Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-53766 |
|
Path Traversal in chrome-devtools-mcp (CVE-2026-53766)
path traversal in chrome-devtools-mcp (CVE-2026-53766). Data can be tampered with by attackers. Exploitable via ``roots``. Mitigation: upgrade to `1.1.0` or later.
|
| CVE-2026-52794 |
|
Vulnerability in dos (CVE-2026-52794)
vulnerability in dos (CVE-2026-52794). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.5.2` or later.
|
| CVE-2026-50551 |
|
Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-50551)
cross-site scripting in github.com/siyuan-note/siyuan/kernel (CVE-2026-50551). Successful exploitation can lead to full system takeover. Exploitable via ``getAttribute``. Mitigation: upgrade to `0.0.0-20260628153353-2d5d72223df4` or later.
|
| CVE-2026-50189 |
|
Vulnerability in appsmith (CVE-2026-50189)
vulnerability in appsmith (CVE-2026-50189). Successful exploitation can lead to full system takeover. Exploitable via `GET /api/v1/admin/env`. Mitigation: upgrade to `2.1` or later.
|
| CVE-2026-49979 |
|
Vulnerability in appsmith (CVE-2026-49979)
vulnerability in appsmith (CVE-2026-49979). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.99.0` or later.
|
| CVE-2026-39897 |
|
Cross-Site Scripting (XSS) in cacti (CVE-2026-39897)
cross-site scripting in cacti (CVE-2026-39897). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39894 |
|
Vulnerability in cacti (CVE-2026-39894)
vulnerability in cacti (CVE-2026-39894). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39893 |
|
SQL Injection in sqli (CVE-2026-39893)
SQL injection in sqli (CVE-2026-39893). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10642 |
|
Vulnerability in c (CVE-2026-10642)
vulnerability in c (CVE-2026-10642). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-2050 |
|
Vulnerability in gegl (UBUNTU-CVE-2026-2050)
vulnerability in gegl (UBUNTU-CVE-2026-2050). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-39897 |
|
Vulnerability in cacti (UBUNTU-CVE-2026-39897)
vulnerability in cacti (UBUNTU-CVE-2026-39897). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-39894 |
|
Vulnerability in cacti (UBUNTU-CVE-2026-39894)
vulnerability in cacti (UBUNTU-CVE-2026-39894). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-39893 |
|
Vulnerability in cacti (UBUNTU-CVE-2026-39893)
vulnerability in cacti (UBUNTU-CVE-2026-39893). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2025-60468 |
|
Vulnerability in gpac (UBUNTU-CVE-2025-60468)
vulnerability in gpac (UBUNTU-CVE-2025-60468). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:22360-1 |
|
Vulnerability in python-starlette (SUSE-SU-2026:22360-1)
vulnerability in python-starlette (SUSE-SU-2026:22360-1). Risk of unauthorized operations or information disclosure. Exploitable via ``HTTPEndpoint``. Mitigation: upgrade to `0.41.3-160000.4.1` or later.
|
| openSUSE-SU-2026:21053-1 |
|
Vulnerability in python-starlette (openSUSE-SU-2026:21053-1)
vulnerability in python-starlette (openSUSE-SU-2026:21053-1). Risk of unauthorized operations or information disclosure. Exploitable via ``HTTPEndpoint``. Mitigation: upgrade to `0.41.3-160000.4.1` or later.
|
| SUSE-SU-2026:22358-1 |
|
Vulnerability in dracut (SUSE-SU-2026:22358-1)
vulnerability in dracut (SUSE-SU-2026:22358-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `059+suse.722.gdd9d67ff5-160000.1.1` or later.
|
| SUSE-SU-2026:22356-1 |
|
Vulnerability in python-idna (SUSE-SU-2026:22356-1)
vulnerability in python-idna (SUSE-SU-2026:22356-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.10-160000.3.1` or later.
|
| SUSE-SU-2026:22273-1 |
|
Vulnerability in dracut (SUSE-SU-2026:22273-1)
vulnerability in dracut (SUSE-SU-2026:22273-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `059+suse.722.gdd9d67ff5-160000.1.1` or later.
|
| SUSE-SU-2026:22271-1 |
|
Vulnerability in python-idna (SUSE-SU-2026:22271-1)
vulnerability in python-idna (SUSE-SU-2026:22271-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.10-160000.3.1` or later.
|
| openSUSE-SU-2026:21048-1 |
|
Vulnerability in python-idna (openSUSE-SU-2026:21048-1)
vulnerability in python-idna (openSUSE-SU-2026:21048-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.10-160000.3.1` or later.
|
| openSUSE-SU-2026:21054-1 |
|
Vulnerability in dracut (openSUSE-SU-2026:21054-1)
vulnerability in dracut (openSUSE-SU-2026:21054-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `059+suse.722.gdd9d67ff5-160000.1.1` or later.
|
| SUSE-SU-2026:22355-1 |
|
Vulnerability in libgcrypt (SUSE-SU-2026:22355-1)
vulnerability in libgcrypt (SUSE-SU-2026:22355-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.12.1-160000.2.1` or later.
|
| SUSE-SU-2026:22270-1 |
|
Vulnerability in libgcrypt (SUSE-SU-2026:22270-1)
vulnerability in libgcrypt (SUSE-SU-2026:22270-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.12.1-160000.2.1` or later.
|
| openSUSE-SU-2026:21047-1 |
|
Vulnerability in libgcrypt (openSUSE-SU-2026:21047-1)
vulnerability in libgcrypt (openSUSE-SU-2026:21047-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.12.1-160000.2.1` or later.
|
| GHSA-wfwr-cf4w-fpj5 |
|
Vulnerability in @kl-dolphin/jump (GHSA-wfwr-cf4w-fpj5)
vulnerability in @kl-dolphin/jump (GHSA-wfwr-cf4w-fpj5). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7539 |
|
Vulnerability in CVE-2026-7539 (CVE-2026-7539)
vulnerability in CVE-2026-7539 (CVE-2026-7539). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13033 |
|
Out-of-Bounds Read in google (CVE-2026-13033)
vulnerability in google (CVE-2026-13033). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13036 |
|
Use-After-Free in google (CVE-2026-13036)
vulnerability in google (CVE-2026-13036). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11998 |
|
Vulnerability in angular (CVE-2026-11998)
vulnerability in angular (CVE-2026-11998). Confidential information can be exposed externally.
|
| CVE-2026-13201 |
|
Vulnerability in kubevirt (CVE-2026-13201)
vulnerability in kubevirt (CVE-2026-13201). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13032 |
|
Use-After-Free in google (CVE-2026-13032)
vulnerability in google (CVE-2026-13032). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13208 |
|
Authentication Bypass in kubevirt (CVE-2026-13208)
authentication bypass in kubevirt (CVE-2026-13208). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13035 |
|
Use-After-Free in google (CVE-2026-13035)
vulnerability in google (CVE-2026-13035). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13038 |
|
Use-After-Free in google (CVE-2026-13038)
vulnerability in google (CVE-2026-13038). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13034 |
|
Vulnerability in google (CVE-2026-13034)
vulnerability in google (CVE-2026-13034). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13037 |
|
Use-After-Free in google (CVE-2026-13037)
vulnerability in google (CVE-2026-13037). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13030 |
|
Vulnerability in google (CVE-2026-13030)
vulnerability in google (CVE-2026-13030). Confidential information can be exposed externally.
|
| CVE-2026-13021 |
|
Vulnerability in google (CVE-2026-13021)
vulnerability in google (CVE-2026-13021). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13031 |
|
Use-After-Free in google (CVE-2026-13031)
vulnerability in google (CVE-2026-13031). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13023 |
|
Vulnerability in google (CVE-2026-13023)
vulnerability in google (CVE-2026-13023). Confidential information can be exposed externally.
|
| CVE-2026-13029 |
|
Use-After-Free in google (CVE-2026-13029)
vulnerability in google (CVE-2026-13029). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12760 |
|
Vulnerability in dos (CVE-2026-12760)
vulnerability in dos (CVE-2026-12760). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13022 |
|
Vulnerability in google (CVE-2026-13022)
vulnerability in google (CVE-2026-13022). Confidential information can be exposed externally.
|
| CVE-2026-13024 |
|
Vulnerability in google (CVE-2026-13024)
vulnerability in google (CVE-2026-13024). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13026 |
|
Use-After-Free in google (CVE-2026-13026)
vulnerability in google (CVE-2026-13026). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13025 |
|
Vulnerability in google (CVE-2026-13025)
vulnerability in google (CVE-2026-13025). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13027 |
|
Use-After-Free in google (CVE-2026-13027)
vulnerability in google (CVE-2026-13027). Successful exploitation can lead to full system takeover.
|
| CVE-2025-60471 |
|
Use-After-Free in c (CVE-2025-60471)
vulnerability in c (CVE-2025-60471). Risk of unauthorized operations or information disclosure.
|
| MINI-jrh3-c6wc-m3xj |
|
MINI-jrh3-c6wc-m3xj |