Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-46988 Vulnerability in c (CVE-2026-46988)
vulnerability in c (CVE-2026-46988). Successful exploitation can lead to full system takeover.
CVE-2026-46990 Vulnerability in c (CVE-2026-46990)
vulnerability in c (CVE-2026-46990). Risk of unauthorized operations or information disclosure.
CVE-2026-46987 Vulnerability in c (CVE-2026-46987)
vulnerability in c (CVE-2026-46987). Confidential information can be exposed externally.
CVE-2026-46981 Vulnerability in c (CVE-2026-46981)
vulnerability in c (CVE-2026-46981). Risk of unauthorized operations or information disclosure.
CVE-2026-46943 Vulnerability in c (CVE-2026-46943)
vulnerability in c (CVE-2026-46943). Confidential information can be exposed externally.
CVE-2026-46941 Vulnerability in c (CVE-2026-46941)
vulnerability in c (CVE-2026-46941). Successful exploitation can lead to full system takeover.
CVE-2026-46954 Vulnerability in c (CVE-2026-46954)
vulnerability in c (CVE-2026-46954). Successful exploitation can lead to full system takeover.
CVE-2026-46923 Vulnerability in c (CVE-2026-46923)
vulnerability in c (CVE-2026-46923). Successful exploitation can lead to full system takeover.
CVE-2026-35287 Vulnerability in c (CVE-2026-35287)
vulnerability in c (CVE-2026-35287). Confidential information can be exposed externally.
CVE-2026-16484 Vulnerability in sqli (CVE-2026-16484)
vulnerability in sqli (CVE-2026-16484). Risk of unauthorized operations or information disclosure.
CVE-2026-16420 Vulnerability in Google chrome (CVE-2026-16420)
vulnerability in Google chrome (CVE-2026-16420). Successful exploitation can lead to full system takeover.
CVE-2026-56819 Vulnerability in io.netty:netty-codec-http2 (CVE-2026-56819)
vulnerability in io.netty:netty-codec-http2 (CVE-2026-56819). Risk of unauthorized operations or information disclosure. Exploitable via ``ByteBuf``. Mitigation: upgrade to `4.1.136.Final` or later.
CVE-2026-47247 Information Disclosure in wordpress (CVE-2026-47247)
vulnerability in wordpress (CVE-2026-47247). Confidential information can be exposed externally.
CVE-2026-10678 Vulnerability in c (CVE-2026-10678)
vulnerability in c (CVE-2026-10678). Data can be tampered with by attackers.
CVE-2026-10680 Out-of-Bounds Read in c (CVE-2026-10680)
vulnerability in c (CVE-2026-10680). Risk of unauthorized operations or information disclosure.
CVE-2026-59765 SSRF (Server-Side Request Forgery) in code.gitea.io/gitea (CVE-2026-59765)
SSRF in code.gitea.io/gitea (CVE-2026-59765). Confidential information can be exposed externally. Exploitable via ``DefaultClient``. Mitigation: upgrade to `1.27.0` or later.
CVE-2026-58427 Information Disclosure in gitea.dev (CVE-2026-58427)
vulnerability in gitea.dev (CVE-2026-58427). Confidential information can be exposed externally. Mitigation: upgrade to `1.27.0` or later.
CVE-2026-8982 Vulnerability in autel (CVE-2026-8982)
vulnerability in autel (CVE-2026-8982). Successful exploitation can lead to full system takeover.
CVE-2026-65056 SSRF (Server-Side Request Forgery) in CVE-2026-65056 (CVE-2026-65056)
SSRF in CVE-2026-65056 (CVE-2026-65056). Confidential information can be exposed externally.
CVE-2026-64881 OS Command Injection in tenable (CVE-2026-64881)
OS command injection in tenable (CVE-2026-64881). Successful exploitation can lead to full system takeover.
CVE-2026-52474 Information Disclosure in CVE-2026-52474 (CVE-2026-52474)
vulnerability in CVE-2026-52474 (CVE-2026-52474). Confidential information can be exposed externally.
CVE-2026-63358 Vulnerability in filegator (CVE-2026-63358)
vulnerability in filegator (CVE-2026-63358). Confidential information can be exposed externally.
CVE-2026-44878 Vulnerability in CVE-2026-44878 (CVE-2026-44878)
vulnerability in CVE-2026-44878 (CVE-2026-44878). Successful exploitation can lead to full system takeover.
CVE-2026-56147 Vulnerability in elastic (CVE-2026-56147)
vulnerability in elastic (CVE-2026-56147). Confidential information can be exposed externally.
CVE-2026-44879 Command Injection in CVE-2026-44879 (CVE-2026-44879)
command injection in CVE-2026-44879 (CVE-2026-44879). Successful exploitation can lead to full system takeover.
CVE-2026-30633 Path Traversal in path-traversal (CVE-2026-30633)
path traversal in path-traversal (CVE-2026-30633). Confidential information can be exposed externally.
CVE-2026-52476 SQL Injection in sqli (CVE-2026-52476)
SQL injection in sqli (CVE-2026-52476). Confidential information can be exposed externally.
CVE-2026-63764 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-63764)
SSRF in ssrf (CVE-2026-63764). Confidential information can be exposed externally.
CVE-2026-64880 SQL Injection in sqli (CVE-2026-64880)
SQL injection in sqli (CVE-2026-64880). Confidential information can be exposed externally.
CVE-2026-50757 Path Traversal in path-traversal (CVE-2026-50757)
path traversal in path-traversal (CVE-2026-50757). Successful exploitation can lead to full system takeover.
CVE-2026-50756 Vulnerability in CVE-2026-50756 (CVE-2026-50756)
vulnerability in CVE-2026-50756 (CVE-2026-50756). Confidential information can be exposed externally.
CVE-2026-50759 Vulnerability in CVE-2026-50759 (CVE-2026-50759)
vulnerability in CVE-2026-50759 (CVE-2026-50759). Risk of unauthorized operations or information disclosure. Exploitable via `GET /state`.
CVE-2026-50758 Cross-Site Scripting (XSS) in CVE-2026-50758 (CVE-2026-50758)
cross-site scripting in CVE-2026-50758 (CVE-2026-50758). Confidential information can be exposed externally.
CVE-2026-59146 Out-of-Bounds Read in CVE-2026-59146 (CVE-2026-59146)
vulnerability in CVE-2026-59146 (CVE-2026-59146). Successful exploitation can lead to full system takeover.
CVE-2026-56852 A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.
CVE-2026-64877 Vulnerability in sqli (CVE-2026-64877)
vulnerability in sqli (CVE-2026-64877). Confidential information can be exposed externally.
CVE-2026-63454 Path Traversal in path-traversal (CVE-2026-63454)
path traversal in path-traversal (CVE-2026-63454). Successful exploitation can lead to full system takeover.
CVE-2026-46600 Out-of-Bounds Read in CVE-2026-46600 (CVE-2026-46600)
vulnerability in CVE-2026-46600 (CVE-2026-46600). Risk of unauthorized operations or information disclosure.
CVE-2026-30632 Path Traversal in path-traversal (CVE-2026-30632)
path traversal in path-traversal (CVE-2026-30632). Confidential information can be exposed externally.
CVE-2026-63453 Vulnerability in hpe (CVE-2026-63453)
vulnerability in hpe (CVE-2026-63453). Successful exploitation can lead to full system takeover.
CVE-2026-47690 Command Injection in CVE-2026-47690 (CVE-2026-47690)
command injection in CVE-2026-47690 (CVE-2026-47690). Data can be tampered with by attackers. Exploitable via ``GITHUB_TOKEN``.
CVE-2026-47697 Authorization Flaw in CVE-2026-47697 (CVE-2026-47697)
vulnerability in CVE-2026-47697 (CVE-2026-47697). Confidential information can be exposed externally. Exploitable via ``connect``.
CVE-2026-47685 Cross-Site Scripting (XSS) in fogproject (CVE-2026-47685)
cross-site scripting in fogproject (CVE-2026-47685). Confidential information can be exposed externally.
CVE-2026-47237 Vulnerability in CVE-2026-47237 (CVE-2026-47237)
vulnerability in CVE-2026-47237 (CVE-2026-47237). Successful exploitation can lead to full system takeover.
CVE-2026-47688 Vulnerability in csrf (CVE-2026-47688)
vulnerability in csrf (CVE-2026-47688). Data can be tampered with by attackers. Exploitable via ``clearAES``.
CVE-2026-47687 Cross-Site Scripting (XSS) in fogproject (CVE-2026-47687)
cross-site scripting in fogproject (CVE-2026-47687). Confidential information can be exposed externally. Exploitable via ``fogpage.class.php``.
CVE-2026-58314 SSRF (Server-Side Request Forgery) in code.gitea.io/gitea (CVE-2026-58314)
SSRF in code.gitea.io/gitea (CVE-2026-58314). Confidential information can be exposed externally. Exploitable via `POST /api/v1/user/hooks`. Mitigation: upgrade to `1.27.0` or later.
CVE-2026-58436 Vulnerability in code.gitea.io/gitea (CVE-2026-58436)
vulnerability in code.gitea.io/gitea (CVE-2026-58436). Risk of unauthorized operations or information disclosure. Exploitable via ``main``. Mitigation: upgrade to `1.27.0` or later.
CVE-2026-58437 Vulnerability in code.gitea.io/gitea (CVE-2026-58437)
vulnerability in code.gitea.io/gitea (CVE-2026-58437). Data can be tampered with by attackers. Exploitable via ``repo.private``. Mitigation: upgrade to `1.27.0` or later.
CVE-2026-55987 Authorization Flaw in code.gitea.io/gitea (CVE-2026-55987)
vulnerability in code.gitea.io/gitea (CVE-2026-55987). Confidential information can be exposed externally. Exploitable via ``offline_access``. Mitigation: upgrade to `1.27.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →