Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-63222 |
|
Path Traversal in codeigniter4/framework (CVE-2026-63222)
path traversal in codeigniter4/framework (CVE-2026-63222). Data can be tampered with by attackers. Mitigation: upgrade to `4.7.4` or later.
|
| CVE-2026-63221 |
|
SQL Injection in codeigniter4/framework (CVE-2026-63221)
SQL injection in codeigniter4/framework (CVE-2026-63221). Data can be tampered with by attackers. Exploitable via ``WHERE``. Mitigation: upgrade to `4.7.4` or later.
|
| CVE-2026-56673 |
|
Path Traversal in CVE-2026-56673 (CVE-2026-56673)
path traversal in CVE-2026-56673 (CVE-2026-56673). Confidential information can be exposed externally. Exploitable via `POST /prompt`.
|
| CVE-2026-56672 |
|
Cross-Site Scripting (XSS) in CVE-2026-56672 (CVE-2026-56672)
cross-site scripting in CVE-2026-56672 (CVE-2026-56672). Confidential information can be exposed externally. Exploitable via `GET /userdata/{file}`.
|
| CVE-2026-56671 |
|
Path Traversal in CVE-2026-56671 (CVE-2026-56671)
path traversal in CVE-2026-56671 (CVE-2026-56671). Confidential information can be exposed externally.
|
| CVE-2026-56670 |
|
Cross-Site Scripting (XSS) in CVE-2026-56670 (CVE-2026-56670)
cross-site scripting in CVE-2026-56670 (CVE-2026-56670). Confidential information can be exposed externally.
|
| CVE-2026-63220 |
|
Vulnerability in codeigniter4/framework (CVE-2026-63220)
vulnerability in codeigniter4/framework (CVE-2026-63220). Risk of unauthorized operations or information disclosure. Exploitable via ``forceGlobalSecureRequests``. Mitigation: upgrade to `4.7.4` or later.
|
| CVE-2026-43833 |
|
Vulnerability in CVE-2026-43833 (CVE-2026-43833)
vulnerability in CVE-2026-43833 (CVE-2026-43833). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43832 |
|
Vulnerability in CVE-2026-43832 (CVE-2026-43832)
vulnerability in CVE-2026-43832 (CVE-2026-43832). Confidential information can be exposed externally.
|
| CVE-2026-43831 |
|
Vulnerability in CVE-2026-43831 (CVE-2026-43831)
vulnerability in CVE-2026-43831 (CVE-2026-43831). Confidential information can be exposed externally.
|
| CVE-2026-43830 |
|
Command Injection in CVE-2026-43830 (CVE-2026-43830)
command injection in CVE-2026-43830 (CVE-2026-43830). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43829 |
|
Vulnerability in CVE-2026-43829 (CVE-2026-43829)
vulnerability in CVE-2026-43829 (CVE-2026-43829). Confidential information can be exposed externally.
|
| CVE-2026-6890 |
|
Vulnerability in CVE-2026-6890 (CVE-2026-6890)
vulnerability in CVE-2026-6890 (CVE-2026-6890). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6889 |
|
Vulnerability in dos (CVE-2026-6889)
vulnerability in dos (CVE-2026-6889). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18157 |
|
Vulnerability in CVE-2026-18157 (CVE-2026-18157)
vulnerability in CVE-2026-18157 (CVE-2026-18157). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14541 |
|
Authentication Bypass in google (CVE-2026-14541)
authentication bypass in google (CVE-2026-14541). Confidential information can be exposed externally.
|
| CVE-2026-14540 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-14540)
SSRF in ssrf (CVE-2026-14540). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14539 |
|
Vulnerability in dos (CVE-2026-14539)
vulnerability in dos (CVE-2026-14539). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14538 |
|
Vulnerability in google (CVE-2026-14538)
vulnerability in google (CVE-2026-14538). Confidential information can be exposed externally.
|
| CVE-2026-14537 |
|
Authorization Flaw in google (CVE-2026-14537)
vulnerability in google (CVE-2026-14537). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58039 |
|
Vulnerability in CVE-2026-58039 (CVE-2026-58039)
vulnerability in CVE-2026-58039 (CVE-2026-58039). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66720 |
|
Out-of-Bounds Read in CVE-2026-66720 (CVE-2026-66720)
vulnerability in CVE-2026-66720 (CVE-2026-66720). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66421 |
|
Cross-Site Scripting (XSS) in CVE-2026-66421 (CVE-2026-66421)
cross-site scripting in CVE-2026-66421 (CVE-2026-66421). Confidential information can be exposed externally.
|
| CVE-2026-66420 |
|
Vulnerability in CVE-2026-66420 (CVE-2026-66420)
vulnerability in CVE-2026-66420 (CVE-2026-66420). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66369 |
|
Out-of-Bounds Read in CVE-2026-66369 (CVE-2026-66369)
vulnerability in CVE-2026-66369 (CVE-2026-66369). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66364 |
|
Out-of-Bounds Read in CVE-2026-66364 (CVE-2026-66364)
vulnerability in CVE-2026-66364 (CVE-2026-66364). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66360 |
|
Out-of-Bounds Read in dos (CVE-2026-66360)
vulnerability in dos (CVE-2026-66360). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66349 |
|
Out-of-Bounds Read in CVE-2026-66349 (CVE-2026-66349)
vulnerability in CVE-2026-66349 (CVE-2026-66349). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65423 |
|
Vulnerability in CVE-2026-65423 (CVE-2026-65423)
vulnerability in CVE-2026-65423 (CVE-2026-65423). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65421 |
|
Out-of-Bounds Read in CVE-2026-65421 (CVE-2026-65421)
vulnerability in CVE-2026-65421 (CVE-2026-65421). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63550 |
|
Out-of-Bounds Read in CVE-2026-63550 (CVE-2026-63550)
vulnerability in CVE-2026-63550 (CVE-2026-63550). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63362 |
|
Vulnerability in dos (CVE-2026-63362)
vulnerability in dos (CVE-2026-63362). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63035 |
|
Use-After-Free in dos (CVE-2026-63035)
vulnerability in dos (CVE-2026-63035). Data can be tampered with by attackers.
|
| CVE-2026-63033 |
|
Out-of-Bounds Read in CVE-2026-63033 (CVE-2026-63033)
vulnerability in CVE-2026-63033 (CVE-2026-63033). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56758 |
|
Out-of-Bounds Read in CVE-2026-56758 (CVE-2026-56758)
vulnerability in CVE-2026-56758 (CVE-2026-56758). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10031 |
|
Authorization Flaw in CVE-2026-10031 (CVE-2026-10031)
vulnerability in CVE-2026-10031 (CVE-2026-10031). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68563 |
|
Vulnerability in CVE-2026-68563 (CVE-2026-68563)
vulnerability in CVE-2026-68563 (CVE-2026-68563). Confidential information can be exposed externally. Exploitable via ``leapp_old_postgresql_data``.
|
| CVE-2026-68562 |
|
Vulnerability in CVE-2026-68562 (CVE-2026-68562)
vulnerability in CVE-2026-68562 (CVE-2026-68562). Confidential information can be exposed externally.
|
| CVE-2026-64816 |
|
Vulnerability in CVE-2026-64816 (CVE-2026-64816)
vulnerability in CVE-2026-64816 (CVE-2026-64816). Confidential information can be exposed externally.
|
| CVE-2026-63559 |
|
Vulnerability in CVE-2026-63559 (CVE-2026-63559)
vulnerability in CVE-2026-63559 (CVE-2026-63559). Confidential information can be exposed externally.
|
| CVE-2026-62845 |
|
SQL Injection in sqli (CVE-2026-62845)
SQL injection in sqli (CVE-2026-62845). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62246 |
|
Vulnerability in CVE-2026-62246 (CVE-2026-62246)
vulnerability in CVE-2026-62246 (CVE-2026-62246). Successful exploitation can lead to full system takeover.
|
| CVE-2026-38709 |
|
Command Injection in CVE-2026-38709 (CVE-2026-38709)
command injection in CVE-2026-38709 (CVE-2026-38709). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18064 |
|
Vulnerability in CVE-2026-18064 (CVE-2026-18064)
vulnerability in CVE-2026-18064 (CVE-2026-18064). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12562 |
|
Vulnerability in CVE-2026-12562 (CVE-2026-12562)
vulnerability in CVE-2026-12562 (CVE-2026-12562). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66803 |
|
Vulnerability in microsoft (CVE-2026-66803)
vulnerability in microsoft (CVE-2026-66803). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66418 |
|
Cross-Site Scripting (XSS) in CVE-2026-66418 (CVE-2026-66418)
cross-site scripting in CVE-2026-66418 (CVE-2026-66418). Confidential information can be exposed externally.
|
| CVE-2025-69938 |
|
SQL Injection in sqli (CVE-2025-69938)
SQL injection in sqli (CVE-2025-69938). Successful exploitation can lead to full system takeover.
|
| CVE-2026-52539 |
|
Vulnerability in CVE-2026-52539 (CVE-2026-52539)
vulnerability in CVE-2026-52539 (CVE-2026-52539). Confidential information can be exposed externally.
|
| CVE-2025-69933 |
|
SQL Injection in sqli (CVE-2025-69933)
SQL injection in sqli (CVE-2025-69933). Successful exploitation can lead to full system takeover.
|