Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-67527 |
|
Vulnerability in CVE-2026-67527 (CVE-2026-67527)
vulnerability in CVE-2026-67527 (CVE-2026-67527). Data can be tampered with by attackers. Exploitable via `PATCH /api/v3/work_packages/{id}`. Mitigation: upgrade to `17.6.0` or later.
|
| CVE-2026-65835 |
|
Privilege Escalation in github.com/projectcapsule/capsule (CVE-2026-65835)
vulnerability in github.com/projectcapsule/capsule (CVE-2026-65835). Risk of unauthorized operations or information disclosure. Exploitable via ``ClusterRole``. Mitigation: upgrade to `0.13.8` or later.
|
| CVE-2026-65834 |
|
Vulnerability in github.com/projectcapsule/capsule (CVE-2026-65834)
vulnerability in github.com/projectcapsule/capsule (CVE-2026-65834). Risk of unauthorized operations or information disclosure. Exploitable via ``ForbiddenAnnotations.Regex``. Mitigation: upgrade to `0.13.8` or later.
|
| CVE-2026-64870 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-64870 (CVE-2026-64870)
SSRF in CVE-2026-64870 (CVE-2026-64870). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61536 |
|
Code Injection in CVE-2026-61536 (CVE-2026-61536)
code injection in CVE-2026-61536 (CVE-2026-61536). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.4.2` or later.
|
| CVE-2026-59881 |
|
Vulnerability in aiohttp (CVE-2026-59881)
vulnerability in aiohttp (CVE-2026-59881). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.14.2` or later.
|
| CVE-2026-48499 |
|
Information Disclosure in CVE-2026-48499 (CVE-2026-48499)
vulnerability in CVE-2026-48499 (CVE-2026-48499). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18245 |
|
Code Injection in react (CVE-2026-18245)
code injection in react (CVE-2026-18245). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18140 |
|
Vulnerability in Amazon dos (CVE-2026-18140)
vulnerability in Amazon dos (CVE-2026-18140). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9322 |
|
Vulnerability in dos (CVE-2026-9322)
vulnerability in dos (CVE-2026-9322). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66414 |
|
Open Redirect in CVE-2026-66414 (CVE-2026-66414)
vulnerability in CVE-2026-66414 (CVE-2026-66414). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51291 |
|
Use-After-Free in c (CVE-2026-51291)
vulnerability in c (CVE-2026-51291). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51292 |
|
Vulnerability in CVE-2026-51292 (CVE-2026-51292)
vulnerability in CVE-2026-51292 (CVE-2026-51292). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13379 |
|
Out-of-Bounds Read in openvpn (CVE-2026-13379)
vulnerability in openvpn (CVE-2026-13379). Confidential information can be exposed externally.
|
| CVE-2026-51290 |
|
Use-After-Free in dos (CVE-2026-51290)
vulnerability in dos (CVE-2026-51290). Confidential information can be exposed externally.
|
| CVE-2026-12945 |
|
Vulnerability in langflow (CVE-2026-12945)
vulnerability in langflow (CVE-2026-12945). Confidential information can be exposed externally.
|
| CVE-2026-12996 |
|
Out-of-Bounds Read in dos (CVE-2026-12996)
vulnerability in dos (CVE-2026-12996). Confidential information can be exposed externally.
|
| CVE-2026-12940 |
|
OS Command Injection in langflow (CVE-2026-12940)
OS command injection in langflow (CVE-2026-12940). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12932 |
|
Vulnerability in dos (CVE-2026-12932)
vulnerability in dos (CVE-2026-12932). Confidential information can be exposed externally.
|
| CVE-2026-11885 |
|
Vulnerability in CVE-2026-11885 (CVE-2026-11885)
vulnerability in CVE-2026-11885 (CVE-2026-11885). Data can be tampered with by attackers.
|
| CVE-2026-51293 |
|
Vulnerability in CVE-2026-51293 (CVE-2026-51293)
vulnerability in CVE-2026-51293 (CVE-2026-51293). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51294 |
|
SQLite 3.41 is vulnerable to use after free in the jsonArrayLengthFunc function.
SQLite 3.41 is vulnerable to use after free in the jsonArrayLengthFunc function.
|
| CVE-2026-51295 |
|
Vulnerability in CVE-2026-51295 (CVE-2026-51295)
vulnerability in CVE-2026-51295 (CVE-2026-51295). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13117 |
|
Use-After-Free in dos (CVE-2026-13117)
vulnerability in dos (CVE-2026-13117). Confidential information can be exposed externally.
|
| CVE-2026-11771 |
|
Vulnerability in openvpn (CVE-2026-11771)
vulnerability in openvpn (CVE-2026-11771). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67596 |
|
Vulnerability in CVE-2026-67596 (CVE-2026-67596)
vulnerability in CVE-2026-67596 (CVE-2026-67596). Confidential information can be exposed externally.
|
| CVE-2026-58222 |
|
Vulnerability in privilege-escalation (CVE-2026-58222)
vulnerability in privilege-escalation (CVE-2026-58222). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58216 |
|
Out-of-Bounds Read in dos (CVE-2026-58216)
vulnerability in dos (CVE-2026-58216). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44613 |
|
Cross-Site Request Forgery (CSRF) in apache (CVE-2026-44613)
vulnerability in apache (CVE-2026-44613). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57862 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-57862)
SSRF in ssrf (CVE-2026-57862). Confidential information can be exposed externally.
|
| CVE-2026-48910 |
|
Vulnerability in apache (CVE-2026-48910)
vulnerability in apache (CVE-2026-48910). Confidential information can be exposed externally.
|
| CVE-2026-28813 |
|
Cross-Site Request Forgery (CSRF) in apache (CVE-2026-28813)
vulnerability in apache (CVE-2026-28813). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4978 |
|
SQL Injection in sqli (CVE-2026-4978)
SQL injection in sqli (CVE-2026-4978). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28814 |
|
Vulnerability in apache (CVE-2026-28814)
vulnerability in apache (CVE-2026-28814). Confidential information can be exposed externally.
|
| CVE-2026-44616 |
|
Vulnerability in apache (CVE-2026-44616)
vulnerability in apache (CVE-2026-44616). Confidential information can be exposed externally.
|
| CVE-2026-52680 |
|
Path Traversal in apache (CVE-2026-52680)
path traversal in apache (CVE-2026-52680). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44617 |
|
Vulnerability in apache (CVE-2026-44617)
vulnerability in apache (CVE-2026-44617). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28812 |
|
Vulnerability in apache (CVE-2026-28812)
vulnerability in apache (CVE-2026-28812). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28323 |
|
Authentication Bypass in solarwinds (CVE-2026-28323)
authentication bypass in solarwinds (CVE-2026-28323). Successful exploitation can lead to full system takeover.
|
| CVE-2026-23985 |
|
Vulnerability in apache (CVE-2026-23985)
vulnerability in apache (CVE-2026-23985). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28811 |
|
Vulnerability in apache (CVE-2026-28811)
vulnerability in apache (CVE-2026-28811). Confidential information can be exposed externally.
|
| CVE-2026-23981 |
|
Vulnerability in apache (CVE-2026-23981)
vulnerability in apache (CVE-2026-23981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15658 |
|
Vulnerability in CVE-2026-15658 (CVE-2026-15658)
vulnerability in CVE-2026-15658 (CVE-2026-15658). Confidential information can be exposed externally.
|
| CVE-2026-10842 |
|
Vulnerability in ibm (CVE-2026-10842)
vulnerability in ibm (CVE-2026-10842). Confidential information can be exposed externally.
|
| CVE-2026-15657 |
|
Vulnerability in CVE-2026-15657 (CVE-2026-15657)
vulnerability in CVE-2026-15657 (CVE-2026-15657). Confidential information can be exposed externally.
|
| CVE-2026-66066 |
|
Vulnerability in activestorage (CVE-2026-66066)
vulnerability in activestorage (CVE-2026-66066). Risk of unauthorized operations or information disclosure. Exploitable via ``secret_key_base``. Mitigation: upgrade to `8.1.3.1` or later.
|
| CVE-2026-5846 |
|
Vulnerability in cisa (CVE-2026-5846)
vulnerability in cisa (CVE-2026-5846). Confidential information can be exposed externally.
|
| CVE-2026-61893 |
|
Out-of-Bounds Read in cisa (CVE-2026-61893)
vulnerability in cisa (CVE-2026-61893). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14227 |
|
Vulnerability in cisa (CVE-2026-14227)
vulnerability in cisa (CVE-2026-14227). Confidential information can be exposed externally.
|
| CVE-2026-62663 |
|
Path Traversal in path-traversal (CVE-2026-62663)
path traversal in path-traversal (CVE-2026-62663). Confidential information can be exposed externally.
|