Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-54772 Vulnerability in CoreWCF.NetFramingBase (CVE-2026-54772)
vulnerability in CoreWCF.NetFramingBase (CVE-2026-54772). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.9.1` or later.
CVE-2026-48774 Vulnerability in CVE-2026-48774 (CVE-2026-48774)
vulnerability in CVE-2026-48774 (CVE-2026-48774). Data can be tampered with by attackers. Exploitable via ``run_sql_readonly``.
CVE-2026-48715 Vulnerability in radvdlitech (CVE-2026-48715)
vulnerability in radvdlitech (CVE-2026-48715). Successful exploitation can lead to full system takeover. Exploitable via ``radvdump``.
CVE-2026-54592 Out-of-Bounds Read in oj (CVE-2026-54592)
vulnerability in oj (CVE-2026-54592). Risk of unauthorized operations or information disclosure. Exploitable via ``doc_each_child``. Mitigation: upgrade to `3.17.3` or later.
CVE-2026-54528 Vulnerability in jupyterlab-git (CVE-2026-54528)
vulnerability in jupyterlab-git (CVE-2026-54528). Confidential information can be exposed externally. Exploitable via `POST /git/project/secrets/status`. Mitigation: upgrade to `0.54.0` or later.
CVE-2026-54499 Unsafe Deserialization in stanza (CVE-2026-54499)
vulnerability in stanza (CVE-2026-54499). Successful exploitation can lead to full system takeover. Exploitable via ``pickle.UnpicklingError``. Mitigation: upgrade to `1.12.2` or later.
CVE-2026-54317 Information Disclosure in homeassistant (CVE-2026-54317)
vulnerability in homeassistant (CVE-2026-54317). Confidential information can be exposed externally. Exploitable via `Authorization header`. Mitigation: upgrade to `2026.6.0` or later.
CVE-2026-54297 Vulnerability in faraday (CVE-2026-54297)
vulnerability in faraday (CVE-2026-54297). Risk of unauthorized operations or information disclosure. Exploitable via ``Hash``. Mitigation: upgrade to `1.10.6` or later.
CVE-2026-53488 Vulnerability in github.com/containerd/containerd (CVE-2026-53488)
vulnerability in github.com/containerd/containerd (CVE-2026-53488). Successful exploitation can lead to full system takeover. Exploitable via ``LABEL``. Mitigation: upgrade to `1.7.33` or later.
CVE-2026-23879 Vulnerability in py7zr (CVE-2026-23879)
vulnerability in py7zr (CVE-2026-23879). Successful exploitation can lead to full system takeover. Exploitable via ``py7zr``. Mitigation: upgrade to `1.1.3` or later.
CVE-2026-49340 Path Traversal in go.senan.xyz/gonic (CVE-2026-49340)
path traversal in go.senan.xyz/gonic (CVE-2026-49340). Data can be tampered with by attackers. Exploitable via ``ServeCreateOrUpdatePlaylist``. Mitigation: upgrade to `0.21.0` or later.
CVE-2026-49339 Path Traversal in go.senan.xyz/gonic (CVE-2026-49339)
path traversal in go.senan.xyz/gonic (CVE-2026-49339). Data can be tampered with by attackers. Exploitable via ``playlist.UserID``. Mitigation: upgrade to `0.21.0` or later.
CVE-2026-49338 Vulnerability in go.senan.xyz/gonic (CVE-2026-49338)
vulnerability in go.senan.xyz/gonic (CVE-2026-49338). Data can be tampered with by attackers. Exploitable via `GET /rest/deletePlaylist.view`. Mitigation: upgrade to `0.21.0` or later.
CVE-2026-49293 Vulnerability in js-toml (CVE-2026-49293)
vulnerability in js-toml (CVE-2026-49293). Risk of unauthorized operations or information disclosure. Exploitable via ``parseBigInt``. Mitigation: upgrade to `1.1.1` or later.
CVE-2026-49291 Vulnerability in mcp-memory-service (CVE-2026-49291)
vulnerability in mcp-memory-service (CVE-2026-49291). Data can be tampered with by attackers. Exploitable via `POST /api/memories`. Mitigation: upgrade to `10.65.3` or later.
CVE-2019-25758 Unrestricted File Upload in CVE-2019-25758 (CVE-2019-25758)
vulnerability in CVE-2019-25758 (CVE-2019-25758). Successful exploitation can lead to full system takeover.
CVE-2019-25761 SQL Injection in sqli (CVE-2019-25761)
SQL injection in sqli (CVE-2019-25761). Confidential information can be exposed externally.
CVE-2019-25759 SQL Injection in sqli (CVE-2019-25759)
SQL injection in sqli (CVE-2019-25759). Confidential information can be exposed externally.
CVE-2019-25762 Vulnerability in CVE-2019-25762 (CVE-2019-25762)
vulnerability in CVE-2019-25762 (CVE-2019-25762). Confidential information can be exposed externally.
CVE-2019-25756 SQL Injection in sqli (CVE-2019-25756)
SQL injection in sqli (CVE-2019-25756). Confidential information can be exposed externally.
