Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-73242 Vulnerability in c (CVE-2026-73242)
vulnerability in c (CVE-2026-73242). Risk of unauthorized operations or information disclosure.
CVE-2026-73241 Authentication Bypass in c (CVE-2026-73241)
authentication bypass in c (CVE-2026-73241). Risk of unauthorized operations or information disclosure.
CVE-2026-73235 XXE (XML External Entity) in cpp (CVE-2026-73235)
vulnerability in cpp (CVE-2026-73235). Confidential information can be exposed externally.
CVE-2026-73234 Path Traversal in cpp (CVE-2026-73234)
path traversal in cpp (CVE-2026-73234). Successful exploitation can lead to full system takeover.
CVE-2026-73233 Code Injection in cpp (CVE-2026-73233)
code injection in cpp (CVE-2026-73233). Risk of unauthorized operations or information disclosure.
CVE-2026-73232 Vulnerability in dos (CVE-2026-73232)
vulnerability in dos (CVE-2026-73232). Risk of unauthorized operations or information disclosure.
CVE-2026-73231 Vulnerability in CVE-2026-73231 (CVE-2026-73231)
vulnerability in CVE-2026-73231 (CVE-2026-73231). Successful exploitation can lead to full system takeover.
CVE-2026-73230 Information Disclosure in CVE-2026-73230 (CVE-2026-73230)
vulnerability in CVE-2026-73230 (CVE-2026-73230). Risk of unauthorized operations or information disclosure.
CVE-2026-73229 Information Disclosure in django (CVE-2026-73229)
vulnerability in django (CVE-2026-73229). Risk of unauthorized operations or information disclosure.
CVE-2026-73036 Vulnerability in CVE-2026-73036 (CVE-2026-73036)
vulnerability in CVE-2026-73036 (CVE-2026-73036). Risk of unauthorized operations or information disclosure.
CVE-2026-73034 Path Traversal in path-traversal (CVE-2026-73034)
path traversal in path-traversal (CVE-2026-73034). Successful exploitation can lead to full system takeover.
CVE-2026-73032 Code Injection in CVE-2026-73032 (CVE-2026-73032)
code injection in CVE-2026-73032 (CVE-2026-73032). Successful exploitation can lead to full system takeover.
CVE-2026-73031 telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers...
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers...
CVE-2026-71845 Vulnerability in redhat (CVE-2026-71845)
vulnerability in redhat (CVE-2026-71845). Confidential information can be exposed externally.
CVE-2026-71475 Path Traversal in redhat (CVE-2026-71475)
path traversal in redhat (CVE-2026-71475). Risk of unauthorized operations or information disclosure.
CVE-2026-71474 Vulnerability in redhat (CVE-2026-71474)
vulnerability in redhat (CVE-2026-71474). Confidential information can be exposed externally.
CVE-2026-71468 Vulnerability in CVE-2026-71468 (CVE-2026-71468)
vulnerability in CVE-2026-71468 (CVE-2026-71468). Confidential information can be exposed externally. Exploitable via ``getFederationConfig``.
CVE-2026-71467 Authentication Bypass in CVE-2026-71467 (CVE-2026-71467)
authentication bypass in CVE-2026-71467 (CVE-2026-71467). Confidential information can be exposed externally.
CVE-2026-70339 Vulnerability in microsoft (CVE-2026-70339)
vulnerability in microsoft (CVE-2026-70339). Risk of unauthorized operations or information disclosure.
CVE-2026-66146 Cross-Site Scripting (XSS) in CVE-2026-66146 (CVE-2026-66146)
cross-site scripting in CVE-2026-66146 (CVE-2026-66146). Risk of unauthorized operations or information disclosure.
CVE-2026-66145 Code Injection in CVE-2026-66145 (CVE-2026-66145)
code injection in CVE-2026-66145 (CVE-2026-66145). Confidential information can be exposed externally.
CVE-2026-65655 Vulnerability in CVE-2026-65655 (CVE-2026-65655)
vulnerability in CVE-2026-65655 (CVE-2026-65655). Risk of unauthorized operations or information disclosure.
CVE-2026-19091 Path Traversal in wordpress (CVE-2026-19091)
path traversal in wordpress (CVE-2026-19091). Data can be tampered with by attackers.
CVE-2026-18844 Vulnerability in CVE-2026-18844 (CVE-2026-18844)
vulnerability in CVE-2026-18844 (CVE-2026-18844). Data can be tampered with by attackers.
CVE-2026-16230 Vulnerability in wordpress (CVE-2026-16230)
vulnerability in wordpress (CVE-2026-16230). Successful exploitation can lead to full system takeover.
CVE-2026-13457 Unrestricted File Upload in wordpress (CVE-2026-13457)
vulnerability in wordpress (CVE-2026-13457). Confidential information can be exposed externally.
CVE-2024-14042 Buffer Overflow in c (CVE-2024-14042)
vulnerability in c (CVE-2024-14042). Risk of unauthorized operations or information disclosure.
CVE-2026-73228 Vulnerability in django (CVE-2026-73228)
vulnerability in django (CVE-2026-73228). Risk of unauthorized operations or information disclosure.
CVE-2026-73227 Path Traversal in CVE-2026-73227 (CVE-2026-73227)
path traversal in CVE-2026-73227 (CVE-2026-73227). Data can be tampered with by attackers.
CVE-2026-73226 electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions t...
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade-func in src/app/server/dispatch-center.js and handle...
CVE-2026-73225 Path Traversal in CVE-2026-73225 (CVE-2026-73225)
path traversal in CVE-2026-73225 (CVE-2026-73225). Data can be tampered with by attackers.
CVE-2026-73224 electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user do...
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user downloads a crafted folder and invokes Properties and Calculate Size because calcLocal in src/client/c...
CVE-2026-73223 Path Traversal in CVE-2026-73223 (CVE-2026-73223)
path traversal in CVE-2026-73223 (CVE-2026-73223). Data can be tampered with by attackers.
CVE-2026-73222 Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds t...
Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds to all interfaces on port 3444, permits cross-origin requests, and requires no authentication. The PO...
CVE-2026-73221 Authorization Flaw in CVE-2026-73221 (CVE-2026-73221)
vulnerability in CVE-2026-73221 (CVE-2026-73221). Risk of unauthorized operations or information disclosure.
CVE-2026-72742 DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field...
DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field...
CVE-2026-69119 Vulnerability in CVE-2026-69119 (CVE-2026-69119)
vulnerability in CVE-2026-69119 (CVE-2026-69119). Data can be tampered with by attackers. Exploitable via `DELETE /projects/{id}`.
CVE-2026-69117 Vulnerability in django (CVE-2026-69117)
vulnerability in django (CVE-2026-69117). Confidential information can be exposed externally.
CVE-2026-69115 Vulnerability in CVE-2026-69115 (CVE-2026-69115)
vulnerability in CVE-2026-69115 (CVE-2026-69115). Confidential information can be exposed externally.
CVE-2026-18712 Authorization Flaw in CVE-2026-18712 (CVE-2026-18712)
vulnerability in CVE-2026-18712 (CVE-2026-18712). Data can be tampered with by attackers.
CVE-2026-18711 Use-After-Free in CVE-2026-18711 (CVE-2026-18711)
vulnerability in CVE-2026-18711 (CVE-2026-18711). Risk of unauthorized operations or information disclosure.
CVE-2026-18709 Vulnerability in CVE-2026-18709 (CVE-2026-18709)
vulnerability in CVE-2026-18709 (CVE-2026-18709). Data can be tampered with by attackers.
CVE-2026-18708 Code Injection in dos (CVE-2026-18708)
code injection in dos (CVE-2026-18708). Risk of unauthorized operations or information disclosure.
CVE-2026-18707 Vulnerability in dos (CVE-2026-18707)
vulnerability in dos (CVE-2026-18707). Risk of unauthorized operations or information disclosure.
CVE-2026-18706 Use-After-Free in CVE-2026-18706 (CVE-2026-18706)
vulnerability in CVE-2026-18706 (CVE-2026-18706). Successful exploitation can lead to full system takeover.
CVE-2026-18705 Vulnerability in CVE-2026-18705 (CVE-2026-18705)
vulnerability in CVE-2026-18705 (CVE-2026-18705). Confidential information can be exposed externally.
CVE-2026-18704 Vulnerability in CVE-2026-18704 (CVE-2026-18704)
vulnerability in CVE-2026-18704 (CVE-2026-18704). Data can be tampered with by attackers.
CVE-2026-18703 Authorization Flaw in CVE-2026-18703 (CVE-2026-18703)
vulnerability in CVE-2026-18703 (CVE-2026-18703). Risk of unauthorized operations or information disclosure.
CVE-2026-18702 Privilege Escalation in CVE-2026-18702 (CVE-2026-18702)
vulnerability in CVE-2026-18702 (CVE-2026-18702). Risk of unauthorized operations or information disclosure.
CVE-2026-18701 Vulnerability in dos (CVE-2026-18701)
vulnerability in dos (CVE-2026-18701). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →