Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Clear
ID Title
CVE-2026-71949 OS Command Injection in c (CVE-2026-71949)
OS command injection in c (CVE-2026-71949). Successful exploitation can lead to full system takeover.
CVE-2026-71950 OS Command Injection in c (CVE-2026-71950)
OS command injection in c (CVE-2026-71950). Successful exploitation can lead to full system takeover.
CVE-2026-71951 OS Command Injection in c (CVE-2026-71951)
OS command injection in c (CVE-2026-71951). Successful exploitation can lead to full system takeover.
CVE-2026-19282 Vulnerability in c (CVE-2026-19282)
vulnerability in c (CVE-2026-19282). Risk of unauthorized operations or information disclosure.
CVE-2026-68082 Vulnerability in c (CVE-2026-68082)
vulnerability in c (CVE-2026-68082). Successful exploitation can lead to full system takeover.
CVE-2026-19259 Buffer Overflow in c (CVE-2026-19259)
vulnerability in c (CVE-2026-19259). Risk of unauthorized operations or information disclosure.
CVE-2026-19263 Vulnerability in CVE-2026-19263 (CVE-2026-19263)
vulnerability in CVE-2026-19263 (CVE-2026-19263). Risk of unauthorized operations or information disclosure.
CVE-2026-16559 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16559)
cross-site scripting in wordpress (CVE-2026-16559). Successful exploitation can lead to full system takeover.
CVE-2026-16558 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16558)
cross-site scripting in wordpress (CVE-2026-16558). Risk of unauthorized operations or information disclosure.
CVE-2026-16267 Unsafe Deserialization in wordpress (CVE-2026-16267)
vulnerability in wordpress (CVE-2026-16267). Successful exploitation can lead to full system takeover.
CVE-2026-14526 Privilege Escalation in wordpress (CVE-2026-14526)
vulnerability in wordpress (CVE-2026-14526). Successful exploitation can lead to full system takeover.
CVE-2026-13505 Vulnerability in CVE-2026-13505 (CVE-2026-13505)
vulnerability in CVE-2026-13505 (CVE-2026-13505). Risk of unauthorized operations or information disclosure.
CVE-2026-8798 Vulnerability in CVE-2026-8798 (CVE-2026-8798)
vulnerability in CVE-2026-8798 (CVE-2026-8798). Risk of unauthorized operations or information disclosure.
CVE-2026-48122 OS Command Injection in CVE-2026-48122 (CVE-2026-48122)
OS command injection in CVE-2026-48122 (CVE-2026-48122). Risk of unauthorized operations or information disclosure. Exploitable via ``Gemfile``.
CVE-2026-48026 lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to version 1.81.1 of the open source edition and 1.84.0 of the enterprise edition, lakeFS Web UI render...
lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to version 1.81.1 of the open source edition and 1.84.0 of the enterprise edition, lakeFS Web UI renders markdown files from repository objects without sanitizing the resulting HTML. A user with write ac...
CVE-2026-11742 Use-After-Free in c (CVE-2026-11742)
vulnerability in c (CVE-2026-11742). Risk of unauthorized operations or information disclosure.
CVE-2026-11743 Out-of-Bounds Read in c (CVE-2026-11743)
vulnerability in c (CVE-2026-11743). Confidential information can be exposed externally.
CVE-2026-11425 Cross-Site Scripting (XSS) in CVE-2026-11425 (CVE-2026-11425)
cross-site scripting in CVE-2026-11425 (CVE-2026-11425). Risk of unauthorized operations or information disclosure.
CVE-2026-62296 Vulnerability in CVE-2026-62296 (CVE-2026-62296)
vulnerability in CVE-2026-62296 (CVE-2026-62296). Risk of unauthorized operations or information disclosure.
CVE-2026-62295 Vulnerability in CVE-2026-62295 (CVE-2026-62295)
vulnerability in CVE-2026-62295 (CVE-2026-62295). Risk of unauthorized operations or information disclosure.
CVE-2026-62293 Vulnerability in CVE-2026-62293 (CVE-2026-62293)
vulnerability in CVE-2026-62293 (CVE-2026-62293). Risk of unauthorized operations or information disclosure.
CVE-2026-71870 Vulnerability in pypdf (CVE-2026-71870)
vulnerability in pypdf (CVE-2026-71870). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.15.0` or later.
CVE-2026-70561 Vulnerability in CVE-2026-70561 (CVE-2026-70561)
vulnerability in CVE-2026-70561 (CVE-2026-70561). Confidential information can be exposed externally.
CVE-2026-69127 Vulnerability in CVE-2026-69127 (CVE-2026-69127)
vulnerability in CVE-2026-69127 (CVE-2026-69127). Risk of unauthorized operations or information disclosure.
CVE-2026-19231 Vulnerability in sqli (CVE-2026-19231)
vulnerability in sqli (CVE-2026-19231). Risk of unauthorized operations or information disclosure.
CVE-2026-19230 Cross-Site Scripting (XSS) in CVE-2026-19230 (CVE-2026-19230)
cross-site scripting in CVE-2026-19230 (CVE-2026-19230). Risk of unauthorized operations or information disclosure.
CVE-2026-71852 Vulnerability in pypdf (CVE-2026-71852)
vulnerability in pypdf (CVE-2026-71852). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.15.0` or later.
CVE-2026-71851 Vulnerability in crypto-js (CVE-2026-71851)
vulnerability in crypto-js (CVE-2026-71851). Successful exploitation can lead to full system takeover. Exploitable via ``crypto``. Mitigation: upgrade to `4.0.0` or later.
CVE-2026-71850 Vulnerability in hono (CVE-2026-71850)
vulnerability in hono (CVE-2026-71850). Confidential information can be exposed externally. Mitigation: upgrade to `4.12.34` or later.
CVE-2026-71849 Information Disclosure in hono (CVE-2026-71849)
vulnerability in hono (CVE-2026-71849). Risk of unauthorized operations or information disclosure. Exploitable via ``Connection``. Mitigation: upgrade to `4.12.34` or later.
CVE-2026-71848 Vulnerability in hono (CVE-2026-71848)
vulnerability in hono (CVE-2026-71848). Risk of unauthorized operations or information disclosure. Exploitable via ``languageDetector``. Mitigation: upgrade to `4.12.34` or later.
CVE-2026-71847 Use-After-Free in json (CVE-2026-71847)
vulnerability in json (CVE-2026-71847). Risk of unauthorized operations or information disclosure. Exploitable via ``state.start``. Mitigation: upgrade to `2.21.2` or later.
CVE-2026-44964 Vulnerability in c (CVE-2026-44964)
vulnerability in c (CVE-2026-44964). Risk of unauthorized operations or information disclosure.
CVE-2026-19211 Vulnerability in sqli (CVE-2026-19211)
vulnerability in sqli (CVE-2026-19211). Risk of unauthorized operations or information disclosure.
CVE-2026-17595 Vulnerability in CVE-2026-17595 (CVE-2026-17595)
vulnerability in CVE-2026-17595 (CVE-2026-17595). Risk of unauthorized operations or information disclosure.
CVE-2026-48093 Cross-Site Scripting (XSS) in wordpress (CVE-2026-48093)
cross-site scripting in wordpress (CVE-2026-48093). Risk of unauthorized operations or information disclosure. Exploitable via ``unfiltered_html``.
CVE-2026-19210 Vulnerability in CVE-2026-19210 (CVE-2026-19210)
vulnerability in CVE-2026-19210 (CVE-2026-19210). Risk of unauthorized operations or information disclosure.
CVE-2026-19209 Cross-Site Scripting (XSS) in c (CVE-2026-19209)
cross-site scripting in c (CVE-2026-19209). Risk of unauthorized operations or information disclosure.
CVE-2026-19208 Vulnerability in cpp (CVE-2026-19208)
vulnerability in cpp (CVE-2026-19208). Risk of unauthorized operations or information disclosure.
CVE-2026-19206 Buffer Overflow in c (CVE-2026-19206)
vulnerability in c (CVE-2026-19206). Risk of unauthorized operations or information disclosure.
CVE-2026-19207 Cross-Site Scripting (XSS) in CVE-2026-19207 (CVE-2026-19207)
cross-site scripting in CVE-2026-19207 (CVE-2026-19207). Risk of unauthorized operations or information disclosure.
CVE-2026-62996 Path Traversal in smarty/smarty (CVE-2026-62996)
path traversal in smarty/smarty (CVE-2026-62996). Risk of unauthorized operations or information disclosure. Exploitable via ``stream``. Mitigation: upgrade to `5.8.4` or later.
CVE-2026-62992 Path Traversal in smarty/smarty (CVE-2026-62992)
path traversal in smarty/smarty (CVE-2026-62992). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.8.2` or later.
CVE-2026-66494 Cross-Site Scripting (XSS) in CVE-2026-66494 (CVE-2026-66494)
cross-site scripting in CVE-2026-66494 (CVE-2026-66494). Risk of unauthorized operations or information disclosure.
CVE-2026-48094 Cross-Site Scripting (XSS) in wordpress (CVE-2026-48094)
cross-site scripting in wordpress (CVE-2026-48094). Risk of unauthorized operations or information disclosure. Exploitable via ``href``.
CVE-2026-54217 Vulnerability in CVE-2026-54217 (CVE-2026-54217)
vulnerability in CVE-2026-54217 (CVE-2026-54217). Risk of unauthorized operations or information disclosure.
CVE-2026-71558 Unsafe Deserialization in c (CVE-2026-71558)
vulnerability in c (CVE-2026-71558). Successful exploitation can lead to full system takeover.
CVE-2026-71560 Out-of-Bounds Read in c (CVE-2026-71560)
vulnerability in c (CVE-2026-71560). Data can be tampered with by attackers.
CVE-2026-54208 Vulnerability in CVE-2026-54208 (CVE-2026-54208)
vulnerability in CVE-2026-54208 (CVE-2026-54208). Risk of unauthorized operations or information disclosure.
CVE-2026-54202 Vulnerability in c (CVE-2026-54202)
vulnerability in c (CVE-2026-54202). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →