Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-66035 |
|
Vulnerability in c (CVE-2026-66035)
vulnerability in c (CVE-2026-66035). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73643 |
|
Vulnerability in js-yaml (CVE-2026-73643)
vulnerability in js-yaml (CVE-2026-73643). Risk of unauthorized operations or information disclosure. Exploitable via ``maxDepth``. Mitigation: upgrade to `5.2.2` or later.
|
| CVE-2026-73646 |
|
Path Traversal in postcss (CVE-2026-73646)
path traversal in postcss (CVE-2026-73646). Confidential information can be exposed externally. Exploitable via ``loadFile``. Mitigation: upgrade to `8.5.18` or later.
|
| CVE-2026-64210 |
|
Vulnerability in c (CVE-2026-64210)
vulnerability in c (CVE-2026-64210). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45813 |
|
Vulnerability in c (CVE-2026-45813)
vulnerability in c (CVE-2026-45813). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16870 |
|
Vulnerability in CVE-2026-16870 (CVE-2026-16870)
vulnerability in CVE-2026-16870 (CVE-2026-16870). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66138 |
|
OS Command Injection in CVE-2026-66138 (CVE-2026-66138)
OS command injection in CVE-2026-66138 (CVE-2026-66138). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16765 |
|
Vulnerability in sqli (CVE-2026-16765)
vulnerability in sqli (CVE-2026-16765). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-58353 |
|
Vulnerability in react (CVE-2024-58353)
vulnerability in react (CVE-2024-58353). Confidential information can be exposed externally.
|
| CVE-2024-58355 |
|
Vulnerability in react (CVE-2024-58355)
vulnerability in react (CVE-2024-58355). Confidential information can be exposed externally. Mitigation: upgrade to `4.7.16` or later.
|
| CVE-2026-16796 |
|
Vulnerability in Amazon bedrock-agentcore (CVE-2026-16796)
vulnerability in Amazon bedrock-agentcore (CVE-2026-16796). Confidential information can be exposed externally. Mitigation: upgrade to `1.18.1` or later.
|
| CVE-2026-25800 |
|
Vulnerability in CVE-2026-25800 (CVE-2026-25800)
vulnerability in CVE-2026-25800 (CVE-2026-25800). Risk of unauthorized operations or information disclosure. Exploitable via ``Assembler``.
|
| CVE-2026-65908 |
|
Vulnerability in jetbrains (CVE-2026-65908)
vulnerability in jetbrains (CVE-2026-65908). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59933 |
|
Vulnerability in phpoffice/phpspreadsheet (CVE-2026-59933)
vulnerability in phpoffice/phpspreadsheet (CVE-2026-59933). Risk of unauthorized operations or information disclosure. Exploitable via ``bigBlockChain``. Mitigation: upgrade to `1.30.6` or later.
|
| CVE-2026-59932 |
|
Vulnerability in phpoffice/phpspreadsheet (CVE-2026-59932)
vulnerability in phpoffice/phpspreadsheet (CVE-2026-59932). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.30.6` or later.
|
| CVE-2026-59931 |
|
SSRF (Server-Side Request Forgery) in phpoffice/phpspreadsheet (CVE-2026-59931)
SSRF in phpoffice/phpspreadsheet (CVE-2026-59931). Confidential information can be exposed externally. Exploitable via ``example.com``. Mitigation: upgrade to `1.30.6` or later.
|
| CVE-2026-73418 |
|
Vulnerability in @auth/core (CVE-2026-73418)
vulnerability in @auth/core (CVE-2026-73418). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `0.41.3` or later.
|
| CVE-2026-14257 |
|
Vulnerability in brace-expansion (CVE-2026-14257)
vulnerability in brace-expansion (CVE-2026-14257). Risk of unauthorized operations or information disclosure. Exploitable via ``max``. Mitigation: upgrade to `1.1.17` or later.
|
| CVE-2026-65493 |
|
Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions.
Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions.
|
| CVE-2026-65497 |
|
Administrator PHP Object Injection in Complianz <= 7.5.0 versions.
Administrator PHP Object Injection in Complianz <= 7.5.0 versions.
|
| CVE-2026-64806 |
|
Vulnerability in jetbrains (CVE-2026-64806)
vulnerability in jetbrains (CVE-2026-64806). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7232 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-7232)
cross-site scripting in wordpress (CVE-2026-7232). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60373 |
|
Privilege Escalation in c (CVE-2026-60373)
vulnerability in c (CVE-2026-60373). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60370 |
|
Vulnerability in c (CVE-2026-60370)
vulnerability in c (CVE-2026-60370). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60371 |
|
Information Disclosure in c (CVE-2026-60371)
vulnerability in c (CVE-2026-60371). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60439 |
|
Privilege Escalation in c (CVE-2026-60439)
vulnerability in c (CVE-2026-60439). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60455 |
|
Privilege Escalation in c (CVE-2026-60455)
vulnerability in c (CVE-2026-60455). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61246 |
|
Privilege Escalation in c (CVE-2026-61246)
vulnerability in c (CVE-2026-61246). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60368 |
|
Vulnerability in c (CVE-2026-60368)
vulnerability in c (CVE-2026-60368). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64642 |
|
Vulnerability in next (CVE-2026-64642)
vulnerability in next (CVE-2026-64642). Confidential information can be exposed externally. Exploitable via ``config.i18n.locales``. Mitigation: upgrade to `16.2.11` or later.
|
| CVE-2026-64641 |
|
Vulnerability in next (CVE-2026-64641)
vulnerability in next (CVE-2026-64641). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.2.11` or later.
|
| CVE-2026-59942 |
|
Vulnerability in dompdf/dompdf (CVE-2026-59942)
vulnerability in dompdf/dompdf (CVE-2026-59942). Risk of unauthorized operations or information disclosure. Exploitable via ``exploit.py``. Mitigation: upgrade to `3.1.6` or later.
|
| CVE-2026-59941 |
|
Vulnerability in dompdf/dompdf (CVE-2026-59941)
vulnerability in dompdf/dompdf (CVE-2026-59941). Risk of unauthorized operations or information disclosure. Exploitable via `POST /render`. Mitigation: upgrade to `3.1.6` or later.
|
| CVE-2026-64829 |
|
Vulnerability in CVE-2026-64829 (CVE-2026-64829)
vulnerability in CVE-2026-64829 (CVE-2026-64829). Confidential information can be exposed externally.
|
| CVE-2026-13078 |
|
Vulnerability in mongodb (CVE-2026-13078)
vulnerability in mongodb (CVE-2026-13078). Confidential information can be exposed externally.
|
| CVE-2026-55851 |
|
Vulnerability in io.netty:netty-codec-haproxy (CVE-2026-55851)
vulnerability in io.netty:netty-codec-haproxy (CVE-2026-55851). Risk of unauthorized operations or information disclosure. Exploitable via ``HAProxyMessageDecoder``. Mitigation: upgrade to `4.1.136.Final` or later.
|
| CVE-2026-55555 |
|
Vulnerability in dompdf/dompdf (CVE-2026-55555)
vulnerability in dompdf/dompdf (CVE-2026-55555). Confidential information can be exposed externally. Exploitable via ``CHROOT``. Mitigation: upgrade to `3.1.6` or later.
|
| CVE-2026-55554 |
|
Vulnerability in dompdf/dompdf (CVE-2026-55554)
vulnerability in dompdf/dompdf (CVE-2026-55554). Confidential information can be exposed externally. Exploitable via ``jpg``. Mitigation: upgrade to `3.1.6` or later.
|
| CVE-2026-64835 |
|
Out-of-Bounds Write in c (CVE-2026-64835)
out-of-bounds write in c (CVE-2026-64835). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64832 |
|
Vulnerability in c (CVE-2026-64832)
vulnerability in c (CVE-2026-64832). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64834 |
|
Vulnerability in c (CVE-2026-64834)
vulnerability in c (CVE-2026-64834). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64830 |
|
Vulnerability in c (CVE-2026-64830)
vulnerability in c (CVE-2026-64830). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65598 |
|
Vulnerability in n8n (CVE-2026-65598)
vulnerability in n8n (CVE-2026-65598). Successful exploitation can lead to full system takeover. Exploitable via ``clone``. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-44190 |
|
OS Command Injection in CVE-2026-44190 (CVE-2026-44190)
OS command injection in CVE-2026-44190 (CVE-2026-44190). Successful exploitation can lead to full system takeover. Exploitable via ``ansible.python.activationScript``.
|
| CVE-2026-12987 |
|
SQL Injection in wordpress (CVE-2026-12987)
SQL injection in wordpress (CVE-2026-12987). Confidential information can be exposed externally.
|
| CVE-2026-15802 |
|
Vulnerability in wordpress (CVE-2026-15802)
vulnerability in wordpress (CVE-2026-15802). Data can be tampered with by attackers.
|
| CVE-2026-62561 |
|
Privilege Escalation in c (CVE-2026-62561)
vulnerability in c (CVE-2026-62561). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62565 |
|
Information Disclosure in c (CVE-2026-62565)
vulnerability in c (CVE-2026-62565). Confidential information can be exposed externally.
|
| CVE-2026-62560 |
|
Information Disclosure in c (CVE-2026-62560)
vulnerability in c (CVE-2026-62560). Confidential information can be exposed externally.
|
| CVE-2026-62574 |
|
Vulnerability in c (CVE-2026-62574)
vulnerability in c (CVE-2026-62574). Successful exploitation can lead to full system takeover.
|