Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-34367 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-34367)
SSRF in ssrf (CVE-2026-34367). Confidential information can be exposed externally.
CVE-2026-4800 Code Injection in lodash (CVE-2026-4800)
code injection in lodash (CVE-2026-4800). Successful exploitation can lead to full system takeover.
CVE-2026-34365 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-34365)
SSRF in ssrf (CVE-2026-34365). Confidential information can be exposed externally.
CVE-2026-34784 Vulnerability in parseplatform (CVE-2026-34784)
vulnerability in parseplatform (CVE-2026-34784). Confidential information can be exposed externally.
CVE-2026-5211 Buffer Overflow in dlink (CVE-2026-5211)
vulnerability in dlink (CVE-2026-5211). Successful exploitation can lead to full system takeover.
CVE-2026-34204 Authentication Bypass in minio (CVE-2026-34204)
authentication bypass in minio (CVE-2026-34204). Risk of unauthorized operations or information disclosure.
CVE-2026-30290 Path Traversal in intouchapp (CVE-2026-30290)
path traversal in intouchapp (CVE-2026-30290). Successful exploitation can lead to full system takeover.
CVE-2026-5210 Vulnerability in CVE-2026-5210 (CVE-2026-5210)
vulnerability in CVE-2026-5210 (CVE-2026-5210). Risk of unauthorized operations or information disclosure.
CVE-2026-32725 Vulnerability in c (CVE-2026-32725)
vulnerability in c (CVE-2026-32725). Confidential information can be exposed externally.
CVE-2026-32726 Authorization Flaw in c (CVE-2026-32726)
vulnerability in c (CVE-2026-32726). Confidential information can be exposed externally.
CVE-2026-30279 Path Traversal in c (CVE-2026-30279)
path traversal in c (CVE-2026-30279). Successful exploitation can lead to full system takeover.
CVE-2026-30277 Path Traversal in triumph-adler (CVE-2026-30277)
path traversal in triumph-adler (CVE-2026-30277). Successful exploitation can lead to full system takeover.
CVE-2026-2123 Vulnerability in privilege-escalation (CVE-2026-2123)
vulnerability in privilege-escalation (CVE-2026-2123). Successful exploitation can lead to full system takeover.
CVE-2026-24165 Unsafe Deserialization in dos (CVE-2026-24165)
vulnerability in dos (CVE-2026-24165). Successful exploitation can lead to full system takeover.
CVE-2026-34359 Vulnerability in hapifhir (CVE-2026-34359)
vulnerability in hapifhir (CVE-2026-34359). Confidential information can be exposed externally.
CVE-2026-24154 OS Command Injection in dos (CVE-2026-24154)
OS command injection in dos (CVE-2026-24154). Successful exploitation can lead to full system takeover.
CVE-2026-24164 Unsafe Deserialization in dos (CVE-2026-24164)
vulnerability in dos (CVE-2026-24164). Successful exploitation can lead to full system takeover.
CVE-2026-24148 Vulnerability in dos (CVE-2026-24148)
vulnerability in dos (CVE-2026-24148). Confidential information can be exposed externally.
CVE-2026-5087 Vulnerability in jjnapiork (CVE-2026-5087)
vulnerability in jjnapiork (CVE-2026-5087). Confidential information can be exposed externally.
CVE-2026-5204 Buffer Overflow in tenda (CVE-2026-5204)
vulnerability in tenda (CVE-2026-5204). Successful exploitation can lead to full system takeover.
CVE-2026-34240 Vulnerability in appsup-dart (CVE-2026-34240)
vulnerability in appsup-dart (CVE-2026-34240). Data can be tampered with by attackers.
CVE-2026-34573 Vulnerability in parseplatform (CVE-2026-34573)
vulnerability in parseplatform (CVE-2026-34573). Risk of unauthorized operations or information disclosure.
CVE-2026-34227 Vulnerability in github.com/bishopfox/sliver (CVE-2026-34227)
vulnerability in github.com/bishopfox/sliver (CVE-2026-34227). Successful exploitation can lead to full system takeover. Exploitable via ``ntds.dit``. Mitigation: upgrade to `1.7.4` or later.
CVE-2026-30284 Vulnerability in uxgroupllc (CVE-2026-30284)
vulnerability in uxgroupllc (CVE-2026-30284). Successful exploitation can lead to full system takeover.
CVE-2026-22561 Vulnerability in privilege-escalation (CVE-2026-22561)
vulnerability in privilege-escalation (CVE-2026-22561). Successful exploitation can lead to full system takeover.
CVE-2026-0596 OS Command Injection in mlflow (CVE-2026-0596)
OS command injection in mlflow (CVE-2026-0596). Successful exploitation can lead to full system takeover. Exploitable via ``model_uri``. Mitigation: upgrade to `3.9.0` or later.
CVE-2026-34373 Vulnerability in parseplatform (CVE-2026-34373)
vulnerability in parseplatform (CVE-2026-34373). Successful exploitation can lead to full system takeover.
CVE-2026-34377 Vulnerability in zfnd (CVE-2026-34377)
vulnerability in zfnd (CVE-2026-34377). Data can be tampered with by attackers.
CVE-2026-34503 Vulnerability in openclaw (CVE-2026-34503)
vulnerability in openclaw (CVE-2026-34503). Confidential information can be exposed externally.
CVE-2026-34504 SSRF (Server-Side Request Forgery) in c (CVE-2026-34504)
SSRF in c (CVE-2026-34504). Risk of unauthorized operations or information disclosure.
CVE-2026-34209 Vulnerability in wevm (CVE-2026-34209)
vulnerability in wevm (CVE-2026-34209). Data can be tampered with by attackers.
CVE-2026-34210 Vulnerability in wevm (CVE-2026-34210)
vulnerability in wevm (CVE-2026-34210). Data can be tampered with by attackers.
CVE-2026-34214 Vulnerability in trino (CVE-2026-34214)
vulnerability in trino (CVE-2026-34214). Confidential information can be exposed externally.
CVE-2026-34172 Vulnerability in giskard-agents (CVE-2026-34172)
vulnerability in giskard-agents (CVE-2026-34172). Successful exploitation can lead to full system takeover. Exploitable via ``Environment``. Mitigation: upgrade to `1.0.2b1` or later.
CVE-2026-34163 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-34163)
SSRF in ssrf (CVE-2026-34163). Confidential information can be exposed externally.
CVE-2026-34200 Vulnerability in nhost (CVE-2026-34200)
vulnerability in nhost (CVE-2026-34200). Successful exploitation can lead to full system takeover.
CVE-2026-34202 Code Injection in deserialization (CVE-2026-34202)
code injection in deserialization (CVE-2026-34202). Risk of unauthorized operations or information disclosure.
CVE-2026-33577 Authorization Flaw in openclaw (CVE-2026-33577)
vulnerability in openclaw (CVE-2026-33577). Confidential information can be exposed externally.
CVE-2026-29870 Path Traversal in path-traversal (CVE-2026-29870)
path traversal in path-traversal (CVE-2026-29870). Data can be tampered with by attackers.
CVE-2026-30309 OS Command Injection in tokfinity (CVE-2026-30309)
OS command injection in tokfinity (CVE-2026-30309). Successful exploitation can lead to full system takeover.
CVE-2026-3308 Vulnerability in c (CVE-2026-3308)
vulnerability in c (CVE-2026-3308). Successful exploitation can lead to full system takeover.
CVE-2026-4267 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4267)
cross-site scripting in wordpress (CVE-2026-4267). Risk of unauthorized operations or information disclosure.
CVE-2026-5198 Vulnerability in sqli (CVE-2026-5198)
vulnerability in sqli (CVE-2026-5198). Risk of unauthorized operations or information disclosure.
CVE-2026-32988 Vulnerability in openclaw (CVE-2026-32988)
vulnerability in openclaw (CVE-2026-32988). Data can be tampered with by attackers. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.3.11` or later.
CVE-2026-32982 Vulnerability in openclaw (CVE-2026-32982)
vulnerability in openclaw (CVE-2026-32982). Confidential information can be exposed externally. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.3.13` or later.
CVE-2026-32971 Vulnerability in openclaw (CVE-2026-32971)
vulnerability in openclaw (CVE-2026-32971). Successful exploitation can lead to full system takeover.
CVE-2026-32920 Vulnerability in c (CVE-2026-32920)
vulnerability in c (CVE-2026-32920). Successful exploitation can lead to full system takeover.
CVE-2024-14030 Out-of-Bounds Write in yves (CVE-2024-14030)
out-of-bounds write in yves (CVE-2024-14030). Successful exploitation can lead to full system takeover.
CVE-2024-14031 Out-of-Bounds Write in yves (CVE-2024-14031)
out-of-bounds write in yves (CVE-2024-14031). Successful exploitation can lead to full system takeover.
CVE-2026-5201 Vulnerability in dos (CVE-2026-5201)
vulnerability in dos (CVE-2026-5201). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →