Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-48936 |
|
Vulnerability in node (CVE-2026-48936)
vulnerability in node (CVE-2026-48936). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.3.1` or later.
|
| CVE-2026-50744 |
|
Vulnerability in c (CVE-2026-50744)
vulnerability in c (CVE-2026-50744). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50739 |
|
Vulnerability in revive-adserver (CVE-2026-50739)
vulnerability in revive-adserver (CVE-2026-50739). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50742 |
|
Cross-Site Scripting (XSS) in revive-adserver (CVE-2026-50742)
cross-site scripting in revive-adserver (CVE-2026-50742). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50745 |
|
Cross-Site Scripting (XSS) in revive-adserver (CVE-2026-50745)
cross-site scripting in revive-adserver (CVE-2026-50745). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50740 |
|
Cross-Site Scripting (XSS) in revive-adserver (CVE-2026-50740)
cross-site scripting in revive-adserver (CVE-2026-50740). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8661 |
|
Cross-Site Scripting (XSS) in CVE-2026-8661 (CVE-2026-8661)
cross-site scripting in CVE-2026-8661 (CVE-2026-8661). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48934 |
|
Vulnerability in node (CVE-2026-48934)
vulnerability in node (CVE-2026-48934). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `22.23.0, 24.17.0, 26.3.1` or later.
|
| CVE-2026-48619 |
|
Vulnerability in node (CVE-2026-48619)
vulnerability in node (CVE-2026-48619). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `22.23.0, 24.17.0, 26.3.1` or later.
|
| CVE-2026-48928 |
|
Vulnerability in node (CVE-2026-48928)
vulnerability in node (CVE-2026-48928). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `22.23.0, 24.17.0, 26.3.1` or later.
|
| CVE-2026-48930 |
|
Vulnerability in node (CVE-2026-48930)
vulnerability in node (CVE-2026-48930). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `22.23.0, 24.17.0, 26.3.1` or later.
|
| CVE-2026-48933 |
|
Vulnerability in nodejs (CVE-2026-48933)
vulnerability in nodejs (CVE-2026-48933). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13226 |
|
SQL Injection in wordpress (CVE-2026-13226)
SQL injection in wordpress (CVE-2026-13226). Confidential information can be exposed externally.
|
| CVE-2026-13083 |
|
Cross-Site Scripting (XSS) in redhat (CVE-2026-13083)
cross-site scripting in redhat (CVE-2026-13083). Confidential information can be exposed externally.
|
| CVE-2026-13322 |
|
Vulnerability in redhat (CVE-2026-13322)
vulnerability in redhat (CVE-2026-13322). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13318 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-13318)
SSRF in ssrf (CVE-2026-13318). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9220 |
|
Vulnerability in CVE-2026-9220 (CVE-2026-9220)
vulnerability in CVE-2026-9220 (CVE-2026-9220). Confidential information can be exposed externally.
|
| CVE-2026-7532 |
|
Vulnerability in wolfssl (CVE-2026-7532)
vulnerability in wolfssl (CVE-2026-7532). Data can be tampered with by attackers.
|
| CVE-2026-6331 |
|
Vulnerability in wolfssl (CVE-2026-6331)
vulnerability in wolfssl (CVE-2026-6331). Data can be tampered with by attackers.
|
| CVE-2026-6329 |
|
Vulnerability in wolfssl (CVE-2026-6329)
vulnerability in wolfssl (CVE-2026-6329). Data can be tampered with by attackers.
|
| CVE-2026-7511 |
|
Vulnerability in wolfssl (CVE-2026-7511)
vulnerability in wolfssl (CVE-2026-7511). Data can be tampered with by attackers.
|
| CVE-2026-55962 |
|
Authentication Bypass in wolfssl (CVE-2026-55962)
authentication bypass in wolfssl (CVE-2026-55962). Data can be tampered with by attackers.
|
| CVE-2026-44622 |
|
Vulnerability in CVE-2026-44622 (CVE-2026-44622)
vulnerability in CVE-2026-44622 (CVE-2026-44622). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13283 |
|
Use-After-Free in google (CVE-2026-13283)
vulnerability in google (CVE-2026-13283). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6325 |
|
Out-of-Bounds Write in wolfssl (CVE-2026-6325)
out-of-bounds write in wolfssl (CVE-2026-6325). Data can be tampered with by attackers.
|
| CVE-2025-71336 |
|
OS Command Injection in flowiseai (CVE-2025-71336)
OS command injection in flowiseai (CVE-2025-71336). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13282 |
|
Use-After-Free in google (CVE-2026-13282)
vulnerability in google (CVE-2026-13282). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71340 |
|
Unsafe Deserialization in CVE-2025-71340 (CVE-2025-71340)
vulnerability in CVE-2025-71340 (CVE-2025-71340). Confidential information can be exposed externally.
|
| CVE-2026-12992 |
|
SSRF (Server-Side Request Forgery) in redhat (CVE-2026-12992)
SSRF in redhat (CVE-2026-12992). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11703 |
|
Authentication Bypass in wolfssl (CVE-2026-11703)
authentication bypass in wolfssl (CVE-2026-11703). Data can be tampered with by attackers.
|
| CVE-2026-10098 |
|
Vulnerability in wolfssl (CVE-2026-10098)
vulnerability in wolfssl (CVE-2026-10098). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11800 |
|
Vulnerability in privilege-escalation (CVE-2026-11800)
vulnerability in privilege-escalation (CVE-2026-11800). Confidential information can be exposed externally.
|
| CVE-2026-12975 |
|
XXE (XML External Entity) in ssrf (CVE-2026-12975)
vulnerability in ssrf (CVE-2026-12975). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71338 |
|
Vulnerability in path-traversal (CVE-2025-71338)
vulnerability in path-traversal (CVE-2025-71338). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71334 |
|
Vulnerability in flowiseai (CVE-2025-71334)
vulnerability in flowiseai (CVE-2025-71334). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71324 |
|
Vulnerability in path-traversal (CVE-2025-71324)
vulnerability in path-traversal (CVE-2025-71324). Confidential information can be exposed externally.
|
| CVE-2025-71333 |
|
Vulnerability in path-traversal (CVE-2025-71333)
vulnerability in path-traversal (CVE-2025-71333). Successful exploitation can lead to full system takeover.
|
| CVE-2021-47987 |
|
Vulnerability in CVE-2021-47987 (CVE-2021-47987)
vulnerability in CVE-2021-47987 (CVE-2021-47987). Successful exploitation can lead to full system takeover.
|
| CVE-2021-47986 |
|
Vulnerability in parseplatform (CVE-2021-47986)
vulnerability in parseplatform (CVE-2021-47986). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71327 |
|
Vulnerability in flowiseai (CVE-2025-71327)
vulnerability in flowiseai (CVE-2025-71327). Confidential information can be exposed externally.
|
| CVE-2020-37256 |
|
Cross-Site Scripting (XSS) in getgrav (CVE-2020-37256)
cross-site scripting in getgrav (CVE-2020-37256). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43920 |
|
Vulnerability in csrf (CVE-2026-43920)
vulnerability in csrf (CVE-2026-43920). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40941 |
|
Vulnerability in cacti (CVE-2026-40941)
vulnerability in cacti (CVE-2026-40941). Data can be tampered with by attackers.
|
| CVE-2026-40084 |
|
Path Traversal in path-traversal (CVE-2026-40084)
path traversal in path-traversal (CVE-2026-40084). Confidential information can be exposed externally.
|
| CVE-2026-40080 |
|
Open Redirect in cacti (CVE-2026-40080)
vulnerability in cacti (CVE-2026-40080). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40083 |
|
SQL Injection in sqli (CVE-2026-40083)
SQL injection in sqli (CVE-2026-40083). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55166 |
|
Vulnerability in lemur (CVE-2026-55166)
vulnerability in lemur (CVE-2026-55166). Confidential information can be exposed externally. Exploitable via `POST /api/1/authorities`. Mitigation: upgrade to `1.9.2` or later.
|
| CVE-2026-55165 |
|
Vulnerability in lemur (CVE-2026-55165)
vulnerability in lemur (CVE-2026-55165). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.9.2` or later.
|
| CVE-2026-55163 |
|
Authorization Flaw in lemur (CVE-2026-55163)
vulnerability in lemur (CVE-2026-55163). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/1/roles/`. Mitigation: upgrade to `1.9.2` or later.
|
| CVE-2026-55162 |
|
SSRF (Server-Side Request Forgery) in lemur (CVE-2026-55162)
SSRF in lemur (CVE-2026-55162). Risk of unauthorized operations or information disclosure. Exploitable via `POST /certificates/upload`. Mitigation: upgrade to `1.9.2` or later.
|