Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-75841 |
|
Vulnerability in dos (CVE-2026-75841)
vulnerability in dos (CVE-2026-75841). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75827 |
|
Code Injection in CVE-2026-75827 (CVE-2026-75827)
code injection in CVE-2026-75827 (CVE-2026-75827). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75834 |
|
Cross-Site Scripting (XSS) in CVE-2026-75834 (CVE-2026-75834)
cross-site scripting in CVE-2026-75834 (CVE-2026-75834). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75828 |
|
Cross-Site Scripting (XSS) in CVE-2026-75828 (CVE-2026-75828)
cross-site scripting in CVE-2026-75828 (CVE-2026-75828). Confidential information can be exposed externally.
|
| CVE-2026-75831 |
|
Cross-Site Scripting (XSS) in CVE-2026-75831 (CVE-2026-75831)
cross-site scripting in CVE-2026-75831 (CVE-2026-75831). Confidential information can be exposed externally.
|
| CVE-2026-75838 |
|
Cross-Site Scripting (XSS) in CVE-2026-75838 (CVE-2026-75838)
cross-site scripting in CVE-2026-75838 (CVE-2026-75838). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75107 |
|
Cross-Site Scripting (XSS) in CVE-2026-75107 (CVE-2026-75107)
cross-site scripting in CVE-2026-75107 (CVE-2026-75107). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74908 |
|
Cross-Site Scripting (XSS) in CVE-2026-74908 (CVE-2026-74908)
cross-site scripting in CVE-2026-74908 (CVE-2026-74908). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74907 |
|
Path Traversal in path-traversal (CVE-2026-74907)
path traversal in path-traversal (CVE-2026-74907). Confidential information can be exposed externally.
|
| CVE-2026-74904 |
|
Vulnerability in CVE-2026-74904 (CVE-2026-74904)
vulnerability in CVE-2026-74904 (CVE-2026-74904). Confidential information can be exposed externally.
|
| CVE-2026-75774 |
|
Authentication Bypass in CVE-2026-75774 (CVE-2026-75774)
authentication bypass in CVE-2026-75774 (CVE-2026-75774). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74906 |
|
Authorization Flaw in CVE-2026-74906 (CVE-2026-74906)
vulnerability in CVE-2026-74906 (CVE-2026-74906). Confidential information can be exposed externally.
|
| CVE-2026-74903 |
|
Vulnerability in CVE-2026-74903 (CVE-2026-74903)
vulnerability in CVE-2026-74903 (CVE-2026-74903). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15585 |
|
Path Traversal in path-traversal (CVE-2026-15585)
path traversal in path-traversal (CVE-2026-15585). Confidential information can be exposed externally.
|
| CVE-2026-74905 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-74905)
SSRF in ssrf (CVE-2026-74905). Confidential information can be exposed externally.
|
| CVE-2026-74902 |
|
Cross-Site Scripting (XSS) in c (CVE-2026-74902)
cross-site scripting in c (CVE-2026-74902). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5224 |
|
Vulnerability in CVE-2026-5224 (CVE-2026-5224)
vulnerability in CVE-2026-5224 (CVE-2026-5224). Confidential information can be exposed externally.
|
| CVE-2026-75627 |
|
Vulnerability in CVE-2026-75627 (CVE-2026-75627)
vulnerability in CVE-2026-75627 (CVE-2026-75627). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75626 |
|
Cross-Site Scripting (XSS) in CVE-2026-75626 (CVE-2026-75626)
cross-site scripting in CVE-2026-75626 (CVE-2026-75626). Confidential information can be exposed externally.
|
| CVE-2026-19447 |
|
Cross-Site Scripting (XSS) in CVE-2026-19447 (CVE-2026-19447)
cross-site scripting in CVE-2026-19447 (CVE-2026-19447). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19608 |
|
Vulnerability in CVE-2026-19608 (CVE-2026-19608)
vulnerability in CVE-2026-19608 (CVE-2026-19608). Data can be tampered with by attackers.
|
| CVE-2024-14046 |
|
Vulnerability in CVE-2024-14046 (CVE-2024-14046)
vulnerability in CVE-2024-14046 (CVE-2024-14046). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43971 |
|
Vulnerability in CVE-2026-43971 (CVE-2026-43971)
vulnerability in CVE-2026-43971 (CVE-2026-43971). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-14045 |
|
Vulnerability in CVE-2024-14045 (CVE-2024-14045)
vulnerability in CVE-2024-14045 (CVE-2024-14045). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34884 |
|
SSRF (Server-Side Request Forgery) in apache (CVE-2026-34884)
SSRF in apache (CVE-2026-34884). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75091 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-75091)
cross-site scripting in wordpress (CVE-2026-75091). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15748 |
|
Unrestricted File Upload in wordpress (CVE-2026-15748)
vulnerability in wordpress (CVE-2026-15748). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75151 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-75151 (CVE-2026-75151)
vulnerability in CVE-2026-75151 (CVE-2026-75151). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11801 |
|
Vulnerability in wordpress (CVE-2026-11801)
vulnerability in wordpress (CVE-2026-11801). Confidential information can be exposed externally.
|
| CVE-2026-75093 |
|
Vulnerability in CVE-2026-75093 (CVE-2026-75093)
vulnerability in CVE-2026-75093 (CVE-2026-75093). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75090 |
|
Buffer Overflow in c (CVE-2026-75090)
vulnerability in c (CVE-2026-75090). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75094 |
|
Command Injection in CVE-2026-75094 (CVE-2026-75094)
command injection in CVE-2026-75094 (CVE-2026-75094). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75089 |
|
Vulnerability in sqli (CVE-2026-75089)
vulnerability in sqli (CVE-2026-75089). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75088 |
|
Vulnerability in sqli (CVE-2026-75088)
vulnerability in sqli (CVE-2026-75088). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75087 |
|
Vulnerability in sqli (CVE-2026-75087)
vulnerability in sqli (CVE-2026-75087). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75086 |
|
Vulnerability in sqli (CVE-2026-75086)
vulnerability in sqli (CVE-2026-75086). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75080 |
|
Vulnerability in sqli (CVE-2026-75080)
vulnerability in sqli (CVE-2026-75080). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75079 |
|
Vulnerability in sqli (CVE-2026-75079)
vulnerability in sqli (CVE-2026-75079). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75082 |
|
Vulnerability in CVE-2026-75082 (CVE-2026-75082)
vulnerability in CVE-2026-75082 (CVE-2026-75082). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-62593 KEV |
|
[KEV] Code Injection in Ray-project ray (CVE-2025-62593)
code injection in Ray-project ray (CVE-2025-62593). Successful exploitation can lead to full system takeover. Exploitable via ``fetch``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `2.52.0` or later.
|
| CVE-2026-67961 |
|
Code Injection in CVE-2026-67961 (CVE-2026-67961)
code injection in CVE-2026-67961 (CVE-2026-67961). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67919 |
|
Code Injection in CVE-2026-67919 (CVE-2026-67919)
code injection in CVE-2026-67919 (CVE-2026-67919). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75078 |
|
Cross-Site Scripting (XSS) in CVE-2026-75078 (CVE-2026-75078)
cross-site scripting in CVE-2026-75078 (CVE-2026-75078). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42162 |
|
Path Traversal in CVE-2026-42162 (CVE-2026-42162)
path traversal in CVE-2026-42162 (CVE-2026-42162). Confidential information can be exposed externally.
|
| CVE-2026-42164 |
|
Information Disclosure in CVE-2026-42164 (CVE-2026-42164)
vulnerability in CVE-2026-42164 (CVE-2026-42164). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75587 |
|
Information Disclosure in mattermost (CVE-2026-75587)
vulnerability in mattermost (CVE-2026-75587). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9693 |
|
Vulnerability in mattermost (CVE-2026-9693)
vulnerability in mattermost (CVE-2026-9693). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38165 |
|
Code Injection in CVE-2026-38165 (CVE-2026-38165)
code injection in CVE-2026-38165 (CVE-2026-38165). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9816 |
|
Authorization Flaw in mattermost (CVE-2026-9816)
vulnerability in mattermost (CVE-2026-9816). Data can be tampered with by attackers. Exploitable via `POST /api/v2/boards/{boardID}/members`.
|
| CVE-2026-9859 |
|
Authorization Flaw in mattermost (CVE-2026-9859)
vulnerability in mattermost (CVE-2026-9859). Confidential information can be exposed externally.
|