Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-54538 |
|
Vulnerability in neutrinolabs (CVE-2026-54538)
vulnerability in neutrinolabs (CVE-2026-54538). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50743 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-50743)
vulnerability in csrf (CVE-2026-50743). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47276 |
|
Vulnerability in CVE-2026-47276 (CVE-2026-47276)
vulnerability in CVE-2026-47276 (CVE-2026-47276). Risk of unauthorized operations or information disclosure. Exploitable via ``user_properties``.
|
| CVE-2026-47275 |
|
Vulnerability in c (CVE-2026-47275)
vulnerability in c (CVE-2026-47275). Risk of unauthorized operations or information disclosure. Exploitable via ``prop``.
|
| CVE-2026-46555 |
|
Path Traversal in path-traversal (CVE-2026-46555)
path traversal in path-traversal (CVE-2026-46555). Confidential information can be exposed externally. Exploitable via `Host header`.
|
| CVE-2026-44978 |
|
Vulnerability in dos (CVE-2026-44978)
vulnerability in dos (CVE-2026-44978). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44178 |
|
Vulnerability in dos (CVE-2026-44178)
vulnerability in dos (CVE-2026-44178). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42218 |
|
Vulnerability in neutrinolabs (CVE-2026-42218)
vulnerability in neutrinolabs (CVE-2026-42218). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42210 |
|
Authentication Bypass in CVE-2026-42210 (CVE-2026-42210)
authentication bypass in CVE-2026-42210 (CVE-2026-42210). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41521 |
|
Vulnerability in dos (CVE-2026-41521)
vulnerability in dos (CVE-2026-41521). Confidential information can be exposed externally.
|
| CVE-2026-41252 |
|
Vulnerability in dos (CVE-2026-41252)
vulnerability in dos (CVE-2026-41252). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39879 |
|
Vulnerability in c (CVE-2026-39879)
vulnerability in c (CVE-2026-39879). Risk of unauthorized operations or information disclosure. Exploitable via ``afsql_dd_run_query``.
|
| CVE-2026-39385 |
|
Vulnerability in CVE-2026-39385 (CVE-2026-39385)
vulnerability in CVE-2026-39385 (CVE-2026-39385). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.52.0` or later.
|
| CVE-2026-35591 |
|
Vulnerability in libvips (CVE-2026-35591)
vulnerability in libvips (CVE-2026-35591). Successful exploitation can lead to full system takeover. Exploitable via ``tiffload``.
|
| CVE-2026-35590 |
|
Vulnerability in libvips (CVE-2026-35590)
vulnerability in libvips (CVE-2026-35590). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35217 |
|
Out-of-Bounds Read in CVE-2026-35217 (CVE-2026-35217)
vulnerability in CVE-2026-35217 (CVE-2026-35217). Risk of unauthorized operations or information disclosure. Exploitable via ``SUBSCRIBE``.
|
| CVE-2026-35048 |
|
Vulnerability in CVE-2026-35048 (CVE-2026-35048)
vulnerability in CVE-2026-35048 (CVE-2026-35048). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33328 |
|
Vulnerability in libvips (CVE-2026-33328)
vulnerability in libvips (CVE-2026-33328). Risk of unauthorized operations or information disclosure. Exploitable via ``gifload``.
|
| CVE-2026-33327 |
|
Vulnerability in libvips (CVE-2026-33327)
vulnerability in libvips (CVE-2026-33327). Successful exploitation can lead to full system takeover. Exploitable via ``vipsload``.
|
| CVE-2026-32825 |
|
Vulnerability in rails (CVE-2026-32825)
vulnerability in rails (CVE-2026-32825). Confidential information can be exposed externally.
|
| CVE-2026-32824 |
|
Open Redirect in CVE-2026-32824 (CVE-2026-32824)
vulnerability in CVE-2026-32824 (CVE-2026-32824). Confidential information can be exposed externally. Exploitable via ``forwardToUrl``.
|
| CVE-2026-32823 |
|
Cross-Site Request Forgery (CSRF) in rails (CVE-2026-32823)
vulnerability in rails (CVE-2026-32823). Risk of unauthorized operations or information disclosure. Exploitable via ``GET``.
|
| CVE-2026-32821 |
|
Vulnerability in CVE-2026-32821 (CVE-2026-32821)
vulnerability in CVE-2026-32821 (CVE-2026-32821). Confidential information can be exposed externally. Exploitable via ``user_email``.
|
| CVE-2026-32820 |
|
Path Traversal in rails (CVE-2026-32820)
path traversal in rails (CVE-2026-32820). Confidential information can be exposed externally. Exploitable via ``docs``.
|
| CVE-2026-32819 |
|
Vulnerability in CVE-2026-32819 (CVE-2026-32819)
vulnerability in CVE-2026-32819 (CVE-2026-32819). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32806 |
|
Vulnerability in CVE-2026-32806 (CVE-2026-32806)
vulnerability in CVE-2026-32806 (CVE-2026-32806). Confidential information can be exposed externally. Mitigation: upgrade to `26.06.08` or later.
|
| CVE-2026-16312 |
|
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
|
| CVE-2026-6793 |
|
Cross-Site Scripting (XSS) in CVE-2026-6793 (CVE-2026-6793)
cross-site scripting in CVE-2026-6793 (CVE-2026-6793). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63429 |
|
Vulnerability in CVE-2026-63429 (CVE-2026-63429)
vulnerability in CVE-2026-63429 (CVE-2026-63429). Data can be tampered with by attackers. Exploitable via `POST /api/upload`.
|
| CVE-2026-63428 |
|
Vulnerability in CVE-2026-63428 (CVE-2026-63428)
vulnerability in CVE-2026-63428 (CVE-2026-63428). Risk of unauthorized operations or information disclosure. Exploitable via ``completeSubmission``.
|
| CVE-2026-63102 |
|
Vulnerability in privilege-escalation (CVE-2026-63102)
vulnerability in privilege-escalation (CVE-2026-63102). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51027 |
|
Information Disclosure in CVE-2026-51027 (CVE-2026-51027)
vulnerability in CVE-2026-51027 (CVE-2026-51027). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51026 |
|
Vulnerability in path-traversal (CVE-2026-51026)
vulnerability in path-traversal (CVE-2026-51026). Confidential information can be exposed externally.
|
| CVE-2026-46428 |
|
Vulnerability in lettre (CVE-2026-46428)
vulnerability in lettre (CVE-2026-46428). Risk of unauthorized operations or information disclosure. Exploitable via ``rustls``. Mitigation: upgrade to `0.11.22` or later.
|
| CVE-2026-45797 |
|
Cross-Site Scripting (XSS) in express (CVE-2026-45797)
cross-site scripting in express (CVE-2026-45797). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35198 |
|
Cross-Site Scripting (XSS) in privilege-escalation (CVE-2026-35198)
cross-site scripting in privilege-escalation (CVE-2026-35198). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32822 |
|
Vulnerability in CVE-2026-32822 (CVE-2026-32822)
vulnerability in CVE-2026-32822 (CVE-2026-32822). Risk of unauthorized operations or information disclosure. Exploitable via ``innerHTML``.
|
| CVE-2026-32807 |
|
Vulnerability in CVE-2026-32807 (CVE-2026-32807)
vulnerability in CVE-2026-32807 (CVE-2026-32807). Confidential information can be exposed externally.
|
| CVE-2026-28220 |
|
Unsafe Deserialization in wazuh (CVE-2026-28220)
vulnerability in wazuh (CVE-2026-28220). Successful exploitation can lead to full system takeover. Exploitable via ``ALLOWED_CALLABLES_PACKAGES``.
|
| CVE-2026-26199 |
|
Vulnerability in hdfgroup (CVE-2026-26199)
vulnerability in hdfgroup (CVE-2026-26199). Risk of unauthorized operations or information disclosure. Exploitable via ``H5Iget_name``.
|
| CVE-2026-26197 |
|
Out-of-Bounds Read in hdfgroup (CVE-2026-26197)
vulnerability in hdfgroup (CVE-2026-26197). Confidential information can be exposed externally.
|
| CVE-2026-26081 |
|
Vulnerability in haproxy (CVE-2026-26081)
vulnerability in haproxy (CVE-2026-26081). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-26080 |
|
Vulnerability in haproxy (CVE-2026-26080)
vulnerability in haproxy (CVE-2026-26080). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-25039 |
|
Vulnerability in CVE-2026-25039 (CVE-2026-25039)
vulnerability in CVE-2026-25039 (CVE-2026-25039). Successful exploitation can lead to full system takeover. Exploitable via ``NTLM``.
|
| CVE-2026-21824 |
|
Vulnerability in privilege-escalation (CVE-2026-21824)
vulnerability in privilege-escalation (CVE-2026-21824). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13724 |
|
Vulnerability in CVE-2026-13724 (CVE-2026-13724)
vulnerability in CVE-2026-13724 (CVE-2026-13724). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63090 |
|
Vulnerability in c (CVE-2026-63090)
vulnerability in c (CVE-2026-63090). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63091 |
|
Vulnerability in proftpd (CVE-2026-63091)
vulnerability in proftpd (CVE-2026-63091). Confidential information can be exposed externally.
|
| CVE-2026-59238 |
|
Cross-Site Scripting (XSS) in CVE-2026-59238 (CVE-2026-59238)
cross-site scripting in CVE-2026-59238 (CVE-2026-59238). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52349 |
|
Path Traversal in path-traversal (CVE-2026-52349)
path traversal in path-traversal (CVE-2026-52349). Successful exploitation can lead to full system takeover.
|