Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-35398 |
|
Open Redirect in wegia (CVE-2026-35398)
vulnerability in wegia (CVE-2026-35398). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.9` or later.
|
| CVE-2026-35389 |
|
Vulnerability in bulwarkmail (CVE-2026-35389)
vulnerability in bulwarkmail (CVE-2026-35389). Data can be tampered with by attackers. Mitigation: upgrade to `1.4.11` or later.
|
| CVE-2026-35390 |
|
Cross-Site Scripting (XSS) in bulwarkmail (CVE-2026-35390)
cross-site scripting in bulwarkmail (CVE-2026-35390). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.11` or later.
|
| CVE-2026-35391 |
|
Vulnerability in bulwarkmail (CVE-2026-35391)
vulnerability in bulwarkmail (CVE-2026-35391). Data can be tampered with by attackers. Mitigation: upgrade to `1.4.11` or later.
|
| CVE-2026-5681 |
|
Vulnerability in sqli (CVE-2026-5681)
vulnerability in sqli (CVE-2026-5681). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35185 |
|
Vulnerability in psu (CVE-2026-35185)
vulnerability in psu (CVE-2026-35185). Confidential information can be exposed externally. Mitigation: upgrade to `25.0.0` or later.
|
| CVE-2026-35179 |
|
Vulnerability in wwbn (CVE-2026-35179)
vulnerability in wwbn (CVE-2026-35179). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35180 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-35180)
vulnerability in csrf (CVE-2026-35180). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35181 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-35181)
vulnerability in csrf (CVE-2026-35181). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35182 |
|
Vulnerability in ajax30 (CVE-2026-35182)
vulnerability in ajax30 (CVE-2026-35182). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.0.6` or later.
|
| CVE-2026-35183 |
|
Vulnerability in ajax30 (CVE-2026-35183)
vulnerability in ajax30 (CVE-2026-35183). Data can be tampered with by attackers. Mitigation: upgrade to `2.0.6` or later.
|
| CVE-2026-35184 |
|
SQL Injection in sqli (CVE-2026-35184)
SQL injection in sqli (CVE-2026-35184). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.0` or later.
|
| CVE-2026-5672 |
|
Vulnerability in sqli (CVE-2026-5672)
vulnerability in sqli (CVE-2026-5672). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5675 |
|
Vulnerability in sqli (CVE-2026-5675)
vulnerability in sqli (CVE-2026-5675). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5671 |
|
Cross-Site Scripting (XSS) in CVE-2026-5671 (CVE-2026-5671)
cross-site scripting in CVE-2026-5671 (CVE-2026-5671). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35470 |
|
SQL Injection in sqli (CVE-2026-35470)
SQL injection in sqli (CVE-2026-35470). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.10.2` or later.
|
| CVE-2026-35174 |
|
Path Traversal in path-traversal (CVE-2026-35174)
path traversal in path-traversal (CVE-2026-35174). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.01` or later.
|
| CVE-2026-35029 |
|
Authorization Flaw in litellm (CVE-2026-35029)
vulnerability in litellm (CVE-2026-35029). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.83.0` or later.
|
| CVE-2026-35030 |
|
Authentication Bypass in litellm (CVE-2026-35030)
authentication bypass in litellm (CVE-2026-35030). Confidential information can be exposed externally. Mitigation: upgrade to `1.83.0` or later.
|
| CVE-2026-5636 |
|
Vulnerability in sqli (CVE-2026-5636)
vulnerability in sqli (CVE-2026-5636). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5635 |
|
Vulnerability in sqli (CVE-2026-5635)
vulnerability in sqli (CVE-2026-5635). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5634 |
|
Vulnerability in sqli (CVE-2026-5634)
vulnerability in sqli (CVE-2026-5634). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5624 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-5624 (CVE-2026-5624)
vulnerability in CVE-2026-5624 (CVE-2026-5624). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5620 |
|
Vulnerability in sqli (CVE-2026-5620)
vulnerability in sqli (CVE-2026-5620). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5615 |
|
Cross-Site Scripting (XSS) in CVE-2026-5615 (CVE-2026-5615)
cross-site scripting in CVE-2026-5615 (CVE-2026-5615). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5606 |
|
Vulnerability in sqli (CVE-2026-5606)
vulnerability in sqli (CVE-2026-5606). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35616 KEV |
|
[KEV] Vulnerability in Fortinet forticlient-ems (CVE-2026-35616)
vulnerability in Fortinet forticlient-ems (CVE-2026-35616). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2019-25687 |
|
Path Traversal in wisdom (CVE-2019-25687)
path traversal in wisdom (CVE-2019-25687). Successful exploitation can lead to full system takeover.
|
| CVE-2019-25682 |
|
Cross-Site Request Forgery (CSRF) in victoralagwu (CVE-2019-25682)
vulnerability in victoralagwu (CVE-2019-25682). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-25684 |
|
SQL Injection in sqli (CVE-2019-25684)
SQL injection in sqli (CVE-2019-25684). Confidential information can be exposed externally.
|
| CVE-2019-25673 |
|
Unrestricted File Upload in laravel (CVE-2019-25673)
vulnerability in laravel (CVE-2019-25673). Successful exploitation can lead to full system takeover.
|
| CVE-2019-25674 |
|
SQL Injection in sqli (CVE-2019-25674)
SQL injection in sqli (CVE-2019-25674). Confidential information can be exposed externally.
|
| CVE-2019-25675 |
|
SQL Injection in sqli (CVE-2019-25675)
SQL injection in sqli (CVE-2019-25675). Confidential information can be exposed externally.
|
| CVE-2019-25676 |
|
Cross-Site Scripting (XSS) in sqli (CVE-2019-25676)
cross-site scripting in sqli (CVE-2019-25676). Confidential information can be exposed externally.
|
| CVE-2019-25678 |
|
Vulnerability in sqli (CVE-2019-25678)
vulnerability in sqli (CVE-2019-25678). Confidential information can be exposed externally.
|
| CVE-2019-25677 |
|
Vulnerability in dos (CVE-2019-25677)
vulnerability in dos (CVE-2019-25677). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-25668 |
|
SQL Injection in sqli (CVE-2019-25668)
SQL injection in sqli (CVE-2019-25668). Confidential information can be exposed externally.
|
| CVE-2019-25671 |
|
Path Traversal in c (CVE-2019-25671)
path traversal in c (CVE-2019-25671). Successful exploitation can lead to full system takeover.
|
| CVE-2019-25662 |
|
SQL Injection in sqli (CVE-2019-25662)
SQL injection in sqli (CVE-2019-25662). Confidential information can be exposed externally.
|
| CVE-2019-25664 |
|
SQL Injection in sqli (CVE-2019-25664)
SQL injection in sqli (CVE-2019-25664). Confidential information can be exposed externally.
|
| CVE-2026-5580 |
|
Vulnerability in sqli (CVE-2026-5580)
vulnerability in sqli (CVE-2026-5580). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5583 |
|
Vulnerability in sqli (CVE-2026-5583)
vulnerability in sqli (CVE-2026-5583). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5579 |
|
Vulnerability in sqli (CVE-2026-5579)
vulnerability in sqli (CVE-2026-5579). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5576 |
|
Vulnerability in CVE-2026-5576 (CVE-2026-5576)
vulnerability in CVE-2026-5576 (CVE-2026-5576). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5578 |
|
Vulnerability in sqli (CVE-2026-5578)
vulnerability in sqli (CVE-2026-5578). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5575 |
|
Vulnerability in sqli (CVE-2026-5575)
vulnerability in sqli (CVE-2026-5575). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5565 |
|
Vulnerability in sqli (CVE-2026-5565)
vulnerability in sqli (CVE-2026-5565). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5564 |
|
Vulnerability in sqli (CVE-2026-5564)
vulnerability in sqli (CVE-2026-5564). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5560 |
|
Vulnerability in sqli (CVE-2026-5560)
vulnerability in sqli (CVE-2026-5560). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5561 |
|
Vulnerability in CVE-2026-5561 (CVE-2026-5561)
vulnerability in CVE-2026-5561 (CVE-2026-5561). Risk of unauthorized operations or information disclosure.
|