Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-74960 |
|
Vulnerability in mozilla (CVE-2026-74960)
vulnerability in mozilla (CVE-2026-74960). Confidential information can be exposed externally.
|
| CVE-2026-74962 |
|
Vulnerability in mozilla (CVE-2026-74962)
vulnerability in mozilla (CVE-2026-74962). Confidential information can be exposed externally.
|
| CVE-2026-74952 |
|
Privilege Escalation in privilege-escalation (CVE-2026-74952)
vulnerability in privilege-escalation (CVE-2026-74952). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74955 |
|
Privilege Escalation in privilege-escalation (CVE-2026-74955)
vulnerability in privilege-escalation (CVE-2026-74955). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74954 |
|
Vulnerability in mozilla (CVE-2026-74954)
vulnerability in mozilla (CVE-2026-74954). Confidential information can be exposed externally.
|
| CVE-2026-74958 |
|
Vulnerability in mozilla (CVE-2026-74958)
vulnerability in mozilla (CVE-2026-74958). Confidential information can be exposed externally.
|
| CVE-2026-74950 |
|
Privilege Escalation in privilege-escalation (CVE-2026-74950)
vulnerability in privilege-escalation (CVE-2026-74950). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74957 |
|
Vulnerability in mozilla (CVE-2026-74957)
vulnerability in mozilla (CVE-2026-74957). Confidential information can be exposed externally.
|
| CVE-2026-74953 |
|
Privilege Escalation in privilege-escalation (CVE-2026-74953)
vulnerability in privilege-escalation (CVE-2026-74953). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74946 |
|
Buffer Overflow in privilege-escalation (CVE-2026-74946)
vulnerability in privilege-escalation (CVE-2026-74946). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74949 |
|
Use-After-Free in privilege-escalation (CVE-2026-74949)
vulnerability in privilege-escalation (CVE-2026-74949). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74941 |
|
Privilege Escalation in privilege-escalation (CVE-2026-74941)
vulnerability in privilege-escalation (CVE-2026-74941). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74942 |
|
Privilege Escalation in privilege-escalation (CVE-2026-74942)
vulnerability in privilege-escalation (CVE-2026-74942). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74939 |
|
Privilege Escalation in privilege-escalation (CVE-2026-74939)
vulnerability in privilege-escalation (CVE-2026-74939). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74947 |
|
Vulnerability in privilege-escalation (CVE-2026-74947)
vulnerability in privilege-escalation (CVE-2026-74947). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74935 |
|
Privilege Escalation in privilege-escalation (CVE-2026-74935)
vulnerability in privilege-escalation (CVE-2026-74935). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74934 |
|
Information Disclosure in mozilla (CVE-2026-74934)
vulnerability in mozilla (CVE-2026-74934). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74937 |
|
Use-After-Free in mozilla (CVE-2026-74937)
vulnerability in mozilla (CVE-2026-74937). Successful exploitation can lead to full system takeover.
|
| CVE-2026-69189 |
|
Information Disclosure in CVE-2026-69189 (CVE-2026-69189)
vulnerability in CVE-2026-69189 (CVE-2026-69189). Confidential information can be exposed externally. Exploitable via `Authorization header`.
|
| CVE-2026-63639 |
|
Use-After-Free in deserialization (CVE-2026-63639)
vulnerability in deserialization (CVE-2026-63639). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59825 |
|
Vulnerability in CVE-2026-59825 (CVE-2026-59825)
vulnerability in CVE-2026-59825 (CVE-2026-59825). Confidential information can be exposed externally.
|
| CVE-2026-56684 |
|
Use-After-Free in CVE-2026-56684 (CVE-2026-56684)
vulnerability in CVE-2026-56684 (CVE-2026-56684). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50187 |
|
Code Injection in CVE-2026-50187 (CVE-2026-50187)
code injection in CVE-2026-50187 (CVE-2026-50187). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45733 |
|
Cross-Site Scripting (XSS) in CVE-2026-45733 (CVE-2026-45733)
cross-site scripting in CVE-2026-45733 (CVE-2026-45733). Confidential information can be exposed externally.
|
| CVE-2026-50575 |
|
Vulnerability in CVE-2026-50575 (CVE-2026-50575)
vulnerability in CVE-2026-50575 (CVE-2026-50575). Confidential information can be exposed externally.
|
| CVE-2026-75853 |
|
Vulnerability in CVE-2026-75853 (CVE-2026-75853)
vulnerability in CVE-2026-75853 (CVE-2026-75853). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75855 |
|
Path Traversal in CVE-2026-75855 (CVE-2026-75855)
path traversal in CVE-2026-75855 (CVE-2026-75855). Data can be tampered with by attackers. Exploitable via `POST /api/v1/server`.
|
| CVE-2026-75842 |
|
Path Traversal in CVE-2026-75842 (CVE-2026-75842)
path traversal in CVE-2026-75842 (CVE-2026-75842). Confidential information can be exposed externally.
|
| CVE-2026-75846 |
|
Vulnerability in CVE-2026-75846 (CVE-2026-75846)
vulnerability in CVE-2026-75846 (CVE-2026-75846). Data can be tampered with by attackers. Exploitable via `POST /api/v1/command/{db}`.
|
| CVE-2026-75844 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-75844 (CVE-2026-75844)
SSRF in CVE-2026-75844 (CVE-2026-75844). Confidential information can be exposed externally.
|
| CVE-2026-75831 |
|
Cross-Site Scripting (XSS) in CVE-2026-75831 (CVE-2026-75831)
cross-site scripting in CVE-2026-75831 (CVE-2026-75831). Confidential information can be exposed externally.
|
| CVE-2026-75836 |
|
Vulnerability in CVE-2026-75836 (CVE-2026-75836)
vulnerability in CVE-2026-75836 (CVE-2026-75836). Successful exploitation can lead to full system takeover. Exploitable via `GET /menubar/items`.
|
| CVE-2026-75828 |
|
Cross-Site Scripting (XSS) in CVE-2026-75828 (CVE-2026-75828)
cross-site scripting in CVE-2026-75828 (CVE-2026-75828). Confidential information can be exposed externally.
|
| CVE-2026-75829 |
|
Vulnerability in CVE-2026-75829 (CVE-2026-75829)
vulnerability in CVE-2026-75829 (CVE-2026-75829). Confidential information can be exposed externally.
|
| CVE-2026-75830 |
|
Vulnerability in path-traversal (CVE-2026-75830)
vulnerability in path-traversal (CVE-2026-75830). Data can be tampered with by attackers. Exploitable via `POST /api/v1/pages/batch`. Mitigation: upgrade to `1.0.15` or later.
|
| CVE-2026-75840 |
|
Vulnerability in CVE-2026-75840 (CVE-2026-75840)
vulnerability in CVE-2026-75840 (CVE-2026-75840). Confidential information can be exposed externally.
|
| CVE-2026-75827 |
|
Code Injection in CVE-2026-75827 (CVE-2026-75827)
code injection in CVE-2026-75827 (CVE-2026-75827). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74904 |
|
Vulnerability in CVE-2026-74904 (CVE-2026-74904)
vulnerability in CVE-2026-74904 (CVE-2026-74904). Confidential information can be exposed externally.
|
| CVE-2026-74906 |
|
Authorization Flaw in CVE-2026-74906 (CVE-2026-74906)
vulnerability in CVE-2026-74906 (CVE-2026-74906). Confidential information can be exposed externally.
|
| CVE-2026-15585 |
|
Path Traversal in path-traversal (CVE-2026-15585)
path traversal in path-traversal (CVE-2026-15585). Confidential information can be exposed externally.
|
| CVE-2026-74905 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-74905)
SSRF in ssrf (CVE-2026-74905). Confidential information can be exposed externally.
|
| CVE-2026-74902 |
|
Cross-Site Scripting (XSS) in c (CVE-2026-74902)
cross-site scripting in c (CVE-2026-74902). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15371 |
|
Vulnerability in CVE-2026-15371 (CVE-2026-15371)
vulnerability in CVE-2026-15371 (CVE-2026-15371). Confidential information can be exposed externally.
|
| CVE-2026-75091 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-75091)
cross-site scripting in wordpress (CVE-2026-75091). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11801 |
|
Vulnerability in wordpress (CVE-2026-11801)
vulnerability in wordpress (CVE-2026-11801). Confidential information can be exposed externally.
|
| CVE-2026-75089 |
|
Vulnerability in sqli (CVE-2026-75089)
vulnerability in sqli (CVE-2026-75089). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75080 |
|
Vulnerability in sqli (CVE-2026-75080)
vulnerability in sqli (CVE-2026-75080). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75079 |
|
Vulnerability in sqli (CVE-2026-75079)
vulnerability in sqli (CVE-2026-75079). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-62593 KEV |
|
[KEV] Cross-Site Request Forgery (CSRF) in Ray-project ray (CVE-2025-62593)
vulnerability in Ray-project ray (CVE-2025-62593). Successful exploitation can lead to full system takeover. Exploitable via ``fetch``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `2.52.0` or later.
|
| CVE-2026-67961 |
|
Code Injection in CVE-2026-67961 (CVE-2026-67961)
code injection in CVE-2026-67961 (CVE-2026-67961). Successful exploitation can lead to full system takeover.
|