Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-35472 |
|
Open Redirect in wegia (CVE-2026-35472)
vulnerability in wegia (CVE-2026-35472). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.9` or later.
|
| CVE-2026-35395 |
|
SQL Injection in sqli (CVE-2026-35395)
SQL injection in sqli (CVE-2026-35395). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.6.9` or later.
|
| CVE-2026-35396 |
|
Open Redirect in wegia (CVE-2026-35396)
vulnerability in wegia (CVE-2026-35396). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.9` or later.
|
| CVE-2026-35398 |
|
Open Redirect in wegia (CVE-2026-35398)
vulnerability in wegia (CVE-2026-35398). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.9` or later.
|
| CVE-2026-35390 |
|
Cross-Site Scripting (XSS) in bulwarkmail (CVE-2026-35390)
cross-site scripting in bulwarkmail (CVE-2026-35390). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.11` or later.
|
| CVE-2026-5681 |
|
Vulnerability in sqli (CVE-2026-5681)
vulnerability in sqli (CVE-2026-5681). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35459 |
|
SSRF (Server-Side Request Forgery) in pyload-ng (CVE-2026-35459)
SSRF in pyload-ng (CVE-2026-35459). Confidential information can be exposed externally. Exploitable via ``CURLOPT_REDIR_PROTOCOLS``.
|
| CVE-2026-35203 |
|
Out-of-Bounds Read in cpp (CVE-2026-35203)
vulnerability in cpp (CVE-2026-35203). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35185 |
|
Vulnerability in psu (CVE-2026-35185)
vulnerability in psu (CVE-2026-35185). Confidential information can be exposed externally. Mitigation: upgrade to `25.0.0` or later.
|
| CVE-2026-35200 |
|
Vulnerability in parseplatform (CVE-2026-35200)
vulnerability in parseplatform (CVE-2026-35200). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.6.73` or later.
|
| CVE-2026-35187 |
|
SSRF (Server-Side Request Forgery) in pyload-ng-project (CVE-2026-35187)
SSRF in pyload-ng-project (CVE-2026-35187). Confidential information can be exposed externally.
|
| CVE-2026-35179 |
|
Vulnerability in wwbn (CVE-2026-35179)
vulnerability in wwbn (CVE-2026-35179). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35180 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-35180)
vulnerability in csrf (CVE-2026-35180). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35181 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-35181)
vulnerability in csrf (CVE-2026-35181). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35182 |
|
Vulnerability in ajax30 (CVE-2026-35182)
vulnerability in ajax30 (CVE-2026-35182). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.0.6` or later.
|
| CVE-2026-35183 |
|
Vulnerability in ajax30 (CVE-2026-35183)
vulnerability in ajax30 (CVE-2026-35183). Data can be tampered with by attackers. Mitigation: upgrade to `2.0.6` or later.
|
| CVE-2026-35184 |
|
SQL Injection in sqli (CVE-2026-35184)
SQL injection in sqli (CVE-2026-35184). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.0` or later.
|
| CVE-2026-0049 |
|
Vulnerability in dos (CVE-2026-0049)
vulnerability in dos (CVE-2026-0049). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5672 |
|
Vulnerability in sqli (CVE-2026-5672)
vulnerability in sqli (CVE-2026-5672). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5675 |
|
Vulnerability in sqli (CVE-2026-5675)
vulnerability in sqli (CVE-2026-5675). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5671 |
|
Cross-Site Scripting (XSS) in CVE-2026-5671 (CVE-2026-5671)
cross-site scripting in CVE-2026-5671 (CVE-2026-5671). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35470 |
|
SQL Injection in sqli (CVE-2026-35470)
SQL injection in sqli (CVE-2026-35470). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.10.2` or later.
|
| CVE-2026-35177 |
|
Path Traversal in c (CVE-2026-35177)
path traversal in c (CVE-2026-35177). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.2.0280` or later.
|
| CVE-2026-35174 |
|
Path Traversal in path-traversal (CVE-2026-35174)
path traversal in path-traversal (CVE-2026-35174). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.01` or later.
|
| CVE-2026-35201 |
|
Out-of-Bounds Read in rdiscount (CVE-2026-35201)
vulnerability in rdiscount (CVE-2026-35201). Risk of unauthorized operations or information disclosure. Exploitable via ``INT_MAX``. Mitigation: upgrade to `2.2.7.4` or later.
|
| CVE-2026-35029 |
|
Authorization Flaw in litellm (CVE-2026-35029)
vulnerability in litellm (CVE-2026-35029). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.83.0` or later.
|
| CVE-2026-34977 |
|
OS Command Injection in c (CVE-2026-34977)
OS command injection in c (CVE-2026-34977). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.2.1` or later.
|
| CVE-2026-34756 |
|
Vulnerability in vllm (CVE-2026-34756)
vulnerability in vllm (CVE-2026-34756). Risk of unauthorized operations or information disclosure. Exploitable via ``ChatCompletionRequest``. Mitigation: upgrade to `0.19.0` or later.
|
| CVE-2026-34379 |
|
Vulnerability in c (CVE-2026-34379)
vulnerability in c (CVE-2026-34379). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.7` or later.
|
| CVE-2026-5636 |
|
Vulnerability in sqli (CVE-2026-5636)
vulnerability in sqli (CVE-2026-5636). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5635 |
|
Vulnerability in sqli (CVE-2026-5635)
vulnerability in sqli (CVE-2026-5635). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5634 |
|
Vulnerability in sqli (CVE-2026-5634)
vulnerability in sqli (CVE-2026-5634). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5624 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-5624 (CVE-2026-5624)
vulnerability in CVE-2026-5624 (CVE-2026-5624). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5620 |
|
Vulnerability in sqli (CVE-2026-5620)
vulnerability in sqli (CVE-2026-5620). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5616 |
|
Authentication Bypass in CVE-2026-5616 (CVE-2026-5616)
authentication bypass in CVE-2026-5616 (CVE-2026-5616). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5615 |
|
Cross-Site Scripting (XSS) in CVE-2026-5615 (CVE-2026-5615)
cross-site scripting in CVE-2026-5615 (CVE-2026-5615). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5606 |
|
Vulnerability in sqli (CVE-2026-5606)
vulnerability in sqli (CVE-2026-5606). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-25687 |
|
Path Traversal in wisdom (CVE-2019-25687)
path traversal in wisdom (CVE-2019-25687). Successful exploitation can lead to full system takeover.
|
| CVE-2019-25682 |
|
Cross-Site Request Forgery (CSRF) in victoralagwu (CVE-2019-25682)
vulnerability in victoralagwu (CVE-2019-25682). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-25684 |
|
SQL Injection in sqli (CVE-2019-25684)
SQL injection in sqli (CVE-2019-25684). Confidential information can be exposed externally.
|
| CVE-2019-25673 |
|
Unrestricted File Upload in laravel (CVE-2019-25673)
vulnerability in laravel (CVE-2019-25673). Successful exploitation can lead to full system takeover.
|
| CVE-2019-25674 |
|
SQL Injection in sqli (CVE-2019-25674)
SQL injection in sqli (CVE-2019-25674). Confidential information can be exposed externally.
|
| CVE-2019-25675 |
|
SQL Injection in sqli (CVE-2019-25675)
SQL injection in sqli (CVE-2019-25675). Confidential information can be exposed externally.
|
| CVE-2019-25676 |
|
Cross-Site Scripting (XSS) in sqli (CVE-2019-25676)
cross-site scripting in sqli (CVE-2019-25676). Confidential information can be exposed externally.
|
| CVE-2019-25678 |
|
Vulnerability in sqli (CVE-2019-25678)
vulnerability in sqli (CVE-2019-25678). Confidential information can be exposed externally.
|
| CVE-2019-25668 |
|
SQL Injection in sqli (CVE-2019-25668)
SQL injection in sqli (CVE-2019-25668). Confidential information can be exposed externally.
|
| CVE-2019-25671 |
|
Path Traversal in c (CVE-2019-25671)
path traversal in c (CVE-2019-25671). Successful exploitation can lead to full system takeover.
|
| CVE-2019-25662 |
|
SQL Injection in sqli (CVE-2019-25662)
SQL injection in sqli (CVE-2019-25662). Confidential information can be exposed externally.
|
| CVE-2019-25664 |
|
SQL Injection in sqli (CVE-2019-25664)
SQL injection in sqli (CVE-2019-25664). Confidential information can be exposed externally.
|
| CVE-2026-5580 |
|
Vulnerability in sqli (CVE-2026-5580)
vulnerability in sqli (CVE-2026-5580). Risk of unauthorized operations or information disclosure.
|