Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2026-15276 Vulnerability in dos (CVE-2026-15276)
vulnerability in dos (CVE-2026-15276). Risk of unauthorized operations or information disclosure.
CVE-2026-33802 Vulnerability in dos (CVE-2026-33802)
vulnerability in dos (CVE-2026-33802). Risk of unauthorized operations or information disclosure.
CVE-2026-38076 Vulnerability in dos (CVE-2026-38076)
vulnerability in dos (CVE-2026-38076). Risk of unauthorized operations or information disclosure.
CVE-2026-0276 Privilege Escalation in privilege-escalation (CVE-2026-0276)
vulnerability in privilege-escalation (CVE-2026-0276). Successful exploitation can lead to full system takeover.
CVE-2026-0275 Privilege Escalation in privilege-escalation (CVE-2026-0275)
vulnerability in privilege-escalation (CVE-2026-0275). Successful exploitation can lead to full system takeover.
CVE-2026-33800 Vulnerability in dos (CVE-2026-33800)
vulnerability in dos (CVE-2026-33800). Risk of unauthorized operations or information disclosure.
CVE-2026-31267 Vulnerability in dos (CVE-2026-31267)
vulnerability in dos (CVE-2026-31267). Risk of unauthorized operations or information disclosure.
CVE-2026-33794 Vulnerability in dos (CVE-2026-33794)
vulnerability in dos (CVE-2026-33794). Risk of unauthorized operations or information disclosure.
CVE-2026-33801 Vulnerability in dos (CVE-2026-33801)
vulnerability in dos (CVE-2026-33801). Risk of unauthorized operations or information disclosure.
CVE-2026-60120 Cross-Site Scripting (XSS) in vue (CVE-2026-60120)
cross-site scripting in vue (CVE-2026-60120). Risk of unauthorized operations or information disclosure.
CVE-2026-0285 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-0285)
SSRF in ssrf (CVE-2026-0285). Data can be tampered with by attackers.
CVE-2026-0279 Cross-Site Scripting (XSS) in paloaltonetworks (CVE-2026-0279)
cross-site scripting in paloaltonetworks (CVE-2026-0279). Risk of unauthorized operations or information disclosure.
CVE-2026-0283 Vulnerability in paloaltonetworks (CVE-2026-0283)
vulnerability in paloaltonetworks (CVE-2026-0283). Risk of unauthorized operations or information disclosure.
CVE-2026-0287 Vulnerability in dos (CVE-2026-0287)
vulnerability in dos (CVE-2026-0287). Risk of unauthorized operations or information disclosure.
CVE-2026-55208 SQL Injection in pimcore/studio-backend-bundle (CVE-2026-55208)
SQL injection in pimcore/studio-backend-bundle (CVE-2026-55208). Confidential information can be exposed externally. Exploitable via `POST /pimcore-studio/api/website-settings`. Mitigation: upgrade to `2026.1.6` or later.
CVE-2026-21901 Vulnerability in dos (CVE-2026-21901)
vulnerability in dos (CVE-2026-21901). Risk of unauthorized operations or information disclosure.
CVE-2026-15202 Cross-Site Scripting (XSS) in CVE-2026-15202 (CVE-2026-15202)
cross-site scripting in CVE-2026-15202 (CVE-2026-15202). Risk of unauthorized operations or information disclosure.
CVE-2026-15204 Path Traversal in path-traversal (CVE-2026-15204)
path traversal in path-traversal (CVE-2026-15204). Risk of unauthorized operations or information disclosure.
CVE-2026-53987 Cross-Site Scripting (XSS) in CVE-2026-53987 (CVE-2026-53987)
cross-site scripting in CVE-2026-53987 (CVE-2026-53987). Successful exploitation can lead to full system takeover.
CVE-2026-51603 Vulnerability in dos (CVE-2026-51603)
vulnerability in dos (CVE-2026-51603). Risk of unauthorized operations or information disclosure.
CVE-2026-51598 Vulnerability in dos (CVE-2026-51598)
vulnerability in dos (CVE-2026-51598). Risk of unauthorized operations or information disclosure.
CVE-2026-51602 Vulnerability in dos (CVE-2026-51602)
vulnerability in dos (CVE-2026-51602). Risk of unauthorized operations or information disclosure.
CVE-2026-51605 Vulnerability in dos (CVE-2026-51605)
vulnerability in dos (CVE-2026-51605). Risk of unauthorized operations or information disclosure.
CVE-2026-51604 Vulnerability in dos (CVE-2026-51604)
vulnerability in dos (CVE-2026-51604). Risk of unauthorized operations or information disclosure.
CVE-2026-15190 Vulnerability in sqli (CVE-2026-15190)
vulnerability in sqli (CVE-2026-15190). Risk of unauthorized operations or information disclosure.
CVE-2026-55420 OS Command Injection in discourse (CVE-2026-55420)
OS command injection in discourse (CVE-2026-55420). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.6.0` or later.
CVE-2026-54798 Vulnerability in dos (CVE-2026-54798)
vulnerability in dos (CVE-2026-54798). Risk of unauthorized operations or information disclosure.
CVE-2026-60108 Vulnerability in dos (CVE-2026-60108)
vulnerability in dos (CVE-2026-60108). Risk of unauthorized operations or information disclosure.
CVE-2026-5005 Cross-Site Scripting (XSS) in CVE-2026-5005 (CVE-2026-5005)
cross-site scripting in CVE-2026-5005 (CVE-2026-5005). Risk of unauthorized operations or information disclosure.
CVE-2026-56292 SQL Injection in sqli (CVE-2026-56292)
SQL injection in sqli (CVE-2026-56292). Confidential information can be exposed externally.
CVE-2026-14261 Vulnerability in CVE-2026-14261 (CVE-2026-14261)
vulnerability in CVE-2026-14261 (CVE-2026-14261). Confidential information can be exposed externally.
CVE-2026-12116 Vulnerability in CVE-2026-12116 (CVE-2026-12116)
vulnerability in CVE-2026-12116 (CVE-2026-12116). Successful exploitation can lead to full system takeover.
CVE-2026-53727 SSRF (Server-Side Request Forgery) in css_parser (CVE-2026-53727)
SSRF in css_parser (CVE-2026-53727). Confidential information can be exposed externally. Exploitable via ``css_parser``. Mitigation: upgrade to `3.0.0` or later.
CVE-2026-49485 Vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-49485)
vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-49485). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.9.4.2` or later.
CVE-2026-49477 Vulnerability in soupsieve (CVE-2026-49477)
vulnerability in soupsieve (CVE-2026-49477). Risk of unauthorized operations or information disclosure. Exploitable via ``VALUE``. Mitigation: upgrade to `2.8.4` or later.
CVE-2026-49476 Vulnerability in soupsieve (CVE-2026-49476)
vulnerability in soupsieve (CVE-2026-49476). Risk of unauthorized operations or information disclosure. Exploitable via ``CSSSelector``. Mitigation: upgrade to `2.8.4` or later.
CVE-2026-56288 Vulnerability in dos (CVE-2026-56288)
vulnerability in dos (CVE-2026-56288). Risk of unauthorized operations or information disclosure.
CVE-2026-56289 Vulnerability in dos (CVE-2026-56289)
vulnerability in dos (CVE-2026-56289). Risk of unauthorized operations or information disclosure.
CVE-2026-59691 Out-of-Bounds Write in dos (CVE-2026-59691)
out-of-bounds write in dos (CVE-2026-59691). Risk of unauthorized operations or information disclosure.
CVE-2026-59692 Vulnerability in dos (CVE-2026-59692)
vulnerability in dos (CVE-2026-59692). Risk of unauthorized operations or information disclosure.
CVE-2026-14372 Path Traversal in wordpress (CVE-2026-14372)
path traversal in wordpress (CVE-2026-14372). Risk of unauthorized operations or information disclosure.
CVE-2026-56291 KEV [KEV] Unrestricted File Upload in Balbooa forms (CVE-2026-56291)
vulnerability in Balbooa forms (CVE-2026-56291). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-9253 Cross-Site Scripting (XSS) in wordpress (CVE-2026-9253)
cross-site scripting in wordpress (CVE-2026-9253). Risk of unauthorized operations or information disclosure.
CVE-2026-50644 SQL Injection in sqli (CVE-2026-50644)
SQL injection in sqli (CVE-2026-50644). Risk of unauthorized operations or information disclosure.
CVE-2026-15158 Unrestricted File Upload in wordpress (CVE-2026-15158)
vulnerability in wordpress (CVE-2026-15158). Successful exploitation can lead to full system takeover.
CVE-2026-13441 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13441)
cross-site scripting in wordpress (CVE-2026-13441). Risk of unauthorized operations or information disclosure.
CVE-2026-5793 Cross-Site Scripting (XSS) in CVE-2026-5793 (CVE-2026-5793)
cross-site scripting in CVE-2026-5793 (CVE-2026-5793). Risk of unauthorized operations or information disclosure.
CVE-2026-2342 Cross-Site Scripting (XSS) in CVE-2026-2342 (CVE-2026-2342)
cross-site scripting in CVE-2026-2342 (CVE-2026-2342). Confidential information can be exposed externally.
CVE-2026-5955 SQL Injection in sqli (CVE-2026-5955)
SQL injection in sqli (CVE-2026-5955). Successful exploitation can lead to full system takeover.
CVE-2026-1365 Vulnerability in CVE-2026-1365 (CVE-2026-1365)
vulnerability in CVE-2026-1365 (CVE-2026-1365). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →