Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-7762 |
|
Vulnerability in dos (CVE-2026-7762)
vulnerability in dos (CVE-2026-7762). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7763 |
|
Vulnerability in c (CVE-2026-7763)
vulnerability in c (CVE-2026-7763). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50591 |
|
IN Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences.
IN Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences.
|
| CVE-2026-50592 |
|
Cross-Site Scripting (XSS) in CVE-2026-50592 (CVE-2026-50592)
cross-site scripting in CVE-2026-50592 (CVE-2026-50592). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11326 |
|
Vulnerability in CVE-2026-11326 (CVE-2026-11326)
vulnerability in CVE-2026-11326 (CVE-2026-11326). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11308 |
|
Privilege Escalation in privilege-escalation (CVE-2026-11308)
vulnerability in privilege-escalation (CVE-2026-11308). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11295 |
|
Privilege Escalation in privilege-escalation (CVE-2026-11295)
vulnerability in privilege-escalation (CVE-2026-11295). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11296 |
|
Privilege Escalation in privilege-escalation (CVE-2026-11296)
vulnerability in privilege-escalation (CVE-2026-11296). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11290 |
|
Vulnerability in dos (CVE-2026-11290)
vulnerability in dos (CVE-2026-11290). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11272 |
|
Vulnerability in privilege-escalation (CVE-2026-11272)
vulnerability in privilege-escalation (CVE-2026-11272). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11239 |
|
Vulnerability in privilege-escalation (CVE-2026-11239)
vulnerability in privilege-escalation (CVE-2026-11239). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11241 |
|
Vulnerability in privilege-escalation (CVE-2026-11241)
vulnerability in privilege-escalation (CVE-2026-11241). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10877 |
|
Vulnerability in sqli (CVE-2026-10877)
vulnerability in sqli (CVE-2026-10877). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48567 |
|
Vulnerability in microsoft (CVE-2026-48567)
vulnerability in microsoft (CVE-2026-48567). Data can be tampered with by attackers.
|
| CVE-2026-11229 |
|
Privilege Escalation in privilege-escalation (CVE-2026-11229)
vulnerability in privilege-escalation (CVE-2026-11229). Confidential information can be exposed externally.
|
| CVE-2026-11170 |
|
Vulnerability in privilege-escalation (CVE-2026-11170)
vulnerability in privilege-escalation (CVE-2026-11170). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11149 |
|
Vulnerability in privilege-escalation (CVE-2026-11149)
vulnerability in privilege-escalation (CVE-2026-11149). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11115 |
|
Use-After-Free in privilege-escalation (CVE-2026-11115)
vulnerability in privilege-escalation (CVE-2026-11115). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11108 |
|
Privilege Escalation in privilege-escalation (CVE-2026-11108)
vulnerability in privilege-escalation (CVE-2026-11108). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11103 |
|
Privilege Escalation in privilege-escalation (CVE-2026-11103)
vulnerability in privilege-escalation (CVE-2026-11103). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11092 |
|
Vulnerability in privilege-escalation (CVE-2026-11092)
vulnerability in privilege-escalation (CVE-2026-11092). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11058 |
|
Vulnerability in privilege-escalation (CVE-2026-11058)
vulnerability in privilege-escalation (CVE-2026-11058). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11035 |
|
Vulnerability in privilege-escalation (CVE-2026-11035)
vulnerability in privilege-escalation (CVE-2026-11035). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10969 |
|
Vulnerability in privilege-escalation (CVE-2026-10969)
vulnerability in privilege-escalation (CVE-2026-10969). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10942 |
|
Vulnerability in privilege-escalation (CVE-2026-10942)
vulnerability in privilege-escalation (CVE-2026-10942). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10874 |
|
Vulnerability in sqli (CVE-2026-10874)
vulnerability in sqli (CVE-2026-10874). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10875 |
|
Vulnerability in sqli (CVE-2026-10875)
vulnerability in sqli (CVE-2026-10875). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42547 |
|
Authorization Flaw in CVE-2026-42547 (CVE-2026-42547)
vulnerability in CVE-2026-42547 (CVE-2026-42547). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11322 |
|
Vulnerability in path-traversal (CVE-2026-11322)
vulnerability in path-traversal (CVE-2026-11322). Confidential information can be exposed externally.
|
| CVE-2026-42538 |
|
Unrestricted File Upload in CVE-2026-42538 (CVE-2026-42538)
vulnerability in CVE-2026-42538 (CVE-2026-42538). Confidential information can be exposed externally.
|
| CVE-2026-5066 |
|
Out-of-Bounds Write in c (CVE-2026-5066)
out-of-bounds write in c (CVE-2026-5066). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5589 |
|
Out-of-Bounds Write in c (CVE-2026-5589)
out-of-bounds write in c (CVE-2026-5589). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48013 |
|
SSRF (Server-Side Request Forgery) in shopware/core (CVE-2026-48013)
SSRF in shopware/core (CVE-2026-48013). Risk of unauthorized operations or information disclosure. Exploitable via ``uploadFromURL``. Mitigation: upgrade to `6.7.10.1` or later.
|
| CVE-2026-36499 |
|
Vulnerability in dos (CVE-2026-36499)
vulnerability in dos (CVE-2026-36499). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-65640 |
|
Cross-Site Scripting (XSS) in CVE-2025-65640 (CVE-2025-65640)
cross-site scripting in CVE-2025-65640 (CVE-2025-65640). Confidential information can be exposed externally.
|
| CVE-2026-54458 |
|
Cross-Site Scripting (XSS) in WWBN/AVideo (CVE-2026-54458)
cross-site scripting in WWBN/AVideo (CVE-2026-54458). Confidential information can be exposed externally. Exploitable via ``page_title``.
|
| CVE-2026-50183 |
|
Cross-Site Scripting (XSS) in WWBN/AVideo (CVE-2026-50183)
cross-site scripting in WWBN/AVideo (CVE-2026-50183). Risk of unauthorized operations or information disclosure. Exploitable via ``snippet.title``.
|
| CVE-2026-50182 |
|
Cross-Site Scripting (XSS) in WWBN/AVideo (CVE-2026-50182)
cross-site scripting in WWBN/AVideo (CVE-2026-50182). Risk of unauthorized operations or information disclosure. Exploitable via ``href``.
|
| CVE-2026-49279 |
|
Cross-Site Scripting (XSS) in wwbn/avideo (CVE-2026-49279)
cross-site scripting in wwbn/avideo (CVE-2026-49279). Risk of unauthorized operations or information disclosure. Exploitable via ``autoEvalCodeOnHTML``.
|
| CVE-2026-25550 |
|
Vulnerability in csharp (CVE-2026-25550)
vulnerability in csharp (CVE-2026-25550). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10880 |
|
SQL Injection in sqli (CVE-2026-10880)
SQL injection in sqli (CVE-2026-10880). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25551 |
|
Unsafe Deserialization in csharp (CVE-2026-25551)
vulnerability in csharp (CVE-2026-25551). Successful exploitation can lead to full system takeover.
|
| CVE-2025-67448 |
|
Cross-Site Scripting (XSS) in CVE-2025-67448 (CVE-2025-67448)
cross-site scripting in CVE-2025-67448 (CVE-2025-67448). Confidential information can be exposed externally.
|
| CVE-2026-49941 |
|
Vulnerability in dos (CVE-2026-49941)
vulnerability in dos (CVE-2026-49941). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50076 |
|
Unsafe Deserialization in org.apache.fory:fory-core (CVE-2026-50076)
vulnerability in org.apache.fory:fory-core (CVE-2026-50076). Confidential information can be exposed externally. Mitigation: upgrade to `1.1.0` or later.
|
| CVE-2025-67446 |
|
Vulnerability in CVE-2025-67446 (CVE-2025-67446)
vulnerability in CVE-2025-67446 (CVE-2025-67446). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43986 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-43986)
SSRF in ssrf (CVE-2026-43986). Confidential information can be exposed externally. Exploitable via ``image_hash_lookup``.
|
| CVE-2026-43985 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-43985)
vulnerability in csrf (CVE-2026-43985). Successful exploitation can lead to full system takeover. Exploitable via ``configUpdate``.
|
| CVE-2026-43984 |
|
Cross-Site Scripting (XSS) in CVE-2026-43984 (CVE-2026-43984)
cross-site scripting in CVE-2026-43984 (CVE-2026-43984). Confidential information can be exposed externally. Exploitable via ``log_js_errors``.
|
| CVE-2026-38570 |
|
Out-of-Bounds Read in dos (CVE-2026-38570)
vulnerability in dos (CVE-2026-38570). Risk of unauthorized operations or information disclosure.
|