Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Clear
ID Title
CVE-2026-34806 Cross-Site Scripting (XSS) in endian (CVE-2026-34806)
cross-site scripting in endian (CVE-2026-34806). Risk of unauthorized operations or information disclosure.
CVE-2026-34799 Cross-Site Scripting (XSS) in endian (CVE-2026-34799)
cross-site scripting in endian (CVE-2026-34799). Risk of unauthorized operations or information disclosure.
CVE-2026-34800 Cross-Site Scripting (XSS) in endian (CVE-2026-34800)
cross-site scripting in endian (CVE-2026-34800). Risk of unauthorized operations or information disclosure.
CVE-2026-34801 Cross-Site Scripting (XSS) in endian (CVE-2026-34801)
cross-site scripting in endian (CVE-2026-34801). Risk of unauthorized operations or information disclosure.
CVE-2026-34802 Cross-Site Scripting (XSS) in endian (CVE-2026-34802)
cross-site scripting in endian (CVE-2026-34802). Risk of unauthorized operations or information disclosure.
CVE-2026-34798 Cross-Site Scripting (XSS) in endian (CVE-2026-34798)
cross-site scripting in endian (CVE-2026-34798). Risk of unauthorized operations or information disclosure.
CVE-2026-34072 Authentication Bypass in fccview (CVE-2026-34072)
authentication bypass in fccview (CVE-2026-34072). Confidential information can be exposed externally.
CVE-2026-23401 Use-After-Free in c (CVE-2026-23401)
vulnerability in c (CVE-2026-23401). Risk of unauthorized operations or information disclosure.
CVE-2026-34451 Path Traversal in anthropic (CVE-2026-34451)
path traversal in anthropic (CVE-2026-34451). Risk of unauthorized operations or information disclosure.
CVE-2026-34452 Vulnerability in anthropic (CVE-2026-34452)
vulnerability in anthropic (CVE-2026-34452). Confidential information can be exposed externally. Mitigation: upgrade to `0.87.0` or later.
CVE-2026-34442 Vulnerability in laravel (CVE-2026-34442)
vulnerability in laravel (CVE-2026-34442). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
CVE-2026-34443 SSRF (Server-Side Request Forgery) in laravel (CVE-2026-34443)
SSRF in laravel (CVE-2026-34443). Risk of unauthorized operations or information disclosure.
CVE-2026-34448 Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-34448)
cross-site scripting in github.com/siyuan-note/siyuan/kernel (CVE-2026-34448). Successful exploitation can lead to full system takeover. Exploitable via ``mAsse``. Mitigation: upgrade to `3.6.2` or later.
CVE-2026-34449 Vulnerability in github.com/siyuan-note/siyuan/kernel (CVE-2026-34449)
vulnerability in github.com/siyuan-note/siyuan/kernel (CVE-2026-34449). Successful exploitation can lead to full system takeover. Exploitable via ``Origin``. Mitigation: upgrade to `3.6.2` or later.
CVE-2026-34450 Vulnerability in anthropic (CVE-2026-34450)
vulnerability in anthropic (CVE-2026-34450). Risk of unauthorized operations or information disclosure. Exploitable via ``lucasfutures``. Mitigation: upgrade to `0.87.0` or later.
CVE-2026-34441 Vulnerability in c (CVE-2026-34441)
vulnerability in c (CVE-2026-34441). Risk of unauthorized operations or information disclosure.
CVE-2026-34406 Vulnerability in django (CVE-2026-34406)
vulnerability in django (CVE-2026-34406). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/auth/edituser/`.
CVE-2026-34733 Vulnerability in wwbn (CVE-2026-34733)
vulnerability in wwbn (CVE-2026-34733). Risk of unauthorized operations or information disclosure.
CVE-2026-34737 Vulnerability in wwbn (CVE-2026-34737)
vulnerability in wwbn (CVE-2026-34737). Data can be tampered with by attackers.
CVE-2026-34739 Cross-Site Scripting (XSS) in wwbn (CVE-2026-34739)
cross-site scripting in wwbn (CVE-2026-34739). Risk of unauthorized operations or information disclosure.
CVE-2026-34740 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-34740)
SSRF in ssrf (CVE-2026-34740). Confidential information can be exposed externally.
CVE-2026-3468 Cross-Site Scripting (XSS) in sonicwall (CVE-2026-3468)
cross-site scripting in sonicwall (CVE-2026-3468). Risk of unauthorized operations or information disclosure.
CVE-2026-34611 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34611)
vulnerability in csrf (CVE-2026-34611). Data can be tampered with by attackers.
CVE-2026-34613 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34613)
vulnerability in csrf (CVE-2026-34613). Data can be tampered with by attackers.
CVE-2026-34731 Vulnerability in wwbn (CVE-2026-34731)
vulnerability in wwbn (CVE-2026-34731). Risk of unauthorized operations or information disclosure.
CVE-2026-34732 Vulnerability in wwbn (CVE-2026-34732)
vulnerability in wwbn (CVE-2026-34732). Risk of unauthorized operations or information disclosure.
CVE-2026-34382 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34382)
vulnerability in csrf (CVE-2026-34382). Risk of unauthorized operations or information disclosure.
CVE-2026-34384 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34384)
vulnerability in csrf (CVE-2026-34384). Data can be tampered with by attackers.
CVE-2026-34394 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-34394)
vulnerability in csrf (CVE-2026-34394). Confidential information can be exposed externally.
CVE-2026-34395 Vulnerability in wwbn (CVE-2026-34395)
vulnerability in wwbn (CVE-2026-34395). Confidential information can be exposed externally.
CVE-2026-34396 Cross-Site Scripting (XSS) in csrf (CVE-2026-34396)
cross-site scripting in csrf (CVE-2026-34396). Risk of unauthorized operations or information disclosure.
CVE-2026-34372 Vulnerability in symfony (CVE-2026-34372)
vulnerability in symfony (CVE-2026-34372). Risk of unauthorized operations or information disclosure.
CVE-2026-34215 Information Disclosure in parseplatform (CVE-2026-34215)
vulnerability in parseplatform (CVE-2026-34215). Confidential information can be exposed externally.
CVE-2026-34784 Vulnerability in parseplatform (CVE-2026-34784)
vulnerability in parseplatform (CVE-2026-34784). Confidential information can be exposed externally.
CVE-2026-32607 Cross-Site Scripting (XSS) in discourse (CVE-2026-32607)
cross-site scripting in discourse (CVE-2026-32607). Risk of unauthorized operations or information disclosure.
CVE-2026-32725 Vulnerability in c (CVE-2026-32725)
vulnerability in c (CVE-2026-32725). Confidential information can be exposed externally.
CVE-2026-32726 Authorization Flaw in c (CVE-2026-32726)
vulnerability in c (CVE-2026-32726). Confidential information can be exposed externally.
CVE-2026-32143 Information Disclosure in c (CVE-2026-32143)
vulnerability in c (CVE-2026-32143). Confidential information can be exposed externally.
CVE-2026-32243 Cross-Site Scripting (XSS) in discourse (CVE-2026-32243)
cross-site scripting in discourse (CVE-2026-32243). Risk of unauthorized operations or information disclosure.
CVE-2026-30520 SQL Injection in sqli (CVE-2026-30520)
SQL injection in sqli (CVE-2026-30520). Risk of unauthorized operations or information disclosure.
CVE-2026-30279 Path Traversal in c (CVE-2026-30279)
path traversal in c (CVE-2026-30279). Successful exploitation can lead to full system takeover.
CVE-2026-34360 SSRF (Server-Side Request Forgery) in hapifhir (CVE-2026-34360)
SSRF in hapifhir (CVE-2026-34360). Risk of unauthorized operations or information disclosure.
CVE-2026-34361 Vulnerability in hapifhir (CVE-2026-34361)
vulnerability in hapifhir (CVE-2026-34361). Confidential information can be exposed externally.
CVE-2026-34359 Vulnerability in hapifhir (CVE-2026-34359)
vulnerability in hapifhir (CVE-2026-34359). Confidential information can be exposed externally.
CVE-2026-5203 Path Traversal in path-traversal (CVE-2026-5203)
path traversal in path-traversal (CVE-2026-5203). Risk of unauthorized operations or information disclosure.
CVE-2026-34595 Vulnerability in parseplatform (CVE-2026-34595)
vulnerability in parseplatform (CVE-2026-34595). Risk of unauthorized operations or information disclosure.
CVE-2026-34240 Vulnerability in appsup-dart (CVE-2026-34240)
vulnerability in appsup-dart (CVE-2026-34240). Data can be tampered with by attackers.
CVE-2026-34573 Vulnerability in parseplatform (CVE-2026-34573)
vulnerability in parseplatform (CVE-2026-34573). Risk of unauthorized operations or information disclosure.
CVE-2026-34574 Vulnerability in parseplatform (CVE-2026-34574)
vulnerability in parseplatform (CVE-2026-34574). Risk of unauthorized operations or information disclosure.
CVE-2026-34220 SQL Injection in sqli (CVE-2026-34220)
SQL injection in sqli (CVE-2026-34220). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →