Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2023-54389 Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.
Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54386 Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.
Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54380 Vulnerability in CVE-2023-54380 (CVE-2023-54380)
vulnerability in CVE-2023-54380 (CVE-2023-54380). Risk of unauthorized operations or information disclosure.
CVE-2023-54382 Vulnerability in CVE-2023-54382 (CVE-2023-54382)
vulnerability in CVE-2023-54382 (CVE-2023-54382). Risk of unauthorized operations or information disclosure.
CVE-2023-54385 Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.
Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54384 Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.
Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54383 Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.
Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54381 Vulnerability in CVE-2023-54381 (CVE-2023-54381)
vulnerability in CVE-2023-54381 (CVE-2023-54381). Risk of unauthorized operations or information disclosure.
CVE-2023-54379 Vulnerability in CVE-2023-54379 (CVE-2023-54379)
vulnerability in CVE-2023-54379 (CVE-2023-54379). Risk of unauthorized operations or information disclosure.
CVE-2023-54378 Vulnerability in CVE-2023-54378 (CVE-2023-54378)
vulnerability in CVE-2023-54378 (CVE-2023-54378). Risk of unauthorized operations or information disclosure.
CVE-2023-54377 Vulnerability in CVE-2023-54377 (CVE-2023-54377)
vulnerability in CVE-2023-54377 (CVE-2023-54377). Risk of unauthorized operations or information disclosure.
CVE-2023-54376 Vulnerability in CVE-2023-54376 (CVE-2023-54376)
vulnerability in CVE-2023-54376 (CVE-2023-54376). Risk of unauthorized operations or information disclosure.
CVE-2023-54375 Vulnerability in CVE-2023-54375 (CVE-2023-54375)
vulnerability in CVE-2023-54375 (CVE-2023-54375). Risk of unauthorized operations or information disclosure.
CVE-2026-67531 Code Injection in CVE-2026-67531 (CVE-2026-67531)
code injection in CVE-2026-67531 (CVE-2026-67531). Risk of unauthorized operations or information disclosure.
CVE-2026-67867 Vulnerability in dos (CVE-2026-67867)
vulnerability in dos (CVE-2026-67867). Risk of unauthorized operations or information disclosure.
CVE-2026-67866 Vulnerability in dos (CVE-2026-67866)
vulnerability in dos (CVE-2026-67866). Risk of unauthorized operations or information disclosure.
CVE-2026-67863 Use-After-Free in dos (CVE-2026-67863)
vulnerability in dos (CVE-2026-67863). Risk of unauthorized operations or information disclosure.
CVE-2026-19026 Vulnerability in c (CVE-2026-19026)
vulnerability in c (CVE-2026-19026). Risk of unauthorized operations or information disclosure.
CVE-2026-19025 Vulnerability in c (CVE-2026-19025)
vulnerability in c (CVE-2026-19025). Risk of unauthorized operations or information disclosure.
CVE-2026-19024 Vulnerability in dos (CVE-2026-19024)
vulnerability in dos (CVE-2026-19024). Risk of unauthorized operations or information disclosure.
CVE-2026-19023 Vulnerability in dos (CVE-2026-19023)
vulnerability in dos (CVE-2026-19023). Risk of unauthorized operations or information disclosure.
CVE-2026-67865 Out-of-Bounds Read in dos (CVE-2026-67865)
vulnerability in dos (CVE-2026-67865). Risk of unauthorized operations or information disclosure.
CVE-2026-67864 Vulnerability in dos (CVE-2026-67864)
vulnerability in dos (CVE-2026-67864). Risk of unauthorized operations or information disclosure.
CVE-2025-63823 Vulnerability in CVE-2025-63823 (CVE-2025-63823)
vulnerability in CVE-2025-63823 (CVE-2025-63823). Successful exploitation can lead to full system takeover.
CVE-2025-63822 Vulnerability in CVE-2025-63822 (CVE-2025-63822)
vulnerability in CVE-2025-63822 (CVE-2025-63822). Confidential information can be exposed externally.
CVE-2026-71321 Vulnerability in nuxt (CVE-2026-71321)
vulnerability in nuxt (CVE-2026-71321). Risk of unauthorized operations or information disclosure. Exploitable via `POST /__nuxt_island/`. Mitigation: upgrade to `3.21.10` or later.
CVE-2026-34966 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-34966)
SSRF in ssrf (CVE-2026-34966). Confidential information can be exposed externally.
CVE-2026-17583 Vulnerability in CVE-2026-17583 (CVE-2026-17583)
vulnerability in CVE-2026-17583 (CVE-2026-17583). Successful exploitation can lead to full system takeover.
CVE-2026-18411 Vulnerability in CVE-2026-18411 (CVE-2026-18411)
vulnerability in CVE-2026-18411 (CVE-2026-18411). Data can be tampered with by attackers.
CVE-2026-18959 Path Traversal in path-traversal (CVE-2026-18959)
path traversal in path-traversal (CVE-2026-18959). Risk of unauthorized operations or information disclosure.
CVE-2026-18839 Vulnerability in dos (CVE-2026-18839)
vulnerability in dos (CVE-2026-18839). Risk of unauthorized operations or information disclosure.
CVE-2026-15996 Vulnerability in dos (CVE-2026-15996)
vulnerability in dos (CVE-2026-15996). Risk of unauthorized operations or information disclosure.
CVE-2026-71320 Vulnerability in nuxt (CVE-2026-71320)
vulnerability in nuxt (CVE-2026-71320). Successful exploitation can lead to full system takeover. Exploitable via ``resolveDynamicComponent``. Mitigation: upgrade to `3.21.10` or later.
CVE-2026-71319 Code Injection in @nuxt/devtools (CVE-2026-71319)
code injection in @nuxt/devtools (CVE-2026-71319). Successful exploitation can lead to full system takeover. Exploitable via ``ensureDevAuthToken``. Mitigation: upgrade to `3.3.1` or later.
CVE-2026-71318 Vulnerability in nuxt (CVE-2026-71318)
vulnerability in nuxt (CVE-2026-71318). Risk of unauthorized operations or information disclosure. Exploitable via ``resolveDynamicComponent``. Mitigation: upgrade to `3.21.10` or later.
CVE-2026-71316 Vulnerability in nuxt (CVE-2026-71316)
vulnerability in nuxt (CVE-2026-71316). Confidential information can be exposed externally. Exploitable via ``routeRules``. Mitigation: upgrade to `4.5.1` or later.
CVE-2026-71315 Vulnerability in nuxt (CVE-2026-71315)
vulnerability in nuxt (CVE-2026-71315). Confidential information can be exposed externally. Exploitable via ``appMiddleware``. Mitigation: upgrade to `3.21.10` or later.
CVE-2026-71314 Vulnerability in nuxt (CVE-2026-71314)
vulnerability in nuxt (CVE-2026-71314). Risk of unauthorized operations or information disclosure. Exploitable via ``ssrRenderList``. Mitigation: upgrade to `3.21.10` or later.
CVE-2026-71313 Path Traversal in github.com/rclone/rclone (CVE-2026-71313)
path traversal in github.com/rclone/rclone (CVE-2026-71313). Data can be tampered with by attackers. Exploitable via ``Dot``. Mitigation: upgrade to `1.75.0` or later.
GHSA-gx4c-2hqx-cw2r Vulnerability in github.com/rclone/rclone (GHSA-gx4c-2hqx-cw2r)
vulnerability in github.com/rclone/rclone (GHSA-gx4c-2hqx-cw2r). Risk of unauthorized operations or information disclosure. Exploitable via ``s3CheckRedirect``. Mitigation: upgrade to `1.74.4` or later.
CVE-2026-71312 OS Command Injection in github.com/rclone/rclone (CVE-2026-71312)
OS command injection in github.com/rclone/rclone (CVE-2026-71312). Successful exploitation can lead to full system takeover. Exploitable via ``a0c09f1381ae93e2a9a33c529d170186c61ad058``. Mitigation: upgrade to `1.75.0` or later.
GHSA-h4mf-4v27-hggj Vulnerability in github.com/rclone/rclone (GHSA-h4mf-4v27-hggj)
vulnerability in github.com/rclone/rclone (GHSA-h4mf-4v27-hggj). Risk of unauthorized operations or information disclosure. Exploitable via `Cookie header`. Mitigation: upgrade to `1.75.0` or later.
CVE-2026-71311 Vulnerability in github.com/rclone/rclone (CVE-2026-71311)
vulnerability in github.com/rclone/rclone (CVE-2026-71311). Data can be tampered with by attackers. Exploitable via ``DELE``. Mitigation: upgrade to `1.75.0` or later.
GHSA-8mxv-9xhp-86h4 Information Disclosure in github.com/rclone/rclone (GHSA-8mxv-9xhp-86h4)
vulnerability in github.com/rclone/rclone (GHSA-8mxv-9xhp-86h4). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `1.75.0` or later.
GHSA-8v25-v8p6-qf7v Path Traversal in github.com/rclone/rclone (GHSA-8v25-v8p6-qf7v)
path traversal in github.com/rclone/rclone (GHSA-8v25-v8p6-qf7v). Risk of unauthorized operations or information disclosure. Exploitable via `GET /bucket/../root-secret.txt`. Mitigation: upgrade to `1.74.4` or later.
GHSA-3x6r-wxxg-53vv Vulnerability in github.com/rclone/rclone (GHSA-3x6r-wxxg-53vv)
vulnerability in github.com/rclone/rclone (GHSA-3x6r-wxxg-53vv). Risk of unauthorized operations or information disclosure. Exploitable via ``CreateUploader``. Mitigation: upgrade to `1.75.0` or later.
CVE-2026-71310 Vulnerability in github.com/rclone/rclone (CVE-2026-71310)
vulnerability in github.com/rclone/rclone (CVE-2026-71310). Risk of unauthorized operations or information disclosure. Exploitable via ``http.ReadResponse``. Mitigation: upgrade to `1.75.0` or later.
CVE-2026-70618 Vulnerability in CVE-2026-70618 (CVE-2026-70618)
vulnerability in CVE-2026-70618 (CVE-2026-70618). Risk of unauthorized operations or information disclosure. Exploitable via `GET /guilds/{guild_id}/roles/{role_id}/member-ids`.
CVE-2026-70617 Vulnerability in CVE-2026-70617 (CVE-2026-70617)
vulnerability in CVE-2026-70617 (CVE-2026-70617). Confidential information can be exposed externally. Exploitable via `PUT /channels/{channel_id}/recipients/{user_id}`.
CVE-2026-70616 Vulnerability in CVE-2026-70616 (CVE-2026-70616)
vulnerability in CVE-2026-70616 (CVE-2026-70616). Risk of unauthorized operations or information disclosure. Exploitable via `GET /loading`.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →