Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-47414 |
|
Vulnerability in praisonai-platform (CVE-2026-47414)
vulnerability in praisonai-platform (CVE-2026-47414). Data can be tampered with by attackers. Exploitable via `PATCH /workspaces/{workspace_id}/labels/{label_id}`. Mitigation: upgrade to `0.1.4` or later.
|
| CVE-2026-47406 |
|
Vulnerability in praisonai-platform (CVE-2026-47406)
vulnerability in praisonai-platform (CVE-2026-47406). Confidential information can be exposed externally. Exploitable via `GET /workspaces/{workspace_id}/issues/{issue_id}/dependencies`. Mitigation: upgrade to `0.1.4` or later.
|
| CVE-2026-47399 |
|
Vulnerability in praisonai-platform (CVE-2026-47399)
vulnerability in praisonai-platform (CVE-2026-47399). Successful exploitation can lead to full system takeover. Exploitable via `GET /api/v1/workspaces/{workspace_attacker}/agents/{victim_agent_id}`. Mitigation: upgrade to `0.1.4` or later.
|
| CVE-2026-47407 |
|
Privilege Escalation in praisonai-platform (CVE-2026-47407)
vulnerability in praisonai-platform (CVE-2026-47407). Risk of unauthorized operations or information disclosure. Exploitable via `GET /agents/{agent_id}`. Mitigation: upgrade to `0.1.4` or later.
|
| CVE-2026-47408 |
|
Vulnerability in praisonai-platform (CVE-2026-47408)
vulnerability in praisonai-platform (CVE-2026-47408). Confidential information can be exposed externally. Exploitable via `GET /workspaces/{workspace_id}/issues/{issue_id}/activity`. Mitigation: upgrade to `0.1.4` or later.
|
| CVE-2026-48169 |
|
Vulnerability in praisonai-platform (CVE-2026-48169)
vulnerability in praisonai-platform (CVE-2026-48169). Successful exploitation can lead to full system takeover. Exploitable via `GET /api/v1/workspaces/{workspace_id}/issues/{issue_id}`. Mitigation: upgrade to `0.1.4` or later.
|
| CVE-2026-47231 |
|
Vulnerability in admidio/admidio (CVE-2026-47231)
vulnerability in admidio/admidio (CVE-2026-47231). Confidential information can be exposed externally. Exploitable via `GET /modules/documents-files.php`. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47230 |
|
Vulnerability in admidio/admidio (CVE-2026-47230)
vulnerability in admidio/admidio (CVE-2026-47230). Data can be tampered with by attackers. Exploitable via `GET /modules/documents-files.php`. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47227 |
|
Vulnerability in admidio/admidio (CVE-2026-47227)
vulnerability in admidio/admidio (CVE-2026-47227). Data can be tampered with by attackers. Exploitable via `POST /modules/categories.php`. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47226 |
|
Vulnerability in admidio/admidio (CVE-2026-47226)
vulnerability in admidio/admidio (CVE-2026-47226). Data can be tampered with by attackers. Exploitable via ``folder_uuid``. Mitigation: upgrade to `5.0.7` or later.
|
| CVE-2026-47266 |
|
Vulnerability in verbb/formie (CVE-2026-47266)
vulnerability in verbb/formie (CVE-2026-47266). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.2.21` or later.
|
| CVE-2026-49386 |
|
Vulnerability in jetbrains (CVE-2026-49386)
vulnerability in jetbrains (CVE-2026-49386). Confidential information can be exposed externally.
|
| CVE-2026-43917 |
|
Vulnerability in CVE-2026-43917 (CVE-2026-43917)
vulnerability in CVE-2026-43917 (CVE-2026-43917). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45551 |
|
Cross-Site Scripting (XSS) in CVE-2026-45551 (CVE-2026-45551)
cross-site scripting in CVE-2026-45551 (CVE-2026-45551). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.0.25` or later.
|
| CVE-2026-9493 |
|
Vulnerability in CVE-2026-9493 (CVE-2026-9493)
vulnerability in CVE-2026-9493 (CVE-2026-9493). Confidential information can be exposed externally.
|
| CVE-2026-47713 |
|
Vulnerability in mintplexlabs (CVE-2026-47713)
vulnerability in mintplexlabs (CVE-2026-47713). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.13.0` or later.
|
| CVE-2026-45342 |
|
Vulnerability in CVE-2026-45342 (CVE-2026-45342)
vulnerability in CVE-2026-45342 (CVE-2026-45342). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.6` or later.
|
| CVE-2026-42999 |
|
Vulnerability in keystone (CVE-2026-42999)
vulnerability in keystone (CVE-2026-42999). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `29.0.2` or later.
|
| CVE-2026-45297 |
|
Vulnerability in CVE-2026-45297 (CVE-2026-45297)
vulnerability in CVE-2026-45297 (CVE-2026-45297). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.26.0` or later.
|
| CVE-2026-41160 |
|
Vulnerability in CVE-2026-41160 (CVE-2026-41160)
vulnerability in CVE-2026-41160 (CVE-2026-41160). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/Note/{id}/pin`. Mitigation: upgrade to `9.3.5` or later.
|
| CVE-2026-41141 |
|
Vulnerability in CVE-2026-41141 (CVE-2026-41141)
vulnerability in CVE-2026-41141 (CVE-2026-41141). Confidential information can be exposed externally. Exploitable via `POST /api/v1/EmailTemplate/`. Mitigation: upgrade to `9.3.5` or later.
|
| CVE-2026-7651 |
|
Vulnerability in wordpress (CVE-2026-7651)
vulnerability in wordpress (CVE-2026-7651). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3173 |
|
Vulnerability in wordpress (CVE-2026-3173)
vulnerability in wordpress (CVE-2026-3173). Confidential information can be exposed externally.
|
| CVE-2026-9228 |
|
Vulnerability in wordpress (CVE-2026-9228)
vulnerability in wordpress (CVE-2026-9228). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9241 |
|
Vulnerability in wordpress (CVE-2026-9241)
vulnerability in wordpress (CVE-2026-9241). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46544 |
|
Vulnerability in CVE-2026-46544 (CVE-2026-46544)
vulnerability in CVE-2026-46544 (CVE-2026-46544). Confidential information can be exposed externally.
|
| CVE-2026-46414 |
|
Vulnerability in CVE-2026-46414 (CVE-2026-46414)
vulnerability in CVE-2026-46414 (CVE-2026-46414). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4868 |
|
Vulnerability in gitlab (CVE-2026-4868)
vulnerability in gitlab (CVE-2026-4868). Confidential information can be exposed externally. Mitigation: upgrade to `18.10.7, 18.11.4, 19.0.2` or later.
|
| CVE-2026-38807 |
|
Vulnerability in CVE-2026-38807 (CVE-2026-38807)
vulnerability in CVE-2026-38807 (CVE-2026-38807). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9712 |
|
Vulnerability in pretix (CVE-2026-9712)
vulnerability in pretix (CVE-2026-9712). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.4.2` or later.
|
| CVE-2026-42736 |
|
Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp...
Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp...
|
| CVE-2026-42725 |
|
Vulnerability in CVE-2026-42725 (CVE-2026-42725)
vulnerability in CVE-2026-42725 (CVE-2026-42725). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8890 |
|
Vulnerability in CVE-2026-8890 (CVE-2026-8890)
vulnerability in CVE-2026-8890 (CVE-2026-8890). Confidential information can be exposed externally.
|
| CVE-2026-44776 |
|
Vulnerability in CVE-2026-44776 (CVE-2026-44776)
vulnerability in CVE-2026-44776 (CVE-2026-44776). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.9.0` or later.
|
| CVE-2026-47715 |
|
Vulnerability in bugsink (CVE-2026-47715)
vulnerability in bugsink (CVE-2026-47715). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.2.0` or later.
|
| CVE-2026-47716 |
|
Vulnerability in bugsink (CVE-2026-47716)
vulnerability in bugsink (CVE-2026-47716). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.2.0` or later.
|
| CVE-2026-43934 |
|
Vulnerability in CVE-2026-43934 (CVE-2026-43934)
vulnerability in CVE-2026-43934 (CVE-2026-43934). Data can be tampered with by attackers. Mitigation: upgrade to `2.3.4` or later.
|
| CVE-2026-38587 |
|
Vulnerability in CVE-2026-38587 (CVE-2026-38587)
vulnerability in CVE-2026-38587 (CVE-2026-38587). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40127 |
|
Vulnerability in CVE-2026-40127 (CVE-2026-40127)
vulnerability in CVE-2026-40127 (CVE-2026-40127). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9306 |
|
Vulnerability in CVE-2026-9306 (CVE-2026-9306)
vulnerability in CVE-2026-9306 (CVE-2026-9306). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35430 |
|
Vulnerability in microsoft (CVE-2026-35430)
vulnerability in microsoft (CVE-2026-35430). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9248 |
|
Vulnerability in devolutions (CVE-2026-9248)
vulnerability in devolutions (CVE-2026-9248). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8347 |
|
Vulnerability in concrete5/concrete5 (CVE-2026-8347)
vulnerability in concrete5/concrete5 (CVE-2026-8347). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-3473 |
|
Vulnerability in github.com/mattermost/mattermost-server (CVE-2026-3473)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-3473). Confidential information can be exposed externally. Mitigation: upgrade to `10.11.15` or later.
|
| CVE-2026-39968 |
|
Vulnerability in CVE-2026-39968 (CVE-2026-39968)
vulnerability in CVE-2026-39968 (CVE-2026-39968). Confidential information can be exposed externally.
|
| CVE-2026-39967 |
|
Vulnerability in CVE-2026-39967 (CVE-2026-39967)
vulnerability in CVE-2026-39967 (CVE-2026-39967). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28444 |
|
Vulnerability in CVE-2026-28444 (CVE-2026-28444)
vulnerability in CVE-2026-28444 (CVE-2026-28444). Confidential information can be exposed externally.
|
| CVE-2026-8679 |
|
Vulnerability in wordpress (CVE-2026-8679)
vulnerability in wordpress (CVE-2026-8679). Confidential information can be exposed externally.
|
| CVE-2026-8337 |
|
Vulnerability in concrete5/concrete5 (CVE-2026-8337)
vulnerability in concrete5/concrete5 (CVE-2026-8337). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-7886 |
|
Vulnerability in concrete5/concrete5 (CVE-2026-7886)
vulnerability in concrete5/concrete5 (CVE-2026-7886). Risk of unauthorized operations or information disclosure. Exploitable via ``AddMessage``. Mitigation: upgrade to `9.5.1` or later.
|