Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-56167 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-56167)
SSRF in ssrf (CVE-2026-56167). Confidential information can be exposed externally.
|
| CVE-2026-56160 |
|
Vulnerability in microsoft (CVE-2026-56160)
vulnerability in microsoft (CVE-2026-56160). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56165 |
|
Vulnerability in microsoft (CVE-2026-56165)
vulnerability in microsoft (CVE-2026-56165). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54120 |
|
Vulnerability in microsoft (CVE-2026-54120)
vulnerability in microsoft (CVE-2026-54120). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50517 |
|
Unsafe Deserialization in deserialization (CVE-2026-50517)
vulnerability in deserialization (CVE-2026-50517). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49159 |
|
Information Disclosure in microsoft (CVE-2026-49159)
vulnerability in microsoft (CVE-2026-49159). Confidential information can be exposed externally.
|
| CVE-2026-35425 |
|
Vulnerability in microsoft (CVE-2026-35425)
vulnerability in microsoft (CVE-2026-35425). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16767 |
|
Path Traversal in path-traversal (CVE-2026-16767)
path traversal in path-traversal (CVE-2026-16767). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44955 |
|
Vulnerability in CVE-2026-44955 (CVE-2026-44955)
vulnerability in CVE-2026-44955 (CVE-2026-44955). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28698 |
|
Vulnerability in CVE-2026-28698 (CVE-2026-28698)
vulnerability in CVE-2026-28698 (CVE-2026-28698). Confidential information can be exposed externally.
|
| CVE-2026-42933 |
|
Vulnerability in CVE-2026-42933 (CVE-2026-42933)
vulnerability in CVE-2026-42933 (CVE-2026-42933). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50044 |
|
Vulnerability in CVE-2026-50044 (CVE-2026-50044)
vulnerability in CVE-2026-50044 (CVE-2026-50044). Confidential information can be exposed externally.
|
| CVE-2026-16807 |
|
Out-of-Bounds Write in Google chrome (CVE-2026-16807)
out-of-bounds write in Google chrome (CVE-2026-16807). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63732 |
|
OS Command Injection in CVE-2026-63732 (CVE-2026-63732)
OS command injection in CVE-2026-63732 (CVE-2026-63732). Successful exploitation can lead to full system takeover. Exploitable via `Host header`. Mitigation: upgrade to `0.4.60` or later.
|
| CVE-2026-65604 |
|
Vulnerability in CVE-2026-65604 (CVE-2026-65604)
vulnerability in CVE-2026-65604 (CVE-2026-65604). Confidential information can be exposed externally.
|
| CVE-2026-65694 |
|
Path Traversal in path-traversal (CVE-2026-65694)
path traversal in path-traversal (CVE-2026-65694). Confidential information can be exposed externally.
|
| CVE-2026-63313 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-63313)
SSRF in ssrf (CVE-2026-63313). Confidential information can be exposed externally.
|
| CVE-2026-16765 |
|
Vulnerability in sqli (CVE-2026-16765)
vulnerability in sqli (CVE-2026-16765). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16804 |
|
Use-After-Free in google (CVE-2026-16804)
vulnerability in google (CVE-2026-16804). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16805 |
|
Use-After-Free in google (CVE-2026-16805)
vulnerability in google (CVE-2026-16805). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16806 |
|
Use-After-Free in google (CVE-2026-16806)
vulnerability in google (CVE-2026-16806). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16764 |
|
Vulnerability in CVE-2026-16764 (CVE-2026-16764)
vulnerability in CVE-2026-16764 (CVE-2026-16764). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-58353 |
|
Vulnerability in react (CVE-2024-58353)
vulnerability in react (CVE-2024-58353). Confidential information can be exposed externally.
|
| CVE-2024-58355 |
|
Vulnerability in react (CVE-2024-58355)
vulnerability in react (CVE-2024-58355). Confidential information can be exposed externally. Mitigation: upgrade to `4.7.16` or later.
|
| CVE-2024-58354 |
|
Command Injection in CVE-2024-58354 (CVE-2024-58354)
command injection in CVE-2024-58354 (CVE-2024-58354). Data can be tampered with by attackers.
|
| CVE-2026-16763 |
|
Command Injection in CVE-2026-16763 (CVE-2026-16763)
command injection in CVE-2026-16763 (CVE-2026-16763). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71389 |
|
Code Injection in react (CVE-2025-71389)
code injection in react (CVE-2025-71389). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50032 |
|
Vulnerability in CVE-2026-50032 (CVE-2026-50032)
vulnerability in CVE-2026-50032 (CVE-2026-50032). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52439 |
|
Vulnerability in CVE-2026-52439 (CVE-2026-52439)
vulnerability in CVE-2026-52439 (CVE-2026-52439). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49035 |
|
Vulnerability in dos (CVE-2026-49035)
vulnerability in dos (CVE-2026-49035). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50039 |
|
Vulnerability in CVE-2026-50039 (CVE-2026-50039)
vulnerability in CVE-2026-50039 (CVE-2026-50039). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38764 |
|
Privilege Escalation in CVE-2026-38764 (CVE-2026-38764)
vulnerability in CVE-2026-38764 (CVE-2026-38764). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34496 |
|
Privilege Escalation in CVE-2026-34496 (CVE-2026-34496)
vulnerability in CVE-2026-34496 (CVE-2026-34496). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15630 |
|
Privilege Escalation in CVE-2026-15630 (CVE-2026-15630)
vulnerability in CVE-2026-15630 (CVE-2026-15630). Successful exploitation can lead to full system takeover.
|
| CVE-2026-21655 |
|
Unsafe Deserialization in deserialization (CVE-2026-21655)
vulnerability in deserialization (CVE-2026-21655). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-21653 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-21653)
SSRF in ssrf (CVE-2026-21653). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10697 |
|
Authentication Bypass in progress (CVE-2026-10697)
authentication bypass in progress (CVE-2026-10697). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15981 |
|
Authentication Bypass in wordpress (CVE-2026-15981)
authentication bypass in wordpress (CVE-2026-15981). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15968 |
|
Cross-Site Scripting (XSS) in progress (CVE-2026-15968)
cross-site scripting in progress (CVE-2026-15968). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16002 |
|
Out-of-Bounds Read in dos (CVE-2026-16002)
vulnerability in dos (CVE-2026-16002). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16796 |
|
Vulnerability in Amazon bedrock-agentcore (CVE-2026-16796)
vulnerability in Amazon bedrock-agentcore (CVE-2026-16796). Confidential information can be exposed externally. Mitigation: upgrade to `1.18.1` or later.
|
| CVE-2026-65705 |
|
Vulnerability in ffmpeg (CVE-2026-65705)
vulnerability in ffmpeg (CVE-2026-65705). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65706 |
|
Vulnerability in ffmpeg (CVE-2026-65706)
vulnerability in ffmpeg (CVE-2026-65706). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65703 |
|
Out-of-Bounds Write in ffmpeg (CVE-2026-65703)
out-of-bounds write in ffmpeg (CVE-2026-65703). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65704 |
|
Vulnerability in ffmpeg (CVE-2026-65704)
vulnerability in ffmpeg (CVE-2026-65704). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64785 |
|
Vulnerability in swift-nio-http2 (CVE-2026-64785)
vulnerability in swift-nio-http2 (CVE-2026-64785). Risk of unauthorized operations or information disclosure. Exploitable via ``enableOutboundHeaderValidation``. Mitigation: upgrade to `48bfd90` or later.
|
| CVE-2026-63359 |
|
SQL Injection in CVE-2026-63359 (CVE-2026-63359)
SQL injection in CVE-2026-63359 (CVE-2026-63359). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60122 |
|
Code Injection in CVE-2026-60122 (CVE-2026-60122)
code injection in CVE-2026-60122 (CVE-2026-60122). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15212 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15212)
vulnerability in wordpress (CVE-2026-15212). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12353 |
|
Vulnerability in CVE-2026-12353 (CVE-2026-12353)
vulnerability in CVE-2026-12353 (CVE-2026-12353). Risk of unauthorized operations or information disclosure.
|