Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-61463 Privilege Escalation in privilege-escalation (CVE-2026-61463)
vulnerability in privilege-escalation (CVE-2026-61463). Successful exploitation can lead to full system takeover.
CVE-2026-61462 Vulnerability in path-traversal (CVE-2026-61462)
vulnerability in path-traversal (CVE-2026-61462). Confidential information can be exposed externally.
CVE-2026-53364 Vulnerability in linux (CVE-2026-53364)
vulnerability in linux (CVE-2026-53364). Risk of unauthorized operations or information disclosure.
CVE-2026-59954 Vulnerability in com.ctrip.framework.apollo:apollo (CVE-2026-59954)
vulnerability in com.ctrip.framework.apollo:apollo (CVE-2026-59954). Confidential information can be exposed externally.
CVE-2026-45573 SSRF (Server-Side Request Forgery) in decidim-core (CVE-2026-45573)
SSRF in decidim-core (CVE-2026-45573). Risk of unauthorized operations or information disclosure. Exploitable via `POST /notifications_subscriptions`. Mitigation: upgrade to `0.32.0` or later.
CVE-2026-45572 Code Injection in decidim-core (CVE-2026-45572)
code injection in decidim-core (CVE-2026-45572). Risk of unauthorized operations or information disclosure. Exploitable via ``html_safe``. Mitigation: upgrade to `0.32.0` or later.
CVE-2026-57432 Out-of-Bounds Read in perl (CVE-2026-57432)
vulnerability in perl (CVE-2026-57432). Successful exploitation can lead to full system takeover.
CVE-2026-57433 Vulnerability in deserialization (CVE-2026-57433)
vulnerability in deserialization (CVE-2026-57433). Successful exploitation can lead to full system takeover.
CVE-2026-45415 Vulnerability in decidim-verifications (CVE-2026-45415)
vulnerability in decidim-verifications (CVE-2026-45415). Data can be tampered with by attackers. Mitigation: upgrade to `0.32.0` or later.
CVE-2026-45414 Vulnerability in decidim (CVE-2026-45414)
vulnerability in decidim (CVE-2026-45414). Confidential information can be exposed externally. Exploitable via `Host header`. Mitigation: upgrade to `0.32.0` or later.
CVE-2026-13221 Vulnerability in perl (CVE-2026-13221)
vulnerability in perl (CVE-2026-13221). Data can be tampered with by attackers.
CVE-2026-45378 Information Disclosure in decidim-verifications (CVE-2026-45378)
vulnerability in decidim-verifications (CVE-2026-45378). Confidential information can be exposed externally. Exploitable via ``verification_attachment``. Mitigation: upgrade to `0.32.0` or later.
CVE-2026-45377 Information Disclosure in decidim-core (CVE-2026-45377)
vulnerability in decidim-core (CVE-2026-45377). Confidential information can be exposed externally. Exploitable via ``download_your_data``. Mitigation: upgrade to `0.32.0` or later.
CVE-2026-45376 SQL Injection in decidim-admin (CVE-2026-45376)
SQL injection in decidim-admin (CVE-2026-45376). Confidential information can be exposed externally. Exploitable via `GET /admin/organization/users`. Mitigation: upgrade to `0.32.0` or later.
CVE-2026-45330 Vulnerability in decidim-verifications (CVE-2026-45330)
vulnerability in decidim-verifications (CVE-2026-45330). Confidential information can be exposed externally. Exploitable via ``id_documents``. Mitigation: upgrade to `0.32.0` or later.
CVE-2026-45086 Vulnerability in decidim-demographics (CVE-2026-45086)
vulnerability in decidim-demographics (CVE-2026-45086). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.32.0` or later.
CVE-2025-32781 Vulnerability in com.ctrip.framework.apollo:apollo (CVE-2025-32781)
vulnerability in com.ctrip.framework.apollo:apollo (CVE-2025-32781). Confidential information can be exposed externally. Exploitable via `GET /envs/{env}/releases/{releaseId}`.
CVE-2026-59245 Privilege Escalation in apache (CVE-2026-59245)
vulnerability in apache (CVE-2026-59245). Confidential information can be exposed externally. Exploitable via ``dag_id``.
CVE-2026-6847 Vulnerability in CVE-2026-6847 (CVE-2026-6847)
vulnerability in CVE-2026-6847 (CVE-2026-6847). Risk of unauthorized operations or information disclosure.
CVE-2026-60121 OS Command Injection in vitec (CVE-2026-60121)
OS command injection in vitec (CVE-2026-60121). Successful exploitation can lead to full system takeover.
CVE-2026-61498 OS Command Injection in vitec (CVE-2026-61498)
OS command injection in vitec (CVE-2026-61498). Successful exploitation can lead to full system takeover.
CVE-2026-40469 Vulnerability in c (CVE-2026-40469)
vulnerability in c (CVE-2026-40469). Data can be tampered with by attackers.
CVE-2026-40553 Vulnerability in c (CVE-2026-40553)
vulnerability in c (CVE-2026-40553). Risk of unauthorized operations or information disclosure.
CVE-2026-40468 Vulnerability in c (CVE-2026-40468)
vulnerability in c (CVE-2026-40468). Data can be tampered with by attackers.
CVE-2026-40467 Use-After-Free in c (CVE-2026-40467)
vulnerability in c (CVE-2026-40467). Risk of unauthorized operations or information disclosure.
CVE-2026-15584 Vulnerability in privilege-escalation (CVE-2026-15584)
vulnerability in privilege-escalation (CVE-2026-15584). Successful exploitation can lead to full system takeover.
CVE-2026-15559 Vulnerability in sqli (CVE-2026-15559)
vulnerability in sqli (CVE-2026-15559). Risk of unauthorized operations or information disclosure.
CVE-2026-15558 Vulnerability in sqli (CVE-2026-15558)
vulnerability in sqli (CVE-2026-15558). Risk of unauthorized operations or information disclosure.
CVE-2026-12257 Code Injection in CVE-2026-12257 (CVE-2026-12257)
code injection in CVE-2026-12257 (CVE-2026-12257). Risk of unauthorized operations or information disclosure.
CVE-2026-62147 Authorization Flaw in CVE-2026-62147 (CVE-2026-62147)
vulnerability in CVE-2026-62147 (CVE-2026-62147). Confidential information can be exposed externally.
CVE-2026-9820 Vulnerability in mattermost (CVE-2026-9820)
vulnerability in mattermost (CVE-2026-9820). Risk of unauthorized operations or information disclosure.
CVE-2026-9824 Vulnerability in mattermost (CVE-2026-9824)
vulnerability in mattermost (CVE-2026-9824). Risk of unauthorized operations or information disclosure.
CVE-2026-4765 Cross-Site Scripting (XSS) in CVE-2026-4765 (CVE-2026-4765)
cross-site scripting in CVE-2026-4765 (CVE-2026-4765). Risk of unauthorized operations or information disclosure.
CVE-2026-14934 Vulnerability in CVE-2026-14934 (CVE-2026-14934)
vulnerability in CVE-2026-14934 (CVE-2026-14934). Risk of unauthorized operations or information disclosure.
CVE-2026-61983 Vulnerability in CVE-2026-61983 (CVE-2026-61983)
vulnerability in CVE-2026-61983 (CVE-2026-61983). Risk of unauthorized operations or information disclosure.
CVE-2026-61985 Vulnerability in CVE-2026-61985 (CVE-2026-61985)
vulnerability in CVE-2026-61985 (CVE-2026-61985). Risk of unauthorized operations or information disclosure.
CVE-2026-61975 Vulnerability in CVE-2026-61975 (CVE-2026-61975)
vulnerability in CVE-2026-61975 (CVE-2026-61975). Risk of unauthorized operations or information disclosure.
CVE-2026-61976 Vulnerability in CVE-2026-61976 (CVE-2026-61976)
vulnerability in CVE-2026-61976 (CVE-2026-61976). Risk of unauthorized operations or information disclosure.
CVE-2026-61977 Vulnerability in CVE-2026-61977 (CVE-2026-61977)
vulnerability in CVE-2026-61977 (CVE-2026-61977). Risk of unauthorized operations or information disclosure.
CVE-2026-59523 Vulnerability in CVE-2026-59523 (CVE-2026-59523)
vulnerability in CVE-2026-59523 (CVE-2026-59523). Risk of unauthorized operations or information disclosure.
CVE-2026-61952 Vulnerability in CVE-2026-61952 (CVE-2026-61952)
vulnerability in CVE-2026-61952 (CVE-2026-61952). Data can be tampered with by attackers.
CVE-2026-61958 Vulnerability in CVE-2026-61958 (CVE-2026-61958)
vulnerability in CVE-2026-61958 (CVE-2026-61958). Risk of unauthorized operations or information disclosure.
CVE-2026-61968 Vulnerability in CVE-2026-61968 (CVE-2026-61968)
vulnerability in CVE-2026-61968 (CVE-2026-61968). Risk of unauthorized operations or information disclosure.
CVE-2026-59521 Unsafe Deserialization in deserialization (CVE-2026-59521)
vulnerability in deserialization (CVE-2026-59521). Successful exploitation can lead to full system takeover.
CVE-2026-61970 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-61970)
SSRF in ssrf (CVE-2026-61970). Risk of unauthorized operations or information disclosure.
CVE-2026-61956 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-61956)
vulnerability in csrf (CVE-2026-61956). Data can be tampered with by attackers.
CVE-2026-61955 SQL Injection in sqli (CVE-2026-61955)
SQL injection in sqli (CVE-2026-61955). Confidential information can be exposed externally.
CVE-2026-59515 SQL Injection in sqli (CVE-2026-59515)
SQL injection in sqli (CVE-2026-59515). Confidential information can be exposed externally.
CVE-2026-57814 Cross-Site Scripting (XSS) in wordpress (CVE-2026-57814)
cross-site scripting in wordpress (CVE-2026-57814). Risk of unauthorized operations or information disclosure.
CVE-2026-57816 Cross-Site Scripting (XSS) in CVE-2026-57816 (CVE-2026-57816)
cross-site scripting in CVE-2026-57816 (CVE-2026-57816). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →