Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Clear
ID Title
CVE-2025-68710 Vulnerability in c (CVE-2025-68710)
vulnerability in c (CVE-2025-68710). Risk of unauthorized operations or information disclosure.
CVE-2026-9572 Vulnerability in c (CVE-2026-9572)
vulnerability in c (CVE-2026-9572). Risk of unauthorized operations or information disclosure.
CVE-2026-9566 Cross-Site Scripting (XSS) in CVE-2026-9566 (CVE-2026-9566)
cross-site scripting in CVE-2026-9566 (CVE-2026-9566). Risk of unauthorized operations or information disclosure.
CVE-2026-9567 Vulnerability in c (CVE-2026-9567)
vulnerability in c (CVE-2026-9567). Risk of unauthorized operations or information disclosure.
CVE-2026-48695 OS Command Injection in pavel-odintsov (CVE-2026-48695)
OS command injection in pavel-odintsov (CVE-2026-48695). Confidential information can be exposed externally. Exploitable via ``date``.
CVE-2026-48694 Command Injection in pavel-odintsov (CVE-2026-48694)
command injection in pavel-odintsov (CVE-2026-48694). Confidential information can be exposed externally.
CVE-2026-46624 OS Command Injection in sqli (CVE-2026-46624)
OS command injection in sqli (CVE-2026-46624). Successful exploitation can lead to full system takeover.
CVE-2026-44667 Cross-Site Scripting (XSS) in CVE-2026-44667 (CVE-2026-44667)
cross-site scripting in CVE-2026-44667 (CVE-2026-44667). Confidential information can be exposed externally. Mitigation: upgrade to `1.8.3` or later.
CVE-2026-44669 Cross-Site Scripting (XSS) in CVE-2026-44669 (CVE-2026-44669)
cross-site scripting in CVE-2026-44669 (CVE-2026-44669). Confidential information can be exposed externally. Mitigation: upgrade to `1.8.3` or later.
CVE-2026-39964 Cross-Site Scripting (XSS) in @typebot.io/js (CVE-2026-39964)
cross-site scripting in @typebot.io/js (CVE-2026-39964). Risk of unauthorized operations or information disclosure. Exploitable via ``href``. Mitigation: upgrade to `0.10.1` or later.
CVE-2026-28445 Cross-Site Scripting (XSS) in @typebot.io/js (CVE-2026-28445)
cross-site scripting in @typebot.io/js (CVE-2026-28445). Confidential information can be exposed externally. Exploitable via ``customIcon.svg``. Mitigation: upgrade to `0.10.1` or later.
CVE-2026-48693 Vulnerability in cpp (CVE-2026-48693)
vulnerability in cpp (CVE-2026-48693). Data can be tampered with by attackers.
CVE-2026-48697 Vulnerability in cpp (CVE-2026-48697)
vulnerability in cpp (CVE-2026-48697). Confidential information can be exposed externally.
CVE-2026-44729 Cross-Site Scripting (XSS) in twenty (CVE-2026-44729)
cross-site scripting in twenty (CVE-2026-44729). Confidential information can be exposed externally.
CVE-2026-44723 OS Command Injection in vowpalwabbit (CVE-2026-44723)
OS command injection in vowpalwabbit (CVE-2026-44723). Risk of unauthorized operations or information disclosure.
CVE-2026-43981 Vulnerability in c (CVE-2026-43981)
vulnerability in c (CVE-2026-43981). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.17.6` or later.
CVE-2025-36148 Cross-Site Scripting (XSS) in ibm (CVE-2025-36148)
cross-site scripting in ibm (CVE-2025-36148). Risk of unauthorized operations or information disclosure.
CVE-2025-36126 Cross-Site Scripting (XSS) in ibm (CVE-2025-36126)
cross-site scripting in ibm (CVE-2025-36126). Risk of unauthorized operations or information disclosure.
CVE-2026-48692 Vulnerability in cpp (CVE-2026-48692)
vulnerability in cpp (CVE-2026-48692). Confidential information can be exposed externally.
CVE-2026-48683 Out-of-Bounds Read in cpp (CVE-2026-48683)
vulnerability in cpp (CVE-2026-48683). Confidential information can be exposed externally.
CVE-2026-48686 Vulnerability in cpp (CVE-2026-48686)
vulnerability in cpp (CVE-2026-48686). Successful exploitation can lead to full system takeover.
CVE-2026-48688 Out-of-Bounds Read in cpp (CVE-2026-48688)
vulnerability in cpp (CVE-2026-48688). Confidential information can be exposed externally.
CVE-2026-48687 OS Command Injection in c (CVE-2026-48687)
OS command injection in c (CVE-2026-48687). Successful exploitation can lead to full system takeover. Exploitable via ``date``.
CVE-2026-48684 Out-of-Bounds Read in c (CVE-2026-48684)
vulnerability in c (CVE-2026-48684). Risk of unauthorized operations or information disclosure.
CVE-2026-45247 KEV [KEV] Unsafe Deserialization in Mirasvit full-page-cache-warmer (CVE-2026-45247)
vulnerability in Mirasvit full-page-cache-warmer (CVE-2026-45247). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-46368 Command Injection in c (CVE-2026-46368)
command injection in c (CVE-2026-46368). Successful exploitation can lead to full system takeover.
CVE-2026-42785 Code Injection in CVE-2026-42785 (CVE-2026-42785)
code injection in CVE-2026-42785 (CVE-2026-42785). Successful exploitation can lead to full system takeover.
CVE-2026-9542 Vulnerability in sqli (CVE-2026-9542)
vulnerability in sqli (CVE-2026-9542). Risk of unauthorized operations or information disclosure.
CVE-2026-9541 Buffer Overflow in cpp (CVE-2026-9541)
vulnerability in cpp (CVE-2026-9541). Risk of unauthorized operations or information disclosure.
CVE-2026-39661 Vulnerability in CVE-2026-39661 (CVE-2026-39661)
vulnerability in CVE-2026-39661 (CVE-2026-39661). Successful exploitation can lead to full system takeover.
CVE-2026-9495 Vulnerability in @koa/router (CVE-2026-9495)
vulnerability in @koa/router (CVE-2026-9495). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `15.0.0` or later.
CVE-2026-9496 Vulnerability in pacote (CVE-2026-9496)
vulnerability in pacote (CVE-2026-9496). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `21.5.1` or later.
CVE-2026-9530 Buffer Overflow in c (CVE-2026-9530)
vulnerability in c (CVE-2026-9530). Risk of unauthorized operations or information disclosure.
CVE-2026-9518 Cross-Site Scripting (XSS) in CVE-2026-9518 (CVE-2026-9518)
cross-site scripting in CVE-2026-9518 (CVE-2026-9518). Risk of unauthorized operations or information disclosure.
CVE-2026-9526 Vulnerability in sqli (CVE-2026-9526)
vulnerability in sqli (CVE-2026-9526). Risk of unauthorized operations or information disclosure.
CVE-2026-9527 Cross-Site Scripting (XSS) in c (CVE-2026-9527)
cross-site scripting in c (CVE-2026-9527). Risk of unauthorized operations or information disclosure.
CVE-2026-9528 Vulnerability in sqli (CVE-2026-9528)
vulnerability in sqli (CVE-2026-9528). Risk of unauthorized operations or information disclosure.
CVE-2026-9525 Vulnerability in sqli (CVE-2026-9525)
vulnerability in sqli (CVE-2026-9525). Risk of unauthorized operations or information disclosure.
CVE-2026-9517 Vulnerability in CVE-2026-9517 (CVE-2026-9517)
vulnerability in CVE-2026-9517 (CVE-2026-9517). Risk of unauthorized operations or information disclosure.
CVE-2026-9520 Cross-Site Scripting (XSS) in blitz (CVE-2026-9520)
cross-site scripting in blitz (CVE-2026-9520). Risk of unauthorized operations or information disclosure.
CVE-2026-9529 Vulnerability in c (CVE-2026-9529)
vulnerability in c (CVE-2026-9529). Risk of unauthorized operations or information disclosure.
CVE-2026-8376 Vulnerability in c (CVE-2026-8376)
vulnerability in c (CVE-2026-8376). Successful exploitation can lead to full system takeover.
CVE-2026-9504 Buffer Overflow in c (CVE-2026-9504)
vulnerability in c (CVE-2026-9504). Risk of unauthorized operations or information disclosure.
CVE-2026-9501 Vulnerability in c (CVE-2026-9501)
vulnerability in c (CVE-2026-9501). Risk of unauthorized operations or information disclosure.
CVE-2026-9502 Buffer Overflow in c (CVE-2026-9502)
vulnerability in c (CVE-2026-9502). Risk of unauthorized operations or information disclosure.
CVE-2026-9500 Buffer Overflow in c (CVE-2026-9500)
vulnerability in c (CVE-2026-9500). Risk of unauthorized operations or information disclosure.
CVE-2026-9503 Vulnerability in c (CVE-2026-9503)
vulnerability in c (CVE-2026-9503). Risk of unauthorized operations or information disclosure.
CVE-2026-9485 Cross-Site Scripting (XSS) in CVE-2026-9485 (CVE-2026-9485)
cross-site scripting in CVE-2026-9485 (CVE-2026-9485). Risk of unauthorized operations or information disclosure.
CVE-2026-9484 Vulnerability in CVE-2026-9484 (CVE-2026-9484)
vulnerability in CVE-2026-9484 (CVE-2026-9484). Risk of unauthorized operations or information disclosure.
CVE-2026-9483 Vulnerability in CVE-2026-9483 (CVE-2026-9483)
vulnerability in CVE-2026-9483 (CVE-2026-9483). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →