Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Tag: cwe-863 Clear
ID Title
CVE-2026-55485 Information Disclosure in piccolo-admin (CVE-2026-55485)
vulnerability in piccolo-admin (CVE-2026-55485). Successful exploitation can lead to full system takeover. Exploitable via `PATCH /api/tables/piccolo_user/2/`. Mitigation: upgrade to `1.14.0` or later.
CVE-2026-81729 Authorization Flaw in CVE-2026-81729 (CVE-2026-81729)
vulnerability in CVE-2026-81729 (CVE-2026-81729). Data can be tampered with by attackers. Exploitable via `DELETE /api/index.php/documents`.
CVE-2026-66003 Authorization Flaw in CVE-2026-66003 (CVE-2026-66003)
vulnerability in CVE-2026-66003 (CVE-2026-66003). Risk of unauthorized operations or information disclosure.
CVE-2026-80203 Authorization Flaw in CVE-2026-80203 (CVE-2026-80203)
vulnerability in CVE-2026-80203 (CVE-2026-80203). Successful exploitation can lead to full system takeover.
CVE-2026-79190 Authorization Flaw in c (CVE-2026-79190)
vulnerability in c (CVE-2026-79190). Risk of unauthorized operations or information disclosure.
CVE-2026-79002 Authorization Flaw in c (CVE-2026-79002)
vulnerability in c (CVE-2026-79002). Risk of unauthorized operations or information disclosure.
CVE-2026-78954 Authorization Flaw in c (CVE-2026-78954)
vulnerability in c (CVE-2026-78954). Risk of unauthorized operations or information disclosure.
CVE-2026-77923 Authorization Flaw in CVE-2026-77923 (CVE-2026-77923)
vulnerability in CVE-2026-77923 (CVE-2026-77923). Risk of unauthorized operations or information disclosure.
CVE-2026-76836 Code Injection in CVE-2026-76836 (CVE-2026-76836)
code injection in CVE-2026-76836 (CVE-2026-76836). Successful exploitation can lead to full system takeover. Exploitable via `PUT /api/station/{station_id}/profile/edit`.
CVE-2026-62382 Authorization Flaw in CVE-2026-62382 (CVE-2026-62382)
vulnerability in CVE-2026-62382 (CVE-2026-62382). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.9.6` or later.
CVE-2026-62313 Authorization Flaw in c (CVE-2026-62313)
vulnerability in c (CVE-2026-62313). Risk of unauthorized operations or information disclosure. Exploitable via ``security.idmap.isolated``.
CVE-2026-14949 Authorization Flaw in CVE-2026-14949 (CVE-2026-14949)
vulnerability in CVE-2026-14949 (CVE-2026-14949). Data can be tampered with by attackers.
CVE-2026-68561 Privilege Escalation in CVE-2026-68561 (CVE-2026-68561)
vulnerability in CVE-2026-68561 (CVE-2026-68561). Successful exploitation can lead to full system takeover.
CVE-2026-19670 Authorization Flaw in nginx (CVE-2026-19670)
vulnerability in nginx (CVE-2026-19670). Risk of unauthorized operations or information disclosure.
CVE-2026-45122 Authorization Flaw in CVE-2026-45122 (CVE-2026-45122)
vulnerability in CVE-2026-45122 (CVE-2026-45122). Risk of unauthorized operations or information disclosure.
CVE-2026-45121 Authorization Flaw in CVE-2026-45121 (CVE-2026-45121)
vulnerability in CVE-2026-45121 (CVE-2026-45121). Risk of unauthorized operations or information disclosure.
CVE-2026-19598 Authorization Flaw in wordpress (CVE-2026-19598)
vulnerability in wordpress (CVE-2026-19598). Successful exploitation can lead to full system takeover.
CVE-2026-73571 Authorization Flaw in c (CVE-2026-73571)
vulnerability in c (CVE-2026-73571). Risk of unauthorized operations or information disclosure.
CVE-2026-73290 Authorization Flaw in CVE-2026-73290 (CVE-2026-73290)
vulnerability in CVE-2026-73290 (CVE-2026-73290). Risk of unauthorized operations or information disclosure.
CVE-2026-73289 Authorization Flaw in CVE-2026-73289 (CVE-2026-73289)
vulnerability in CVE-2026-73289 (CVE-2026-73289). Confidential information can be exposed externally.
CVE-2026-73286 Authorization Flaw in CVE-2026-73286 (CVE-2026-73286)
vulnerability in CVE-2026-73286 (CVE-2026-73286). Confidential information can be exposed externally.
CVE-2026-73285 Authorization Flaw in CVE-2026-73285 (CVE-2026-73285)
vulnerability in CVE-2026-73285 (CVE-2026-73285). Successful exploitation can lead to full system takeover.
CVE-2026-73265 Vulnerability in CVE-2026-73265 (CVE-2026-73265)
vulnerability in CVE-2026-73265 (CVE-2026-73265). Confidential information can be exposed externally.
CVE-2026-73213 Authorization Flaw in c (CVE-2026-73213)
vulnerability in c (CVE-2026-73213). Risk of unauthorized operations or information disclosure.
CVE-2026-62872 Authorization Flaw in csharp (CVE-2026-62872)
vulnerability in csharp (CVE-2026-62872). Successful exploitation can lead to full system takeover.
CVE-2026-69118 Authorization Flaw in CVE-2026-69118 (CVE-2026-69118)
vulnerability in CVE-2026-69118 (CVE-2026-69118). Successful exploitation can lead to full system takeover.
CVE-2026-19350 Vulnerability in CVE-2026-19350 (CVE-2026-19350)
vulnerability in CVE-2026-19350 (CVE-2026-19350). Risk of unauthorized operations or information disclosure.
CVE-2026-19345 Vulnerability in CVE-2026-19345 (CVE-2026-19345)
vulnerability in CVE-2026-19345 (CVE-2026-19345). Risk of unauthorized operations or information disclosure.
CVE-2026-71315 Vulnerability in nuxt (CVE-2026-71315)
vulnerability in nuxt (CVE-2026-71315). Confidential information can be exposed externally. Exploitable via ``appMiddleware``. Mitigation: upgrade to `3.21.10` or later.
CVE-2026-68930 Vulnerability in russh (CVE-2026-68930)
vulnerability in russh (CVE-2026-68930). Data can be tampered with by attackers. Exploitable via ``russh``. Mitigation: upgrade to `0.62.5` or later.
CVE-2026-67341 Authorization Flaw in CVE-2026-67341 (CVE-2026-67341)
vulnerability in CVE-2026-67341 (CVE-2026-67341). Successful exploitation can lead to full system takeover.
CVE-2026-2411 Authorization Flaw in c (CVE-2026-2411)
vulnerability in c (CVE-2026-2411). Confidential information can be exposed externally.
CVE-2026-14929 Authorization Flaw in wordpress (CVE-2026-14929)
vulnerability in wordpress (CVE-2026-14929). Risk of unauthorized operations or information disclosure.
CVE-2026-65975 Authorization Flaw in pydantic (CVE-2026-65975)
vulnerability in pydantic (CVE-2026-65975). Risk of unauthorized operations or information disclosure.
CVE-2026-61325 Vulnerability in c (CVE-2026-61325)
vulnerability in c (CVE-2026-61325). Confidential information can be exposed externally.
CVE-2026-61012 Authorization Flaw in c (CVE-2026-61012)
vulnerability in c (CVE-2026-61012). Data can be tampered with by attackers.
CVE-2026-60951 Vulnerability in c (CVE-2026-60951)
vulnerability in c (CVE-2026-60951). Confidential information can be exposed externally.
CVE-2026-60723 Authorization Flaw in c (CVE-2026-60723)
vulnerability in c (CVE-2026-60723). Confidential information can be exposed externally.
CVE-2026-60663 Privilege Escalation in c (CVE-2026-60663)
vulnerability in c (CVE-2026-60663). Successful exploitation can lead to full system takeover.
CVE-2026-60625 Authorization Flaw in c (CVE-2026-60625)
vulnerability in c (CVE-2026-60625). Successful exploitation can lead to full system takeover.
CVE-2026-60320 Authorization Flaw in c (CVE-2026-60320)
vulnerability in c (CVE-2026-60320). Confidential information can be exposed externally.
CVE-2026-15829 SQL Injection in c (CVE-2026-15829)
SQL injection in c (CVE-2026-15829). Risk of unauthorized operations or information disclosure.
CVE-2026-65049 Authorization Flaw in wordpress (CVE-2026-65049)
vulnerability in wordpress (CVE-2026-65049). Data can be tampered with by attackers.
CVE-2026-16200 Vulnerability in c (CVE-2026-16200)
vulnerability in c (CVE-2026-16200). Risk of unauthorized operations or information disclosure.
CVE-2026-16126 Vulnerability in c (CVE-2026-16126)
vulnerability in c (CVE-2026-16126). Risk of unauthorized operations or information disclosure.
CVE-2026-62217 Authorization Flaw in c (CVE-2026-62217)
vulnerability in c (CVE-2026-62217). Successful exploitation can lead to full system takeover.
CVE-2026-50528 Vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50528)
vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50528). Data can be tampered with by attackers. Mitigation: upgrade to `8.0.29` or later.
CVE-2026-47303 Vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47303)
vulnerability in Microsoft.AspNetCore.Authentication.Negotiate (CVE-2026-47303). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.29` or later.
CVE-2026-58408 Vulnerability in CVE-2026-58408 (CVE-2026-58408)
vulnerability in CVE-2026-58408 (CVE-2026-58408). Confidential information can be exposed externally. Exploitable via `POST /CSVCreateFile.php`.
CVE-2026-39903 Authorization Flaw in CVE-2026-39903 (CVE-2026-39903)
vulnerability in CVE-2026-39903 (CVE-2026-39903). Data can be tampered with by attackers.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →