Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-37452 |
|
Information Disclosure in CVE-2026-37452 (CVE-2026-37452)
vulnerability in CVE-2026-37452 (CVE-2026-37452). Confidential information can be exposed externally.
|
| CVE-2026-37454 |
|
Information Disclosure in msi (CVE-2026-37454)
vulnerability in msi (CVE-2026-37454). Confidential information can be exposed externally.
|
| CVE-2026-46406 |
|
Vulnerability in @anthropic-ai/claude-code (CVE-2026-46406)
vulnerability in @anthropic-ai/claude-code (CVE-2026-46406). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.128` or later.
|
| CVE-2026-9153 |
|
Path Traversal in gnu (CVE-2026-9153)
path traversal in gnu (CVE-2026-9153). Confidential information can be exposed externally.
|
| CVE-2026-47389 |
|
Vulnerability in c (CVE-2026-47389)
vulnerability in c (CVE-2026-47389). Confidential information can be exposed externally. Mitigation: upgrade to `4.5.10` or later.
|
| CVE-2026-53949 |
|
Information Disclosure in ghost (CVE-2026-53949)
vulnerability in ghost (CVE-2026-53949). Risk of unauthorized operations or information disclosure. Exploitable via ``filter``. Mitigation: upgrade to `6.21.2` or later.
|
| CVE-2026-49269 |
|
Information Disclosure in CVE-2026-49269 (CVE-2026-49269)
vulnerability in CVE-2026-49269 (CVE-2026-49269). Confidential information can be exposed externally.
|
| CVE-2026-56337 |
|
Information Disclosure in CVE-2026-56337 (CVE-2026-56337)
vulnerability in CVE-2026-56337 (CVE-2026-56337). Risk of unauthorized operations or information disclosure. Exploitable via `POST /rest/v1/rpc/exist_app_v2`.
|
| CVE-2026-56244 |
|
Information Disclosure in CVE-2026-56244 (CVE-2026-56244)
vulnerability in CVE-2026-56244 (CVE-2026-56244). Confidential information can be exposed externally.
|
| CVE-2026-9612 |
|
Information Disclosure in wordpress (CVE-2026-9612)
vulnerability in wordpress (CVE-2026-9612). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9183 |
|
Information Disclosure in wordpress (CVE-2026-9183)
vulnerability in wordpress (CVE-2026-9183). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52815 |
|
Information Disclosure in gogs.io/gogs (CVE-2026-52815)
vulnerability in gogs.io/gogs (CVE-2026-52815). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27604 |
|
Information Disclosure in csrf (CVE-2026-27604)
vulnerability in csrf (CVE-2026-27604). Risk of unauthorized operations or information disclosure. Exploitable via ``system``.
|
| CVE-2026-56322 |
|
Information Disclosure in CVE-2026-56322 (CVE-2026-56322)
vulnerability in CVE-2026-56322 (CVE-2026-56322). Confidential information can be exposed externally.
|
| CVE-2026-56323 |
|
Information Disclosure in CVE-2026-56323 (CVE-2026-56323)
vulnerability in CVE-2026-56323 (CVE-2026-56323). Confidential information can be exposed externally.
|
| CVE-2026-32315 |
|
Information Disclosure in motioneye (CVE-2026-32315)
vulnerability in motioneye (CVE-2026-32315). Confidential information can be exposed externally. Exploitable via ``motion.conf``. Mitigation: upgrade to `0.44.0` or later.
|
| CVE-2026-7166 |
|
Information Disclosure in CVE-2026-7166 (CVE-2026-7166)
vulnerability in CVE-2026-7166 (CVE-2026-7166). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7167 |
|
Information Disclosure in CVE-2026-7167 (CVE-2026-7167)
vulnerability in CVE-2026-7167 (CVE-2026-7167). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56242 |
|
Information Disclosure in CVE-2026-56242 (CVE-2026-56242)
vulnerability in CVE-2026-56242 (CVE-2026-56242). Confidential information can be exposed externally.
|
| CVE-2026-56282 |
|
Information Disclosure in CVE-2026-56282 (CVE-2026-56282)
vulnerability in CVE-2026-56282 (CVE-2026-56282). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56235 |
|
Information Disclosure in CVE-2026-56235 (CVE-2026-56235)
vulnerability in CVE-2026-56235 (CVE-2026-56235). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56267 |
|
Information Disclosure in CVE-2026-56267 (CVE-2026-56267)
vulnerability in CVE-2026-56267 (CVE-2026-56267). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/account/forgot-password`.
|
| CVE-2026-56218 |
|
Information Disclosure in CVE-2026-56218 (CVE-2026-56218)
vulnerability in CVE-2026-56218 (CVE-2026-56218). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56214 |
|
Information Disclosure in CVE-2026-56214 (CVE-2026-56214)
vulnerability in CVE-2026-56214 (CVE-2026-56214). Confidential information can be exposed externally.
|
| CVE-2026-56079 |
|
Information Disclosure in CVE-2026-56079 (CVE-2026-56079)
vulnerability in CVE-2026-56079 (CVE-2026-56079). Confidential information can be exposed externally.
|
| CVE-2026-55447 |
|
Information Disclosure in langflow (CVE-2026-55447)
vulnerability in langflow (CVE-2026-55447). Successful exploitation can lead to full system takeover. Exploitable via ``BaseFileComponent``. Mitigation: upgrade to `1.9.2` or later.
|
| CVE-2026-54317 |
|
Information Disclosure in homeassistant (CVE-2026-54317)
vulnerability in homeassistant (CVE-2026-54317). Confidential information can be exposed externally. Mitigation: upgrade to `2026.6.0` or later.
|
| CVE-2026-49211 |
|
Information Disclosure in symfony/ux-autocomplete (CVE-2026-49211)
vulnerability in symfony/ux-autocomplete (CVE-2026-49211). Confidential information can be exposed externally. Exploitable via ``LIKE``. Mitigation: upgrade to `3.1.0` or later.
|
| CVE-2026-49336 |
|
Vulnerability in @microsoft/kiota-http-fetchlibrary (CVE-2026-49336)
vulnerability in @microsoft/kiota-http-fetchlibrary (CVE-2026-49336). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `1.0.0-preview.102` or later.
|
| CVE-2026-49288 |
|
Information Disclosure in statamic/cms (CVE-2026-49288)
vulnerability in statamic/cms (CVE-2026-49288). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.73.23` or later.
|
| CVE-2026-12620 |
|
Information Disclosure in microchip (CVE-2026-12620)
vulnerability in microchip (CVE-2026-12620). Confidential information can be exposed externally.
|
| CVE-2026-55882 |
|
Information Disclosure in github.com/tilt-dev/tilt (CVE-2026-55882)
vulnerability in github.com/tilt-dev/tilt (CVE-2026-55882). Risk of unauthorized operations or information disclosure. Exploitable via ``http.DefaultServeMux``. Mitigation: upgrade to `0.37.4` or later.
|
| CVE-2026-47633 |
|
Information Disclosure in microsoft (CVE-2026-47633)
vulnerability in microsoft (CVE-2026-47633). Confidential information can be exposed externally.
|
| CVE-2026-12111 |
|
Information Disclosure in wordpress (CVE-2026-12111)
vulnerability in wordpress (CVE-2026-12111). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11357 |
|
Information Disclosure in wordpress (CVE-2026-11357)
vulnerability in wordpress (CVE-2026-11357). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12120 |
|
Information Disclosure in wordpress (CVE-2026-12120)
vulnerability in wordpress (CVE-2026-12120). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50200 |
|
Information Disclosure in Steeltoe.Management.Endpoint (CVE-2026-50200)
vulnerability in Steeltoe.Management.Endpoint (CVE-2026-50200). Confidential information can be exposed externally. Exploitable via ``Sanitizer``. Mitigation: upgrade to `4.2.0` or later.
|
| CVE-2026-55450 |
|
Information Disclosure in langflow (CVE-2026-55450)
vulnerability in langflow (CVE-2026-55450). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/upload/{flow_id}`. Mitigation: upgrade to `1.9.1` or later.
|
| CVE-2026-47340 |
|
Information Disclosure in org.apache.dolphinscheduler:dolphinscheduler-api (CVE-2026-47340)
vulnerability in org.apache.dolphinscheduler:dolphinscheduler-api (CVE-2026-47340). Confidential information can be exposed externally. Mitigation: upgrade to `3.4.2` or later.
|
| CVE-2026-46977 |
|
Information Disclosure in c (CVE-2026-46977)
vulnerability in c (CVE-2026-46977). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46910 |
|
Vulnerability in c (CVE-2026-46910)
vulnerability in c (CVE-2026-46910). Confidential information can be exposed externally.
|
| CVE-2026-46912 |
|
Information Disclosure in c (CVE-2026-46912)
vulnerability in c (CVE-2026-46912). Confidential information can be exposed externally.
|
| CVE-2026-46874 |
|
Information Disclosure in c (CVE-2026-46874)
vulnerability in c (CVE-2026-46874). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46816 |
|
Information Disclosure in c (CVE-2026-46816)
vulnerability in c (CVE-2026-46816). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46815 |
|
Information Disclosure in c (CVE-2026-46815)
vulnerability in c (CVE-2026-46815). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46790 |
|
Information Disclosure in c (CVE-2026-46790)
vulnerability in c (CVE-2026-46790). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54316 |
|
Vulnerability in @anthropic-ai/claude-code (CVE-2026-54316)
vulnerability in @anthropic-ai/claude-code (CVE-2026-54316). Confidential information can be exposed externally. Mitigation: upgrade to `2.1.163` or later.
|
| CVE-2026-53923 |
|
Information Disclosure in vllm (CVE-2026-53923)
vulnerability in vllm (CVE-2026-53923). Confidential information can be exposed externally. Exploitable via ``to_cuda_ggml_t``. Mitigation: upgrade to `0.24.0` or later.
|
| CVE-2026-54304 |
|
Information Disclosure in n8n (CVE-2026-54304)
vulnerability in n8n (CVE-2026-54304). Confidential information can be exposed externally. Exploitable via ``NODES_EXCLUDE``. Mitigation: upgrade to `2.25.7` or later.
|
| CVE-2026-54305 |
|
Information Disclosure in n8n (CVE-2026-54305)
vulnerability in n8n (CVE-2026-54305). Confidential information can be exposed externally. Exploitable via ``N8N_ENV_FEAT_DYNAMIC_CREDENTIALS``. Mitigation: upgrade to `2.25.7` or later.
|