Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-639 Clear
ID Title
CVE-2026-74242 Vulnerability in redhat (CVE-2026-74242)
vulnerability in redhat (CVE-2026-74242). Confidential information can be exposed externally.
CVE-2026-19838 Vulnerability in CVE-2026-19838 (CVE-2026-19838)
vulnerability in CVE-2026-19838 (CVE-2026-19838). Risk of unauthorized operations or information disclosure.
CVE-2026-19836 Vulnerability in CVE-2026-19836 (CVE-2026-19836)
vulnerability in CVE-2026-19836 (CVE-2026-19836). Risk of unauthorized operations or information disclosure.
CVE-2026-19834 Vulnerability in CVE-2026-19834 (CVE-2026-19834)
vulnerability in CVE-2026-19834 (CVE-2026-19834). Risk of unauthorized operations or information disclosure.
CVE-2026-19870 Vulnerability in CVE-2026-19870 (CVE-2026-19870)
vulnerability in CVE-2026-19870 (CVE-2026-19870). Risk of unauthorized operations or information disclosure.
CVE-2026-19784 Vulnerability in CVE-2026-19784 (CVE-2026-19784)
vulnerability in CVE-2026-19784 (CVE-2026-19784). Risk of unauthorized operations or information disclosure.
CVE-2026-73841 Vulnerability in CVE-2026-73841 (CVE-2026-73841)
vulnerability in CVE-2026-73841 (CVE-2026-73841). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.2.0` or later.
CVE-2026-73657 Path Traversal in CVE-2026-73657 (CVE-2026-73657)
path traversal in CVE-2026-73657 (CVE-2026-73657). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/runs/`.
CVE-2026-73039 Vulnerability in CVE-2026-73039 (CVE-2026-73039)
vulnerability in CVE-2026-73039 (CVE-2026-73039). Risk of unauthorized operations or information disclosure.
CVE-2026-73656 Vulnerability in CVE-2026-73656 (CVE-2026-73656)
vulnerability in CVE-2026-73656 (CVE-2026-73656). Data can be tampered with by attackers. Exploitable via `POST /api/v1/deployments/`.
CVE-2026-72680 Vulnerability in CVE-2026-72680 (CVE-2026-72680)
vulnerability in CVE-2026-72680 (CVE-2026-72680). Data can be tampered with by attackers.
CVE-2026-72666 Vulnerability in CVE-2026-72666 (CVE-2026-72666)
vulnerability in CVE-2026-72666 (CVE-2026-72666). Confidential information can be exposed externally.
CVE-2026-72657 Vulnerability in CVE-2026-72657 (CVE-2026-72657)
vulnerability in CVE-2026-72657 (CVE-2026-72657). Confidential information can be exposed externally.
CVE-2026-72650 Vulnerability in CVE-2026-72650 (CVE-2026-72650)
vulnerability in CVE-2026-72650 (CVE-2026-72650). Risk of unauthorized operations or information disclosure.
CVE-2026-72629 Vulnerability in CVE-2026-72629 (CVE-2026-72629)
vulnerability in CVE-2026-72629 (CVE-2026-72629). Confidential information can be exposed externally.
CVE-2026-72741 Vulnerability in CVE-2026-72741 (CVE-2026-72741)
vulnerability in CVE-2026-72741 (CVE-2026-72741). Confidential information can be exposed externally.
CVE-2026-19734 Vulnerability in CVE-2026-19734 (CVE-2026-19734)
vulnerability in CVE-2026-19734 (CVE-2026-19734). Risk of unauthorized operations or information disclosure. Exploitable via ``ProductUpdateController``.
CVE-2026-28155 Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.
Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.
CVE-2026-73616 Vulnerability in CVE-2026-73616 (CVE-2026-73616)
vulnerability in CVE-2026-73616 (CVE-2026-73616). Data can be tampered with by attackers.
CVE-2026-73612 Vulnerability in CVE-2026-73612 (CVE-2026-73612)
vulnerability in CVE-2026-73612 (CVE-2026-73612). Confidential information can be exposed externally.
CVE-2026-73606 Vulnerability in CVE-2026-73606 (CVE-2026-73606)
vulnerability in CVE-2026-73606 (CVE-2026-73606). Risk of unauthorized operations or information disclosure.
CVE-2026-73610 Vulnerability in CVE-2026-73610 (CVE-2026-73610)
vulnerability in CVE-2026-73610 (CVE-2026-73610). Risk of unauthorized operations or information disclosure.
CVE-2026-73488 Vulnerability in CVE-2026-73488 (CVE-2026-73488)
vulnerability in CVE-2026-73488 (CVE-2026-73488). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/organization/customer-default-source`.
CVE-2026-18945 Vulnerability in wordpress (CVE-2026-18945)
vulnerability in wordpress (CVE-2026-18945). Data can be tampered with by attackers.
CVE-2026-14213 Vulnerability in wordpress (CVE-2026-14213)
vulnerability in wordpress (CVE-2026-14213). Risk of unauthorized operations or information disclosure.
CVE-2026-18750 Vulnerability in CVE-2026-18750 (CVE-2026-18750)
vulnerability in CVE-2026-18750 (CVE-2026-18750). Risk of unauthorized operations or information disclosure.
CVE-2026-18749 Vulnerability in CVE-2026-18749 (CVE-2026-18749)
vulnerability in CVE-2026-18749 (CVE-2026-18749). Successful exploitation can lead to full system takeover.
CVE-2026-18744 Vulnerability in CVE-2026-18744 (CVE-2026-18744)
vulnerability in CVE-2026-18744 (CVE-2026-18744). Risk of unauthorized operations or information disclosure.
CVE-2026-19130 Vulnerability in CVE-2026-19130 (CVE-2026-19130)
vulnerability in CVE-2026-19130 (CVE-2026-19130). Confidential information can be exposed externally. Exploitable via ``copiedFrom``.
CVE-2026-72802 Vulnerability in c (CVE-2026-72802)
vulnerability in c (CVE-2026-72802). Risk of unauthorized operations or information disclosure.
CVE-2026-19228 Vulnerability in gitlab (CVE-2026-19228)
vulnerability in gitlab (CVE-2026-19228). Data can be tampered with by attackers.
CVE-2026-73239 Vulnerability in apache (CVE-2026-73239)
vulnerability in apache (CVE-2026-73239). Confidential information can be exposed externally.
CVE-2026-73298 Vulnerability in CVE-2026-73298 (CVE-2026-73298)
vulnerability in CVE-2026-73298 (CVE-2026-73298). Risk of unauthorized operations or information disclosure.
CVE-2026-68076 Vulnerability in apache (CVE-2026-68076)
vulnerability in apache (CVE-2026-68076). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v2/connections/test`.
CVE-2026-18962 Vulnerability in wordpress (CVE-2026-18962)
vulnerability in wordpress (CVE-2026-18962). Risk of unauthorized operations or information disclosure.
CVE-2026-16737 Vulnerability in wordpress (CVE-2026-16737)
vulnerability in wordpress (CVE-2026-16737). Risk of unauthorized operations or information disclosure.
CVE-2026-14858 Vulnerability in wordpress (CVE-2026-14858)
vulnerability in wordpress (CVE-2026-14858). Risk of unauthorized operations or information disclosure.
CVE-2026-14857 Vulnerability in wordpress (CVE-2026-14857)
vulnerability in wordpress (CVE-2026-14857). Risk of unauthorized operations or information disclosure.
CVE-2026-13177 Vulnerability in wordpress (CVE-2026-13177)
vulnerability in wordpress (CVE-2026-13177). Risk of unauthorized operations or information disclosure.
CVE-2026-13612 Vulnerability in wordpress (CVE-2026-13612)
vulnerability in wordpress (CVE-2026-13612). Risk of unauthorized operations or information disclosure.
CVE-2026-66878 Vulnerability in CVE-2026-66878 (CVE-2026-66878)
vulnerability in CVE-2026-66878 (CVE-2026-66878). Confidential information can be exposed externally.
CVE-2026-64927 Vulnerability in CVE-2026-64927 (CVE-2026-64927)
vulnerability in CVE-2026-64927 (CVE-2026-64927). Risk of unauthorized operations or information disclosure.
CVE-2026-19579 Vulnerability in snipeitapp (CVE-2026-19579)
vulnerability in snipeitapp (CVE-2026-19579). Risk of unauthorized operations or information disclosure.
CVE-2026-48765 Vulnerability in CVE-2026-48765 (CVE-2026-48765)
vulnerability in CVE-2026-48765 (CVE-2026-48765). Confidential information can be exposed externally. Exploitable via ``credentialsId``.
CVE-2026-69119 Vulnerability in CVE-2026-69119 (CVE-2026-69119)
vulnerability in CVE-2026-69119 (CVE-2026-69119). Data can be tampered with by attackers. Exploitable via `DELETE /projects/{id}`.
CVE-2026-69117 Vulnerability in django (CVE-2026-69117)
vulnerability in django (CVE-2026-69117). Confidential information can be exposed externally.
CVE-2026-58650 Vulnerability in microsoft (CVE-2026-58650)
vulnerability in microsoft (CVE-2026-58650). Successful exploitation can lead to full system takeover.
CVE-2026-48494 Vulnerability in CVE-2026-48494 (CVE-2026-48494)
vulnerability in CVE-2026-48494 (CVE-2026-48494). Risk of unauthorized operations or information disclosure. Exploitable via ``typebotId``.
CVE-2026-47704 Vulnerability in CVE-2026-47704 (CVE-2026-47704)
vulnerability in CVE-2026-47704 (CVE-2026-47704). Risk of unauthorized operations or information disclosure. Exploitable via ``typebotId``.
CVE-2026-73068 Vulnerability in CVE-2026-73068 (CVE-2026-73068)
vulnerability in CVE-2026-73068 (CVE-2026-73068). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/tooljet-db/organizations/`.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →