Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-34806 |
|
Cross-Site Scripting (XSS) in endian (CVE-2026-34806)
cross-site scripting in endian (CVE-2026-34806). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34799 |
|
Cross-Site Scripting (XSS) in endian (CVE-2026-34799)
cross-site scripting in endian (CVE-2026-34799). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34800 |
|
Cross-Site Scripting (XSS) in endian (CVE-2026-34800)
cross-site scripting in endian (CVE-2026-34800). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34801 |
|
Cross-Site Scripting (XSS) in endian (CVE-2026-34801)
cross-site scripting in endian (CVE-2026-34801). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34802 |
|
Cross-Site Scripting (XSS) in endian (CVE-2026-34802)
cross-site scripting in endian (CVE-2026-34802). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34798 |
|
Cross-Site Scripting (XSS) in endian (CVE-2026-34798)
cross-site scripting in endian (CVE-2026-34798). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34072 |
|
Authentication Bypass in fccview (CVE-2026-34072)
authentication bypass in fccview (CVE-2026-34072). Confidential information can be exposed externally.
|
| CVE-2026-23401 |
|
Use-After-Free in c (CVE-2026-23401)
vulnerability in c (CVE-2026-23401). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34451 |
|
Path Traversal in anthropic (CVE-2026-34451)
path traversal in anthropic (CVE-2026-34451). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34452 |
|
Vulnerability in anthropic (CVE-2026-34452)
vulnerability in anthropic (CVE-2026-34452). Confidential information can be exposed externally. Mitigation: upgrade to `0.87.0` or later.
|
| CVE-2026-34442 |
|
Vulnerability in laravel (CVE-2026-34442)
vulnerability in laravel (CVE-2026-34442). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
|
| CVE-2026-34443 |
|
SSRF (Server-Side Request Forgery) in laravel (CVE-2026-34443)
SSRF in laravel (CVE-2026-34443). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34448 |
|
Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-34448)
cross-site scripting in github.com/siyuan-note/siyuan/kernel (CVE-2026-34448). Successful exploitation can lead to full system takeover. Exploitable via ``mAsse``. Mitigation: upgrade to `3.6.2` or later.
|
| CVE-2026-34449 |
|
Vulnerability in github.com/siyuan-note/siyuan/kernel (CVE-2026-34449)
vulnerability in github.com/siyuan-note/siyuan/kernel (CVE-2026-34449). Successful exploitation can lead to full system takeover. Exploitable via ``Origin``. Mitigation: upgrade to `3.6.2` or later.
|
| CVE-2026-34450 |
|
Vulnerability in anthropic (CVE-2026-34450)
vulnerability in anthropic (CVE-2026-34450). Risk of unauthorized operations or information disclosure. Exploitable via ``lucasfutures``. Mitigation: upgrade to `0.87.0` or later.
|
| CVE-2026-34441 |
|
Vulnerability in c (CVE-2026-34441)
vulnerability in c (CVE-2026-34441). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34406 |
|
Vulnerability in django (CVE-2026-34406)
vulnerability in django (CVE-2026-34406). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/auth/edituser/`.
|
| CVE-2026-34733 |
|
Vulnerability in wwbn (CVE-2026-34733)
vulnerability in wwbn (CVE-2026-34733). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34737 |
|
Vulnerability in wwbn (CVE-2026-34737)
vulnerability in wwbn (CVE-2026-34737). Data can be tampered with by attackers.
|
| CVE-2026-34739 |
|
Cross-Site Scripting (XSS) in wwbn (CVE-2026-34739)
cross-site scripting in wwbn (CVE-2026-34739). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34740 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-34740)
SSRF in ssrf (CVE-2026-34740). Confidential information can be exposed externally.
|
| CVE-2026-3468 |
|
Cross-Site Scripting (XSS) in sonicwall (CVE-2026-3468)
cross-site scripting in sonicwall (CVE-2026-3468). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34611 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34611)
vulnerability in csrf (CVE-2026-34611). Data can be tampered with by attackers.
|
| CVE-2026-34613 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34613)
vulnerability in csrf (CVE-2026-34613). Data can be tampered with by attackers.
|
| CVE-2026-34731 |
|
Vulnerability in wwbn (CVE-2026-34731)
vulnerability in wwbn (CVE-2026-34731). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34732 |
|
Vulnerability in wwbn (CVE-2026-34732)
vulnerability in wwbn (CVE-2026-34732). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34382 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34382)
vulnerability in csrf (CVE-2026-34382). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34384 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34384)
vulnerability in csrf (CVE-2026-34384). Data can be tampered with by attackers.
|
| CVE-2026-34394 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34394)
vulnerability in csrf (CVE-2026-34394). Confidential information can be exposed externally.
|
| CVE-2026-34395 |
|
Vulnerability in wwbn (CVE-2026-34395)
vulnerability in wwbn (CVE-2026-34395). Confidential information can be exposed externally.
|
| CVE-2026-34396 |
|
Cross-Site Scripting (XSS) in csrf (CVE-2026-34396)
cross-site scripting in csrf (CVE-2026-34396). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34372 |
|
Vulnerability in symfony (CVE-2026-34372)
vulnerability in symfony (CVE-2026-34372). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34215 |
|
Information Disclosure in parseplatform (CVE-2026-34215)
vulnerability in parseplatform (CVE-2026-34215). Confidential information can be exposed externally.
|
| CVE-2026-34784 |
|
Vulnerability in parseplatform (CVE-2026-34784)
vulnerability in parseplatform (CVE-2026-34784). Confidential information can be exposed externally.
|
| CVE-2026-32607 |
|
Cross-Site Scripting (XSS) in discourse (CVE-2026-32607)
cross-site scripting in discourse (CVE-2026-32607). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32725 |
|
Vulnerability in c (CVE-2026-32725)
vulnerability in c (CVE-2026-32725). Confidential information can be exposed externally.
|
| CVE-2026-32726 |
|
Authorization Flaw in c (CVE-2026-32726)
vulnerability in c (CVE-2026-32726). Confidential information can be exposed externally.
|
| CVE-2026-32143 |
|
Information Disclosure in c (CVE-2026-32143)
vulnerability in c (CVE-2026-32143). Confidential information can be exposed externally.
|
| CVE-2026-32243 |
|
Cross-Site Scripting (XSS) in discourse (CVE-2026-32243)
cross-site scripting in discourse (CVE-2026-32243). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-30520 |
|
SQL Injection in sqli (CVE-2026-30520)
SQL injection in sqli (CVE-2026-30520). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-30279 |
|
Path Traversal in c (CVE-2026-30279)
path traversal in c (CVE-2026-30279). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34360 |
|
SSRF (Server-Side Request Forgery) in hapifhir (CVE-2026-34360)
SSRF in hapifhir (CVE-2026-34360). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34361 |
|
Vulnerability in hapifhir (CVE-2026-34361)
vulnerability in hapifhir (CVE-2026-34361). Confidential information can be exposed externally.
|
| CVE-2026-34359 |
|
Vulnerability in hapifhir (CVE-2026-34359)
vulnerability in hapifhir (CVE-2026-34359). Confidential information can be exposed externally.
|
| CVE-2026-5203 |
|
Path Traversal in path-traversal (CVE-2026-5203)
path traversal in path-traversal (CVE-2026-5203). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34595 |
|
Vulnerability in parseplatform (CVE-2026-34595)
vulnerability in parseplatform (CVE-2026-34595). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34240 |
|
Vulnerability in appsup-dart (CVE-2026-34240)
vulnerability in appsup-dart (CVE-2026-34240). Data can be tampered with by attackers.
|
| CVE-2026-34573 |
|
Vulnerability in parseplatform (CVE-2026-34573)
vulnerability in parseplatform (CVE-2026-34573). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34574 |
|
Vulnerability in parseplatform (CVE-2026-34574)
vulnerability in parseplatform (CVE-2026-34574). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34220 |
|
SQL Injection in sqli (CVE-2026-34220)
SQL injection in sqli (CVE-2026-34220). Successful exploitation can lead to full system takeover.
|