Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-63722 |
|
Vulnerability in csrf (CVE-2026-63722)
vulnerability in csrf (CVE-2026-63722). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63187 |
|
Code Injection in CVE-2026-63187 (CVE-2026-63187)
code injection in CVE-2026-63187 (CVE-2026-63187). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62317 |
|
Vulnerability in CVE-2026-62317 (CVE-2026-62317)
vulnerability in CVE-2026-62317 (CVE-2026-62317). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/experience/verification/verification-code`.
|
| CVE-2026-55089 |
|
Authorization Flaw in CVE-2026-55089 (CVE-2026-55089)
vulnerability in CVE-2026-55089 (CVE-2026-55089). Confidential information can be exposed externally.
|
| CVE-2026-55085 |
|
Cross-Site Scripting (XSS) in CVE-2026-55085 (CVE-2026-55085)
cross-site scripting in CVE-2026-55085 (CVE-2026-55085). Confidential information can be exposed externally.
|
| CVE-2026-54742 |
|
Authorization Flaw in CVE-2026-54742 (CVE-2026-54742)
vulnerability in CVE-2026-54742 (CVE-2026-54742). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-22306 |
|
Vulnerability in CVE-2026-22306 (CVE-2026-22306)
vulnerability in CVE-2026-22306 (CVE-2026-22306). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19508 |
|
Buffer Overflow in c (CVE-2026-19508)
vulnerability in c (CVE-2026-19508). Successful exploitation can lead to full system takeover. Exploitable via ``jst_post.c``.
|
| CVE-2026-19507 |
|
Vulnerability in dos (CVE-2026-19507)
vulnerability in dos (CVE-2026-19507). Risk of unauthorized operations or information disclosure. Exploitable via ``check.jst``.
|
| CVE-2026-19506 |
|
Vulnerability in CVE-2026-19506 (CVE-2026-19506)
vulnerability in CVE-2026-19506 (CVE-2026-19506). Successful exploitation can lead to full system takeover. Exploitable via ``check.jst``.
|
| CVE-2026-19505 |
|
Vulnerability in c (CVE-2026-19505)
vulnerability in c (CVE-2026-19505). Successful exploitation can lead to full system takeover. Exploitable via ``jst_functions.c``.
|
| CVE-2026-18871 |
|
Vulnerability in ibm (CVE-2026-18871)
vulnerability in ibm (CVE-2026-18871). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18821 |
|
Out-of-Bounds Write in ibm (CVE-2026-18821)
out-of-bounds write in ibm (CVE-2026-18821). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17590 |
|
Vulnerability in c (CVE-2026-17590)
vulnerability in c (CVE-2026-17590). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17414 |
|
Vulnerability in ibm (CVE-2026-17414)
vulnerability in ibm (CVE-2026-17414). Data can be tampered with by attackers.
|
| CVE-2026-17091 |
|
Vulnerability in ibm (CVE-2026-17091)
vulnerability in ibm (CVE-2026-17091). Data can be tampered with by attackers.
|
| CVE-2026-17063 |
|
Authorization Flaw in ibm (CVE-2026-17063)
vulnerability in ibm (CVE-2026-17063). Confidential information can be exposed externally.
|
| CVE-2026-17042 |
|
Out-of-Bounds Read in ibm (CVE-2026-17042)
vulnerability in ibm (CVE-2026-17042). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17028 |
|
Out-of-Bounds Read in ibm (CVE-2026-17028)
vulnerability in ibm (CVE-2026-17028). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16933 |
|
Vulnerability in ibm (CVE-2026-16933)
vulnerability in ibm (CVE-2026-16933). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16919 |
|
Vulnerability in ibm (CVE-2026-16919)
vulnerability in ibm (CVE-2026-16919). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16914 |
|
Out-of-Bounds Write in ibm (CVE-2026-16914)
out-of-bounds write in ibm (CVE-2026-16914). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16913 |
|
Out-of-Bounds Write in ibm (CVE-2026-16913)
out-of-bounds write in ibm (CVE-2026-16913). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16883 |
|
Out-of-Bounds Read in ibm (CVE-2026-16883)
vulnerability in ibm (CVE-2026-16883). Confidential information can be exposed externally.
|
| CVE-2026-16875 |
|
OS Command Injection in ibm (CVE-2026-16875)
OS command injection in ibm (CVE-2026-16875). Successful exploitation can lead to full system takeover.
|
| GHSA-hjwh-xvfw-qrwj |
|
Vulnerability in mcp-searxng (GHSA-hjwh-xvfw-qrwj)
vulnerability in mcp-searxng (GHSA-hjwh-xvfw-qrwj). Risk of unauthorized operations or information disclosure. Exploitable via ``SEARXNG_URL``. Mitigation: upgrade to `1.12.0` or later.
|
| CVE-2024-45747 |
|
Vulnerability in org.geoserver:gs-main (CVE-2024-45747)
vulnerability in org.geoserver:gs-main (CVE-2024-45747). Risk of unauthorized operations or information disclosure. Exploitable via ``GEOSERVER_FREEMARKER_BLOCK_LIST``. Mitigation: upgrade to `2.27.0` or later.
|
| CVE-2026-54689 |
|
Information Disclosure in mcp-searxng (CVE-2026-54689)
vulnerability in mcp-searxng (CVE-2026-54689). Risk of unauthorized operations or information disclosure. Exploitable via ``web_url_read``. Mitigation: upgrade to `1.2.1` or later.
|
| CVE-2026-54688 |
|
SSRF (Server-Side Request Forgery) in mcp-searxng (CVE-2026-54688)
SSRF in mcp-searxng (CVE-2026-54688). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.1` or later.
|
| GHSA-p77j-g7h5-r2vw |
|
Vulnerability in geolens (GHSA-p77j-g7h5-r2vw)
vulnerability in geolens (GHSA-p77j-g7h5-r2vw). Risk of unauthorized operations or information disclosure. Exploitable via `POST /search`. Mitigation: upgrade to `1.2.4` or later.
|
| CVE-2026-53966 |
|
Vulnerability in org.xwiki.platform:xwiki-platform-livedata-livetable (CVE-2026-53966)
vulnerability in org.xwiki.platform:xwiki-platform-livedata-livetable (CVE-2026-53966). Risk of unauthorized operations or information disclosure. Exploitable via ``UserUpdatingDocumentEvent``. Mitigation: upgrade to `18.1.0-rc-1` or later.
|
| CVE-2026-53965 |
|
Vulnerability in mcp/sdk (CVE-2026-53965)
vulnerability in mcp/sdk (CVE-2026-53965). Risk of unauthorized operations or information disclosure. Exploitable via ``memory_limit``. Mitigation: upgrade to `0.7.1` or later.
|
| CVE-2026-75619 |
|
Vulnerability in CVE-2026-75619 (CVE-2026-75619)
vulnerability in CVE-2026-75619 (CVE-2026-75619). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75618 |
|
Vulnerability in CVE-2026-75618 (CVE-2026-75618)
vulnerability in CVE-2026-75618 (CVE-2026-75618). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70496 |
|
Vulnerability in privilege-escalation (CVE-2026-70496)
vulnerability in privilege-escalation (CVE-2026-70496). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61807 |
|
Cross-Site Scripting (XSS) in snipe/snipe-it (CVE-2026-61807)
cross-site scripting in snipe/snipe-it (CVE-2026-61807). Risk of unauthorized operations or information disclosure. Exploitable via ``b224cc636c6780386e3f73f03d1171f52ab4c37a``. Mitigation: upgrade to `8.6.2` or later.
|
| CVE-2026-55703 |
|
Vulnerability in snipe/snipe-it (CVE-2026-55703)
vulnerability in snipe/snipe-it (CVE-2026-55703). Risk of unauthorized operations or information disclosure. Exploitable via `GET /maintenances/5`. Mitigation: upgrade to `8.6.3` or later.
|
| CVE-2026-55694 |
|
Vulnerability in snipe/snipe-it (CVE-2026-55694)
vulnerability in snipe/snipe-it (CVE-2026-55694). Risk of unauthorized operations or information disclosure. Exploitable via `GET /stored-eula-file/{filename}`. Mitigation: upgrade to `8.6.3` or later.
|
| CVE-2026-55643 |
|
Authorization Flaw in CVE-2026-55643 (CVE-2026-55643)
vulnerability in CVE-2026-55643 (CVE-2026-55643). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53964 |
|
Vulnerability in document-merge-service (CVE-2026-53964)
vulnerability in document-merge-service (CVE-2026-53964). Risk of unauthorized operations or information disclosure. Exploitable via ``xltpl``. Mitigation: upgrade to `9.1.0` or later.
|
| CVE-2026-19321 |
|
Vulnerability in ibm (CVE-2026-19321)
vulnerability in ibm (CVE-2026-19321). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19198 |
|
Authorization Flaw in CVE-2026-19198 (CVE-2026-19198)
vulnerability in CVE-2026-19198 (CVE-2026-19198). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18848 |
|
Cross-Site Request Forgery (CSRF) in ibm (CVE-2026-18848)
vulnerability in ibm (CVE-2026-18848). Data can be tampered with by attackers.
|
| CVE-2026-18681 |
|
Vulnerability in ibm (CVE-2026-18681)
vulnerability in ibm (CVE-2026-18681). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18315 |
|
Vulnerability in wordpress (CVE-2026-18315)
vulnerability in wordpress (CVE-2026-18315). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17494 |
|
Vulnerability in ibm (CVE-2026-17494)
vulnerability in ibm (CVE-2026-17494). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17429 |
|
Authorization Flaw in ibm (CVE-2026-17429)
vulnerability in ibm (CVE-2026-17429). Data can be tampered with by attackers.
|
| CVE-2026-17100 |
|
Out-of-Bounds Write in ibm (CVE-2026-17100)
out-of-bounds write in ibm (CVE-2026-17100). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17093 |
|
Vulnerability in ibm (CVE-2026-17093)
vulnerability in ibm (CVE-2026-17093). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16938 |
|
Vulnerability in c (CVE-2026-16938)
vulnerability in c (CVE-2026-16938). Risk of unauthorized operations or information disclosure.
|