Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-27244 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27244)
cross-site scripting in adobe (CVE-2026-27244). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27247 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27247)
cross-site scripting in adobe (CVE-2026-27247). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27248 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27248)
cross-site scripting in adobe (CVE-2026-27248). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27234 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27234)
cross-site scripting in adobe (CVE-2026-27234). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27235 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27235)
cross-site scripting in adobe (CVE-2026-27235). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27236 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27236)
cross-site scripting in adobe (CVE-2026-27236). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27237 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27237)
cross-site scripting in adobe (CVE-2026-27237). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27239 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27239)
cross-site scripting in adobe (CVE-2026-27239). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27240 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27240)
cross-site scripting in adobe (CVE-2026-27240). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27228 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27228)
cross-site scripting in adobe (CVE-2026-27228). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27229 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27229)
cross-site scripting in adobe (CVE-2026-27229). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27230 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27230)
cross-site scripting in adobe (CVE-2026-27230). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27231 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27231)
cross-site scripting in adobe (CVE-2026-27231). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27232 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27232)
cross-site scripting in adobe (CVE-2026-27232). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27233 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27233)
cross-site scripting in adobe (CVE-2026-27233). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27223 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27223)
cross-site scripting in adobe (CVE-2026-27223). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27224 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27224)
cross-site scripting in adobe (CVE-2026-27224). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27225 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27225)
cross-site scripting in adobe (CVE-2026-27225). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27226 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27226)
cross-site scripting in adobe (CVE-2026-27226). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28807 |
|
Path Traversal in wisp (CVE-2026-28807)
path traversal in wisp (CVE-2026-28807). Confidential information can be exposed externally. Exploitable via ``wisp.serve_static``. Mitigation: upgrade to `2.2.1` or later.
|
| CVE-2026-30951 |
|
SQL Injection in sqli (CVE-2026-30951)
SQL injection in sqli (CVE-2026-30951). Confidential information can be exposed externally. Mitigation: upgrade to `6.37.8` or later.
|
| CVE-2026-31812 |
|
Vulnerability in dos (CVE-2026-31812)
vulnerability in dos (CVE-2026-31812). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.11.14` or later.
|
| CVE-2026-28292 |
|
Vulnerability in simple-git (CVE-2026-28292)
vulnerability in simple-git (CVE-2026-28292). Successful exploitation can lead to full system takeover. Exploitable via ``blockUnsafeOperationsPlugin``. Mitigation: upgrade to `3.32.3` or later.
|
| CVE-2025-11739 |
|
Unsafe Deserialization in deserialization (CVE-2025-11739)
vulnerability in deserialization (CVE-2025-11739). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3843 |
|
SQL Injection in sqli (CVE-2026-3843)
SQL injection in sqli (CVE-2026-3843). Successful exploitation can lead to full system takeover.
|
| CVE-2026-1286 |
|
Unsafe Deserialization in deserialization (CVE-2026-1286)
vulnerability in deserialization (CVE-2026-1286). Successful exploitation can lead to full system takeover.
|
| CVE-2025-56421 |
|
SQL Injection in sqli (CVE-2025-56421)
SQL injection in sqli (CVE-2025-56421). Confidential information can be exposed externally.
|
| CVE-2025-56422 |
|
Unsafe Deserialization in deserialization (CVE-2025-56422)
vulnerability in deserialization (CVE-2025-56422). Successful exploitation can lead to full system takeover.
|
| CVE-2025-13901 |
|
Vulnerability in dos (CVE-2025-13901)
vulnerability in dos (CVE-2025-13901). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13902 |
|
Cross-Site Scripting (XSS) in schneider-electric (CVE-2025-13902)
cross-site scripting in schneider-electric (CVE-2025-13902). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-29773 |
|
Authorization Flaw in privilege-escalation (CVE-2026-29773)
vulnerability in privilege-escalation (CVE-2026-29773). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24316 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-24316)
SSRF in ssrf (CVE-2026-24316). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1776 |
|
Path Traversal in path-traversal (CVE-2026-1776)
path traversal in path-traversal (CVE-2026-1776). Confidential information can be exposed externally.
|
| CVE-2026-25960 |
|
SSRF (Server-Side Request Forgery) in vllm (CVE-2026-25960)
SSRF in vllm (CVE-2026-25960). Risk of unauthorized operations or information disclosure. Exploitable via ``load_from_url_async``. Mitigation: upgrade to `0.17.0` or later.
|
| CVE-2026-29771 |
|
Vulnerability in dos (CVE-2026-29771)
vulnerability in dos (CVE-2026-29771). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2219 |
|
Vulnerability in dos (CVE-2026-2219)
vulnerability in dos (CVE-2026-2219). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-69654 |
|
Vulnerability in dos (CVE-2025-69654)
vulnerability in dos (CVE-2025-69654). Risk of unauthorized operations or information disclosure. Exploitable via ``qjs``.
|
| CVE-2026-29091 |
|
Vulnerability in locutus (CVE-2026-29091)
vulnerability in locutus (CVE-2026-29091). Successful exploitation can lead to full system takeover.
|
| CVE-2026-26018 |
|
Vulnerability in dos (CVE-2026-26018)
vulnerability in dos (CVE-2026-26018). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2753 |
|
Vulnerability in path-traversal (CVE-2026-2753)
vulnerability in path-traversal (CVE-2026-2753). Confidential information can be exposed externally.
|
| CVE-2026-29062 |
|
Vulnerability in dos (CVE-2026-29062)
vulnerability in dos (CVE-2026-29062). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24457 |
|
Path Traversal in eclipse (CVE-2026-24457)
path traversal in eclipse (CVE-2026-24457). Confidential information can be exposed externally.
|
| CVE-2025-69534 |
|
Vulnerability in markdown (CVE-2025-69534)
vulnerability in markdown (CVE-2025-69534). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.8.1` or later.
|
| CVE-2026-2743 |
|
Path Traversal in path-traversal (CVE-2026-2743)
path traversal in path-traversal (CVE-2026-2743). Successful exploitation can lead to full system takeover.
|
| CVE-2026-29000 |
|
Vulnerability in CVE-2026-29000 (CVE-2026-29000)
vulnerability in CVE-2026-29000 (CVE-2026-29000). Confidential information can be exposed externally.
|
| CVE-2026-0847 |
|
Path Traversal in nltk (CVE-2026-0847)
path traversal in nltk (CVE-2026-0847). Confidential information can be exposed externally. Mitigation: upgrade to `3.9.3` or later.
|
| CVE-2026-20064 |
|
Vulnerability in dos (CVE-2026-20064)
vulnerability in dos (CVE-2026-20064). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20025 |
|
Vulnerability in dos (CVE-2026-20025)
vulnerability in dos (CVE-2026-20025). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20024 |
|
Buffer Overflow in dos (CVE-2026-20024)
vulnerability in dos (CVE-2026-20024). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20023 |
|
Out-of-Bounds Write in dos (CVE-2026-20023)
out-of-bounds write in dos (CVE-2026-20023). Risk of unauthorized operations or information disclosure.
|