Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-73249 |
|
Vulnerability in CVE-2026-73249 (CVE-2026-73249)
vulnerability in CVE-2026-73249 (CVE-2026-73249). Data can be tampered with by attackers. Exploitable via `POST /book-update-annotations/{library_id}/{book_id}/{fmt}`.
|
| CVE-2026-73247 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-73247 (CVE-2026-73247)
SSRF in CVE-2026-73247 (CVE-2026-73247). Confidential information can be exposed externally.
|
| CVE-2026-73248 |
|
Code Injection in CVE-2026-73248 (CVE-2026-73248)
code injection in CVE-2026-73248 (CVE-2026-73248). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68067 |
|
Vulnerability in CVE-2026-68067 (CVE-2026-68067)
vulnerability in CVE-2026-68067 (CVE-2026-68067). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67558 |
|
Vulnerability in CVE-2026-67558 (CVE-2026-67558)
vulnerability in CVE-2026-67558 (CVE-2026-67558). Confidential information can be exposed externally.
|
| CVE-2026-66875 |
|
Vulnerability in CVE-2026-66875 (CVE-2026-66875)
vulnerability in CVE-2026-66875 (CVE-2026-66875). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67568 |
|
Vulnerability in CVE-2026-67568 (CVE-2026-67568)
vulnerability in CVE-2026-67568 (CVE-2026-67568). Confidential information can be exposed externally.
|
| CVE-2026-66098 |
|
Vulnerability in CVE-2026-66098 (CVE-2026-66098)
vulnerability in CVE-2026-66098 (CVE-2026-66098). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64934 |
|
Vulnerability in CVE-2026-64934 (CVE-2026-64934)
vulnerability in CVE-2026-64934 (CVE-2026-64934). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5917 |
|
OS Command Injection in c (CVE-2026-5917)
OS command injection in c (CVE-2026-5917). Successful exploitation can lead to full system takeover.
|
| CVE-2026-29036 |
|
Vulnerability in c (CVE-2026-29036)
vulnerability in c (CVE-2026-29036). Data can be tampered with by attackers.
|
| CVE-2026-19557 |
|
Use-After-Free in google (CVE-2026-19557)
vulnerability in google (CVE-2026-19557). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19558 |
|
Use-After-Free in google (CVE-2026-19558)
vulnerability in google (CVE-2026-19558). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19559 |
|
Use-After-Free in google (CVE-2026-19559)
vulnerability in google (CVE-2026-19559). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19560 |
|
Use-After-Free in google (CVE-2026-19560)
vulnerability in google (CVE-2026-19560). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18710 |
|
Vulnerability in CVE-2026-18710 (CVE-2026-18710)
vulnerability in CVE-2026-18710 (CVE-2026-18710). Confidential information can be exposed externally.
|
| CVE-2026-19556 |
|
Use-After-Free in Google chrome (CVE-2026-19556)
vulnerability in Google chrome (CVE-2026-19556). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66154 |
|
Vulnerability in CVE-2026-66154 (CVE-2026-66154)
vulnerability in CVE-2026-66154 (CVE-2026-66154). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71290 |
|
Vulnerability in apache (CVE-2026-71290)
vulnerability in apache (CVE-2026-71290). Confidential information can be exposed externally.
|
| CVE-2026-66150 |
|
Code Injection in CVE-2026-66150 (CVE-2026-66150)
code injection in CVE-2026-66150 (CVE-2026-66150). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66148 |
|
Code Injection in CVE-2026-66148 (CVE-2026-66148)
code injection in CVE-2026-66148 (CVE-2026-66148). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66147 |
|
Code Injection in CVE-2026-66147 (CVE-2026-66147)
code injection in CVE-2026-66147 (CVE-2026-66147). Data can be tampered with by attackers.
|
| CVE-2026-66149 |
|
Code Injection in CVE-2026-66149 (CVE-2026-66149)
code injection in CVE-2026-66149 (CVE-2026-66149). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14863 |
|
OS Command Injection in CVE-2026-14863 (CVE-2026-14863)
OS command injection in CVE-2026-14863 (CVE-2026-14863). Successful exploitation can lead to full system takeover.
|
| CVE-2026-29035 |
|
Out-of-Bounds Write in dos (CVE-2026-29035)
out-of-bounds write in dos (CVE-2026-29035). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19579 |
|
Vulnerability in snipeitapp (CVE-2026-19579)
vulnerability in snipeitapp (CVE-2026-19579). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15606 |
|
Vulnerability in wordpress (CVE-2026-15606)
vulnerability in wordpress (CVE-2026-15606). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19550 |
|
Authorization Flaw in redhat (CVE-2026-19550)
vulnerability in redhat (CVE-2026-19550). Confidential information can be exposed externally.
|
| CVE-2026-18634 |
|
Unsafe Deserialization in CVE-2026-18634 (CVE-2026-18634)
vulnerability in CVE-2026-18634 (CVE-2026-18634). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63133 |
|
Vulnerability in CVE-2026-63133 (CVE-2026-63133)
vulnerability in CVE-2026-63133 (CVE-2026-63133). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63177 |
|
Authorization Flaw in nginx (CVE-2026-63177)
vulnerability in nginx (CVE-2026-63177). Confidential information can be exposed externally. Exploitable via ``ngx.var.request_uri``.
|
| CVE-2026-63134 |
|
Path Traversal in CVE-2026-63134 (CVE-2026-63134)
path traversal in CVE-2026-63134 (CVE-2026-63134). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55676 |
|
Unrestricted File Upload in nginx (CVE-2026-55676)
vulnerability in nginx (CVE-2026-55676). Successful exploitation can lead to full system takeover. Exploitable via `POST /server/php/submit.php`.
|
| CVE-2026-48763 |
|
Vulnerability in CVE-2026-48763 (CVE-2026-48763)
vulnerability in CVE-2026-48763 (CVE-2026-48763). Data can be tampered with by attackers. Exploitable via `GET /api/v1/typebots/{typebotId}/blocks/{blockId}/storage/upload-url`.
|
| CVE-2026-48762 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-48762)
SSRF in ssrf (CVE-2026-48762). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73243 |
|
SSRF (Server-Side Request Forgery) in spring (CVE-2026-73243)
SSRF in spring (CVE-2026-73243). Risk of unauthorized operations or information disclosure. Exploitable via `GET /addTask`.
|
| CVE-2026-73244 |
|
Path Traversal in spring (CVE-2026-73244)
path traversal in spring (CVE-2026-73244). Risk of unauthorized operations or information disclosure. Exploitable via `POST /listFiles`.
|
| CVE-2026-73241 |
|
Authentication Bypass in c (CVE-2026-73241)
authentication bypass in c (CVE-2026-73241). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73242 |
|
Vulnerability in c (CVE-2026-73242)
vulnerability in c (CVE-2026-73242). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73281 |
|
Vulnerability in CVE-2026-73281 (CVE-2026-73281)
vulnerability in CVE-2026-73281 (CVE-2026-73281). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73282 |
|
Use-After-Free in openbsd (CVE-2026-73282)
vulnerability in openbsd (CVE-2026-73282). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73283 |
|
Vulnerability in openbsd (CVE-2026-73283)
vulnerability in openbsd (CVE-2026-73283). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73231 |
|
Vulnerability in CVE-2026-73231 (CVE-2026-73231)
vulnerability in CVE-2026-73231 (CVE-2026-73231). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73229 |
|
Information Disclosure in django (CVE-2026-73229)
vulnerability in django (CVE-2026-73229). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73230 |
|
Information Disclosure in CVE-2026-73230 (CVE-2026-73230)
vulnerability in CVE-2026-73230 (CVE-2026-73230). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73234 |
|
Path Traversal in cpp (CVE-2026-73234)
path traversal in cpp (CVE-2026-73234). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73235 |
|
XXE (XML External Entity) in cpp (CVE-2026-73235)
vulnerability in cpp (CVE-2026-73235). Confidential information can be exposed externally.
|
| CVE-2026-73233 |
|
Code Injection in cpp (CVE-2026-73233)
code injection in cpp (CVE-2026-73233). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73032 |
|
Code Injection in CVE-2026-73032 (CVE-2026-73032)
code injection in CVE-2026-73032 (CVE-2026-73032). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73034 |
|
Path Traversal in path-traversal (CVE-2026-73034)
path traversal in path-traversal (CVE-2026-73034). Successful exploitation can lead to full system takeover.
|