CVE-2019-25752 SQL Injection in sqli (CVE-2019-25752)
SQL injection in sqli (CVE-2019-25752). Confidential information can be exposed externally.
CVE-2019-25751 SQL Injection in sqli (CVE-2019-25751)
SQL injection in sqli (CVE-2019-25751). Confidential information can be exposed externally.
CVE-2019-25757 SQL Injection in sqli (CVE-2019-25757)
SQL injection in sqli (CVE-2019-25757). Confidential information can be exposed externally.
CVE-2019-25754 SQL Injection in sqli (CVE-2019-25754)
SQL injection in sqli (CVE-2019-25754). Confidential information can be exposed externally.
CVE-2026-56209 Out-of-Bounds Write in dos (CVE-2026-56209)
out-of-bounds write in dos (CVE-2026-56209). Risk of unauthorized operations or information disclosure.
CVE-2019-25755 SQL Injection in sqli (CVE-2019-25755)
SQL injection in sqli (CVE-2019-25755). Confidential information can be exposed externally.
CVE-2019-25749 SQL Injection in sqli (CVE-2019-25749)
SQL injection in sqli (CVE-2019-25749). Confidential information can be exposed externally.
CVE-2026-56210 Out-of-Bounds Read in dos (CVE-2026-56210)
vulnerability in dos (CVE-2026-56210). Risk of unauthorized operations or information disclosure.
CVE-2026-56208 Vulnerability in dos (CVE-2026-56208)
vulnerability in dos (CVE-2026-56208). Risk of unauthorized operations or information disclosure.
CVE-2026-56211 Out-of-Bounds Write in CVE-2026-56211 (CVE-2026-56211)
out-of-bounds write in CVE-2026-56211 (CVE-2026-56211). Data can be tampered with by attackers.
CVE-2019-25753 SQL Injection in sqli (CVE-2019-25753)
SQL injection in sqli (CVE-2019-25753). Confidential information can be exposed externally.
CVE-2019-25750 SQL Injection in sqli (CVE-2019-25750)
SQL injection in sqli (CVE-2019-25750). Confidential information can be exposed externally.
CVE-2019-25748 SQL Injection in sqli (CVE-2019-25748)
SQL injection in sqli (CVE-2019-25748). Confidential information can be exposed externally.
CVE-2017-20280 SQL Injection in sqli (CVE-2017-20280)
SQL injection in sqli (CVE-2017-20280). Confidential information can be exposed externally.
CVE-2017-20272 SQL Injection in sqli (CVE-2017-20272)
SQL injection in sqli (CVE-2017-20272). Confidential information can be exposed externally.
CVE-2026-3195 Vulnerability in CVE-2026-3195 (CVE-2026-3195)
vulnerability in CVE-2026-3195 (CVE-2026-3195). Successful exploitation can lead to full system takeover. Exploitable via ``virtio_snd_pcm_in_cb``.
CVE-2017-20278 SQL Injection in sqli (CVE-2017-20278)
SQL injection in sqli (CVE-2017-20278). Confidential information can be exposed externally.
CVE-2017-20273 SQL Injection in sqli (CVE-2017-20273)
SQL injection in sqli (CVE-2017-20273). Confidential information can be exposed externally.
CVE-2017-20277 SQL Injection in sqli (CVE-2017-20277)
SQL injection in sqli (CVE-2017-20277). Confidential information can be exposed externally.
CVE-2017-20276 SQL Injection in sqli (CVE-2017-20276)
SQL injection in sqli (CVE-2017-20276). Confidential information can be exposed externally.
CVE-2017-20269 SQL Injection in sqli (CVE-2017-20269)
SQL injection in sqli (CVE-2017-20269). Confidential information can be exposed externally.
CVE-2017-20279 SQL Injection in sqli (CVE-2017-20279)
SQL injection in sqli (CVE-2017-20279). Confidential information can be exposed externally.
CVE-2017-20275 SQL Injection in sqli (CVE-2017-20275)
SQL injection in sqli (CVE-2017-20275). Confidential information can be exposed externally.
CVE-2017-20274 SQL Injection in sqli (CVE-2017-20274)
SQL injection in sqli (CVE-2017-20274). Confidential information can be exposed externally.
CVE-2017-20268 SQL Injection in sqli (CVE-2017-20268)
SQL injection in sqli (CVE-2017-20268). Confidential information can be exposed externally.
CVE-2017-20271 SQL Injection in sqli (CVE-2017-20271)
SQL injection in sqli (CVE-2017-20271). Confidential information can be exposed externally.
CVE-2017-20270 SQL Injection in sqli (CVE-2017-20270)
SQL injection in sqli (CVE-2017-20270). Confidential information can be exposed externally.
CVE-2017-20282 SQL Injection in sqli (CVE-2017-20282)
SQL injection in sqli (CVE-2017-20282). Confidential information can be exposed externally.
CVE-2017-20281 SQL Injection in sqli (CVE-2017-20281)
SQL injection in sqli (CVE-2017-20281). Confidential information can be exposed externally.
CVE-2017-20267 SQL Injection in sqli (CVE-2017-20267)
SQL injection in sqli (CVE-2017-20267). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →