Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-54727 |
|
Vulnerability in proot-distro (CVE-2026-54727)
vulnerability in proot-distro (CVE-2026-54727). Confidential information can be exposed externally. Exploitable via ``restore``. Mitigation: upgrade to `5.1.6` or later.
|
| CVE-2026-54574 |
|
Vulnerability in proot-distro (CVE-2026-54574)
vulnerability in proot-distro (CVE-2026-54574). Confidential information can be exposed externally. Exploitable via ``member.linkname``. Mitigation: upgrade to `5.1.5` or later.
|
| CVE-2026-67192 |
|
Vulnerability in CVE-2026-67192 (CVE-2026-67192)
vulnerability in CVE-2026-67192 (CVE-2026-67192). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16463 |
|
Vulnerability in autodesk (CVE-2026-16463)
vulnerability in autodesk (CVE-2026-16463). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65947 |
|
Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
|
| CVE-2026-65886 |
|
Path Traversal in balbooa (CVE-2026-65886)
path traversal in balbooa (CVE-2026-65886). Confidential information can be exposed externally.
|
| CVE-2026-12703 |
|
Vulnerability in CVE-2026-12703 (CVE-2026-12703)
vulnerability in CVE-2026-12703 (CVE-2026-12703). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54666 |
|
Vulnerability in swagger-typescript-api (CVE-2026-54666)
vulnerability in swagger-typescript-api (CVE-2026-54666). Successful exploitation can lead to full system takeover. Exploitable via ``paths``. Mitigation: upgrade to `13.12.2` or later.
|
| CVE-2026-54664 |
|
Vulnerability in swagger-typescript-api (CVE-2026-54664)
vulnerability in swagger-typescript-api (CVE-2026-54664). Successful exploitation can lead to full system takeover. Exploitable via ``enum``. Mitigation: upgrade to `13.12.2` or later.
|
| CVE-2026-54661 |
|
Vulnerability in swagger-typescript-api (CVE-2026-54661)
vulnerability in swagger-typescript-api (CVE-2026-54661). Successful exploitation can lead to full system takeover. Exploitable via ``HttpClient``. Mitigation: upgrade to `13.12.2` or later.
|
| CVE-2026-54662 |
|
Vulnerability in swagger-typescript-api (CVE-2026-54662)
vulnerability in swagger-typescript-api (CVE-2026-54662). Successful exploitation can lead to full system takeover. Exploitable via ``HttpClient``. Mitigation: upgrade to `13.12.2` or later.
|
| CVE-2026-54660 |
|
Information Disclosure in swagger-typescript-api (CVE-2026-54660)
vulnerability in swagger-typescript-api (CVE-2026-54660). Confidential information can be exposed externally. Exploitable via `GET /exfil-endpoint/data.json`. Mitigation: upgrade to `13.12.2` or later.
|
| CVE-2026-67215 |
|
Vulnerability in dos (CVE-2026-67215)
vulnerability in dos (CVE-2026-67215). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65889 |
|
Path Traversal in balbooa (CVE-2026-65889)
path traversal in balbooa (CVE-2026-65889). Data can be tampered with by attackers.
|
| CVE-2026-65944 |
|
Joomla Extension - rolandd.com - CSRF vectors in AJAX endpoint handlers RO CSVI < 9.11.0
Joomla Extension - rolandd.com - CSRF vectors in AJAX endpoint handlers RO CSVI < 9.11.0
|
| CVE-2026-65943 |
|
Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI < 9.11.0
Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI < 9.11.0
|
| CVE-2026-65885 |
|
Unrestricted File Upload in balbooa (CVE-2026-65885)
vulnerability in balbooa (CVE-2026-65885). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14270 |
|
Unrestricted File Upload in wordpress (CVE-2026-14270)
vulnerability in wordpress (CVE-2026-14270). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56389 |
|
OS Command Injection in gnu (CVE-2026-56389)
OS command injection in gnu (CVE-2026-56389). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18220 |
|
Out-of-Bounds Write in c (CVE-2026-18220)
out-of-bounds write in c (CVE-2026-18220). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16655 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16655)
cross-site scripting in wordpress (CVE-2026-16655). Risk of unauthorized operations or information disclosure. Exploitable via ``password``.
|
| CVE-2026-16597 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16597)
cross-site scripting in wordpress (CVE-2026-16597). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58189 |
|
SSRF (Server-Side Request Forgery) in apache (CVE-2026-58189)
SSRF in apache (CVE-2026-58189). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58188 |
|
Out-of-Bounds Write in apache (CVE-2026-58188)
out-of-bounds write in apache (CVE-2026-58188). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58186 |
|
Vulnerability in apache (CVE-2026-58186)
vulnerability in apache (CVE-2026-58186). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58184 |
|
Out-of-Bounds Write in apache (CVE-2026-58184)
out-of-bounds write in apache (CVE-2026-58184). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58182 |
|
Vulnerability in apache (CVE-2026-58182)
vulnerability in apache (CVE-2026-58182). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58181 |
|
Vulnerability in apache (CVE-2026-58181)
vulnerability in apache (CVE-2026-58181). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58180 |
|
Vulnerability in apache (CVE-2026-58180)
vulnerability in apache (CVE-2026-58180). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58179 |
|
Vulnerability in apache (CVE-2026-58179)
vulnerability in apache (CVE-2026-58179). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58178 |
|
Vulnerability in apache (CVE-2026-58178)
vulnerability in apache (CVE-2026-58178). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58177 |
|
Out-of-Bounds Write in apache (CVE-2026-58177)
out-of-bounds write in apache (CVE-2026-58177). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58175 |
|
Vulnerability in apache (CVE-2026-58175)
vulnerability in apache (CVE-2026-58175). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58164 |
|
Use-After-Free in apache (CVE-2026-58164)
vulnerability in apache (CVE-2026-58164). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58163 |
|
Unsafe Deserialization in apache (CVE-2026-58163)
vulnerability in apache (CVE-2026-58163). Data can be tampered with by attackers.
|
| CVE-2026-58161 |
|
Vulnerability in apache (CVE-2026-58161)
vulnerability in apache (CVE-2026-58161). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58159 |
|
Authorization Flaw in apache (CVE-2026-58159)
vulnerability in apache (CVE-2026-58159). Data can be tampered with by attackers.
|
| CVE-2026-58157 |
|
Information Disclosure in apache (CVE-2026-58157)
vulnerability in apache (CVE-2026-58157). Confidential information can be exposed externally.
|
| CVE-2026-50622 |
|
Vulnerability in apache (CVE-2026-50622)
vulnerability in apache (CVE-2026-50622). Successful exploitation can lead to full system takeover.
|
| CVE-2026-23904 |
|
Vulnerability in apache (CVE-2026-23904)
vulnerability in apache (CVE-2026-23904). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65324 |
|
Vulnerability in apache (CVE-2026-65324)
vulnerability in apache (CVE-2026-65324). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64557 |
|
Vulnerability in CVE-2026-64557 (CVE-2026-64557)
vulnerability in CVE-2026-64557 (CVE-2026-64557). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64556 |
|
Vulnerability in CVE-2026-64556 (CVE-2026-64556)
vulnerability in CVE-2026-64556 (CVE-2026-64556). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58154 |
|
Out-of-Bounds Write in apache (CVE-2026-58154)
out-of-bounds write in apache (CVE-2026-58154). Data can be tampered with by attackers.
|
| CVE-2026-58153 |
|
Vulnerability in apache (CVE-2026-58153)
vulnerability in apache (CVE-2026-58153). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13425 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13425)
cross-site scripting in wordpress (CVE-2026-13425). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58151 |
|
Vulnerability in apache (CVE-2026-58151)
vulnerability in apache (CVE-2026-58151). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64940 |
|
Vulnerability in jvn (CVE-2026-64940)
vulnerability in jvn (CVE-2026-64940). Data can be tampered with by attackers.
|
| CVE-2026-24033 |
|
Vulnerability in apache (CVE-2026-24033)
vulnerability in apache (CVE-2026-24033). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-22068 |
|
Vulnerability in apache (CVE-2026-22068)
vulnerability in apache (CVE-2026-22068). Confidential information can be exposed externally.
|