Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-58449 |
|
Code Injection in CVE-2026-58449 (CVE-2026-58449)
code injection in CVE-2026-58449 (CVE-2026-58449). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58450 |
|
Open Redirect in CVE-2026-58450 (CVE-2026-58450)
vulnerability in CVE-2026-58450 (CVE-2026-58450). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58446 |
|
Vulnerability in nginx (CVE-2026-58446)
vulnerability in nginx (CVE-2026-58446). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52196 |
|
Vulnerability in dos (CVE-2026-52196)
vulnerability in dos (CVE-2026-52196). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50003 |
|
Path Traversal in c (CVE-2026-50003)
path traversal in c (CVE-2026-50003). Successful exploitation can lead to full system takeover.
|
| CVE-2026-52868 |
|
Path Traversal in CVE-2026-52868 (CVE-2026-52868)
path traversal in CVE-2026-52868 (CVE-2026-52868). Confidential information can be exposed externally.
|
| CVE-2026-11541 |
|
Vulnerability in ibm (CVE-2026-11541)
vulnerability in ibm (CVE-2026-11541). Confidential information can be exposed externally.
|
| CVE-2026-50254 |
|
Vulnerability in CVE-2026-50254 (CVE-2026-50254)
vulnerability in CVE-2026-50254 (CVE-2026-50254). Confidential information can be exposed externally.
|
| CVE-2026-35505 |
|
Vulnerability in CVE-2026-35505 (CVE-2026-35505)
vulnerability in CVE-2026-35505 (CVE-2026-35505). Confidential information can be exposed externally.
|
| CVE-2026-10585 |
|
Cross-Site Scripting (XSS) in c (CVE-2026-10585)
cross-site scripting in c (CVE-2026-10585). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13774 |
|
Use-After-Free in Google chrome (CVE-2026-13774)
vulnerability in Google chrome (CVE-2026-13774). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54696 |
|
Vulnerability in json (CVE-2026-54696)
vulnerability in json (CVE-2026-54696). Risk of unauthorized operations or information disclosure. Exploitable via ``FBUFFER_IO_BUFFER_SIZE``. Mitigation: upgrade to `2.19.9` or later.
|
| CVE-2026-54673 |
|
Information Disclosure in builder-util-runtime (CVE-2026-54673)
vulnerability in builder-util-runtime (CVE-2026-54673). Confidential information can be exposed externally. Exploitable via ``HttpExecutor.prepareRedirectUrlOptions``. Mitigation: upgrade to `9.7.0` or later.
|
| CVE-2026-55223 |
|
Unsafe Deserialization in com.mchange:c3p0 (CVE-2026-55223)
vulnerability in com.mchange:c3p0 (CVE-2026-55223). Risk of unauthorized operations or information disclosure. Exploitable via ``DataSource``. Mitigation: upgrade to `0.14.0` or later.
|
| CVE-2026-54672 |
|
Vulnerability in app-builder-lib (CVE-2026-54672)
vulnerability in app-builder-lib (CVE-2026-54672). Successful exploitation can lead to full system takeover. Exploitable via ``AppImage``. Mitigation: upgrade to `26.15.0` or later.
|
| CVE-2026-57204 |
|
Vulnerability in dos (CVE-2026-57204)
vulnerability in dos (CVE-2026-57204). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57585 |
|
Use-After-Free in dos (CVE-2026-57585)
vulnerability in dos (CVE-2026-57585). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9132 |
|
Vulnerability in github (CVE-2026-9132)
vulnerability in github (CVE-2026-9132). Confidential information can be exposed externally.
|
| CVE-2025-36324 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-36324)
SSRF in ssrf (CVE-2025-36324). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11594 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-11594)
cross-site scripting in ibm (CVE-2026-11594). Confidential information can be exposed externally.
|
| CVE-2025-36323 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2025-36323)
cross-site scripting in ibm (CVE-2025-36323). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10562 |
|
Open Redirect in path-traversal (CVE-2026-10562)
vulnerability in path-traversal (CVE-2026-10562). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13207 |
|
Vulnerability in CVE-2026-13207 (CVE-2026-13207)
vulnerability in CVE-2026-13207 (CVE-2026-13207). Confidential information can be exposed externally.
|
| CVE-2025-36328 |
|
Vulnerability in ibm (CVE-2025-36328)
vulnerability in ibm (CVE-2025-36328). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44628 |
|
Vulnerability in CVE-2026-44628 (CVE-2026-44628)
vulnerability in CVE-2026-44628 (CVE-2026-44628). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9106 |
|
Vulnerability in github (CVE-2026-9106)
vulnerability in github (CVE-2026-9106). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13772 |
|
Vulnerability in ibm (CVE-2026-13772)
vulnerability in ibm (CVE-2026-13772). Successful exploitation can lead to full system takeover.
|
| CVE-2025-36321 |
|
Vulnerability in ibm (CVE-2025-36321)
vulnerability in ibm (CVE-2025-36321). Confidential information can be exposed externally.
|
| CVE-2026-12086 |
|
Vulnerability in ibm (CVE-2026-12086)
vulnerability in ibm (CVE-2026-12086). Confidential information can be exposed externally.
|
| CVE-2026-11806 |
|
Vulnerability in ibm (CVE-2026-11806)
vulnerability in ibm (CVE-2026-11806). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3602 |
|
Vulnerability in sqli (CVE-2026-3602)
vulnerability in sqli (CVE-2026-3602). Data can be tampered with by attackers.
|
| CVE-2026-7803 |
|
Vulnerability in langflow (CVE-2026-7803)
vulnerability in langflow (CVE-2026-7803). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13449 |
|
XXE (XML External Entity) in ibm (CVE-2026-13449)
vulnerability in ibm (CVE-2026-13449). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11708 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-11708)
cross-site scripting in ibm (CVE-2026-11708). Confidential information can be exposed externally.
|
| CVE-2025-36320 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2025-36320)
cross-site scripting in ibm (CVE-2025-36320). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11712 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-11712)
cross-site scripting in ibm (CVE-2026-11712). Confidential information can be exposed externally.
|
| CVE-2026-7873 |
|
Code Injection in langflow (CVE-2026-7873)
code injection in langflow (CVE-2026-7873). Successful exploitation can lead to full system takeover.
|
| CVE-2025-36319 |
|
Vulnerability in ibm (CVE-2025-36319)
vulnerability in ibm (CVE-2025-36319). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9002 |
|
Vulnerability in dos (CVE-2026-9002)
vulnerability in dos (CVE-2026-9002). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7663 |
|
Vulnerability in langflow (CVE-2026-7663)
vulnerability in langflow (CVE-2026-7663). Confidential information can be exposed externally.
|
| CVE-2026-13759 |
|
Unsafe Deserialization in ibm (CVE-2026-13759)
vulnerability in ibm (CVE-2026-13759). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7871 |
|
Unsafe Deserialization in langflow (CVE-2026-7871)
vulnerability in langflow (CVE-2026-7871). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11546 |
|
SSRF (Server-Side Request Forgery) in ibm (CVE-2026-11546)
SSRF in ibm (CVE-2026-11546). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11714 |
|
SSRF (Server-Side Request Forgery) in ibm (CVE-2026-11714)
SSRF in ibm (CVE-2026-11714). Confidential information can be exposed externally.
|
| CVE-2026-10564 |
|
SSRF (Server-Side Request Forgery) in c (CVE-2026-10564)
SSRF in c (CVE-2026-10564). Confidential information can be exposed externally.
|
| CVE-2026-10546 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-10546)
SSRF in ssrf (CVE-2026-10546). Confidential information can be exposed externally.
|
| CVE-2026-13773 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-13773)
SSRF in ssrf (CVE-2026-13773). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11595 |
|
Path Traversal in ibm (CVE-2026-11595)
path traversal in ibm (CVE-2026-11595). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10560 |
|
Authentication Bypass in dos (CVE-2026-10560)
authentication bypass in dos (CVE-2026-10560). Confidential information can be exposed externally.
|
| CVE-2026-9836 |
|
Information Disclosure in ibm (CVE-2026-9836)
vulnerability in ibm (CVE-2026-9836). Risk of unauthorized operations or information disclosure.
|