Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-33939 |
|
Vulnerability in dos (CVE-2026-33939)
vulnerability in dos (CVE-2026-33939). Risk of unauthorized operations or information disclosure. Exploitable via ``undefined``.
|
| CVE-2026-33937 |
|
Code Injection in handlebarsjs (CVE-2026-33937)
code injection in handlebarsjs (CVE-2026-33937). Successful exploitation can lead to full system takeover. Exploitable via ``value``.
|
| CVE-2026-33938 |
|
Code Injection in handlebarsjs (CVE-2026-33938)
code injection in handlebarsjs (CVE-2026-33938). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33895 |
|
Vulnerability in digitalbazaar (CVE-2026-33895)
vulnerability in digitalbazaar (CVE-2026-33895). Data can be tampered with by attackers. Exploitable via ``crypto.verify``.
|
| CVE-2026-33896 |
|
Vulnerability in digitalbazaar (CVE-2026-33896)
vulnerability in digitalbazaar (CVE-2026-33896). Confidential information can be exposed externally. Exploitable via ``basicConstraints``.
|
| CVE-2026-33891 |
|
Vulnerability in dos (CVE-2026-33891)
vulnerability in dos (CVE-2026-33891). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33894 |
|
Vulnerability in digitalbazaar (CVE-2026-33894)
vulnerability in digitalbazaar (CVE-2026-33894). Data can be tampered with by attackers.
|
| CVE-2026-65914 |
|
Cross-Site Scripting (XSS) in dompurify (CVE-2026-65914)
cross-site scripting in dompurify (CVE-2026-65914). Risk of unauthorized operations or information disclosure. Exploitable via `POST /sanitize`. Mitigation: upgrade to `3.3.2` or later.
|
| CVE-2026-5010 |
|
Cross-Site Scripting (XSS) in CVE-2026-5010 (CVE-2026-5010)
cross-site scripting in CVE-2026-5010 (CVE-2026-5010). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34071 |
|
Cross-Site Scripting (XSS) in stirling (CVE-2026-34071)
cross-site scripting in stirling (CVE-2026-34071). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-29934 |
|
Cross-Site Scripting (XSS) in lightcms-project (CVE-2026-29934)
cross-site scripting in lightcms-project (CVE-2026-29934). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-30587 |
|
Cross-Site Scripting (XSS) in seafile (CVE-2026-30587)
cross-site scripting in seafile (CVE-2026-30587). Confidential information can be exposed externally. Mitigation: upgrade to `13.0.17` or later.
|
| CVE-2026-26832 |
|
OS Command Injection in zapolnoch (CVE-2026-26832)
OS command injection in zapolnoch (CVE-2026-26832). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33331 |
|
Cross-Site Scripting (XSS) in orpc (CVE-2026-33331)
cross-site scripting in orpc (CVE-2026-33331). Confidential information can be exposed externally.
|
| CVE-2026-4698 |
|
Vulnerability in mozilla (CVE-2026-4698)
vulnerability in mozilla (CVE-2026-4698). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33167 |
|
Cross-Site Scripting (XSS) in actionpack (CVE-2026-33167)
cross-site scripting in actionpack (CVE-2026-33167). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.1.2.1` or later.
|
| CVE-2026-32851 |
|
Cross-Site Scripting (XSS) in mailenable (CVE-2026-32851)
cross-site scripting in mailenable (CVE-2026-32851). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4602 |
|
Vulnerability in jsrsasign (CVE-2026-4602)
vulnerability in jsrsasign (CVE-2026-4602). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.1.1` or later.
|
| CVE-2026-4603 |
|
Vulnerability in kjur (CVE-2026-4603)
vulnerability in kjur (CVE-2026-4603). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4598 |
|
Vulnerability in jsrsasign (CVE-2026-4598)
vulnerability in jsrsasign (CVE-2026-4598). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.1.1` or later.
|
| CVE-2026-4599 |
|
Vulnerability in jsrsasign (CVE-2026-4599)
vulnerability in jsrsasign (CVE-2026-4599). Confidential information can be exposed externally. Mitigation: upgrade to `11.1.1` or later.
|
| CVE-2026-4600 |
|
Vulnerability in jsrsasign (CVE-2026-4600)
vulnerability in jsrsasign (CVE-2026-4600). Confidential information can be exposed externally. Mitigation: upgrade to `11.1.1` or later.
|
| CVE-2026-33228 |
|
Vulnerability in webreflection (CVE-2026-33228)
vulnerability in webreflection (CVE-2026-33228). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32843 |
|
Cross-Site Scripting (XSS) in CVE-2026-32843 (CVE-2026-32843)
cross-site scripting in CVE-2026-32843 (CVE-2026-32843). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31938 |
|
Cross-Site Scripting (XSS) in parall (CVE-2026-31938)
cross-site scripting in parall (CVE-2026-31938). Confidential information can be exposed externally. Exploitable via ``options``.
|
| CVE-2026-31898 |
|
Vulnerability in parall (CVE-2026-31898)
vulnerability in parall (CVE-2026-31898). Confidential information can be exposed externally. Exploitable via ``createAnnotation``.
|
| CVE-2026-32304 |
|
Code Injection in locutus (CVE-2026-32304)
code injection in locutus (CVE-2026-32304). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.0.14` or later.
|
| CVE-2025-13702 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2025-13702)
cross-site scripting in ibm (CVE-2025-13702). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2229 |
|
Vulnerability in c (CVE-2026-2229)
vulnerability in c (CVE-2026-2229). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1526 |
|
Vulnerability in nodejs (CVE-2026-1526)
vulnerability in nodejs (CVE-2026-1526). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32141 |
|
Vulnerability in webreflection (CVE-2026-32141)
vulnerability in webreflection (CVE-2026-32141). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.0` or later.
|
| CVE-2026-73426 |
|
Cross-Site Scripting (XSS) in action_text-trix (CVE-2026-73426)
cross-site scripting in action_text-trix (CVE-2026-73426). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.17` or later.
|
| CVE-2026-21361 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-21361)
cross-site scripting in adobe (CVE-2026-21361). Confidential information can be exposed externally.
|
| CVE-2026-21311 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-21311)
cross-site scripting in adobe (CVE-2026-21311). Confidential information can be exposed externally.
|
| CVE-2026-21284 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-21284)
cross-site scripting in adobe (CVE-2026-21284). Confidential information can be exposed externally.
|
| CVE-2026-21290 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-21290)
cross-site scripting in adobe (CVE-2026-21290). Confidential information can be exposed externally.
|
| CVE-2026-27262 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27262)
cross-site scripting in adobe (CVE-2026-27262). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27265 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27265)
cross-site scripting in adobe (CVE-2026-27265). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27266 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27266)
cross-site scripting in adobe (CVE-2026-27266). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27255 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27255)
cross-site scripting in adobe (CVE-2026-27255). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27256 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27256)
cross-site scripting in adobe (CVE-2026-27256). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27257 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27257)
cross-site scripting in adobe (CVE-2026-27257). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27249 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27249)
cross-site scripting in adobe (CVE-2026-27249). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27250 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27250)
cross-site scripting in adobe (CVE-2026-27250). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27251 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27251)
cross-site scripting in adobe (CVE-2026-27251). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27252 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27252)
cross-site scripting in adobe (CVE-2026-27252). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27253 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27253)
cross-site scripting in adobe (CVE-2026-27253). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27254 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27254)
cross-site scripting in adobe (CVE-2026-27254). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27241 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27241)
cross-site scripting in adobe (CVE-2026-27241). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27242 |
|
Cross-Site Scripting (XSS) in adobe (CVE-2026-27242)
cross-site scripting in adobe (CVE-2026-27242). Risk of unauthorized operations or information disclosure.
|