Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-44336 |
|
Vulnerability in praison (CVE-2026-44336)
vulnerability in praison (CVE-2026-44336). Successful exploitation can lead to full system takeover. Exploitable via ``praisonai.rules.create``.
|
| CVE-2026-44338 |
|
Vulnerability in PraisonAI (CVE-2026-44338)
vulnerability in PraisonAI (CVE-2026-44338). Risk of unauthorized operations or information disclosure. Exploitable via `POST /chat`. Mitigation: upgrade to `4.6.34` or later.
|
| CVE-2026-43345 |
|
Vulnerability in c (CVE-2026-43345)
vulnerability in c (CVE-2026-43345). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43349 |
|
Vulnerability in c (CVE-2026-43349)
vulnerability in c (CVE-2026-43349). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43337 |
|
Vulnerability in c (CVE-2026-43337)
vulnerability in c (CVE-2026-43337). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43338 |
|
Vulnerability in c (CVE-2026-43338)
vulnerability in c (CVE-2026-43338). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43327 |
|
Vulnerability in c (CVE-2026-43327)
vulnerability in c (CVE-2026-43327). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43331 |
|
Vulnerability in c (CVE-2026-43331)
vulnerability in c (CVE-2026-43331). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43322 |
|
Use-After-Free in c (CVE-2026-43322)
vulnerability in c (CVE-2026-43322). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43311 |
|
Vulnerability in c (CVE-2026-43311)
vulnerability in c (CVE-2026-43311). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43315 |
|
Vulnerability in c (CVE-2026-43315)
vulnerability in c (CVE-2026-43315). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43299 |
|
Vulnerability in c (CVE-2026-43299)
vulnerability in c (CVE-2026-43299). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43301 |
|
Vulnerability in c (CVE-2026-43301)
vulnerability in c (CVE-2026-43301). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43302 |
|
Vulnerability in c (CVE-2026-43302)
vulnerability in c (CVE-2026-43302). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43290 |
|
Vulnerability in c (CVE-2026-43290)
vulnerability in c (CVE-2026-43290). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43292 |
|
Vulnerability in c (CVE-2026-43292)
vulnerability in c (CVE-2026-43292). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43293 |
|
Vulnerability in c (CVE-2026-43293)
vulnerability in c (CVE-2026-43293). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43298 |
|
Vulnerability in c (CVE-2026-43298)
vulnerability in c (CVE-2026-43298). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43288 |
|
Vulnerability in c (CVE-2026-43288)
vulnerability in c (CVE-2026-43288). Risk of unauthorized operations or information disclosure. Exploitable via ``DOUBLE_CHECK``.
|
| CVE-2026-43289 |
|
Vulnerability in c (CVE-2026-43289)
vulnerability in c (CVE-2026-43289). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41507 |
|
Code Injection in remote (CVE-2026-41507)
code injection in remote (CVE-2026-41507). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41512 |
|
Code Injection in gem (CVE-2026-41512)
code injection in gem (CVE-2026-41512). Successful exploitation can lead to full system takeover. Exploitable via `POST /targets/auto_detect_selectors`.
|
| CVE-2026-41423 |
|
SSRF (Server-Side Request Forgery) in @angular/platform-server (CVE-2026-41423)
SSRF in @angular/platform-server (CVE-2026-41423). Risk of unauthorized operations or information disclosure. Exploitable via ``evil.com``.
|
| CVE-2026-41497 |
|
Command Injection in praison (CVE-2026-41497)
command injection in praison (CVE-2026-41497). Successful exploitation can lead to full system takeover. Exploitable via ``bash``. Mitigation: upgrade to `>= 4.6.9` or later.
|
| CVE-2026-41493 |
|
Path Traversal in yard (CVE-2026-41493)
path traversal in yard (CVE-2026-41493). Confidential information can be exposed externally. Mitigation: upgrade to `0.9.42` or later.
|
| CVE-2025-71297 |
|
Vulnerability in c (CVE-2025-71297)
vulnerability in c (CVE-2025-71297). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71298 |
|
Vulnerability in c (CVE-2025-71298)
vulnerability in c (CVE-2025-71298). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71299 |
|
Vulnerability in c (CVE-2025-71299)
vulnerability in c (CVE-2025-71299). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71301 |
|
Vulnerability in c (CVE-2025-71301)
vulnerability in c (CVE-2025-71301). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71296 |
|
Vulnerability in c (CVE-2025-71296)
vulnerability in c (CVE-2025-71296). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-13836 |
|
Vulnerability in python (CVE-2025-13836)
vulnerability in python (CVE-2025-13836). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.10.20, 3.11.15, 3.12.13, 3.13.11, 3.14.1` or later.
|
| CVE-2026-5127 |
|
Unsafe Deserialization in wordpress (CVE-2026-5127)
vulnerability in wordpress (CVE-2026-5127). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32178 |
|
Vulnerability in dotnet (CVE-2026-32178)
vulnerability in dotnet (CVE-2026-32178). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.26, 9.0.15, 10.0.6` or later.
|
| CVE-2026-26171 |
|
Vulnerability in dotnet (CVE-2026-26171)
vulnerability in dotnet (CVE-2026-26171). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.26, 9.0.15, 10.0.6` or later.
|
| CVE-2013-10075 |
|
Vulnerability in apache (CVE-2013-10075)
vulnerability in apache (CVE-2013-10075). Confidential information can be exposed externally.
|
| CVE-2026-8149 |
|
Vulnerability in org.bouncycastle:bc-fips (CVE-2026-8149)
vulnerability in org.bouncycastle:bc-fips (CVE-2026-8149). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.73.11` or later.
|
| CVE-2025-67886 |
|
Unrestricted File Upload in CVE-2025-67886 (CVE-2025-67886)
vulnerability in CVE-2025-67886 (CVE-2025-67886). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-67887 |
|
Code Injection in CVE-2025-67887 (CVE-2025-67887)
code injection in CVE-2025-67887 (CVE-2025-67887). Successful exploitation can lead to full system takeover.
|
| CVE-2025-67888 |
|
OS Command Injection in CVE-2025-67888 (CVE-2025-67888)
OS command injection in CVE-2025-67888 (CVE-2025-67888). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-69690 |
|
Unsafe Deserialization in deserialization (CVE-2025-69690)
vulnerability in deserialization (CVE-2025-69690). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69691 |
|
Vulnerability in pfsense (CVE-2025-69691)
vulnerability in pfsense (CVE-2025-69691). Successful exploitation can lead to full system takeover.
|
| CVE-2024-51092 |
|
OS Command Injection in command-injection (CVE-2024-51092)
OS command injection in command-injection (CVE-2024-51092). Confidential information can be exposed externally. Exploitable via ``version_netsnmp``.
|
| CVE-2024-33288 |
|
SQL Injection in sqli (CVE-2024-33288)
SQL injection in sqli (CVE-2024-33288). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-33722 |
|
SQL Injection in sqli (CVE-2024-33722)
SQL injection in sqli (CVE-2024-33722). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-33724 |
|
Cross-Site Scripting (XSS) in CVE-2024-33724 (CVE-2024-33724)
cross-site scripting in CVE-2024-33724 (CVE-2024-33724). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-47268 |
|
Command Injection in cpp (CVE-2023-47268)
command injection in cpp (CVE-2023-47268). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42278 |
|
Vulnerability in CVE-2026-42278 (CVE-2026-42278)
vulnerability in CVE-2026-42278 (CVE-2026-42278). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8133 |
|
Vulnerability in sqli (CVE-2026-8133)
vulnerability in sqli (CVE-2026-8133). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8136 |
|
Cross-Site Scripting (XSS) in CVE-2026-8136 (CVE-2026-8136)
cross-site scripting in CVE-2026-8136 (CVE-2026-8136). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8132 |
|
Vulnerability in sqli (CVE-2026-8132)
vulnerability in sqli (CVE-2026-8132). Risk of unauthorized operations or information disclosure.
|