Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-55061 |
|
Vulnerability in gitlab.com/uniget-org/cli (CVE-2026-55061)
vulnerability in gitlab.com/uniget-org/cli (CVE-2026-55061). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.27.6` or later.
|
| GHSA-v836-6xw4-9cx3 |
|
Vulnerability in vm2 (GHSA-v836-6xw4-9cx3)
vulnerability in vm2 (GHSA-v836-6xw4-9cx3). Risk of unauthorized operations or information disclosure. Exploitable via ``bufferAllocLimit``. Mitigation: upgrade to `3.11.6` or later.
|
| GHSA-m5w8-4gq2-6f8x |
|
Information Disclosure in vm2 (GHSA-m5w8-4gq2-6f8x)
vulnerability in vm2 (GHSA-m5w8-4gq2-6f8x). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `3.11.6` or later.
|
| CVE-2026-47698 |
|
Vulnerability in vm2 (CVE-2026-47698)
vulnerability in vm2 (CVE-2026-47698). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.11.6` or later.
|
| CVE-2026-47686 |
|
Vulnerability in vm2 (CVE-2026-47686)
vulnerability in vm2 (CVE-2026-47686). Successful exploitation can lead to full system takeover. Exploitable via ``process``. Mitigation: upgrade to `3.11.6` or later.
|
| CVE-2026-47683 |
|
Vulnerability in vm2 (CVE-2026-47683)
vulnerability in vm2 (CVE-2026-47683). Risk of unauthorized operations or information disclosure. Exploitable via ``bufferAllocLimit``. Mitigation: upgrade to `3.11.6` or later.
|
| CVE-2026-71491 |
|
Vulnerability in sqlparse (CVE-2026-71491)
vulnerability in sqlparse (CVE-2026-71491). Risk of unauthorized operations or information disclosure. Exploitable via ``group_comments``. Mitigation: upgrade to `0.6.0` or later.
|
| CVE-2026-68520 |
|
Information Disclosure in glances (CVE-2026-68520)
vulnerability in glances (CVE-2026-68520). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/4/config`. Mitigation: upgrade to `4.5.6` or later.
|
| CVE-2026-68519 |
|
OS Command Injection in glances (CVE-2026-68519)
OS command injection in glances (CVE-2026-68519). Risk of unauthorized operations or information disclosure. Exploitable via ``glances.conf``. Mitigation: upgrade to `4.5.6` or later.
|
| CVE-2026-62982 |
|
OS Command Injection in glances (CVE-2026-62982)
OS command injection in glances (CVE-2026-62982). Successful exploitation can lead to full system takeover. Exploitable via ``_sanitize_mustache_dict``. Mitigation: upgrade to `4.5.6` or later.
|
| CVE-2026-59894 |
|
Code Injection in sqlparse (CVE-2026-59894)
code injection in sqlparse (CVE-2026-59894). Risk of unauthorized operations or information disclosure. Exploitable via ``EVOHUNT_OUTPUT_FORMAT_INJECTION_VERIFIED``. Mitigation: upgrade to `0.6.0` or later.
|
| CVE-2026-9771 |
|
Vulnerability in c (CVE-2026-9771)
vulnerability in c (CVE-2026-9771). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12630 |
|
Out-of-Bounds Read in c (CVE-2026-12630)
vulnerability in c (CVE-2026-12630). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12629 |
|
Vulnerability in c (CVE-2026-12629)
vulnerability in c (CVE-2026-12629). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12519 |
|
Out-of-Bounds Write in c (CVE-2026-12519)
out-of-bounds write in c (CVE-2026-12519). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68517 |
|
Vulnerability in glances (CVE-2026-68517)
vulnerability in glances (CVE-2026-68517). Confidential information can be exposed externally. Exploitable via ``CORSMiddleware``. Mitigation: upgrade to `4.5.6` or later.
|
| CVE-2026-45099 |
|
Path Traversal in github.com/gruntwork-io/terragrunt (CVE-2026-45099)
path traversal in github.com/gruntwork-io/terragrunt (CVE-2026-45099). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.4` or later.
|
| CVE-2026-68518 |
|
OS Command Injection in glances (CVE-2026-68518)
OS command injection in glances (CVE-2026-68518). Risk of unauthorized operations or information disclosure. Exploitable via ``glances``. Mitigation: upgrade to `4.5.6` or later.
|
| CVE-2026-64865 |
|
Vulnerability in github.com/QuantumNous/new-api (CVE-2026-64865)
vulnerability in github.com/QuantumNous/new-api (CVE-2026-64865). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/user/self`. Mitigation: upgrade to `1.0.0-rc.16` or later.
|
| CVE-2026-71479 |
|
Vulnerability in github.com/QuantumNous/new-api (CVE-2026-71479)
vulnerability in github.com/QuantumNous/new-api (CVE-2026-71479). Data can be tampered with by attackers. Exploitable via ``CheckinSetting.Enabled``. Mitigation: upgrade to `1.0.0-rc.18` or later.
|
| CVE-2026-64866 |
|
Vulnerability in github.com/QuantumNous/new-api (CVE-2026-64866)
vulnerability in github.com/QuantumNous/new-api (CVE-2026-64866). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /api/user/`. Mitigation: upgrade to `1.0.0-rc.7` or later.
|
| CVE-2026-64868 |
|
Vulnerability in github.com/QuantumNous/new-api (CVE-2026-64868)
vulnerability in github.com/QuantumNous/new-api (CVE-2026-64868). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/stripe/webhook`. Mitigation: upgrade to `1.0.0-rc.11` or later.
|
| CVE-2026-64859 |
|
Information Disclosure in github.com/QuantumNous/new-api (CVE-2026-64859)
vulnerability in github.com/QuantumNous/new-api (CVE-2026-64859). Successful exploitation can lead to full system takeover. Exploitable via `GET /api/user/`. Mitigation: upgrade to `1.0.0-rc.7` or later.
|
| CVE-2026-59829 |
|
Vulnerability in CVE-2026-59829 (CVE-2026-59829)
vulnerability in CVE-2026-59829 (CVE-2026-59829). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55704 |
|
Vulnerability in CVE-2026-55704 (CVE-2026-55704)
vulnerability in CVE-2026-55704 (CVE-2026-55704). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55674 |
|
Cross-Site Scripting (XSS) in CVE-2026-55674 (CVE-2026-55674)
cross-site scripting in CVE-2026-55674 (CVE-2026-55674). Confidential information can be exposed externally.
|
| CVE-2026-53960 |
|
Vulnerability in CVE-2026-53960 (CVE-2026-53960)
vulnerability in CVE-2026-53960 (CVE-2026-53960). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-27772 |
|
Vulnerability in CVE-2025-27772 (CVE-2025-27772)
vulnerability in CVE-2025-27772 (CVE-2025-27772). Risk of unauthorized operations or information disclosure. Exploitable via ``checks``.
|
| CVE-2025-27771 |
|
Vulnerability in CVE-2025-27771 (CVE-2025-27771)
vulnerability in CVE-2025-27771 (CVE-2025-27771). Risk of unauthorized operations or information disclosure. Exploitable via ``checks``.
|
| CVE-2025-27770 |
|
Vulnerability in CVE-2025-27770 (CVE-2025-27770)
vulnerability in CVE-2025-27770 (CVE-2025-27770). Risk of unauthorized operations or information disclosure. Exploitable via ``checks``.
|
| CVE-2025-27621 |
|
Authentication Bypass in CVE-2025-27621 (CVE-2025-27621)
authentication bypass in CVE-2025-27621 (CVE-2025-27621). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16049 |
|
Vulnerability in CVE-2026-16049 (CVE-2026-16049)
vulnerability in CVE-2026-16049 (CVE-2026-16049). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19693 |
|
Path Traversal in CVE-2026-19693 (CVE-2026-19693)
path traversal in CVE-2026-19693 (CVE-2026-19693). Data can be tampered with by attackers.
|
| CVE-2026-59911 |
|
Vulnerability in dell (CVE-2026-59911)
vulnerability in dell (CVE-2026-59911). Confidential information can be exposed externally.
|
| CVE-2026-16048 |
|
Authorization Flaw in mattermost (CVE-2026-16048)
vulnerability in mattermost (CVE-2026-16048). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16046 |
|
Authorization Flaw in mattermost (CVE-2026-16046)
vulnerability in mattermost (CVE-2026-16046). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10527 |
|
Authorization Flaw in mattermost (CVE-2026-10527)
vulnerability in mattermost (CVE-2026-10527). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16045 |
|
Authorization Flaw in mattermost (CVE-2026-16045)
vulnerability in mattermost (CVE-2026-16045). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13202 |
|
Cross-Site Scripting (XSS) in CVE-2026-13202 (CVE-2026-13202)
cross-site scripting in CVE-2026-13202 (CVE-2026-13202). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16047 |
|
Vulnerability in mattermost (CVE-2026-16047)
vulnerability in mattermost (CVE-2026-16047). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16044 |
|
Authorization Flaw in mattermost (CVE-2026-16044)
vulnerability in mattermost (CVE-2026-16044). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15754 |
|
Authorization Flaw in mattermost (CVE-2026-15754)
vulnerability in mattermost (CVE-2026-15754). Data can be tampered with by attackers.
|
| CVE-2026-59909 |
|
Vulnerability in path-traversal (CVE-2026-59909)
vulnerability in path-traversal (CVE-2026-59909). Data can be tampered with by attackers.
|
| CVE-2026-56089 |
|
Vulnerability in path-traversal (CVE-2026-56089)
vulnerability in path-traversal (CVE-2026-56089). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59910 |
|
OS Command Injection in dell (CVE-2026-59910)
OS command injection in dell (CVE-2026-59910). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56685 |
|
OS Command Injection in dell (CVE-2026-56685)
OS command injection in dell (CVE-2026-56685). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56090 |
|
Vulnerability in dell (CVE-2026-56090)
vulnerability in dell (CVE-2026-56090). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56686 |
|
OS Command Injection in dell (CVE-2026-56686)
OS command injection in dell (CVE-2026-56686). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75007 |
|
Command Injection in privilege-escalation (CVE-2026-75007)
command injection in privilege-escalation (CVE-2026-75007). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16471 |
|
Vulnerability in CVE-2026-16471 (CVE-2026-16471)
vulnerability in CVE-2026-16471 (CVE-2026-16471). Confidential information can be exposed externally.
|