Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-69836 KEV |
|
[KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-69836)
vulnerability in Microsoft deserialization (CVE-2026-69836). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-69558 |
|
Vulnerability in microsoft (CVE-2026-69558)
vulnerability in microsoft (CVE-2026-69558). Confidential information can be exposed externally.
|
| CVE-2026-69555 |
|
Authorization Flaw in microsoft (CVE-2026-69555)
vulnerability in microsoft (CVE-2026-69555). Confidential information can be exposed externally.
|
| CVE-2026-69543 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-69543)
SSRF in ssrf (CVE-2026-69543). Successful exploitation can lead to full system takeover.
|
| CVE-2026-69519 |
|
Vulnerability in microsoft (CVE-2026-69519)
vulnerability in microsoft (CVE-2026-69519). Confidential information can be exposed externally.
|
| CVE-2026-69419 |
|
Vulnerability in CVE-2026-69419 (CVE-2026-69419)
vulnerability in CVE-2026-69419 (CVE-2026-69419). Successful exploitation can lead to full system takeover.
|
| CVE-2026-69400 |
|
Path Traversal in path-traversal (CVE-2026-69400)
path traversal in path-traversal (CVE-2026-69400). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68789 |
|
SQL Injection in sqli (CVE-2026-68789)
SQL injection in sqli (CVE-2026-68789). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68782 |
|
SQL Injection in sqli (CVE-2026-68782)
SQL injection in sqli (CVE-2026-68782). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66800 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-66800)
SSRF in ssrf (CVE-2026-66800). Confidential information can be exposed externally.
|
| CVE-2026-66309 |
|
Vulnerability in microsoft (CVE-2026-66309)
vulnerability in microsoft (CVE-2026-66309). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65816 |
|
Vulnerability in microsoft (CVE-2026-65816)
vulnerability in microsoft (CVE-2026-65816). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65801 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-65801)
SSRF in ssrf (CVE-2026-65801). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65770 |
|
Vulnerability in apache (CVE-2026-65770)
vulnerability in apache (CVE-2026-65770). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64773 |
|
Vulnerability in CVE-2026-64773 (CVE-2026-64773)
vulnerability in CVE-2026-64773 (CVE-2026-64773). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63509 |
|
Vulnerability in path-traversal (CVE-2026-63509)
vulnerability in path-traversal (CVE-2026-63509). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62945 |
|
Vulnerability in CVE-2026-62945 (CVE-2026-62945)
vulnerability in CVE-2026-62945 (CVE-2026-62945). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/trips/`.
|
| CVE-2026-62834 |
|
Vulnerability in microsoft (CVE-2026-62834)
vulnerability in microsoft (CVE-2026-62834). Confidential information can be exposed externally.
|
| CVE-2026-55894 |
|
Out-of-Bounds Read in c (CVE-2026-55894)
vulnerability in c (CVE-2026-55894). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55893 |
|
Vulnerability in c (CVE-2026-55893)
vulnerability in c (CVE-2026-55893). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55769 |
|
Vulnerability in CVE-2026-55769 (CVE-2026-55769)
vulnerability in CVE-2026-55769 (CVE-2026-55769). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55765 |
|
Vulnerability in CVE-2026-55765 (CVE-2026-55765)
vulnerability in CVE-2026-55765 (CVE-2026-55765). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55491 |
|
Cross-Site Scripting (XSS) in CVE-2026-55491 (CVE-2026-55491)
cross-site scripting in CVE-2026-55491 (CVE-2026-55491). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55489 |
|
Vulnerability in CVE-2026-55489 (CVE-2026-55489)
vulnerability in CVE-2026-55489 (CVE-2026-55489). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55015 |
|
Vulnerability in CVE-2026-55015 (CVE-2026-55015)
vulnerability in CVE-2026-55015 (CVE-2026-55015). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55013 |
|
Vulnerability in CVE-2026-55013 (CVE-2026-55013)
vulnerability in CVE-2026-55013 (CVE-2026-55013). Confidential information can be exposed externally.
