Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-770 Clear
ID Title
CVE-2026-46599 Vulnerability in golang.org/x/image (CVE-2026-46599)
vulnerability in golang.org/x/image (CVE-2026-46599). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.41.0` or later.
CVE-2026-45352 Vulnerability in c (CVE-2026-45352)
vulnerability in c (CVE-2026-45352). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.43.4` or later.
CVE-2026-46702 Vulnerability in russh (CVE-2026-46702)
vulnerability in russh (CVE-2026-46702). Risk of unauthorized operations or information disclosure. Exploitable via ``russh``. Mitigation: upgrade to `0.61.1` or later.
CVE-2026-49324 Vulnerability in CVE-2026-49324 (CVE-2026-49324)
vulnerability in CVE-2026-49324 (CVE-2026-49324). Risk of unauthorized operations or information disclosure.
CVE-2026-45023 Vulnerability in CVE-2026-45023 (CVE-2026-45023)
vulnerability in CVE-2026-45023 (CVE-2026-45023). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/blocks/{block_id}/execute`. Mitigation: upgrade to `0.6.59` or later.
CVE-2026-46405 Vulnerability in github.com/openbao/openbao (CVE-2026-46405)
vulnerability in github.com/openbao/openbao (CVE-2026-46405). Risk of unauthorized operations or information disclosure. Exploitable via ``GET``. Mitigation: upgrade to `2.5.4` or later.
CVE-2026-48735 Vulnerability in pypdf (CVE-2026-48735)
vulnerability in pypdf (CVE-2026-48735). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.1` or later.
CVE-2026-1402 Vulnerability in gitlab (CVE-2026-1402)
vulnerability in gitlab (CVE-2026-1402). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `18.10.7, 18.11.4, 19.0.2` or later.
CVE-2026-1718 Vulnerability in dos (CVE-2026-1718)
vulnerability in dos (CVE-2026-1718). Risk of unauthorized operations or information disclosure.
CVE-2026-6053 Vulnerability in dos (CVE-2026-6053)
vulnerability in dos (CVE-2026-6053). Risk of unauthorized operations or information disclosure.
CVE-2026-35202 Vulnerability in pterodactyl/panel (CVE-2026-35202)
vulnerability in pterodactyl/panel (CVE-2026-35202). Risk of unauthorized operations or information disclosure. Exploitable via ``DatabaseController.php``. Mitigation: upgrade to `1.12.3` or later.
CVE-2025-11482 Vulnerability in CVE-2025-11482 (CVE-2025-11482)
vulnerability in CVE-2025-11482 (CVE-2025-11482). Risk of unauthorized operations or information disclosure.
CVE-2026-42626 Vulnerability in dos (CVE-2026-42626)
vulnerability in dos (CVE-2026-42626). Risk of unauthorized operations or information disclosure.
CVE-2026-47067 Vulnerability in hackney (CVE-2026-47067)
vulnerability in hackney (CVE-2026-47067). Risk of unauthorized operations or information disclosure. Exploitable via ``Location``. Mitigation: upgrade to `4.0.1` or later.
CVE-2026-46629 Vulnerability in twig/intl-extra (CVE-2026-46629)
vulnerability in twig/intl-extra (CVE-2026-46629). Risk of unauthorized operations or information disclosure. Exploitable via ``IntlExtension``. Mitigation: upgrade to `3.26.0` or later.
CVE-2026-46673 Vulnerability in russh-cryptovec (CVE-2026-46673)
vulnerability in russh-cryptovec (CVE-2026-46673). Risk of unauthorized operations or information disclosure. Exploitable via ``CryptoVec``. Mitigation: upgrade to `0.60.3` or later.
CVE-2026-46553 Vulnerability in nocodb (CVE-2026-46553)
vulnerability in nocodb (CVE-2026-46553). Risk of unauthorized operations or information disclosure. Exploitable via ``NC_ATTACHMENT_FIELD_SIZE``.
CVE-2026-46551 Vulnerability in nocodb (CVE-2026-46551)
vulnerability in nocodb (CVE-2026-46551). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/db/storage/upload-by-url`.
CVE-2026-44070 Vulnerability in dos (CVE-2026-44070)
vulnerability in dos (CVE-2026-44070). Risk of unauthorized operations or information disclosure.
CVE-2026-8486 Vulnerability in progress (CVE-2026-8486)
vulnerability in progress (CVE-2026-8486). Risk of unauthorized operations or information disclosure.
CVE-2026-8488 Vulnerability in progress (CVE-2026-8488)
vulnerability in progress (CVE-2026-8488). Risk of unauthorized operations or information disclosure.
CVE-2026-8469 Vulnerability in phoenix_storybook (CVE-2026-8469)
vulnerability in phoenix_storybook (CVE-2026-8469). Risk of unauthorized operations or information disclosure. Exploitable via ``PhoenixStorybook.Story.Playground``. Mitigation: upgrade to `1.1.0` or later.
CVE-2026-3039 Vulnerability in isc (CVE-2026-3039)
vulnerability in isc (CVE-2026-3039). Risk of unauthorized operations or information disclosure.
CVE-2026-9064 Vulnerability in dos (CVE-2026-9064)
vulnerability in dos (CVE-2026-9064). Risk of unauthorized operations or information disclosure.
CVE-2026-41292 Vulnerability in dos (CVE-2026-41292)
vulnerability in dos (CVE-2026-41292). Risk of unauthorized operations or information disclosure.
CVE-2025-57798 Vulnerability in dos (CVE-2025-57798)
vulnerability in dos (CVE-2025-57798). Risk of unauthorized operations or information disclosure.
CVE-2026-45802 Vulnerability in setasign/fpdi (CVE-2026-45802)
vulnerability in setasign/fpdi (CVE-2026-45802). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.7` or later.
CVE-2026-45713 Vulnerability in github.com/axllent/mailpit (CVE-2026-45713)
vulnerability in github.com/axllent/mailpit (CVE-2026-45713). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/send`. Mitigation: upgrade to `1.30.0` or later.
CVE-2026-45712 Vulnerability in github.com/axllent/mailpit (CVE-2026-45712)
vulnerability in github.com/axllent/mailpit (CVE-2026-45712). Risk of unauthorized operations or information disclosure. Exploitable via `GET /proxy`. Mitigation: upgrade to `1.30.0` or later.
CVE-2026-45557 Vulnerability in CVE-2026-45557 (CVE-2026-45557)
vulnerability in CVE-2026-45557 (CVE-2026-45557). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `15.0` or later.
CVE-2026-33232 Vulnerability in dos (CVE-2026-33232)
vulnerability in dos (CVE-2026-33232). Risk of unauthorized operations or information disclosure.
CVE-2026-45664 Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-45664)
vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-45664). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.13.1` or later.
CVE-2026-45554 Vulnerability in nicegui (CVE-2026-45554)
vulnerability in nicegui (CVE-2026-45554). Risk of unauthorized operations or information disclosure. Exploitable via ``RuntimeError``. Mitigation: upgrade to `3.12.0` or later.
CVE-2026-45682 Vulnerability in go.opentelemetry.io/obi (CVE-2026-45682)
vulnerability in go.opentelemetry.io/obi (CVE-2026-45682). Risk of unauthorized operations or information disclosure. Exploitable via ``CappedConcurrentHashMap``. Mitigation: upgrade to `0.9.0` or later.
CVE-2026-45031 Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-45031)
vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-45031). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.13.1` or later.
CVE-2026-2325 Vulnerability in github.com/mattermost/mattermost-server (CVE-2026-2325)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-2325). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.4.4` or later.
CVE-2021-47959 WordPress Plugin WPGraphQL 1.3.5 contains a denial of service vulnerability that allows...
WordPress Plugin WPGraphQL 1.3.5 contains a denial of service vulnerability that allows...
CVE-2026-44679 Vulnerability in CVE-2026-44679 (CVE-2026-44679)
vulnerability in CVE-2026-44679 (CVE-2026-44679). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.180.10` or later.
CVE-2026-42570 Vulnerability in devalue (CVE-2026-42570)
vulnerability in devalue (CVE-2026-42570). Risk of unauthorized operations or information disclosure. Exploitable via ``devalue.parse``. Mitigation: upgrade to `5.8.1` or later.
CVE-2026-45292 Vulnerability in io.opentelemetry:opentelemetry-api (CVE-2026-45292)
vulnerability in io.opentelemetry:opentelemetry-api (CVE-2026-45292). Risk of unauthorized operations or information disclosure. Exploitable via ``W3CBaggagePropagator``. Mitigation: upgrade to `1.62.0` or later.
CVE-2026-45078 Vulnerability in matrix-synapse (CVE-2026-45078)
vulnerability in matrix-synapse (CVE-2026-45078). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.152.1` or later.
CVE-2026-44216 Vulnerability in wasmtime (CVE-2026-44216)
vulnerability in wasmtime (CVE-2026-44216). Risk of unauthorized operations or information disclosure. Exploitable via ``memory64``. Mitigation: upgrade to `43.0.2` or later.
CVE-2026-8468 Vulnerability in plug (CVE-2026-8468)
vulnerability in plug (CVE-2026-8468). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.15.4, 1.16.3, 1.17.1, 1.18.2, 1.19.2` or later.
CVE-2026-8280 Vulnerability in gitlab (CVE-2026-8280)
vulnerability in gitlab (CVE-2026-8280). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `18.9.7, 18.10.6, 18.11.3` or later.
CVE-2025-14870 Vulnerability in gitlab (CVE-2025-14870)
vulnerability in gitlab (CVE-2025-14870). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `18.9.7, 18.10.6, 18.11.3` or later.
CVE-2026-1659 Vulnerability in gitlab (CVE-2026-1659)
vulnerability in gitlab (CVE-2026-1659). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `18.9.7, 18.10.6, 18.11.3` or later.
CVE-2026-28383 Vulnerability in grafana (CVE-2026-28383)
vulnerability in grafana (CVE-2026-28383). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.6.14, 12.2.8, 12.3.6, 12.4.3, 13.0.1` or later.
CVE-2026-28376 Vulnerability in grafana (CVE-2026-28376)
vulnerability in grafana (CVE-2026-28376). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.6.14, 12.2.8, 12.3.6, 12.4.3, 13.0.1` or later.
CVE-2026-42561 Vulnerability in python-multipart (CVE-2026-42561)
vulnerability in python-multipart (CVE-2026-42561). Risk of unauthorized operations or information disclosure. Exploitable via ``MultipartParser``. Mitigation: upgrade to `0.0.27` or later.
CVE-2026-8466 Vulnerability in cowboy (CVE-2026-8466)
vulnerability in cowboy (CVE-2026-8466). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.15.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →