Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Clear
ID Title
CVE-2026-67871 Vulnerability in c (CVE-2026-67871)
vulnerability in c (CVE-2026-67871). Risk of unauthorized operations or information disclosure.
CVE-2026-19027 Out-of-Bounds Read in c (CVE-2026-19027)
vulnerability in c (CVE-2026-19027). Risk of unauthorized operations or information disclosure.
CVE-2026-18968 Cross-Site Scripting (XSS) in CVE-2026-18968 (CVE-2026-18968)
cross-site scripting in CVE-2026-18968 (CVE-2026-18968). Risk of unauthorized operations or information disclosure.
CVE-2026-19025 Vulnerability in c (CVE-2026-19025)
vulnerability in c (CVE-2026-19025). Risk of unauthorized operations or information disclosure.
CVE-2026-19026 Vulnerability in c (CVE-2026-19026)
vulnerability in c (CVE-2026-19026). Risk of unauthorized operations or information disclosure.
CVE-2026-71321 Vulnerability in nuxt (CVE-2026-71321)
vulnerability in nuxt (CVE-2026-71321). Risk of unauthorized operations or information disclosure. Exploitable via `POST /__nuxt_island/`. Mitigation: upgrade to `3.21.10` or later.
CVE-2026-18959 Path Traversal in path-traversal (CVE-2026-18959)
path traversal in path-traversal (CVE-2026-18959). Risk of unauthorized operations or information disclosure.
CVE-2026-71320 Vulnerability in nuxt (CVE-2026-71320)
vulnerability in nuxt (CVE-2026-71320). Successful exploitation can lead to full system takeover. Exploitable via ``resolveDynamicComponent``. Mitigation: upgrade to `3.21.10` or later.
CVE-2026-71319 Code Injection in @nuxt/devtools (CVE-2026-71319)
code injection in @nuxt/devtools (CVE-2026-71319). Successful exploitation can lead to full system takeover. Exploitable via ``ensureDevAuthToken``. Mitigation: upgrade to `3.3.1` or later.
CVE-2026-71318 Vulnerability in nuxt (CVE-2026-71318)
vulnerability in nuxt (CVE-2026-71318). Risk of unauthorized operations or information disclosure. Exploitable via ``resolveDynamicComponent``. Mitigation: upgrade to `3.21.10` or later.
CVE-2026-71316 Vulnerability in nuxt (CVE-2026-71316)
vulnerability in nuxt (CVE-2026-71316). Confidential information can be exposed externally. Exploitable via ``routeRules``. Mitigation: upgrade to `4.5.1` or later.
CVE-2026-71315 Vulnerability in nuxt (CVE-2026-71315)
vulnerability in nuxt (CVE-2026-71315). Confidential information can be exposed externally. Exploitable via ``appMiddleware``. Mitigation: upgrade to `3.21.10` or later.
CVE-2026-71314 Vulnerability in nuxt (CVE-2026-71314)
vulnerability in nuxt (CVE-2026-71314). Risk of unauthorized operations or information disclosure. Exploitable via ``ssrRenderList``. Mitigation: upgrade to `3.21.10` or later.
CVE-2026-66298 Vulnerability in livebook (CVE-2026-66298)
vulnerability in livebook (CVE-2026-66298). Successful exploitation can lead to full system takeover.
CVE-2026-55522 Code Injection in praisonaiagents (CVE-2026-55522)
code injection in praisonaiagents (CVE-2026-55522). Successful exploitation can lead to full system takeover. Exploitable via ``tools.py``. Mitigation: upgrade to `1.6.58` or later.
CVE-2026-18958 Vulnerability in sqli (CVE-2026-18958)
vulnerability in sqli (CVE-2026-18958). Risk of unauthorized operations or information disclosure.
CVE-2026-9201 Vulnerability in langflow (CVE-2026-9201)
vulnerability in langflow (CVE-2026-9201). Successful exploitation can lead to full system takeover.
CVE-2026-9196 Code Injection in langflow (CVE-2026-9196)
code injection in langflow (CVE-2026-9196). Confidential information can be exposed externally.
CVE-2026-8470 Vulnerability in langflow (CVE-2026-8470)
vulnerability in langflow (CVE-2026-8470). Data can be tampered with by attackers.
CVE-2026-17632 Code Injection in langflow (CVE-2026-17632)
code injection in langflow (CVE-2026-17632). Successful exploitation can lead to full system takeover.
CVE-2026-70441 Cross-Site Scripting (XSS) in CVE-2026-70441 (CVE-2026-70441)
cross-site scripting in CVE-2026-70441 (CVE-2026-70441). Risk of unauthorized operations or information disclosure.
CVE-2026-70440 Cross-Site Scripting (XSS) in CVE-2026-70440 (CVE-2026-70440)
cross-site scripting in CVE-2026-70440 (CVE-2026-70440). Risk of unauthorized operations or information disclosure.
CVE-2026-10128 Information Disclosure in c (CVE-2026-10128)
vulnerability in c (CVE-2026-10128). Confidential information can be exposed externally.
CVE-2026-18927 Vulnerability in CVE-2026-18927 (CVE-2026-18927)
vulnerability in CVE-2026-18927 (CVE-2026-18927). Risk of unauthorized operations or information disclosure.
CVE-2026-70612 Vulnerability in electron (CVE-2026-70612)
vulnerability in electron (CVE-2026-70612). Risk of unauthorized operations or information disclosure. Exploitable via ``openExternal``. Mitigation: upgrade to `42.0.0-beta.3` or later.
CVE-2026-70611 OS Command Injection in electron (CVE-2026-70611)
OS command injection in electron (CVE-2026-70611). Confidential information can be exposed externally. Mitigation: upgrade to `42.0.0-beta.3` or later.
CVE-2026-70610 Vulnerability in electron (CVE-2026-70610)
vulnerability in electron (CVE-2026-70610). Risk of unauthorized operations or information disclosure. Exploitable via ``contextBridge``. Mitigation: upgrade to `42.0.0-beta.4` or later.
CVE-2026-70609 Code Injection in electron (CVE-2026-70609)
code injection in electron (CVE-2026-70609). Confidential information can be exposed externally. Exploitable via ``mode``. Mitigation: upgrade to `42.0.0-beta.1` or later.
CVE-2026-70608 Vulnerability in electron (CVE-2026-70608)
vulnerability in electron (CVE-2026-70608). Risk of unauthorized operations or information disclosure. Exploitable via ``setWindowOpenHandler``. Mitigation: upgrade to `39.8.10` or later.
CVE-2026-70607 Vulnerability in electron (CVE-2026-70607)
vulnerability in electron (CVE-2026-70607). Risk of unauthorized operations or information disclosure. Exploitable via ``BrowserWindow``. Mitigation: upgrade to `42.0.0-beta.3` or later.
CVE-2026-9195 Path Traversal in CVE-2026-9195 (CVE-2026-9195)
path traversal in CVE-2026-9195 (CVE-2026-9195). Confidential information can be exposed externally.
CVE-2026-8400 Vulnerability in ibm (CVE-2026-8400)
vulnerability in ibm (CVE-2026-8400). Successful exploitation can lead to full system takeover.
CVE-2026-53992 Cross-Site Scripting (XSS) in CVE-2026-53992 (CVE-2026-53992)
cross-site scripting in CVE-2026-53992 (CVE-2026-53992). Risk of unauthorized operations or information disclosure.
CVE-2026-70606 Vulnerability in electron (CVE-2026-70606)
vulnerability in electron (CVE-2026-70606). Confidential information can be exposed externally. Exploitable via ``ProtocolResponse``. Mitigation: upgrade to `40.10.6` or later.
CVE-2026-70605 SSRF (Server-Side Request Forgery) in electron (CVE-2026-70605)
SSRF in electron (CVE-2026-70605). Confidential information can be exposed externally. Exploitable via ``net``. Mitigation: upgrade to `42.0.0-beta.3` or later.
CVE-2026-70604 Vulnerability in electron (CVE-2026-70604)
vulnerability in electron (CVE-2026-70604). Confidential information can be exposed externally. Exploitable via ``XMLHttpRequest``. Mitigation: upgrade to `39.8.10` or later.
CVE-2026-70602 Vulnerability in electron (CVE-2026-70602)
vulnerability in electron (CVE-2026-70602). Confidential information can be exposed externally. Exploitable via ``session``. Mitigation: upgrade to `42.0.0-beta.3` or later.
CVE-2026-70603 Vulnerability in electron (CVE-2026-70603)
vulnerability in electron (CVE-2026-70603). Confidential information can be exposed externally. Mitigation: upgrade to `39.8.6` or later.
CVE-2026-70601 Vulnerability in electron (CVE-2026-70601)
vulnerability in electron (CVE-2026-70601). Confidential information can be exposed externally. Exploitable via ``contextBridge``. Mitigation: upgrade to `42.0.0-beta.5` or later.
CVE-2026-70600 Vulnerability in electron (CVE-2026-70600)
vulnerability in electron (CVE-2026-70600). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `42.0.0-beta.3` or later.
CVE-2026-70599 Vulnerability in electron (CVE-2026-70599)
vulnerability in electron (CVE-2026-70599). Confidential information can be exposed externally. Exploitable via ``requestingOrigin``. Mitigation: upgrade to `42.0.0-beta.1` or later.
CVE-2026-70598 Out-of-Bounds Read in electron (CVE-2026-70598)
vulnerability in electron (CVE-2026-70598). Risk of unauthorized operations or information disclosure. Exploitable via ``paint``. Mitigation: upgrade to `42.0.0-beta.3` or later.
CVE-2026-70597 Vulnerability in electron (CVE-2026-70597)
vulnerability in electron (CVE-2026-70597). Confidential information can be exposed externally. Exploitable via ``ELECTRON_RUN_AS_NODE``. Mitigation: upgrade to `42.0.0-beta.3` or later.
CVE-2026-70596 Cross-Site Scripting (XSS) in ghost (CVE-2026-70596)
cross-site scripting in ghost (CVE-2026-70596). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.54.1` or later.
CVE-2026-70595 SSRF (Server-Side Request Forgery) in ghost (CVE-2026-70595)
SSRF in ghost (CVE-2026-70595). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.54.1` or later.
CVE-2026-15979 Path Traversal in wordpress (CVE-2026-15979)
path traversal in wordpress (CVE-2026-15979). Data can be tampered with by attackers.
CVE-2026-71294 Unsafe Deserialization in CVE-2026-71294 (CVE-2026-71294)
vulnerability in CVE-2026-71294 (CVE-2026-71294). Confidential information can be exposed externally. Exploitable via ``allowed_classes``.
CVE-2026-71293 Information Disclosure in CVE-2026-71293 (CVE-2026-71293)
vulnerability in CVE-2026-71293 (CVE-2026-71293). Confidential information can be exposed externally. Exploitable via ``two_factor_recovery_codes``.
CVE-2026-71284 OS Command Injection in CVE-2026-71284 (CVE-2026-71284)
OS command injection in CVE-2026-71284 (CVE-2026-71284). Successful exploitation can lead to full system takeover.
CVE-2026-71286 Vulnerability in CVE-2026-71286 (CVE-2026-71286)
vulnerability in CVE-2026-71286 (CVE-2026-71286). Risk of unauthorized operations or information disclosure. Exploitable via ``templateString``.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →