Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-79676 Path Traversal in path-traversal (CVE-2026-79676)
path traversal in path-traversal (CVE-2026-79676). Confidential information can be exposed externally.
CVE-2026-70550 Vulnerability in CVE-2026-70550 (CVE-2026-70550)
vulnerability in CVE-2026-70550 (CVE-2026-70550). Confidential information can be exposed externally.
CVE-2026-79769 Vulnerability in CVE-2026-79769 (CVE-2026-79769)
vulnerability in CVE-2026-79769 (CVE-2026-79769). Risk of unauthorized operations or information disclosure.
CVE-2026-79674 Vulnerability in CVE-2026-79674 (CVE-2026-79674)
vulnerability in CVE-2026-79674 (CVE-2026-79674). Confidential information can be exposed externally.
CVE-2026-79675 Vulnerability in CVE-2026-79675 (CVE-2026-79675)
vulnerability in CVE-2026-79675 (CVE-2026-79675). Successful exploitation can lead to full system takeover.
CVE-2026-79771 Vulnerability in dos (CVE-2026-79771)
vulnerability in dos (CVE-2026-79771). Risk of unauthorized operations or information disclosure.
CVE-2025-71406 Use-After-Free in CVE-2025-71406 (CVE-2025-71406)
vulnerability in CVE-2025-71406 (CVE-2025-71406). Data can be tampered with by attackers.
CVE-2025-71407 Out-of-Bounds Write in dos (CVE-2025-71407)
out-of-bounds write in dos (CVE-2025-71407). Successful exploitation can lead to full system takeover.
CVE-2025-71346 Out-of-Bounds Read in c (CVE-2025-71346)
vulnerability in c (CVE-2025-71346). Risk of unauthorized operations or information disclosure.
CVE-2022-51000 Use-After-Free in dos (CVE-2022-51000)
vulnerability in dos (CVE-2022-51000). Successful exploitation can lead to full system takeover.
CVE-2024-58378 Use-After-Free in CVE-2024-58378 (CVE-2024-58378)
vulnerability in CVE-2024-58378 (CVE-2024-58378). Successful exploitation can lead to full system takeover.
CVE-2022-50998 Vulnerability in dos (CVE-2022-50998)
vulnerability in dos (CVE-2022-50998). Risk of unauthorized operations or information disclosure.
CVE-2023-54354 Vulnerability in dos (CVE-2023-54354)
vulnerability in dos (CVE-2023-54354). Risk of unauthorized operations or information disclosure.
CVE-2024-58377 Out-of-Bounds Read in CVE-2024-58377 (CVE-2024-58377)
vulnerability in CVE-2024-58377 (CVE-2024-58377). Confidential information can be exposed externally.
CVE-2021-47996 Buffer Overflow in dos (CVE-2021-47996)
vulnerability in dos (CVE-2021-47996). Risk of unauthorized operations or information disclosure.
CVE-2022-50999 Buffer Overflow in dos (CVE-2022-50999)
vulnerability in dos (CVE-2022-50999). Risk of unauthorized operations or information disclosure.
CVE-2026-55620 Vulnerability in eml_parser (CVE-2026-55620)
vulnerability in eml_parser (CVE-2026-55620). Risk of unauthorized operations or information disclosure. Exploitable via ``eml_parser``. Mitigation: upgrade to `3.0.2` or later.
CVE-2026-55619 Vulnerability in eml_parser (CVE-2026-55619)
vulnerability in eml_parser (CVE-2026-55619). Risk of unauthorized operations or information disclosure. Exploitable via ``eml_parser``. Mitigation: upgrade to `3.0.2` or later.
CVE-2026-55618 Vulnerability in eml_parser (CVE-2026-55618)
vulnerability in eml_parser (CVE-2026-55618). Data can be tampered with by attackers. Exploitable via ``eml_parser``. Mitigation: upgrade to `3.0.2` or later.
CVE-2026-59984 Out-of-Bounds Write in dos (CVE-2026-59984)
out-of-bounds write in dos (CVE-2026-59984). Risk of unauthorized operations or information disclosure.
CVE-2026-59982 Vulnerability in CVE-2026-59982 (CVE-2026-59982)
vulnerability in CVE-2026-59982 (CVE-2026-59982). Risk of unauthorized operations or information disclosure.
CVE-2026-59983 Out-of-Bounds Read in c (CVE-2026-59983)
vulnerability in c (CVE-2026-59983). Risk of unauthorized operations or information disclosure.
CVE-2026-55419 Unrestricted File Upload in reachy-mini (CVE-2026-55419)
vulnerability in reachy-mini (CVE-2026-55419). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.2` or later.
CVE-2026-59189 Out-of-Bounds Read in CVE-2026-59189 (CVE-2026-59189)
vulnerability in CVE-2026-59189 (CVE-2026-59189). Risk of unauthorized operations or information disclosure.
CVE-2026-59184 Use-After-Free in CVE-2026-59184 (CVE-2026-59184)
vulnerability in CVE-2026-59184 (CVE-2026-59184). Risk of unauthorized operations or information disclosure.
CVE-2026-59186 Vulnerability in CVE-2026-59186 (CVE-2026-59186)
vulnerability in CVE-2026-59186 (CVE-2026-59186). Risk of unauthorized operations or information disclosure.
