Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-70309 |
|
Vulnerability in CVE-2026-70309 (CVE-2026-70309)
vulnerability in CVE-2026-70309 (CVE-2026-70309). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66798 |
|
Use-After-Free in CVE-2026-66798 (CVE-2026-66798)
vulnerability in CVE-2026-66798 (CVE-2026-66798). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66324 |
|
Vulnerability in CVE-2026-66324 (CVE-2026-66324)
vulnerability in CVE-2026-66324 (CVE-2026-66324). Confidential information can be exposed externally.
|
| CVE-2026-66323 |
|
Vulnerability in CVE-2026-66323 (CVE-2026-66323)
vulnerability in CVE-2026-66323 (CVE-2026-66323). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62904 |
|
Authorization Flaw in CVE-2026-62904 (CVE-2026-62904)
vulnerability in CVE-2026-62904 (CVE-2026-62904). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58616 |
|
Vulnerability in CVE-2026-58616 (CVE-2026-58616)
vulnerability in CVE-2026-58616 (CVE-2026-58616). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56100 |
|
Vulnerability in privilege-escalation (CVE-2026-56100)
vulnerability in privilege-escalation (CVE-2026-56100). Confidential information can be exposed externally.
|
| CVE-2026-55378 |
|
OS Command Injection in CVE-2026-55378 (CVE-2026-55378)
OS command injection in CVE-2026-55378 (CVE-2026-55378). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54745 |
|
Vulnerability in CVE-2026-54745 (CVE-2026-54745)
vulnerability in CVE-2026-54745 (CVE-2026-54745). Successful exploitation can lead to full system takeover. Exploitable via `Referer header`.
|
| CVE-2026-51660 |
|
Vulnerability in CVE-2026-51660 (CVE-2026-51660)
vulnerability in CVE-2026-51660 (CVE-2026-51660). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51659 |
|
Vulnerability in CVE-2026-51659 (CVE-2026-51659)
vulnerability in CVE-2026-51659 (CVE-2026-51659). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51658 |
|
Vulnerability in CVE-2026-51658 (CVE-2026-51658)
vulnerability in CVE-2026-51658 (CVE-2026-51658). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51657 |
|
Vulnerability in CVE-2026-51657 (CVE-2026-51657)
vulnerability in CVE-2026-51657 (CVE-2026-51657). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51656 |
|
Vulnerability in CVE-2026-51656 (CVE-2026-51656)
vulnerability in CVE-2026-51656 (CVE-2026-51656). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51655 |
|
Vulnerability in CVE-2026-51655 (CVE-2026-51655)
vulnerability in CVE-2026-51655 (CVE-2026-51655). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51648 |
|
Vulnerability in CVE-2026-51648 (CVE-2026-51648)
vulnerability in CVE-2026-51648 (CVE-2026-51648). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51645 |
|
Vulnerability in CVE-2026-51645 (CVE-2026-51645)
vulnerability in CVE-2026-51645 (CVE-2026-51645). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51643 |
|
Vulnerability in CVE-2026-51643 (CVE-2026-51643)
vulnerability in CVE-2026-51643 (CVE-2026-51643). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51634 |
|
Vulnerability in CVE-2026-51634 (CVE-2026-51634)
vulnerability in CVE-2026-51634 (CVE-2026-51634). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51630 |
|
Vulnerability in CVE-2026-51630 (CVE-2026-51630)
vulnerability in CVE-2026-51630 (CVE-2026-51630). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51629 |
|
Vulnerability in CVE-2026-51629 (CVE-2026-51629)
vulnerability in CVE-2026-51629 (CVE-2026-51629). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51619 |
|
Vulnerability in CVE-2026-51619 (CVE-2026-51619)
vulnerability in CVE-2026-51619 (CVE-2026-51619). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51618 |
|
Vulnerability in CVE-2026-51618 (CVE-2026-51618)
vulnerability in CVE-2026-51618 (CVE-2026-51618). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51617 |
|
Vulnerability in CVE-2026-51617 (CVE-2026-51617)
vulnerability in CVE-2026-51617 (CVE-2026-51617). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51616 |
|
Vulnerability in CVE-2026-51616 (CVE-2026-51616)
vulnerability in CVE-2026-51616 (CVE-2026-51616). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51615 |
|
Vulnerability in CVE-2026-51615 (CVE-2026-51615)
vulnerability in CVE-2026-51615 (CVE-2026-51615). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51614 |
|
Vulnerability in CVE-2026-51614 (CVE-2026-51614)
vulnerability in CVE-2026-51614 (CVE-2026-51614). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51613 |
|
Vulnerability in CVE-2026-51613 (CVE-2026-51613)
vulnerability in CVE-2026-51613 (CVE-2026-51613). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51611 |
|
Vulnerability in CVE-2026-51611 (CVE-2026-51611)
vulnerability in CVE-2026-51611 (CVE-2026-51611). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51610 |
|
Vulnerability in CVE-2026-51610 (CVE-2026-51610)
vulnerability in CVE-2026-51610 (CVE-2026-51610). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51376 |
|
Vulnerability in dos (CVE-2026-51376)
vulnerability in dos (CVE-2026-51376). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50980 |
|
Vulnerability in CVE-2026-50980 (CVE-2026-50980)
vulnerability in CVE-2026-50980 (CVE-2026-50980). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39071 |
|
Vulnerability in wordpress (CVE-2026-39071)
vulnerability in wordpress (CVE-2026-39071). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39070 |
|
Vulnerability in wordpress (CVE-2026-39070)
vulnerability in wordpress (CVE-2026-39070). Risk of unauthorized operations or information disclosure.
|
| GHSA-73p9-6hrp-8qhr |
|
Vulnerability in aiir (GHSA-73p9-6hrp-8qhr)
vulnerability in aiir (GHSA-73p9-6hrp-8qhr). Risk of unauthorized operations or information disclosure. Exploitable via ``require_signing``. Mitigation: upgrade to `1.7.0` or later.
|
| CVE-2026-55484 |
|
Vulnerability in github.com/guno1928/alos-http (CVE-2026-55484)
vulnerability in github.com/guno1928/alos-http (CVE-2026-55484). Risk of unauthorized operations or information disclosure. Exploitable via ``sanitizeRequestPath``. Mitigation: upgrade to `0.0.0-20260617230736-314b6783e196` or later.
|
| CVE-2026-55634 |
|
SQL Injection in pimcore/pimcore (CVE-2026-55634)
SQL injection in pimcore/pimcore (CVE-2026-55634). Successful exploitation can lead to full system takeover. Exploitable via ``objects``. Mitigation: upgrade to `2026.1.6` or later.
|
| CVE-2026-55220 |
|
Unsafe Deserialization in pimcore/pimcore (CVE-2026-55220)
vulnerability in pimcore/pimcore (CVE-2026-55220). Risk of unauthorized operations or information disclosure. Exploitable via ``true``. Mitigation: upgrade to `12.3.10` or later.
|
| CVE-2026-55215 |
|
Vulnerability in mariadb (CVE-2026-55215)
vulnerability in mariadb (CVE-2026-55215). Confidential information can be exposed externally. Mitigation: upgrade to `3.2.4` or later.
|
| CVE-2026-55247 |
|
Vulnerability in plone.app.event (CVE-2026-55247)
vulnerability in plone.app.event (CVE-2026-55247). Risk of unauthorized operations or information disclosure. Exploitable via ``plone.app.event``. Mitigation: upgrade to `6.0.1` or later.
|
| CVE-2026-55520 |
|
Vulnerability in Protego (CVE-2026-55520)
vulnerability in Protego (CVE-2026-55520). Risk of unauthorized operations or information disclosure. Exploitable via ``robots.txt``. Mitigation: upgrade to `0.6.2` or later.
|
| CVE-2026-55248 |
|
Vulnerability in plone.app.portlets (CVE-2026-55248)
vulnerability in plone.app.portlets (CVE-2026-55248). Risk of unauthorized operations or information disclosure. Exploitable via ``plone.app.portlets``. Mitigation: upgrade to `5.0.8` or later.
|
| CVE-2026-55673 |
|
OS Command Injection in com.powsybl:powsybl-computation-local (CVE-2026-55673)
OS command injection in com.powsybl:powsybl-computation-local (CVE-2026-55673). Risk of unauthorized operations or information disclosure. Exploitable via ``AbstractLocalCommandExecutor``. Mitigation: upgrade to `7.2.2` or later.
|
| CVE-2026-55584 |
|
Vulnerability in phpsysinfo/phpsysinfo (CVE-2026-55584)
vulnerability in phpsysinfo/phpsysinfo (CVE-2026-55584). Confidential information can be exposed externally. Exploitable via ``PSI_ALLOWED``. Mitigation: upgrade to `3.4.6` or later.
|
| CVE-2026-55245 |
|
SSRF (Server-Side Request Forgery) in github.com/maximhq/bifrost/core (CVE-2026-55245)
SSRF in github.com/maximhq/bifrost/core (CVE-2026-55245). Risk of unauthorized operations or information disclosure. Exploitable via ``isPublicIP``. Mitigation: upgrade to `1.5.17` or later.
|
| CVE-2026-81849 |
|
Vulnerability in Amazon aws (CVE-2026-81849)
vulnerability in Amazon aws (CVE-2026-81849). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55485 |
|
Information Disclosure in piccolo-admin (CVE-2026-55485)
vulnerability in piccolo-admin (CVE-2026-55485). Successful exploitation can lead to full system takeover. Exploitable via `PATCH /api/tables/piccolo_user/2/`. Mitigation: upgrade to `1.14.0` or later.
|
| CVE-2026-55509 |
|
SQL Injection in WsgiDAV (CVE-2026-55509)
SQL injection in WsgiDAV (CVE-2026-55509). Risk of unauthorized operations or information disclosure. Exploitable via ``MySQLBrowserProvider``. Mitigation: upgrade to `4.3.5` or later.
|
| CVE-2026-55425 |
|
Vulnerability in org.graylog2:graylog2-server (CVE-2026-55425)
vulnerability in org.graylog2:graylog2-server (CVE-2026-55425). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.4` or later.
|
| CVE-2026-55566 |
|
Cross-Site Scripting (XSS) in org.yamcs:yamcs-core (CVE-2026-55566)
cross-site scripting in org.yamcs:yamcs-core (CVE-2026-55566). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.12.8` or later.
|