Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-5801 |
|
SQL Injection in sqli (CVE-2026-5801)
SQL injection in sqli (CVE-2026-5801). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59151 |
|
Authentication Bypass in prowler (CVE-2026-59151)
authentication bypass in prowler (CVE-2026-59151). Confidential information can be exposed externally.
|
| CVE-2026-55843 |
|
Privilege Escalation in snipe/snipe-it (CVE-2026-55843)
vulnerability in snipe/snipe-it (CVE-2026-55843). Data can be tampered with by attackers. Exploitable via `PUT /users/{id}`. Mitigation: upgrade to `8.6.0` or later.
|
| CVE-2026-55516 |
|
Vulnerability in snipe/snipe-it (CVE-2026-55516)
vulnerability in snipe/snipe-it (CVE-2026-55516). Data can be tampered with by attackers. Exploitable via `PATCH /api/v1/maintenances/{maintenance_id}`. Mitigation: upgrade to `8.6.2` or later.
|
| CVE-2026-55478 |
|
Vulnerability in snipe/snipe-it (CVE-2026-55478)
vulnerability in snipe/snipe-it (CVE-2026-55478). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/kits/{kit_id}/licenses`. Mitigation: upgrade to `8.6.2` or later.
|
| CVE-2026-55476 |
|
Vulnerability in snipe/snipe-it (CVE-2026-55476)
vulnerability in snipe/snipe-it (CVE-2026-55476). Risk of unauthorized operations or information disclosure. Exploitable via ``cancel_by_admin``. Mitigation: upgrade to `8.6.1` or later.
|
| CVE-2026-55474 |
|
Vulnerability in snipe/snipe-it (CVE-2026-55474)
vulnerability in snipe/snipe-it (CVE-2026-55474). Confidential information can be exposed externally. Exploitable via ``displaySig``. Mitigation: upgrade to `8.5.0` or later.
|
| CVE-2026-55472 |
|
Authorization Flaw in snipe/snipe-it (CVE-2026-55472)
vulnerability in snipe/snipe-it (CVE-2026-55472). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.6.2` or later.
|
| CVE-2026-55464 |
|
Cross-Site Scripting (XSS) in snipe/snipe-it (CVE-2026-55464)
cross-site scripting in snipe/snipe-it (CVE-2026-55464). Risk of unauthorized operations or information disclosure. Exploitable via ``assets.edit``. Mitigation: upgrade to `8.6.2` or later.
|
| CVE-2026-55460 |
|
Authorization Flaw in snipe/snipe-it (CVE-2026-55460)
vulnerability in snipe/snipe-it (CVE-2026-55460). Data can be tampered with by attackers. Exploitable via `POST /users/bulksave`. Mitigation: upgrade to `374f426f0c` or later.
|
| CVE-2026-53450 |
|
SSRF (Server-Side Request Forgery) in coturn-project (CVE-2026-53450)
SSRF in coturn-project (CVE-2026-53450). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53449 |
|
Vulnerability in coturn-project (CVE-2026-53449)
vulnerability in coturn-project (CVE-2026-53449). Data can be tampered with by attackers.
|
| CVE-2026-53448 |
|
SQL Injection in coturn-project (CVE-2026-53448)
SQL injection in coturn-project (CVE-2026-53448). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15146 |
|
Vulnerability in ssrf (CVE-2026-15146)
vulnerability in ssrf (CVE-2026-15146). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-30008 |
|
Cross-Site Scripting (XSS) in hestiacp (CVE-2025-30008)
cross-site scripting in hestiacp (CVE-2025-30008). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-30007 |
|
OS Command Injection in hestiacp (CVE-2025-30007)
OS command injection in hestiacp (CVE-2025-30007). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57474 |
|
Information Disclosure in deloitte (CVE-2026-57474)
vulnerability in deloitte (CVE-2026-57474). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57476 |
|
Vulnerability in deloitte (CVE-2026-57476)
vulnerability in deloitte (CVE-2026-57476). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57475 |
|
Vulnerability in deloitte (CVE-2026-57475)
vulnerability in deloitte (CVE-2026-57475). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2397 |
|
SQL Injection in sqli (CVE-2026-2397)
SQL injection in sqli (CVE-2026-2397). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53780 |
|
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
|
| CVE-2026-1667 |
|
Vulnerability in wordpress (CVE-2026-1667)
vulnerability in wordpress (CVE-2026-1667). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3251 |
|
Cross-Site Scripting (XSS) in CVE-2026-3251 (CVE-2026-3251)
cross-site scripting in CVE-2026-3251 (CVE-2026-3251). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15376 |
|
Vulnerability in CVE-2026-15376 (CVE-2026-15376)
vulnerability in CVE-2026-15376 (CVE-2026-15376). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2398 |
|
Vulnerability in privilege-escalation (CVE-2026-2398)
vulnerability in privilege-escalation (CVE-2026-2398). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15377 |
|
Vulnerability in CVE-2026-15377 (CVE-2026-15377)
vulnerability in CVE-2026-15377 (CVE-2026-15377). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-70796 |
|
Path Traversal in path-traversal (CVE-2025-70796)
path traversal in path-traversal (CVE-2025-70796). Confidential information can be exposed externally.
|
| CVE-2026-39244 |
|
Vulnerability in adm-zip (CVE-2026-39244)
vulnerability in adm-zip (CVE-2026-39244). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.6.0` or later.
|
| CVE-2026-39903 |
|
Authorization Flaw in CVE-2026-39903 (CVE-2026-39903)
vulnerability in CVE-2026-39903 (CVE-2026-39903). Data can be tampered with by attackers.
|
| CVE-2026-51119 |
|
Privilege Escalation in CVE-2026-51119 (CVE-2026-51119)
vulnerability in CVE-2026-51119 (CVE-2026-51119). Confidential information can be exposed externally.
|
| CVE-2026-56668 |
|
Vulnerability in CVE-2026-56668 (CVE-2026-56668)
vulnerability in CVE-2026-56668 (CVE-2026-56668). Confidential information can be exposed externally.
|
| CVE-2026-56667 |
|
Cross-Site Scripting (XSS) in CVE-2026-56667 (CVE-2026-56667)
cross-site scripting in CVE-2026-56667 (CVE-2026-56667). Confidential information can be exposed externally.
|
| CVE-2026-56666 |
|
Authentication Bypass in CVE-2026-56666 (CVE-2026-56666)
authentication bypass in CVE-2026-56666 (CVE-2026-56666). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56665 |
|
Vulnerability in CVE-2026-56665 (CVE-2026-56665)
vulnerability in CVE-2026-56665 (CVE-2026-56665). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56664 |
|
Vulnerability in github.com/zitadel/zitadel (CVE-2026-56664)
vulnerability in github.com/zitadel/zitadel (CVE-2026-56664). Risk of unauthorized operations or information disclosure. Exploitable via ``maxAge``. Mitigation: upgrade to `1.80.0-v2.20.0.20260615122908-fad02c6d9f45` or later.
|
| GHSA-489g-7rxv-6c8q |
|
SSRF (Server-Side Request Forgery) in mcp-atlassian (GHSA-489g-7rxv-6c8q)
SSRF in mcp-atlassian (GHSA-489g-7rxv-6c8q). Risk of unauthorized operations or information disclosure. Exploitable via ``validate_url_for_ssrf``. Mitigation: upgrade to `0.22.0` or later.
|
| CVE-2026-59193 |
|
Vulnerability in getgrav (CVE-2026-59193)
vulnerability in getgrav (CVE-2026-59193). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59190 |
|
Vulnerability in CVE-2026-59190 (CVE-2026-59190)
vulnerability in CVE-2026-59190 (CVE-2026-59190). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59180 |
|
Information Disclosure in CVE-2026-59180 (CVE-2026-59180)
vulnerability in CVE-2026-59180 (CVE-2026-59180). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`.
|
| CVE-2026-59162 |
|
Vulnerability in excelize (CVE-2026-59162)
vulnerability in excelize (CVE-2026-59162). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59161 |
|
Vulnerability in excelize (CVE-2026-59161)
vulnerability in excelize (CVE-2026-59161). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59154 |
|
Authorization Flaw in CVE-2026-59154 (CVE-2026-59154)
vulnerability in CVE-2026-59154 (CVE-2026-59154). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58493 |
|
Vulnerability in path-traversal (CVE-2026-58493)
vulnerability in path-traversal (CVE-2026-58493). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58492 |
|
SQL Injection in CVE-2026-58492 (CVE-2026-58492)
SQL injection in CVE-2026-58492 (CVE-2026-58492). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57167 |
|
Vulnerability in CVE-2026-57167 (CVE-2026-57167)
vulnerability in CVE-2026-57167 (CVE-2026-57167). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56675 |
|
Authentication Bypass in CVE-2026-56675 (CVE-2026-56675)
authentication bypass in CVE-2026-56675 (CVE-2026-56675). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55783 |
|
Vulnerability in CVE-2026-55783 (CVE-2026-55783)
vulnerability in CVE-2026-55783 (CVE-2026-55783). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55782 |
|
Vulnerability in cpp (CVE-2026-55782)
vulnerability in cpp (CVE-2026-55782). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55781 |
|
Vulnerability in cpp (CVE-2026-55781)
vulnerability in cpp (CVE-2026-55781). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55780 |
|
Vulnerability in cpp (CVE-2026-55780)
vulnerability in cpp (CVE-2026-55780). Risk of unauthorized operations or information disclosure.
|