CVE-2026-59187 Vulnerability in CVE-2026-59187 (CVE-2026-59187)
vulnerability in CVE-2026-59187 (CVE-2026-59187). Risk of unauthorized operations or information disclosure.
CVE-2026-13217 Vulnerability in c (CVE-2026-13217)
vulnerability in c (CVE-2026-13217). Risk of unauthorized operations or information disclosure.
CVE-2026-13478 Out-of-Bounds Read in c (CVE-2026-13478)
vulnerability in c (CVE-2026-13478). Risk of unauthorized operations or information disclosure.
CVE-2026-13216 Out-of-Bounds Write in c (CVE-2026-13216)
out-of-bounds write in c (CVE-2026-13216). Data can be tampered with by attackers.
CVE-2026-55557 Path Traversal in browse-mcp (CVE-2026-55557)
path traversal in browse-mcp (CVE-2026-55557). Risk of unauthorized operations or information disclosure. Exploitable via ``browser_download``. Mitigation: upgrade to `0.8.2` or later.
CVE-2026-55585 Code Injection in qwed (CVE-2026-55585)
code injection in qwed (CVE-2026-55585). Successful exploitation can lead to full system takeover. Exploitable via `POST /verify/math`. Mitigation: upgrade to `5.1.2` or later.
CVE-2026-55553 Information Disclosure in urllib (CVE-2026-55553)
vulnerability in urllib (CVE-2026-55553). Confidential information can be exposed externally. Exploitable via `Cookie header`. Mitigation: upgrade to `2.44.1` or later.
CVE-2026-55571 Vulnerability in djust (CVE-2026-55571)
vulnerability in djust (CVE-2026-55571). Data can be tampered with by attackers. Exploitable via ``LiveViewConsumer``. Mitigation: upgrade to `1.0.4` or later.
CVE-2026-55640 Vulnerability in nextcloud-mcp-server (CVE-2026-55640)
vulnerability in nextcloud-mcp-server (CVE-2026-55640). Data can be tampered with by attackers. Exploitable via `POST /webhooks/nextcloud`. Mitigation: upgrade to `0.117.2` or later.
CVE-2026-55580 OS Command Injection in github.com/sonirico/mcp-shell (CVE-2026-55580)
OS command injection in github.com/sonirico/mcp-shell (CVE-2026-55580). Risk of unauthorized operations or information disclosure. Exploitable via ``config.go``. Mitigation: upgrade to `0.6.0` or later.
CVE-2026-55581 OS Command Injection in github.com/sonirico/mcp-shell (CVE-2026-55581)
OS command injection in github.com/sonirico/mcp-shell (CVE-2026-55581). Successful exploitation can lead to full system takeover. Exploitable via ``security.yaml``. Mitigation: upgrade to `0.6.0` or later.
CVE-2026-55582 OS Command Injection in github.com/sonirico/mcp-shell (CVE-2026-55582)
OS command injection in github.com/sonirico/mcp-shell (CVE-2026-55582). Successful exploitation can lead to full system takeover. Exploitable via ``security.yaml``. Mitigation: upgrade to `0.6.0` or later.
CVE-2026-16286 Unrestricted File Upload in CVE-2026-16286 (CVE-2026-16286)
vulnerability in CVE-2026-16286 (CVE-2026-16286). Successful exploitation can lead to full system takeover.
CVE-2026-79717 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-79717)
SSRF in ssrf (CVE-2026-79717). Risk of unauthorized operations or information disclosure.
CVE-2026-70551 SSRF (Server-Side Request Forgery) in CVE-2026-70551 (CVE-2026-70551)
SSRF in CVE-2026-70551 (CVE-2026-70551). Confidential information can be exposed externally.
CVE-2026-69104 Vulnerability in CVE-2026-69104 (CVE-2026-69104)
vulnerability in CVE-2026-69104 (CVE-2026-69104). Risk of unauthorized operations or information disclosure.
CVE-2026-15310 Vulnerability in CVE-2026-15310 (CVE-2026-15310)
vulnerability in CVE-2026-15310 (CVE-2026-15310). Risk of unauthorized operations or information disclosure.
CVE-2026-79622 Path Traversal in path-traversal (CVE-2026-79622)
path traversal in path-traversal (CVE-2026-79622). Risk of unauthorized operations or information disclosure.
CVE-2026-78887 Vulnerability in CVE-2026-78887 (CVE-2026-78887)
vulnerability in CVE-2026-78887 (CVE-2026-78887). Risk of unauthorized operations or information disclosure.
CVE-2026-78885 Authentication Bypass in CVE-2026-78885 (CVE-2026-78885)
authentication bypass in CVE-2026-78885 (CVE-2026-78885). Risk of unauthorized operations or information disclosure.
CVE-2026-79655 Vulnerability in path-traversal (CVE-2026-79655)
vulnerability in path-traversal (CVE-2026-79655). Successful exploitation can lead to full system takeover.
CVE-2026-79623 Command Injection in CVE-2026-79623 (CVE-2026-79623)
command injection in CVE-2026-79623 (CVE-2026-79623). Risk of unauthorized operations or information disclosure.
CVE-2026-78886 Path Traversal in path-traversal (CVE-2026-78886)
path traversal in path-traversal (CVE-2026-78886). Risk of unauthorized operations or information disclosure.
CVE-2026-57863 Path Traversal in path-traversal (CVE-2026-57863)
path traversal in path-traversal (CVE-2026-57863). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →