Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-44334 |
|
Code Injection in praisonai (CVE-2026-44334)
code injection in praisonai (CVE-2026-44334). Successful exploitation can lead to full system takeover. Exploitable via `POST /v1/recipes/run`. Mitigation: upgrade to `4.5.139` or later.
|
| CVE-2026-44338 |
|
Vulnerability in PraisonAI (CVE-2026-44338)
vulnerability in PraisonAI (CVE-2026-44338). Risk of unauthorized operations or information disclosure. Exploitable via `POST /chat`. Mitigation: upgrade to `4.6.34` or later.
|
| CVE-2026-44339 |
|
Vulnerability in praisonaiagents (CVE-2026-44339)
vulnerability in praisonaiagents (CVE-2026-44339). Data can be tampered with by attackers. Exploitable via ``praisonaiagents``. Mitigation: upgrade to `1.6.37` or later.
|
| CVE-2026-43350 |
|
Vulnerability in linux (CVE-2026-43350)
vulnerability in linux (CVE-2026-43350). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43345 |
|
Vulnerability in c (CVE-2026-43345)
vulnerability in c (CVE-2026-43345). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43347 |
|
Vulnerability in linux (CVE-2026-43347)
vulnerability in linux (CVE-2026-43347). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43334 |
|
Vulnerability in linux (CVE-2026-43334)
vulnerability in linux (CVE-2026-43334). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43336 |
|
Vulnerability in linux (CVE-2026-43336)
vulnerability in linux (CVE-2026-43336). Confidential information can be exposed externally.
|
| CVE-2026-43339 |
|
Use-After-Free in linux (CVE-2026-43339)
vulnerability in linux (CVE-2026-43339). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43329 |
|
Vulnerability in linux (CVE-2026-43329)
vulnerability in linux (CVE-2026-43329). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43332 |
|
Vulnerability in linux (CVE-2026-43332)
vulnerability in linux (CVE-2026-43332). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43328 |
|
Vulnerability in linux (CVE-2026-43328)
vulnerability in linux (CVE-2026-43328). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43330 |
|
Out-of-Bounds Write in linux (CVE-2026-43330)
out-of-bounds write in linux (CVE-2026-43330). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43324 |
|
Vulnerability in linux (CVE-2026-43324)
vulnerability in linux (CVE-2026-43324). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43321 |
|
Vulnerability in linux (CVE-2026-43321)
vulnerability in linux (CVE-2026-43321). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43322 |
|
Use-After-Free in c (CVE-2026-43322)
vulnerability in c (CVE-2026-43322). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43307 |
|
Vulnerability in linux (CVE-2026-43307)
vulnerability in linux (CVE-2026-43307). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43303 |
|
Use-After-Free in linux (CVE-2026-43303)
vulnerability in linux (CVE-2026-43303). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43290 |
|
Vulnerability in c (CVE-2026-43290)
vulnerability in c (CVE-2026-43290). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43291 |
|
Vulnerability in linux (CVE-2026-43291)
vulnerability in linux (CVE-2026-43291). Confidential information can be exposed externally.
|
| CVE-2026-43296 |
|
Vulnerability in linux (CVE-2026-43296)
vulnerability in linux (CVE-2026-43296). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41491 |
|
Path Traversal in github.com/dapr/dapr (CVE-2026-41491)
path traversal in github.com/dapr/dapr (CVE-2026-41491). Confidential information can be exposed externally. Exploitable via ``purell.NormalizeURLString``. Mitigation: upgrade to `1.15.14` or later.
|
| CVE-2026-41493 |
|
Path Traversal in yard (CVE-2026-41493)
path traversal in yard (CVE-2026-41493). Confidential information can be exposed externally. Mitigation: upgrade to `0.9.42` or later.
|
| CVE-2026-41496 |
|
SQL Injection in praisonai (CVE-2026-41496)
SQL injection in praisonai (CVE-2026-41496). Confidential information can be exposed externally. Exploitable via ``SQLiteConversationStore``. Mitigation: upgrade to `4.5.149` or later.
|
| CVE-2026-39816 |
|
Vulnerability in nifi (CVE-2026-39816)
vulnerability in nifi (CVE-2026-39816). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.9.0` or later.
|
| CVE-2025-71300 |
|
Vulnerability in linux (CVE-2025-71300)
vulnerability in linux (CVE-2025-71300). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71302 |
|
Vulnerability in linux (CVE-2025-71302)
vulnerability in linux (CVE-2025-71302). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25077 |
|
Code Injection in apache (CVE-2026-25077)
code injection in apache (CVE-2026-25077). Successful exploitation can lead to full system takeover.
|
| CVE-2025-66172 |
|
Vulnerability in apache (CVE-2025-66172)
vulnerability in apache (CVE-2025-66172). Confidential information can be exposed externally.
|
| CVE-2025-66467 |
|
Vulnerability in apache (CVE-2025-66467)
vulnerability in apache (CVE-2025-66467). Successful exploitation can lead to full system takeover.
|
| CVE-2022-50994 |
|
OS Command Injection in CVE-2022-50994 (CVE-2022-50994)
OS command injection in CVE-2022-50994 (CVE-2022-50994). Successful exploitation can lead to full system takeover.
|
| CVE-2025-13836 |
|
Vulnerability in python (CVE-2025-13836)
vulnerability in python (CVE-2025-13836). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.10.20, 3.11.15, 3.12.13, 3.13.11, 3.14.1` or later.
|
| CVE-2026-7330 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-7330)
cross-site scripting in wordpress (CVE-2026-7330). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5127 |
|
Unsafe Deserialization in wordpress (CVE-2026-5127)
vulnerability in wordpress (CVE-2026-5127). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32178 |
|
Vulnerability in dotnet (CVE-2026-32178)
vulnerability in dotnet (CVE-2026-32178). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.26, 9.0.15, 10.0.6` or later.
|
| CVE-2026-26171 |
|
Vulnerability in dotnet (CVE-2026-26171)
vulnerability in dotnet (CVE-2026-26171). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.26, 9.0.15, 10.0.6` or later.
|
| CVE-2026-43284 |
|
Vulnerability in Google linux (CVE-2026-43284)
vulnerability in Google linux (CVE-2026-43284). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4935 |
|
SQL Injection in wordpress (CVE-2026-4935)
SQL injection in wordpress (CVE-2026-4935). Confidential information can be exposed externally.
|
| CVE-2026-8069 |
|
Path Traversal in privilege-escalation (CVE-2026-8069)
path traversal in privilege-escalation (CVE-2026-8069). Successful exploitation can lead to full system takeover.
|
| CVE-2025-67888 |
|
OS Command Injection in CVE-2025-67888 (CVE-2025-67888)
OS command injection in CVE-2025-67888 (CVE-2025-67888). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-55449 |
|
Vulnerability in astrbot (CVE-2025-55449)
vulnerability in astrbot (CVE-2025-55449). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.5.18` or later.
|
| CVE-2024-53326 |
|
Unsafe Deserialization in deserialization (CVE-2024-53326)
vulnerability in deserialization (CVE-2024-53326). Successful exploitation can lead to full system takeover.
|
| CVE-2024-46507 |
|
Code Injection in yeti-platform (CVE-2024-46507)
code injection in yeti-platform (CVE-2024-46507). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-46508 |
|
Vulnerability in yeti-platform (CVE-2024-46508)
vulnerability in yeti-platform (CVE-2024-46508). Confidential information can be exposed externally.
|
| CVE-2024-27686 |
|
Vulnerability in dos (CVE-2024-27686)
vulnerability in dos (CVE-2024-27686). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-33288 |
|
SQL Injection in sqli (CVE-2024-33288)
SQL injection in sqli (CVE-2024-33288). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-45257 |
|
Command Injection in CVE-2024-45257 (CVE-2024-45257)
command injection in CVE-2024-45257 (CVE-2024-45257). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8148 |
|
Vulnerability in navercorp (CVE-2026-8148)
vulnerability in navercorp (CVE-2026-8148). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8138 |
|
Buffer Overflow in tenda (CVE-2026-8138)
vulnerability in tenda (CVE-2026-8138). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8137 |
|
Buffer Overflow in CVE-2026-8137 (CVE-2026-8137)
vulnerability in CVE-2026-8137 (CVE-2026-8137). Successful exploitation can lead to full system takeover.
|