Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-74960 Vulnerability in mozilla (CVE-2026-74960)
vulnerability in mozilla (CVE-2026-74960). Confidential information can be exposed externally.
CVE-2026-74962 Vulnerability in mozilla (CVE-2026-74962)
vulnerability in mozilla (CVE-2026-74962). Confidential information can be exposed externally.
CVE-2026-74952 Privilege Escalation in privilege-escalation (CVE-2026-74952)
vulnerability in privilege-escalation (CVE-2026-74952). Successful exploitation can lead to full system takeover.
CVE-2026-74955 Privilege Escalation in privilege-escalation (CVE-2026-74955)
vulnerability in privilege-escalation (CVE-2026-74955). Successful exploitation can lead to full system takeover.
CVE-2026-74954 Vulnerability in mozilla (CVE-2026-74954)
vulnerability in mozilla (CVE-2026-74954). Confidential information can be exposed externally.
CVE-2026-74958 Vulnerability in mozilla (CVE-2026-74958)
vulnerability in mozilla (CVE-2026-74958). Confidential information can be exposed externally.
CVE-2026-74950 Privilege Escalation in privilege-escalation (CVE-2026-74950)
vulnerability in privilege-escalation (CVE-2026-74950). Successful exploitation can lead to full system takeover.
CVE-2026-74957 Vulnerability in mozilla (CVE-2026-74957)
vulnerability in mozilla (CVE-2026-74957). Confidential information can be exposed externally.
CVE-2026-74953 Privilege Escalation in privilege-escalation (CVE-2026-74953)
vulnerability in privilege-escalation (CVE-2026-74953). Successful exploitation can lead to full system takeover.
CVE-2026-74946 Buffer Overflow in privilege-escalation (CVE-2026-74946)
vulnerability in privilege-escalation (CVE-2026-74946). Successful exploitation can lead to full system takeover.
CVE-2026-74949 Use-After-Free in privilege-escalation (CVE-2026-74949)
vulnerability in privilege-escalation (CVE-2026-74949). Successful exploitation can lead to full system takeover.
CVE-2026-74941 Privilege Escalation in privilege-escalation (CVE-2026-74941)
vulnerability in privilege-escalation (CVE-2026-74941). Successful exploitation can lead to full system takeover.
CVE-2026-74942 Privilege Escalation in privilege-escalation (CVE-2026-74942)
vulnerability in privilege-escalation (CVE-2026-74942). Successful exploitation can lead to full system takeover.
CVE-2026-74939 Privilege Escalation in privilege-escalation (CVE-2026-74939)
vulnerability in privilege-escalation (CVE-2026-74939). Successful exploitation can lead to full system takeover.
CVE-2026-74947 Vulnerability in privilege-escalation (CVE-2026-74947)
vulnerability in privilege-escalation (CVE-2026-74947). Successful exploitation can lead to full system takeover.
CVE-2026-74935 Privilege Escalation in privilege-escalation (CVE-2026-74935)
vulnerability in privilege-escalation (CVE-2026-74935). Successful exploitation can lead to full system takeover.
CVE-2026-74934 Information Disclosure in mozilla (CVE-2026-74934)
vulnerability in mozilla (CVE-2026-74934). Successful exploitation can lead to full system takeover.
CVE-2026-74937 Use-After-Free in mozilla (CVE-2026-74937)
vulnerability in mozilla (CVE-2026-74937). Successful exploitation can lead to full system takeover.
CVE-2026-69189 Information Disclosure in CVE-2026-69189 (CVE-2026-69189)
vulnerability in CVE-2026-69189 (CVE-2026-69189). Confidential information can be exposed externally. Exploitable via `Authorization header`.
CVE-2026-63639 Use-After-Free in deserialization (CVE-2026-63639)
vulnerability in deserialization (CVE-2026-63639). Successful exploitation can lead to full system takeover.
CVE-2026-59825 Vulnerability in CVE-2026-59825 (CVE-2026-59825)
vulnerability in CVE-2026-59825 (CVE-2026-59825). Confidential information can be exposed externally.
CVE-2026-56684 Use-After-Free in CVE-2026-56684 (CVE-2026-56684)
vulnerability in CVE-2026-56684 (CVE-2026-56684). Successful exploitation can lead to full system takeover.
CVE-2026-50187 Code Injection in CVE-2026-50187 (CVE-2026-50187)
code injection in CVE-2026-50187 (CVE-2026-50187). Successful exploitation can lead to full system takeover.
CVE-2026-45733 Cross-Site Scripting (XSS) in CVE-2026-45733 (CVE-2026-45733)
cross-site scripting in CVE-2026-45733 (CVE-2026-45733). Confidential information can be exposed externally.
CVE-2026-50575 Vulnerability in CVE-2026-50575 (CVE-2026-50575)
vulnerability in CVE-2026-50575 (CVE-2026-50575). Confidential information can be exposed externally.
CVE-2026-75853 Vulnerability in CVE-2026-75853 (CVE-2026-75853)
vulnerability in CVE-2026-75853 (CVE-2026-75853). Successful exploitation can lead to full system takeover.
CVE-2026-75855 Path Traversal in CVE-2026-75855 (CVE-2026-75855)
path traversal in CVE-2026-75855 (CVE-2026-75855). Data can be tampered with by attackers. Exploitable via `POST /api/v1/server`.
CVE-2026-75842 Path Traversal in CVE-2026-75842 (CVE-2026-75842)
path traversal in CVE-2026-75842 (CVE-2026-75842). Confidential information can be exposed externally.
CVE-2026-75846 Vulnerability in CVE-2026-75846 (CVE-2026-75846)
vulnerability in CVE-2026-75846 (CVE-2026-75846). Data can be tampered with by attackers. Exploitable via `POST /api/v1/command/{db}`.
CVE-2026-75844 SSRF (Server-Side Request Forgery) in CVE-2026-75844 (CVE-2026-75844)
SSRF in CVE-2026-75844 (CVE-2026-75844). Confidential information can be exposed externally.
CVE-2026-75831 Cross-Site Scripting (XSS) in CVE-2026-75831 (CVE-2026-75831)
cross-site scripting in CVE-2026-75831 (CVE-2026-75831). Confidential information can be exposed externally.
CVE-2026-75836 Vulnerability in CVE-2026-75836 (CVE-2026-75836)
vulnerability in CVE-2026-75836 (CVE-2026-75836). Successful exploitation can lead to full system takeover. Exploitable via `GET /menubar/items`.
CVE-2026-75828 Cross-Site Scripting (XSS) in CVE-2026-75828 (CVE-2026-75828)
cross-site scripting in CVE-2026-75828 (CVE-2026-75828). Confidential information can be exposed externally.
CVE-2026-75829 Vulnerability in CVE-2026-75829 (CVE-2026-75829)
vulnerability in CVE-2026-75829 (CVE-2026-75829). Confidential information can be exposed externally.
CVE-2026-75830 Vulnerability in path-traversal (CVE-2026-75830)
vulnerability in path-traversal (CVE-2026-75830). Data can be tampered with by attackers. Exploitable via `POST /api/v1/pages/batch`. Mitigation: upgrade to `1.0.15` or later.
CVE-2026-75840 Vulnerability in CVE-2026-75840 (CVE-2026-75840)
vulnerability in CVE-2026-75840 (CVE-2026-75840). Confidential information can be exposed externally.
CVE-2026-75827 Code Injection in CVE-2026-75827 (CVE-2026-75827)
code injection in CVE-2026-75827 (CVE-2026-75827). Successful exploitation can lead to full system takeover.
CVE-2026-74904 Vulnerability in CVE-2026-74904 (CVE-2026-74904)
vulnerability in CVE-2026-74904 (CVE-2026-74904). Confidential information can be exposed externally.
CVE-2026-74906 Authorization Flaw in CVE-2026-74906 (CVE-2026-74906)
vulnerability in CVE-2026-74906 (CVE-2026-74906). Confidential information can be exposed externally.
CVE-2026-15585 Path Traversal in path-traversal (CVE-2026-15585)
path traversal in path-traversal (CVE-2026-15585). Confidential information can be exposed externally.
CVE-2026-74905 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-74905)
SSRF in ssrf (CVE-2026-74905). Confidential information can be exposed externally.
CVE-2026-74902 Cross-Site Scripting (XSS) in c (CVE-2026-74902)
cross-site scripting in c (CVE-2026-74902). Successful exploitation can lead to full system takeover.
CVE-2026-15371 Vulnerability in CVE-2026-15371 (CVE-2026-15371)
vulnerability in CVE-2026-15371 (CVE-2026-15371). Confidential information can be exposed externally.
CVE-2026-75091 Cross-Site Scripting (XSS) in wordpress (CVE-2026-75091)
cross-site scripting in wordpress (CVE-2026-75091). Risk of unauthorized operations or information disclosure.
CVE-2026-11801 Vulnerability in wordpress (CVE-2026-11801)
vulnerability in wordpress (CVE-2026-11801). Confidential information can be exposed externally.
CVE-2026-75089 Vulnerability in sqli (CVE-2026-75089)
vulnerability in sqli (CVE-2026-75089). Risk of unauthorized operations or information disclosure.
CVE-2026-75080 Vulnerability in sqli (CVE-2026-75080)
vulnerability in sqli (CVE-2026-75080). Risk of unauthorized operations or information disclosure.
CVE-2026-75079 Vulnerability in sqli (CVE-2026-75079)
vulnerability in sqli (CVE-2026-75079). Risk of unauthorized operations or information disclosure.
CVE-2025-62593 KEV [KEV] Cross-Site Request Forgery (CSRF) in Ray-project ray (CVE-2025-62593)
vulnerability in Ray-project ray (CVE-2025-62593). Successful exploitation can lead to full system takeover. Exploitable via ``fetch``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `2.52.0` or later.
CVE-2026-67961 Code Injection in CVE-2026-67961 (CVE-2026-67961)
code injection in CVE-2026-67961 (CVE-2026-67961). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →