Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-73242 |
|
Vulnerability in c (CVE-2026-73242)
vulnerability in c (CVE-2026-73242). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73241 |
|
Authentication Bypass in c (CVE-2026-73241)
authentication bypass in c (CVE-2026-73241). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73235 |
|
XXE (XML External Entity) in cpp (CVE-2026-73235)
vulnerability in cpp (CVE-2026-73235). Confidential information can be exposed externally.
|
| CVE-2026-73234 |
|
Path Traversal in cpp (CVE-2026-73234)
path traversal in cpp (CVE-2026-73234). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73233 |
|
Code Injection in cpp (CVE-2026-73233)
code injection in cpp (CVE-2026-73233). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73232 |
|
Vulnerability in dos (CVE-2026-73232)
vulnerability in dos (CVE-2026-73232). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73231 |
|
Vulnerability in CVE-2026-73231 (CVE-2026-73231)
vulnerability in CVE-2026-73231 (CVE-2026-73231). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73230 |
|
Information Disclosure in CVE-2026-73230 (CVE-2026-73230)
vulnerability in CVE-2026-73230 (CVE-2026-73230). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73229 |
|
Information Disclosure in django (CVE-2026-73229)
vulnerability in django (CVE-2026-73229). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73036 |
|
Vulnerability in CVE-2026-73036 (CVE-2026-73036)
vulnerability in CVE-2026-73036 (CVE-2026-73036). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73034 |
|
Path Traversal in path-traversal (CVE-2026-73034)
path traversal in path-traversal (CVE-2026-73034). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73032 |
|
Code Injection in CVE-2026-73032 (CVE-2026-73032)
code injection in CVE-2026-73032 (CVE-2026-73032). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73031 |
|
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers...
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers...
|
| CVE-2026-71845 |
|
Vulnerability in redhat (CVE-2026-71845)
vulnerability in redhat (CVE-2026-71845). Confidential information can be exposed externally.
|
| CVE-2026-71475 |
|
Path Traversal in redhat (CVE-2026-71475)
path traversal in redhat (CVE-2026-71475). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71474 |
|
Vulnerability in redhat (CVE-2026-71474)
vulnerability in redhat (CVE-2026-71474). Confidential information can be exposed externally.
|
| CVE-2026-71468 |
|
Vulnerability in CVE-2026-71468 (CVE-2026-71468)
vulnerability in CVE-2026-71468 (CVE-2026-71468). Confidential information can be exposed externally. Exploitable via ``getFederationConfig``.
|
| CVE-2026-71467 |
|
Authentication Bypass in CVE-2026-71467 (CVE-2026-71467)
authentication bypass in CVE-2026-71467 (CVE-2026-71467). Confidential information can be exposed externally.
|
| CVE-2026-70339 |
|
Vulnerability in microsoft (CVE-2026-70339)
vulnerability in microsoft (CVE-2026-70339). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66146 |
|
Cross-Site Scripting (XSS) in CVE-2026-66146 (CVE-2026-66146)
cross-site scripting in CVE-2026-66146 (CVE-2026-66146). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66145 |
|
Code Injection in CVE-2026-66145 (CVE-2026-66145)
code injection in CVE-2026-66145 (CVE-2026-66145). Confidential information can be exposed externally.
|
| CVE-2026-65655 |
|
Vulnerability in CVE-2026-65655 (CVE-2026-65655)
vulnerability in CVE-2026-65655 (CVE-2026-65655). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19091 |
|
Path Traversal in wordpress (CVE-2026-19091)
path traversal in wordpress (CVE-2026-19091). Data can be tampered with by attackers.
|
| CVE-2026-18844 |
|
Vulnerability in CVE-2026-18844 (CVE-2026-18844)
vulnerability in CVE-2026-18844 (CVE-2026-18844). Data can be tampered with by attackers.
|
| CVE-2026-16230 |
|
Vulnerability in wordpress (CVE-2026-16230)
vulnerability in wordpress (CVE-2026-16230). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13457 |
|
Unrestricted File Upload in wordpress (CVE-2026-13457)
vulnerability in wordpress (CVE-2026-13457). Confidential information can be exposed externally.
|
| CVE-2024-14042 |
|
Buffer Overflow in c (CVE-2024-14042)
vulnerability in c (CVE-2024-14042). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73228 |
|
Vulnerability in django (CVE-2026-73228)
vulnerability in django (CVE-2026-73228). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73227 |
|
Path Traversal in CVE-2026-73227 (CVE-2026-73227)
path traversal in CVE-2026-73227 (CVE-2026-73227). Data can be tampered with by attackers.
|
| CVE-2026-73226 |
|
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions t...
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade-func in src/app/server/dispatch-center.js and handle...
|
| CVE-2026-73225 |
|
Path Traversal in CVE-2026-73225 (CVE-2026-73225)
path traversal in CVE-2026-73225 (CVE-2026-73225). Data can be tampered with by attackers.
|
| CVE-2026-73224 |
|
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user do...
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user downloads a crafted folder and invokes Properties and Calculate Size because calcLocal in src/client/c...
|
| CVE-2026-73223 |
|
Path Traversal in CVE-2026-73223 (CVE-2026-73223)
path traversal in CVE-2026-73223 (CVE-2026-73223). Data can be tampered with by attackers.
|
| CVE-2026-73222 |
|
Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds t...
Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds to all interfaces on port 3444, permits cross-origin requests, and requires no authentication. The PO...
|
| CVE-2026-73221 |
|
Authorization Flaw in CVE-2026-73221 (CVE-2026-73221)
vulnerability in CVE-2026-73221 (CVE-2026-73221). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72742 |
|
DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field...
DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field...
|
| CVE-2026-69119 |
|
Vulnerability in CVE-2026-69119 (CVE-2026-69119)
vulnerability in CVE-2026-69119 (CVE-2026-69119). Data can be tampered with by attackers. Exploitable via `DELETE /projects/{id}`.
|
| CVE-2026-69117 |
|
Vulnerability in django (CVE-2026-69117)
vulnerability in django (CVE-2026-69117). Confidential information can be exposed externally.
|
| CVE-2026-69115 |
|
Vulnerability in CVE-2026-69115 (CVE-2026-69115)
vulnerability in CVE-2026-69115 (CVE-2026-69115). Confidential information can be exposed externally.
|
| CVE-2026-18712 |
|
Authorization Flaw in CVE-2026-18712 (CVE-2026-18712)
vulnerability in CVE-2026-18712 (CVE-2026-18712). Data can be tampered with by attackers.
|
| CVE-2026-18711 |
|
Use-After-Free in CVE-2026-18711 (CVE-2026-18711)
vulnerability in CVE-2026-18711 (CVE-2026-18711). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18709 |
|
Vulnerability in CVE-2026-18709 (CVE-2026-18709)
vulnerability in CVE-2026-18709 (CVE-2026-18709). Data can be tampered with by attackers.
|
| CVE-2026-18708 |
|
Code Injection in dos (CVE-2026-18708)
code injection in dos (CVE-2026-18708). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18707 |
|
Vulnerability in dos (CVE-2026-18707)
vulnerability in dos (CVE-2026-18707). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18706 |
|
Use-After-Free in CVE-2026-18706 (CVE-2026-18706)
vulnerability in CVE-2026-18706 (CVE-2026-18706). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18705 |
|
Vulnerability in CVE-2026-18705 (CVE-2026-18705)
vulnerability in CVE-2026-18705 (CVE-2026-18705). Confidential information can be exposed externally.
|
| CVE-2026-18704 |
|
Vulnerability in CVE-2026-18704 (CVE-2026-18704)
vulnerability in CVE-2026-18704 (CVE-2026-18704). Data can be tampered with by attackers.
|
| CVE-2026-18703 |
|
Authorization Flaw in CVE-2026-18703 (CVE-2026-18703)
vulnerability in CVE-2026-18703 (CVE-2026-18703). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18702 |
|
Privilege Escalation in CVE-2026-18702 (CVE-2026-18702)
vulnerability in CVE-2026-18702 (CVE-2026-18702). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18701 |
|
Vulnerability in dos (CVE-2026-18701)
vulnerability in dos (CVE-2026-18701). Risk of unauthorized operations or information disclosure.
|