Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-16933 |
|
Vulnerability in ibm (CVE-2026-16933)
vulnerability in ibm (CVE-2026-16933). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17028 |
|
Out-of-Bounds Read in ibm (CVE-2026-17028)
vulnerability in ibm (CVE-2026-17028). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16883 |
|
Out-of-Bounds Read in ibm (CVE-2026-16883)
vulnerability in ibm (CVE-2026-16883). Confidential information can be exposed externally.
|
| CVE-2026-16875 |
|
OS Command Injection in ibm (CVE-2026-16875)
OS command injection in ibm (CVE-2026-16875). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53965 |
|
Vulnerability in mcp/sdk (CVE-2026-53965)
vulnerability in mcp/sdk (CVE-2026-53965). Risk of unauthorized operations or information disclosure. Exploitable via ``memory_limit``. Mitigation: upgrade to `0.7.1` or later.
|
| CVE-2026-61807 |
|
Cross-Site Scripting (XSS) in snipe/snipe-it (CVE-2026-61807)
cross-site scripting in snipe/snipe-it (CVE-2026-61807). Risk of unauthorized operations or information disclosure. Exploitable via ``b224cc636c6780386e3f73f03d1171f52ab4c37a``. Mitigation: upgrade to `8.6.2` or later.
|
| CVE-2026-55694 |
|
Vulnerability in snipe/snipe-it (CVE-2026-55694)
vulnerability in snipe/snipe-it (CVE-2026-55694). Risk of unauthorized operations or information disclosure. Exploitable via `GET /stored-eula-file/{filename}`. Mitigation: upgrade to `8.6.3` or later.
|
| CVE-2026-55703 |
|
Vulnerability in snipe/snipe-it (CVE-2026-55703)
vulnerability in snipe/snipe-it (CVE-2026-55703). Risk of unauthorized operations or information disclosure. Exploitable via `GET /maintenances/5`. Mitigation: upgrade to `8.6.3` or later.
|
| CVE-2026-18681 |
|
Vulnerability in ibm (CVE-2026-18681)
vulnerability in ibm (CVE-2026-18681). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18848 |
|
Cross-Site Request Forgery (CSRF) in ibm (CVE-2026-18848)
vulnerability in ibm (CVE-2026-18848). Data can be tampered with by attackers.
|
| CVE-2026-19321 |
|
Vulnerability in ibm (CVE-2026-19321)
vulnerability in ibm (CVE-2026-19321). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17093 |
|
Vulnerability in ibm (CVE-2026-17093)
vulnerability in ibm (CVE-2026-17093). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17100 |
|
Out-of-Bounds Write in ibm (CVE-2026-17100)
out-of-bounds write in ibm (CVE-2026-17100). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17429 |
|
Authorization Flaw in ibm (CVE-2026-17429)
vulnerability in ibm (CVE-2026-17429). Data can be tampered with by attackers.
|
| CVE-2026-17494 |
|
Vulnerability in ibm (CVE-2026-17494)
vulnerability in ibm (CVE-2026-17494). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18315 |
|
Vulnerability in wordpress (CVE-2026-18315)
vulnerability in wordpress (CVE-2026-18315). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16687 |
|
Vulnerability in ibm (CVE-2026-16687)
vulnerability in ibm (CVE-2026-16687). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16828 |
|
Out-of-Bounds Read in ibm (CVE-2026-16828)
vulnerability in ibm (CVE-2026-16828). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16832 |
|
Vulnerability in ibm (CVE-2026-16832)
vulnerability in ibm (CVE-2026-16832). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16835 |
|
Vulnerability in ibm (CVE-2026-16835)
vulnerability in ibm (CVE-2026-16835). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16930 |
|
Vulnerability in ibm (CVE-2026-16930)
vulnerability in ibm (CVE-2026-16930). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16938 |
|
Vulnerability in c (CVE-2026-16938)
vulnerability in c (CVE-2026-16938). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19234 |
|
Vulnerability in ibm (CVE-2026-19234)
vulnerability in ibm (CVE-2026-19234). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19653 |
|
Vulnerability in dos (CVE-2026-19653)
vulnerability in dos (CVE-2026-19653). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19875 |
|
Vulnerability in langflow (CVE-2026-19875)
vulnerability in langflow (CVE-2026-19875). Data can be tampered with by attackers.
|
| CVE-2026-72530 KEV |
|
[KEV] Code Injection in trueconf (CVE-2026-72530)
code injection in trueconf (CVE-2026-72530). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-72529 KEV |
|
[KEV] Vulnerability in trueconf (CVE-2026-72529)
vulnerability in trueconf (CVE-2026-72529). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-64852 |
|
Vulnerability in CVE-2026-64852 (CVE-2026-64852)
vulnerability in CVE-2026-64852 (CVE-2026-64852). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64850 |
|
Code Injection in CVE-2026-64850 (CVE-2026-64850)
code injection in CVE-2026-64850 (CVE-2026-64850). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64851 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-64851)
cross-site scripting in wordpress (CVE-2026-64851). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63408 |
|
Vulnerability in apache (CVE-2026-63408)
vulnerability in apache (CVE-2026-63408). Confidential information can be exposed externally. Exploitable via `Referer header`.
|
| CVE-2026-62673 |
|
Vulnerability in getgrav/grav (CVE-2026-62673)
vulnerability in getgrav/grav (CVE-2026-62673). Risk of unauthorized operations or information disclosure. Exploitable via `GET /user/plugins/my-plugin/my-plugin.YAML`. Mitigation: upgrade to `2.0.4` or later.
|
| CVE-2026-62672 |
|
Vulnerability in CVE-2026-62672 (CVE-2026-62672)
vulnerability in CVE-2026-62672 (CVE-2026-62672). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62668 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-62668 (CVE-2026-62668)
SSRF in CVE-2026-62668 (CVE-2026-62668). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62670 |
|
Vulnerability in CVE-2026-62670 (CVE-2026-62670)
vulnerability in CVE-2026-62670 (CVE-2026-62670). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61690 |
|
Vulnerability in CVE-2026-61690 (CVE-2026-61690)
vulnerability in CVE-2026-61690 (CVE-2026-61690). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16819 |
|
Vulnerability in dos (CVE-2026-16819)
vulnerability in dos (CVE-2026-16819). Data can be tampered with by attackers.
|
| CVE-2026-20177 |
|
Vulnerability in Cisco dos (CVE-2026-20177)
vulnerability in Cisco dos (CVE-2026-20177). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20302 |
|
Vulnerability in cisco (CVE-2026-20302)
vulnerability in cisco (CVE-2026-20302). Confidential information can be exposed externally.
|
| CVE-2026-20320 |
|
XXE (XML External Entity) in cisco (CVE-2026-20320)
vulnerability in cisco (CVE-2026-20320). Confidential information can be exposed externally.
|
| CVE-2026-20030 |
|
SQL Injection in cisco (CVE-2026-20030)
SQL injection in cisco (CVE-2026-20030). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20231 |
|
Vulnerability in cisco (CVE-2026-20231)
vulnerability in cisco (CVE-2026-20231). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20232 |
|
Vulnerability in cisco (CVE-2026-20232)
vulnerability in cisco (CVE-2026-20232). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20314 |
|
SSRF (Server-Side Request Forgery) in Cisco ssrf (CVE-2026-20314)
SSRF in Cisco ssrf (CVE-2026-20314). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20327 |
|
SQL Injection in Cisco sqli (CVE-2026-20327)
SQL injection in Cisco sqli (CVE-2026-20327). Confidential information can be exposed externally.
|
| CVE-2026-75956 |
|
Vulnerability in dos (CVE-2026-75956)
vulnerability in dos (CVE-2026-75956). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71176 |
|
SQL Injection in sqli (CVE-2026-71176)
SQL injection in sqli (CVE-2026-71176). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67268 |
|
XXE (XML External Entity) in dell (CVE-2026-67268)
vulnerability in dell (CVE-2026-67268). Confidential information can be exposed externally.
|
| CVE-2026-67267 |
|
Vulnerability in dell (CVE-2026-67267)
vulnerability in dell (CVE-2026-67267). Confidential information can be exposed externally.
|
| CVE-2026-67266 |
|
Authorization Flaw in dell (CVE-2026-67266)
vulnerability in dell (CVE-2026-67266). Data can be tampered with by attackers.
|