Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-38469 |
|
Vulnerability in CVE-2026-38469 (CVE-2026-38469)
vulnerability in CVE-2026-38469 (CVE-2026-38469). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38473 |
|
Vulnerability in CVE-2026-38473 (CVE-2026-38473)
vulnerability in CVE-2026-38473 (CVE-2026-38473). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-23758 KEV |
|
Ajax.NET Professional Ajax.NET Professional — Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.
|
| CVE-2026-70665 |
|
Vulnerability in rails (CVE-2026-70665)
vulnerability in rails (CVE-2026-70665). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54757 |
|
Code Injection in compliance-trestle (CVE-2026-54757)
code injection in compliance-trestle (CVE-2026-54757). Successful exploitation can lead to full system takeover. Exploitable via ``SandboxedEnvironment``. Mitigation: upgrade to `4.1.0` or later.
|
| CVE-2026-62861 |
|
Vulnerability in c (CVE-2026-62861)
vulnerability in c (CVE-2026-62861). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-80104 |
|
Path Traversal in CVE-2026-80104 (CVE-2026-80104)
path traversal in CVE-2026-80104 (CVE-2026-80104). Successful exploitation can lead to full system takeover.
|
| CVE-2026-79793 |
|
Cross-Site Scripting (XSS) in CVE-2026-79793 (CVE-2026-79793)
cross-site scripting in CVE-2026-79793 (CVE-2026-79793). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79272 |
|
Vulnerability in c (CVE-2026-79272)
vulnerability in c (CVE-2026-79272). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79190 |
|
Authorization Flaw in c (CVE-2026-79190)
vulnerability in c (CVE-2026-79190). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79103 |
|
Vulnerability in c (CVE-2026-79103)
vulnerability in c (CVE-2026-79103). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79044 |
|
Vulnerability in c (CVE-2026-79044)
vulnerability in c (CVE-2026-79044). Confidential information can be exposed externally.
|
| CVE-2026-79042 |
|
Vulnerability in c (CVE-2026-79042)
vulnerability in c (CVE-2026-79042). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79002 |
|
Authorization Flaw in c (CVE-2026-79002)
vulnerability in c (CVE-2026-79002). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78954 |
|
Authorization Flaw in c (CVE-2026-78954)
vulnerability in c (CVE-2026-78954). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78937 |
|
Use-After-Free in c (CVE-2026-78937)
vulnerability in c (CVE-2026-78937). Successful exploitation can lead to full system takeover.
|
| CVE-2026-77680 |
|
Vulnerability in c (CVE-2026-77680)
vulnerability in c (CVE-2026-77680). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75465 |
|
Vulnerability in CVE-2026-75465 (CVE-2026-75465)
vulnerability in CVE-2026-75465 (CVE-2026-75465). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74932 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-74932)
cross-site scripting in wordpress (CVE-2026-74932). Successful exploitation can lead to full system takeover. Exploitable via `Host header`.
|
| CVE-2026-39113 |
|
Vulnerability in c (CVE-2026-39113)
vulnerability in c (CVE-2026-39113). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52491 |
|
Vulnerability in c (CVE-2026-52491)
vulnerability in c (CVE-2026-52491). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77357 |
|
Vulnerability in CVE-2026-77357 (CVE-2026-77357)
vulnerability in CVE-2026-77357 (CVE-2026-77357). Risk of unauthorized operations or information disclosure. Exploitable via `GET /hot-reload`.
|
| CVE-2026-68514 |
|
Vulnerability in CVE-2026-68514 (CVE-2026-68514)
vulnerability in CVE-2026-68514 (CVE-2026-68514). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73125 |
|
Vulnerability in cisa (CVE-2026-73125)
vulnerability in cisa (CVE-2026-73125). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76060 |
|
OS Command Injection in cisa (CVE-2026-76060)
OS command injection in cisa (CVE-2026-76060). Successful exploitation can lead to full system takeover.
|
| CVE-2026-78379 |
|
Vulnerability in Amazon aws (CVE-2026-78379)
vulnerability in Amazon aws (CVE-2026-78379). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55099 |
|
Vulnerability in icalendar (CVE-2026-55099)
vulnerability in icalendar (CVE-2026-55099). Risk of unauthorized operations or information disclosure. Exploitable via ``Component.__eq__``. Mitigation: upgrade to `7.1.3` or later.
|
| CVE-2026-45019 |
|
SSRF (Server-Side Request Forgery) in chainlit (CVE-2026-45019)
SSRF in chainlit (CVE-2026-45019). Risk of unauthorized operations or information disclosure. Exploitable via `POST /mcp`. Mitigation: upgrade to `2.12.0` or later.
|
| CVE-2026-45018 |
|
OS Command Injection in chainlit (CVE-2026-45018)
OS command injection in chainlit (CVE-2026-45018). Successful exploitation can lead to full system takeover. Exploitable via `POST /mcp`. Mitigation: upgrade to `2.12.0` or later.
|
| CVE-2026-62986 |
|
Information Disclosure in CVE-2026-62986 (CVE-2026-62986)
vulnerability in CVE-2026-62986 (CVE-2026-62986). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59985 |
|
Out-of-Bounds Read in c (CVE-2026-59985)
vulnerability in c (CVE-2026-59985). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55609 |
|
Vulnerability in consciousness-explorer (CVE-2026-55609)
vulnerability in consciousness-explorer (CVE-2026-55609). Data can be tampered with by attackers. Exploitable via ``export_state``. Mitigation: upgrade to `1.1.2` or later.
|
| CVE-2026-75497 |
|
SQL Injection in CVE-2026-75497 (CVE-2026-75497)
SQL injection in CVE-2026-75497 (CVE-2026-75497). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `123c97c` or later.
|
| CVE-2026-75498 |
|
SQL Injection in CVE-2026-75498 (CVE-2026-75498)
SQL injection in CVE-2026-75498 (CVE-2026-75498). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `123c97c` or later.
|
| CVE-2026-19913 |
|
Vulnerability in CVE-2026-19913 (CVE-2026-19913)
vulnerability in CVE-2026-19913 (CVE-2026-19913). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19912 |
|
Vulnerability in deserialization (CVE-2026-19912)
vulnerability in deserialization (CVE-2026-19912). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79774 |
|
Vulnerability in CVE-2026-79774 (CVE-2026-79774)
vulnerability in CVE-2026-79774 (CVE-2026-79774). Successful exploitation can lead to full system takeover.
|
| CVE-2026-79780 |
|
Information Disclosure in c (CVE-2026-79780)
vulnerability in c (CVE-2026-79780). Confidential information can be exposed externally. Exploitable via `Host header`.
|
| CVE-2026-79773 |
|
Path Traversal in CVE-2026-79773 (CVE-2026-79773)
path traversal in CVE-2026-79773 (CVE-2026-79773). Confidential information can be exposed externally.
|
| CVE-2026-79771 |
|
Vulnerability in dos (CVE-2026-79771)
vulnerability in dos (CVE-2026-79771). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79675 |
|
Vulnerability in CVE-2026-79675 (CVE-2026-79675)
vulnerability in CVE-2026-79675 (CVE-2026-79675). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71346 |
|
Out-of-Bounds Read in c (CVE-2025-71346)
vulnerability in c (CVE-2025-71346). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55620 |
|
Vulnerability in eml_parser (CVE-2026-55620)
vulnerability in eml_parser (CVE-2026-55620). Risk of unauthorized operations or information disclosure. Exploitable via ``eml_parser``. Mitigation: upgrade to `3.0.2` or later.
|
| CVE-2026-55619 |
|
Vulnerability in eml_parser (CVE-2026-55619)
vulnerability in eml_parser (CVE-2026-55619). Risk of unauthorized operations or information disclosure. Exploitable via ``eml_parser``. Mitigation: upgrade to `3.0.2` or later.
|
| CVE-2026-55618 |
|
Vulnerability in eml_parser (CVE-2026-55618)
vulnerability in eml_parser (CVE-2026-55618). Data can be tampered with by attackers. Exploitable via ``eml_parser``. Mitigation: upgrade to `3.0.2` or later.
|
| CVE-2026-59983 |
|
Out-of-Bounds Read in c (CVE-2026-59983)
vulnerability in c (CVE-2026-59983). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55663 |
|
Vulnerability in mediasoup (CVE-2026-55663)
vulnerability in mediasoup (CVE-2026-55663). Risk of unauthorized operations or information disclosure. Exploitable via ``localVerificationTag``. Mitigation: upgrade to `3.20.6` or later.
|
| CVE-2026-13478 |
|
Out-of-Bounds Read in c (CVE-2026-13478)
vulnerability in c (CVE-2026-13478). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13217 |
|
Vulnerability in c (CVE-2026-13217)
vulnerability in c (CVE-2026-13217). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13216 |
|
Out-of-Bounds Write in c (CVE-2026-13216)
out-of-bounds write in c (CVE-2026-13216). Data can be tampered with by attackers.
|