Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-59090 |
|
Vulnerability in gimp (CVE-2026-59090)
vulnerability in gimp (CVE-2026-59090). Data can be tampered with by attackers. Exploitable via ``block_rem``.
|
| CVE-2026-12984 |
|
Vulnerability in CVE-2026-12984 (CVE-2026-12984)
vulnerability in CVE-2026-12984 (CVE-2026-12984). Confidential information can be exposed externally.
|
| CVE-2026-68099 |
|
Vulnerability in c (CVE-2026-68099)
vulnerability in c (CVE-2026-68099). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68102 |
|
Vulnerability in CVE-2026-68102 (CVE-2026-68102)
vulnerability in CVE-2026-68102 (CVE-2026-68102). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59233 |
|
Vulnerability in CVE-2026-59233 (CVE-2026-59233)
vulnerability in CVE-2026-59233 (CVE-2026-59233). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68095 |
|
Vulnerability in CVE-2026-68095 (CVE-2026-68095)
vulnerability in CVE-2026-68095 (CVE-2026-68095). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68093 |
|
Vulnerability in CVE-2026-68093 (CVE-2026-68093)
vulnerability in CVE-2026-68093 (CVE-2026-68093). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19278 |
|
Vulnerability in privilege-escalation (CVE-2026-19278)
vulnerability in privilege-escalation (CVE-2026-19278). Confidential information can be exposed externally.
|
| CVE-2026-68097 |
|
Vulnerability in CVE-2026-68097 (CVE-2026-68097)
vulnerability in CVE-2026-68097 (CVE-2026-68097). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13206 |
|
OS Command Injection in CVE-2026-13206 (CVE-2026-13206)
OS command injection in CVE-2026-13206 (CVE-2026-13206). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18370 |
|
Vulnerability in dos (CVE-2026-18370)
vulnerability in dos (CVE-2026-18370). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68101 |
|
Vulnerability in CVE-2026-68101 (CVE-2026-68101)
vulnerability in CVE-2026-68101 (CVE-2026-68101). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72761 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-72761)
SSRF in ssrf (CVE-2026-72761). Risk of unauthorized operations or information disclosure. Exploitable via ``ip.is_global``.
|
| CVE-2026-16742 |
|
Privilege Escalation in privilege-escalation (CVE-2026-16742)
vulnerability in privilege-escalation (CVE-2026-16742). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15060 |
|
Vulnerability in c (CVE-2026-15060)
vulnerability in c (CVE-2026-15060). Risk of unauthorized operations or information disclosure. Exploitable via ``polkit``.
|
| CVE-2026-15059 |
|
Path Traversal in path-traversal (CVE-2026-15059)
path traversal in path-traversal (CVE-2026-15059). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68092 |
|
Vulnerability in CVE-2026-68092 (CVE-2026-68092)
vulnerability in CVE-2026-68092 (CVE-2026-68092). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68091 |
|
Vulnerability in CVE-2026-68091 (CVE-2026-68091)
vulnerability in CVE-2026-68091 (CVE-2026-68091). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68090 |
|
Vulnerability in c (CVE-2026-68090)
vulnerability in c (CVE-2026-68090). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68089 |
|
Vulnerability in CVE-2026-68089 (CVE-2026-68089)
vulnerability in CVE-2026-68089 (CVE-2026-68089). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68088 |
|
Vulnerability in CVE-2026-68088 (CVE-2026-68088)
vulnerability in CVE-2026-68088 (CVE-2026-68088). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68087 |
|
Vulnerability in CVE-2026-68087 (CVE-2026-68087)
vulnerability in CVE-2026-68087 (CVE-2026-68087). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68086 |
|
Vulnerability in CVE-2026-68086 (CVE-2026-68086)
vulnerability in CVE-2026-68086 (CVE-2026-68086). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68085 |
|
Vulnerability in CVE-2026-68085 (CVE-2026-68085)
vulnerability in CVE-2026-68085 (CVE-2026-68085). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68084 |
|
Vulnerability in CVE-2026-68084 (CVE-2026-68084)
vulnerability in CVE-2026-68084 (CVE-2026-68084). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68083 |
|
Vulnerability in CVE-2026-68083 (CVE-2026-68083)
vulnerability in CVE-2026-68083 (CVE-2026-68083). Data can be tampered with by attackers.
|
| CVE-2026-64941 |
|
Open Redirect in CVE-2026-64941 (CVE-2026-64941)
vulnerability in CVE-2026-64941 (CVE-2026-64941). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59088 |
|
Vulnerability in dos (CVE-2026-59088)
vulnerability in dos (CVE-2026-59088). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72594 |
|
Cross-Site Scripting (XSS) in CVE-2026-72594 (CVE-2026-72594)
cross-site scripting in CVE-2026-72594 (CVE-2026-72594). Confidential information can be exposed externally.
|
| CVE-2026-72593 |
|
Vulnerability in CVE-2026-72593 (CVE-2026-72593)
vulnerability in CVE-2026-72593 (CVE-2026-72593). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72592 |
|
Unrestricted File Upload in CVE-2026-72592 (CVE-2026-72592)
vulnerability in CVE-2026-72592 (CVE-2026-72592). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72591 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-72591)
SSRF in ssrf (CVE-2026-72591). Confidential information can be exposed externally. Exploitable via `PATCH /apis/web/v1/album/{id}/image`.
|
| CVE-2026-72590 |
|
Vulnerability in CVE-2026-72590 (CVE-2026-72590)
vulnerability in CVE-2026-72590 (CVE-2026-72590). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72589 |
|
OS Command Injection in CVE-2026-72589 (CVE-2026-72589)
OS command injection in CVE-2026-72589 (CVE-2026-72589). Successful exploitation can lead to full system takeover. Exploitable via `POST /import`.
|
| CVE-2026-72588 |
|
Vulnerability in CVE-2026-72588 (CVE-2026-72588)
vulnerability in CVE-2026-72588 (CVE-2026-72588). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/auth/recovery/request`.
|
| CVE-2026-72587 |
|
Vulnerability in CVE-2026-72587 (CVE-2026-72587)
vulnerability in CVE-2026-72587 (CVE-2026-72587). Risk of unauthorized operations or information disclosure. Exploitable via `GET /_instatic/hole/`.
|
| CVE-2026-72586 |
|
Vulnerability in CVE-2026-72586 (CVE-2026-72586)
vulnerability in CVE-2026-72586 (CVE-2026-72586). Confidential information can be exposed externally.
|
| CVE-2026-72585 |
|
Vulnerability in CVE-2026-72585 (CVE-2026-72585)
vulnerability in CVE-2026-72585 (CVE-2026-72585). Data can be tampered with by attackers.
|
| CVE-2026-72584 |
|
Vulnerability in CVE-2026-72584 (CVE-2026-72584)
vulnerability in CVE-2026-72584 (CVE-2026-72584). Confidential information can be exposed externally.
|
| CVE-2026-72583 |
|
Cross-Site Scripting (XSS) in CVE-2026-72583 (CVE-2026-72583)
cross-site scripting in CVE-2026-72583 (CVE-2026-72583). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72582 |
|
Vulnerability in CVE-2026-72582 (CVE-2026-72582)
vulnerability in CVE-2026-72582 (CVE-2026-72582). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72581 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-72581)
SSRF in ssrf (CVE-2026-72581). Confidential information can be exposed externally.
|
| CVE-2026-72580 |
|
OS Command Injection in CVE-2026-72580 (CVE-2026-72580)
OS command injection in CVE-2026-72580 (CVE-2026-72580). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72579 |
|
OS Command Injection in CVE-2026-72579 (CVE-2026-72579)
OS command injection in CVE-2026-72579 (CVE-2026-72579). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72578 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-72578)
vulnerability in csrf (CVE-2026-72578). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72577 |
|
Vulnerability in flask (CVE-2026-72577)
vulnerability in flask (CVE-2026-72577). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72576 |
|
Cross-Site Scripting (XSS) in CVE-2026-72576 (CVE-2026-72576)
cross-site scripting in CVE-2026-72576 (CVE-2026-72576). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72575 |
|
Vulnerability in CVE-2026-72575 (CVE-2026-72575)
vulnerability in CVE-2026-72575 (CVE-2026-72575). Confidential information can be exposed externally.
|
| CVE-2026-72574 |
|
Vulnerability in CVE-2026-72574 (CVE-2026-72574)
vulnerability in CVE-2026-72574 (CVE-2026-72574). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
|
| CVE-2026-72573 |
|
OS Command Injection in CVE-2026-72573 (CVE-2026-72573)
OS command injection in CVE-2026-72573 (CVE-2026-72573). Successful exploitation can lead to full system takeover.
|