Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2018-25409 |
|
Unrestricted File Upload in CVE-2018-25409 (CVE-2018-25409)
vulnerability in CVE-2018-25409 (CVE-2018-25409). Successful exploitation can lead to full system takeover.
|
| CVE-2018-25410 |
|
SQL Injection in sqli (CVE-2018-25410)
SQL injection in sqli (CVE-2018-25410). Confidential information can be exposed externally.
|
| CVE-2018-25411 |
|
SQL Injection in sqli (CVE-2018-25411)
SQL injection in sqli (CVE-2018-25411). Confidential information can be exposed externally.
|
| CVE-2018-25412 |
|
Vulnerability in deltasql-project (CVE-2018-25412)
vulnerability in deltasql-project (CVE-2018-25412). Successful exploitation can lead to full system takeover.
|
| CVE-2018-25406 |
|
SQL Injection in sqli (CVE-2018-25406)
SQL injection in sqli (CVE-2018-25406). Confidential information can be exposed externally.
|
| CVE-2018-25405 |
|
SQL Injection in sqli (CVE-2018-25405)
SQL injection in sqli (CVE-2018-25405). Confidential information can be exposed externally.
|
| CVE-2026-10117 |
|
Vulnerability in c (CVE-2026-10117)
vulnerability in c (CVE-2026-10117). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10116 |
|
Vulnerability in c (CVE-2026-10116)
vulnerability in c (CVE-2026-10116). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10114 |
|
Buffer Overflow in c (CVE-2026-10114)
vulnerability in c (CVE-2026-10114). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10115 |
|
Vulnerability in c (CVE-2026-10115)
vulnerability in c (CVE-2026-10115). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10113 |
|
Vulnerability in c (CVE-2026-10113)
vulnerability in c (CVE-2026-10113). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10110 |
|
Vulnerability in sqli (CVE-2026-10110)
vulnerability in sqli (CVE-2026-10110). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47407 |
|
Privilege Escalation in praisonai-platform (CVE-2026-47407)
vulnerability in praisonai-platform (CVE-2026-47407). Risk of unauthorized operations or information disclosure. Exploitable via `GET /agents/{agent_id}`. Mitigation: upgrade to `0.1.4` or later.
|
| CVE-2026-47391 |
|
Vulnerability in PraisonAI (CVE-2026-47391)
vulnerability in PraisonAI (CVE-2026-47391). Successful exploitation can lead to full system takeover. Exploitable via `POST /a2a`. Mitigation: upgrade to `4.6.40` or later.
|
| CVE-2026-47392 |
|
Vulnerability in praisonaiagents (CVE-2026-47392)
vulnerability in praisonaiagents (CVE-2026-47392). Successful exploitation can lead to full system takeover. Exploitable via ``print.__self__``. Mitigation: upgrade to `1.6.40` or later.
|
| CVE-2026-47233 |
|
Vulnerability in admidio/admidio (CVE-2026-47233)
vulnerability in admidio/admidio (CVE-2026-47233). Data can be tampered with by attackers. Exploitable via ``d37ca6b27b9674238e58491cf7ba292e66898f15``. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47232 |
|
Cross-Site Request Forgery (CSRF) in admidio/admidio (CVE-2026-47232)
vulnerability in admidio/admidio (CVE-2026-47232). Risk of unauthorized operations or information disclosure. Exploitable via ``adm_csrf_token``. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47231 |
|
Vulnerability in admidio/admidio (CVE-2026-47231)
vulnerability in admidio/admidio (CVE-2026-47231). Confidential information can be exposed externally. Exploitable via `GET /modules/documents-files.php`. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47230 |
|
Vulnerability in admidio/admidio (CVE-2026-47230)
vulnerability in admidio/admidio (CVE-2026-47230). Data can be tampered with by attackers. Exploitable via `GET /modules/documents-files.php`. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47229 |
|
Cross-Site Request Forgery (CSRF) in admidio/admidio (CVE-2026-47229)
vulnerability in admidio/admidio (CVE-2026-47229). Risk of unauthorized operations or information disclosure. Exploitable via `GET /modules/sso/clients.php`. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47228 |
|
Cross-Site Request Forgery (CSRF) in admidio/admidio (CVE-2026-47228)
vulnerability in admidio/admidio (CVE-2026-47228). Data can be tampered with by attackers. Exploitable via `GET /modules/registration.php`. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47227 |
|
Vulnerability in admidio/admidio (CVE-2026-47227)
vulnerability in admidio/admidio (CVE-2026-47227). Data can be tampered with by attackers. Exploitable via `POST /modules/categories.php`. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47226 |
|
Vulnerability in admidio/admidio (CVE-2026-47226)
vulnerability in admidio/admidio (CVE-2026-47226). Data can be tampered with by attackers. Exploitable via ``folder_uuid``. Mitigation: upgrade to `5.0.7` or later.
|
| CVE-2026-47212 |
|
Vulnerability in symfony/symfony (CVE-2026-47212)
vulnerability in symfony/symfony (CVE-2026-47212). Risk of unauthorized operations or information disclosure. Exploitable via ``framework.trusted_proxies``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-47184 |
|
Vulnerability in zeroconf (CVE-2026-47184)
vulnerability in zeroconf (CVE-2026-47184). Risk of unauthorized operations or information disclosure. Exploitable via ``DNSCache._async_add``. Mitigation: upgrade to `0.149.7` or later.
|
| CVE-2026-4387 |
|
Vulnerability in c (CVE-2026-4387)
vulnerability in c (CVE-2026-4387). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48810 |
|
Vulnerability in laravel (CVE-2026-48810)
vulnerability in laravel (CVE-2026-48810). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.221` or later.
|
| CVE-2026-48811 |
|
Vulnerability in laravel (CVE-2026-48811)
vulnerability in laravel (CVE-2026-48811). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.221` or later.
|
| CVE-2026-47123 |
|
Vulnerability in laravel (CVE-2026-47123)
vulnerability in laravel (CVE-2026-47123). Data can be tampered with by attackers. Mitigation: upgrade to `1.8.220` or later.
|
| CVE-2026-48555 |
|
SSRF (Server-Side Request Forgery) in spatie/laravel-medialibrary (CVE-2026-48555)
SSRF in spatie/laravel-medialibrary (CVE-2026-48555). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.23.0` or later.
|
| CVE-2026-48557 |
|
Spatie Laravel Media Library contains a file upload restriction bypass
Spatie Laravel Media Library contains a file upload restriction bypass
|
| CVE-2026-46527 |
|
Vulnerability in c (CVE-2026-46527)
vulnerability in c (CVE-2026-46527). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.44.0` or later.
|
| CVE-2026-45700 |
|
Out-of-Bounds Write in c (CVE-2026-45700)
out-of-bounds write in c (CVE-2026-45700). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.26.0` or later.
|
| CVE-2026-45352 |
|
Vulnerability in c (CVE-2026-45352)
vulnerability in c (CVE-2026-45352). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.43.4` or later.
|
| CVE-2026-45372 |
|
Vulnerability in c (CVE-2026-45372)
vulnerability in c (CVE-2026-45372). Data can be tampered with by attackers. Mitigation: upgrade to `0.44.0` or later.
|
| CVE-2026-45613 |
|
Out-of-Bounds Read in c (CVE-2026-45613)
vulnerability in c (CVE-2026-45613). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45294 |
|
Vulnerability in laravel (CVE-2026-45294)
vulnerability in laravel (CVE-2026-45294). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.219` or later.
|
| CVE-2026-45151 |
|
Vulnerability in c (CVE-2026-45151)
vulnerability in c (CVE-2026-45151). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45324 |
|
Vulnerability in c (CVE-2026-45324)
vulnerability in c (CVE-2026-45324). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44287 |
|
Code Injection in CVE-2026-44287 (CVE-2026-44287)
code injection in CVE-2026-44287 (CVE-2026-44287). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.15.0-beta1` or later.
|
| CVE-2026-47183 |
|
Vulnerability in zeroconf (CVE-2026-47183)
vulnerability in zeroconf (CVE-2026-47183). Risk of unauthorized operations or information disclosure. Exploitable via ``DNSIncoming._log_exception_debug``. Mitigation: upgrade to `0.149.6` or later.
|
| CVE-2026-47180 |
|
Vulnerability in zeroconf (CVE-2026-47180)
vulnerability in zeroconf (CVE-2026-47180). Risk of unauthorized operations or information disclosure. Exploitable via ``DNSIncoming._decode_labels_at_offset``. Mitigation: upgrade to `0.149.5` or later.
|
| CVE-2026-46705 |
|
Authentication Bypass in russh (CVE-2026-46705)
authentication bypass in russh (CVE-2026-46705). Risk of unauthorized operations or information disclosure. Exploitable via ``russh``. Mitigation: upgrade to `0.61.0` or later.
|
| CVE-2026-46702 |
|
Vulnerability in russh (CVE-2026-46702)
vulnerability in russh (CVE-2026-46702). Risk of unauthorized operations or information disclosure. Exploitable via ``russh``. Mitigation: upgrade to `0.61.1` or later.
|
| CVE-2026-47248 |
|
Vulnerability in parse-server (CVE-2026-47248)
vulnerability in parse-server (CVE-2026-47248). Risk of unauthorized operations or information disclosure. Exploitable via ``IntrospectionControlPlugin``. Mitigation: upgrade to `8.6.78` or later.
|
| CVE-2026-46344 |
|
Out-of-Bounds Read in c (CVE-2026-46344)
vulnerability in c (CVE-2026-46344). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.16.0` or later.
|
| CVE-2026-44518 |
|
Vulnerability in c (CVE-2026-44518)
vulnerability in c (CVE-2026-44518). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.16.0` or later.
|
| CVE-2026-47141 |
|
Vulnerability in vm2 (CVE-2026-47141)
vulnerability in vm2 (CVE-2026-47141). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `3.11.4` or later.
|
| CVE-2026-45668 |
|
Path Traversal in path-traversal (CVE-2026-45668)
path traversal in path-traversal (CVE-2026-45668). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.102.2` or later.
|
| CVE-2026-45628 |
|
Vulnerability in c (CVE-2026-45628)
vulnerability in c (CVE-2026-45628). Confidential information can be exposed externally.
|