Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-18720 |
|
Vulnerability in CVE-2026-18720 (CVE-2026-18720)
vulnerability in CVE-2026-18720 (CVE-2026-18720). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58045 |
|
Vulnerability in dos (CVE-2026-58045)
vulnerability in dos (CVE-2026-58045). Risk of unauthorized operations or information disclosure. Exploitable via ``TypedArray``.
|
| CVE-2026-58044 |
|
Vulnerability in CVE-2026-58044 (CVE-2026-58044)
vulnerability in CVE-2026-58044 (CVE-2026-58044). Risk of unauthorized operations or information disclosure. Exploitable via ``IncomingMessage``.
|
| CVE-2026-58042 |
|
Vulnerability in dos (CVE-2026-58042)
vulnerability in dos (CVE-2026-58042). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58041 |
|
Vulnerability in CVE-2026-58041 (CVE-2026-58041)
vulnerability in CVE-2026-58041 (CVE-2026-58041). Data can be tampered with by attackers.
|
| CVE-2026-56846 |
|
Vulnerability in CVE-2026-56846 (CVE-2026-56846)
vulnerability in CVE-2026-56846 (CVE-2026-56846). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48323 |
|
Vulnerability in c (CVE-2026-48323)
vulnerability in c (CVE-2026-48323). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48326 |
|
SQL Injection in c (CVE-2026-48326)
SQL injection in c (CVE-2026-48326). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48330 |
|
SQL Injection in c (CVE-2026-48330)
SQL injection in c (CVE-2026-48330). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67617 |
|
Cross-Site Scripting (XSS) in csrf (CVE-2026-67617)
cross-site scripting in csrf (CVE-2026-67617). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/save_content_admin`.
|
| CVE-2026-10849 |
|
Vulnerability in c (CVE-2026-10849)
vulnerability in c (CVE-2026-10849). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41447 |
|
Vulnerability in c (CVE-2026-41447)
vulnerability in c (CVE-2026-41447). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49132 |
|
Cross-Site Scripting (XSS) in CVE-2026-49132 (CVE-2026-49132)
cross-site scripting in CVE-2026-49132 (CVE-2026-49132). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49131 |
|
Cross-Site Scripting (XSS) in CVE-2026-49131 (CVE-2026-49131)
cross-site scripting in CVE-2026-49131 (CVE-2026-49131). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51775 |
|
SQL Injection in sqli (CVE-2026-51775)
SQL injection in sqli (CVE-2026-51775). Successful exploitation can lead to full system takeover.
|
| CVE-2026-52520 |
|
Cross-Site Scripting (XSS) in CVE-2026-52520 (CVE-2026-52520)
cross-site scripting in CVE-2026-52520 (CVE-2026-52520). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18646 |
|
Path Traversal in path-traversal (CVE-2026-18646)
path traversal in path-traversal (CVE-2026-18646). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18645 |
|
Path Traversal in path-traversal (CVE-2026-18645)
path traversal in path-traversal (CVE-2026-18645). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67599 |
|
OS Command Injection in CVE-2026-67599 (CVE-2026-67599)
OS command injection in CVE-2026-67599 (CVE-2026-67599). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67598 |
|
Vulnerability in CVE-2026-67598 (CVE-2026-67598)
vulnerability in CVE-2026-67598 (CVE-2026-67598). Confidential information can be exposed externally.
|
| CVE-2026-18631 |
|
Vulnerability in CVE-2026-18631 (CVE-2026-18631)
vulnerability in CVE-2026-18631 (CVE-2026-18631). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38446 |
|
Cross-Site Scripting (XSS) in CVE-2026-38446 (CVE-2026-38446)
cross-site scripting in CVE-2026-38446 (CVE-2026-38446). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18644 |
|
Path Traversal in path-traversal (CVE-2026-18644)
path traversal in path-traversal (CVE-2026-18644). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38444 |
|
Cross-Site Scripting (XSS) in CVE-2026-38444 (CVE-2026-38444)
cross-site scripting in CVE-2026-38444 (CVE-2026-38444). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-69248 |
|
Vulnerability in cryptography (CVE-2026-69248)
vulnerability in cryptography (CVE-2026-69248). Risk of unauthorized operations or information disclosure. Exploitable via ``foo.example.com``. Mitigation: upgrade to `49.0.0` or later.
|
| CVE-2026-69249 |
|
Vulnerability in cryptography (CVE-2026-69249)
vulnerability in cryptography (CVE-2026-69249). Risk of unauthorized operations or information disclosure. Exploitable via ``build_chain_inner``. Mitigation: upgrade to `49.0.0` or later.
|
| CVE-2026-69247 |
|
Vulnerability in cryptography (CVE-2026-69247)
vulnerability in cryptography (CVE-2026-69247). Risk of unauthorized operations or information disclosure. Exploitable via ``pkcs7_decrypt_der``. Mitigation: upgrade to `50.0.0` or later.
|
| CVE-2026-69246 |
|
Vulnerability in guzzlehttp/guzzle (CVE-2026-69246)
vulnerability in guzzlehttp/guzzle (CVE-2026-69246). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `7.15.2` or later.
|
| CVE-2026-69245 |
|
Vulnerability in guzzlehttp/guzzle (CVE-2026-69245)
vulnerability in guzzlehttp/guzzle (CVE-2026-69245). Risk of unauthorized operations or information disclosure. Exploitable via ``Domain``. Mitigation: upgrade to `7.15.2` or later.
|
| CVE-2026-69244 |
|
Out-of-Bounds Read in aiohttp (CVE-2026-69244)
vulnerability in aiohttp (CVE-2026-69244). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.14.3` or later.
|
| CVE-2026-69243 |
|
Vulnerability in aiohttp (CVE-2026-69243)
vulnerability in aiohttp (CVE-2026-69243). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.14.2` or later.
|
| CVE-2026-69240 |
|
SQL Injection in sequelize (CVE-2026-69240)
SQL injection in sequelize (CVE-2026-69240). Successful exploitation can lead to full system takeover. Exploitable via ``oracle``. Mitigation: upgrade to `6.37.4` or later.
|
| CVE-2026-69207 |
|
Vulnerability in hono (CVE-2026-69207)
vulnerability in hono (CVE-2026-69207). Risk of unauthorized operations or information disclosure. Exploitable via ``OPTIONS``. Mitigation: upgrade to `4.12.34` or later.
|
| CVE-2026-69192 |
|
Vulnerability in ip-address (CVE-2026-69192)
vulnerability in ip-address (CVE-2026-69192). Risk of unauthorized operations or information disclosure. Exploitable via ``Address4``. Mitigation: upgrade to `10.3.1` or later.
|
| CVE-2026-69198 |
|
Vulnerability in ip-address (CVE-2026-69198)
vulnerability in ip-address (CVE-2026-69198). Risk of unauthorized operations or information disclosure. Exploitable via ``isInSubnet``. Mitigation: upgrade to `10.2.2` or later.
|
| CVE-2026-61524 |
|
Unrestricted File Upload in CVE-2026-61524 (CVE-2026-61524)
vulnerability in CVE-2026-61524 (CVE-2026-61524). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61523 |
|
Code Injection in CVE-2026-61523 (CVE-2026-61523)
code injection in CVE-2026-61523 (CVE-2026-61523). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67612 |
|
Cross-Site Scripting (XSS) in CVE-2026-67612 (CVE-2026-67612)
cross-site scripting in CVE-2026-67612 (CVE-2026-67612). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41453 |
|
SQL Injection in sqli (CVE-2026-41453)
SQL injection in sqli (CVE-2026-41453). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39931 |
|
Unrestricted File Upload in sqli (CVE-2026-39931)
vulnerability in sqli (CVE-2026-39931). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39932 |
|
Vulnerability in CVE-2026-39932 (CVE-2026-39932)
vulnerability in CVE-2026-39932 (CVE-2026-39932). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18606 |
|
Vulnerability in c (CVE-2026-18606)
vulnerability in c (CVE-2026-18606). Successful exploitation can lead to full system takeover.
|
| CVE-2026-69151 |
|
Cross-Site Scripting (XSS) in @angular/compiler (CVE-2026-69151)
cross-site scripting in @angular/compiler (CVE-2026-69151). Risk of unauthorized operations or information disclosure. Exploitable via ``onclick``.
|
| CVE-2026-69149 |
|
Cross-Site Scripting (XSS) in @angular/platform-server (CVE-2026-69149)
cross-site scripting in @angular/platform-server (CVE-2026-69149). Risk of unauthorized operations or information disclosure. Exploitable via ``domino``.
|
| CVE-2026-68945 |
|
Vulnerability in @angular/common (CVE-2026-68945)
vulnerability in @angular/common (CVE-2026-68945). Risk of unauthorized operations or information disclosure. Exploitable via ``HttpTransferCache``.
|
| CVE-2026-68930 |
|
Vulnerability in russh (CVE-2026-68930)
vulnerability in russh (CVE-2026-68930). Data can be tampered with by attackers. Exploitable via ``russh``. Mitigation: upgrade to `0.62.5` or later.
|
| CVE-2026-69096 |
|
OS Command Injection in CVE-2026-69096 (CVE-2026-69096)
OS command injection in CVE-2026-69096 (CVE-2026-69096). Successful exploitation can lead to full system takeover.
|
| CVE-2026-69093 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-69093 (CVE-2026-69093)
vulnerability in CVE-2026-69093 (CVE-2026-69093). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-69094 |
|
Vulnerability in CVE-2026-69094 (CVE-2026-69094)
vulnerability in CVE-2026-69094 (CVE-2026-69094). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-69092 |
|
Cross-Site Scripting (XSS) in CVE-2026-69092 (CVE-2026-69092)
cross-site scripting in CVE-2026-69092 (CVE-2026-69092). Risk of unauthorized operations or information disclosure.
|