Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-63722 Vulnerability in csrf (CVE-2026-63722)
vulnerability in csrf (CVE-2026-63722). Successful exploitation can lead to full system takeover.
CVE-2026-63187 Code Injection in CVE-2026-63187 (CVE-2026-63187)
code injection in CVE-2026-63187 (CVE-2026-63187). Risk of unauthorized operations or information disclosure.
CVE-2026-62317 Vulnerability in CVE-2026-62317 (CVE-2026-62317)
vulnerability in CVE-2026-62317 (CVE-2026-62317). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/experience/verification/verification-code`.
CVE-2026-55089 Authorization Flaw in CVE-2026-55089 (CVE-2026-55089)
vulnerability in CVE-2026-55089 (CVE-2026-55089). Confidential information can be exposed externally.
CVE-2026-55085 Cross-Site Scripting (XSS) in CVE-2026-55085 (CVE-2026-55085)
cross-site scripting in CVE-2026-55085 (CVE-2026-55085). Confidential information can be exposed externally.
CVE-2026-54742 Authorization Flaw in CVE-2026-54742 (CVE-2026-54742)
vulnerability in CVE-2026-54742 (CVE-2026-54742). Risk of unauthorized operations or information disclosure.
CVE-2026-22306 Vulnerability in CVE-2026-22306 (CVE-2026-22306)
vulnerability in CVE-2026-22306 (CVE-2026-22306). Successful exploitation can lead to full system takeover.
CVE-2026-19508 Buffer Overflow in c (CVE-2026-19508)
vulnerability in c (CVE-2026-19508). Successful exploitation can lead to full system takeover. Exploitable via ``jst_post.c``.
CVE-2026-19507 Vulnerability in dos (CVE-2026-19507)
vulnerability in dos (CVE-2026-19507). Risk of unauthorized operations or information disclosure. Exploitable via ``check.jst``.
CVE-2026-19506 Vulnerability in CVE-2026-19506 (CVE-2026-19506)
vulnerability in CVE-2026-19506 (CVE-2026-19506). Successful exploitation can lead to full system takeover. Exploitable via ``check.jst``.
CVE-2026-19505 Vulnerability in c (CVE-2026-19505)
vulnerability in c (CVE-2026-19505). Successful exploitation can lead to full system takeover. Exploitable via ``jst_functions.c``.
CVE-2026-18871 Vulnerability in ibm (CVE-2026-18871)
vulnerability in ibm (CVE-2026-18871). Risk of unauthorized operations or information disclosure.
CVE-2026-18821 Out-of-Bounds Write in ibm (CVE-2026-18821)
out-of-bounds write in ibm (CVE-2026-18821). Successful exploitation can lead to full system takeover.
CVE-2026-17590 Vulnerability in c (CVE-2026-17590)
vulnerability in c (CVE-2026-17590). Risk of unauthorized operations or information disclosure.
CVE-2026-17414 Vulnerability in ibm (CVE-2026-17414)
vulnerability in ibm (CVE-2026-17414). Data can be tampered with by attackers.
CVE-2026-17091 Vulnerability in ibm (CVE-2026-17091)
vulnerability in ibm (CVE-2026-17091). Data can be tampered with by attackers.
CVE-2026-17063 Authorization Flaw in ibm (CVE-2026-17063)
vulnerability in ibm (CVE-2026-17063). Confidential information can be exposed externally.
CVE-2026-17042 Out-of-Bounds Read in ibm (CVE-2026-17042)
vulnerability in ibm (CVE-2026-17042). Risk of unauthorized operations or information disclosure.
CVE-2026-17028 Out-of-Bounds Read in ibm (CVE-2026-17028)
vulnerability in ibm (CVE-2026-17028). Risk of unauthorized operations or information disclosure.
CVE-2026-16933 Vulnerability in ibm (CVE-2026-16933)
vulnerability in ibm (CVE-2026-16933). Successful exploitation can lead to full system takeover.
CVE-2026-16919 Vulnerability in ibm (CVE-2026-16919)
vulnerability in ibm (CVE-2026-16919). Successful exploitation can lead to full system takeover.
CVE-2026-16914 Out-of-Bounds Write in ibm (CVE-2026-16914)
out-of-bounds write in ibm (CVE-2026-16914). Successful exploitation can lead to full system takeover.
CVE-2026-16913 Out-of-Bounds Write in ibm (CVE-2026-16913)
out-of-bounds write in ibm (CVE-2026-16913). Successful exploitation can lead to full system takeover.
CVE-2026-16883 Out-of-Bounds Read in ibm (CVE-2026-16883)
vulnerability in ibm (CVE-2026-16883). Confidential information can be exposed externally.
CVE-2026-16875 OS Command Injection in ibm (CVE-2026-16875)
OS command injection in ibm (CVE-2026-16875). Successful exploitation can lead to full system takeover.
GHSA-hjwh-xvfw-qrwj Vulnerability in mcp-searxng (GHSA-hjwh-xvfw-qrwj)
vulnerability in mcp-searxng (GHSA-hjwh-xvfw-qrwj). Risk of unauthorized operations or information disclosure. Exploitable via ``SEARXNG_URL``. Mitigation: upgrade to `1.12.0` or later.
CVE-2024-45747 Vulnerability in org.geoserver:gs-main (CVE-2024-45747)
vulnerability in org.geoserver:gs-main (CVE-2024-45747). Risk of unauthorized operations or information disclosure. Exploitable via ``GEOSERVER_FREEMARKER_BLOCK_LIST``. Mitigation: upgrade to `2.27.0` or later.
CVE-2026-54689 Information Disclosure in mcp-searxng (CVE-2026-54689)
vulnerability in mcp-searxng (CVE-2026-54689). Risk of unauthorized operations or information disclosure. Exploitable via ``web_url_read``. Mitigation: upgrade to `1.2.1` or later.
CVE-2026-54688 SSRF (Server-Side Request Forgery) in mcp-searxng (CVE-2026-54688)
SSRF in mcp-searxng (CVE-2026-54688). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.1` or later.
GHSA-p77j-g7h5-r2vw Vulnerability in geolens (GHSA-p77j-g7h5-r2vw)
vulnerability in geolens (GHSA-p77j-g7h5-r2vw). Risk of unauthorized operations or information disclosure. Exploitable via `POST /search`. Mitigation: upgrade to `1.2.4` or later.
CVE-2026-53966 Vulnerability in org.xwiki.platform:xwiki-platform-livedata-livetable (CVE-2026-53966)
vulnerability in org.xwiki.platform:xwiki-platform-livedata-livetable (CVE-2026-53966). Risk of unauthorized operations or information disclosure. Exploitable via ``UserUpdatingDocumentEvent``. Mitigation: upgrade to `18.1.0-rc-1` or later.
CVE-2026-53965 Vulnerability in mcp/sdk (CVE-2026-53965)
vulnerability in mcp/sdk (CVE-2026-53965). Risk of unauthorized operations or information disclosure. Exploitable via ``memory_limit``. Mitigation: upgrade to `0.7.1` or later.
CVE-2026-75619 Vulnerability in CVE-2026-75619 (CVE-2026-75619)
vulnerability in CVE-2026-75619 (CVE-2026-75619). Risk of unauthorized operations or information disclosure.
CVE-2026-75618 Vulnerability in CVE-2026-75618 (CVE-2026-75618)
vulnerability in CVE-2026-75618 (CVE-2026-75618). Risk of unauthorized operations or information disclosure.
CVE-2026-70496 Vulnerability in privilege-escalation (CVE-2026-70496)
vulnerability in privilege-escalation (CVE-2026-70496). Successful exploitation can lead to full system takeover.
CVE-2026-61807 Cross-Site Scripting (XSS) in snipe/snipe-it (CVE-2026-61807)
cross-site scripting in snipe/snipe-it (CVE-2026-61807). Risk of unauthorized operations or information disclosure. Exploitable via ``b224cc636c6780386e3f73f03d1171f52ab4c37a``. Mitigation: upgrade to `8.6.2` or later.
CVE-2026-55703 Vulnerability in snipe/snipe-it (CVE-2026-55703)
vulnerability in snipe/snipe-it (CVE-2026-55703). Risk of unauthorized operations or information disclosure. Exploitable via `GET /maintenances/5`. Mitigation: upgrade to `8.6.3` or later.
CVE-2026-55694 Vulnerability in snipe/snipe-it (CVE-2026-55694)
vulnerability in snipe/snipe-it (CVE-2026-55694). Risk of unauthorized operations or information disclosure. Exploitable via `GET /stored-eula-file/{filename}`. Mitigation: upgrade to `8.6.3` or later.
CVE-2026-55643 Authorization Flaw in CVE-2026-55643 (CVE-2026-55643)
vulnerability in CVE-2026-55643 (CVE-2026-55643). Risk of unauthorized operations or information disclosure.
CVE-2026-53964 Vulnerability in document-merge-service (CVE-2026-53964)
vulnerability in document-merge-service (CVE-2026-53964). Risk of unauthorized operations or information disclosure. Exploitable via ``xltpl``. Mitigation: upgrade to `9.1.0` or later.
CVE-2026-19321 Vulnerability in ibm (CVE-2026-19321)
vulnerability in ibm (CVE-2026-19321). Risk of unauthorized operations or information disclosure.
CVE-2026-19198 Authorization Flaw in CVE-2026-19198 (CVE-2026-19198)
vulnerability in CVE-2026-19198 (CVE-2026-19198). Risk of unauthorized operations or information disclosure.
CVE-2026-18848 Cross-Site Request Forgery (CSRF) in ibm (CVE-2026-18848)
vulnerability in ibm (CVE-2026-18848). Data can be tampered with by attackers.
CVE-2026-18681 Vulnerability in ibm (CVE-2026-18681)
vulnerability in ibm (CVE-2026-18681). Successful exploitation can lead to full system takeover.
CVE-2026-18315 Vulnerability in wordpress (CVE-2026-18315)
vulnerability in wordpress (CVE-2026-18315). Successful exploitation can lead to full system takeover.
CVE-2026-17494 Vulnerability in ibm (CVE-2026-17494)
vulnerability in ibm (CVE-2026-17494). Successful exploitation can lead to full system takeover.
CVE-2026-17429 Authorization Flaw in ibm (CVE-2026-17429)
vulnerability in ibm (CVE-2026-17429). Data can be tampered with by attackers.
CVE-2026-17100 Out-of-Bounds Write in ibm (CVE-2026-17100)
out-of-bounds write in ibm (CVE-2026-17100). Successful exploitation can lead to full system takeover.
CVE-2026-17093 Vulnerability in ibm (CVE-2026-17093)
vulnerability in ibm (CVE-2026-17093). Successful exploitation can lead to full system takeover.
CVE-2026-16938 Vulnerability in c (CVE-2026-16938)
vulnerability in c (CVE-2026-16938). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →