Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-9777 Path Traversal in path-traversal (CVE-2026-9777)
path traversal in path-traversal (CVE-2026-9777). Successful exploitation can lead to full system takeover.
CVE-2026-9778 Path Traversal in path-traversal (CVE-2026-9778)
path traversal in path-traversal (CVE-2026-9778). Successful exploitation can lead to full system takeover.
CVE-2026-9779 Vulnerability in aten (CVE-2026-9779)
vulnerability in aten (CVE-2026-9779). Successful exploitation can lead to full system takeover.
CVE-2026-9772 OS Command Injection in unraid (CVE-2026-9772)
OS command injection in unraid (CVE-2026-9772). Successful exploitation can lead to full system takeover.
CVE-2026-9782 SQL Injection in sqli (CVE-2026-9782)
SQL injection in sqli (CVE-2026-9782). Successful exploitation can lead to full system takeover.
CVE-2026-9780 Cross-Site Scripting (XSS) in quest (CVE-2026-9780)
cross-site scripting in quest (CVE-2026-9780). Successful exploitation can lead to full system takeover.
CVE-2026-9781 SQL Injection in sqli (CVE-2026-9781)
SQL injection in sqli (CVE-2026-9781). Successful exploitation can lead to full system takeover.
CVE-2026-10043 Unsafe Deserialization in deserialization (CVE-2026-10043)
vulnerability in deserialization (CVE-2026-10043). Successful exploitation can lead to full system takeover.
CVE-2026-2050 Vulnerability in gimp (CVE-2026-2050)
vulnerability in gimp (CVE-2026-2050). Successful exploitation can lead to full system takeover.
CVE-2026-39951 SQL Injection in sqli (CVE-2026-39951)
SQL injection in sqli (CVE-2026-39951). Confidential information can be exposed externally.
CVE-2026-55759 Authentication Bypass in CVE-2026-55759 (CVE-2026-55759)
authentication bypass in CVE-2026-55759 (CVE-2026-55759). Confidential information can be exposed externally. Mitigation: upgrade to `8.5.1` or later.
CVE-2026-55762 Vulnerability in CVE-2026-55762 (CVE-2026-55762)
vulnerability in CVE-2026-55762 (CVE-2026-55762). Data can be tampered with by attackers. Exploitable via `POST /api/v1/fingerprint`. Mitigation: upgrade to `8.5.1` or later.
CVE-2026-54066 Path Traversal in github.com/siyuan-note/siyuan/kernel (CVE-2026-54066)
path traversal in github.com/siyuan-note/siyuan/kernel (CVE-2026-54066). Confidential information can be exposed externally. Exploitable via `GET /assets/`. Mitigation: upgrade to `0.0.0-20260628153353-2d5d72223df4` or later.
CVE-2026-54070 Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-54070)
cross-site scripting in github.com/siyuan-note/siyuan/kernel (CVE-2026-54070). Confidential information can be exposed externally. Exploitable via ``renderPackageREADME``. Mitigation: upgrade to `0.0.0-20260628153353-2d5d72223df4` or later.
CVE-2026-52794 Vulnerability in dos (CVE-2026-52794)
vulnerability in dos (CVE-2026-52794). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.5.2` or later.
CVE-2026-50189 Vulnerability in appsmith (CVE-2026-50189)
vulnerability in appsmith (CVE-2026-50189). Successful exploitation can lead to full system takeover. Exploitable via `GET /api/v1/admin/env`. Mitigation: upgrade to `2.1` or later.
CVE-2026-13037 Use-After-Free in google (CVE-2026-13037)
vulnerability in google (CVE-2026-13037). Successful exploitation can lead to full system takeover.
CVE-2026-13038 Use-After-Free in google (CVE-2026-13038)
vulnerability in google (CVE-2026-13038). Successful exploitation can lead to full system takeover.
CVE-2026-13201 Vulnerability in kubevirt (CVE-2026-13201)
vulnerability in kubevirt (CVE-2026-13201). Risk of unauthorized operations or information disclosure.
CVE-2026-11998 Vulnerability in angular (CVE-2026-11998)
vulnerability in angular (CVE-2026-11998). Confidential information can be exposed externally.
CVE-2026-13035 Use-After-Free in google (CVE-2026-13035)
vulnerability in google (CVE-2026-13035). Successful exploitation can lead to full system takeover.
CVE-2026-13036 Use-After-Free in google (CVE-2026-13036)
vulnerability in google (CVE-2026-13036). Successful exploitation can lead to full system takeover.
CVE-2026-13033 Out-of-Bounds Read in google (CVE-2026-13033)
vulnerability in google (CVE-2026-13033). Successful exploitation can lead to full system takeover.
CVE-2026-13027 Use-After-Free in google (CVE-2026-13027)
vulnerability in google (CVE-2026-13027). Successful exploitation can lead to full system takeover.
CVE-2026-13031 Use-After-Free in google (CVE-2026-13031)
vulnerability in google (CVE-2026-13031). Successful exploitation can lead to full system takeover.
CVE-2026-13029 Use-After-Free in google (CVE-2026-13029)
vulnerability in google (CVE-2026-13029). Successful exploitation can lead to full system takeover.
CVE-2026-13025 Vulnerability in google (CVE-2026-13025)
vulnerability in google (CVE-2026-13025). Successful exploitation can lead to full system takeover.
CVE-2026-13026 Use-After-Free in google (CVE-2026-13026)
vulnerability in google (CVE-2026-13026). Successful exploitation can lead to full system takeover.
CVE-2026-50129 Vulnerability in mastodon (CVE-2026-50129)
vulnerability in mastodon (CVE-2026-50129). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.5.11` or later.
CVE-2026-33235 Vulnerability in dos (CVE-2026-33235)
vulnerability in dos (CVE-2026-33235). Risk of unauthorized operations or information disclosure.
CVE-2026-45687 Vulnerability in CVE-2026-45687 (CVE-2026-45687)
vulnerability in CVE-2026-45687 (CVE-2026-45687). Confidential information can be exposed externally. Mitigation: upgrade to `8.5.0` or later.
CVE-2026-55583 Vulnerability in CVE-2026-55583 (CVE-2026-55583)
vulnerability in CVE-2026-55583 (CVE-2026-55583). Confidential information can be exposed externally.
CVE-2026-47389 Vulnerability in mastodon (CVE-2026-47389)
vulnerability in mastodon (CVE-2026-47389). Confidential information can be exposed externally. Mitigation: upgrade to `4.5.10` or later.
CVE-2026-53950 Cross-Site Scripting (XSS) in @tryghost/activitypub (CVE-2026-53950)
cross-site scripting in @tryghost/activitypub (CVE-2026-53950). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.1.0` or later.
CVE-2026-49247 Path Traversal in CVE-2026-49247 (CVE-2026-49247)
path traversal in CVE-2026-49247 (CVE-2026-49247). Successful exploitation can lead to full system takeover. Exploitable via `POST /ClientLog/Document`. Mitigation: upgrade to `10.11.10` or later.
CVE-2026-48793 Vulnerability in CVE-2026-48793 (CVE-2026-48793)
vulnerability in CVE-2026-48793 (CVE-2026-48793). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.11.10` or later.
CVE-2026-53120 Use-After-Free in linux (CVE-2026-53120)
vulnerability in linux (CVE-2026-53120). Successful exploitation can lead to full system takeover.
CVE-2026-53129 Use-After-Free in linux (CVE-2026-53129)
vulnerability in linux (CVE-2026-53129). Successful exploitation can lead to full system takeover.
CVE-2026-53130 Vulnerability in linux (CVE-2026-53130)
vulnerability in linux (CVE-2026-53130). Successful exploitation can lead to full system takeover.
CVE-2026-53118 Use-After-Free in c (CVE-2026-53118)
vulnerability in c (CVE-2026-53118). Successful exploitation can lead to full system takeover.
CVE-2026-53119 Use-After-Free in linux (CVE-2026-53119)
vulnerability in linux (CVE-2026-53119). Successful exploitation can lead to full system takeover.
CVE-2026-53110 Vulnerability in linux (CVE-2026-53110)
vulnerability in linux (CVE-2026-53110). Successful exploitation can lead to full system takeover.
CVE-2026-53109 Use-After-Free in linux (CVE-2026-53109)
vulnerability in linux (CVE-2026-53109). Successful exploitation can lead to full system takeover.
CVE-2026-53098 Use-After-Free in linux (CVE-2026-53098)
vulnerability in linux (CVE-2026-53098). Successful exploitation can lead to full system takeover.
CVE-2026-53116 Use-After-Free in linux (CVE-2026-53116)
vulnerability in linux (CVE-2026-53116). Successful exploitation can lead to full system takeover.
CVE-2026-53112 Use-After-Free in linux (CVE-2026-53112)
vulnerability in linux (CVE-2026-53112). Successful exploitation can lead to full system takeover.
CVE-2026-53115 Use-After-Free in linux (CVE-2026-53115)
vulnerability in linux (CVE-2026-53115). Successful exploitation can lead to full system takeover.
CVE-2026-53117 Use-After-Free in linux (CVE-2026-53117)
vulnerability in linux (CVE-2026-53117). Successful exploitation can lead to full system takeover.
CVE-2026-53081 Vulnerability in c (CVE-2026-53081)
vulnerability in c (CVE-2026-53081). Successful exploitation can lead to full system takeover.
CVE-2026-53096 Vulnerability in linux (CVE-2026-53096)
vulnerability in linux (CVE-2026-53096). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →