Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Tag: cwe-93 Clear
ID Title
CVE-2026-33606 Vulnerability in CVE-2026-33606 (CVE-2026-33606)
vulnerability in CVE-2026-33606 (CVE-2026-33606). Data can be tampered with by attackers.
CVE-2026-77341 Vulnerability in c (CVE-2026-77341)
vulnerability in c (CVE-2026-77341). Risk of unauthorized operations or information disclosure.
CVE-2026-59313 Vulnerability in spring (CVE-2026-59313)
vulnerability in spring (CVE-2026-59313). Successful exploitation can lead to full system takeover.
CVE-2026-47890 Vulnerability in spring (CVE-2026-47890)
vulnerability in spring (CVE-2026-47890). Successful exploitation can lead to full system takeover.
CVE-2026-54511 Vulnerability in @logtape/syslog (CVE-2026-54511)
vulnerability in @logtape/syslog (CVE-2026-54511). Data can be tampered with by attackers. Mitigation: upgrade to `1.3.11` or later.
CVE-2026-77550 Vulnerability in CVE-2026-77550 (CVE-2026-77550)
vulnerability in CVE-2026-77550 (CVE-2026-77550). Successful exploitation can lead to full system takeover.
CVE-2026-77549 Vulnerability in CVE-2026-77549 (CVE-2026-77549)
vulnerability in CVE-2026-77549 (CVE-2026-77549). Successful exploitation can lead to full system takeover.
CVE-2026-77634 Vulnerability in CVE-2026-77634 (CVE-2026-77634)
vulnerability in CVE-2026-77634 (CVE-2026-77634). Risk of unauthorized operations or information disclosure.
CVE-2026-75922 Vulnerability in CVE-2026-75922 (CVE-2026-75922)
vulnerability in CVE-2026-75922 (CVE-2026-75922). Risk of unauthorized operations or information disclosure.
CVE-2026-74866 Vulnerability in CVE-2026-74866 (CVE-2026-74866)
vulnerability in CVE-2026-74866 (CVE-2026-74866). Risk of unauthorized operations or information disclosure.
CVE-2026-75484 Vulnerability in CVE-2026-75484 (CVE-2026-75484)
vulnerability in CVE-2026-75484 (CVE-2026-75484). Risk of unauthorized operations or information disclosure.
CVE-2026-71573 Vulnerability in CVE-2026-71573 (CVE-2026-71573)
vulnerability in CVE-2026-71573 (CVE-2026-71573). Risk of unauthorized operations or information disclosure.
CVE-2026-71572 Vulnerability in CVE-2026-71572 (CVE-2026-71572)
vulnerability in CVE-2026-71572 (CVE-2026-71572). Risk of unauthorized operations or information disclosure.
CVE-2026-45125 Vulnerability in CVE-2026-45125 (CVE-2026-45125)
vulnerability in CVE-2026-45125 (CVE-2026-45125). Risk of unauthorized operations or information disclosure.
CVE-2026-53788 Vulnerability in CVE-2026-53788 (CVE-2026-53788)
vulnerability in CVE-2026-53788 (CVE-2026-53788). Risk of unauthorized operations or information disclosure.
CVE-2026-16455 Vulnerability in CVE-2026-16455 (CVE-2026-16455)
vulnerability in CVE-2026-16455 (CVE-2026-16455). Risk of unauthorized operations or information disclosure.
CVE-2026-72913 Command Injection in CVE-2026-72913 (CVE-2026-72913)
command injection in CVE-2026-72913 (CVE-2026-72913). Risk of unauthorized operations or information disclosure.
CVE-2026-72590 Vulnerability in CVE-2026-72590 (CVE-2026-72590)
vulnerability in CVE-2026-72590 (CVE-2026-72590). Successful exploitation can lead to full system takeover.
CVE-2026-61477 Vulnerability in CVE-2026-61477 (CVE-2026-61477)
vulnerability in CVE-2026-61477 (CVE-2026-61477). Risk of unauthorized operations or information disclosure.
CVE-2026-0673 Vulnerability in wordpress (CVE-2026-0673)
vulnerability in wordpress (CVE-2026-0673). Risk of unauthorized operations or information disclosure. Exploitable via ``element_pack_contact_form``.
CVE-2026-71311 Vulnerability in github.com/rclone/rclone (CVE-2026-71311)
vulnerability in github.com/rclone/rclone (CVE-2026-71311). Data can be tampered with by attackers. Exploitable via ``DELE``. Mitigation: upgrade to `1.75.0` or later.
CVE-2026-70615 Vulnerability in CVE-2026-70615 (CVE-2026-70615)
vulnerability in CVE-2026-70615 (CVE-2026-70615). Successful exploitation can lead to full system takeover.
CVE-2026-65636 Vulnerability in CVE-2026-65636 (CVE-2026-65636)
vulnerability in CVE-2026-65636 (CVE-2026-65636). Risk of unauthorized operations or information disclosure.
CVE-2026-44092 Vulnerability in CVE-2026-44092 (CVE-2026-44092)
vulnerability in CVE-2026-44092 (CVE-2026-44092). Data can be tampered with by attackers.
CVE-2026-15157 Vulnerability in undici (CVE-2026-15157)
vulnerability in undici (CVE-2026-15157). Risk of unauthorized operations or information disclosure. Exploitable via ``body.type``. Mitigation: upgrade to `6.24.0` or later.
CVE-2026-12357 Vulnerability in CVE-2026-12357 (CVE-2026-12357)
vulnerability in CVE-2026-12357 (CVE-2026-12357). Successful exploitation can lead to full system takeover.
CVE-2026-57511 Vulnerability in CVE-2026-57511 (CVE-2026-57511)
vulnerability in CVE-2026-57511 (CVE-2026-57511). Risk of unauthorized operations or information disclosure.
CVE-2026-16313 Vulnerability in CVE-2026-16313 (CVE-2026-16313)
vulnerability in CVE-2026-16313 (CVE-2026-16313). Successful exploitation can lead to full system takeover.
CVE-2026-59921 Vulnerability in io.netty:netty-codec-http (CVE-2026-59921)
vulnerability in io.netty:netty-codec-http (CVE-2026-59921). Data can be tampered with by attackers. Exploitable via ``HttpPostRequestEncoder``. Mitigation: upgrade to `4.1.136.Final` or later.
CVE-2026-59920 Vulnerability in io.netty:netty-codec-stomp (CVE-2026-59920)
vulnerability in io.netty:netty-codec-stomp (CVE-2026-59920). Data can be tampered with by attackers. Exploitable via ``StompSubframeEncoder``. Mitigation: upgrade to `4.1.136.Final` or later.
CVE-2026-59919 Vulnerability in io.netty:netty-codec-haproxy (CVE-2026-59919)
vulnerability in io.netty:netty-codec-haproxy (CVE-2026-59919). Data can be tampered with by attackers. Exploitable via ``sourceAddress``. Mitigation: upgrade to `4.1.136.Final` or later.
CVE-2026-15429 Vulnerability in privilege-escalation (CVE-2026-15429)
vulnerability in privilege-escalation (CVE-2026-15429). Successful exploitation can lead to full system takeover.
CVE-2026-53533 Command Injection in aiosmtplib (CVE-2026-53533)
command injection in aiosmtplib (CVE-2026-53533). Risk of unauthorized operations or information disclosure. Exploitable via ``aiosmtplib``. Mitigation: upgrade to `5.1.1` or later.
CVE-2026-12127 Vulnerability in wordpress (CVE-2026-12127)
vulnerability in wordpress (CVE-2026-12127). Risk of unauthorized operations or information disclosure.
CVE-2026-57281 Vulnerability in jenkins (CVE-2026-57281)
vulnerability in jenkins (CVE-2026-57281). Successful exploitation can lead to full system takeover.
CVE-2026-11373 Vulnerability in CVE-2026-11373 (CVE-2026-11373)
vulnerability in CVE-2026-11373 (CVE-2026-11373). Confidential information can be exposed externally.
CVE-2026-55766 Vulnerability in guzzlehttp/psr7 (CVE-2026-55766)
vulnerability in guzzlehttp/psr7 (CVE-2026-55766). Risk of unauthorized operations or information disclosure. Exploitable via ``Request``. Mitigation: upgrade to `2.12.1` or later.
CVE-2026-50188 Vulnerability in getkirby/cms (CVE-2026-50188)
vulnerability in getkirby/cms (CVE-2026-50188). Risk of unauthorized operations or information disclosure. Exploitable via ``headers``. Mitigation: upgrade to `5.4.4` or later.
CVE-2026-55603 Vulnerability in http-proxy-middleware (CVE-2026-55603)
vulnerability in http-proxy-middleware (CVE-2026-55603). Data can be tampered with by attackers. Exploitable via ``req.body``. Mitigation: upgrade to `4.1.1` or later.
CVE-2026-9679 Vulnerability in undici (CVE-2026-9679)
vulnerability in undici (CVE-2026-9679). Data can be tampered with by attackers. Exploitable via ``parseSetCookie``. Mitigation: upgrade to `8.5.0` or later.
CVE-2026-50269 Vulnerability in aiohttp (CVE-2026-50269)
vulnerability in aiohttp (CVE-2026-50269). Risk of unauthorized operations or information disclosure. Exploitable via ``Payload.headers``. Mitigation: upgrade to `3.14.0` or later.
CVE-2026-12143 Vulnerability in form-data (CVE-2026-12143)
vulnerability in form-data (CVE-2026-12143). Data can be tampered with by attackers. Exploitable via ``field``. Mitigation: upgrade to `4.0.6` or later.
CVE-2026-50629 Vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50629)
vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50629). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.7` or later.
CVE-2026-49214 Vulnerability in guzzlehttp/psr7 (CVE-2026-49214)
vulnerability in guzzlehttp/psr7 (CVE-2026-49214). Risk of unauthorized operations or information disclosure. Exploitable via ``Uri``. Mitigation: upgrade to `2.10.2` or later.
CVE-2026-50637 Vulnerability in pevans (CVE-2026-50637)
vulnerability in pevans (CVE-2026-50637). Data can be tampered with by attackers.
CVE-2026-50639 Vulnerability in pevans (CVE-2026-50639)
vulnerability in pevans (CVE-2026-50639). Risk of unauthorized operations or information disclosure.
CVE-2026-50638 Vulnerability in pevans (CVE-2026-50638)
vulnerability in pevans (CVE-2026-50638). Confidential information can be exposed externally.
CVE-2026-47242 Command Injection in net-imap (CVE-2026-47242)
command injection in net-imap (CVE-2026-47242). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.5.15` or later.
CVE-2026-47240 Command Injection in net-imap (CVE-2026-47240)
command injection in net-imap (CVE-2026-47240). Risk of unauthorized operations or information disclosure. Exploitable via ``IMAP4rev2``. Mitigation: upgrade to `0.5.15` or later.
CVE-2026-49756 Vulnerability in req (CVE-2026-49756)
vulnerability in req (CVE-2026-49756). Risk of unauthorized operations or information disclosure. Exploitable via ``name``. Mitigation: upgrade to `0.6.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →