Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-17665 |
|
Use-After-Free in google (CVE-2026-17665)
vulnerability in google (CVE-2026-17665). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17664 |
|
Vulnerability in google (CVE-2026-17664)
vulnerability in google (CVE-2026-17664). Confidential information can be exposed externally.
|
| CVE-2026-17663 |
|
Vulnerability in google (CVE-2026-17663)
vulnerability in google (CVE-2026-17663). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17662 |
|
Vulnerability in google (CVE-2026-17662)
vulnerability in google (CVE-2026-17662). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17661 |
|
Use-After-Free in google (CVE-2026-17661)
vulnerability in google (CVE-2026-17661). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17660 |
|
Vulnerability in google (CVE-2026-17660)
vulnerability in google (CVE-2026-17660). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17659 |
|
Vulnerability in google (CVE-2026-17659)
vulnerability in google (CVE-2026-17659). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17658 |
|
Use-After-Free in google (CVE-2026-17658)
vulnerability in google (CVE-2026-17658). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17657 |
|
Use-After-Free in google (CVE-2026-17657)
vulnerability in google (CVE-2026-17657). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17656 |
|
Use-After-Free in google (CVE-2026-17656)
vulnerability in google (CVE-2026-17656). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17655 |
|
Vulnerability in google (CVE-2026-17655)
vulnerability in google (CVE-2026-17655). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17654 |
|
Vulnerability in privilege-escalation (CVE-2026-17654)
vulnerability in privilege-escalation (CVE-2026-17654). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17653 |
|
Use-After-Free in google (CVE-2026-17653)
vulnerability in google (CVE-2026-17653). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17652 |
|
Use-After-Free in google (CVE-2026-17652)
vulnerability in google (CVE-2026-17652). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17651 |
|
Vulnerability in google (CVE-2026-17651)
vulnerability in google (CVE-2026-17651). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16339 |
|
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
|
| CVE-2026-64685 |
|
Out-of-Bounds Read in c (CVE-2026-64685)
vulnerability in c (CVE-2026-64685). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67595 |
|
Vulnerability in CVE-2026-67595 (CVE-2026-67595)
vulnerability in CVE-2026-67595 (CVE-2026-67595). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18060 |
|
Vulnerability in CVE-2026-18060 (CVE-2026-18060)
vulnerability in CVE-2026-18060 (CVE-2026-18060). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15157 |
|
Vulnerability in undici (CVE-2026-15157)
vulnerability in undici (CVE-2026-15157). Risk of unauthorized operations or information disclosure. Exploitable via ``body.type``. Mitigation: upgrade to `6.24.0` or later.
|
| CVE-2026-14643 |
|
Vulnerability in undici (CVE-2026-14643)
vulnerability in undici (CVE-2026-14643). Confidential information can be exposed externally. Exploitable via ``private``. Mitigation: upgrade to `8.9.0` or later.
|
| CVE-2025-69949 |
|
SQL Injection in sqli (CVE-2025-69949)
SQL injection in sqli (CVE-2025-69949). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-69945 |
|
SQL Injection in sqli (CVE-2025-69945)
SQL injection in sqli (CVE-2025-69945). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-69944 |
|
SQL Injection in sqli (CVE-2025-69944)
SQL injection in sqli (CVE-2025-69944). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-69943 |
|
SQL Injection in sqli (CVE-2025-69943)
SQL injection in sqli (CVE-2025-69943). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69942 |
|
SQL Injection in sqli (CVE-2025-69942)
SQL injection in sqli (CVE-2025-69942). Successful exploitation can lead to full system takeover.
|
| CVE-2025-67408 |
|
SQL Injection in sqli (CVE-2025-67408)
SQL injection in sqli (CVE-2025-67408). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-67407 |
|
SQL Injection in sqli (CVE-2025-67407)
SQL injection in sqli (CVE-2025-67407). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-67406 |
|
SQL Injection in sqli (CVE-2025-67406)
SQL injection in sqli (CVE-2025-67406). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-67405 |
|
SQL Injection in sqli (CVE-2025-67405)
SQL injection in sqli (CVE-2025-67405). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-67404 |
|
SQL Injection in sqli (CVE-2025-67404)
SQL injection in sqli (CVE-2025-67404). Successful exploitation can lead to full system takeover.
