Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-55687 |
|
Vulnerability in c (CVE-2026-55687)
vulnerability in c (CVE-2026-55687). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55641 |
|
Vulnerability in 9router (CVE-2026-55641)
vulnerability in 9router (CVE-2026-55641). Confidential information can be exposed externally. Exploitable via `POST /v1/search`. Mitigation: upgrade to `0.5.2` or later.
|
| CVE-2026-55638 |
|
Vulnerability in 9router (CVE-2026-55638)
vulnerability in 9router (CVE-2026-55638). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/responses`. Mitigation: upgrade to `0.5.2` or later.
|
| CVE-2026-54919 |
|
Vulnerability in c (CVE-2026-54919)
vulnerability in c (CVE-2026-54919). Confidential information can be exposed externally.
|
| CVE-2026-54063 |
|
Vulnerability in github.com/xuri/excelize/v2 (CVE-2026-54063)
vulnerability in github.com/xuri/excelize/v2 (CVE-2026-54063). Risk of unauthorized operations or information disclosure. Exploitable via ``GetCellValue``. Mitigation: upgrade to `2.11.0` or later.
|
| CVE-2026-53657 |
|
Vulnerability in github.com/lima-vm/lima/v2 (CVE-2026-53657)
vulnerability in github.com/lima-vm/lima/v2 (CVE-2026-53657). Successful exploitation can lead to full system takeover. Exploitable via ``qemu``. Mitigation: upgrade to `2.1.3` or later.
|
| CVE-2026-53653 |
|
Vulnerability in getgrav/grav (CVE-2026-53653)
vulnerability in getgrav/grav (CVE-2026-53653). Risk of unauthorized operations or information disclosure. Exploitable via `GET /home/test.png`. Mitigation: upgrade to `1.7.53` or later.
|
| CVE-2026-8609 |
|
Vulnerability in dos (CVE-2026-8609)
vulnerability in dos (CVE-2026-8609). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8595 |
|
Cross-Site Scripting (XSS) in grafana (CVE-2026-8595)
cross-site scripting in grafana (CVE-2026-8595). Confidential information can be exposed externally.
|
| CVE-2026-56676 |
|
Vulnerability in CVE-2026-56676 (CVE-2026-56676)
vulnerability in CVE-2026-56676 (CVE-2026-56676). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54149 |
|
OS Command Injection in CVE-2026-54149 (CVE-2026-54149)
OS command injection in CVE-2026-54149 (CVE-2026-54149). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54001 |
|
Vulnerability in privilege-escalation (CVE-2026-54001)
vulnerability in privilege-escalation (CVE-2026-54001). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54000 |
|
Vulnerability in privilege-escalation (CVE-2026-54000)
vulnerability in privilege-escalation (CVE-2026-54000). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46388 |
|
Vulnerability in CVE-2026-46388 (CVE-2026-46388)
vulnerability in CVE-2026-46388 (CVE-2026-46388). Confidential information can be exposed externally.
|
| CVE-2026-33382 |
|
Vulnerability in dos (CVE-2026-33382)
vulnerability in dos (CVE-2026-33382). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15375 |
|
Vulnerability in CVE-2026-15375 (CVE-2026-15375)
vulnerability in CVE-2026-15375 (CVE-2026-15375). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15374 |
|
Vulnerability in CVE-2026-15374 (CVE-2026-15374)
vulnerability in CVE-2026-15374 (CVE-2026-15374). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15373 |
|
Vulnerability in CVE-2026-15373 (CVE-2026-15373)
vulnerability in CVE-2026-15373 (CVE-2026-15373). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15143 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-15143 (CVE-2026-15143)
SSRF in CVE-2026-15143 (CVE-2026-15143). Confidential information can be exposed externally.
|
| CVE-2026-49977 |
|
Vulnerability in tarteaucitronjs (CVE-2026-49977)
vulnerability in tarteaucitronjs (CVE-2026-49977). Risk of unauthorized operations or information disclosure. Exploitable via ``purgeBtn``. Mitigation: upgrade to `1.33.0` or later.
|
| CVE-2026-49865 |
|
SSRF (Server-Side Request Forgery) in kimai/kimai (CVE-2026-49865)
SSRF in kimai/kimai (CVE-2026-49865). Risk of unauthorized operations or information disclosure. Exploitable via ``Customer.invoiceText``. Mitigation: upgrade to `2.58.0` or later.
|
| CVE-2026-61456 |
|
Cross-Site Scripting (XSS) in CVE-2026-61456 (CVE-2026-61456)
cross-site scripting in CVE-2026-61456 (CVE-2026-61456). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/media`.
|
| CVE-2026-61492 |
|
Cross-Site Scripting (XSS) in jetbrains (CVE-2026-61492)
cross-site scripting in jetbrains (CVE-2026-61492). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61434 |
|
OS Command Injection in CVE-2026-61434 (CVE-2026-61434)
OS command injection in CVE-2026-61434 (CVE-2026-61434). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61455 |
|
Vulnerability in dos (CVE-2026-61455)
vulnerability in dos (CVE-2026-61455). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61441 |
|
Vulnerability in CVE-2026-61441 (CVE-2026-61441)
vulnerability in CVE-2026-61441 (CVE-2026-61441). Data can be tampered with by attackers.
|
| CVE-2026-61450 |
|
Code Injection in CVE-2026-61450 (CVE-2026-61450)
code injection in CVE-2026-61450 (CVE-2026-61450). Confidential information can be exposed externally.
|
| CVE-2026-61444 |
|
Code Injection in CVE-2026-61444 (CVE-2026-61444)
code injection in CVE-2026-61444 (CVE-2026-61444). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61437 |
|
Vulnerability in CVE-2026-61437 (CVE-2026-61437)
vulnerability in CVE-2026-61437 (CVE-2026-61437). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61432 |
|
Path Traversal in path-traversal (CVE-2026-61432)
path traversal in path-traversal (CVE-2026-61432). Confidential information can be exposed externally.
|
| CVE-2026-60091 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-60091)
SSRF in ssrf (CVE-2026-60091). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59794 |
|
Cross-Site Scripting (XSS) in jetbrains (CVE-2026-59794)
cross-site scripting in jetbrains (CVE-2026-59794). Confidential information can be exposed externally.
|
| CVE-2026-61431 |
|
Path Traversal in path-traversal (CVE-2026-61431)
path traversal in path-traversal (CVE-2026-61431). Confidential information can be exposed externally.
|
| CVE-2026-59793 |
|
Vulnerability in jetbrains (CVE-2026-59793)
vulnerability in jetbrains (CVE-2026-59793). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60089 |
|
Path Traversal in CVE-2026-60089 (CVE-2026-60089)
path traversal in CVE-2026-60089 (CVE-2026-60089). Data can be tampered with by attackers.
|
| CVE-2026-60086 |
|
Vulnerability in CVE-2026-60086 (CVE-2026-60086)
vulnerability in CVE-2026-60086 (CVE-2026-60086). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59792 |
|
Vulnerability in path-traversal (CVE-2026-59792)
vulnerability in path-traversal (CVE-2026-59792). Confidential information can be exposed externally.
|
| CVE-2026-59796 |
|
Vulnerability in jetbrains (CVE-2026-59796)
vulnerability in jetbrains (CVE-2026-59796). Confidential information can be exposed externally.
|
| CVE-2026-59795 |
|
Cross-Site Scripting (XSS) in jetbrains (CVE-2026-59795)
cross-site scripting in jetbrains (CVE-2026-59795). Confidential information can be exposed externally.
|
| CVE-2026-58661 |
|
Vulnerability in n8n (CVE-2026-58661)
vulnerability in n8n (CVE-2026-58661). Risk of unauthorized operations or information disclosure. Exploitable via ``uploadMaxFileSize``. Mitigation: upgrade to `1.123.58` or later.
|
| CVE-2026-59791 |
|
In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possible
In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possible
|
| CVE-2026-56366 |
|
Vulnerability in dos (CVE-2026-56366)
vulnerability in dos (CVE-2026-56366). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57994 |
|
Information Disclosure in CVE-2026-57994 (CVE-2026-57994)
vulnerability in CVE-2026-57994 (CVE-2026-57994). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v3.1/faq/{categoryId}/{faqId}`.
|
| CVE-2026-56373 |
|
Use-After-Free in imagemagick (CVE-2026-56373)
vulnerability in imagemagick (CVE-2026-56373). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56765 |
|
Vulnerability in CVE-2026-56765 (CVE-2026-56765)
vulnerability in CVE-2026-56765 (CVE-2026-56765). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57961 |
|
Path Traversal in path-traversal (CVE-2026-57961)
path traversal in path-traversal (CVE-2026-57961). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56354 |
|
Cross-Site Scripting (XSS) in n8n (CVE-2026-56354)
cross-site scripting in n8n (CVE-2026-56354). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56329 |
|
Vulnerability in CVE-2026-56329 (CVE-2026-56329)
vulnerability in CVE-2026-56329 (CVE-2026-56329). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56335 |
|
Vulnerability in CVE-2026-56335 (CVE-2026-56335)
vulnerability in CVE-2026-56335 (CVE-2026-56335). Data can be tampered with by attackers.
|
| CVE-2026-56279 |
|
Vulnerability in CVE-2026-56279 (CVE-2026-56279)
vulnerability in CVE-2026-56279 (CVE-2026-56279). Confidential information can be exposed externally.
|