Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-50264 |
|
Out-of-Bounds Write in privilege-escalation (CVE-2026-50264)
out-of-bounds write in privilege-escalation (CVE-2026-50264). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50258 |
|
Vulnerability in privilege-escalation (CVE-2026-50258)
vulnerability in privilege-escalation (CVE-2026-50258). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50259 |
|
Vulnerability in privilege-escalation (CVE-2026-50259)
vulnerability in privilege-escalation (CVE-2026-50259). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50260 |
|
Use-After-Free in privilege-escalation (CVE-2026-50260)
vulnerability in privilege-escalation (CVE-2026-50260). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50261 |
|
Use-After-Free in privilege-escalation (CVE-2026-50261)
vulnerability in privilege-escalation (CVE-2026-50261). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50256 |
|
Vulnerability in privilege-escalation (CVE-2026-50256)
vulnerability in privilege-escalation (CVE-2026-50256). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50257 |
|
Use-After-Free in privilege-escalation (CVE-2026-50257)
vulnerability in privilege-escalation (CVE-2026-50257). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11295 |
|
Privilege Escalation in privilege-escalation (CVE-2026-11295)
vulnerability in privilege-escalation (CVE-2026-11295). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11296 |
|
Privilege Escalation in privilege-escalation (CVE-2026-11296)
vulnerability in privilege-escalation (CVE-2026-11296). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11272 |
|
Vulnerability in privilege-escalation (CVE-2026-11272)
vulnerability in privilege-escalation (CVE-2026-11272). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11239 |
|
Vulnerability in privilege-escalation (CVE-2026-11239)
vulnerability in privilege-escalation (CVE-2026-11239). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11241 |
|
Vulnerability in privilege-escalation (CVE-2026-11241)
vulnerability in privilege-escalation (CVE-2026-11241). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10877 |
|
Vulnerability in sqli (CVE-2026-10877)
vulnerability in sqli (CVE-2026-10877). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11170 |
|
Vulnerability in privilege-escalation (CVE-2026-11170)
vulnerability in privilege-escalation (CVE-2026-11170). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11149 |
|
Vulnerability in privilege-escalation (CVE-2026-11149)
vulnerability in privilege-escalation (CVE-2026-11149). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11115 |
|
Use-After-Free in privilege-escalation (CVE-2026-11115)
vulnerability in privilege-escalation (CVE-2026-11115). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11108 |
|
Privilege Escalation in privilege-escalation (CVE-2026-11108)
vulnerability in privilege-escalation (CVE-2026-11108). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11103 |
|
Privilege Escalation in privilege-escalation (CVE-2026-11103)
vulnerability in privilege-escalation (CVE-2026-11103). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11092 |
|
Vulnerability in privilege-escalation (CVE-2026-11092)
vulnerability in privilege-escalation (CVE-2026-11092). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11058 |
|
Vulnerability in privilege-escalation (CVE-2026-11058)
vulnerability in privilege-escalation (CVE-2026-11058). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11035 |
|
Vulnerability in privilege-escalation (CVE-2026-11035)
vulnerability in privilege-escalation (CVE-2026-11035). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10969 |
|
Vulnerability in privilege-escalation (CVE-2026-10969)
vulnerability in privilege-escalation (CVE-2026-10969). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10942 |
|
Vulnerability in privilege-escalation (CVE-2026-10942)
vulnerability in privilege-escalation (CVE-2026-10942). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25551 |
|
Unsafe Deserialization in csharp (CVE-2026-25551)
vulnerability in csharp (CVE-2026-25551). Successful exploitation can lead to full system takeover.
|
| CVE-2025-67448 |
|
Cross-Site Scripting (XSS) in CVE-2025-67448 (CVE-2025-67448)
cross-site scripting in CVE-2025-67448 (CVE-2025-67448). Confidential information can be exposed externally.
|
| CVE-2026-49941 |
|
Vulnerability in dos (CVE-2026-49941)
vulnerability in dos (CVE-2026-49941). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43985 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-43985)
vulnerability in csrf (CVE-2026-43985). Successful exploitation can lead to full system takeover. Exploitable via ``configUpdate``.
|
| CVE-2026-43984 |
|
Cross-Site Scripting (XSS) in CVE-2026-43984 (CVE-2026-43984)
cross-site scripting in CVE-2026-43984 (CVE-2026-43984). Confidential information can be exposed externally. Exploitable via ``log_js_errors``.
|
| CVE-2026-38570 |
|
Out-of-Bounds Read in dos (CVE-2026-38570)
vulnerability in dos (CVE-2026-38570). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10863 |
|
Vulnerability in sqli (CVE-2026-10863)
vulnerability in sqli (CVE-2026-10863). Confidential information can be exposed externally.
|
| CVE-2025-46638 |
|
Vulnerability in dos (CVE-2025-46638)
vulnerability in dos (CVE-2025-46638). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-25745 |
|
SQL Injection in wordpress (CVE-2019-25745)
SQL injection in wordpress (CVE-2019-25745). Confidential information can be exposed externally.
|
| CVE-2019-25730 |
|
SQL Injection in sqli (CVE-2019-25730)
SQL injection in sqli (CVE-2019-25730). Confidential information can be exposed externally.
|
| CVE-2019-25732 |
|
SQL Injection in sqli (CVE-2019-25732)
SQL injection in sqli (CVE-2019-25732). Confidential information can be exposed externally.
|
| CVE-2019-25728 |
|
SQL Injection in sqli (CVE-2019-25728)
SQL injection in sqli (CVE-2019-25728). Confidential information can be exposed externally.
|
| CVE-2019-25726 |
|
SQL Injection in sqli (CVE-2019-25726)
SQL injection in sqli (CVE-2019-25726). Confidential information can be exposed externally.
|
| CVE-2025-52612 |
|
Vulnerability in hcltech (CVE-2025-52612)
vulnerability in hcltech (CVE-2025-52612). Successful exploitation can lead to full system takeover.
|
| CVE-2025-12694 |
|
Vulnerability in privilege-escalation (CVE-2025-12694)
vulnerability in privilege-escalation (CVE-2025-12694). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49771 |
|
SQL Injection in sqli (CVE-2026-49771)
SQL injection in sqli (CVE-2026-49771). Confidential information can be exposed externally.
|
| CVE-2026-10777 |
|
A vulnerability was identified in ealpha072 Student-Management-System up to...
A vulnerability was identified in ealpha072 Student-Management-System up to...
|
| CVE-2026-10771 |
|
A vulnerability was found in crmeb crmeb_java 1.4. Affected is the function RestTemplate...
A vulnerability was found in crmeb crmeb_java 1.4. Affected is the function RestTemplate...
|
| CVE-2026-44023 |
|
Path Traversal in docling-core (CVE-2026-44023)
path traversal in docling-core (CVE-2026-44023). Confidential information can be exposed externally. Mitigation: upgrade to `2.74.1` or later.
|
| CVE-2026-44020 |
|
XXE (XML External Entity) in docling (CVE-2026-44020)
vulnerability in docling (CVE-2026-44020). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.74.0` or later.
|
| CVE-2026-44016 |
|
Code Injection in docling (CVE-2026-44016)
code injection in docling (CVE-2026-44016). Confidential information can be exposed externally. Exploitable via ``enable_remote_fetch``. Mitigation: upgrade to `2.91.0` or later.
|
| CVE-2026-50033 |
|
Vulnerability in privilege-escalation (CVE-2026-50033)
vulnerability in privilege-escalation (CVE-2026-50033). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44682 |
|
Vulnerability in privilege-escalation (CVE-2026-44682)
vulnerability in privilege-escalation (CVE-2026-44682). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44609 |
|
Vulnerability in privilege-escalation (CVE-2026-44609)
vulnerability in privilege-escalation (CVE-2026-44609). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42061 |
|
Vulnerability in privilege-escalation (CVE-2026-42061)
vulnerability in privilege-escalation (CVE-2026-42061). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44017 |
|
Path Traversal in docling (CVE-2026-44017)
path traversal in docling (CVE-2026-44017). Successful exploitation can lead to full system takeover. Exploitable via ``SecurityError``. Mitigation: upgrade to `2.91.0` or later.
|
| CVE-2026-8888 |
|
Vulnerability in dos (CVE-2026-8888)
vulnerability in dos (CVE-2026-8888). Risk of unauthorized operations or information disclosure.
|