Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-53497 |
|
Information Disclosure in CVE-2026-53497 (CVE-2026-53497)
vulnerability in CVE-2026-53497 (CVE-2026-53497). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/app-auth/status`.
|
| CVE-2026-74969 |
|
Vulnerability in mozilla (CVE-2026-74969)
vulnerability in mozilla (CVE-2026-74969). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74966 |
|
Vulnerability in mozilla (CVE-2026-74966)
vulnerability in mozilla (CVE-2026-74966). Confidential information can be exposed externally.
|
| CVE-2026-24078 |
|
Vulnerability in qualcomm (CVE-2026-24078)
vulnerability in qualcomm (CVE-2026-24078). Confidential information can be exposed externally.
|
| CVE-2026-55496 |
|
Information Disclosure in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55496)
vulnerability in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55496). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v4/user/search`. Mitigation: upgrade to `4.0.0-20260613023921-7e1289d55279` or later.
|
| CVE-2026-58510 |
|
Information Disclosure in code.gitea.io/gitea (CVE-2026-58510)
vulnerability in code.gitea.io/gitea (CVE-2026-58510). Risk of unauthorized operations or information disclosure. Exploitable via `PATCH /api/v1/repos/{owner}/{repo}`. Mitigation: upgrade to `1.27.0` or later.
|
| CVE-2026-56171 |
|
Vulnerability in microsoft (CVE-2026-56171)
vulnerability in microsoft (CVE-2026-56171). Confidential information can be exposed externally.
|
| CVE-2026-50657 |
|
Vulnerability in microsoft (CVE-2026-50657)
vulnerability in microsoft (CVE-2026-50657). Confidential information can be exposed externally.
|
| CVE-2026-62328 |
|
Vulnerability in CVE-2026-62328 (CVE-2026-62328)
vulnerability in CVE-2026-62328 (CVE-2026-62328). Confidential information can be exposed externally.
|
| CVE-2026-58297 |
|
Vulnerability in microsoft (CVE-2026-58297)
vulnerability in microsoft (CVE-2026-58297). Confidential information can be exposed externally.
|
| CVE-2026-58296 |
|
Vulnerability in microsoft (CVE-2026-58296)
vulnerability in microsoft (CVE-2026-58296). Confidential information can be exposed externally.
|
| CVE-2026-57960 |
|
Vulnerability in CVE-2026-57960 (CVE-2026-57960)
vulnerability in CVE-2026-57960 (CVE-2026-57960). Confidential information can be exposed externally. Exploitable via `GET /api/public/check-in-lists/{short_id}/attendees`.
|
| CVE-2026-56124 |
|
Vulnerability in CVE-2026-56124 (CVE-2026-56124)
vulnerability in CVE-2026-56124 (CVE-2026-56124). Confidential information can be exposed externally.
|
| CVE-2026-48615 |
|
Vulnerability in node (CVE-2026-48615)
vulnerability in node (CVE-2026-48615). Confidential information can be exposed externally. Exploitable via ``ERR_PROXY_TUNNEL``. Mitigation: upgrade to `22.23.0, 24.17.0, 26.3.1` or later.
|
| CVE-2026-49344 |
|
Vulnerability in CVE-2026-49344 (CVE-2026-49344)
vulnerability in CVE-2026-49344 (CVE-2026-49344). Risk of unauthorized operations or information disclosure. Exploitable via ``from``.
|
| CVE-2019-25762 |
|
Vulnerability in joomboost (CVE-2019-25762)
vulnerability in joomboost (CVE-2019-25762). Confidential information can be exposed externally.
|
| CVE-2026-54264 |
|
Information Disclosure in @angular/service-worker (CVE-2026-54264)
vulnerability in @angular/service-worker (CVE-2026-54264). Risk of unauthorized operations or information disclosure. Exploitable via ``Authorization``.
|
| CVE-2025-30459 |
|
Vulnerability in apple (CVE-2025-30459)
vulnerability in apple (CVE-2025-30459). Confidential information can be exposed externally.
|
| CVE-2026-26237 |
|
Vulnerability in qnap (CVE-2026-26237)
vulnerability in qnap (CVE-2026-26237). Confidential information can be exposed externally.
|
| CVE-2026-25699 |
|
Vulnerability in github.com/apache/incubator-answer (CVE-2026-25699)
vulnerability in github.com/apache/incubator-answer (CVE-2026-25699). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.2-0.20260206073245-92994b49976b` or later.
|
| CVE-2020-25900 |
|
Vulnerability in CVE-2020-25900 (CVE-2020-25900)
vulnerability in CVE-2020-25900 (CVE-2020-25900). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8990 |
|
Vulnerability in CVE-2026-8990 (CVE-2026-8990)
vulnerability in CVE-2026-8990 (CVE-2026-8990). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48048 |
|
Vulnerability in org.xwiki.platform:xwiki-platform-livetable-ui (CVE-2026-48048)
vulnerability in org.xwiki.platform:xwiki-platform-livetable-ui (CVE-2026-48048). Confidential information can be exposed externally. Exploitable via ``LiveTableResults``. Mitigation: upgrade to `17.10.3` or later.
|
| CVE-2025-13477 |
|
Vulnerability in CVE-2025-13477 (CVE-2025-13477)
vulnerability in CVE-2025-13477 (CVE-2025-13477). Confidential information can be exposed externally.
|
| CVE-2026-28963 |
|
Vulnerability in apple (CVE-2026-28963)
vulnerability in apple (CVE-2026-28963). Confidential information can be exposed externally.
|
| CVE-2026-28906 |
|
Vulnerability in apple (CVE-2026-28906)
vulnerability in apple (CVE-2026-28906). Confidential information can be exposed externally.
|
| CVE-2025-66172 |
|
Vulnerability in apache (CVE-2025-66172)
vulnerability in apache (CVE-2025-66172). Confidential information can be exposed externally.
|
| CVE-2025-66171 |
|
Vulnerability in apache (CVE-2025-66171)
vulnerability in apache (CVE-2025-66171). Confidential information can be exposed externally.
|
| CVE-2026-7382 |
|
Information Disclosure in CVE-2026-7382 (CVE-2026-7382)
vulnerability in CVE-2026-7382 (CVE-2026-7382). Confidential information can be exposed externally.
|
| CVE-2026-41182 |
|
Information Disclosure in CVE-2026-41182 (CVE-2026-41182)
vulnerability in CVE-2026-41182 (CVE-2026-41182). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28950 |
|
Vulnerability in apple (CVE-2026-28950)
vulnerability in apple (CVE-2026-28950). Confidential information can be exposed externally.
|
| CVE-2025-15623 |
|
Vulnerability in sparxsystems (CVE-2025-15623)
vulnerability in sparxsystems (CVE-2025-15623). Confidential information can be exposed externally.
|
| CVE-2026-34226 |
|
Vulnerability in capricorn86 (CVE-2026-34226)
vulnerability in capricorn86 (CVE-2026-34226). Confidential information can be exposed externally. Exploitable via ``window.location``.
|
| CVE-2026-20834 |
|
Vulnerability in path-traversal (CVE-2026-20834)
vulnerability in path-traversal (CVE-2026-20834). Confidential information can be exposed externally.
|
| CVE-2025-65857 |
|
Vulnerability in xiongmaitech (CVE-2025-65857)
vulnerability in xiongmaitech (CVE-2025-65857). Confidential information can be exposed externally.
|
| CVE-2025-1030 |
|
Vulnerability in utarit (CVE-2025-1030)
vulnerability in utarit (CVE-2025-1030). Confidential information can be exposed externally.
|
| CVE-2025-66035 |
|
Vulnerability in @angular/common (CVE-2025-66035)
vulnerability in @angular/common (CVE-2025-66035). Risk of unauthorized operations or information disclosure. Exploitable via ``POST``. Mitigation: upgrade to `19.2.16` or later.
|
| CVE-2025-11959 |
|
Vulnerability in CVE-2025-11959 (CVE-2025-11959)
vulnerability in CVE-2025-11959 (CVE-2025-11959). Confidential information can be exposed externally.
|
| CVE-2025-11145 |
|
Information Disclosure in CVE-2025-11145 (CVE-2025-11145)
vulnerability in CVE-2025-11145 (CVE-2025-11145). Confidential information can be exposed externally.
|
| CVE-2025-43357 |
|
Vulnerability in apple (CVE-2025-43357)
vulnerability in apple (CVE-2025-43357). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-11216 |
|
Vulnerability in CVE-2024-11216 (CVE-2024-11216)
vulnerability in CVE-2024-11216 (CVE-2024-11216). Confidential information can be exposed externally.
|
| CVE-2024-26192 |
|
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
|
| CVE-2023-5983 |
|
Information Disclosure in botanikyazilim (CVE-2023-5983)
vulnerability in botanikyazilim (CVE-2023-5983). Confidential information can be exposed externally.
|
| CVE-2023-2703 |
|
Vulnerability in finexmedia (CVE-2023-2703)
vulnerability in finexmedia (CVE-2023-2703). Confidential information can be exposed externally.
|