Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-69102 |
|
Vulnerability in CVE-2026-69102 (CVE-2026-69102)
vulnerability in CVE-2026-69102 (CVE-2026-69102). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48381 |
|
SQL Injection in c (CVE-2026-48381)
SQL injection in c (CVE-2026-48381). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47705 |
|
Vulnerability in CVE-2026-47705 (CVE-2026-47705)
vulnerability in CVE-2026-47705 (CVE-2026-47705). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27302 |
|
Authorization Flaw in adobe (CVE-2026-27302)
vulnerability in adobe (CVE-2026-27302). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71384 |
|
Authorization Flaw in adobe (CVE-2026-71384)
vulnerability in adobe (CVE-2026-71384). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70306 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-70306)
cross-site scripting in microsoft (CVE-2026-70306). Confidential information can be exposed externally.
|
| CVE-2026-69223 |
|
SSRF (Server-Side Request Forgery) in apache (CVE-2026-69223)
SSRF in apache (CVE-2026-69223). Confidential information can be exposed externally.
|
| CVE-2026-65791 |
|
Vulnerability in microsoft (CVE-2026-65791)
vulnerability in microsoft (CVE-2026-65791). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62893 |
|
Use-After-Free in microsoft (CVE-2026-62893)
vulnerability in microsoft (CVE-2026-62893). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62878 |
|
Vulnerability in microsoft (CVE-2026-62878)
vulnerability in microsoft (CVE-2026-62878). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62815 |
|
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
|
| CVE-2026-73069 |
|
SQL Injection in CVE-2026-73069 (CVE-2026-73069)
SQL injection in CVE-2026-73069 (CVE-2026-73069). Successful exploitation can lead to full system takeover. Exploitable via `PATCH /rest/metadata/fields/`.
|
| CVE-2026-73080 |
|
SSRF (Server-Side Request Forgery) in github.com/seaweedfs/seaweedfs (CVE-2026-73080)
SSRF in github.com/seaweedfs/seaweedfs (CVE-2026-73080). Confidential information can be exposed externally. Exploitable via ``VolumeServer.FetchAndWriteNeedle``. Mitigation: upgrade to `0.0.0-20260512171120-69da20bdaec9` or later.
|
| CVE-2026-17061 |
|
Unsafe Deserialization in deserialization (CVE-2026-17061)
vulnerability in deserialization (CVE-2026-17061). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72920 |
|
Vulnerability in CVE-2026-72920 (CVE-2026-72920)
vulnerability in CVE-2026-72920 (CVE-2026-72920). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51584 |
|
Authentication Bypass in CVE-2026-51584 (CVE-2026-51584)
authentication bypass in CVE-2026-51584 (CVE-2026-51584). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48056 |
|
Vulnerability in CVE-2026-48056 (CVE-2026-48056)
vulnerability in CVE-2026-48056 (CVE-2026-48056). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72748 |
|
Vulnerability in dos (CVE-2026-72748)
vulnerability in dos (CVE-2026-72748). Data can be tampered with by attackers.
|
| CVE-2026-58115 |
|
Vulnerability in CVE-2026-58115 (CVE-2026-58115)
vulnerability in CVE-2026-58115 (CVE-2026-58115). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18972 |
|
Vulnerability in CVE-2026-18972 (CVE-2026-18972)
vulnerability in CVE-2026-18972 (CVE-2026-18972). Confidential information can be exposed externally.
|
| CVE-2026-72603 |
|
OS Command Injection in CVE-2026-72603 (CVE-2026-72603)
OS command injection in CVE-2026-72603 (CVE-2026-72603). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72599 |
|
SQL Injection in sqli (CVE-2026-72599)
SQL injection in sqli (CVE-2026-72599). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72550 |
|
SQL Injection in sqli (CVE-2026-72550)
SQL injection in sqli (CVE-2026-72550). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58231 |
|
Code Injection in CVE-2026-58231 (CVE-2026-58231)
code injection in CVE-2026-58231 (CVE-2026-58231). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10579 |
|
Vulnerability in CVE-2026-10579 (CVE-2026-10579)
vulnerability in CVE-2026-10579 (CVE-2026-10579). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19516 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-19516 (CVE-2026-19516)
SSRF in CVE-2026-19516 (CVE-2026-19516). Confidential information can be exposed externally.
|
| CVE-2026-13716 |
|
Vulnerability in path-traversal (CVE-2026-13716)
vulnerability in path-traversal (CVE-2026-13716). Data can be tampered with by attackers.
|
| CVE-2026-19425 |
|
SQL Injection in sqli (CVE-2026-19425)
SQL injection in sqli (CVE-2026-19425). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44758 |
|
Code Injection in CVE-2026-44758 (CVE-2026-44758)
code injection in CVE-2026-44758 (CVE-2026-44758). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34265 |
|
Out-of-Bounds Write in CVE-2026-34265 (CVE-2026-34265)
out-of-bounds write in CVE-2026-34265 (CVE-2026-34265). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18948 |
|
Unsafe Deserialization in deserialization (CVE-2026-18948)
vulnerability in deserialization (CVE-2026-18948). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14450 |
|
Vulnerability in CVE-2026-14450 (CVE-2026-14450)
vulnerability in CVE-2026-14450 (CVE-2026-14450). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72911 |
|
Vulnerability in CVE-2026-72911 (CVE-2026-72911)
vulnerability in CVE-2026-72911 (CVE-2026-72911). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72902 |
|
OS Command Injection in CVE-2026-72902 (CVE-2026-72902)
OS command injection in CVE-2026-72902 (CVE-2026-72902). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72901 |
|
OS Command Injection in CVE-2026-72901 (CVE-2026-72901)
OS command injection in CVE-2026-72901 (CVE-2026-72901). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72886 |
|
Privilege Escalation in CVE-2026-72886 (CVE-2026-72886)
vulnerability in CVE-2026-72886 (CVE-2026-72886). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72882 |
|
OS Command Injection in CVE-2026-72882 (CVE-2026-72882)
OS command injection in CVE-2026-72882 (CVE-2026-72882). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72880 |
|
OS Command Injection in CVE-2026-72880 (CVE-2026-72880)
OS command injection in CVE-2026-72880 (CVE-2026-72880). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.29.13` or later.
|
| CVE-2026-72878 |
|
OS Command Injection in c (CVE-2026-72878)
OS command injection in c (CVE-2026-72878). Confidential information can be exposed externally. Mitigation: upgrade to `0.29.13` or later.
|
| CVE-2026-72877 |
|
OS Command Injection in CVE-2026-72877 (CVE-2026-72877)
OS command injection in CVE-2026-72877 (CVE-2026-72877). Confidential information can be exposed externally.
|
| CVE-2026-72876 |
|
OS Command Injection in CVE-2026-72876 (CVE-2026-72876)
OS command injection in CVE-2026-72876 (CVE-2026-72876). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72872 |
|
OS Command Injection in CVE-2026-72872 (CVE-2026-72872)
OS command injection in CVE-2026-72872 (CVE-2026-72872). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72869 |
|
Command Injection in CVE-2026-72869 (CVE-2026-72869)
command injection in CVE-2026-72869 (CVE-2026-72869). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72868 |
|
OS Command Injection in CVE-2026-72868 (CVE-2026-72868)
OS command injection in CVE-2026-72868 (CVE-2026-72868). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72867 |
|
Vulnerability in CVE-2026-72867 (CVE-2026-72867)
vulnerability in CVE-2026-72867 (CVE-2026-72867). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72865 |
|
OS Command Injection in c (CVE-2026-72865)
OS command injection in c (CVE-2026-72865). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72864 |
|
Vulnerability in CVE-2026-72864 (CVE-2026-72864)
vulnerability in CVE-2026-72864 (CVE-2026-72864). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72863 |
|
Privilege Escalation in CVE-2026-72863 (CVE-2026-72863)
vulnerability in CVE-2026-72863 (CVE-2026-72863). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.29.13` or later.
|
| CVE-2026-72899 |
|
SQL Injection in CVE-2026-72899 (CVE-2026-72899)
SQL injection in CVE-2026-72899 (CVE-2026-72899). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72898 KEV |
|
[KEV] SQL Injection in metabase (CVE-2026-72898)
SQL injection in metabase (CVE-2026-72898). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|