Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-770 Clear
ID Title
CVE-2026-54429 Vulnerability in cisa (CVE-2026-54429)
vulnerability in cisa (CVE-2026-54429). Risk of unauthorized operations or information disclosure.
CVE-2026-59246 Vulnerability in ssrf (CVE-2026-59246)
vulnerability in ssrf (CVE-2026-59246). Risk of unauthorized operations or information disclosure.
CVE-2026-58229 Vulnerability in ssrf (CVE-2026-58229)
vulnerability in ssrf (CVE-2026-58229). Risk of unauthorized operations or information disclosure.
CVE-2026-58488 Vulnerability in CVE-2026-58488 (CVE-2026-58488)
vulnerability in CVE-2026-58488 (CVE-2026-58488). Risk of unauthorized operations or information disclosure.
CVE-2026-61465 Vulnerability in dos (CVE-2026-61465)
vulnerability in dos (CVE-2026-61465). Risk of unauthorized operations or information disclosure.
CVE-2026-57220 Vulnerability in broadcom (CVE-2026-57220)
vulnerability in broadcom (CVE-2026-57220). Risk of unauthorized operations or information disclosure.
CVE-2026-57212 Vulnerability in broadcom (CVE-2026-57212)
vulnerability in broadcom (CVE-2026-57212). Risk of unauthorized operations or information disclosure.
CVE-2026-59161 Vulnerability in excelize (CVE-2026-59161)
vulnerability in excelize (CVE-2026-59161). Risk of unauthorized operations or information disclosure.
CVE-2026-54063 Vulnerability in github.com/xuri/excelize/v2 (CVE-2026-54063)
vulnerability in github.com/xuri/excelize/v2 (CVE-2026-54063). Risk of unauthorized operations or information disclosure. Exploitable via ``GetCellValue``. Mitigation: upgrade to `2.11.0` or later.
CVE-2026-53653 Vulnerability in getgrav/grav (CVE-2026-53653)
vulnerability in getgrav/grav (CVE-2026-53653). Risk of unauthorized operations or information disclosure. Exploitable via `GET /home/test.png`. Mitigation: upgrade to `1.7.53` or later.
CVE-2026-58661 Vulnerability in n8n (CVE-2026-58661)
vulnerability in n8n (CVE-2026-58661). Risk of unauthorized operations or information disclosure. Exploitable via ``uploadMaxFileSize``. Mitigation: upgrade to `1.123.58` or later.
CVE-2026-56309 Vulnerability in CVE-2026-56309 (CVE-2026-56309)
vulnerability in CVE-2026-56309 (CVE-2026-56309). Risk of unauthorized operations or information disclosure.
CVE-2026-56814 Vulnerability in dos (CVE-2026-56814)
vulnerability in dos (CVE-2026-56814). Risk of unauthorized operations or information disclosure.
CVE-2026-40006 Vulnerability in apache (CVE-2026-40006)
vulnerability in apache (CVE-2026-40006). Risk of unauthorized operations or information disclosure.
CVE-2026-60108 Vulnerability in dos (CVE-2026-60108)
vulnerability in dos (CVE-2026-60108). Risk of unauthorized operations or information disclosure.
CVE-2026-49476 Vulnerability in soupsieve (CVE-2026-49476)
vulnerability in soupsieve (CVE-2026-49476). Risk of unauthorized operations or information disclosure. Exploitable via ``CSSSelector``. Mitigation: upgrade to `2.8.4` or later.
CVE-2026-12590 Vulnerability in body-parser (CVE-2026-12590)
vulnerability in body-parser (CVE-2026-12590). Risk of unauthorized operations or information disclosure. Exploitable via ``limit``. Mitigation: upgrade to `2.3.0` or later.
CVE-2026-31984 Vulnerability in nozominetworks (CVE-2026-31984)
vulnerability in nozominetworks (CVE-2026-31984). Risk of unauthorized operations or information disclosure.
CVE-2026-49866 Vulnerability in @libp2p/gossipsub (CVE-2026-49866)
vulnerability in @libp2p/gossipsub (CVE-2026-49866). Risk of unauthorized operations or information disclosure. Exploitable via ``opts.decodeRpcLimits``. Mitigation: upgrade to `16.0.0` or later.
CVE-2026-55575 Vulnerability in liquidjs (CVE-2026-55575)
vulnerability in liquidjs (CVE-2026-55575). Risk of unauthorized operations or information disclosure. Exploitable via ``pop``. Mitigation: upgrade to `10.27.1` or later.
CVE-2026-14362 Vulnerability in CVE-2026-14362 (CVE-2026-14362)
vulnerability in CVE-2026-14362 (CVE-2026-14362). Risk of unauthorized operations or information disclosure.
CVE-2026-59873 Vulnerability in tar (CVE-2026-59873)
vulnerability in tar (CVE-2026-59873). Risk of unauthorized operations or information disclosure. Exploitable via ``maxReadSize``. Mitigation: upgrade to `7.5.19` or later.
CVE-2026-59870 Vulnerability in js-yaml (CVE-2026-59870)
vulnerability in js-yaml (CVE-2026-59870). Risk of unauthorized operations or information disclosure. Exploitable via ``YAML11_SCHEMA``. Mitigation: upgrade to `5.2.1` or later.
CVE-2026-59868 Vulnerability in js-yaml (CVE-2026-59868)
vulnerability in js-yaml (CVE-2026-59868). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.2.0` or later.
CVE-2026-49146 Vulnerability in c (CVE-2026-49146)
vulnerability in c (CVE-2026-49146). Risk of unauthorized operations or information disclosure.
CVE-2026-60001 sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.
sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.
CVE-2026-60000 Vulnerability in dos (CVE-2026-60000)
vulnerability in dos (CVE-2026-60000). Risk of unauthorized operations or information disclosure.
CVE-2026-56811 Vulnerability in dos (CVE-2026-56811)
vulnerability in dos (CVE-2026-56811). Risk of unauthorized operations or information disclosure.
CVE-2026-42145 Unrestricted File Upload in CVE-2026-42145 (CVE-2026-42145)
vulnerability in CVE-2026-42145 (CVE-2026-42145). Risk of unauthorized operations or information disclosure.
CVE-2026-41899 Vulnerability in CVE-2026-41899 (CVE-2026-41899)
vulnerability in CVE-2026-41899 (CVE-2026-41899). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/feedback`.
CVE-2026-55434 Vulnerability in github.com/coder/coder/v2 (CVE-2026-55434)
vulnerability in github.com/coder/coder/v2 (CVE-2026-55434). Risk of unauthorized operations or information disclosure. Exploitable via ``io.ReadAll``. Mitigation: upgrade to `2.33.8` or later.
CVE-2026-55078 Vulnerability in github.com/coder/coder/v2 (CVE-2026-55078)
vulnerability in github.com/coder/coder/v2 (CVE-2026-55078). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v2/files`. Mitigation: upgrade to `2.29.17` or later.
CVE-2026-55646 Vulnerability in vllm (CVE-2026-55646)
vulnerability in vllm (CVE-2026-55646). Risk of unauthorized operations or information disclosure. Exploitable via ``VLLM_MAX_AUDIO_CLIP_FILESIZE_MB``. Mitigation: upgrade to `0.24.0` or later.
CVE-2026-42546 Vulnerability in c (CVE-2026-42546)
vulnerability in c (CVE-2026-42546). Risk of unauthorized operations or information disclosure. Exploitable via ``OPTEE_MSG_ATTR_TYPE_MASK``.
CVE-2026-13698 Vulnerability in dos (CVE-2026-13698)
vulnerability in dos (CVE-2026-13698). Risk of unauthorized operations or information disclosure.
CVE-2026-56810 Vulnerability in dos (CVE-2026-56810)
vulnerability in dos (CVE-2026-56810). Risk of unauthorized operations or information disclosure.
CVE-2026-11586 Vulnerability in haxx (CVE-2026-11586)
vulnerability in haxx (CVE-2026-11586). Risk of unauthorized operations or information disclosure.
CVE-2026-52732 Vulnerability in zebrad (CVE-2026-52732)
vulnerability in zebrad (CVE-2026-52732). Risk of unauthorized operations or information disclosure. Exploitable via ``zebrad``. Mitigation: upgrade to `4.5.0` or later.
CVE-2026-58465 Vulnerability in c (CVE-2026-58465)
vulnerability in c (CVE-2026-58465). Risk of unauthorized operations or information disclosure.
CVE-2026-11946 Vulnerability in CVE-2026-11946 (CVE-2026-11946)
vulnerability in CVE-2026-11946 (CVE-2026-11946). Risk of unauthorized operations or information disclosure.
CVE-2026-9563 Vulnerability in dos (CVE-2026-9563)
vulnerability in dos (CVE-2026-9563). Risk of unauthorized operations or information disclosure.
CVE-2026-33592 Vulnerability in CVE-2026-33592 (CVE-2026-33592)
vulnerability in CVE-2026-33592 (CVE-2026-33592). Risk of unauthorized operations or information disclosure.
CVE-2026-48824 Vulnerability in github.com/axllent/mailpit (CVE-2026-48824)
vulnerability in github.com/axllent/mailpit (CVE-2026-48824). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/send`. Mitigation: upgrade to `1.30.1` or later.
CVE-2026-54428 Vulnerability in org.apache.httpcomponents.core5:httpcore5-h2 (CVE-2026-54428)
vulnerability in org.apache.httpcomponents.core5:httpcore5-h2 (CVE-2026-54428). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.5-beta2` or later.
CVE-2026-56149 Vulnerability in elasticsearch (CVE-2026-56149)
vulnerability in elasticsearch (CVE-2026-56149). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.17, 9.3.6, 9.4.3` or later.
CVE-2026-56150 Vulnerability in dos (CVE-2026-56150)
vulnerability in dos (CVE-2026-56150). Risk of unauthorized operations or information disclosure.
CVE-2026-49087 Vulnerability in dos (CVE-2026-49087)
vulnerability in dos (CVE-2026-49087). Risk of unauthorized operations or information disclosure.
CVE-2026-20216 Vulnerability in dos (CVE-2026-20216)
vulnerability in dos (CVE-2026-20216). Risk of unauthorized operations or information disclosure.
CVE-2026-14330 Multiple unbounded alloca() calls in the PulseAudio protocol server.
Multiple unbounded alloca() calls in the PulseAudio protocol server.
CVE-2025-36319 Vulnerability in ibm (CVE-2025-36319)
vulnerability in ibm (CVE-2025-36319). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →