Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-72861 |
|
Vulnerability in CVE-2026-72861 (CVE-2026-72861)
vulnerability in CVE-2026-72861 (CVE-2026-72861). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77148 |
|
Buffer Overflow in CVE-2026-77148 (CVE-2026-77148)
vulnerability in CVE-2026-77148 (CVE-2026-77148). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9033 |
|
Vulnerability in CVE-2026-9033 (CVE-2026-9033)
vulnerability in CVE-2026-9033 (CVE-2026-9033). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72854 |
|
Vulnerability in c (CVE-2026-72854)
vulnerability in c (CVE-2026-72854). Data can be tampered with by attackers.
|
| CVE-2026-72852 |
|
Vulnerability in c (CVE-2026-72852)
vulnerability in c (CVE-2026-72852). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66788 |
|
Vulnerability in privilege-escalation (CVE-2026-66788)
vulnerability in privilege-escalation (CVE-2026-66788). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66001 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-66001 (CVE-2026-66001)
vulnerability in CVE-2026-66001 (CVE-2026-66001). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66785 |
|
Vulnerability in CVE-2026-66785 (CVE-2026-66785)
vulnerability in CVE-2026-66785 (CVE-2026-66785). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64777 |
|
Path Traversal in apple (CVE-2026-64777)
path traversal in apple (CVE-2026-64777). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63654 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-63654 (CVE-2026-63654)
vulnerability in CVE-2026-63654 (CVE-2026-63654). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53587 |
|
Vulnerability in c (CVE-2026-53587)
vulnerability in c (CVE-2026-53587). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53586 |
|
Information Disclosure in c (CVE-2026-53586)
vulnerability in c (CVE-2026-53586). Confidential information can be exposed externally. Exploitable via `Authorization header`.
|
| CVE-2026-53584 |
|
Path Traversal in c (CVE-2026-53584)
path traversal in c (CVE-2026-53584). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53585 |
|
Vulnerability in c (CVE-2026-53585)
vulnerability in c (CVE-2026-53585). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53583 |
|
Vulnerability in c (CVE-2026-53583)
vulnerability in c (CVE-2026-53583). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53569 |
|
Vulnerability in CVE-2026-53569 (CVE-2026-53569)
vulnerability in CVE-2026-53569 (CVE-2026-53569). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50190 |
|
Cross-Site Scripting (XSS) in CVE-2026-50190 (CVE-2026-50190)
cross-site scripting in CVE-2026-50190 (CVE-2026-50190). Risk of unauthorized operations or information disclosure. Exploitable via ``permalink``.
|
| CVE-2026-49996 |
|
Open Redirect in CVE-2026-49996 (CVE-2026-49996)
vulnerability in CVE-2026-49996 (CVE-2026-49996). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43678 |
|
Vulnerability in apple (CVE-2026-43678)
vulnerability in apple (CVE-2026-43678). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19586 |
|
OS Command Injection in CVE-2026-19586 (CVE-2026-19586)
OS command injection in CVE-2026-19586 (CVE-2026-19586). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15743 |
|
Vulnerability in CVE-2026-15743 (CVE-2026-15743)
vulnerability in CVE-2026-15743 (CVE-2026-15743). Confidential information can be exposed externally. Exploitable via `Authorization header`.
|
| CVE-2026-63179 |
|
Path Traversal in winter/wn-backend-module (CVE-2026-63179)
path traversal in winter/wn-backend-module (CVE-2026-63179). Confidential information can be exposed externally. Exploitable via ``BrandSetting.custom_css``. Mitigation: upgrade to `1.2.13` or later.
|
| CVE-2026-61663 |
|
Vulnerability in django-cms (CVE-2026-61663)
vulnerability in django-cms (CVE-2026-61663). Risk of unauthorized operations or information disclosure. Exploitable via ``PageContent``. Mitigation: upgrade to `5.0.9` or later.
|
| CVE-2026-63003 |
|
Vulnerability in django-cms (CVE-2026-63003)
vulnerability in django-cms (CVE-2026-63003). Confidential information can be exposed externally. Exploitable via `POST /admin/cms/pagecontent/`. Mitigation: upgrade to `5.0.9` or later.
|
| CVE-2026-75526 |
|
Cross-Site Scripting (XSS) in django-cms (CVE-2026-75526)
cross-site scripting in django-cms (CVE-2026-75526). Risk of unauthorized operations or information disclosure. Exploitable via ``message``. Mitigation: upgrade to `5.0.9` or later.
|
| CVE-2026-55468 |
|
Vulnerability in wagtail (CVE-2026-55468)
vulnerability in wagtail (CVE-2026-55468). Risk of unauthorized operations or information disclosure. Exploitable via ``api_fields``. Mitigation: upgrade to `8.0rc2` or later.
|
| CVE-2026-54624 |
|
Vulnerability in django-cms (CVE-2026-54624)
vulnerability in django-cms (CVE-2026-54624). Confidential information can be exposed externally. Exploitable via ``render_object_structure``. Mitigation: upgrade to `5.0.8` or later.
|
| CVE-2026-54256 |
|
Vulnerability in winter/wn-backend-module (CVE-2026-54256)
vulnerability in winter/wn-backend-module (CVE-2026-54256). Risk of unauthorized operations or information disclosure. Exploitable via ``FileUpload``. Mitigation: upgrade to `1.2.13` or later.
|
| CVE-2026-54245 |
|
SQL Injection in github.com/fleetdm/fleet (CVE-2026-54245)
SQL injection in github.com/fleetdm/fleet (CVE-2026-54245). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.86.2` or later.
|
| CVE-2026-77031 |
|
Vulnerability in CVE-2026-77031 (CVE-2026-77031)
vulnerability in CVE-2026-77031 (CVE-2026-77031). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72844 |
|
Vulnerability in c (CVE-2026-72844)
vulnerability in c (CVE-2026-72844). Data can be tampered with by attackers.
|
| CVE-2026-76641 |
|
Out-of-Bounds Read in CVE-2026-76641 (CVE-2026-76641)
vulnerability in CVE-2026-76641 (CVE-2026-76641). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77036 |
|
Vulnerability in CVE-2026-77036 (CVE-2026-77036)
vulnerability in CVE-2026-77036 (CVE-2026-77036). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2334 |
|
Unrestricted File Upload in CVE-2026-2334 (CVE-2026-2334)
vulnerability in CVE-2026-2334 (CVE-2026-2334). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53424 |
|
Vulnerability in CVE-2026-53424 (CVE-2026-53424)
vulnerability in CVE-2026-53424 (CVE-2026-53424). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73258 |
|
Vulnerability in c (CVE-2026-73258)
vulnerability in c (CVE-2026-73258). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73259 |
|
Cross-Site Scripting (XSS) in c (CVE-2026-73259)
cross-site scripting in c (CVE-2026-73259). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73254 |
|
Cross-Site Scripting (XSS) in c (CVE-2026-73254)
cross-site scripting in c (CVE-2026-73254). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73257 |
|
Vulnerability in c (CVE-2026-73257)
vulnerability in c (CVE-2026-73257). Confidential information can be exposed externally.
|
| CVE-2026-73256 |
|
Vulnerability in c (CVE-2026-73256)
vulnerability in c (CVE-2026-73256). Confidential information can be exposed externally.
|
| CVE-2026-73255 |
|
Path Traversal in c (CVE-2026-73255)
path traversal in c (CVE-2026-73255). Confidential information can be exposed externally.
|
| CVE-2026-73251 |
|
Vulnerability in c (CVE-2026-73251)
vulnerability in c (CVE-2026-73251). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73253 |
|
Vulnerability in c (CVE-2026-73253)
vulnerability in c (CVE-2026-73253). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63495 |
|
Vulnerability in c (CVE-2026-63495)
vulnerability in c (CVE-2026-63495). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63385 |
|
Vulnerability in c (CVE-2026-63385)
vulnerability in c (CVE-2026-63385). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63384 |
|
Vulnerability in c (CVE-2026-63384)
vulnerability in c (CVE-2026-63384). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63387 |
|
Vulnerability in c (CVE-2026-63387)
vulnerability in c (CVE-2026-63387). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63388 |
|
Vulnerability in c (CVE-2026-63388)
vulnerability in c (CVE-2026-63388). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63380 |
|
Use-After-Free in c (CVE-2026-63380)
vulnerability in c (CVE-2026-63380). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63381 |
|
Vulnerability in c (CVE-2026-63381)
vulnerability in c (CVE-2026-63381). Risk of unauthorized operations or information disclosure.
|