Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-54772 |
|
Vulnerability in CoreWCF.NetFramingBase (CVE-2026-54772)
vulnerability in CoreWCF.NetFramingBase (CVE-2026-54772). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.9.1` or later.
|
| CVE-2026-48774 |
|
Vulnerability in CVE-2026-48774 (CVE-2026-48774)
vulnerability in CVE-2026-48774 (CVE-2026-48774). Data can be tampered with by attackers. Exploitable via ``run_sql_readonly``.
|
| CVE-2026-48715 |
|
Vulnerability in radvdlitech (CVE-2026-48715)
vulnerability in radvdlitech (CVE-2026-48715). Successful exploitation can lead to full system takeover. Exploitable via ``radvdump``.
|
| CVE-2026-54592 |
|
Out-of-Bounds Read in oj (CVE-2026-54592)
vulnerability in oj (CVE-2026-54592). Risk of unauthorized operations or information disclosure. Exploitable via ``doc_each_child``. Mitigation: upgrade to `3.17.3` or later.
|
| CVE-2026-54528 |
|
Vulnerability in jupyterlab-git (CVE-2026-54528)
vulnerability in jupyterlab-git (CVE-2026-54528). Confidential information can be exposed externally. Exploitable via `POST /git/project/secrets/status`. Mitigation: upgrade to `0.54.0` or later.
|
| CVE-2026-54499 |
|
Unsafe Deserialization in stanza (CVE-2026-54499)
vulnerability in stanza (CVE-2026-54499). Successful exploitation can lead to full system takeover. Exploitable via ``pickle.UnpicklingError``. Mitigation: upgrade to `1.12.2` or later.
|
| CVE-2026-54317 |
|
Information Disclosure in homeassistant (CVE-2026-54317)
vulnerability in homeassistant (CVE-2026-54317). Confidential information can be exposed externally. Exploitable via `Authorization header`. Mitigation: upgrade to `2026.6.0` or later.
|
| CVE-2026-54297 |
|
Vulnerability in faraday (CVE-2026-54297)
vulnerability in faraday (CVE-2026-54297). Risk of unauthorized operations or information disclosure. Exploitable via ``Hash``. Mitigation: upgrade to `1.10.6` or later.
|
| CVE-2026-53488 |
|
Vulnerability in github.com/containerd/containerd (CVE-2026-53488)
vulnerability in github.com/containerd/containerd (CVE-2026-53488). Successful exploitation can lead to full system takeover. Exploitable via ``LABEL``. Mitigation: upgrade to `1.7.33` or later.
|
| CVE-2026-23879 |
|
Vulnerability in py7zr (CVE-2026-23879)
vulnerability in py7zr (CVE-2026-23879). Successful exploitation can lead to full system takeover. Exploitable via ``py7zr``. Mitigation: upgrade to `1.1.3` or later.
|
| CVE-2026-49340 |
|
Path Traversal in go.senan.xyz/gonic (CVE-2026-49340)
path traversal in go.senan.xyz/gonic (CVE-2026-49340). Data can be tampered with by attackers. Exploitable via ``ServeCreateOrUpdatePlaylist``. Mitigation: upgrade to `0.21.0` or later.
|
| CVE-2026-49339 |
|
Path Traversal in go.senan.xyz/gonic (CVE-2026-49339)
path traversal in go.senan.xyz/gonic (CVE-2026-49339). Data can be tampered with by attackers. Exploitable via ``playlist.UserID``. Mitigation: upgrade to `0.21.0` or later.
|
| CVE-2026-49338 |
|
Vulnerability in go.senan.xyz/gonic (CVE-2026-49338)
vulnerability in go.senan.xyz/gonic (CVE-2026-49338). Data can be tampered with by attackers. Exploitable via `GET /rest/deletePlaylist.view`. Mitigation: upgrade to `0.21.0` or later.
|
| CVE-2026-49293 |
|
Vulnerability in js-toml (CVE-2026-49293)
vulnerability in js-toml (CVE-2026-49293). Risk of unauthorized operations or information disclosure. Exploitable via ``parseBigInt``. Mitigation: upgrade to `1.1.1` or later.
|
| CVE-2026-49291 |
|
Vulnerability in mcp-memory-service (CVE-2026-49291)
vulnerability in mcp-memory-service (CVE-2026-49291). Data can be tampered with by attackers. Exploitable via `POST /api/memories`. Mitigation: upgrade to `10.65.3` or later.
|
| CVE-2019-25758 |
|
Unrestricted File Upload in CVE-2019-25758 (CVE-2019-25758)
vulnerability in CVE-2019-25758 (CVE-2019-25758). Successful exploitation can lead to full system takeover.
|
| CVE-2019-25761 |
|
SQL Injection in sqli (CVE-2019-25761)
SQL injection in sqli (CVE-2019-25761). Confidential information can be exposed externally.
|
| CVE-2019-25759 |
|
SQL Injection in sqli (CVE-2019-25759)
SQL injection in sqli (CVE-2019-25759). Confidential information can be exposed externally.
|
| CVE-2019-25762 |
|
Vulnerability in CVE-2019-25762 (CVE-2019-25762)
vulnerability in CVE-2019-25762 (CVE-2019-25762). Confidential information can be exposed externally.
|
| CVE-2019-25756 |
|
SQL Injection in sqli (CVE-2019-25756)
SQL injection in sqli (CVE-2019-25756). Confidential information can be exposed externally.
|
| CVE-2019-25752 |
|
SQL Injection in sqli (CVE-2019-25752)
SQL injection in sqli (CVE-2019-25752). Confidential information can be exposed externally.
|
| CVE-2019-25751 |
|
SQL Injection in sqli (CVE-2019-25751)
SQL injection in sqli (CVE-2019-25751). Confidential information can be exposed externally.
|
| CVE-2019-25757 |
|
SQL Injection in sqli (CVE-2019-25757)
SQL injection in sqli (CVE-2019-25757). Confidential information can be exposed externally.
|
| CVE-2019-25754 |
|
SQL Injection in sqli (CVE-2019-25754)
SQL injection in sqli (CVE-2019-25754). Confidential information can be exposed externally.
|
| CVE-2026-56209 |
|
Out-of-Bounds Write in dos (CVE-2026-56209)
out-of-bounds write in dos (CVE-2026-56209). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-25755 |
|
SQL Injection in sqli (CVE-2019-25755)
SQL injection in sqli (CVE-2019-25755). Confidential information can be exposed externally.
|
| CVE-2019-25749 |
|
SQL Injection in sqli (CVE-2019-25749)
SQL injection in sqli (CVE-2019-25749). Confidential information can be exposed externally.
|
| CVE-2026-56210 |
|
Out-of-Bounds Read in dos (CVE-2026-56210)
vulnerability in dos (CVE-2026-56210). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56208 |
|
Vulnerability in dos (CVE-2026-56208)
vulnerability in dos (CVE-2026-56208). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56211 |
|
Out-of-Bounds Write in CVE-2026-56211 (CVE-2026-56211)
out-of-bounds write in CVE-2026-56211 (CVE-2026-56211). Data can be tampered with by attackers.
|
| CVE-2019-25753 |
|
SQL Injection in sqli (CVE-2019-25753)
SQL injection in sqli (CVE-2019-25753). Confidential information can be exposed externally.
|
| CVE-2019-25750 |
|
SQL Injection in sqli (CVE-2019-25750)
SQL injection in sqli (CVE-2019-25750). Confidential information can be exposed externally.
|
| CVE-2019-25748 |
|
SQL Injection in sqli (CVE-2019-25748)
SQL injection in sqli (CVE-2019-25748). Confidential information can be exposed externally.
|
| CVE-2017-20280 |
|
SQL Injection in sqli (CVE-2017-20280)
SQL injection in sqli (CVE-2017-20280). Confidential information can be exposed externally.
|
| CVE-2017-20272 |
|
SQL Injection in sqli (CVE-2017-20272)
SQL injection in sqli (CVE-2017-20272). Confidential information can be exposed externally.
|
| CVE-2026-3195 |
|
Vulnerability in CVE-2026-3195 (CVE-2026-3195)
vulnerability in CVE-2026-3195 (CVE-2026-3195). Successful exploitation can lead to full system takeover. Exploitable via ``virtio_snd_pcm_in_cb``.
|
| CVE-2017-20278 |
|
SQL Injection in sqli (CVE-2017-20278)
SQL injection in sqli (CVE-2017-20278). Confidential information can be exposed externally.
|
| CVE-2017-20273 |
|
SQL Injection in sqli (CVE-2017-20273)
SQL injection in sqli (CVE-2017-20273). Confidential information can be exposed externally.
|
| CVE-2017-20277 |
|
SQL Injection in sqli (CVE-2017-20277)
SQL injection in sqli (CVE-2017-20277). Confidential information can be exposed externally.
|
| CVE-2017-20276 |
|
SQL Injection in sqli (CVE-2017-20276)
SQL injection in sqli (CVE-2017-20276). Confidential information can be exposed externally.
|
| CVE-2017-20269 |
|
SQL Injection in sqli (CVE-2017-20269)
SQL injection in sqli (CVE-2017-20269). Confidential information can be exposed externally.
|
| CVE-2017-20279 |
|
SQL Injection in sqli (CVE-2017-20279)
SQL injection in sqli (CVE-2017-20279). Confidential information can be exposed externally.
|
| CVE-2017-20275 |
|
SQL Injection in sqli (CVE-2017-20275)
SQL injection in sqli (CVE-2017-20275). Confidential information can be exposed externally.
|
| CVE-2017-20274 |
|
SQL Injection in sqli (CVE-2017-20274)
SQL injection in sqli (CVE-2017-20274). Confidential information can be exposed externally.
|
| CVE-2017-20268 |
|
SQL Injection in sqli (CVE-2017-20268)
SQL injection in sqli (CVE-2017-20268). Confidential information can be exposed externally.
|
| CVE-2017-20271 |
|
SQL Injection in sqli (CVE-2017-20271)
SQL injection in sqli (CVE-2017-20271). Confidential information can be exposed externally.
|
| CVE-2017-20270 |
|
SQL Injection in sqli (CVE-2017-20270)
SQL injection in sqli (CVE-2017-20270). Confidential information can be exposed externally.
|
| CVE-2017-20282 |
|
SQL Injection in sqli (CVE-2017-20282)
SQL injection in sqli (CVE-2017-20282). Confidential information can be exposed externally.
|
| CVE-2017-20281 |
|
SQL Injection in sqli (CVE-2017-20281)
SQL injection in sqli (CVE-2017-20281). Confidential information can be exposed externally.
|
| CVE-2017-20267 |
|
SQL Injection in sqli (CVE-2017-20267)
SQL injection in sqli (CVE-2017-20267). Confidential information can be exposed externally.
|