Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Clear
ID Title
CVE-2026-19429 Vulnerability in CVE-2026-19429 (CVE-2026-19429)
vulnerability in CVE-2026-19429 (CVE-2026-19429). Successful exploitation can lead to full system takeover. Exploitable via `POST /job/{name}/build`.
CVE-2026-72594 Cross-Site Scripting (XSS) in CVE-2026-72594 (CVE-2026-72594)
cross-site scripting in CVE-2026-72594 (CVE-2026-72594). Confidential information can be exposed externally.
CVE-2026-72586 Vulnerability in CVE-2026-72586 (CVE-2026-72586)
vulnerability in CVE-2026-72586 (CVE-2026-72586). Confidential information can be exposed externally.
CVE-2026-72573 OS Command Injection in CVE-2026-72573 (CVE-2026-72573)
OS command injection in CVE-2026-72573 (CVE-2026-72573). Successful exploitation can lead to full system takeover.
CVE-2026-72571 Path Traversal in path-traversal (CVE-2026-72571)
path traversal in path-traversal (CVE-2026-72571). Confidential information can be exposed externally.
CVE-2026-72572 Path Traversal in path-traversal (CVE-2026-72572)
path traversal in path-traversal (CVE-2026-72572). Confidential information can be exposed externally.
CVE-2026-16985 Unrestricted File Upload in wordpress (CVE-2026-16985)
vulnerability in wordpress (CVE-2026-16985). Successful exploitation can lead to full system takeover.
CVE-2026-14293 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14293)
cross-site scripting in wordpress (CVE-2026-14293). Successful exploitation can lead to full system takeover.
CVE-2026-13170 Path Traversal in wordpress (CVE-2026-13170)
path traversal in wordpress (CVE-2026-13170). Successful exploitation can lead to full system takeover.
CVE-2026-19384 Vulnerability in sqli (CVE-2026-19384)
vulnerability in sqli (CVE-2026-19384). Risk of unauthorized operations or information disclosure.
CVE-2026-19376 Vulnerability in CVE-2026-19376 (CVE-2026-19376)
vulnerability in CVE-2026-19376 (CVE-2026-19376). Risk of unauthorized operations or information disclosure.
CVE-2026-19351 Vulnerability in sqli (CVE-2026-19351)
vulnerability in sqli (CVE-2026-19351). Risk of unauthorized operations or information disclosure.
CVE-2026-19344 Vulnerability in sqli (CVE-2026-19344)
vulnerability in sqli (CVE-2026-19344). Risk of unauthorized operations or information disclosure.
CVE-2026-19342 Authentication Bypass in CVE-2026-19342 (CVE-2026-19342)
authentication bypass in CVE-2026-19342 (CVE-2026-19342). Risk of unauthorized operations or information disclosure.
CVE-2026-19343 Vulnerability in sqli (CVE-2026-19343)
vulnerability in sqli (CVE-2026-19343). Risk of unauthorized operations or information disclosure.
CVE-2026-10595 Vulnerability in path-traversal (CVE-2026-10595)
vulnerability in path-traversal (CVE-2026-10595). Confidential information can be exposed externally. Exploitable via ``pathlib``.
CVE-2026-19263 Vulnerability in CVE-2026-19263 (CVE-2026-19263)
vulnerability in CVE-2026-19263 (CVE-2026-19263). Risk of unauthorized operations or information disclosure.
CVE-2026-16267 Unsafe Deserialization in wordpress (CVE-2026-16267)
vulnerability in wordpress (CVE-2026-16267). Successful exploitation can lead to full system takeover.
CVE-2026-48026 lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to version 1.81.1 of the open source edition and 1.84.0 of the enterprise edition, lakeFS Web UI render...
lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to version 1.81.1 of the open source edition and 1.84.0 of the enterprise edition, lakeFS Web UI renders markdown files from repository objects without sanitizing the resulting HTML. A user with write ac...
CVE-2026-62295 Vulnerability in CVE-2026-62295 (CVE-2026-62295)
vulnerability in CVE-2026-62295 (CVE-2026-62295). Risk of unauthorized operations or information disclosure.
CVE-2026-62296 Vulnerability in CVE-2026-62296 (CVE-2026-62296)
vulnerability in CVE-2026-62296 (CVE-2026-62296). Risk of unauthorized operations or information disclosure.
CVE-2026-19231 Vulnerability in sqli (CVE-2026-19231)
vulnerability in sqli (CVE-2026-19231). Risk of unauthorized operations or information disclosure.
CVE-2026-19211 Vulnerability in sqli (CVE-2026-19211)
vulnerability in sqli (CVE-2026-19211). Risk of unauthorized operations or information disclosure.
CVE-2026-19196 Vulnerability in sqli (CVE-2026-19196)
vulnerability in sqli (CVE-2026-19196). Risk of unauthorized operations or information disclosure.
CVE-2026-16263 Path Traversal in wordpress (CVE-2026-16263)
path traversal in wordpress (CVE-2026-16263). Successful exploitation can lead to full system takeover.
CVE-2026-19192 Vulnerability in c (CVE-2026-19192)
vulnerability in c (CVE-2026-19192). Successful exploitation can lead to full system takeover.
CVE-2026-19191 Vulnerability in c (CVE-2026-19191)
vulnerability in c (CVE-2026-19191). Successful exploitation can lead to full system takeover.
CVE-2026-19190 Vulnerability in c (CVE-2026-19190)
vulnerability in c (CVE-2026-19190). Successful exploitation can lead to full system takeover.
CVE-2026-19189 Vulnerability in c (CVE-2026-19189)
vulnerability in c (CVE-2026-19189). Successful exploitation can lead to full system takeover.
CVE-2026-45198 Vulnerability in c (CVE-2026-45198)
vulnerability in c (CVE-2026-45198). Successful exploitation can lead to full system takeover.
CVE-2026-70640 Vulnerability in cpp (CVE-2026-70640)
vulnerability in cpp (CVE-2026-70640). Successful exploitation can lead to full system takeover.
CVE-2026-70638 Vulnerability in cpp (CVE-2026-70638)
vulnerability in cpp (CVE-2026-70638). Successful exploitation can lead to full system takeover.
CVE-2026-70634 Out-of-Bounds Read in c (CVE-2026-70634)
vulnerability in c (CVE-2026-70634). Confidential information can be exposed externally.
CVE-2026-70628 Vulnerability in c (CVE-2026-70628)
vulnerability in c (CVE-2026-70628). Successful exploitation can lead to full system takeover.
CVE-2026-67687 Vulnerability in CVE-2026-67687 (CVE-2026-67687)
vulnerability in CVE-2026-67687 (CVE-2026-67687). Successful exploitation can lead to full system takeover.
CVE-2026-67422 Vulnerability in pymdown-extensions (CVE-2026-67422)
vulnerability in pymdown-extensions (CVE-2026-67422). Risk of unauthorized operations or information disclosure. Exploitable via ``caret``. Mitigation: upgrade to `10.16.1` or later.
CVE-2026-63725 OS Command Injection in apache (CVE-2026-63725)
OS command injection in apache (CVE-2026-63725). Successful exploitation can lead to full system takeover.
CVE-2026-5857 Out-of-Bounds Write in c (CVE-2026-5857)
out-of-bounds write in c (CVE-2026-5857). Successful exploitation can lead to full system takeover.
CVE-2026-5856 Out-of-Bounds Read in c (CVE-2026-5856)
vulnerability in c (CVE-2026-5856). Confidential information can be exposed externally.
CVE-2026-5855 Out-of-Bounds Read in c (CVE-2026-5855)
vulnerability in c (CVE-2026-5855). Risk of unauthorized operations or information disclosure.
CVE-2026-53983 SSRF (Server-Side Request Forgery) in c (CVE-2026-53983)
SSRF in c (CVE-2026-53983). Confidential information can be exposed externally.
CVE-2026-48081 Cross-Site Scripting (XSS) in CVE-2026-48081 (CVE-2026-48081)
cross-site scripting in CVE-2026-48081 (CVE-2026-48081). Confidential information can be exposed externally. Exploitable via ``links``.
CVE-2026-43632 Vulnerability in cpp (CVE-2026-43632)
vulnerability in cpp (CVE-2026-43632). Successful exploitation can lead to full system takeover.
CVE-2026-43631 Vulnerability in cpp (CVE-2026-43631)
vulnerability in cpp (CVE-2026-43631). Successful exploitation can lead to full system takeover.
CVE-2026-43627 Vulnerability in cpp (CVE-2026-43627)
vulnerability in cpp (CVE-2026-43627). Successful exploitation can lead to full system takeover.
CVE-2026-43629 Vulnerability in cpp (CVE-2026-43629)
vulnerability in cpp (CVE-2026-43629). Successful exploitation can lead to full system takeover.
CVE-2026-43628 Out-of-Bounds Read in cpp (CVE-2026-43628)
vulnerability in cpp (CVE-2026-43628). Successful exploitation can lead to full system takeover.
CVE-2026-71488 Vulnerability in league/commonmark (CVE-2026-71488)
vulnerability in league/commonmark (CVE-2026-71488). Risk of unauthorized operations or information disclosure. Exploitable via ``CommonMarkConverter``. Mitigation: upgrade to `2.9.0` or later.
CVE-2026-53977 Vulnerability in express (CVE-2026-53977)
vulnerability in express (CVE-2026-53977). Risk of unauthorized operations or information disclosure.
CVE-2026-43622 Vulnerability in c (CVE-2026-43622)
vulnerability in c (CVE-2026-43622). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →