Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-33606 |
|
Vulnerability in CVE-2026-33606 (CVE-2026-33606)
vulnerability in CVE-2026-33606 (CVE-2026-33606). Data can be tampered with by attackers.
|
| CVE-2026-77341 |
|
Vulnerability in c (CVE-2026-77341)
vulnerability in c (CVE-2026-77341). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59313 |
|
Vulnerability in spring (CVE-2026-59313)
vulnerability in spring (CVE-2026-59313). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47890 |
|
Vulnerability in spring (CVE-2026-47890)
vulnerability in spring (CVE-2026-47890). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54511 |
|
Vulnerability in @logtape/syslog (CVE-2026-54511)
vulnerability in @logtape/syslog (CVE-2026-54511). Data can be tampered with by attackers. Mitigation: upgrade to `1.3.11` or later.
|
| CVE-2026-77550 |
|
Vulnerability in CVE-2026-77550 (CVE-2026-77550)
vulnerability in CVE-2026-77550 (CVE-2026-77550). Successful exploitation can lead to full system takeover.
|
| CVE-2026-77549 |
|
Vulnerability in CVE-2026-77549 (CVE-2026-77549)
vulnerability in CVE-2026-77549 (CVE-2026-77549). Successful exploitation can lead to full system takeover.
|
| CVE-2026-77634 |
|
Vulnerability in CVE-2026-77634 (CVE-2026-77634)
vulnerability in CVE-2026-77634 (CVE-2026-77634). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75922 |
|
Vulnerability in CVE-2026-75922 (CVE-2026-75922)
vulnerability in CVE-2026-75922 (CVE-2026-75922). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74866 |
|
Vulnerability in CVE-2026-74866 (CVE-2026-74866)
vulnerability in CVE-2026-74866 (CVE-2026-74866). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75484 |
|
Vulnerability in CVE-2026-75484 (CVE-2026-75484)
vulnerability in CVE-2026-75484 (CVE-2026-75484). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71573 |
|
Vulnerability in CVE-2026-71573 (CVE-2026-71573)
vulnerability in CVE-2026-71573 (CVE-2026-71573). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71572 |
|
Vulnerability in CVE-2026-71572 (CVE-2026-71572)
vulnerability in CVE-2026-71572 (CVE-2026-71572). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45125 |
|
Vulnerability in CVE-2026-45125 (CVE-2026-45125)
vulnerability in CVE-2026-45125 (CVE-2026-45125). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53788 |
|
Vulnerability in CVE-2026-53788 (CVE-2026-53788)
vulnerability in CVE-2026-53788 (CVE-2026-53788). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16455 |
|
Vulnerability in CVE-2026-16455 (CVE-2026-16455)
vulnerability in CVE-2026-16455 (CVE-2026-16455). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72913 |
|
Command Injection in CVE-2026-72913 (CVE-2026-72913)
command injection in CVE-2026-72913 (CVE-2026-72913). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72590 |
|
Vulnerability in CVE-2026-72590 (CVE-2026-72590)
vulnerability in CVE-2026-72590 (CVE-2026-72590). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61477 |
|
Vulnerability in CVE-2026-61477 (CVE-2026-61477)
vulnerability in CVE-2026-61477 (CVE-2026-61477). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0673 |
|
Vulnerability in wordpress (CVE-2026-0673)
vulnerability in wordpress (CVE-2026-0673). Risk of unauthorized operations or information disclosure. Exploitable via ``element_pack_contact_form``.
|
| CVE-2026-71311 |
|
Vulnerability in github.com/rclone/rclone (CVE-2026-71311)
vulnerability in github.com/rclone/rclone (CVE-2026-71311). Data can be tampered with by attackers. Exploitable via ``DELE``. Mitigation: upgrade to `1.75.0` or later.
|
| CVE-2026-70615 |
|
Vulnerability in CVE-2026-70615 (CVE-2026-70615)
vulnerability in CVE-2026-70615 (CVE-2026-70615). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65636 |
|
Vulnerability in CVE-2026-65636 (CVE-2026-65636)
vulnerability in CVE-2026-65636 (CVE-2026-65636). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44092 |
|
Vulnerability in CVE-2026-44092 (CVE-2026-44092)
vulnerability in CVE-2026-44092 (CVE-2026-44092). Data can be tampered with by attackers.
|
| CVE-2026-15157 |
|
Vulnerability in undici (CVE-2026-15157)
vulnerability in undici (CVE-2026-15157). Risk of unauthorized operations or information disclosure. Exploitable via ``body.type``. Mitigation: upgrade to `6.24.0` or later.
|
| CVE-2026-12357 |
|
Vulnerability in CVE-2026-12357 (CVE-2026-12357)
vulnerability in CVE-2026-12357 (CVE-2026-12357). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57511 |
|
Vulnerability in CVE-2026-57511 (CVE-2026-57511)
vulnerability in CVE-2026-57511 (CVE-2026-57511). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16313 |
|
Vulnerability in CVE-2026-16313 (CVE-2026-16313)
vulnerability in CVE-2026-16313 (CVE-2026-16313). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59921 |
|
Vulnerability in io.netty:netty-codec-http (CVE-2026-59921)
vulnerability in io.netty:netty-codec-http (CVE-2026-59921). Data can be tampered with by attackers. Exploitable via ``HttpPostRequestEncoder``. Mitigation: upgrade to `4.1.136.Final` or later.
|
| CVE-2026-59920 |
|
Vulnerability in io.netty:netty-codec-stomp (CVE-2026-59920)
vulnerability in io.netty:netty-codec-stomp (CVE-2026-59920). Data can be tampered with by attackers. Exploitable via ``StompSubframeEncoder``. Mitigation: upgrade to `4.1.136.Final` or later.
|
| CVE-2026-59919 |
|
Vulnerability in io.netty:netty-codec-haproxy (CVE-2026-59919)
vulnerability in io.netty:netty-codec-haproxy (CVE-2026-59919). Data can be tampered with by attackers. Exploitable via ``sourceAddress``. Mitigation: upgrade to `4.1.136.Final` or later.
|
| CVE-2026-15429 |
|
Vulnerability in privilege-escalation (CVE-2026-15429)
vulnerability in privilege-escalation (CVE-2026-15429). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53533 |
|
Command Injection in aiosmtplib (CVE-2026-53533)
command injection in aiosmtplib (CVE-2026-53533). Risk of unauthorized operations or information disclosure. Exploitable via ``aiosmtplib``. Mitigation: upgrade to `5.1.1` or later.
|
| CVE-2026-12127 |
|
Vulnerability in wordpress (CVE-2026-12127)
vulnerability in wordpress (CVE-2026-12127). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57281 |
|
Vulnerability in jenkins (CVE-2026-57281)
vulnerability in jenkins (CVE-2026-57281). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11373 |
|
Vulnerability in CVE-2026-11373 (CVE-2026-11373)
vulnerability in CVE-2026-11373 (CVE-2026-11373). Confidential information can be exposed externally.
|
| CVE-2026-55766 |
|
Vulnerability in guzzlehttp/psr7 (CVE-2026-55766)
vulnerability in guzzlehttp/psr7 (CVE-2026-55766). Risk of unauthorized operations or information disclosure. Exploitable via ``Request``. Mitigation: upgrade to `2.12.1` or later.
|
| CVE-2026-50188 |
|
Vulnerability in getkirby/cms (CVE-2026-50188)
vulnerability in getkirby/cms (CVE-2026-50188). Risk of unauthorized operations or information disclosure. Exploitable via ``headers``. Mitigation: upgrade to `5.4.4` or later.
|
| CVE-2026-55603 |
|
Vulnerability in http-proxy-middleware (CVE-2026-55603)
vulnerability in http-proxy-middleware (CVE-2026-55603). Data can be tampered with by attackers. Exploitable via ``req.body``. Mitigation: upgrade to `4.1.1` or later.
|
| CVE-2026-9679 |
|
Vulnerability in undici (CVE-2026-9679)
vulnerability in undici (CVE-2026-9679). Data can be tampered with by attackers. Exploitable via ``parseSetCookie``. Mitigation: upgrade to `8.5.0` or later.
|
| CVE-2026-50269 |
|
Vulnerability in aiohttp (CVE-2026-50269)
vulnerability in aiohttp (CVE-2026-50269). Risk of unauthorized operations or information disclosure. Exploitable via ``Payload.headers``. Mitigation: upgrade to `3.14.0` or later.
|
| CVE-2026-12143 |
|
Vulnerability in form-data (CVE-2026-12143)
vulnerability in form-data (CVE-2026-12143). Data can be tampered with by attackers. Exploitable via ``field``. Mitigation: upgrade to `4.0.6` or later.
|
| CVE-2026-50629 |
|
Vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50629)
vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50629). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.7` or later.
|
| CVE-2026-49214 |
|
Vulnerability in guzzlehttp/psr7 (CVE-2026-49214)
vulnerability in guzzlehttp/psr7 (CVE-2026-49214). Risk of unauthorized operations or information disclosure. Exploitable via ``Uri``. Mitigation: upgrade to `2.10.2` or later.
|
| CVE-2026-50637 |
|
Vulnerability in pevans (CVE-2026-50637)
vulnerability in pevans (CVE-2026-50637). Data can be tampered with by attackers.
|
| CVE-2026-50639 |
|
Vulnerability in pevans (CVE-2026-50639)
vulnerability in pevans (CVE-2026-50639). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50638 |
|
Vulnerability in pevans (CVE-2026-50638)
vulnerability in pevans (CVE-2026-50638). Confidential information can be exposed externally.
|
| CVE-2026-47242 |
|
Command Injection in net-imap (CVE-2026-47242)
command injection in net-imap (CVE-2026-47242). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.5.15` or later.
|
| CVE-2026-47240 |
|
Command Injection in net-imap (CVE-2026-47240)
command injection in net-imap (CVE-2026-47240). Risk of unauthorized operations or information disclosure. Exploitable via ``IMAP4rev2``. Mitigation: upgrade to `0.5.15` or later.
|
| CVE-2026-49756 |
|
Vulnerability in req (CVE-2026-49756)
vulnerability in req (CVE-2026-49756). Risk of unauthorized operations or information disclosure. Exploitable via ``name``. Mitigation: upgrade to `0.6.0` or later.
|