Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Clear
ID Title
CVE-2026-34829 Vulnerability in rack (CVE-2026-34829)
vulnerability in rack (CVE-2026-34829). Risk of unauthorized operations or information disclosure. Exploitable via ``BoundedIO``. Mitigation: upgrade to `3.2.6` or later.
CVE-2026-34763 Vulnerability in rack (CVE-2026-34763)
vulnerability in rack (CVE-2026-34763). Risk of unauthorized operations or information disclosure. Exploitable via ``root``. Mitigation: upgrade to `3.2.6` or later.
CVE-2026-34230 Vulnerability in rack (CVE-2026-34230)
vulnerability in rack (CVE-2026-34230). Risk of unauthorized operations or information disclosure. Exploitable via ``expanded_accept_encoding``. Mitigation: upgrade to `3.2.6` or later.
CVE-2026-32762 Vulnerability in rack (CVE-2026-32762)
vulnerability in rack (CVE-2026-32762). Risk of unauthorized operations or information disclosure. Exploitable via ``Forwarded``. Mitigation: upgrade to `3.2.6` or later.
CVE-2026-26962 Vulnerability in rack (CVE-2026-26962)
vulnerability in rack (CVE-2026-26962). Risk of unauthorized operations or information disclosure. Exploitable via ``filename``. Mitigation: upgrade to `3.2.6` or later.
CVE-2026-26961 Vulnerability in rack (CVE-2026-26961)
vulnerability in rack (CVE-2026-26961). Risk of unauthorized operations or information disclosure. Exploitable via ``boundary``. Mitigation: upgrade to `3.2.6` or later.
CVE-2026-34827 Vulnerability in rack (CVE-2026-34827)
vulnerability in rack (CVE-2026-34827). Risk of unauthorized operations or information disclosure. Exploitable via ``name``. Mitigation: upgrade to `3.2.6` or later.
CVE-2026-35053 Vulnerability in hackerbay (CVE-2026-35053)
vulnerability in hackerbay (CVE-2026-35053). Successful exploitation can lead to full system takeover. Exploitable via `GET /workflow/manual/run/`.
CVE-2026-5420 Vulnerability in CVE-2026-5420 (CVE-2026-5420)
vulnerability in CVE-2026-5420 (CVE-2026-5420). Risk of unauthorized operations or information disclosure.
CVE-2026-5418 SSRF (Server-Side Request Forgery) in CVE-2026-5418 (CVE-2026-5418)
SSRF in CVE-2026-5418 (CVE-2026-5418). Risk of unauthorized operations or information disclosure.
CVE-2026-34752 Vulnerability in haraka-project (CVE-2026-34752)
vulnerability in haraka-project (CVE-2026-34752). Risk of unauthorized operations or information disclosure.
CVE-2026-34735 Unrestricted File Upload in CVE-2026-34735 (CVE-2026-34735)
vulnerability in CVE-2026-34735 (CVE-2026-34735). Risk of unauthorized operations or information disclosure.
CVE-2026-34826 Vulnerability in rack (CVE-2026-34826)
vulnerability in rack (CVE-2026-34826). Risk of unauthorized operations or information disclosure. Exploitable via ``Range``. Mitigation: upgrade to `3.2.6` or later.
CVE-2026-34786 Vulnerability in rack (CVE-2026-34786)
vulnerability in rack (CVE-2026-34786). Risk of unauthorized operations or information disclosure. Exploitable via ``header_rules``. Mitigation: upgrade to `3.2.6` or later.
CVE-2026-34785 Vulnerability in rack (CVE-2026-34785)
vulnerability in rack (CVE-2026-34785). Confidential information can be exposed externally. Mitigation: upgrade to `3.2.6` or later.
CVE-2026-5368 Vulnerability in sqli (CVE-2026-5368)
vulnerability in sqli (CVE-2026-5368). Risk of unauthorized operations or information disclosure.
CVE-2026-34608 Out-of-Bounds Read in c (CVE-2026-34608)
vulnerability in c (CVE-2026-34608). Risk of unauthorized operations or information disclosure.
CVE-2026-34598 Cross-Site Scripting (XSS) in yeswiki (CVE-2026-34598)
cross-site scripting in yeswiki (CVE-2026-34598). Risk of unauthorized operations or information disclosure.
CVE-2026-34601 Vulnerability in CVE-2026-34601 (CVE-2026-34601)
vulnerability in CVE-2026-34601 (CVE-2026-34601). Data can be tampered with by attackers. Exploitable via ``DOMParser``.
CVE-2026-34591 Path Traversal in poetry (CVE-2026-34591)
path traversal in poetry (CVE-2026-34591). Data can be tampered with by attackers. Mitigation: upgrade to `2.3.3` or later.
CVE-2026-34526 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-34526)
SSRF in ssrf (CVE-2026-34526). Risk of unauthorized operations or information disclosure.
CVE-2026-26895 Vulnerability in enhancesoft (CVE-2026-26895)
vulnerability in enhancesoft (CVE-2026-26895). Risk of unauthorized operations or information disclosure.
CVE-2026-34876 Out-of-Bounds Read in c (CVE-2026-34876)
vulnerability in c (CVE-2026-34876). Confidential information can be exposed externally.
CVE-2026-33691 Vulnerability in owasp (CVE-2026-33691)
vulnerability in owasp (CVE-2026-33691). Data can be tampered with by attackers.
CVE-2026-5344 Path Traversal in path-traversal (CVE-2026-5344)
path traversal in path-traversal (CVE-2026-5344). Risk of unauthorized operations or information disclosure.
CVE-2026-5346 SSRF (Server-Side Request Forgery) in CVE-2026-5346 (CVE-2026-5346)
SSRF in CVE-2026-5346 (CVE-2026-5346). Risk of unauthorized operations or information disclosure.
CVE-2026-5342 Buffer Overflow in cpp (CVE-2026-5342)
vulnerability in cpp (CVE-2026-5342). Risk of unauthorized operations or information disclosure.
CVE-2026-35002 Vulnerability in agno (CVE-2026-35002)
vulnerability in agno (CVE-2026-35002). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.3.24` or later.
CVE-2026-34973 Vulnerability in phpmyfaq (CVE-2026-34973)
vulnerability in phpmyfaq (CVE-2026-34973). Risk of unauthorized operations or information disclosure.
CVE-2026-34974 Cross-Site Scripting (XSS) in privilege-escalation (CVE-2026-34974)
cross-site scripting in privilege-escalation (CVE-2026-34974). Risk of unauthorized operations or information disclosure.
CVE-2026-34821 Cross-Site Scripting (XSS) in endian (CVE-2026-34821)
cross-site scripting in endian (CVE-2026-34821). Risk of unauthorized operations or information disclosure.
CVE-2026-34822 Cross-Site Scripting (XSS) in endian (CVE-2026-34822)
cross-site scripting in endian (CVE-2026-34822). Risk of unauthorized operations or information disclosure.
CVE-2026-34823 Cross-Site Scripting (XSS) in endian (CVE-2026-34823)
cross-site scripting in endian (CVE-2026-34823). Risk of unauthorized operations or information disclosure.
CVE-2026-34816 Cross-Site Scripting (XSS) in endian (CVE-2026-34816)
cross-site scripting in endian (CVE-2026-34816). Risk of unauthorized operations or information disclosure.
CVE-2026-34817 Cross-Site Scripting (XSS) in endian (CVE-2026-34817)
cross-site scripting in endian (CVE-2026-34817). Risk of unauthorized operations or information disclosure.
CVE-2026-34818 Cross-Site Scripting (XSS) in endian (CVE-2026-34818)
cross-site scripting in endian (CVE-2026-34818). Risk of unauthorized operations or information disclosure.
CVE-2026-34819 Cross-Site Scripting (XSS) in endian (CVE-2026-34819)
cross-site scripting in endian (CVE-2026-34819). Risk of unauthorized operations or information disclosure.
CVE-2026-34820 Cross-Site Scripting (XSS) in endian (CVE-2026-34820)
cross-site scripting in endian (CVE-2026-34820). Risk of unauthorized operations or information disclosure.
CVE-2026-34812 Cross-Site Scripting (XSS) in endian (CVE-2026-34812)
cross-site scripting in endian (CVE-2026-34812). Risk of unauthorized operations or information disclosure.
CVE-2026-34813 Cross-Site Scripting (XSS) in endian (CVE-2026-34813)
cross-site scripting in endian (CVE-2026-34813). Risk of unauthorized operations or information disclosure.
CVE-2026-34814 Cross-Site Scripting (XSS) in endian (CVE-2026-34814)
cross-site scripting in endian (CVE-2026-34814). Risk of unauthorized operations or information disclosure.
CVE-2026-34815 Cross-Site Scripting (XSS) in endian (CVE-2026-34815)
cross-site scripting in endian (CVE-2026-34815). Risk of unauthorized operations or information disclosure.
CVE-2026-34807 Cross-Site Scripting (XSS) in endian (CVE-2026-34807)
cross-site scripting in endian (CVE-2026-34807). Risk of unauthorized operations or information disclosure.
CVE-2026-34808 Cross-Site Scripting (XSS) in endian (CVE-2026-34808)
cross-site scripting in endian (CVE-2026-34808). Risk of unauthorized operations or information disclosure.
CVE-2026-34809 Cross-Site Scripting (XSS) in endian (CVE-2026-34809)
cross-site scripting in endian (CVE-2026-34809). Risk of unauthorized operations or information disclosure.
CVE-2026-34810 Cross-Site Scripting (XSS) in endian (CVE-2026-34810)
cross-site scripting in endian (CVE-2026-34810). Risk of unauthorized operations or information disclosure.
CVE-2026-34811 Cross-Site Scripting (XSS) in endian (CVE-2026-34811)
cross-site scripting in endian (CVE-2026-34811). Risk of unauthorized operations or information disclosure.
CVE-2026-34803 Cross-Site Scripting (XSS) in endian (CVE-2026-34803)
cross-site scripting in endian (CVE-2026-34803). Risk of unauthorized operations or information disclosure.
CVE-2026-34804 Cross-Site Scripting (XSS) in endian (CVE-2026-34804)
cross-site scripting in endian (CVE-2026-34804). Risk of unauthorized operations or information disclosure.
CVE-2026-34805 Cross-Site Scripting (XSS) in endian (CVE-2026-34805)
cross-site scripting in endian (CVE-2026-34805). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →