Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-34367 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-34367)
SSRF in ssrf (CVE-2026-34367). Confidential information can be exposed externally.
|
| CVE-2026-4800 |
|
Code Injection in lodash (CVE-2026-4800)
code injection in lodash (CVE-2026-4800). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34365 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-34365)
SSRF in ssrf (CVE-2026-34365). Confidential information can be exposed externally.
|
| CVE-2026-34784 |
|
Vulnerability in parseplatform (CVE-2026-34784)
vulnerability in parseplatform (CVE-2026-34784). Confidential information can be exposed externally.
|
| CVE-2026-5211 |
|
Buffer Overflow in dlink (CVE-2026-5211)
vulnerability in dlink (CVE-2026-5211). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34204 |
|
Authentication Bypass in minio (CVE-2026-34204)
authentication bypass in minio (CVE-2026-34204). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-30290 |
|
Path Traversal in intouchapp (CVE-2026-30290)
path traversal in intouchapp (CVE-2026-30290). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5210 |
|
Vulnerability in CVE-2026-5210 (CVE-2026-5210)
vulnerability in CVE-2026-5210 (CVE-2026-5210). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32725 |
|
Vulnerability in c (CVE-2026-32725)
vulnerability in c (CVE-2026-32725). Confidential information can be exposed externally.
|
| CVE-2026-32726 |
|
Authorization Flaw in c (CVE-2026-32726)
vulnerability in c (CVE-2026-32726). Confidential information can be exposed externally.
|
| CVE-2026-30279 |
|
Path Traversal in c (CVE-2026-30279)
path traversal in c (CVE-2026-30279). Successful exploitation can lead to full system takeover.
|
| CVE-2026-30277 |
|
Path Traversal in triumph-adler (CVE-2026-30277)
path traversal in triumph-adler (CVE-2026-30277). Successful exploitation can lead to full system takeover.
|
| CVE-2026-2123 |
|
Vulnerability in privilege-escalation (CVE-2026-2123)
vulnerability in privilege-escalation (CVE-2026-2123). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24165 |
|
Unsafe Deserialization in dos (CVE-2026-24165)
vulnerability in dos (CVE-2026-24165). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34359 |
|
Vulnerability in hapifhir (CVE-2026-34359)
vulnerability in hapifhir (CVE-2026-34359). Confidential information can be exposed externally.
|
| CVE-2026-24154 |
|
OS Command Injection in dos (CVE-2026-24154)
OS command injection in dos (CVE-2026-24154). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24164 |
|
Unsafe Deserialization in dos (CVE-2026-24164)
vulnerability in dos (CVE-2026-24164). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24148 |
|
Vulnerability in dos (CVE-2026-24148)
vulnerability in dos (CVE-2026-24148). Confidential information can be exposed externally.
|
| CVE-2026-5087 |
|
Vulnerability in jjnapiork (CVE-2026-5087)
vulnerability in jjnapiork (CVE-2026-5087). Confidential information can be exposed externally.
|
| CVE-2026-5204 |
|
Buffer Overflow in tenda (CVE-2026-5204)
vulnerability in tenda (CVE-2026-5204). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34240 |
|
Vulnerability in appsup-dart (CVE-2026-34240)
vulnerability in appsup-dart (CVE-2026-34240). Data can be tampered with by attackers.
|
| CVE-2026-34573 |
|
Vulnerability in parseplatform (CVE-2026-34573)
vulnerability in parseplatform (CVE-2026-34573). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34227 |
|
Vulnerability in github.com/bishopfox/sliver (CVE-2026-34227)
vulnerability in github.com/bishopfox/sliver (CVE-2026-34227). Successful exploitation can lead to full system takeover. Exploitable via ``ntds.dit``. Mitigation: upgrade to `1.7.4` or later.
|
| CVE-2026-30284 |
|
Vulnerability in uxgroupllc (CVE-2026-30284)
vulnerability in uxgroupllc (CVE-2026-30284). Successful exploitation can lead to full system takeover.
|
| CVE-2026-22561 |
|
Vulnerability in privilege-escalation (CVE-2026-22561)
vulnerability in privilege-escalation (CVE-2026-22561). Successful exploitation can lead to full system takeover.
|
| CVE-2026-0596 |
|
OS Command Injection in mlflow (CVE-2026-0596)
OS command injection in mlflow (CVE-2026-0596). Successful exploitation can lead to full system takeover. Exploitable via ``model_uri``. Mitigation: upgrade to `3.9.0` or later.
|
| CVE-2026-34373 |
|
Vulnerability in parseplatform (CVE-2026-34373)
vulnerability in parseplatform (CVE-2026-34373). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34377 |
|
Vulnerability in zfnd (CVE-2026-34377)
vulnerability in zfnd (CVE-2026-34377). Data can be tampered with by attackers.
|
| CVE-2026-34503 |
|
Vulnerability in openclaw (CVE-2026-34503)
vulnerability in openclaw (CVE-2026-34503). Confidential information can be exposed externally.
|
| CVE-2026-34504 |
|
SSRF (Server-Side Request Forgery) in c (CVE-2026-34504)
SSRF in c (CVE-2026-34504). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34209 |
|
Vulnerability in wevm (CVE-2026-34209)
vulnerability in wevm (CVE-2026-34209). Data can be tampered with by attackers.
|
| CVE-2026-34210 |
|
Vulnerability in wevm (CVE-2026-34210)
vulnerability in wevm (CVE-2026-34210). Data can be tampered with by attackers.
|
| CVE-2026-34214 |
|
Vulnerability in trino (CVE-2026-34214)
vulnerability in trino (CVE-2026-34214). Confidential information can be exposed externally.
|
| CVE-2026-34172 |
|
Vulnerability in giskard-agents (CVE-2026-34172)
vulnerability in giskard-agents (CVE-2026-34172). Successful exploitation can lead to full system takeover. Exploitable via ``Environment``. Mitigation: upgrade to `1.0.2b1` or later.
|
| CVE-2026-34163 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-34163)
SSRF in ssrf (CVE-2026-34163). Confidential information can be exposed externally.
|
| CVE-2026-34200 |
|
Vulnerability in nhost (CVE-2026-34200)
vulnerability in nhost (CVE-2026-34200). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34202 |
|
Code Injection in deserialization (CVE-2026-34202)
code injection in deserialization (CVE-2026-34202). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33577 |
|
Authorization Flaw in openclaw (CVE-2026-33577)
vulnerability in openclaw (CVE-2026-33577). Confidential information can be exposed externally.
|
| CVE-2026-29870 |
|
Path Traversal in path-traversal (CVE-2026-29870)
path traversal in path-traversal (CVE-2026-29870). Data can be tampered with by attackers.
|
| CVE-2026-30309 |
|
OS Command Injection in tokfinity (CVE-2026-30309)
OS command injection in tokfinity (CVE-2026-30309). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3308 |
|
Vulnerability in c (CVE-2026-3308)
vulnerability in c (CVE-2026-3308). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4267 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4267)
cross-site scripting in wordpress (CVE-2026-4267). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5198 |
|
Vulnerability in sqli (CVE-2026-5198)
vulnerability in sqli (CVE-2026-5198). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32988 |
|
Vulnerability in openclaw (CVE-2026-32988)
vulnerability in openclaw (CVE-2026-32988). Data can be tampered with by attackers. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.3.11` or later.
|
| CVE-2026-32982 |
|
Vulnerability in openclaw (CVE-2026-32982)
vulnerability in openclaw (CVE-2026-32982). Confidential information can be exposed externally. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.3.13` or later.
|
| CVE-2026-32971 |
|
Vulnerability in openclaw (CVE-2026-32971)
vulnerability in openclaw (CVE-2026-32971). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32920 |
|
Vulnerability in c (CVE-2026-32920)
vulnerability in c (CVE-2026-32920). Successful exploitation can lead to full system takeover.
|
| CVE-2024-14030 |
|
Out-of-Bounds Write in yves (CVE-2024-14030)
out-of-bounds write in yves (CVE-2024-14030). Successful exploitation can lead to full system takeover.
|
| CVE-2024-14031 |
|
Out-of-Bounds Write in yves (CVE-2024-14031)
out-of-bounds write in yves (CVE-2024-14031). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5201 |
|
Vulnerability in dos (CVE-2026-5201)
vulnerability in dos (CVE-2026-5201). Risk of unauthorized operations or information disclosure.
|