Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-20459 |
|
Vulnerability in dos (CVE-2026-20459)
vulnerability in dos (CVE-2026-20459). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57995 |
|
Privilege Escalation in privilege-escalation (CVE-2026-57995)
vulnerability in privilege-escalation (CVE-2026-57995). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56365 |
|
Vulnerability in dos (CVE-2026-56365)
vulnerability in dos (CVE-2026-56365). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56363 |
|
Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-56363)
vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-56363). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.12.0` or later.
|
| CVE-2026-56364 |
|
Vulnerability in Magick.NET-Q8-x64 (CVE-2026-56364)
vulnerability in Magick.NET-Q8-x64 (CVE-2026-56364). Risk of unauthorized operations or information disclosure. Exploitable via ``platform_name``. Mitigation: upgrade to `14.10.2` or later.
|
| CVE-2026-56399 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-56399)
SSRF in ssrf (CVE-2026-56399). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56356 |
|
Cross-Site Scripting (XSS) in n8n (CVE-2026-56356)
cross-site scripting in n8n (CVE-2026-56356). Risk of unauthorized operations or information disclosure. Exploitable via ``NODES_EXCLUDE``. Mitigation: upgrade to `2.13.3` or later.
|
| CVE-2026-56286 |
|
Vulnerability in csrf (CVE-2026-56286)
vulnerability in csrf (CVE-2026-56286). Data can be tampered with by attackers.
|
| CVE-2026-56350 |
|
Privilege Escalation in n8n (CVE-2026-56350)
vulnerability in n8n (CVE-2026-56350). Data can be tampered with by attackers. Mitigation: upgrade to `2.8.0` or later.
|
| CVE-2026-56219 |
|
Authentication Bypass in CVE-2026-56219 (CVE-2026-56219)
authentication bypass in CVE-2026-56219 (CVE-2026-56219). Confidential information can be exposed externally.
|
| CVE-2026-52195 |
|
Vulnerability in dos (CVE-2026-52195)
vulnerability in dos (CVE-2026-52195). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52198 |
|
Vulnerability in dos (CVE-2026-52198)
vulnerability in dos (CVE-2026-52198). Confidential information can be exposed externally.
|
| CVE-2026-52197 |
|
Vulnerability in dos (CVE-2026-52197)
vulnerability in dos (CVE-2026-52197). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52193 |
|
Vulnerability in dos (CVE-2026-52193)
vulnerability in dos (CVE-2026-52193). Confidential information can be exposed externally.
|
| CVE-2026-50040 |
|
Cross-Site Scripting (XSS) in CVE-2026-50040 (CVE-2026-50040)
cross-site scripting in CVE-2026-50040 (CVE-2026-50040). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28322 |
|
Vulnerability in CVE-2026-28322 (CVE-2026-28322)
vulnerability in CVE-2026-28322 (CVE-2026-28322). Confidential information can be exposed externally.
|
| CVE-2026-55721 |
|
SQL Injection in sqli (CVE-2026-55721)
SQL injection in sqli (CVE-2026-55721). Confidential information can be exposed externally.
|
| CVE-2026-56233 |
|
Path Traversal in path-traversal (CVE-2026-56233)
path traversal in path-traversal (CVE-2026-56233). Confidential information can be exposed externally.
|
| CVE-2026-14115 |
|
Vulnerability in privilege-escalation (CVE-2026-14115)
vulnerability in privilege-escalation (CVE-2026-14115). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14124 |
|
Privilege Escalation in privilege-escalation (CVE-2026-14124)
vulnerability in privilege-escalation (CVE-2026-14124). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14078 |
|
Vulnerability in privilege-escalation (CVE-2026-14078)
vulnerability in privilege-escalation (CVE-2026-14078). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14094 |
|
Use-After-Free in privilege-escalation (CVE-2026-14094)
vulnerability in privilege-escalation (CVE-2026-14094). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14060 |
|
Vulnerability in privilege-escalation (CVE-2026-14060)
vulnerability in privilege-escalation (CVE-2026-14060). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14041 |
|
Vulnerability in privilege-escalation (CVE-2026-14041)
vulnerability in privilege-escalation (CVE-2026-14041). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14036 |
|
Vulnerability in privilege-escalation (CVE-2026-14036)
vulnerability in privilege-escalation (CVE-2026-14036). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14018 |
|
Use-After-Free in privilege-escalation (CVE-2026-14018)
vulnerability in privilege-escalation (CVE-2026-14018). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13928 |
|
Vulnerability in privilege-escalation (CVE-2026-13928)
vulnerability in privilege-escalation (CVE-2026-13928). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13927 |
|
Vulnerability in privilege-escalation (CVE-2026-13927)
vulnerability in privilege-escalation (CVE-2026-13927). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13897 |
|
Vulnerability in privilege-escalation (CVE-2026-13897)
vulnerability in privilege-escalation (CVE-2026-13897). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13903 |
|
Vulnerability in privilege-escalation (CVE-2026-13903)
vulnerability in privilege-escalation (CVE-2026-13903). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13891 |
|
Vulnerability in privilege-escalation (CVE-2026-13891)
vulnerability in privilege-escalation (CVE-2026-13891). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13864 |
|
Vulnerability in privilege-escalation (CVE-2026-13864)
vulnerability in privilege-escalation (CVE-2026-13864). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13844 |
|
Use-After-Free in privilege-escalation (CVE-2026-13844)
vulnerability in privilege-escalation (CVE-2026-13844). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13863 |
|
Vulnerability in privilege-escalation (CVE-2026-13863)
vulnerability in privilege-escalation (CVE-2026-13863). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13856 |
|
Vulnerability in privilege-escalation (CVE-2026-13856)
vulnerability in privilege-escalation (CVE-2026-13856). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13800 |
|
Vulnerability in privilege-escalation (CVE-2026-13800)
vulnerability in privilege-escalation (CVE-2026-13800). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13824 |
|
Vulnerability in privilege-escalation (CVE-2026-13824)
vulnerability in privilege-escalation (CVE-2026-13824). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13827 |
|
Use-After-Free in privilege-escalation (CVE-2026-13827)
vulnerability in privilege-escalation (CVE-2026-13827). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71374 |
|
Unsafe Deserialization in picklescan (CVE-2025-71374)
vulnerability in picklescan (CVE-2025-71374). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.29` or later.
|
| CVE-2025-71355 |
|
Unsafe Deserialization in picklescan (CVE-2025-71355)
vulnerability in picklescan (CVE-2025-71355). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.0.25` or later.
|
| CVE-2025-71363 |
|
Unsafe Deserialization in picklescan (CVE-2025-71363)
vulnerability in picklescan (CVE-2025-71363). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.30` or later.
|
| CVE-2026-58449 |
|
Code Injection in CVE-2026-58449 (CVE-2026-58449)
code injection in CVE-2026-58449 (CVE-2026-58449). Successful exploitation can lead to full system takeover.
|
| CVE-2026-52196 |
|
Vulnerability in dos (CVE-2026-52196)
vulnerability in dos (CVE-2026-52196). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10585 |
|
Cross-Site Scripting (XSS) in c (CVE-2026-10585)
cross-site scripting in c (CVE-2026-10585). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54696 |
|
Vulnerability in json (CVE-2026-54696)
vulnerability in json (CVE-2026-54696). Risk of unauthorized operations or information disclosure. Exploitable via ``FBUFFER_IO_BUFFER_SIZE``. Mitigation: upgrade to `2.19.9` or later.
|
| CVE-2026-55223 |
|
Unsafe Deserialization in com.mchange:c3p0 (CVE-2026-55223)
vulnerability in com.mchange:c3p0 (CVE-2026-55223). Risk of unauthorized operations or information disclosure. Exploitable via ``DataSource``. Mitigation: upgrade to `0.14.0` or later.
|
| CVE-2026-57204 |
|
Vulnerability in pypdf (CVE-2026-57204)
vulnerability in pypdf (CVE-2026-57204). Risk of unauthorized operations or information disclosure. Exploitable via ``MAX_DECLARED_STREAM_LENGTH``. Mitigation: upgrade to `6.13.3` or later.
|
| CVE-2026-57585 |
|
Use-After-Free in dos (CVE-2026-57585)
vulnerability in dos (CVE-2026-57585). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13207 |
|
Vulnerability in CVE-2026-13207 (CVE-2026-13207)
vulnerability in CVE-2026-13207 (CVE-2026-13207). Confidential information can be exposed externally.
|
| CVE-2025-36324 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-36324)
SSRF in ssrf (CVE-2025-36324). Risk of unauthorized operations or information disclosure.
|