Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-64211 |
|
Vulnerability in linux (CVE-2026-64211)
vulnerability in linux (CVE-2026-64211). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64210 |
|
Vulnerability in c (CVE-2026-64210)
vulnerability in c (CVE-2026-64210). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64209 |
|
Out-of-Bounds Read in linux (CVE-2026-64209)
vulnerability in linux (CVE-2026-64209). Confidential information can be exposed externally.
|
| CVE-2026-64208 |
|
Vulnerability in linux (CVE-2026-64208)
vulnerability in linux (CVE-2026-64208). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17039 |
|
Authorization Flaw in CVE-2026-17039 (CVE-2026-17039)
vulnerability in CVE-2026-17039 (CVE-2026-17039). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73851 |
|
Path Traversal in Microsoft.OpenApi.Kiota (CVE-2026-73851)
path traversal in Microsoft.OpenApi.Kiota (CVE-2026-73851). Risk of unauthorized operations or information disclosure. Exploitable via ``static_template``. Mitigation: upgrade to `1.29.1` or later.
|
| CVE-2026-59952 |
|
Vulnerability in valibot (CVE-2026-59952)
vulnerability in valibot (CVE-2026-59952). Risk of unauthorized operations or information disclosure. Exploitable via ``valibot``. Mitigation: upgrade to `1.2.0` or later.
|
| CVE-2026-59940 |
|
Unsafe Deserialization in seroval (CVE-2026-59940)
vulnerability in seroval (CVE-2026-59940). Successful exploitation can lead to full system takeover. Exploitable via ``seroval``. Mitigation: upgrade to `1.5.3` or later.
|
| CVE-2026-59949 |
|
Vulnerability in at.yawk.lz4:lz4-java (CVE-2026-59949)
vulnerability in at.yawk.lz4:lz4-java (CVE-2026-59949). Risk of unauthorized operations or information disclosure. Exploitable via ``off``. Mitigation: upgrade to `1.11.1` or later.
|
| GHSA-866w-xmhq-wj7x |
|
Vulnerability in @sveltejs/kit (GHSA-866w-xmhq-wj7x)
vulnerability in @sveltejs/kit (GHSA-866w-xmhq-wj7x). Risk of unauthorized operations or information disclosure. Exploitable via ``file``. Mitigation: upgrade to `2.69.1` or later.
|
| GHSA-wqjv-9729-c5q2 |
|
Vulnerability in @sveltejs/kit (GHSA-wqjv-9729-c5q2)
vulnerability in @sveltejs/kit (GHSA-wqjv-9729-c5q2). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.69.1` or later.
|
| CVE-2026-63632 |
|
Out-of-Bounds Read in onnx (CVE-2026-63632)
vulnerability in onnx (CVE-2026-63632). Risk of unauthorized operations or information disclosure. Exploitable via ``B_shape``. Mitigation: upgrade to `1.22.0` or later.
|
| GHSA-qq9h-g4jm-xgf3 |
|
Authentication Bypass in better-auth (GHSA-qq9h-g4jm-xgf3)
authentication bypass in better-auth (GHSA-qq9h-g4jm-xgf3). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0-beta.10` or later.
|
| GHSA-h3rm-78g3-j7cp |
|
Vulnerability in @better-auth/stripe (GHSA-h3rm-78g3-j7cp)
vulnerability in @better-auth/stripe (GHSA-h3rm-78g3-j7cp). Risk of unauthorized operations or information disclosure. Exploitable via ``authorizeReference``. Mitigation: upgrade to `1.7.0-beta.10` or later.
|
| GHSA-rjg6-39jm-rgg4 |
|
Vulnerability in @better-auth/scim (GHSA-rjg6-39jm-rgg4)
vulnerability in @better-auth/scim (GHSA-rjg6-39jm-rgg4). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /scim/v2/Users/`. Mitigation: upgrade to `1.7.0-beta.10` or later.
|
| CVE-2026-55729 |
|
Information Disclosure in CVE-2026-55729 (CVE-2026-55729)
vulnerability in CVE-2026-55729 (CVE-2026-55729). Risk of unauthorized operations or information disclosure. Exploitable via ``localStorage``.
|
| CVE-2026-66004 |
|
Path Traversal in path-traversal (CVE-2026-66004)
path traversal in path-traversal (CVE-2026-66004). Data can be tampered with by attackers.
|
| CVE-2026-66007 |
|
Path Traversal in path-traversal (CVE-2026-66007)
path traversal in path-traversal (CVE-2026-66007). Confidential information can be exposed externally.
|
| CVE-2026-8789 |
|
Authorization Flaw in wordpress (CVE-2026-8789)
vulnerability in wordpress (CVE-2026-8789). Data can be tampered with by attackers. Exploitable via ``ea_delete_multiple_connections``.
|
| CVE-2026-8308 |
|
Cross-Site Scripting (XSS) in CVE-2026-8308 (CVE-2026-8308)
cross-site scripting in CVE-2026-8308 (CVE-2026-8308). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66005 |
|
Vulnerability in CVE-2026-66005 (CVE-2026-66005)
vulnerability in CVE-2026-66005 (CVE-2026-66005). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16798 |
|
Vulnerability in devolutions (CVE-2026-16798)
vulnerability in devolutions (CVE-2026-16798). Confidential information can be exposed externally.
|
| CVE-2026-66006 |
|
Vulnerability in lakefs (CVE-2026-66006)
vulnerability in lakefs (CVE-2026-66006). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58586 |
|
Vulnerability in CVE-2026-58586 (CVE-2026-58586)
vulnerability in CVE-2026-58586 (CVE-2026-58586). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55728 |
|
Vulnerability in CVE-2026-55728 (CVE-2026-55728)
vulnerability in CVE-2026-55728 (CVE-2026-55728). Risk of unauthorized operations or information disclosure. Exploitable via ``cmd_ipaddr_conflict``.
|
| CVE-2026-55731 |
|
Vulnerability in dos (CVE-2026-55731)
vulnerability in dos (CVE-2026-55731). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49326 |
|
Vulnerability in apache (CVE-2026-49326)
vulnerability in apache (CVE-2026-49326). Confidential information can be exposed externally.
|
| CVE-2026-55730 |
|
Cross-Site Scripting (XSS) in CVE-2026-55730 (CVE-2026-55730)
cross-site scripting in CVE-2026-55730 (CVE-2026-55730). Risk of unauthorized operations or information disclosure. Exploitable via ``project``.
|
| CVE-2026-17059 |
|
Vulnerability in redhat (CVE-2026-17059)
vulnerability in redhat (CVE-2026-17059). Confidential information can be exposed externally.
|
| CVE-2026-16800 |
|
Code Injection in devolutions (CVE-2026-16800)
code injection in devolutions (CVE-2026-16800). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16802 |
|
Vulnerability in devolutions (CVE-2026-16802)
vulnerability in devolutions (CVE-2026-16802). Confidential information can be exposed externally.
|
| CVE-2026-58630 |
|
Vulnerability in microsoft (CVE-2026-58630)
vulnerability in microsoft (CVE-2026-58630). Confidential information can be exposed externally.
|
| CVE-2026-16799 |
|
Vulnerability in devolutions (CVE-2026-16799)
vulnerability in devolutions (CVE-2026-16799). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55732 |
|
Out-of-Bounds Read in CVE-2026-55732 (CVE-2026-55732)
vulnerability in CVE-2026-55732 (CVE-2026-55732). Risk of unauthorized operations or information disclosure. Exploitable via ``bacdt_datetime_to_tod``.
|
| CVE-2026-16801 |
|
Code Injection in devolutions (CVE-2026-16801)
code injection in devolutions (CVE-2026-16801). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56163 |
|
Vulnerability in microsoft (CVE-2026-56163)
vulnerability in microsoft (CVE-2026-56163). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57106 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-57106)
SSRF in ssrf (CVE-2026-57106). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12502 |
|
Privilege Escalation in CVE-2026-12502 (CVE-2026-12502)
vulnerability in CVE-2026-12502 (CVE-2026-12502). Risk of unauthorized operations or information disclosure. Exploitable via ``superadmin``.
|
| CVE-2026-66008 |
|
Vulnerability in CVE-2026-66008 (CVE-2026-66008)
vulnerability in CVE-2026-66008 (CVE-2026-66008). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12496 |
|
Cross-Site Scripting (XSS) in CVE-2026-12496 (CVE-2026-12496)
cross-site scripting in CVE-2026-12496 (CVE-2026-12496). Risk of unauthorized operations or information disclosure. Exploitable via `POST /da`.
|
| CVE-2026-17048 |
|
Information Disclosure in redhat (CVE-2026-17048)
vulnerability in redhat (CVE-2026-17048). Confidential information can be exposed externally.
|
| CVE-2026-66009 |
|
Vulnerability in CVE-2026-66009 (CVE-2026-66009)
vulnerability in CVE-2026-66009 (CVE-2026-66009). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45811 |
|
Vulnerability in apache (CVE-2026-45811)
vulnerability in apache (CVE-2026-45811). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7484 |
|
Vulnerability in CVE-2026-7484 (CVE-2026-7484)
vulnerability in CVE-2026-7484 (CVE-2026-7484). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66010 |
|
Cross-Site Scripting (XSS) in cure53 (CVE-2026-66010)
cross-site scripting in cure53 (CVE-2026-66010). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12504 |
|
Authentication Bypass in CVE-2026-12504 (CVE-2026-12504)
authentication bypass in CVE-2026-12504 (CVE-2026-12504). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66143 |
|
Vulnerability in apache (CVE-2026-66143)
vulnerability in apache (CVE-2026-66143). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45816 |
|
Vulnerability in apache (CVE-2026-45816)
vulnerability in apache (CVE-2026-45816). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66142 |
|
Vulnerability in apache (CVE-2026-66142)
vulnerability in apache (CVE-2026-66142). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46452 |
|
Vulnerability in apache (CVE-2026-46452)
vulnerability in apache (CVE-2026-46452). Risk of unauthorized operations or information disclosure.
|