Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-56053 |
|
Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions.
Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions.
|
| CVE-2026-57532 |
|
Vulnerability in CVE-2026-57532 (CVE-2026-57532)
vulnerability in CVE-2026-57532 (CVE-2026-57532). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56054 |
|
Subscriber Arbitrary File Deletion in JS Help Desk <= 3.1.1 versions.
Subscriber Arbitrary File Deletion in JS Help Desk <= 3.1.1 versions.
|
| CVE-2026-57437 |
|
Use-After-Free in nokogiri (CVE-2026-57437)
vulnerability in nokogiri (CVE-2026-57437). Risk of unauthorized operations or information disclosure. Exploitable via ``XPathContext``. Mitigation: upgrade to `1.19.4` or later.
|
| CVE-2026-57436 |
|
Use-After-Free in nokogiri (CVE-2026-57436)
vulnerability in nokogiri (CVE-2026-57436). Risk of unauthorized operations or information disclosure. Exploitable via ``TypeError``. Mitigation: upgrade to `1.19.4` or later.
|
| CVE-2026-57435 |
|
Use-After-Free in nokogiri (CVE-2026-57435)
vulnerability in nokogiri (CVE-2026-57435). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.19.4` or later.
|
| CVE-2026-57434 |
|
Vulnerability in nokogiri (CVE-2026-57434)
vulnerability in nokogiri (CVE-2026-57434). Risk of unauthorized operations or information disclosure. Exploitable via ``RuntimeError``. Mitigation: upgrade to `1.19.4` or later.
|
| CVE-2026-57236 |
|
Use-After-Free in nokogiri (CVE-2026-57236)
vulnerability in nokogiri (CVE-2026-57236). Risk of unauthorized operations or information disclosure. Exploitable via ``String``. Mitigation: upgrade to `1.19.4` or later.
|
| CVE-2026-57235 |
|
Out-of-Bounds Read in nokogiri (CVE-2026-57235)
vulnerability in nokogiri (CVE-2026-57235). Risk of unauthorized operations or information disclosure. Exploitable via ``NodeSet``. Mitigation: upgrade to `1.19.4` or later.
|
| CVE-2026-57234 |
|
Vulnerability in nokogiri (CVE-2026-57234)
vulnerability in nokogiri (CVE-2026-57234). Risk of unauthorized operations or information disclosure. Exploitable via ``NONET``. Mitigation: upgrade to `1.19.4` or later.
|
| CVE-2026-53275 |
|
Use-After-Free in c (CVE-2026-53275)
vulnerability in c (CVE-2026-53275). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53235 |
|
Vulnerability in c (CVE-2026-53235)
vulnerability in c (CVE-2026-53235). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53253 |
|
Out-of-Bounds Read in c (CVE-2026-53253)
vulnerability in c (CVE-2026-53253). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53260 |
|
Use-After-Free in c (CVE-2026-53260)
vulnerability in c (CVE-2026-53260). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53243 |
|
Vulnerability in c (CVE-2026-53243)
vulnerability in c (CVE-2026-53243). Risk of unauthorized operations or information disclosure. Exploitable via ``ids.cpu_id``.
|
| CVE-2026-53244 |
|
Vulnerability in c (CVE-2026-53244)
vulnerability in c (CVE-2026-53244). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53225 |
|
Vulnerability in c (CVE-2026-53225)
vulnerability in c (CVE-2026-53225). Confidential information can be exposed externally.
|
| CVE-2026-53214 |
|
Vulnerability in c (CVE-2026-53214)
vulnerability in c (CVE-2026-53214). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53207 |
|
Vulnerability in c (CVE-2026-53207)
vulnerability in c (CVE-2026-53207). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53229 |
|
Vulnerability in c (CVE-2026-53229)
vulnerability in c (CVE-2026-53229). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53223 |
|
Vulnerability in c (CVE-2026-53223)
vulnerability in c (CVE-2026-53223). Confidential information can be exposed externally.
|
| CVE-2026-53208 |
|
Vulnerability in c (CVE-2026-53208)
vulnerability in c (CVE-2026-53208). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53213 |
|
Vulnerability in c (CVE-2026-53213)
vulnerability in c (CVE-2026-53213). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53181 |
|
Vulnerability in c (CVE-2026-53181)
vulnerability in c (CVE-2026-53181). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53184 |
|
Vulnerability in c (CVE-2026-53184)
vulnerability in c (CVE-2026-53184). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53176 |
|
Vulnerability in c (CVE-2026-53176)
vulnerability in c (CVE-2026-53176). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53163 |
|
Vulnerability in c (CVE-2026-53163)
vulnerability in c (CVE-2026-53163). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53171 |
|
Vulnerability in c (CVE-2026-53171)
vulnerability in c (CVE-2026-53171). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53170 |
|
Vulnerability in c (CVE-2026-53170)
vulnerability in c (CVE-2026-53170). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53154 |
|
Vulnerability in c (CVE-2026-53154)
vulnerability in c (CVE-2026-53154). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53138 |
|
Out-of-Bounds Read in c (CVE-2026-53138)
vulnerability in c (CVE-2026-53138). Confidential information can be exposed externally.
|
| CVE-2026-10712 |
|
Cross-Site Scripting (XSS) in gitlab (CVE-2026-10712)
cross-site scripting in gitlab (CVE-2026-10712). Confidential information can be exposed externally. Mitigation: upgrade to `18.11.6, 19.0.3, 19.1.1` or later.
|
| CVE-2026-13311 |
|
Vulnerability in shell-quote (CVE-2026-13311)
vulnerability in shell-quote (CVE-2026-13311). Risk of unauthorized operations or information disclosure. Exploitable via `GET /ping`. Mitigation: upgrade to `1.9.0` or later.
|
| CVE-2026-57589 |
|
Use-After-Free in c (CVE-2026-57589)
vulnerability in c (CVE-2026-57589). Successful exploitation can lead to full system takeover.
|
| CVE-2025-60474 |
|
Vulnerability in c (CVE-2025-60474)
vulnerability in c (CVE-2025-60474). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-60473 |
|
Vulnerability in c (CVE-2025-60473)
vulnerability in c (CVE-2025-60473). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-60466 |
|
Use-After-Free in c (CVE-2025-60466)
vulnerability in c (CVE-2025-60466). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-60467 |
|
Use-After-Free in c (CVE-2025-60467)
vulnerability in c (CVE-2025-60467). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9772 |
|
OS Command Injection in unraid (CVE-2026-9772)
OS command injection in unraid (CVE-2026-9772). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9773 |
|
OS Command Injection in unraid (CVE-2026-9773)
OS command injection in unraid (CVE-2026-9773). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47110 |
|
Vulnerability in dos (CVE-2026-47110)
vulnerability in dos (CVE-2026-47110). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-60468 |
|
Vulnerability in c (CVE-2025-60468)
vulnerability in c (CVE-2025-60468). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40079 |
|
OS Command Injection in cacti (CVE-2026-40079)
OS command injection in cacti (CVE-2026-40079). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39955 |
|
SQL Injection in sqli (CVE-2026-39955)
SQL injection in sqli (CVE-2026-39955). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39948 |
|
SQL Injection in cacti (CVE-2026-39948)
SQL injection in cacti (CVE-2026-39948). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39900 |
|
Cross-Site Scripting (XSS) in cacti (CVE-2026-39900)
cross-site scripting in cacti (CVE-2026-39900). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39899 |
|
Path Traversal in path-traversal (CVE-2026-39899)
path traversal in path-traversal (CVE-2026-39899). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54158 |
|
Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-54158)
cross-site scripting in github.com/siyuan-note/siyuan/kernel (CVE-2026-54158). Successful exploitation can lead to full system takeover. Exploitable via ``genAVValueHTML``. Mitigation: upgrade to `0.0.0-20260628153353-2d5d72223df4` or later.
|
| CVE-2026-54070 |
|
Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-54070)
cross-site scripting in github.com/siyuan-note/siyuan/kernel (CVE-2026-54070). Confidential information can be exposed externally. Exploitable via ``renderPackageREADME``. Mitigation: upgrade to `0.0.0-20260628153353-2d5d72223df4` or later.
|
| CVE-2026-54067 |
|
Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-54067)
cross-site scripting in github.com/siyuan-note/siyuan/kernel (CVE-2026-54067). Successful exploitation can lead to full system takeover. Exploitable via ``insertAdjacentHTML``. Mitigation: upgrade to `0.0.0-20260628153353-2d5d72223df4` or later.
|