Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-47200 Vulnerability in nuxt (CVE-2026-47200)
vulnerability in nuxt (CVE-2026-47200). Risk of unauthorized operations or information disclosure. Exploitable via ``experimental.componentIslands``. Mitigation: upgrade to `4.4.6` or later.
CVE-2026-45742 Vulnerability in github.com/gotenberg/gotenberg/v8 (CVE-2026-45742)
vulnerability in github.com/gotenberg/gotenberg/v8 (CVE-2026-45742). Risk of unauthorized operations or information disclosure. Exploitable via ``downloadFrom``. Mitigation: upgrade to `8.33.0` or later.
CVE-2026-45741 Vulnerability in github.com/gotenberg/gotenberg/v8 (CVE-2026-45741)
vulnerability in github.com/gotenberg/gotenberg/v8 (CVE-2026-45741). Confidential information can be exposed externally.
CVE-2026-44829 Path Traversal in github.com/gotenberg/gotenberg/v8 (CVE-2026-44829)
path traversal in github.com/gotenberg/gotenberg/v8 (CVE-2026-44829). Data can be tampered with by attackers. Exploitable via ``filepath.Base``. Mitigation: upgrade to `8.33.0` or later.
CVE-2026-45662 OS Command Injection in CVE-2026-45662 (CVE-2026-45662)
OS command injection in CVE-2026-45662 (CVE-2026-45662). Successful exploitation can lead to full system takeover.
CVE-2026-45663 Command Injection in CVE-2026-45663 (CVE-2026-45663)
command injection in CVE-2026-45663 (CVE-2026-45663). Successful exploitation can lead to full system takeover.
CVE-2026-39229 SQL Injection in sqli (CVE-2026-39229)
SQL injection in sqli (CVE-2026-39229). Confidential information can be exposed externally.
CVE-2026-36324 Cross-Site Scripting (XSS) in CVE-2026-36324 (CVE-2026-36324)
cross-site scripting in CVE-2026-36324 (CVE-2026-36324). Risk of unauthorized operations or information disclosure.
CVE-2026-35630 Vulnerability in openclaw (CVE-2026-35630)
vulnerability in openclaw (CVE-2026-35630). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.5.18` or later.
CVE-2026-35673 Authorization Flaw in ssrf (CVE-2026-35673)
vulnerability in ssrf (CVE-2026-35673). Confidential information can be exposed externally.
CVE-2026-35674 Authorization Flaw in openclaw (CVE-2026-35674)
vulnerability in openclaw (CVE-2026-35674). Successful exploitation can lead to full system takeover.
CVE-2026-39276 Path Traversal in path-traversal (CVE-2026-39276)
path traversal in path-traversal (CVE-2026-39276). Successful exploitation can lead to full system takeover.
CVE-2026-32905 Vulnerability in openclaw (CVE-2026-32905)
vulnerability in openclaw (CVE-2026-32905). Confidential information can be exposed externally.
CVE-2026-32906 Authorization Flaw in privilege-escalation (CVE-2026-32906)
vulnerability in privilege-escalation (CVE-2026-32906). Risk of unauthorized operations or information disclosure.
CVE-2026-34507 Authorization Flaw in openclaw (CVE-2026-34507)
vulnerability in openclaw (CVE-2026-34507). Risk of unauthorized operations or information disclosure.
CVE-2026-33386 Cross-Site Scripting (XSS) in CVE-2026-33386 (CVE-2026-33386)
cross-site scripting in CVE-2026-33386 (CVE-2026-33386). Risk of unauthorized operations or information disclosure.
CVE-2026-10069 Vulnerability in CVE-2026-10069 (CVE-2026-10069)
vulnerability in CVE-2026-10069 (CVE-2026-10069). Risk of unauthorized operations or information disclosure.
CVE-2026-10068 SSRF (Server-Side Request Forgery) in CVE-2026-10068 (CVE-2026-10068)
SSRF in CVE-2026-10068 (CVE-2026-10068). Risk of unauthorized operations or information disclosure.
CVE-2026-10064 Buffer Overflow in trendnet (CVE-2026-10064)
vulnerability in trendnet (CVE-2026-10064). Risk of unauthorized operations or information disclosure.
CVE-2026-10065 Buffer Overflow in CVE-2026-10065 (CVE-2026-10065)
vulnerability in CVE-2026-10065 (CVE-2026-10065). Successful exploitation can lead to full system takeover.
CVE-2026-10066 Buffer Overflow in CVE-2026-10066 (CVE-2026-10066)
vulnerability in CVE-2026-10066 (CVE-2026-10066). Successful exploitation can lead to full system takeover.
CVE-2026-10067 Buffer Overflow in CVE-2026-10067 (CVE-2026-10067)
vulnerability in CVE-2026-10067 (CVE-2026-10067). Successful exploitation can lead to full system takeover.
CVE-2018-25403 SQL Injection in sqli (CVE-2018-25403)
SQL injection in sqli (CVE-2018-25403). Confidential information can be exposed externally.
CVE-2018-25404 SQL Injection in sqli (CVE-2018-25404)
SQL injection in sqli (CVE-2018-25404). Confidential information can be exposed externally.
CVE-2018-25398 SQL Injection in sqli (CVE-2018-25398)
SQL injection in sqli (CVE-2018-25398). Confidential information can be exposed externally.
CVE-2018-25399 SQL Injection in sqli (CVE-2018-25399)
SQL injection in sqli (CVE-2018-25399). Confidential information can be exposed externally.
CVE-2018-25400 SQL Injection in sqli (CVE-2018-25400)
SQL injection in sqli (CVE-2018-25400). Confidential information can be exposed externally.
CVE-2018-25401 SQL Injection in sqli (CVE-2018-25401)
SQL injection in sqli (CVE-2018-25401). Confidential information can be exposed externally.
CVE-2018-25402 SQL Injection in sqli (CVE-2018-25402)
SQL injection in sqli (CVE-2018-25402). Confidential information can be exposed externally.
CVE-2018-25397 Cross-Site Request Forgery (CSRF) in CVE-2018-25397 (CVE-2018-25397)
vulnerability in CVE-2018-25397 (CVE-2018-25397). Risk of unauthorized operations or information disclosure.
CVE-2018-25389 SQL Injection in sqli (CVE-2018-25389)
SQL injection in sqli (CVE-2018-25389). Confidential information can be exposed externally.
CVE-2018-25390 SQL Injection in sqli (CVE-2018-25390)
SQL injection in sqli (CVE-2018-25390). Confidential information can be exposed externally.
CVE-2018-25392 SQL Injection in sqli (CVE-2018-25392)
SQL injection in sqli (CVE-2018-25392). Confidential information can be exposed externally.
CVE-2018-25394 SQL Injection in sqli (CVE-2018-25394)
SQL injection in sqli (CVE-2018-25394). Confidential information can be exposed externally.
CVE-2018-25395 SQL Injection in sqli (CVE-2018-25395)
SQL injection in sqli (CVE-2018-25395). Confidential information can be exposed externally.
CVE-2018-25391 Vulnerability in CVE-2018-25391 (CVE-2018-25391)
vulnerability in CVE-2018-25391 (CVE-2018-25391). Data can be tampered with by attackers.
CVE-2018-25393 Path Traversal in path-traversal (CVE-2018-25393)
path traversal in path-traversal (CVE-2018-25393). Confidential information can be exposed externally.
CVE-2018-25382 SQL Injection in sqli (CVE-2018-25382)
SQL injection in sqli (CVE-2018-25382). Confidential information can be exposed externally.
CVE-2018-25385 SQL Injection in sqli (CVE-2018-25385)
SQL injection in sqli (CVE-2018-25385). Confidential information can be exposed externally.
CVE-2018-25386 SQL Injection in sqli (CVE-2018-25386)
SQL injection in sqli (CVE-2018-25386). Confidential information can be exposed externally.
CVE-2018-25384 Cross-Site Scripting (XSS) in CVE-2018-25384 (CVE-2018-25384)
cross-site scripting in CVE-2018-25384 (CVE-2018-25384). Risk of unauthorized operations or information disclosure.
CVE-2018-25383 Vulnerability in CVE-2018-25383 (CVE-2018-25383)
vulnerability in CVE-2018-25383 (CVE-2018-25383). Successful exploitation can lead to full system takeover.
CVE-2018-25388 Unrestricted File Upload in CVE-2018-25388 (CVE-2018-25388)
vulnerability in CVE-2018-25388 (CVE-2018-25388). Successful exploitation can lead to full system takeover.
CVE-2018-25387 Cross-Site Request Forgery (CSRF) in CVE-2018-25387 (CVE-2018-25387)
vulnerability in CVE-2018-25387 (CVE-2018-25387). Risk of unauthorized operations or information disclosure.
CVE-2026-44495 Code Injection in axios (CVE-2026-44495)
code injection in axios (CVE-2026-44495). Confidential information can be exposed externally. Exploitable via ``Object.prototype.transformResponse``. Mitigation: upgrade to `1.15.0` or later.
CVE-2026-44494 Vulnerability in axios (CVE-2026-44494)
vulnerability in axios (CVE-2026-44494). Confidential information can be exposed externally. Exploitable via `Authorization header`. Mitigation: upgrade to `1.15.0` or later.
CVE-2026-44492 SSRF (Server-Side Request Forgery) in axios (CVE-2026-44492)
SSRF in axios (CVE-2026-44492). Confidential information can be exposed externally. Mitigation: upgrade to `1.16.0` or later.
CVE-2026-44490 Vulnerability in axios (CVE-2026-44490)
vulnerability in axios (CVE-2026-44490). Risk of unauthorized operations or information disclosure. Exploitable via ``Object.prototype``. Mitigation: upgrade to `0.32.0` or later.
CVE-2026-44489 Vulnerability in axios (CVE-2026-44489)
vulnerability in axios (CVE-2026-44489). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `1.16.0` or later.
CVE-2026-41237 Vulnerability in froxlor/froxlor (CVE-2026-41237)
vulnerability in froxlor/froxlor (CVE-2026-41237). Risk of unauthorized operations or information disclosure. Exploitable via ``DnsEntry.php``. Mitigation: upgrade to `2.3.7` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →