Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-4065 |
|
Vulnerability in wordpress (CVE-2026-4065)
vulnerability in wordpress (CVE-2026-4065). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35568 |
|
Vulnerability in lfprojects (CVE-2026-35568)
vulnerability in lfprojects (CVE-2026-35568). Data can be tampered with by attackers. Mitigation: upgrade to `1.0.0` or later.
|
| CVE-2026-31789 |
|
Out-of-Bounds Write in openssl (CVE-2026-31789)
out-of-bounds write in openssl (CVE-2026-31789). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28389 |
|
Vulnerability in dos (CVE-2026-28389)
vulnerability in dos (CVE-2026-28389). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28390 |
|
Vulnerability in dos (CVE-2026-28390)
vulnerability in dos (CVE-2026-28390). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31790 |
|
Vulnerability in openssl (CVE-2026-31790)
vulnerability in openssl (CVE-2026-31790). Confidential information can be exposed externally.
|
| CVE-2026-28387 |
|
Use-After-Free in openssl (CVE-2026-28387)
vulnerability in openssl (CVE-2026-28387). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28388 |
|
Vulnerability in dos (CVE-2026-28388)
vulnerability in dos (CVE-2026-28388). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33439 |
|
Unsafe Deserialization in deserialization (CVE-2026-33439)
vulnerability in deserialization (CVE-2026-33439). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `16.0.6` or later.
|
| CVE-2026-39380 |
|
Cross-Site Scripting (XSS) in opensourcepos (CVE-2026-39380)
cross-site scripting in opensourcepos (CVE-2026-39380). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.3` or later.
|
| CVE-2026-39366 |
|
Vulnerability in wwbn (CVE-2026-39366)
vulnerability in wwbn (CVE-2026-39366). Data can be tampered with by attackers.
|
| CVE-2026-39363 |
|
Information Disclosure in vitejs (CVE-2026-39363)
vulnerability in vitejs (CVE-2026-39363). Confidential information can be exposed externally. Mitigation: upgrade to `6.4.2` or later.
|
| CVE-2026-39364 |
|
Vulnerability in vitejs (CVE-2026-39364)
vulnerability in vitejs (CVE-2026-39364). Confidential information can be exposed externally. Mitigation: upgrade to `7.3.2` or later.
|
| CVE-2026-39365 |
|
Path Traversal in vitejs (CVE-2026-39365)
path traversal in vitejs (CVE-2026-39365). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.4.2` or later.
|
| CVE-2026-5736 |
|
Vulnerability in sqli (CVE-2026-5736)
vulnerability in sqli (CVE-2026-5736). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39355 |
|
Vulnerability in kreaweb (CVE-2026-39355)
vulnerability in kreaweb (CVE-2026-39355). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.9.1` or later.
|
| CVE-2026-39341 |
|
SQL Injection in sqli (CVE-2026-39341)
SQL injection in sqli (CVE-2026-39341). Confidential information can be exposed externally. Mitigation: upgrade to `7.1.0` or later.
|
| CVE-2026-39342 |
|
SQL Injection in sqli (CVE-2026-39342)
SQL injection in sqli (CVE-2026-39342). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.1.0` or later.
|
| CVE-2026-39343 |
|
SQL Injection in sqli (CVE-2026-39343)
SQL injection in sqli (CVE-2026-39343). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.1.0` or later.
|
| CVE-2026-30460 |
|
Code Injection in thedaylightstudio (CVE-2026-30460)
code injection in thedaylightstudio (CVE-2026-30460). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5735 |
|
Out-of-Bounds Write in mozilla (CVE-2026-5735)
out-of-bounds write in mozilla (CVE-2026-5735). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5733 |
|
Buffer Overflow in mozilla (CVE-2026-5733)
vulnerability in mozilla (CVE-2026-5733). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5732 |
|
Vulnerability in mozilla (CVE-2026-5732)
vulnerability in mozilla (CVE-2026-5732). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5731 |
|
Buffer Overflow in mozilla (CVE-2026-5731)
vulnerability in mozilla (CVE-2026-5731). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5734 |
|
Out-of-Bounds Write in mozilla (CVE-2026-5734)
out-of-bounds write in mozilla (CVE-2026-5734). Successful exploitation can lead to full system takeover.
|
| CVE-2026-26931 |
|
Vulnerability in github.com/elastic/beats (CVE-2026-26931)
vulnerability in github.com/elastic/beats (CVE-2026-26931). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.0-alpha2.0.20260112100137-de072c4e371e` or later.
|
| CVE-2026-35554 |
|
Vulnerability in apache (CVE-2026-35554)
vulnerability in apache (CVE-2026-35554). Confidential information can be exposed externally.
|
| CVE-2026-22666 |
|
Vulnerability in dolibarr (CVE-2026-22666)
vulnerability in dolibarr (CVE-2026-22666). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28808 |
|
Authorization Flaw in erlang (CVE-2026-28808)
vulnerability in erlang (CVE-2026-28808). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32144 |
|
Vulnerability in erlang (CVE-2026-32144)
vulnerability in erlang (CVE-2026-32144). Confidential information can be exposed externally.
|
| CVE-2026-28810 |
|
Vulnerability in erlang (CVE-2026-28810)
vulnerability in erlang (CVE-2026-28810). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20432 |
|
Out-of-Bounds Write in mediatek (CVE-2026-20432)
out-of-bounds write in mediatek (CVE-2026-20432). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20431 |
|
Vulnerability in dos (CVE-2026-20431)
vulnerability in dos (CVE-2026-20431). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5719 |
|
Vulnerability in sqli (CVE-2026-5719)
vulnerability in sqli (CVE-2026-5719). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13044 |
|
Vulnerability in ibm (CVE-2025-13044)
vulnerability in ibm (CVE-2025-13044). Data can be tampered with by attackers.
|
| CVE-2026-5705 |
|
Cross-Site Scripting (XSS) in CVE-2026-5705 (CVE-2026-5705)
cross-site scripting in CVE-2026-5705 (CVE-2026-5705). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5687 |
|
Buffer Overflow in tenda (CVE-2026-5687)
vulnerability in tenda (CVE-2026-5687). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5684 |
|
Buffer Overflow in tenda (CVE-2026-5684)
vulnerability in tenda (CVE-2026-5684). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5685 |
|
Buffer Overflow in tenda (CVE-2026-5685)
vulnerability in tenda (CVE-2026-5685). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5686 |
|
Buffer Overflow in tenda (CVE-2026-5686)
vulnerability in tenda (CVE-2026-5686). Successful exploitation can lead to full system takeover.
|
| CVE-2026-35473 |
|
Open Redirect in wegia (CVE-2026-35473)
vulnerability in wegia (CVE-2026-35473). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.9` or later.
|
| CVE-2026-35448 |
|
Vulnerability in wwbn (CVE-2026-35448)
vulnerability in wwbn (CVE-2026-35448). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35449 |
|
Information Disclosure in wwbn (CVE-2026-35449)
vulnerability in wwbn (CVE-2026-35449). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35450 |
|
Vulnerability in wwbn (CVE-2026-35450)
vulnerability in wwbn (CVE-2026-35450). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35452 |
|
Information Disclosure in wwbn (CVE-2026-35452)
vulnerability in wwbn (CVE-2026-35452). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-48651 |
|
Vulnerability in google (CVE-2025-48651)
vulnerability in google (CVE-2025-48651). Confidential information can be exposed externally.
|
| CVE-2026-35472 |
|
Open Redirect in wegia (CVE-2026-35472)
vulnerability in wegia (CVE-2026-35472). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.9` or later.
|
| CVE-2026-5683 |
|
Buffer Overflow in tenda (CVE-2026-5683)
vulnerability in tenda (CVE-2026-5683). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35395 |
|
SQL Injection in sqli (CVE-2026-35395)
SQL injection in sqli (CVE-2026-35395). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.6.9` or later.
|
| CVE-2026-35396 |
|
Open Redirect in wegia (CVE-2026-35396)
vulnerability in wegia (CVE-2026-35396). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.9` or later.
|