Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-58376 |
|
SQL Injection in sqli (CVE-2026-58376)
SQL injection in sqli (CVE-2026-58376). Confidential information can be exposed externally.
|
| CVE-2026-58375 |
|
Vulnerability in CVE-2026-58375 (CVE-2026-58375)
vulnerability in CVE-2026-58375 (CVE-2026-58375). Confidential information can be exposed externally. Exploitable via `POST /jmreport/auto/export`.
|
| CVE-2026-8864 |
|
Vulnerability in CVE-2026-8864 (CVE-2026-8864)
vulnerability in CVE-2026-8864 (CVE-2026-8864). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58371 |
|
Cross-Site Scripting (XSS) in CVE-2026-58371 (CVE-2026-58371)
cross-site scripting in CVE-2026-58371 (CVE-2026-58371). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58176 |
|
Vulnerability in vue (CVE-2026-58176)
vulnerability in vue (CVE-2026-58176). Data can be tampered with by attackers.
|
| CVE-2026-58172 |
|
Vulnerability in CVE-2026-58172 (CVE-2026-58172)
vulnerability in CVE-2026-58172 (CVE-2026-58172). Confidential information can be exposed externally.
|
| CVE-2026-58169 |
|
Vulnerability in CVE-2026-58169 (CVE-2026-58169)
vulnerability in CVE-2026-58169 (CVE-2026-58169). Successful exploitation can lead to full system takeover. Exploitable via `Host header`.
|
| CVE-2026-58168 |
|
Vulnerability in CVE-2026-58168 (CVE-2026-58168)
vulnerability in CVE-2026-58168 (CVE-2026-58168). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58166 |
|
Path Traversal in path-traversal (CVE-2026-58166)
path traversal in path-traversal (CVE-2026-58166). Data can be tampered with by attackers.
|
| CVE-2026-48315 |
|
Vulnerability in adobe (CVE-2026-48315)
vulnerability in adobe (CVE-2026-48315). Confidential information can be exposed externally.
|
| CVE-2026-58165 |
|
Vulnerability in privilege-escalation (CVE-2026-58165)
vulnerability in privilege-escalation (CVE-2026-58165). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58167 |
|
Vulnerability in CVE-2026-58167 (CVE-2026-58167)
vulnerability in CVE-2026-58167 (CVE-2026-58167). Confidential information can be exposed externally. Exploitable via `POST /api/n9e/datasource/list.`.
|
| CVE-2026-58171 |
|
Path Traversal in CVE-2026-58171 (CVE-2026-58171)
path traversal in CVE-2026-58171 (CVE-2026-58171). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58170 |
|
Path Traversal in path-traversal (CVE-2026-58170)
path traversal in path-traversal (CVE-2026-58170). Data can be tampered with by attackers.
|
| CVE-2026-48314 |
|
Path Traversal in path-traversal (CVE-2026-48314)
path traversal in path-traversal (CVE-2026-48314). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48283 |
|
Unrestricted File Upload in adobe (CVE-2026-48283)
vulnerability in adobe (CVE-2026-48283). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48313 |
|
Path Traversal in path-traversal (CVE-2026-48313)
path traversal in path-traversal (CVE-2026-48313). Confidential information can be exposed externally.
|
| CVE-2026-48282 KEV |
|
[KEV] Path Traversal in Adobe path-traversal (CVE-2026-48282)
path traversal in Adobe path-traversal (CVE-2026-48282). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-48285 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-48285)
SSRF in ssrf (CVE-2026-48285). Confidential information can be exposed externally.
|
| CVE-2026-48307 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-48307)
cross-site scripting in adobe (CVE-2026-48307). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48286 |
|
Authorization Flaw in adobe (CVE-2026-48286)
vulnerability in adobe (CVE-2026-48286). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48276 |
|
Unrestricted File Upload in adobe (CVE-2026-48276)
vulnerability in adobe (CVE-2026-48276). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48281 |
|
Vulnerability in adobe (CVE-2026-48281)
vulnerability in adobe (CVE-2026-48281). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48277 |
|
Vulnerability in adobe (CVE-2026-48277)
vulnerability in adobe (CVE-2026-48277). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13455 |
|
Vulnerability in dalibo (CVE-2026-13455)
vulnerability in dalibo (CVE-2026-13455). Risk of unauthorized operations or information disclosure.
|
| MINI-7rgw-mmw9-8p6p |
|
MINI-7rgw-mmw9-8p6p |
| MINI-9rfv-7fwv-qjgw |
|
MINI-9rfv-7fwv-qjgw |
| MINI-x9vf-cxxm-7jrm |
|
MINI-x9vf-cxxm-7jrm |
| MINI-g7c5-q69h-phjp |
|
MINI-g7c5-q69h-phjp |
| MINI-67q3-4qx4-fm4j |
|
MINI-67q3-4qx4-fm4j |
| MINI-6hvg-qv7j-2qjg |
|
MINI-6hvg-qv7j-2qjg |
| GHSA-7m8x-qg2j-4m3v |
|
Information Disclosure in github.com/fission/fission (GHSA-7m8x-qg2j-4m3v)
vulnerability in github.com/fission/fission (GHSA-7m8x-qg2j-4m3v). Confidential information can be exposed externally. Exploitable via ``getEnvVarlist``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-48791 |
|
Vulnerability in dev.sigstore:sigstore-java (CVE-2026-48791)
vulnerability in dev.sigstore:sigstore-java (CVE-2026-48791). Risk of unauthorized operations or information disclosure. Exploitable via ``integratedTime``. Mitigation: upgrade to `2.1.0` or later.
|
| CVE-2026-49473 |
|
Vulnerability in @cedar-policy/authorization-for-expressjs (CVE-2026-49473)
vulnerability in @cedar-policy/authorization-for-expressjs (CVE-2026-49473). Successful exploitation can lead to full system takeover. Exploitable via `GET /users`. Mitigation: upgrade to `0.3.0` or later.
|
| GHSA-55f6-4pr5-c7m5 |
|
Vulnerability in github.com/kahiteam/kahi (GHSA-55f6-4pr5-c7m5)
vulnerability in github.com/kahiteam/kahi (GHSA-55f6-4pr5-c7m5). Risk of unauthorized operations or information disclosure. Exploitable via ``docker``. Mitigation: upgrade to `0.1.0-alpha.9` or later.
|
| RLSA-2026:33514 |
|
Vulnerability in rubygem-abrt (RLSA-2026:33514)
vulnerability in rubygem-abrt (RLSA-2026:33514). Confidential information can be exposed externally. Mitigation: upgrade to `0:0.3.0-4.module+el8.9.0+1536+5f79634e` or later.
|
| RLSA-2026:33515 |
|
Vulnerability in rubygem-abrt (RLSA-2026:33515)
vulnerability in rubygem-abrt (RLSA-2026:33515). Confidential information can be exposed externally. Mitigation: upgrade to `0:0.4.0-1.module+el8.10.0+1826+b62220b4` or later.
|
| SUSE-SU-2026:22433-1 |
|
Vulnerability in kernel-rt (SUSE-SU-2026:22433-1)
vulnerability in kernel-rt (SUSE-SU-2026:22433-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.4.0-48.1` or later.
|
| CGA-c2wp-f5w8-p8p5 |
|
CGA-c2wp-f5w8-p8p5 |
| CGA-q2xv-4cj5-h5j2 |
|
CGA-q2xv-4cj5-h5j2 |
| CGA-j73v-rw86-3rfp |
|
CGA-j73v-rw86-3rfp |
| CVE-2026-9263 |
|
Out-of-Bounds Read in c (CVE-2026-9263)
vulnerability in c (CVE-2026-9263). Confidential information can be exposed externally.
|
| CVE-2026-10655 |
|
Use-After-Free in c (CVE-2026-10655)
vulnerability in c (CVE-2026-10655). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10654 |
|
Vulnerability in c (CVE-2026-10654)
vulnerability in c (CVE-2026-10654). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10653 |
|
Vulnerability in c (CVE-2026-10653)
vulnerability in c (CVE-2026-10653). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10652 |
|
Out-of-Bounds Read in c (CVE-2026-10652)
vulnerability in c (CVE-2026-10652). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:22460-1 |
|
Vulnerability in kernel-default (SUSE-SU-2026:22460-1)
vulnerability in kernel-default (SUSE-SU-2026:22460-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.4.0-48.1` or later.
|
| ECHO-852e-0ef5-c8bc |
|
ECHO-852e-0ef5-c8bc |
| CVE-2026-47198 |
|
Vulnerability in paymenter/paymenter (CVE-2026-47198)
vulnerability in paymenter/paymenter (CVE-2026-47198). Data can be tampered with by attackers. Exploitable via ``Checkout``. Mitigation: upgrade to `1.5.1` or later.
|
| CVE-2023-46118 |
|
Vulnerability in rabbit_common (CVE-2023-46118)
vulnerability in rabbit_common (CVE-2023-46118). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.11.24` or later.
|