|
| CVE-2026-54509 |
|
Vulnerability in CVE-2026-54509 (CVE-2026-54509)
vulnerability in CVE-2026-54509 (CVE-2026-54509). Confidential information can be exposed externally. Exploitable via `GET /api/journeys/`.
|
| CVE-2026-54508 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-54508 (CVE-2026-54508)
SSRF in CVE-2026-54508 (CVE-2026-54508). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54505 |
|
Cross-Site Scripting (XSS) in c (CVE-2026-54505)
cross-site scripting in c (CVE-2026-54505). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/journeys/suggestions`.
|
| CVE-2026-54389 |
|
Vulnerability in deserialization (CVE-2026-54389)
vulnerability in deserialization (CVE-2026-54389). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49436 |
|
Cross-Site Scripting (XSS) in CVE-2026-49436 (CVE-2026-49436)
cross-site scripting in CVE-2026-49436 (CVE-2026-49436). Confidential information can be exposed externally. Exploitable via `POST /api/v2/bulk/links`.
|
| CVE-2026-49217 |
|
Vulnerability in CVE-2026-49217 (CVE-2026-49217)
vulnerability in CVE-2026-49217 (CVE-2026-49217). Data can be tampered with by attackers.
|
| CVE-2026-46682 |
|
SQL Injection in CVE-2026-46682 (CVE-2026-46682)
SQL injection in CVE-2026-46682 (CVE-2026-46682). Confidential information can be exposed externally.
|
| CVE-2026-46355 |
|
Authentication Bypass in CVE-2026-46355 (CVE-2026-46355)
authentication bypass in CVE-2026-46355 (CVE-2026-46355). Data can be tampered with by attackers.
|
| CVE-2026-19783 |
|
Out-of-Bounds Write in privilege-escalation (CVE-2026-19783)
out-of-bounds write in privilege-escalation (CVE-2026-19783). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19449 |
|
Privilege Escalation in ibm (CVE-2026-19449)
vulnerability in ibm (CVE-2026-19449). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19448 |
|
Vulnerability in dos (CVE-2026-19448)
vulnerability in dos (CVE-2026-19448). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19446 |
|
Vulnerability in ibm (CVE-2026-19446)
vulnerability in ibm (CVE-2026-19446). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19442 |
|
Vulnerability in privilege-escalation (CVE-2026-19442)
vulnerability in privilege-escalation (CVE-2026-19442). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19437 |
|
Out-of-Bounds Write in ibm (CVE-2026-19437)
out-of-bounds write in ibm (CVE-2026-19437). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18842 |
|
Out-of-Bounds Write in ibm (CVE-2026-18842)
out-of-bounds write in ibm (CVE-2026-18842). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18840 |
|
Vulnerability in ibm (CVE-2026-18840)
vulnerability in ibm (CVE-2026-18840). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18835 |
|
OS Command Injection in ibm (CVE-2026-18835)
OS command injection in ibm (CVE-2026-18835). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18832 |
|
Out-of-Bounds Write in ibm (CVE-2026-18832)
out-of-bounds write in ibm (CVE-2026-18832). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18828 |
|
Out-of-Bounds Write in dos (CVE-2026-18828)
out-of-bounds write in dos (CVE-2026-18828). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18824 |
|
OS Command Injection in CVE-2026-18824 (CVE-2026-18824)
OS command injection in CVE-2026-18824 (CVE-2026-18824). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18822 |
|
Vulnerability in dos (CVE-2026-18822)
vulnerability in dos (CVE-2026-18822). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18716 |
|
Out-of-Bounds Read in dos (CVE-2026-18716)
vulnerability in dos (CVE-2026-18716). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18670 |
|
Vulnerability in dos (CVE-2026-18670)
vulnerability in dos (CVE-2026-18670). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17436 |
|
Out-of-Bounds Write in ibm (CVE-2026-17436)
out-of-bounds write in ibm (CVE-2026-17436). Successful exploitation can lead to full system takeover.
|