Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-47752 |
|
Vulnerability in CVE-2026-47752 (CVE-2026-47752)
vulnerability in CVE-2026-47752 (CVE-2026-47752). Successful exploitation can lead to full system takeover. Exploitable via ``title_template``.
|
| CVE-2026-65761 |
|
SQL Injection in sqli (CVE-2026-65761)
SQL injection in sqli (CVE-2026-65761). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65760 |
|
Information Disclosure in CVE-2026-65760 (CVE-2026-65760)
vulnerability in CVE-2026-65760 (CVE-2026-65760). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65759 |
|
Vulnerability in CVE-2026-65759 (CVE-2026-65759)
vulnerability in CVE-2026-65759 (CVE-2026-65759). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65698 |
|
Path Traversal in path-traversal (CVE-2026-65698)
path traversal in path-traversal (CVE-2026-65698). Confidential information can be exposed externally.
|
| CVE-2026-65697 |
|
Cross-Site Scripting (XSS) in CVE-2026-65697 (CVE-2026-65697)
cross-site scripting in CVE-2026-65697 (CVE-2026-65697). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65696 |
|
Vulnerability in CVE-2026-65696 (CVE-2026-65696)
vulnerability in CVE-2026-65696 (CVE-2026-65696). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65695 |
|
Path Traversal in path-traversal (CVE-2026-65695)
path traversal in path-traversal (CVE-2026-65695). Confidential information can be exposed externally.
|
| CVE-2026-44909 |
|
Vulnerability in dos (CVE-2026-44909)
vulnerability in dos (CVE-2026-44909). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16768 |
|
Out-of-Bounds Read in CVE-2026-16768 (CVE-2026-16768)
vulnerability in CVE-2026-16768 (CVE-2026-16768). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16584 |
|
Vulnerability in Amazon awslabs.aws-api-mcp-server (CVE-2026-16584)
vulnerability in Amazon awslabs.aws-api-mcp-server (CVE-2026-16584). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.3.47` or later.
|
| CVE-2026-65917 |
|
Vulnerability in CVE-2026-65917 (CVE-2026-65917)
vulnerability in CVE-2026-65917 (CVE-2026-65917). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65916 |
|
Vulnerability in CVE-2026-65916 (CVE-2026-65916)
vulnerability in CVE-2026-65916 (CVE-2026-65916). Data can be tampered with by attackers.
|
| CVE-2026-48539 |
|
Cross-Site Scripting (XSS) in CVE-2026-48539 (CVE-2026-48539)
cross-site scripting in CVE-2026-48539 (CVE-2026-48539). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48538 |
|
Cross-Site Scripting (XSS) in CVE-2026-48538 (CVE-2026-48538)
cross-site scripting in CVE-2026-48538 (CVE-2026-48538). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48537 |
|
Cross-Site Scripting (XSS) in CVE-2026-48537 (CVE-2026-48537)
cross-site scripting in CVE-2026-48537 (CVE-2026-48537). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48536 |
|
Cross-Site Scripting (XSS) in CVE-2026-48536 (CVE-2026-48536)
cross-site scripting in CVE-2026-48536 (CVE-2026-48536). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48535 |
|
Cross-Site Scripting (XSS) in CVE-2026-48535 (CVE-2026-48535)
cross-site scripting in CVE-2026-48535 (CVE-2026-48535). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48534 |
|
Cross-Site Scripting (XSS) in CVE-2026-48534 (CVE-2026-48534)
cross-site scripting in CVE-2026-48534 (CVE-2026-48534). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48533 |
|
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
|
| CVE-2026-48532 |
|
Cross-Site Scripting (XSS) in CVE-2026-48532 (CVE-2026-48532)
cross-site scripting in CVE-2026-48532 (CVE-2026-48532). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48531 |
|
Cross-Site Scripting (XSS) in CVE-2026-48531 (CVE-2026-48531)
cross-site scripting in CVE-2026-48531 (CVE-2026-48531). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48530 |
|
Cross-Site Scripting (XSS) in CVE-2026-48530 (CVE-2026-48530)
cross-site scripting in CVE-2026-48530 (CVE-2026-48530). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15617 |
|
Vulnerability in CVE-2026-15617 (CVE-2026-15617)
vulnerability in CVE-2026-15617 (CVE-2026-15617). Confidential information can be exposed externally.
|
| CVE-2026-15616 |
|
Vulnerability in CVE-2026-15616 (CVE-2026-15616)
vulnerability in CVE-2026-15616 (CVE-2026-15616). Confidential information can be exposed externally.
|
| CVE-2026-15615 |
|
Vulnerability in CVE-2026-15615 (CVE-2026-15615)
vulnerability in CVE-2026-15615 (CVE-2026-15615). Data can be tampered with by attackers.
|
| CVE-2026-15614 |
|
Vulnerability in CVE-2026-15614 (CVE-2026-15614)
vulnerability in CVE-2026-15614 (CVE-2026-15614). Data can be tampered with by attackers.
|
| CVE-2026-15612 |
|
Vulnerability in CVE-2026-15612 (CVE-2026-15612)
vulnerability in CVE-2026-15612 (CVE-2026-15612). Confidential information can be exposed externally.
|
| CVE-2026-15611 |
|
Authentication Bypass in CVE-2026-15611 (CVE-2026-15611)
authentication bypass in CVE-2026-15611 (CVE-2026-15611). Confidential information can be exposed externally.
|
| CVE-2026-11804 |
|
Vulnerability in CVE-2026-11804 (CVE-2026-11804)
vulnerability in CVE-2026-11804 (CVE-2026-11804). Confidential information can be exposed externally.
|
| CVE-2026-8287 |
|
Vulnerability in CVE-2026-8287 (CVE-2026-8287)
vulnerability in CVE-2026-8287 (CVE-2026-8287). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16735 |
|
Command Injection in CVE-2026-16735 (CVE-2026-16735)
command injection in CVE-2026-16735 (CVE-2026-16735). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16733 |
|
Command Injection in CVE-2026-16733 (CVE-2026-16733)
command injection in CVE-2026-16733 (CVE-2026-16733). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65688 |
|
Path Traversal in path-traversal (CVE-2026-65688)
path traversal in path-traversal (CVE-2026-65688). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65689 |
|
Path Traversal in path-traversal (CVE-2026-65689)
path traversal in path-traversal (CVE-2026-65689). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65690 |
|
Path Traversal in path-traversal (CVE-2026-65690)
path traversal in path-traversal (CVE-2026-65690). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65687 |
|
Path Traversal in path-traversal (CVE-2026-65687)
path traversal in path-traversal (CVE-2026-65687). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65908 |
|
Vulnerability in jetbrains (CVE-2026-65908)
vulnerability in jetbrains (CVE-2026-65908). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65907 |
|
In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible
In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible
|
| CVE-2026-15037 |
|
Vulnerability in CVE-2026-15037 (CVE-2026-15037)
vulnerability in CVE-2026-15037 (CVE-2026-15037). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65906 |
|
Code Injection in jetbrains (CVE-2026-65906)
code injection in jetbrains (CVE-2026-65906). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43823 |
|
Vulnerability in CVE-2026-43823 (CVE-2026-43823)
vulnerability in CVE-2026-43823 (CVE-2026-43823). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43820 |
|
Out-of-Bounds Read in CVE-2026-43820 (CVE-2026-43820)
vulnerability in CVE-2026-43820 (CVE-2026-43820). Confidential information can be exposed externally.
|
| CVE-2026-45623 |
|
Path Traversal in postcss (CVE-2026-45623)
path traversal in postcss (CVE-2026-45623). Confidential information can be exposed externally. Exploitable via ``PreviousMap``. Mitigation: upgrade to `8.5.12` or later.
|
| CVE-2026-59933 |
|
Vulnerability in phpoffice/phpspreadsheet (CVE-2026-59933)
vulnerability in phpoffice/phpspreadsheet (CVE-2026-59933). Risk of unauthorized operations or information disclosure. Exploitable via ``bigBlockChain``. Mitigation: upgrade to `1.30.6` or later.
|
| CVE-2026-59932 |
|
Vulnerability in phpoffice/phpspreadsheet (CVE-2026-59932)
vulnerability in phpoffice/phpspreadsheet (CVE-2026-59932). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.30.6` or later.
|
| CVE-2026-59931 |
|
SSRF (Server-Side Request Forgery) in phpoffice/phpspreadsheet (CVE-2026-59931)
SSRF in phpoffice/phpspreadsheet (CVE-2026-59931). Confidential information can be exposed externally. Exploitable via ``example.com``. Mitigation: upgrade to `1.30.6` or later.
|
| CVE-2026-73421 |
|
Vulnerability in next-auth (CVE-2026-73421)
vulnerability in next-auth (CVE-2026-73421). Risk of unauthorized operations or information disclosure. Exploitable via ``auth``. Mitigation: upgrade to `5.0.0-beta.32` or later.
|
| CVE-2026-73418 |
|
Vulnerability in @auth/core (CVE-2026-73418)
vulnerability in @auth/core (CVE-2026-73418). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `0.41.3` or later.
|
| CVE-2026-73420 |
|
Vulnerability in @auth/core (CVE-2026-73420)
vulnerability in @auth/core (CVE-2026-73420). Risk of unauthorized operations or information disclosure. Exploitable via ``normalizeIdentifier``. Mitigation: upgrade to `0.41.3` or later.
|