Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-54609 |
|
Vulnerability in com.quietterminal:qti-neon (CVE-2026-54609)
vulnerability in com.quietterminal:qti-neon (CVE-2026-54609). Risk of unauthorized operations or information disclosure. Exploitable via ``RECONNECT_REQUEST``.
|
| CVE-2026-54603 |
|
Information Disclosure in oauth2 (CVE-2026-54603)
vulnerability in oauth2 (CVE-2026-54603). Confidential information can be exposed externally. Exploitable via `GET /leak`. Mitigation: upgrade to `2.0.22` or later.
|
| CVE-2026-54605 |
|
Information Disclosure in oauth (CVE-2026-54605)
vulnerability in oauth (CVE-2026-54605). Risk of unauthorized operations or information disclosure. Exploitable via ``Location``. Mitigation: upgrade to `1.1.6` or later.
|
| CVE-2026-54620 |
|
Use-After-Free in sqlite3-ruby (CVE-2026-54620)
vulnerability in sqlite3-ruby (CVE-2026-54620). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.9.5` or later.
|
| CVE-2026-54619 |
|
Use-After-Free in sqlite3-ruby (CVE-2026-54619)
vulnerability in sqlite3-ruby (CVE-2026-54619). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.9.5` or later.
|
| CVE-2026-8058 |
|
Information Disclosure in CVE-2026-8058 (CVE-2026-8058)
vulnerability in CVE-2026-8058 (CVE-2026-8058). Confidential information can be exposed externally.
|
| CVE-2026-7868 |
|
Authorization Flaw in CVE-2026-7868 (CVE-2026-7868)
vulnerability in CVE-2026-7868 (CVE-2026-7868). Data can be tampered with by attackers.
|
| CVE-2026-7775 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-7775)
cross-site scripting in ibm (CVE-2026-7775). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67181 |
|
Vulnerability in CVE-2026-67181 (CVE-2026-67181)
vulnerability in CVE-2026-67181 (CVE-2026-67181). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66754 |
|
Vulnerability in CVE-2026-66754 (CVE-2026-66754)
vulnerability in CVE-2026-66754 (CVE-2026-66754). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66753 |
|
Vulnerability in CVE-2026-66753 (CVE-2026-66753)
vulnerability in CVE-2026-66753 (CVE-2026-66753). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66752 |
|
Vulnerability in CVE-2026-66752 (CVE-2026-66752)
vulnerability in CVE-2026-66752 (CVE-2026-66752). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66751 |
|
Vulnerability in CVE-2026-66751 (CVE-2026-66751)
vulnerability in CVE-2026-66751 (CVE-2026-66751). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66750 |
|
Vulnerability in CVE-2026-66750 (CVE-2026-66750)
vulnerability in CVE-2026-66750 (CVE-2026-66750). Risk of unauthorized operations or information disclosure. Exploitable via `GET /files/`.
|
| CVE-2026-66749 |
|
Vulnerability in CVE-2026-66749 (CVE-2026-66749)
vulnerability in CVE-2026-66749 (CVE-2026-66749). Risk of unauthorized operations or information disclosure. Exploitable via `GET /messages`.
|
| CVE-2026-66748 |
|
Code Injection in CVE-2026-66748 (CVE-2026-66748)
code injection in CVE-2026-66748 (CVE-2026-66748). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66746 |
|
Vulnerability in CVE-2026-66746 (CVE-2026-66746)
vulnerability in CVE-2026-66746 (CVE-2026-66746). Risk of unauthorized operations or information disclosure. Exploitable via `Cookie header`.
|
| CVE-2026-62828 |
|
Vulnerability in microsoft (CVE-2026-62828)
vulnerability in microsoft (CVE-2026-62828). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51271 |
|
Vulnerability in dos (CVE-2026-51271)
vulnerability in dos (CVE-2026-51271). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51270 |
|
Vulnerability in privilege-escalation (CVE-2026-51270)
vulnerability in privilege-escalation (CVE-2026-51270). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51269 |
|
Vulnerability in CVE-2026-51269 (CVE-2026-51269)
vulnerability in CVE-2026-51269 (CVE-2026-51269). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51268 |
|
Vulnerability in CVE-2026-51268 (CVE-2026-51268)
vulnerability in CVE-2026-51268 (CVE-2026-51268). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51267 |
|
Vulnerability in privilege-escalation (CVE-2026-51267)
vulnerability in privilege-escalation (CVE-2026-51267). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51266 |
|
Vulnerability in CVE-2026-51266 (CVE-2026-51266)
vulnerability in CVE-2026-51266 (CVE-2026-51266). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51263 |
|
Vulnerability in CVE-2026-51263 (CVE-2026-51263)
vulnerability in CVE-2026-51263 (CVE-2026-51263). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47483 |
|
Vulnerability in dos (CVE-2026-47483)
vulnerability in dos (CVE-2026-47483). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54332 |
|
Vulnerability in github.com/gopacket/gopacket (CVE-2026-54332)
vulnerability in github.com/gopacket/gopacket (CVE-2026-54332). Risk of unauthorized operations or information disclosure. Exploitable via ``ExtendedGatewayFlow``. Mitigation: upgrade to `1.6.1` or later.
|
| CVE-2026-54345 |
|
Vulnerability in github.com/gopacket/gopacket (CVE-2026-54345)
vulnerability in github.com/gopacket/gopacket (CVE-2026-54345). Risk of unauthorized operations or information disclosure. Exploitable via ``headerSize``. Mitigation: upgrade to `1.6.1` or later.
|
| CVE-2026-16347 |
|
Vulnerability in cisa (CVE-2026-16347)
vulnerability in cisa (CVE-2026-16347). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16581 |
|
Vulnerability in cisa (CVE-2026-16581)
vulnerability in cisa (CVE-2026-16581). Risk of unauthorized operations or information disclosure.
|
| GHSA-hc4m-q9jh-xw4j |
|
Vulnerability in nono-cli (GHSA-hc4m-q9jh-xw4j)
vulnerability in nono-cli (GHSA-hc4m-q9jh-xw4j). Risk of unauthorized operations or information disclosure. Exploitable via ``verify_profile_packs``. Mitigation: upgrade to `0.61.3` or later.
|
| CVE-2026-54593 |
|
Vulnerability in pterodactyl/panel (CVE-2026-54593)
vulnerability in pterodactyl/panel (CVE-2026-54593). Data can be tampered with by attackers. Exploitable via `GET /api/client/servers/`. Mitigation: upgrade to `1.12.3` or later.
|
| CVE-2026-7521 |
|
Path Traversal in mattermost (CVE-2026-7521)
path traversal in mattermost (CVE-2026-7521). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8164 |
|
Vulnerability in CVE-2026-8164 (CVE-2026-8164)
vulnerability in CVE-2026-8164 (CVE-2026-8164). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6879 |
|
Vulnerability in CVE-2026-6879 (CVE-2026-6879)
vulnerability in CVE-2026-6879 (CVE-2026-6879). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67178 |
|
Open Redirect in apache (CVE-2026-67178)
vulnerability in apache (CVE-2026-67178). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66713 |
|
Unsafe Deserialization in apache (CVE-2026-66713)
vulnerability in apache (CVE-2026-66713). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67174 |
|
Cross-Site Scripting (XSS) in CVE-2026-67174 (CVE-2026-67174)
cross-site scripting in CVE-2026-67174 (CVE-2026-67174). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51261 |
|
Vulnerability in CVE-2026-51261 (CVE-2026-51261)
vulnerability in CVE-2026-51261 (CVE-2026-51261). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51259 |
|
Vulnerability in dos (CVE-2026-51259)
vulnerability in dos (CVE-2026-51259). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66299 |
|
Vulnerability in apache (CVE-2026-66299)
vulnerability in apache (CVE-2026-66299). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63727 |
|
Vulnerability in privilege-escalation (CVE-2026-63727)
vulnerability in privilege-escalation (CVE-2026-63727). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51260 |
|
Vulnerability in CVE-2026-51260 (CVE-2026-51260)
vulnerability in CVE-2026-51260 (CVE-2026-51260). Confidential information can be exposed externally.
|
| CVE-2026-66922 |
|
Vulnerability in dos (CVE-2026-66922)
vulnerability in dos (CVE-2026-66922). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51254 |
|
Vulnerability in CVE-2026-51254 (CVE-2026-51254)
vulnerability in CVE-2026-51254 (CVE-2026-51254). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62430 |
|
Vulnerability in CVE-2026-62430 (CVE-2026-62430)
vulnerability in CVE-2026-62430 (CVE-2026-62430). Confidential information can be exposed externally.
|
| CVE-2026-62436 |
|
Vulnerability in CVE-2026-62436 (CVE-2026-62436)
vulnerability in CVE-2026-62436 (CVE-2026-62436). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51251 |
|
Buffer Overflow in CVE-2026-51251 (CVE-2026-51251)
vulnerability in CVE-2026-51251 (CVE-2026-51251). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62434 |
|
Out-of-Bounds Write in CVE-2026-62434 (CVE-2026-62434)
out-of-bounds write in CVE-2026-62434 (CVE-2026-62434). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66921 |
|
Cross-Site Scripting (XSS) in CVE-2026-66921 (CVE-2026-66921)
cross-site scripting in CVE-2026-66921 (CVE-2026-66921). Risk of unauthorized operations or information disclosure.
|