Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-50548 |
|
Path Traversal in anysphere (CVE-2026-50548)
path traversal in anysphere (CVE-2026-50548). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.0` or later.
|
| CVE-2026-50549 |
|
Vulnerability in anysphere (CVE-2026-50549)
vulnerability in anysphere (CVE-2026-50549). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.0` or later.
|
| CVE-2026-6094 |
|
Out-of-Bounds Read in wolfssl (CVE-2026-6094)
vulnerability in wolfssl (CVE-2026-6094). Confidential information can be exposed externally.
|
| CVE-2026-54836 |
|
SQL Injection in sqli (CVE-2026-54836)
SQL injection in sqli (CVE-2026-54836). Confidential information can be exposed externally.
|
| CVE-2026-54843 |
|
Unauthenticated SQL Injection in MDTF <= 1.3.7 versions.
Unauthenticated SQL Injection in MDTF <= 1.3.7 versions.
|
| CVE-2026-54849 |
|
Unauthenticated SQL Injection in Premmerce Wishlist for WooCommerce <= 1.1.11 versions.
Unauthenticated SQL Injection in Premmerce Wishlist for WooCommerce <= 1.1.11 versions.
|
| CVE-2026-54823 |
|
Contributor Remote Code Execution (RCE) in Widget Options <= 4.2.3 versions.
Contributor Remote Code Execution (RCE) in Widget Options <= 4.2.3 versions.
|
| CVE-2026-41120 |
|
Vulnerability in dell (CVE-2026-41120)
vulnerability in dell (CVE-2026-41120). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53247 |
|
Use-After-Free in linux (CVE-2026-53247)
vulnerability in linux (CVE-2026-53247). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53246 |
|
Out-of-Bounds Write in linux (CVE-2026-53246)
out-of-bounds write in linux (CVE-2026-53246). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53260 |
|
Use-After-Free in c (CVE-2026-53260)
vulnerability in c (CVE-2026-53260). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53216 |
|
Vulnerability in linux (CVE-2026-53216)
vulnerability in linux (CVE-2026-53216). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53228 |
|
Vulnerability in linux (CVE-2026-53228)
vulnerability in linux (CVE-2026-53228). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53224 |
|
Out-of-Bounds Read in linux (CVE-2026-53224)
vulnerability in linux (CVE-2026-53224). Confidential information can be exposed externally.
|
| CVE-2026-53215 |
|
Vulnerability in linux (CVE-2026-53215)
vulnerability in linux (CVE-2026-53215). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53221 |
|
Vulnerability in linux (CVE-2026-53221)
vulnerability in linux (CVE-2026-53221). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53225 |
|
Vulnerability in c (CVE-2026-53225)
vulnerability in c (CVE-2026-53225). Confidential information can be exposed externally.
|
| CVE-2026-53186 |
|
Vulnerability in linux (CVE-2026-53186)
vulnerability in linux (CVE-2026-53186). Confidential information can be exposed externally.
|
| CVE-2026-53175 |
|
Use-After-Free in linux (CVE-2026-53175)
vulnerability in linux (CVE-2026-53175). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53176 |
|
Vulnerability in c (CVE-2026-53176)
vulnerability in c (CVE-2026-53176). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53151 |
|
Vulnerability in linux (CVE-2026-53151)
vulnerability in linux (CVE-2026-53151). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53131 |
|
Vulnerability in linux (CVE-2026-53131)
vulnerability in linux (CVE-2026-53131). Confidential information can be exposed externally. Exploitable via ``ip6t_eui64``.
|
| CVE-2026-40079 |
|
OS Command Injection in cacti (CVE-2026-40079)
OS command injection in cacti (CVE-2026-40079). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39938 |
|
Path Traversal in cacti (CVE-2026-39938)
path traversal in cacti (CVE-2026-39938). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39955 |
|
SQL Injection in sqli (CVE-2026-39955)
SQL injection in sqli (CVE-2026-39955). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39948 |
|
SQL Injection in cacti (CVE-2026-39948)
SQL injection in cacti (CVE-2026-39948). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55454 |
|
Vulnerability in appsmith (CVE-2026-55454)
vulnerability in appsmith (CVE-2026-55454). Successful exploitation can lead to full system takeover. Exploitable via `POST /load`. Mitigation: upgrade to `2.1` or later.
|
| CVE-2026-55455 |
|
SSRF (Server-Side Request Forgery) in appsmith (CVE-2026-55455)
SSRF in appsmith (CVE-2026-55455). Confidential information can be exposed externally. Mitigation: upgrade to `2.1` or later.
|
| CVE-2026-55570 |
|
Cross-Site Scripting (XSS) in CVE-2026-55570 (CVE-2026-55570)
cross-site scripting in CVE-2026-55570 (CVE-2026-55570). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.7.0` or later.
|
| CVE-2026-54158 |
|
Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-54158)
cross-site scripting in github.com/siyuan-note/siyuan/kernel (CVE-2026-54158). Successful exploitation can lead to full system takeover. Exploitable via ``genAVValueHTML``. Mitigation: upgrade to `0.0.0-20260628153353-2d5d72223df4` or later.
|
| CVE-2026-54067 |
|
Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-54067)
cross-site scripting in github.com/siyuan-note/siyuan/kernel (CVE-2026-54067). Successful exploitation can lead to full system takeover. Exploitable via ``insertAdjacentHTML``. Mitigation: upgrade to `0.0.0-20260628153353-2d5d72223df4` or later.
|
| CVE-2026-50551 |
|
Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-50551)
cross-site scripting in github.com/siyuan-note/siyuan/kernel (CVE-2026-50551). Successful exploitation can lead to full system takeover. Exploitable via ``getAttribute``. Mitigation: upgrade to `0.0.0-20260628153353-2d5d72223df4` or later.
|
| CVE-2026-39893 |
|
SQL Injection in sqli (CVE-2026-39893)
SQL injection in sqli (CVE-2026-39893). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13032 |
|
Use-After-Free in google (CVE-2026-13032)
vulnerability in google (CVE-2026-13032). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45688 |
|
Vulnerability in CVE-2026-45688 (CVE-2026-45688)
vulnerability in CVE-2026-45688 (CVE-2026-45688). Confidential information can be exposed externally. Mitigation: upgrade to `8.5.0` or later.
|
| CVE-2026-45689 |
|
Vulnerability in CVE-2026-45689 (CVE-2026-45689)
vulnerability in CVE-2026-45689 (CVE-2026-45689). Confidential information can be exposed externally. Mitigation: upgrade to `8.5.0` or later.
|
| CVE-2026-13028 |
|
Use-After-Free in Google chrome (CVE-2026-13028)
vulnerability in Google chrome (CVE-2026-13028). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53943 |
|
Vulnerability in ghost (CVE-2026-53943)
vulnerability in ghost (CVE-2026-53943). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.37.0` or later.
|
| CVE-2026-53088 |
|
Vulnerability in linux (CVE-2026-53088)
vulnerability in linux (CVE-2026-53088). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53086 |
|
Vulnerability in linux (CVE-2026-53086)
vulnerability in linux (CVE-2026-53086). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53055 |
|
Use-After-Free in linux (CVE-2026-53055)
vulnerability in linux (CVE-2026-53055). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53049 |
|
Vulnerability in linux (CVE-2026-53049)
vulnerability in linux (CVE-2026-53049). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53043 |
|
Out-of-Bounds Write in linux (CVE-2026-53043)
out-of-bounds write in linux (CVE-2026-53043). Confidential information can be exposed externally.
|
| CVE-2026-53046 |
|
Use-After-Free in c (CVE-2026-53046)
vulnerability in c (CVE-2026-53046). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53045 |
|
Vulnerability in linux (CVE-2026-53045)
vulnerability in linux (CVE-2026-53045). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53002 |
|
Out-of-Bounds Write in linux (CVE-2026-53002)
out-of-bounds write in linux (CVE-2026-53002). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53006 |
|
Use-After-Free in linux (CVE-2026-53006)
vulnerability in linux (CVE-2026-53006). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53010 |
|
Use-After-Free in linux (CVE-2026-53010)
vulnerability in linux (CVE-2026-53010). Successful exploitation can lead to full system takeover.
|
| CVE-2026-52999 |
|
Out-of-Bounds Read in linux (CVE-2026-52999)
vulnerability in linux (CVE-2026-52999). Confidential information can be exposed externally.
|
| CVE-2026-52989 |
|
Vulnerability in linux (CVE-2026-52989)
vulnerability in linux (CVE-2026-52989). Successful exploitation can lead to full system takeover.
|