Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-76647 |
|
Information Disclosure in CVE-2026-76647 (CVE-2026-76647)
vulnerability in CVE-2026-76647 (CVE-2026-76647). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76574 |
|
Vulnerability in sqli (CVE-2026-76574)
vulnerability in sqli (CVE-2026-76574). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76572 |
|
Vulnerability in CVE-2026-76572 (CVE-2026-76572)
vulnerability in CVE-2026-76572 (CVE-2026-76572). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18871 |
|
Vulnerability in ibm (CVE-2026-18871)
vulnerability in ibm (CVE-2026-18871). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18821 |
|
Out-of-Bounds Write in ibm (CVE-2026-18821)
out-of-bounds write in ibm (CVE-2026-18821). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17414 |
|
Vulnerability in ibm (CVE-2026-17414)
vulnerability in ibm (CVE-2026-17414). Data can be tampered with by attackers.
|
| CVE-2026-17091 |
|
Vulnerability in ibm (CVE-2026-17091)
vulnerability in ibm (CVE-2026-17091). Data can be tampered with by attackers.
|
| CVE-2026-17063 |
|
Authorization Flaw in ibm (CVE-2026-17063)
vulnerability in ibm (CVE-2026-17063). Confidential information can be exposed externally.
|
| CVE-2026-17042 |
|
Out-of-Bounds Read in ibm (CVE-2026-17042)
vulnerability in ibm (CVE-2026-17042). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16913 |
|
Out-of-Bounds Write in ibm (CVE-2026-16913)
out-of-bounds write in ibm (CVE-2026-16913). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16914 |
|
Out-of-Bounds Write in ibm (CVE-2026-16914)
out-of-bounds write in ibm (CVE-2026-16914). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16933 |
|
Vulnerability in ibm (CVE-2026-16933)
vulnerability in ibm (CVE-2026-16933). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17028 |
|
Out-of-Bounds Read in ibm (CVE-2026-17028)
vulnerability in ibm (CVE-2026-17028). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16919 |
|
Vulnerability in ibm (CVE-2026-16919)
vulnerability in ibm (CVE-2026-16919). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16883 |
|
Out-of-Bounds Read in ibm (CVE-2026-16883)
vulnerability in ibm (CVE-2026-16883). Confidential information can be exposed externally.
|
| CVE-2026-16875 |
|
OS Command Injection in ibm (CVE-2026-16875)
OS command injection in ibm (CVE-2026-16875). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53965 |
|
Vulnerability in mcp/sdk (CVE-2026-53965)
vulnerability in mcp/sdk (CVE-2026-53965). Risk of unauthorized operations or information disclosure. Exploitable via ``memory_limit``. Mitigation: upgrade to `0.7.1` or later.
|
| CVE-2026-61807 |
|
Cross-Site Scripting (XSS) in snipe/snipe-it (CVE-2026-61807)
cross-site scripting in snipe/snipe-it (CVE-2026-61807). Risk of unauthorized operations or information disclosure. Exploitable via ``b224cc636c6780386e3f73f03d1171f52ab4c37a``. Mitigation: upgrade to `8.6.2` or later.
|
| CVE-2026-55694 |
|
Vulnerability in snipe/snipe-it (CVE-2026-55694)
vulnerability in snipe/snipe-it (CVE-2026-55694). Risk of unauthorized operations or information disclosure. Exploitable via `GET /stored-eula-file/{filename}`. Mitigation: upgrade to `8.6.3` or later.
|
| CVE-2026-55703 |
|
Vulnerability in snipe/snipe-it (CVE-2026-55703)
vulnerability in snipe/snipe-it (CVE-2026-55703). Risk of unauthorized operations or information disclosure. Exploitable via `GET /maintenances/5`. Mitigation: upgrade to `8.6.3` or later.
|
| CVE-2026-18848 |
|
Cross-Site Request Forgery (CSRF) in ibm (CVE-2026-18848)
vulnerability in ibm (CVE-2026-18848). Data can be tampered with by attackers.
|
| CVE-2026-19321 |
|
Vulnerability in ibm (CVE-2026-19321)
vulnerability in ibm (CVE-2026-19321). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18681 |
|
Vulnerability in ibm (CVE-2026-18681)
vulnerability in ibm (CVE-2026-18681). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17100 |
|
Out-of-Bounds Write in ibm (CVE-2026-17100)
out-of-bounds write in ibm (CVE-2026-17100). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17429 |
|
Authorization Flaw in ibm (CVE-2026-17429)
vulnerability in ibm (CVE-2026-17429). Data can be tampered with by attackers.
|
| CVE-2026-17494 |
|
Vulnerability in ibm (CVE-2026-17494)
vulnerability in ibm (CVE-2026-17494). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18315 |
|
Vulnerability in wordpress (CVE-2026-18315)
vulnerability in wordpress (CVE-2026-18315). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17093 |
|
Vulnerability in ibm (CVE-2026-17093)
vulnerability in ibm (CVE-2026-17093). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16687 |
|
Vulnerability in ibm (CVE-2026-16687)
vulnerability in ibm (CVE-2026-16687). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16938 |
|
Vulnerability in c (CVE-2026-16938)
vulnerability in c (CVE-2026-16938). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16828 |
|
Out-of-Bounds Read in ibm (CVE-2026-16828)
vulnerability in ibm (CVE-2026-16828). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16930 |
|
Vulnerability in ibm (CVE-2026-16930)
vulnerability in ibm (CVE-2026-16930). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16832 |
|
Vulnerability in ibm (CVE-2026-16832)
vulnerability in ibm (CVE-2026-16832). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16835 |
|
Vulnerability in ibm (CVE-2026-16835)
vulnerability in ibm (CVE-2026-16835). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19653 |
|
Vulnerability in dos (CVE-2026-19653)
vulnerability in dos (CVE-2026-19653). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19234 |
|
Vulnerability in ibm (CVE-2026-19234)
vulnerability in ibm (CVE-2026-19234). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19875 |
|
Vulnerability in langflow (CVE-2026-19875)
vulnerability in langflow (CVE-2026-19875). Data can be tampered with by attackers.
|
| CVE-2026-72530 KEV |
|
[KEV] Code Injection in trueconf (CVE-2026-72530)
code injection in trueconf (CVE-2026-72530). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-72529 KEV |
|
[KEV] Vulnerability in trueconf (CVE-2026-72529)
vulnerability in trueconf (CVE-2026-72529). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-64852 |
|
Vulnerability in CVE-2026-64852 (CVE-2026-64852)
vulnerability in CVE-2026-64852 (CVE-2026-64852). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64851 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-64851)
cross-site scripting in wordpress (CVE-2026-64851). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64850 |
|
Code Injection in CVE-2026-64850 (CVE-2026-64850)
code injection in CVE-2026-64850 (CVE-2026-64850). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63408 |
|
Vulnerability in apache (CVE-2026-63408)
vulnerability in apache (CVE-2026-63408). Confidential information can be exposed externally. Exploitable via `Referer header`.
|
| CVE-2026-62672 |
|
Vulnerability in CVE-2026-62672 (CVE-2026-62672)
vulnerability in CVE-2026-62672 (CVE-2026-62672). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62673 |
|
Vulnerability in getgrav/grav (CVE-2026-62673)
vulnerability in getgrav/grav (CVE-2026-62673). Risk of unauthorized operations or information disclosure. Exploitable via `GET /user/plugins/my-plugin/my-plugin.YAML`. Mitigation: upgrade to `2.0.4` or later.
|
| CVE-2026-62670 |
|
Vulnerability in CVE-2026-62670 (CVE-2026-62670)
vulnerability in CVE-2026-62670 (CVE-2026-62670). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62668 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-62668 (CVE-2026-62668)
SSRF in CVE-2026-62668 (CVE-2026-62668). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61690 |
|
Vulnerability in CVE-2026-61690 (CVE-2026-61690)
vulnerability in CVE-2026-61690 (CVE-2026-61690). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16819 |
|
Vulnerability in dos (CVE-2026-16819)
vulnerability in dos (CVE-2026-16819). Data can be tampered with by attackers.
|
| CVE-2026-20177 |
|
Vulnerability in Cisco dos (CVE-2026-20177)
vulnerability in Cisco dos (CVE-2026-20177). Risk of unauthorized operations or information disclosure.
|