Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-11743 |
|
Out-of-Bounds Read in c (CVE-2026-11743)
vulnerability in c (CVE-2026-11743). Confidential information can be exposed externally.
|
| CVE-2026-11425 |
|
Cross-Site Scripting (XSS) in CVE-2026-11425 (CVE-2026-11425)
cross-site scripting in CVE-2026-11425 (CVE-2026-11425). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62295 |
|
Vulnerability in CVE-2026-62295 (CVE-2026-62295)
vulnerability in CVE-2026-62295 (CVE-2026-62295). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62296 |
|
Vulnerability in CVE-2026-62296 (CVE-2026-62296)
vulnerability in CVE-2026-62296 (CVE-2026-62296). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62293 |
|
Vulnerability in CVE-2026-62293 (CVE-2026-62293)
vulnerability in CVE-2026-62293 (CVE-2026-62293). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71870 |
|
Vulnerability in pypdf (CVE-2026-71870)
vulnerability in pypdf (CVE-2026-71870). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.15.0` or later.
|
| CVE-2026-69127 |
|
Vulnerability in CVE-2026-69127 (CVE-2026-69127)
vulnerability in CVE-2026-69127 (CVE-2026-69127). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70561 |
|
Vulnerability in CVE-2026-70561 (CVE-2026-70561)
vulnerability in CVE-2026-70561 (CVE-2026-70561). Confidential information can be exposed externally.
|
| CVE-2026-19230 |
|
Cross-Site Scripting (XSS) in CVE-2026-19230 (CVE-2026-19230)
cross-site scripting in CVE-2026-19230 (CVE-2026-19230). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19231 |
|
Vulnerability in sqli (CVE-2026-19231)
vulnerability in sqli (CVE-2026-19231). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71852 |
|
Vulnerability in pypdf (CVE-2026-71852)
vulnerability in pypdf (CVE-2026-71852). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.15.0` or later.
|
| CVE-2026-71851 |
|
Vulnerability in crypto-js (CVE-2026-71851)
vulnerability in crypto-js (CVE-2026-71851). Successful exploitation can lead to full system takeover. Exploitable via ``crypto``. Mitigation: upgrade to `4.0.0` or later.
|
| CVE-2026-71850 |
|
Vulnerability in hono (CVE-2026-71850)
vulnerability in hono (CVE-2026-71850). Confidential information can be exposed externally. Mitigation: upgrade to `4.12.34` or later.
|
| CVE-2026-71849 |
|
Information Disclosure in hono (CVE-2026-71849)
vulnerability in hono (CVE-2026-71849). Risk of unauthorized operations or information disclosure. Exploitable via ``Connection``. Mitigation: upgrade to `4.12.34` or later.
|
| CVE-2026-71848 |
|
Vulnerability in hono (CVE-2026-71848)
vulnerability in hono (CVE-2026-71848). Risk of unauthorized operations or information disclosure. Exploitable via ``languageDetector``. Mitigation: upgrade to `4.12.34` or later.
|
| CVE-2026-71847 |
|
Use-After-Free in json (CVE-2026-71847)
vulnerability in json (CVE-2026-71847). Risk of unauthorized operations or information disclosure. Exploitable via ``state.start``. Mitigation: upgrade to `2.21.2` or later.
|
| CVE-2026-44964 |
|
Vulnerability in c (CVE-2026-44964)
vulnerability in c (CVE-2026-44964). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19211 |
|
Vulnerability in sqli (CVE-2026-19211)
vulnerability in sqli (CVE-2026-19211). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17595 |
|
Vulnerability in CVE-2026-17595 (CVE-2026-17595)
vulnerability in CVE-2026-17595 (CVE-2026-17595). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48093 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-48093)
cross-site scripting in wordpress (CVE-2026-48093). Risk of unauthorized operations or information disclosure. Exploitable via ``unfiltered_html``.
|
| CVE-2026-19210 |
|
Vulnerability in CVE-2026-19210 (CVE-2026-19210)
vulnerability in CVE-2026-19210 (CVE-2026-19210). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19209 |
|
Cross-Site Scripting (XSS) in c (CVE-2026-19209)
cross-site scripting in c (CVE-2026-19209). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19208 |
|
Vulnerability in cpp (CVE-2026-19208)
vulnerability in cpp (CVE-2026-19208). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19206 |
|
Buffer Overflow in c (CVE-2026-19206)
vulnerability in c (CVE-2026-19206). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19207 |
|
Cross-Site Scripting (XSS) in CVE-2026-19207 (CVE-2026-19207)
cross-site scripting in CVE-2026-19207 (CVE-2026-19207). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62996 |
|
Path Traversal in smarty/smarty (CVE-2026-62996)
path traversal in smarty/smarty (CVE-2026-62996). Risk of unauthorized operations or information disclosure. Exploitable via ``stream``. Mitigation: upgrade to `5.8.4` or later.
|
| CVE-2026-62992 |
|
Path Traversal in smarty/smarty (CVE-2026-62992)
path traversal in smarty/smarty (CVE-2026-62992). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.8.2` or later.
|
| CVE-2026-66494 |
|
Cross-Site Scripting (XSS) in CVE-2026-66494 (CVE-2026-66494)
cross-site scripting in CVE-2026-66494 (CVE-2026-66494). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48094 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-48094)
cross-site scripting in wordpress (CVE-2026-48094). Risk of unauthorized operations or information disclosure. Exploitable via ``href``.
|
| CVE-2026-54217 |
|
Vulnerability in CVE-2026-54217 (CVE-2026-54217)
vulnerability in CVE-2026-54217 (CVE-2026-54217). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71558 |
|
Unsafe Deserialization in c (CVE-2026-71558)
vulnerability in c (CVE-2026-71558). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71560 |
|
Out-of-Bounds Read in c (CVE-2026-71560)
vulnerability in c (CVE-2026-71560). Data can be tampered with by attackers.
|
| CVE-2026-54208 |
|
Vulnerability in CVE-2026-54208 (CVE-2026-54208)
vulnerability in CVE-2026-54208 (CVE-2026-54208). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54202 |
|
Vulnerability in c (CVE-2026-54202)
vulnerability in c (CVE-2026-54202). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15245 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15245)
cross-site scripting in wordpress (CVE-2026-15245). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15386 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15386)
cross-site scripting in wordpress (CVE-2026-15386). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19196 |
|
Vulnerability in sqli (CVE-2026-19196)
vulnerability in sqli (CVE-2026-19196). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16263 |
|
Path Traversal in wordpress (CVE-2026-16263)
path traversal in wordpress (CVE-2026-16263). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16258 |
|
Unsafe Deserialization in wordpress (CVE-2026-16258)
vulnerability in wordpress (CVE-2026-16258). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19191 |
|
Vulnerability in c (CVE-2026-19191)
vulnerability in c (CVE-2026-19191). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19192 |
|
Vulnerability in c (CVE-2026-19192)
vulnerability in c (CVE-2026-19192). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19190 |
|
Vulnerability in c (CVE-2026-19190)
vulnerability in c (CVE-2026-19190). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45198 |
|
Vulnerability in c (CVE-2026-45198)
vulnerability in c (CVE-2026-45198). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19189 |
|
Vulnerability in c (CVE-2026-19189)
vulnerability in c (CVE-2026-19189). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71445 |
|
Cross-Site Scripting (XSS) in CVE-2026-71445 (CVE-2026-71445)
cross-site scripting in CVE-2026-71445 (CVE-2026-71445). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71446 |
|
Cross-Site Scripting (XSS) in CVE-2026-71446 (CVE-2026-71446)
cross-site scripting in CVE-2026-71446 (CVE-2026-71446). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71447 |
|
Cross-Site Scripting (XSS) in CVE-2026-71447 (CVE-2026-71447)
cross-site scripting in CVE-2026-71447 (CVE-2026-71447). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70638 |
|
Vulnerability in cpp (CVE-2026-70638)
vulnerability in cpp (CVE-2026-70638). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70639 |
|
Vulnerability in cpp (CVE-2026-70639)
vulnerability in cpp (CVE-2026-70639). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70640 |
|
Vulnerability in cpp (CVE-2026-70640)
vulnerability in cpp (CVE-2026-70640). Successful exploitation can lead to full system takeover.
|