Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-53766 Path Traversal in chrome-devtools-mcp (CVE-2026-53766)
path traversal in chrome-devtools-mcp (CVE-2026-53766). Data can be tampered with by attackers. Exploitable via ``roots``. Mitigation: upgrade to `1.1.0` or later.
CVE-2026-52794 Vulnerability in dos (CVE-2026-52794)
vulnerability in dos (CVE-2026-52794). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.5.2` or later.
CVE-2026-50551 Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-50551)
cross-site scripting in github.com/siyuan-note/siyuan/kernel (CVE-2026-50551). Successful exploitation can lead to full system takeover. Exploitable via ``getAttribute``. Mitigation: upgrade to `0.0.0-20260628153353-2d5d72223df4` or later.
CVE-2026-50189 Vulnerability in appsmith (CVE-2026-50189)
vulnerability in appsmith (CVE-2026-50189). Successful exploitation can lead to full system takeover. Exploitable via `GET /api/v1/admin/env`. Mitigation: upgrade to `2.1` or later.
CVE-2026-49979 Vulnerability in appsmith (CVE-2026-49979)
vulnerability in appsmith (CVE-2026-49979). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.99.0` or later.
CVE-2026-39897 Cross-Site Scripting (XSS) in cacti (CVE-2026-39897)
cross-site scripting in cacti (CVE-2026-39897). Risk of unauthorized operations or information disclosure.
CVE-2026-39894 Vulnerability in cacti (CVE-2026-39894)
vulnerability in cacti (CVE-2026-39894). Risk of unauthorized operations or information disclosure.
CVE-2026-39893 SQL Injection in sqli (CVE-2026-39893)
SQL injection in sqli (CVE-2026-39893). Successful exploitation can lead to full system takeover.
CVE-2026-10642 Vulnerability in c (CVE-2026-10642)
vulnerability in c (CVE-2026-10642). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-2050 Vulnerability in gegl (UBUNTU-CVE-2026-2050)
vulnerability in gegl (UBUNTU-CVE-2026-2050). Successful exploitation can lead to full system takeover.
UBUNTU-CVE-2026-39897 Vulnerability in cacti (UBUNTU-CVE-2026-39897)
vulnerability in cacti (UBUNTU-CVE-2026-39897). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-39894 Vulnerability in cacti (UBUNTU-CVE-2026-39894)
vulnerability in cacti (UBUNTU-CVE-2026-39894). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-39893 Vulnerability in cacti (UBUNTU-CVE-2026-39893)
vulnerability in cacti (UBUNTU-CVE-2026-39893). Successful exploitation can lead to full system takeover.
UBUNTU-CVE-2025-60468 Vulnerability in gpac (UBUNTU-CVE-2025-60468)
vulnerability in gpac (UBUNTU-CVE-2025-60468). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:22360-1 Vulnerability in python-starlette (SUSE-SU-2026:22360-1)
vulnerability in python-starlette (SUSE-SU-2026:22360-1). Risk of unauthorized operations or information disclosure. Exploitable via ``HTTPEndpoint``. Mitigation: upgrade to `0.41.3-160000.4.1` or later.
openSUSE-SU-2026:21053-1 Vulnerability in python-starlette (openSUSE-SU-2026:21053-1)
vulnerability in python-starlette (openSUSE-SU-2026:21053-1). Risk of unauthorized operations or information disclosure. Exploitable via ``HTTPEndpoint``. Mitigation: upgrade to `0.41.3-160000.4.1` or later.
SUSE-SU-2026:22358-1 Vulnerability in dracut (SUSE-SU-2026:22358-1)
vulnerability in dracut (SUSE-SU-2026:22358-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `059+suse.722.gdd9d67ff5-160000.1.1` or later.
SUSE-SU-2026:22356-1 Vulnerability in python-idna (SUSE-SU-2026:22356-1)
vulnerability in python-idna (SUSE-SU-2026:22356-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.10-160000.3.1` or later.
SUSE-SU-2026:22273-1 Vulnerability in dracut (SUSE-SU-2026:22273-1)
vulnerability in dracut (SUSE-SU-2026:22273-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `059+suse.722.gdd9d67ff5-160000.1.1` or later.
SUSE-SU-2026:22271-1 Vulnerability in python-idna (SUSE-SU-2026:22271-1)
vulnerability in python-idna (SUSE-SU-2026:22271-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.10-160000.3.1` or later.
openSUSE-SU-2026:21048-1 Vulnerability in python-idna (openSUSE-SU-2026:21048-1)
vulnerability in python-idna (openSUSE-SU-2026:21048-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.10-160000.3.1` or later.
openSUSE-SU-2026:21054-1 Vulnerability in dracut (openSUSE-SU-2026:21054-1)
vulnerability in dracut (openSUSE-SU-2026:21054-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `059+suse.722.gdd9d67ff5-160000.1.1` or later.
SUSE-SU-2026:22355-1 Vulnerability in libgcrypt (SUSE-SU-2026:22355-1)
vulnerability in libgcrypt (SUSE-SU-2026:22355-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.12.1-160000.2.1` or later.
SUSE-SU-2026:22270-1 Vulnerability in libgcrypt (SUSE-SU-2026:22270-1)
vulnerability in libgcrypt (SUSE-SU-2026:22270-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.12.1-160000.2.1` or later.
openSUSE-SU-2026:21047-1 Vulnerability in libgcrypt (openSUSE-SU-2026:21047-1)
vulnerability in libgcrypt (openSUSE-SU-2026:21047-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.12.1-160000.2.1` or later.
GHSA-wfwr-cf4w-fpj5 Vulnerability in @kl-dolphin/jump (GHSA-wfwr-cf4w-fpj5)
vulnerability in @kl-dolphin/jump (GHSA-wfwr-cf4w-fpj5). Risk of unauthorized operations or information disclosure.
CVE-2026-7539 Vulnerability in CVE-2026-7539 (CVE-2026-7539)
vulnerability in CVE-2026-7539 (CVE-2026-7539). Risk of unauthorized operations or information disclosure.
CVE-2026-13033 Out-of-Bounds Read in google (CVE-2026-13033)
vulnerability in google (CVE-2026-13033). Successful exploitation can lead to full system takeover.
CVE-2026-13036 Use-After-Free in google (CVE-2026-13036)
vulnerability in google (CVE-2026-13036). Successful exploitation can lead to full system takeover.
CVE-2026-11998 Vulnerability in angular (CVE-2026-11998)
vulnerability in angular (CVE-2026-11998). Confidential information can be exposed externally.
CVE-2026-13201 Vulnerability in kubevirt (CVE-2026-13201)
vulnerability in kubevirt (CVE-2026-13201). Risk of unauthorized operations or information disclosure.
CVE-2026-13032 Use-After-Free in google (CVE-2026-13032)
vulnerability in google (CVE-2026-13032). Successful exploitation can lead to full system takeover.
CVE-2026-13208 Authentication Bypass in kubevirt (CVE-2026-13208)
authentication bypass in kubevirt (CVE-2026-13208). Risk of unauthorized operations or information disclosure.
CVE-2026-13035 Use-After-Free in google (CVE-2026-13035)
vulnerability in google (CVE-2026-13035). Successful exploitation can lead to full system takeover.
CVE-2026-13038 Use-After-Free in google (CVE-2026-13038)
vulnerability in google (CVE-2026-13038). Successful exploitation can lead to full system takeover.
CVE-2026-13034 Vulnerability in google (CVE-2026-13034)
vulnerability in google (CVE-2026-13034). Risk of unauthorized operations or information disclosure.
CVE-2026-13037 Use-After-Free in google (CVE-2026-13037)
vulnerability in google (CVE-2026-13037). Successful exploitation can lead to full system takeover.
CVE-2026-13030 Vulnerability in google (CVE-2026-13030)
vulnerability in google (CVE-2026-13030). Confidential information can be exposed externally.
CVE-2026-13021 Vulnerability in google (CVE-2026-13021)
vulnerability in google (CVE-2026-13021). Risk of unauthorized operations or information disclosure.
CVE-2026-13031 Use-After-Free in google (CVE-2026-13031)
vulnerability in google (CVE-2026-13031). Successful exploitation can lead to full system takeover.
CVE-2026-13023 Vulnerability in google (CVE-2026-13023)
vulnerability in google (CVE-2026-13023). Confidential information can be exposed externally.
CVE-2026-13029 Use-After-Free in google (CVE-2026-13029)
vulnerability in google (CVE-2026-13029). Successful exploitation can lead to full system takeover.
CVE-2026-12760 Vulnerability in dos (CVE-2026-12760)
vulnerability in dos (CVE-2026-12760). Risk of unauthorized operations or information disclosure.
CVE-2026-13022 Vulnerability in google (CVE-2026-13022)
vulnerability in google (CVE-2026-13022). Confidential information can be exposed externally.
CVE-2026-13024 Vulnerability in google (CVE-2026-13024)
vulnerability in google (CVE-2026-13024). Risk of unauthorized operations or information disclosure.
CVE-2026-13026 Use-After-Free in google (CVE-2026-13026)
vulnerability in google (CVE-2026-13026). Successful exploitation can lead to full system takeover.
CVE-2026-13025 Vulnerability in google (CVE-2026-13025)
vulnerability in google (CVE-2026-13025). Successful exploitation can lead to full system takeover.
CVE-2026-13027 Use-After-Free in google (CVE-2026-13027)
vulnerability in google (CVE-2026-13027). Successful exploitation can lead to full system takeover.
CVE-2025-60471 Use-After-Free in c (CVE-2025-60471)
vulnerability in c (CVE-2025-60471). Risk of unauthorized operations or information disclosure.
MINI-jrh3-c6wc-m3xj MINI-jrh3-c6wc-m3xj

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →