Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-46987 |
|
Vulnerability in c (CVE-2026-46987)
vulnerability in c (CVE-2026-46987). Confidential information can be exposed externally.
|
| CVE-2026-46985 |
|
Vulnerability in c (CVE-2026-46985)
vulnerability in c (CVE-2026-46985). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46988 |
|
Vulnerability in c (CVE-2026-46988)
vulnerability in c (CVE-2026-46988). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46982 |
|
Vulnerability in c (CVE-2026-46982)
vulnerability in c (CVE-2026-46982). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46986 |
|
Vulnerability in c (CVE-2026-46986)
vulnerability in c (CVE-2026-46986). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46989 |
|
Vulnerability in c (CVE-2026-46989)
vulnerability in c (CVE-2026-46989). Confidential information can be exposed externally.
|
| CVE-2026-46983 |
|
Vulnerability in c (CVE-2026-46983)
vulnerability in c (CVE-2026-46983). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46984 |
|
Vulnerability in c (CVE-2026-46984)
vulnerability in c (CVE-2026-46984). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46991 |
|
Vulnerability in c (CVE-2026-46991)
vulnerability in c (CVE-2026-46991). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46943 |
|
Vulnerability in c (CVE-2026-46943)
vulnerability in c (CVE-2026-46943). Confidential information can be exposed externally.
|
| CVE-2026-46936 |
|
Vulnerability in c (CVE-2026-46936)
vulnerability in c (CVE-2026-46936). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46948 |
|
Vulnerability in c (CVE-2026-46948)
vulnerability in c (CVE-2026-46948). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46924 |
|
Vulnerability in c (CVE-2026-46924)
vulnerability in c (CVE-2026-46924). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46941 |
|
Vulnerability in c (CVE-2026-46941)
vulnerability in c (CVE-2026-46941). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46954 |
|
Vulnerability in c (CVE-2026-46954)
vulnerability in c (CVE-2026-46954). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46968 |
|
Vulnerability in c (CVE-2026-46968)
vulnerability in c (CVE-2026-46968). Data can be tampered with by attackers.
|
| CVE-2026-46917 |
|
Vulnerability in c (CVE-2026-46917)
vulnerability in c (CVE-2026-46917). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46876 |
|
Vulnerability in c (CVE-2026-46876)
vulnerability in c (CVE-2026-46876). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46923 |
|
Vulnerability in c (CVE-2026-46923)
vulnerability in c (CVE-2026-46923). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46981 |
|
Vulnerability in c (CVE-2026-46981)
vulnerability in c (CVE-2026-46981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46980 |
|
Vulnerability in c (CVE-2026-46980)
vulnerability in c (CVE-2026-46980). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46975 |
|
Vulnerability in c (CVE-2026-46975)
vulnerability in c (CVE-2026-46975). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35290 |
|
Vulnerability in c (CVE-2026-35290)
vulnerability in c (CVE-2026-35290). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34316 |
|
Vulnerability in c (CVE-2026-34316)
vulnerability in c (CVE-2026-34316). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35287 |
|
Vulnerability in c (CVE-2026-35287)
vulnerability in c (CVE-2026-35287). Confidential information can be exposed externally.
|
| CVE-2026-21954 |
|
Vulnerability in c (CVE-2026-21954)
vulnerability in c (CVE-2026-21954). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16484 |
|
Vulnerability in sqli (CVE-2026-16484)
vulnerability in sqli (CVE-2026-16484). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-21953 |
|
Vulnerability in c (CVE-2026-21953)
vulnerability in c (CVE-2026-21953). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16420 |
|
Vulnerability in Google chrome (CVE-2026-16420)
vulnerability in Google chrome (CVE-2026-16420). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56819 |
|
Vulnerability in io.netty:netty-codec-http2 (CVE-2026-56819)
vulnerability in io.netty:netty-codec-http2 (CVE-2026-56819). Risk of unauthorized operations or information disclosure. Exploitable via ``ByteBuf``. Mitigation: upgrade to `4.1.136.Final` or later.
|
| CVE-2026-47709 |
|
Vulnerability in c (CVE-2026-47709)
vulnerability in c (CVE-2026-47709). Risk of unauthorized operations or information disclosure. Exploitable via ``uncC``.
|
| CVE-2026-47254 |
|
Out-of-Bounds Read in struktur (CVE-2026-47254)
vulnerability in struktur (CVE-2026-47254). Risk of unauthorized operations or information disclosure. Exploitable via ``m_presentation_timeline``.
|
| CVE-2026-47251 |
|
Out-of-Bounds Read in struktur (CVE-2026-47251)
vulnerability in struktur (CVE-2026-47251). Risk of unauthorized operations or information disclosure. Exploitable via ``b97c8b5``.
|
| CVE-2026-47247 |
|
Information Disclosure in wordpress (CVE-2026-47247)
vulnerability in wordpress (CVE-2026-47247). Confidential information can be exposed externally.
|
| CVE-2026-47178 |
|
Out-of-Bounds Write in c (CVE-2026-47178)
out-of-bounds write in c (CVE-2026-47178). Risk of unauthorized operations or information disclosure. Exploitable via ``unci``.
|
| CVE-2026-10680 |
|
Out-of-Bounds Read in c (CVE-2026-10680)
vulnerability in c (CVE-2026-10680). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10679 |
|
Vulnerability in c (CVE-2026-10679)
vulnerability in c (CVE-2026-10679). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10678 |
|
Vulnerability in c (CVE-2026-10678)
vulnerability in c (CVE-2026-10678). Data can be tampered with by attackers.
|
| CVE-2026-10677 |
|
Vulnerability in c (CVE-2026-10677)
vulnerability in c (CVE-2026-10677). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10675 |
|
Vulnerability in c (CVE-2026-10675)
vulnerability in c (CVE-2026-10675). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10674 |
|
Vulnerability in c (CVE-2026-10674)
vulnerability in c (CVE-2026-10674). Risk of unauthorized operations or information disclosure.
|
| GHSA-f88m-g3jw-g9cj |
|
Vulnerability in sharp (GHSA-f88m-g3jw-g9cj)
vulnerability in sharp (GHSA-f88m-g3jw-g9cj). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.35.0` or later.
|
| CVE-2026-73569 |
|
Vulnerability in fast-xml-parser (CVE-2026-73569)
vulnerability in fast-xml-parser (CVE-2026-73569). Risk of unauthorized operations or information disclosure. Exploitable via ``processEntity``. Mitigation: upgrade to `5.10.1` or later.
|
| GHSA-rwj8-pgh3-r573 |
|
Information Disclosure in gitpython (GHSA-rwj8-pgh3-r573)
vulnerability in gitpython (GHSA-rwj8-pgh3-r573). Risk of unauthorized operations or information disclosure. Exploitable via ``AWS_SECRET_ACCESS_KEY``. Mitigation: upgrade to `3.1.52` or later.
|
| CVE-2026-73648 |
|
Cross-Site Scripting (XSS) in rails-html-sanitizer (CVE-2026-73648)
cross-site scripting in rails-html-sanitizer (CVE-2026-73648). Risk of unauthorized operations or information disclosure. Exploitable via ``SVG_ALLOW_LOCAL_HREF``. Mitigation: upgrade to `1.7.1` or later.
|
| CVE-2026-73565 |
|
Vulnerability in @hono/node-server (CVE-2026-73565)
vulnerability in @hono/node-server (CVE-2026-73565). Risk of unauthorized operations or information disclosure. Exploitable via ``upgradeWebSocket``. Mitigation: upgrade to `2.0.10` or later.
|
| GHSA-hrxh-6v49-42gf |
|
Vulnerability in google.golang.org/grpc (GHSA-hrxh-6v49-42gf)
vulnerability in google.golang.org/grpc (GHSA-hrxh-6v49-42gf). Risk of unauthorized operations or information disclosure. Exploitable via ``Metadata``. Mitigation: upgrade to `1.82.1` or later.
|
| GHSA-5qhf-9phg-95m2 |
|
Cross-Site Scripting (XSS) in loofah (GHSA-5qhf-9phg-95m2)
cross-site scripting in loofah (GHSA-5qhf-9phg-95m2). Risk of unauthorized operations or information disclosure. Exploitable via ``CGI.unescapeHTML``. Mitigation: upgrade to `2.25.2` or later.
|
| CVE-2026-73490 |
|
Cross-Site Scripting (XSS) in loofah (CVE-2026-73490)
cross-site scripting in loofah (CVE-2026-73490). Risk of unauthorized operations or information disclosure. Exploitable via ``href``. Mitigation: upgrade to `2.25.2` or later.
|
| CVE-2026-73651 |
|
Code Injection in typeorm (CVE-2026-73651)
code injection in typeorm (CVE-2026-73651). Confidential information can be exposed externally. Exploitable via ``MigrationGenerateCommand.ts``. Mitigation: upgrade to `1.1.0` or later.
|