Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-76215 Vulnerability in c (CVE-2026-76215)
vulnerability in c (CVE-2026-76215). Risk of unauthorized operations or information disclosure.
CVE-2026-76214 Vulnerability in CVE-2026-76214 (CVE-2026-76214)
vulnerability in CVE-2026-76214 (CVE-2026-76214). Confidential information can be exposed externally.
CVE-2026-76213 Vulnerability in CVE-2026-76213 (CVE-2026-76213)
vulnerability in CVE-2026-76213 (CVE-2026-76213). Confidential information can be exposed externally.
CVE-2026-76212 Vulnerability in sqli (CVE-2026-76212)
vulnerability in sqli (CVE-2026-76212). Risk of unauthorized operations or information disclosure.
CVE-2026-76211 Vulnerability in CVE-2026-76211 (CVE-2026-76211)
vulnerability in CVE-2026-76211 (CVE-2026-76211). Risk of unauthorized operations or information disclosure.
CVE-2026-76210 Vulnerability in CVE-2026-76210 (CVE-2026-76210)
vulnerability in CVE-2026-76210 (CVE-2026-76210). Confidential information can be exposed externally.
CVE-2026-76209 Vulnerability in CVE-2026-76209 (CVE-2026-76209)
vulnerability in CVE-2026-76209 (CVE-2026-76209). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/register`.
CVE-2026-76208 Vulnerability in CVE-2026-76208 (CVE-2026-76208)
vulnerability in CVE-2026-76208 (CVE-2026-76208). Data can be tampered with by attackers. Mitigation: upgrade to `4.1.7` or later.
CVE-2026-76207 Vulnerability in CVE-2026-76207 (CVE-2026-76207)
vulnerability in CVE-2026-76207 (CVE-2026-76207). Confidential information can be exposed externally.
CVE-2026-76206 Information Disclosure in CVE-2026-76206 (CVE-2026-76206)
vulnerability in CVE-2026-76206 (CVE-2026-76206). Risk of unauthorized operations or information disclosure.
CVE-2026-76205 SQL Injection in sqli (CVE-2026-76205)
SQL injection in sqli (CVE-2026-76205). Confidential information can be exposed externally.
CVE-2026-75920 Vulnerability in CVE-2026-75920 (CVE-2026-75920)
vulnerability in CVE-2026-75920 (CVE-2026-75920). Confidential information can be exposed externally.
CVE-2026-75919 Vulnerability in CVE-2026-75919 (CVE-2026-75919)
vulnerability in CVE-2026-75919 (CVE-2026-75919). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/setup/update-database`.
CVE-2026-75918 Information Disclosure in CVE-2026-75918 (CVE-2026-75918)
vulnerability in CVE-2026-75918 (CVE-2026-75918). Successful exploitation can lead to full system takeover.
CVE-2026-75917 Cross-Site Scripting (XSS) in CVE-2026-75917 (CVE-2026-75917)
cross-site scripting in CVE-2026-75917 (CVE-2026-75917). Successful exploitation can lead to full system takeover.
CVE-2026-75916 Cross-Site Scripting (XSS) in CVE-2026-75916 (CVE-2026-75916)
cross-site scripting in CVE-2026-75916 (CVE-2026-75916). Successful exploitation can lead to full system takeover.
CVE-2026-75148 Vulnerability in dos (CVE-2026-75148)
vulnerability in dos (CVE-2026-75148). Risk of unauthorized operations or information disclosure.
CVE-2026-75114 Open Redirect in CVE-2026-75114 (CVE-2026-75114)
vulnerability in CVE-2026-75114 (CVE-2026-75114). Risk of unauthorized operations or information disclosure.
CVE-2026-74804 SQL Injection in sqli (CVE-2026-74804)
SQL injection in sqli (CVE-2026-74804). Risk of unauthorized operations or information disclosure.
CVE-2026-74803 Unrestricted File Upload in CVE-2026-74803 (CVE-2026-74803)
vulnerability in CVE-2026-74803 (CVE-2026-74803). Risk of unauthorized operations or information disclosure.
CVE-2026-71694 Cross-Site Request Forgery (CSRF) in CVE-2026-71694 (CVE-2026-71694)
vulnerability in CVE-2026-71694 (CVE-2026-71694). Successful exploitation can lead to full system takeover.
CVE-2026-70424 Path Traversal in path-traversal (CVE-2026-70424)
path traversal in path-traversal (CVE-2026-70424). Confidential information can be exposed externally.
CVE-2026-70423 XXE (XML External Entity) in dell (CVE-2026-70423)
vulnerability in dell (CVE-2026-70423). Confidential information can be exposed externally.
CVE-2026-70422 SQL Injection in sqli (CVE-2026-70422)
SQL injection in sqli (CVE-2026-70422). Confidential information can be exposed externally.
CVE-2026-70421 Privilege Escalation in dell (CVE-2026-70421)
vulnerability in dell (CVE-2026-70421). Successful exploitation can lead to full system takeover.
CVE-2026-65612 OS Command Injection in CVE-2026-65612 (CVE-2026-65612)
OS command injection in CVE-2026-65612 (CVE-2026-65612). Risk of unauthorized operations or information disclosure.
CVE-2026-65611 OS Command Injection in CVE-2026-65611 (CVE-2026-65611)
OS command injection in CVE-2026-65611 (CVE-2026-65611). Risk of unauthorized operations or information disclosure.
CVE-2026-65610 Vulnerability in CVE-2026-65610 (CVE-2026-65610)
vulnerability in CVE-2026-65610 (CVE-2026-65610). Risk of unauthorized operations or information disclosure.
CVE-2026-65609 Out-of-Bounds Write in CVE-2026-65609 (CVE-2026-65609)
out-of-bounds write in CVE-2026-65609 (CVE-2026-65609). Risk of unauthorized operations or information disclosure.
CVE-2026-56088 SQL Injection in sqli (CVE-2026-56088)
SQL injection in sqli (CVE-2026-56088). Confidential information can be exposed externally.
CVE-2026-54796 OS Command Injection in dell (CVE-2026-54796)
OS command injection in dell (CVE-2026-54796). Successful exploitation can lead to full system takeover.
CVE-2026-54795 OS Command Injection in dell (CVE-2026-54795)
OS command injection in dell (CVE-2026-54795). Successful exploitation can lead to full system takeover.
CVE-2026-54794 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-54794)
SSRF in ssrf (CVE-2026-54794). Risk of unauthorized operations or information disclosure.
CVE-2026-51367 Vulnerability in CVE-2026-51367 (CVE-2026-51367)
vulnerability in CVE-2026-51367 (CVE-2026-51367). Confidential information can be exposed externally.
CVE-2026-51366 SQL Injection in sqli (CVE-2026-51366)
SQL injection in sqli (CVE-2026-51366). Successful exploitation can lead to full system takeover.
CVE-2026-50720 Vulnerability in CVE-2026-50720 (CVE-2026-50720)
vulnerability in CVE-2026-50720 (CVE-2026-50720). Successful exploitation can lead to full system takeover.
CVE-2026-50719 Vulnerability in CVE-2026-50719 (CVE-2026-50719)
vulnerability in CVE-2026-50719 (CVE-2026-50719). Successful exploitation can lead to full system takeover.
CVE-2026-43961 Code Injection in CVE-2026-43961 (CVE-2026-43961)
code injection in CVE-2026-43961 (CVE-2026-43961). Successful exploitation can lead to full system takeover.
CVE-2026-16019 SQL Injection in sqli (CVE-2026-16019)
SQL injection in sqli (CVE-2026-16019). Successful exploitation can lead to full system takeover.
CVE-2024-58376 OS Command Injection in CVE-2024-58376 (CVE-2024-58376)
OS command injection in CVE-2024-58376 (CVE-2024-58376). Successful exploitation can lead to full system takeover.
CVE-2020-37267 Vulnerability in CVE-2020-37267 (CVE-2020-37267)
vulnerability in CVE-2020-37267 (CVE-2020-37267). Confidential information can be exposed externally. Mitigation: upgrade to `23.25.1` or later.
CVE-2019-25766 Vulnerability in CVE-2019-25766 (CVE-2019-25766)
vulnerability in CVE-2019-25766 (CVE-2019-25766). Confidential information can be exposed externally.
CVE-2026-76235 Vulnerability in dos (CVE-2026-76235)
vulnerability in dos (CVE-2026-76235). Risk of unauthorized operations or information disclosure.
CVE-2026-73394 Unauthenticated Broken Access Control in Stitch Express <= 1.9.0 versions.
Unauthenticated Broken Access Control in Stitch Express <= 1.9.0 versions.
CVE-2026-73391 Unauthenticated SQL Injection in Total Donations <= 2.0.5 versions.
Unauthenticated SQL Injection in Total Donations <= 2.0.5 versions.
CVE-2026-73390 Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.
Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.
CVE-2026-73389 Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.
Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.
CVE-2026-73388 Unauthenticated SQL Injection in Nikstore Core <= 1.5 versions.
Unauthenticated SQL Injection in Nikstore Core <= 1.5 versions.
CVE-2026-73387 Unauthenticated Local File Inclusion in Resido <= 1.5 versions.
Unauthenticated Local File Inclusion in Resido <= 1.5 versions.
CVE-2026-73386 Vulnerability in CVE-2026-73386 (CVE-2026-73386)
vulnerability in CVE-2026-73386 (CVE-2026-73386). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →