Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2026-82620 Vulnerability in sqli (CVE-2026-82620)
vulnerability in sqli (CVE-2026-82620). Risk of unauthorized operations or information disclosure.
CVE-2026-82614 Vulnerability in sqli (CVE-2026-82614)
vulnerability in sqli (CVE-2026-82614). Risk of unauthorized operations or information disclosure.
CVE-2026-82615 Vulnerability in sqli (CVE-2026-82615)
vulnerability in sqli (CVE-2026-82615). Risk of unauthorized operations or information disclosure.
CVE-2026-82611 Vulnerability in c (CVE-2026-82611)
vulnerability in c (CVE-2026-82611). Risk of unauthorized operations or information disclosure.
CVE-2026-82612 Vulnerability in sqli (CVE-2026-82612)
vulnerability in sqli (CVE-2026-82612). Risk of unauthorized operations or information disclosure.
CVE-2026-82613 Vulnerability in sqli (CVE-2026-82613)
vulnerability in sqli (CVE-2026-82613). Risk of unauthorized operations or information disclosure.
CVE-2026-82610 Vulnerability in sqli (CVE-2026-82610)
vulnerability in sqli (CVE-2026-82610). Risk of unauthorized operations or information disclosure.
CVE-2026-82609 Vulnerability in sqli (CVE-2026-82609)
vulnerability in sqli (CVE-2026-82609). Risk of unauthorized operations or information disclosure.
CVE-2026-82673 Path Traversal in path-traversal (CVE-2026-82673)
path traversal in path-traversal (CVE-2026-82673). Risk of unauthorized operations or information disclosure.
CVE-2026-77850 Cross-Site Scripting (XSS) in CVE-2026-77850 (CVE-2026-77850)
cross-site scripting in CVE-2026-77850 (CVE-2026-77850). Risk of unauthorized operations or information disclosure.
CVE-2026-81853 Vulnerability in deserialization (CVE-2026-81853)
vulnerability in deserialization (CVE-2026-81853). Risk of unauthorized operations or information disclosure.
CVE-2026-82603 Path Traversal in path-traversal (CVE-2026-82603)
path traversal in path-traversal (CVE-2026-82603). Risk of unauthorized operations or information disclosure.
CVE-2026-82600 Vulnerability in sqli (CVE-2026-82600)
vulnerability in sqli (CVE-2026-82600). Risk of unauthorized operations or information disclosure.
CVE-2026-82601 Cross-Site Scripting (XSS) in CVE-2026-82601 (CVE-2026-82601)
cross-site scripting in CVE-2026-82601 (CVE-2026-82601). Risk of unauthorized operations or information disclosure.
CVE-2026-82599 Path Traversal in path-traversal (CVE-2026-82599)
path traversal in path-traversal (CVE-2026-82599). Risk of unauthorized operations or information disclosure.
CVE-2026-82589 Vulnerability in c (CVE-2026-82589)
vulnerability in c (CVE-2026-82589). Risk of unauthorized operations or information disclosure.
CVE-2026-56718 Path Traversal in path-traversal (CVE-2026-56718)
path traversal in path-traversal (CVE-2026-56718). Confidential information can be exposed externally.
CVE-2026-82554 Cross-Site Scripting (XSS) in CVE-2026-82554 (CVE-2026-82554)
cross-site scripting in CVE-2026-82554 (CVE-2026-82554). Risk of unauthorized operations or information disclosure.
CVE-2026-82552 Vulnerability in c (CVE-2026-82552)
vulnerability in c (CVE-2026-82552). Risk of unauthorized operations or information disclosure.
CVE-2026-81319 Unsafe Deserialization in deserialization (CVE-2026-81319)
vulnerability in deserialization (CVE-2026-81319). Risk of unauthorized operations or information disclosure.
CVE-2026-82649 Vulnerability in privilege-escalation (CVE-2026-82649)
vulnerability in privilege-escalation (CVE-2026-82649). Risk of unauthorized operations or information disclosure.
CVE-2026-82655 SQL Injection in sqli (CVE-2026-82655)
SQL injection in sqli (CVE-2026-82655). Confidential information can be exposed externally.
CVE-2026-82648 Vulnerability in ssrf (CVE-2026-82648)
vulnerability in ssrf (CVE-2026-82648). Confidential information can be exposed externally.
CVE-2026-82650 Vulnerability in path-traversal (CVE-2026-82650)
vulnerability in path-traversal (CVE-2026-82650). Confidential information can be exposed externally. Exploitable via `POST /api/template/render`. Mitigation: upgrade to `3.8.1` or later.
CVE-2026-82656 Path Traversal in path-traversal (CVE-2026-82656)
path traversal in path-traversal (CVE-2026-82656). Risk of unauthorized operations or information disclosure.
CVE-2026-82653 Cross-Site Scripting (XSS) in CVE-2026-82653 (CVE-2026-82653)
cross-site scripting in CVE-2026-82653 (CVE-2026-82653). Confidential information can be exposed externally.
CVE-2026-82646 Cross-Site Scripting (XSS) in csrf (CVE-2026-82646)
cross-site scripting in csrf (CVE-2026-82646). Risk of unauthorized operations or information disclosure.
CVE-2026-82545 Vulnerability in sqli (CVE-2026-82545)
vulnerability in sqli (CVE-2026-82545). Risk of unauthorized operations or information disclosure.
CVE-2026-82635 Path Traversal in path-traversal (CVE-2026-82635)
path traversal in path-traversal (CVE-2026-82635). Successful exploitation can lead to full system takeover.
CVE-2026-82540 Vulnerability in sqli (CVE-2026-82540)
vulnerability in sqli (CVE-2026-82540). Risk of unauthorized operations or information disclosure.
CVE-2026-82541 Vulnerability in sqli (CVE-2026-82541)
vulnerability in sqli (CVE-2026-82541). Risk of unauthorized operations or information disclosure.
CVE-2026-82488 Cross-Site Scripting (XSS) in CVE-2026-82488 (CVE-2026-82488)
cross-site scripting in CVE-2026-82488 (CVE-2026-82488). Risk of unauthorized operations or information disclosure.
CVE-2026-82484 Vulnerability in sqli (CVE-2026-82484)
vulnerability in sqli (CVE-2026-82484). Risk of unauthorized operations or information disclosure.
CVE-2026-82485 Vulnerability in sqli (CVE-2026-82485)
vulnerability in sqli (CVE-2026-82485). Risk of unauthorized operations or information disclosure.
CVE-2026-82483 Cross-Site Scripting (XSS) in CVE-2026-82483 (CVE-2026-82483)
cross-site scripting in CVE-2026-82483 (CVE-2026-82483). Risk of unauthorized operations or information disclosure.
CVE-2026-82482 Cross-Site Scripting (XSS) in CVE-2026-82482 (CVE-2026-82482)
cross-site scripting in CVE-2026-82482 (CVE-2026-82482). Risk of unauthorized operations or information disclosure.
CVE-2026-81660 Vulnerability in wordpress (CVE-2026-81660)
vulnerability in wordpress (CVE-2026-81660). Risk of unauthorized operations or information disclosure.
CVE-2026-78364 Vulnerability in wordpress (CVE-2026-78364)
vulnerability in wordpress (CVE-2026-78364). Risk of unauthorized operations or information disclosure.
CVE-2026-76585 Vulnerability in wordpress (CVE-2026-76585)
vulnerability in wordpress (CVE-2026-76585). Risk of unauthorized operations or information disclosure.
CVE-2026-15980 Vulnerability in wordpress (CVE-2026-15980)
vulnerability in wordpress (CVE-2026-15980). Successful exploitation can lead to full system takeover.
CVE-2026-77831 Vulnerability in dos (CVE-2026-77831)
vulnerability in dos (CVE-2026-77831). Risk of unauthorized operations or information disclosure.
CVE-2026-82424 Vulnerability in sqli (CVE-2026-82424)
vulnerability in sqli (CVE-2026-82424). Risk of unauthorized operations or information disclosure.
CVE-2026-82422 Vulnerability in sqli (CVE-2026-82422)
vulnerability in sqli (CVE-2026-82422). Risk of unauthorized operations or information disclosure.
CVE-2026-82421 Vulnerability in sqli (CVE-2026-82421)
vulnerability in sqli (CVE-2026-82421). Risk of unauthorized operations or information disclosure.
CVE-2026-15369 Privilege Escalation in wordpress (CVE-2026-15369)
vulnerability in wordpress (CVE-2026-15369). Successful exploitation can lead to full system takeover.
CVE-2026-75807 Authentication Bypass in wordpress (CVE-2026-75807)
authentication bypass in wordpress (CVE-2026-75807). Successful exploitation can lead to full system takeover.
CVE-2026-82475 iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow...
iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow...
CVE-2026-82476 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-82476)
SSRF in ssrf (CVE-2026-82476). Risk of unauthorized operations or information disclosure.
CVE-2026-82468 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-82468)
vulnerability in csrf (CVE-2026-82468). Risk of unauthorized operations or information disclosure.
CVE-2026-82472 Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without...
Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without...

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →