Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| MINI-p669-wm9j-52v6 |
|
MINI-p669-wm9j-52v6 |
| MINI-p779-frwh-v963 |
|
MINI-p779-frwh-v963 |
| MINI-qp6j-fwr8-98w3 |
|
MINI-qp6j-fwr8-98w3 |
| MAL-2026-6708 |
|
Vulnerability in zyncmap (MAL-2026-6708)
vulnerability in zyncmap (MAL-2026-6708). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
|
| GHSA-hwmc-r6mf-jh83 |
|
Cross-Site Scripting (XSS) in spatie/schema-org (GHSA-hwmc-r6mf-jh83)
cross-site scripting in spatie/schema-org (GHSA-hwmc-r6mf-jh83). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.0.2` or later.
|
| MINI-rjjh-442x-4639 |
|
MINI-rjjh-442x-4639 |
| CVE-2026-57737 |
|
Cross-Site Scripting (XSS) in CVE-2026-57737 (CVE-2026-57737)
cross-site scripting in CVE-2026-57737 (CVE-2026-57737). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58521 |
|
SQL Injection in sqli (CVE-2026-58521)
SQL injection in sqli (CVE-2026-58521). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5051 |
|
Path Traversal in vault (CVE-2026-5051)
path traversal in vault (CVE-2026-5051). Confidential information can be exposed externally. Mitigation: upgrade to `2.0.1` or later.
|
| CVE-2026-58520 |
|
Open Redirect in mediawiki (CVE-2026-58520)
vulnerability in mediawiki (CVE-2026-58520). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57736 |
|
Vulnerability in CVE-2026-57736 (CVE-2026-57736)
vulnerability in CVE-2026-57736 (CVE-2026-57736). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57723 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57723)
vulnerability in csrf (CVE-2026-57723). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49091 |
|
Vulnerability in elastic (CVE-2026-49091)
vulnerability in elastic (CVE-2026-49091). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58452 |
|
OS Command Injection in CVE-2026-58452 (CVE-2026-58452)
OS command injection in CVE-2026-58452 (CVE-2026-58452). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49090 |
|
Vulnerability in elasticsearch (CVE-2026-49090)
vulnerability in elasticsearch (CVE-2026-49090). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.17.24, 8.15.0` or later.
|
| CVE-2026-54428 |
|
Vulnerability in org.apache.httpcomponents.core5:httpcore5-h2 (CVE-2026-54428)
vulnerability in org.apache.httpcomponents.core5:httpcore5-h2 (CVE-2026-54428). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.5-beta2` or later.
|
| CVE-2026-57722 |
|
Cross-Site Scripting (XSS) in CVE-2026-57722 (CVE-2026-57722)
cross-site scripting in CVE-2026-57722 (CVE-2026-57722). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58454 |
|
Code Injection in CVE-2026-58454 (CVE-2026-58454)
code injection in CVE-2026-58454 (CVE-2026-58454). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57721 |
|
Vulnerability in CVE-2026-57721 (CVE-2026-57721)
vulnerability in CVE-2026-57721 (CVE-2026-57721). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58453 |
|
Vulnerability in CVE-2026-58453 (CVE-2026-58453)
vulnerability in CVE-2026-58453 (CVE-2026-58453). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51946 |
|
SQL Injection in sqli (CVE-2026-51946)
SQL injection in sqli (CVE-2026-51946). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56151 |
|
Vulnerability in dos (CVE-2026-56151)
vulnerability in dos (CVE-2026-56151). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57720 |
|
Vulnerability in CVE-2026-57720 (CVE-2026-57720)
vulnerability in CVE-2026-57720 (CVE-2026-57720). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54399 |
|
Vulnerability in org.apache.httpcomponents.core5:httpcore5 (CVE-2026-54399)
vulnerability in org.apache.httpcomponents.core5:httpcore5 (CVE-2026-54399). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.5-beta2` or later.
|
| CVE-2026-56152 |
|
Authorization Flaw in elastic (CVE-2026-56152)
vulnerability in elastic (CVE-2026-56152). Confidential information can be exposed externally.
|
| CVE-2026-56150 |
|
Vulnerability in dos (CVE-2026-56150)
vulnerability in dos (CVE-2026-56150). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56149 |
|
Vulnerability in elasticsearch (CVE-2026-56149)
vulnerability in elasticsearch (CVE-2026-56149). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.17, 9.3.6, 9.4.3` or later.
|
| CVE-2026-56148 |
|
Vulnerability in elasticsearch (CVE-2026-56148)
vulnerability in elasticsearch (CVE-2026-56148). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.17, 9.3.6, 9.4.3` or later.
|
| CVE-2026-49088 |
|
Vulnerability in elastic (CVE-2026-49088)
vulnerability in elastic (CVE-2026-49088). Confidential information can be exposed externally.
|
| CVE-2026-34115 |
|
OS Command Injection in CVE-2026-34115 (CVE-2026-34115)
OS command injection in CVE-2026-34115 (CVE-2026-34115). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49087 |
|
Vulnerability in dos (CVE-2026-49087)
vulnerability in dos (CVE-2026-49087). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34116 |
|
OS Command Injection in CVE-2026-34116 (CVE-2026-34116)
OS command injection in CVE-2026-34116 (CVE-2026-34116). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34111 |
|
OS Command Injection in CVE-2026-34111 (CVE-2026-34111)
OS command injection in CVE-2026-34111 (CVE-2026-34111). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34108 |
|
OS Command Injection in CVE-2026-34108 (CVE-2026-34108)
OS command injection in CVE-2026-34108 (CVE-2026-34108). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34113 |
|
OS Command Injection in CVE-2026-34113 (CVE-2026-34113)
OS command injection in CVE-2026-34113 (CVE-2026-34113). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34110 |
|
OS Command Injection in CVE-2026-34110 (CVE-2026-34110)
OS command injection in CVE-2026-34110 (CVE-2026-34110). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34117 |
|
OS Command Injection in CVE-2026-34117 (CVE-2026-34117)
OS command injection in CVE-2026-34117 (CVE-2026-34117). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34114 |
|
OS Command Injection in CVE-2026-34114 (CVE-2026-34114)
OS command injection in CVE-2026-34114 (CVE-2026-34114). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34112 |
|
OS Command Injection in CVE-2026-34112 (CVE-2026-34112)
OS command injection in CVE-2026-34112 (CVE-2026-34112). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34107 |
|
OS Command Injection in CVE-2026-34107 (CVE-2026-34107)
OS command injection in CVE-2026-34107 (CVE-2026-34107). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34105 |
|
SQL Injection in sqli (CVE-2026-34105)
SQL injection in sqli (CVE-2026-34105). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34109 |
|
OS Command Injection in CVE-2026-34109 (CVE-2026-34109)
OS command injection in CVE-2026-34109 (CVE-2026-34109). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34106 |
|
OS Command Injection in CVE-2026-34106 (CVE-2026-34106)
OS command injection in CVE-2026-34106 (CVE-2026-34106). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34103 |
|
SQL Injection in sqli (CVE-2026-34103)
SQL injection in sqli (CVE-2026-34103). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34104 |
|
SQL Injection in sqli (CVE-2026-34104)
SQL injection in sqli (CVE-2026-34104). Successful exploitation can lead to full system takeover.
|
| MINI-85vc-cx49-x7xj |
|
MINI-85vc-cx49-x7xj |
| CVE-2026-34102 |
|
SQL Injection in sqli (CVE-2026-34102)
SQL injection in sqli (CVE-2026-34102). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20217 |
|
Vulnerability in dos (CVE-2026-20217)
vulnerability in dos (CVE-2026-20217). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34099 |
|
SQL Injection in sqli (CVE-2026-34099)
SQL injection in sqli (CVE-2026-34099). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34101 |
|
SQL Injection in sqli (CVE-2026-34101)
SQL injection in sqli (CVE-2026-34101). Successful exploitation can lead to full system takeover.
|