Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-61463 |
|
Privilege Escalation in privilege-escalation (CVE-2026-61463)
vulnerability in privilege-escalation (CVE-2026-61463). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61462 |
|
Vulnerability in path-traversal (CVE-2026-61462)
vulnerability in path-traversal (CVE-2026-61462). Confidential information can be exposed externally.
|
| CVE-2026-53364 |
|
Vulnerability in linux (CVE-2026-53364)
vulnerability in linux (CVE-2026-53364). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59954 |
|
Vulnerability in com.ctrip.framework.apollo:apollo (CVE-2026-59954)
vulnerability in com.ctrip.framework.apollo:apollo (CVE-2026-59954). Confidential information can be exposed externally.
|
| CVE-2026-45573 |
|
SSRF (Server-Side Request Forgery) in decidim-core (CVE-2026-45573)
SSRF in decidim-core (CVE-2026-45573). Risk of unauthorized operations or information disclosure. Exploitable via `POST /notifications_subscriptions`. Mitigation: upgrade to `0.32.0` or later.
|
| CVE-2026-45572 |
|
Code Injection in decidim-core (CVE-2026-45572)
code injection in decidim-core (CVE-2026-45572). Risk of unauthorized operations or information disclosure. Exploitable via ``html_safe``. Mitigation: upgrade to `0.32.0` or later.
|
| CVE-2026-57432 |
|
Out-of-Bounds Read in perl (CVE-2026-57432)
vulnerability in perl (CVE-2026-57432). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57433 |
|
Vulnerability in deserialization (CVE-2026-57433)
vulnerability in deserialization (CVE-2026-57433). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45415 |
|
Vulnerability in decidim-verifications (CVE-2026-45415)
vulnerability in decidim-verifications (CVE-2026-45415). Data can be tampered with by attackers. Mitigation: upgrade to `0.32.0` or later.
|
| CVE-2026-45414 |
|
Vulnerability in decidim (CVE-2026-45414)
vulnerability in decidim (CVE-2026-45414). Confidential information can be exposed externally. Exploitable via `Host header`. Mitigation: upgrade to `0.32.0` or later.
|
| CVE-2026-13221 |
|
Vulnerability in perl (CVE-2026-13221)
vulnerability in perl (CVE-2026-13221). Data can be tampered with by attackers.
|
| CVE-2026-45378 |
|
Information Disclosure in decidim-verifications (CVE-2026-45378)
vulnerability in decidim-verifications (CVE-2026-45378). Confidential information can be exposed externally. Exploitable via ``verification_attachment``. Mitigation: upgrade to `0.32.0` or later.
|
| CVE-2026-45377 |
|
Information Disclosure in decidim-core (CVE-2026-45377)
vulnerability in decidim-core (CVE-2026-45377). Confidential information can be exposed externally. Exploitable via ``download_your_data``. Mitigation: upgrade to `0.32.0` or later.
|
| CVE-2026-45376 |
|
SQL Injection in decidim-admin (CVE-2026-45376)
SQL injection in decidim-admin (CVE-2026-45376). Confidential information can be exposed externally. Exploitable via `GET /admin/organization/users`. Mitigation: upgrade to `0.32.0` or later.
|
| CVE-2026-45330 |
|
Vulnerability in decidim-verifications (CVE-2026-45330)
vulnerability in decidim-verifications (CVE-2026-45330). Confidential information can be exposed externally. Exploitable via ``id_documents``. Mitigation: upgrade to `0.32.0` or later.
|
| CVE-2026-45086 |
|
Vulnerability in decidim-demographics (CVE-2026-45086)
vulnerability in decidim-demographics (CVE-2026-45086). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.32.0` or later.
|
| CVE-2025-32781 |
|
Vulnerability in com.ctrip.framework.apollo:apollo (CVE-2025-32781)
vulnerability in com.ctrip.framework.apollo:apollo (CVE-2025-32781). Confidential information can be exposed externally. Exploitable via `GET /envs/{env}/releases/{releaseId}`.
|
| CVE-2026-59245 |
|
Privilege Escalation in apache (CVE-2026-59245)
vulnerability in apache (CVE-2026-59245). Confidential information can be exposed externally. Exploitable via ``dag_id``.
|
| CVE-2026-6847 |
|
Vulnerability in CVE-2026-6847 (CVE-2026-6847)
vulnerability in CVE-2026-6847 (CVE-2026-6847). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60121 |
|
OS Command Injection in vitec (CVE-2026-60121)
OS command injection in vitec (CVE-2026-60121). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61498 |
|
OS Command Injection in vitec (CVE-2026-61498)
OS command injection in vitec (CVE-2026-61498). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40469 |
|
Vulnerability in c (CVE-2026-40469)
vulnerability in c (CVE-2026-40469). Data can be tampered with by attackers.
|
| CVE-2026-40553 |
|
Vulnerability in c (CVE-2026-40553)
vulnerability in c (CVE-2026-40553). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40468 |
|
Vulnerability in c (CVE-2026-40468)
vulnerability in c (CVE-2026-40468). Data can be tampered with by attackers.
|
| CVE-2026-40467 |
|
Use-After-Free in c (CVE-2026-40467)
vulnerability in c (CVE-2026-40467). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15584 |
|
Vulnerability in privilege-escalation (CVE-2026-15584)
vulnerability in privilege-escalation (CVE-2026-15584). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15559 |
|
Vulnerability in sqli (CVE-2026-15559)
vulnerability in sqli (CVE-2026-15559). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15558 |
|
Vulnerability in sqli (CVE-2026-15558)
vulnerability in sqli (CVE-2026-15558). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12257 |
|
Code Injection in CVE-2026-12257 (CVE-2026-12257)
code injection in CVE-2026-12257 (CVE-2026-12257). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62147 |
|
Authorization Flaw in CVE-2026-62147 (CVE-2026-62147)
vulnerability in CVE-2026-62147 (CVE-2026-62147). Confidential information can be exposed externally.
|
| CVE-2026-9820 |
|
Vulnerability in mattermost (CVE-2026-9820)
vulnerability in mattermost (CVE-2026-9820). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9824 |
|
Vulnerability in mattermost (CVE-2026-9824)
vulnerability in mattermost (CVE-2026-9824). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4765 |
|
Cross-Site Scripting (XSS) in CVE-2026-4765 (CVE-2026-4765)
cross-site scripting in CVE-2026-4765 (CVE-2026-4765). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14934 |
|
Vulnerability in CVE-2026-14934 (CVE-2026-14934)
vulnerability in CVE-2026-14934 (CVE-2026-14934). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61983 |
|
Vulnerability in CVE-2026-61983 (CVE-2026-61983)
vulnerability in CVE-2026-61983 (CVE-2026-61983). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61985 |
|
Vulnerability in CVE-2026-61985 (CVE-2026-61985)
vulnerability in CVE-2026-61985 (CVE-2026-61985). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61975 |
|
Vulnerability in CVE-2026-61975 (CVE-2026-61975)
vulnerability in CVE-2026-61975 (CVE-2026-61975). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61976 |
|
Vulnerability in CVE-2026-61976 (CVE-2026-61976)
vulnerability in CVE-2026-61976 (CVE-2026-61976). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61977 |
|
Vulnerability in CVE-2026-61977 (CVE-2026-61977)
vulnerability in CVE-2026-61977 (CVE-2026-61977). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59523 |
|
Vulnerability in CVE-2026-59523 (CVE-2026-59523)
vulnerability in CVE-2026-59523 (CVE-2026-59523). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61952 |
|
Vulnerability in CVE-2026-61952 (CVE-2026-61952)
vulnerability in CVE-2026-61952 (CVE-2026-61952). Data can be tampered with by attackers.
|
| CVE-2026-61958 |
|
Vulnerability in CVE-2026-61958 (CVE-2026-61958)
vulnerability in CVE-2026-61958 (CVE-2026-61958). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61968 |
|
Vulnerability in CVE-2026-61968 (CVE-2026-61968)
vulnerability in CVE-2026-61968 (CVE-2026-61968). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59521 |
|
Unsafe Deserialization in deserialization (CVE-2026-59521)
vulnerability in deserialization (CVE-2026-59521). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61970 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-61970)
SSRF in ssrf (CVE-2026-61970). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61956 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-61956)
vulnerability in csrf (CVE-2026-61956). Data can be tampered with by attackers.
|
| CVE-2026-61955 |
|
SQL Injection in sqli (CVE-2026-61955)
SQL injection in sqli (CVE-2026-61955). Confidential information can be exposed externally.
|
| CVE-2026-59515 |
|
SQL Injection in sqli (CVE-2026-59515)
SQL injection in sqli (CVE-2026-59515). Confidential information can be exposed externally.
|
| CVE-2026-57814 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-57814)
cross-site scripting in wordpress (CVE-2026-57814). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57816 |
|
Cross-Site Scripting (XSS) in CVE-2026-57816 (CVE-2026-57816)
cross-site scripting in CVE-2026-57816 (CVE-2026-57816). Risk of unauthorized operations or information disclosure.
|