Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-66421 |
|
Cross-Site Scripting (XSS) in CVE-2026-66421 (CVE-2026-66421)
cross-site scripting in CVE-2026-66421 (CVE-2026-66421). Confidential information can be exposed externally.
|
| CVE-2026-38709 |
|
Command Injection in CVE-2026-38709 (CVE-2026-38709)
command injection in CVE-2026-38709 (CVE-2026-38709). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66803 |
|
Vulnerability in microsoft (CVE-2026-66803)
vulnerability in microsoft (CVE-2026-66803). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66418 |
|
Cross-Site Scripting (XSS) in CVE-2026-66418 (CVE-2026-66418)
cross-site scripting in CVE-2026-66418 (CVE-2026-66418). Confidential information can be exposed externally.
|
| CVE-2026-52539 |
|
Vulnerability in CVE-2026-52539 (CVE-2026-52539)
vulnerability in CVE-2026-52539 (CVE-2026-52539). Confidential information can be exposed externally.
|
| CVE-2025-69933 |
|
SQL Injection in sqli (CVE-2025-69933)
SQL injection in sqli (CVE-2025-69933). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69947 |
|
SQL Injection in sqli (CVE-2025-69947)
SQL injection in sqli (CVE-2025-69947). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69938 |
|
SQL Injection in sqli (CVE-2025-69938)
SQL injection in sqli (CVE-2025-69938). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66756 |
|
Vulnerability in apache (CVE-2026-66756)
vulnerability in apache (CVE-2026-66756). Successful exploitation can lead to full system takeover.
|
| CVE-2025-65336 |
|
SQL Injection in sqli (CVE-2025-65336)
SQL injection in sqli (CVE-2025-65336). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69934 |
|
SQL Injection in sqli (CVE-2025-69934)
SQL injection in sqli (CVE-2025-69934). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69931 |
|
SQL Injection in sqli (CVE-2025-69931)
SQL injection in sqli (CVE-2025-69931). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69935 |
|
SQL Injection in sqli (CVE-2025-69935)
SQL injection in sqli (CVE-2025-69935). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69930 |
|
SQL Injection in sqli (CVE-2025-69930)
SQL injection in sqli (CVE-2025-69930). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67594 |
|
Vulnerability in CVE-2026-67594 (CVE-2026-67594)
vulnerability in CVE-2026-67594 (CVE-2026-67594). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69941 |
|
SQL Injection in sqli (CVE-2025-69941)
SQL injection in sqli (CVE-2025-69941). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69937 |
|
SQL Injection in sqli (CVE-2025-69937)
SQL injection in sqli (CVE-2025-69937). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69936 |
|
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.
|
| CVE-2026-35847 |
|
Command Injection in CVE-2026-35847 (CVE-2026-35847)
command injection in CVE-2026-35847 (CVE-2026-35847). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67208 |
|
Vulnerability in CVE-2026-67208 (CVE-2026-67208)
vulnerability in CVE-2026-67208 (CVE-2026-67208). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15971 |
|
Vulnerability in lmsys (CVE-2026-15971)
vulnerability in lmsys (CVE-2026-15971). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12946 |
|
Code Injection in langflow (CVE-2026-12946)
code injection in langflow (CVE-2026-12946). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51272 |
|
Vulnerability in privilege-escalation (CVE-2026-51272)
vulnerability in privilege-escalation (CVE-2026-51272). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15976 |
|
Unsafe Deserialization in deserialization (CVE-2026-15976)
vulnerability in deserialization (CVE-2026-15976). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12118 |
|
Unsafe Deserialization in deserialization (CVE-2026-12118)
vulnerability in deserialization (CVE-2026-12118). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13435 |
|
Code Injection in langflow (CVE-2026-13435)
code injection in langflow (CVE-2026-13435). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15969 |
|
Unsafe Deserialization in lmsys (CVE-2026-15969)
vulnerability in lmsys (CVE-2026-15969). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12943 |
|
OS Command Injection in ibm (CVE-2026-12943)
OS command injection in ibm (CVE-2026-12943). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68503 |
|
Vulnerability in CVE-2026-68503 (CVE-2026-68503)
vulnerability in CVE-2026-68503 (CVE-2026-68503). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.2.154` or later.
|
| CVE-2026-68502 |
|
Vulnerability in CVE-2026-68502 (CVE-2026-68502)
vulnerability in CVE-2026-68502 (CVE-2026-68502). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.2.154` or later.
|
| CVE-2026-18245 |
|
Code Injection in react (CVE-2026-18245)
code injection in react (CVE-2026-18245). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51290 |
|
Use-After-Free in dos (CVE-2026-51290)
vulnerability in dos (CVE-2026-51290). Confidential information can be exposed externally.
|
| CVE-2026-12940 |
|
OS Command Injection in langflow (CVE-2026-12940)
OS command injection in langflow (CVE-2026-12940). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51291 |
|
Use-After-Free in c (CVE-2026-51291)
vulnerability in c (CVE-2026-51291). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13379 |
|
Out-of-Bounds Read in openvpn (CVE-2026-13379)
vulnerability in openvpn (CVE-2026-13379). Confidential information can be exposed externally.
|
| CVE-2026-28812 |
|
Vulnerability in apache (CVE-2026-28812)
vulnerability in apache (CVE-2026-28812). Successful exploitation can lead to full system takeover.
|
| CVE-2026-52680 |
|
Path Traversal in apache (CVE-2026-52680)
path traversal in apache (CVE-2026-52680). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4978 |
|
SQL Injection in sqli (CVE-2026-4978)
SQL injection in sqli (CVE-2026-4978). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28323 |
|
Authentication Bypass in solarwinds (CVE-2026-28323)
authentication bypass in solarwinds (CVE-2026-28323). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15435 |
|
Path Traversal in ibm (CVE-2026-15435)
path traversal in ibm (CVE-2026-15435). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11707 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-11707)
cross-site scripting in ibm (CVE-2026-11707). Confidential information can be exposed externally.
|
| CVE-2026-47876 |
|
Out-of-Bounds Write in CVE-2026-47876 (CVE-2026-47876)
out-of-bounds write in CVE-2026-47876 (CVE-2026-47876). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54363 |
|
Vulnerability in CVE-2026-54363 (CVE-2026-54363)
vulnerability in CVE-2026-54363 (CVE-2026-54363). Confidential information can be exposed externally.
|
| CVE-2026-59310 KEV |
|
[KEV] Path Traversal in Broadcom path-traversal (CVE-2026-59310)
path traversal in Broadcom path-traversal (CVE-2026-59310). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-59309 |
|
Vulnerability in vmware (CVE-2026-59309)
vulnerability in vmware (CVE-2026-59309). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17544 |
|
Out-of-Bounds Write in CVE-2026-17544 (CVE-2026-17544)
out-of-bounds write in CVE-2026-17544 (CVE-2026-17544). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17543 |
|
SQL Injection in sqli (CVE-2026-17543)
SQL injection in sqli (CVE-2026-17543). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7849 |
|
Command Injection in CVE-2026-7849 (CVE-2026-7849)
command injection in CVE-2026-7849 (CVE-2026-7849). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44108 |
|
Vulnerability in CVE-2026-44108 (CVE-2026-44108)
vulnerability in CVE-2026-44108 (CVE-2026-44108). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44101 |
|
Vulnerability in CVE-2026-44101 (CVE-2026-44101)
vulnerability in CVE-2026-44101 (CVE-2026-44101). Successful exploitation can lead to full system takeover.
|