Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-82620 |
|
Vulnerability in sqli (CVE-2026-82620)
vulnerability in sqli (CVE-2026-82620). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82614 |
|
Vulnerability in sqli (CVE-2026-82614)
vulnerability in sqli (CVE-2026-82614). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82615 |
|
Vulnerability in sqli (CVE-2026-82615)
vulnerability in sqli (CVE-2026-82615). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82611 |
|
Vulnerability in c (CVE-2026-82611)
vulnerability in c (CVE-2026-82611). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82612 |
|
Vulnerability in sqli (CVE-2026-82612)
vulnerability in sqli (CVE-2026-82612). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82613 |
|
Vulnerability in sqli (CVE-2026-82613)
vulnerability in sqli (CVE-2026-82613). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82610 |
|
Vulnerability in sqli (CVE-2026-82610)
vulnerability in sqli (CVE-2026-82610). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82609 |
|
Vulnerability in sqli (CVE-2026-82609)
vulnerability in sqli (CVE-2026-82609). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82673 |
|
Path Traversal in path-traversal (CVE-2026-82673)
path traversal in path-traversal (CVE-2026-82673). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77850 |
|
Cross-Site Scripting (XSS) in CVE-2026-77850 (CVE-2026-77850)
cross-site scripting in CVE-2026-77850 (CVE-2026-77850). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-81853 |
|
Vulnerability in deserialization (CVE-2026-81853)
vulnerability in deserialization (CVE-2026-81853). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82603 |
|
Path Traversal in path-traversal (CVE-2026-82603)
path traversal in path-traversal (CVE-2026-82603). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82600 |
|
Vulnerability in sqli (CVE-2026-82600)
vulnerability in sqli (CVE-2026-82600). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82601 |
|
Cross-Site Scripting (XSS) in CVE-2026-82601 (CVE-2026-82601)
cross-site scripting in CVE-2026-82601 (CVE-2026-82601). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82599 |
|
Path Traversal in path-traversal (CVE-2026-82599)
path traversal in path-traversal (CVE-2026-82599). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82589 |
|
Vulnerability in c (CVE-2026-82589)
vulnerability in c (CVE-2026-82589). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56718 |
|
Path Traversal in path-traversal (CVE-2026-56718)
path traversal in path-traversal (CVE-2026-56718). Confidential information can be exposed externally.
|
| CVE-2026-82554 |
|
Cross-Site Scripting (XSS) in CVE-2026-82554 (CVE-2026-82554)
cross-site scripting in CVE-2026-82554 (CVE-2026-82554). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82552 |
|
Vulnerability in c (CVE-2026-82552)
vulnerability in c (CVE-2026-82552). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-81319 |
|
Unsafe Deserialization in deserialization (CVE-2026-81319)
vulnerability in deserialization (CVE-2026-81319). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82649 |
|
Vulnerability in privilege-escalation (CVE-2026-82649)
vulnerability in privilege-escalation (CVE-2026-82649). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82655 |
|
SQL Injection in sqli (CVE-2026-82655)
SQL injection in sqli (CVE-2026-82655). Confidential information can be exposed externally.
|
| CVE-2026-82648 |
|
Vulnerability in ssrf (CVE-2026-82648)
vulnerability in ssrf (CVE-2026-82648). Confidential information can be exposed externally.
|
| CVE-2026-82650 |
|
Vulnerability in path-traversal (CVE-2026-82650)
vulnerability in path-traversal (CVE-2026-82650). Confidential information can be exposed externally. Exploitable via `POST /api/template/render`. Mitigation: upgrade to `3.8.1` or later.
|
| CVE-2026-82656 |
|
Path Traversal in path-traversal (CVE-2026-82656)
path traversal in path-traversal (CVE-2026-82656). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82653 |
|
Cross-Site Scripting (XSS) in CVE-2026-82653 (CVE-2026-82653)
cross-site scripting in CVE-2026-82653 (CVE-2026-82653). Confidential information can be exposed externally.
|
| CVE-2026-82646 |
|
Cross-Site Scripting (XSS) in csrf (CVE-2026-82646)
cross-site scripting in csrf (CVE-2026-82646). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82545 |
|
Vulnerability in sqli (CVE-2026-82545)
vulnerability in sqli (CVE-2026-82545). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82635 |
|
Path Traversal in path-traversal (CVE-2026-82635)
path traversal in path-traversal (CVE-2026-82635). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82540 |
|
Vulnerability in sqli (CVE-2026-82540)
vulnerability in sqli (CVE-2026-82540). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82541 |
|
Vulnerability in sqli (CVE-2026-82541)
vulnerability in sqli (CVE-2026-82541). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82488 |
|
Cross-Site Scripting (XSS) in CVE-2026-82488 (CVE-2026-82488)
cross-site scripting in CVE-2026-82488 (CVE-2026-82488). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82484 |
|
Vulnerability in sqli (CVE-2026-82484)
vulnerability in sqli (CVE-2026-82484). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82485 |
|
Vulnerability in sqli (CVE-2026-82485)
vulnerability in sqli (CVE-2026-82485). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82483 |
|
Cross-Site Scripting (XSS) in CVE-2026-82483 (CVE-2026-82483)
cross-site scripting in CVE-2026-82483 (CVE-2026-82483). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82482 |
|
Cross-Site Scripting (XSS) in CVE-2026-82482 (CVE-2026-82482)
cross-site scripting in CVE-2026-82482 (CVE-2026-82482). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-81660 |
|
Vulnerability in wordpress (CVE-2026-81660)
vulnerability in wordpress (CVE-2026-81660). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78364 |
|
Vulnerability in wordpress (CVE-2026-78364)
vulnerability in wordpress (CVE-2026-78364). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76585 |
|
Vulnerability in wordpress (CVE-2026-76585)
vulnerability in wordpress (CVE-2026-76585). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15980 |
|
Vulnerability in wordpress (CVE-2026-15980)
vulnerability in wordpress (CVE-2026-15980). Successful exploitation can lead to full system takeover.
|
| CVE-2026-77831 |
|
Vulnerability in dos (CVE-2026-77831)
vulnerability in dos (CVE-2026-77831). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82424 |
|
Vulnerability in sqli (CVE-2026-82424)
vulnerability in sqli (CVE-2026-82424). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82422 |
|
Vulnerability in sqli (CVE-2026-82422)
vulnerability in sqli (CVE-2026-82422). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82421 |
|
Vulnerability in sqli (CVE-2026-82421)
vulnerability in sqli (CVE-2026-82421). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15369 |
|
Privilege Escalation in wordpress (CVE-2026-15369)
vulnerability in wordpress (CVE-2026-15369). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75807 |
|
Authentication Bypass in wordpress (CVE-2026-75807)
authentication bypass in wordpress (CVE-2026-75807). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82475 |
|
iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow...
iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow...
|
| CVE-2026-82476 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-82476)
SSRF in ssrf (CVE-2026-82476). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82468 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-82468)
vulnerability in csrf (CVE-2026-82468). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82472 |
|
Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without...
Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without...
|