Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-39862 |
|
OS Command Injection in c (CVE-2026-39862)
OS command injection in c (CVE-2026-39862). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.5.1` or later.
|
| CVE-2026-39863 |
|
Buffer Overflow in dos (CVE-2026-39863)
vulnerability in dos (CVE-2026-39863). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.1.1` or later.
|
| CVE-2026-39362 |
|
SSRF (Server-Side Request Forgery) in django (CVE-2026-39362)
SSRF in django (CVE-2026-39362). Data can be tampered with by attackers. Mitigation: upgrade to `1.2.7` or later.
|
| CVE-2026-35476 |
|
Vulnerability in inventree-project (CVE-2026-35476)
vulnerability in inventree-project (CVE-2026-35476). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.7` or later.
|
| CVE-2026-35478 |
|
Vulnerability in inventree-project (CVE-2026-35478)
vulnerability in inventree-project (CVE-2026-35478). Confidential information can be exposed externally. Exploitable via `POST /api/user/tokens/`. Mitigation: upgrade to `1.2.7` or later.
|
| CVE-2026-35525 |
|
Vulnerability in liquidjs (CVE-2026-35525)
vulnerability in liquidjs (CVE-2026-35525). Confidential information can be exposed externally. Mitigation: upgrade to `10.25.3` or later.
|
| CVE-2026-23869 |
|
Vulnerability in react (CVE-2026-23869)
vulnerability in react (CVE-2026-23869). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35446 |
|
Vulnerability in mcgill (CVE-2026-35446)
vulnerability in mcgill (CVE-2026-35446). Confidential information can be exposed externally. Mitigation: upgrade to `27.0.3` or later.
|
| CVE-2026-35455 |
|
Cross-Site Scripting (XSS) in futo (CVE-2026-35455)
cross-site scripting in futo (CVE-2026-35455). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.7.0` or later.
|
| CVE-2026-35169 |
|
Cross-Site Scripting (XSS) in mcgill (CVE-2026-35169)
cross-site scripting in mcgill (CVE-2026-35169). Confidential information can be exposed externally. Mitigation: upgrade to `27.0.3` or later.
|
| CVE-2026-35401 |
|
Vulnerability in c (CVE-2026-35401)
vulnerability in c (CVE-2026-35401). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.23.0a3` or later.
|
| CVE-2026-34723 |
|
Vulnerability in zammad (CVE-2026-34723)
vulnerability in zammad (CVE-2026-34723). Confidential information can be exposed externally. Mitigation: upgrade to `7.0.1` or later.
|
| CVE-2026-34724 |
|
Code Injection in zammad (CVE-2026-34724)
code injection in zammad (CVE-2026-34724). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.0.1` or later.
|
| CVE-2026-33350 |
|
SQL Injection in sqli (CVE-2026-33350)
SQL injection in sqli (CVE-2026-33350). Confidential information can be exposed externally. Mitigation: upgrade to `27.0.3` or later.
|
| CVE-2026-34392 |
|
Vulnerability in mcgill (CVE-2026-34392)
vulnerability in mcgill (CVE-2026-34392). Confidential information can be exposed externally. Mitigation: upgrade to `27.0.3` or later.
|
| CVE-2026-30814 |
|
Vulnerability in tp-link (CVE-2026-30814)
vulnerability in tp-link (CVE-2026-30814). Successful exploitation can lead to full system takeover.
|
| CVE-2026-30815 |
|
OS Command Injection in tp-link (CVE-2026-30815)
OS command injection in tp-link (CVE-2026-30815). Successful exploitation can lead to full system takeover.
|
| CVE-2026-30818 |
|
OS Command Injection in tp-link (CVE-2026-30818)
OS command injection in tp-link (CVE-2026-30818). Successful exploitation can lead to full system takeover.
|
| CVE-2025-50673 |
|
Vulnerability in dlink (CVE-2025-50673)
vulnerability in dlink (CVE-2025-50673). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50664 |
|
Vulnerability in dlink (CVE-2025-50664)
vulnerability in dlink (CVE-2025-50664). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50665 |
|
Vulnerability in dlink (CVE-2025-50665)
vulnerability in dlink (CVE-2025-50665). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50666 |
|
Vulnerability in dlink (CVE-2025-50666)
vulnerability in dlink (CVE-2025-50666). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50667 |
|
Vulnerability in dlink (CVE-2025-50667)
vulnerability in dlink (CVE-2025-50667). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50668 |
|
Vulnerability in dlink (CVE-2025-50668)
vulnerability in dlink (CVE-2025-50668). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50669 |
|
Vulnerability in dlink (CVE-2025-50669)
vulnerability in dlink (CVE-2025-50669). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50670 |
|
Vulnerability in dlink (CVE-2025-50670)
vulnerability in dlink (CVE-2025-50670). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50671 |
|
Vulnerability in dlink (CVE-2025-50671)
vulnerability in dlink (CVE-2025-50671). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50672 |
|
Vulnerability in dlink (CVE-2025-50672)
vulnerability in dlink (CVE-2025-50672). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50653 |
|
Vulnerability in dlink (CVE-2025-50653)
vulnerability in dlink (CVE-2025-50653). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50654 |
|
Vulnerability in dlink (CVE-2025-50654)
vulnerability in dlink (CVE-2025-50654). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50655 |
|
Vulnerability in dlink (CVE-2025-50655)
vulnerability in dlink (CVE-2025-50655). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50657 |
|
Vulnerability in dlink (CVE-2025-50657)
vulnerability in dlink (CVE-2025-50657). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50659 |
|
Vulnerability in dlink (CVE-2025-50659)
vulnerability in dlink (CVE-2025-50659). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50660 |
|
Vulnerability in dlink (CVE-2025-50660)
vulnerability in dlink (CVE-2025-50660). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50661 |
|
Vulnerability in dlink (CVE-2025-50661)
vulnerability in dlink (CVE-2025-50661). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50662 |
|
Vulnerability in dlink (CVE-2025-50662)
vulnerability in dlink (CVE-2025-50662). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50663 |
|
Vulnerability in dlink (CVE-2025-50663)
vulnerability in dlink (CVE-2025-50663). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50644 |
|
Vulnerability in dlink (CVE-2025-50644)
vulnerability in dlink (CVE-2025-50644). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50645 |
|
Vulnerability in dlink (CVE-2025-50645)
vulnerability in dlink (CVE-2025-50645). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50646 |
|
Vulnerability in dlink (CVE-2025-50646)
vulnerability in dlink (CVE-2025-50646). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50647 |
|
Vulnerability in dlink (CVE-2025-50647)
vulnerability in dlink (CVE-2025-50647). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50648 |
|
Vulnerability in dlink (CVE-2025-50648)
vulnerability in dlink (CVE-2025-50648). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50649 |
|
Vulnerability in dlink (CVE-2025-50649)
vulnerability in dlink (CVE-2025-50649). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50650 |
|
Vulnerability in dlink (CVE-2025-50650)
vulnerability in dlink (CVE-2025-50650). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50652 |
|
Vulnerability in dlink (CVE-2025-50652)
vulnerability in dlink (CVE-2025-50652). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33466 |
|
Path Traversal in path-traversal (CVE-2026-33466)
path traversal in path-traversal (CVE-2026-33466). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33756 |
|
Vulnerability in saleor (CVE-2026-33756)
vulnerability in saleor (CVE-2026-33756). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.23.0a3` or later.
|
| CVE-2026-32589 |
|
Vulnerability in redhat (CVE-2026-32589)
vulnerability in redhat (CVE-2026-32589). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32590 |
|
Unsafe Deserialization in redhat (CVE-2026-32590)
vulnerability in redhat (CVE-2026-32590). Successful exploitation can lead to full system takeover.
|
| CVE-2025-52222 |
|
Vulnerability in dos (CVE-2025-52222)
vulnerability in dos (CVE-2025-52222). Risk of unauthorized operations or information disclosure.
|