidential information can be exposed externally.
|
| CVE-2026-39879 |
|
Vulnerability in c (CVE-2026-39879)
vulnerability in c (CVE-2026-39879). Risk of unauthorized operations or information disclosure. Exploitable via ``afsql_dd_run_query``.
|
| CVE-2026-32825 |
|
Vulnerability in rails (CVE-2026-32825)
vulnerability in rails (CVE-2026-32825). Confidential information can be exposed externally.
|
| CVE-2026-32823 |
|
Cross-Site Request Forgery (CSRF) in rails (CVE-2026-32823)
vulnerability in rails (CVE-2026-32823). Risk of unauthorized operations or information disclosure. Exploitable via ``GET``.
|
| CVE-2026-32820 |
|
Path Traversal in rails (CVE-2026-32820)
path traversal in rails (CVE-2026-32820). Confidential information can be exposed externally. Exploitable via ``docs``.
|
| CVE-2026-6793 |
|
Cross-Site Scripting (XSS) in CVE-2026-6793 (CVE-2026-6793)
cross-site scripting in CVE-2026-6793 (CVE-2026-6793). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63428 |
|
Vulnerability in CVE-2026-63428 (CVE-2026-63428)
vulnerability in CVE-2026-63428 (CVE-2026-63428). Risk of unauthorized operations or information disclosure. Exploitable via ``completeSubmission``.
|
| CVE-2026-63102 |
|
Vulnerability in privilege-escalation (CVE-2026-63102)
vulnerability in privilege-escalation (CVE-2026-63102). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51026 |
|
Vulnerability in path-traversal (CVE-2026-51026)
vulnerability in path-traversal (CVE-2026-51026). Confidential information can be exposed externally.
|
| CVE-2026-45797 |
|
Cross-Site Scripting (XSS) in express (CVE-2026-45797)
cross-site scripting in express (CVE-2026-45797). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35198 |
|
Cross-Site Scripting (XSS) in privilege-escalation (CVE-2026-35198)
cross-site scripting in privilege-escalation (CVE-2026-35198). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32822 |
|
Vulnerability in CVE-2026-32822 (CVE-2026-32822)
vulnerability in CVE-2026-32822 (CVE-2026-32822). Risk of unauthorized operations or information disclosure. Exploitable via ``innerHTML``.
|