|
| CVE-2025-67403 |
|
SQL Injection in sqli (CVE-2025-67403)
SQL injection in sqli (CVE-2025-67403). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13305 |
|
Vulnerability in CVE-2026-13305 (CVE-2026-13305)
vulnerability in CVE-2026-13305 (CVE-2026-13305). Successful exploitation can lead to full system takeover.
|
| CVE-2025-65337 |
|
Cross-Site Scripting (XSS) in CVE-2025-65337 (CVE-2025-65337)
cross-site scripting in CVE-2025-65337 (CVE-2025-65337). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13309 |
|
Vulnerability in CVE-2026-13309 (CVE-2026-13309)
vulnerability in CVE-2026-13309 (CVE-2026-13309). Successful exploitation can lead to full system takeover.
|
| CVE-2025-65340 |
|
SQL Injection in sqli (CVE-2025-65340)
SQL injection in sqli (CVE-2025-65340). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50782 |
|
XXE (XML External Entity) in CVE-2026-50782 (CVE-2026-50782)
vulnerability in CVE-2026-50782 (CVE-2026-50782). Confidential information can be exposed externally.
|
| CVE-2026-13308 |
|
Vulnerability in CVE-2026-13308 (CVE-2026-13308)
vulnerability in CVE-2026-13308 (CVE-2026-13308). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13307 |
|
Vulnerability in CVE-2026-13307 (CVE-2026-13307)
vulnerability in CVE-2026-13307 (CVE-2026-13307). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13306 |
|
Vulnerability in CVE-2026-13306 (CVE-2026-13306)
vulnerability in CVE-2026-13306 (CVE-2026-13306). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67439 |
|
Authorization Flaw in github.com/OliveTin/OliveTin (CVE-2026-67439)
vulnerability in github.com/OliveTin/OliveTin (CVE-2026-67439). Risk of unauthorized operations or information disclosure. Exploitable via ``StartActionAndWait``. Mitigation: upgrade to `0.0.0-20260708085316-e421780c9885` or later.
|
| CVE-2026-67438 |
|
OS Command Injection in github.com/OliveTin/OliveTin (CVE-2026-67438)
OS command injection in github.com/OliveTin/OliveTin (CVE-2026-67438). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.0.0-20260708084548-995ff79736f2` or later.
|
| CVE-2026-67437 |
|
Vulnerability in github.com/OliveTin/OliveTin (CVE-2026-67437)
vulnerability in github.com/OliveTin/OliveTin (CVE-2026-67437). Risk of unauthorized operations or information disclosure. Exploitable via ``registeredStates``. Mitigation: upgrade to `0.0.0-20260708075951-ec114e95d297` or later.
|
| CVE-2026-65975 |
|
Authorization Flaw in pydantic (CVE-2026-65975)
vulnerability in pydantic (CVE-2026-65975). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54249 |
|
SSRF (Server-Side Request Forgery) in pydantic-ai-slim (CVE-2026-54249)
SSRF in pydantic-ai-slim (CVE-2026-54249). Confidential information can be exposed externally. Exploitable via ``UploadedFile``. Mitigation: upgrade to `2.0.0b6` or later.
|
| CVE-2026-16728 |
|
Vulnerability in undici (CVE-2026-16728)
vulnerability in undici (CVE-2026-16728). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.9.0` or later.
|
| CVE-2026-6336 |
|
Authorization Flaw in gitlab (CVE-2026-6336)
vulnerability in gitlab (CVE-2026-6336). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6267 |
|
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5,...
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5,...
|
| CVE-2026-6102 |
|
Vulnerability in privilege-escalation (CVE-2026-6102)
vulnerability in privilege-escalation (CVE-2026-6102). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67436 |
|
Vulnerability in CVE-2026-67436 (CVE-2026-67436)
vulnerability in CVE-2026-67436 (CVE-2026-67436). Risk of unauthorized operations or information disclosure.
|