Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-52439 |
|
Vulnerability in CVE-2026-52439 (CVE-2026-52439)
vulnerability in CVE-2026-52439 (CVE-2026-52439). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6924 |
|
Vulnerability in CVE-2026-6924 (CVE-2026-6924)
vulnerability in CVE-2026-6924 (CVE-2026-6924). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50039 |
|
Vulnerability in CVE-2026-50039 (CVE-2026-50039)
vulnerability in CVE-2026-50039 (CVE-2026-50039). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50032 |
|
Vulnerability in CVE-2026-50032 (CVE-2026-50032)
vulnerability in CVE-2026-50032 (CVE-2026-50032). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50103 |
|
Vulnerability in CVE-2026-50103 (CVE-2026-50103)
vulnerability in CVE-2026-50103 (CVE-2026-50103). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49035 |
|
Vulnerability in dos (CVE-2026-49035)
vulnerability in dos (CVE-2026-49035). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15967 |
|
Vulnerability in progress (CVE-2026-15967)
vulnerability in progress (CVE-2026-15967). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15981 |
|
Authentication Bypass in wordpress (CVE-2026-15981)
authentication bypass in wordpress (CVE-2026-15981). Successful exploitation can lead to full system takeover.
|
| CVE-2026-21653 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-21653)
SSRF in ssrf (CVE-2026-21653). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15966 |
|
Vulnerability in progress (CVE-2026-15966)
vulnerability in progress (CVE-2026-15966). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39155 |
|
Vulnerability in dos (CVE-2026-39155)
vulnerability in dos (CVE-2026-39155). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15630 |
|
Privilege Escalation in CVE-2026-15630 (CVE-2026-15630)
vulnerability in CVE-2026-15630 (CVE-2026-15630). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10697 |
|
Authentication Bypass in progress (CVE-2026-10697)
authentication bypass in progress (CVE-2026-10697). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15968 |
|
Cross-Site Scripting (XSS) in progress (CVE-2026-15968)
cross-site scripting in progress (CVE-2026-15968). Successful exploitation can lead to full system takeover.
|
| CVE-2026-38764 |
|
Privilege Escalation in CVE-2026-38764 (CVE-2026-38764)
vulnerability in CVE-2026-38764 (CVE-2026-38764). Successful exploitation can lead to full system takeover.
|
| CVE-2026-21655 |
|
Unsafe Deserialization in deserialization (CVE-2026-21655)
vulnerability in deserialization (CVE-2026-21655). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34496 |
|
Privilege Escalation in CVE-2026-34496 (CVE-2026-34496)
vulnerability in CVE-2026-34496 (CVE-2026-34496). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16002 |
|
Out-of-Bounds Read in dos (CVE-2026-16002)
vulnerability in dos (CVE-2026-16002). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16796 |
|
Vulnerability in Amazon bedrock-agentcore (CVE-2026-16796)
vulnerability in Amazon bedrock-agentcore (CVE-2026-16796). Confidential information can be exposed externally. Mitigation: upgrade to `1.18.1` or later.
|
| CVE-2026-65706 |
|
Vulnerability in ffmpeg (CVE-2026-65706)
vulnerability in ffmpeg (CVE-2026-65706). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65705 |
|
Vulnerability in ffmpeg (CVE-2026-65705)
vulnerability in ffmpeg (CVE-2026-65705). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65704 |
|
Vulnerability in ffmpeg (CVE-2026-65704)
vulnerability in ffmpeg (CVE-2026-65704). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65703 |
|
Out-of-Bounds Write in ffmpeg (CVE-2026-65703)
out-of-bounds write in ffmpeg (CVE-2026-65703). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64785 |
|
Vulnerability in swift-nio-http2 (CVE-2026-64785)
vulnerability in swift-nio-http2 (CVE-2026-64785). Risk of unauthorized operations or information disclosure. Exploitable via ``enableOutboundHeaderValidation``. Mitigation: upgrade to `48bfd90` or later.
|
| CVE-2026-63359 |
|
SQL Injection in CVE-2026-63359 (CVE-2026-63359)
SQL injection in CVE-2026-63359 (CVE-2026-63359). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60122 |
|
Code Injection in CVE-2026-60122 (CVE-2026-60122)
code injection in CVE-2026-60122 (CVE-2026-60122). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25800 |
|
Vulnerability in CVE-2026-25800 (CVE-2026-25800)
vulnerability in CVE-2026-25800 (CVE-2026-25800). Risk of unauthorized operations or information disclosure. Exploitable via ``Assembler``.
|
| CVE-2026-15212 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15212)
vulnerability in wordpress (CVE-2026-15212). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12353 |
|
Vulnerability in CVE-2026-12353 (CVE-2026-12353)
vulnerability in CVE-2026-12353 (CVE-2026-12353). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53669 |
|
Open Redirect in react-router (CVE-2026-53669)
vulnerability in react-router (CVE-2026-53669). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.18.0` or later.
|
| CVE-2026-53668 |
|
Cross-Site Scripting (XSS) in react-router-dom (CVE-2026-53668)
cross-site scripting in react-router-dom (CVE-2026-53668). Confidential information can be exposed externally. Mitigation: upgrade to `7.13.0` or later.
|
| CVE-2026-53667 |
|
Cross-Site Scripting (XSS) in react-router (CVE-2026-53667)
cross-site scripting in react-router (CVE-2026-53667). Confidential information can be exposed externally. Mitigation: upgrade to `7.18.0` or later.
|
| CVE-2026-53666 |
|
Vulnerability in react-router (CVE-2026-53666)
vulnerability in react-router (CVE-2026-53666). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.18.0` or later.
|
| CVE-2026-47219 |
|
Vulnerability in find-my-way (CVE-2026-47219)
vulnerability in find-my-way (CVE-2026-47219). Risk of unauthorized operations or information disclosure. Exploitable via ``req.method``. Mitigation: upgrade to `9.7.0` or later.
|
| CVE-2026-16756 |
|
Vulnerability in Amazon aws-smithy-http-server (CVE-2026-16756)
vulnerability in Amazon aws-smithy-http-server (CVE-2026-16756). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.66.5` or later.
|
| CVE-2026-65010 |
|
Vulnerability in privilege-escalation (CVE-2026-65010)
vulnerability in privilege-escalation (CVE-2026-65010). Data can be tampered with by attackers.
|
| CVE-2026-63765 |
|
Vulnerability in CVE-2026-63765 (CVE-2026-63765)
vulnerability in CVE-2026-63765 (CVE-2026-63765). Data can be tampered with by attackers.
|
| CVE-2026-15687 |
|
Path Traversal in CVE-2026-15687 (CVE-2026-15687)
path traversal in CVE-2026-15687 (CVE-2026-15687). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6516 |
|
OS Command Injection in CVE-2026-6516 (CVE-2026-6516)
OS command injection in CVE-2026-6516 (CVE-2026-6516). Confidential information can be exposed externally.
|
| CVE-2026-65920 |
|
Path Traversal in path-traversal (CVE-2026-65920)
path traversal in path-traversal (CVE-2026-65920). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65919 |
|
Path Traversal in CVE-2026-65919 (CVE-2026-65919)
path traversal in CVE-2026-65919 (CVE-2026-65919). Confidential information can be exposed externally.
|
| CVE-2026-65918 |
|
Out-of-Bounds Read in dos (CVE-2026-65918)
vulnerability in dos (CVE-2026-65918). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65763 |
|
Cross-Site Scripting (XSS) in CVE-2026-65763 (CVE-2026-65763)
cross-site scripting in CVE-2026-65763 (CVE-2026-65763). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65762 |
|
Cross-Site Scripting (XSS) in CVE-2026-65762 (CVE-2026-65762)
cross-site scripting in CVE-2026-65762 (CVE-2026-65762). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65702 |
|
Path Traversal in path-traversal (CVE-2026-65702)
path traversal in path-traversal (CVE-2026-65702). Data can be tampered with by attackers.
|
| CVE-2026-65701 |
|
Path Traversal in path-traversal (CVE-2026-65701)
path traversal in path-traversal (CVE-2026-65701). Confidential information can be exposed externally.
|
| CVE-2026-65700 |
|
Path Traversal in path-traversal (CVE-2026-65700)
path traversal in path-traversal (CVE-2026-65700). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65699 |
|
Vulnerability in CVE-2026-65699 (CVE-2026-65699)
vulnerability in CVE-2026-65699 (CVE-2026-65699). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47769 |
|
Vulnerability in CVE-2026-47769 (CVE-2026-47769)
vulnerability in CVE-2026-47769 (CVE-2026-47769). Risk of unauthorized operations or information disclosure. Exploitable via ``webhook_events``.
|
| CVE-2026-47755 |
|
Vulnerability in CVE-2026-47755 (CVE-2026-47755)
vulnerability in CVE-2026-47755 (CVE-2026-47755). Confidential information can be exposed externally. Exploitable via ``credential_id``.
|