Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-34451 |
|
Path Traversal in anthropic (CVE-2026-34451)
path traversal in anthropic (CVE-2026-34451). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34452 |
|
Vulnerability in anthropic (CVE-2026-34452)
vulnerability in anthropic (CVE-2026-34452). Confidential information can be exposed externally.
|
| CVE-2026-34442 |
|
Vulnerability in laravel (CVE-2026-34442)
vulnerability in laravel (CVE-2026-34442). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
|
| CVE-2026-34443 |
|
SSRF (Server-Side Request Forgery) in laravel (CVE-2026-34443)
SSRF in laravel (CVE-2026-34443). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34448 |
|
Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-34448)
cross-site scripting in github.com/siyuan-note/siyuan/kernel (CVE-2026-34448). Successful exploitation can lead to full system takeover. Exploitable via ``mAsse``. Mitigation: upgrade to `3.6.2` or later.
|
| CVE-2026-34449 |
|
Vulnerability in github.com/siyuan-note/siyuan/kernel (CVE-2026-34449)
vulnerability in github.com/siyuan-note/siyuan/kernel (CVE-2026-34449). Successful exploitation can lead to full system takeover. Exploitable via ``Origin``. Mitigation: upgrade to `3.6.2` or later.
|
| CVE-2026-34450 |
|
Vulnerability in anthropic (CVE-2026-34450)
vulnerability in anthropic (CVE-2026-34450). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34441 |
|
Vulnerability in c (CVE-2026-34441)
vulnerability in c (CVE-2026-34441). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34406 |
|
Vulnerability in django (CVE-2026-34406)
vulnerability in django (CVE-2026-34406). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/auth/edituser/`.
|
| CVE-2026-34733 |
|
Vulnerability in wwbn (CVE-2026-34733)
vulnerability in wwbn (CVE-2026-34733). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34737 |
|
Vulnerability in wwbn (CVE-2026-34737)
vulnerability in wwbn (CVE-2026-34737). Data can be tampered with by attackers.
|
| CVE-2026-34739 |
|
Cross-Site Scripting (XSS) in wwbn (CVE-2026-34739)
cross-site scripting in wwbn (CVE-2026-34739). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34740 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-34740)
SSRF in ssrf (CVE-2026-34740). Confidential information can be exposed externally.
|
| CVE-2026-3468 |
|
Cross-Site Scripting (XSS) in sonicwall (CVE-2026-3468)
cross-site scripting in sonicwall (CVE-2026-3468). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34611 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34611)
vulnerability in csrf (CVE-2026-34611). Data can be tampered with by attackers.
|
| CVE-2026-34613 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34613)
vulnerability in csrf (CVE-2026-34613). Data can be tampered with by attackers.
|
| CVE-2026-34731 |
|
Vulnerability in wwbn (CVE-2026-34731)
vulnerability in wwbn (CVE-2026-34731). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34732 |
|
Vulnerability in wwbn (CVE-2026-34732)
vulnerability in wwbn (CVE-2026-34732). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34382 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34382)
vulnerability in csrf (CVE-2026-34382). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34384 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34384)
vulnerability in csrf (CVE-2026-34384). Data can be tampered with by attackers.
|
| CVE-2026-34394 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34394)
vulnerability in csrf (CVE-2026-34394). Confidential information can be exposed externally.
|
| CVE-2026-34395 |
|
Vulnerability in wwbn (CVE-2026-34395)
vulnerability in wwbn (CVE-2026-34395). Confidential information can be exposed externally.
|
| CVE-2026-34396 |
|
Cross-Site Scripting (XSS) in csrf (CVE-2026-34396)
cross-site scripting in csrf (CVE-2026-34396). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34372 |
|
Vulnerability in symfony (CVE-2026-34372)
vulnerability in symfony (CVE-2026-34372). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34215 |
|
Information Disclosure in parseplatform (CVE-2026-34215)
vulnerability in parseplatform (CVE-2026-34215). Confidential information can be exposed externally.
|
| CVE-2026-34784 |
|
Vulnerability in parseplatform (CVE-2026-34784)
vulnerability in parseplatform (CVE-2026-34784). Confidential information can be exposed externally.
|
| CVE-2026-32607 |
|
Cross-Site Scripting (XSS) in discourse (CVE-2026-32607)
cross-site scripting in discourse (CVE-2026-32607). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32725 |
|
Vulnerability in c (CVE-2026-32725)
vulnerability in c (CVE-2026-32725). Confidential information can be exposed externally.
|
| CVE-2026-32726 |
|
Authorization Flaw in c (CVE-2026-32726)
vulnerability in c (CVE-2026-32726). Confidential information can be exposed externally.
|
| CVE-2026-32143 |
|
Information Disclosure in c (CVE-2026-32143)
vulnerability in c (CVE-2026-32143). Confidential information can be exposed externally.
|
| CVE-2026-32243 |
|
Cross-Site Scripting (XSS) in discourse (CVE-2026-32243)
cross-site scripting in discourse (CVE-2026-32243). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-30520 |
|
SQL Injection in sqli (CVE-2026-30520)
SQL injection in sqli (CVE-2026-30520). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-30279 |
|
Path Traversal in c (CVE-2026-30279)
path traversal in c (CVE-2026-30279). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34360 |
|
SSRF (Server-Side Request Forgery) in hapifhir (CVE-2026-34360)
SSRF in hapifhir (CVE-2026-34360). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34361 |
|
Vulnerability in hapifhir (CVE-2026-34361)
vulnerability in hapifhir (CVE-2026-34361). Confidential information can be exposed externally.
|
| CVE-2026-34359 |
|
Vulnerability in hapifhir (CVE-2026-34359)
vulnerability in hapifhir (CVE-2026-34359). Confidential information can be exposed externally.
|
| CVE-2026-5203 |
|
Path Traversal in path-traversal (CVE-2026-5203)
path traversal in path-traversal (CVE-2026-5203). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34595 |
|
Vulnerability in parseplatform (CVE-2026-34595)
vulnerability in parseplatform (CVE-2026-34595). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34240 |
|
Vulnerability in appsup-dart (CVE-2026-34240)
vulnerability in appsup-dart (CVE-2026-34240). Data can be tampered with by attackers.
|
| CVE-2026-34573 |
|
Vulnerability in parseplatform (CVE-2026-34573)
vulnerability in parseplatform (CVE-2026-34573). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34574 |
|
Vulnerability in parseplatform (CVE-2026-34574)
vulnerability in parseplatform (CVE-2026-34574). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34220 |
|
SQL Injection in sqli (CVE-2026-34220)
SQL injection in sqli (CVE-2026-34220). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34221 |
|
Vulnerability in mikro-orm (CVE-2026-34221)
vulnerability in mikro-orm (CVE-2026-34221). Data can be tampered with by attackers.
|
| CVE-2026-34231 |
|
Cross-Site Scripting (XSS) in django (CVE-2026-34231)
cross-site scripting in django (CVE-2026-34231). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34235 |
|
Out-of-Bounds Read in c (CVE-2026-34235)
vulnerability in c (CVE-2026-34235). Confidential information can be exposed externally.
|
| CVE-2026-34219 |
|
Vulnerability in protocol (CVE-2026-34219)
vulnerability in protocol (CVE-2026-34219). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0596 |
|
OS Command Injection in mlflow (CVE-2026-0596)
OS command injection in mlflow (CVE-2026-0596). Successful exploitation can lead to full system takeover. Exploitable via ``model_uri``. Mitigation: upgrade to `3.9.0` or later.
|
| CVE-2026-34532 |
|
Authorization Flaw in parseplatform (CVE-2026-34532)
vulnerability in parseplatform (CVE-2026-34532). Confidential information can be exposed externally.
|
| CVE-2026-34373 |
|
Vulnerability in parseplatform (CVE-2026-34373)
vulnerability in parseplatform (CVE-2026-34373). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34377 |
|
Vulnerability in zfnd (CVE-2026-34377)
vulnerability in zfnd (CVE-2026-34377). Data can be tampered with by attackers.
|