Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-15276 |
|
Vulnerability in dos (CVE-2026-15276)
vulnerability in dos (CVE-2026-15276). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33802 |
|
Vulnerability in dos (CVE-2026-33802)
vulnerability in dos (CVE-2026-33802). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38076 |
|
Vulnerability in dos (CVE-2026-38076)
vulnerability in dos (CVE-2026-38076). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0276 |
|
Privilege Escalation in privilege-escalation (CVE-2026-0276)
vulnerability in privilege-escalation (CVE-2026-0276). Successful exploitation can lead to full system takeover.
|
| CVE-2026-0275 |
|
Privilege Escalation in privilege-escalation (CVE-2026-0275)
vulnerability in privilege-escalation (CVE-2026-0275). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33800 |
|
Vulnerability in dos (CVE-2026-33800)
vulnerability in dos (CVE-2026-33800). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-31267 |
|
Vulnerability in dos (CVE-2026-31267)
vulnerability in dos (CVE-2026-31267). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33794 |
|
Vulnerability in dos (CVE-2026-33794)
vulnerability in dos (CVE-2026-33794). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33801 |
|
Vulnerability in dos (CVE-2026-33801)
vulnerability in dos (CVE-2026-33801). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60120 |
|
Cross-Site Scripting (XSS) in vue (CVE-2026-60120)
cross-site scripting in vue (CVE-2026-60120). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0285 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-0285)
SSRF in ssrf (CVE-2026-0285). Data can be tampered with by attackers.
|
| CVE-2026-0279 |
|
Cross-Site Scripting (XSS) in paloaltonetworks (CVE-2026-0279)
cross-site scripting in paloaltonetworks (CVE-2026-0279). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0283 |
|
Vulnerability in paloaltonetworks (CVE-2026-0283)
vulnerability in paloaltonetworks (CVE-2026-0283). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0287 |
|
Vulnerability in dos (CVE-2026-0287)
vulnerability in dos (CVE-2026-0287). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55208 |
|
SQL Injection in pimcore/studio-backend-bundle (CVE-2026-55208)
SQL injection in pimcore/studio-backend-bundle (CVE-2026-55208). Confidential information can be exposed externally. Exploitable via `POST /pimcore-studio/api/website-settings`. Mitigation: upgrade to `2026.1.6` or later.
|
| CVE-2026-21901 |
|
Vulnerability in dos (CVE-2026-21901)
vulnerability in dos (CVE-2026-21901). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15202 |
|
Cross-Site Scripting (XSS) in CVE-2026-15202 (CVE-2026-15202)
cross-site scripting in CVE-2026-15202 (CVE-2026-15202). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15204 |
|
Path Traversal in path-traversal (CVE-2026-15204)
path traversal in path-traversal (CVE-2026-15204). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53987 |
|
Cross-Site Scripting (XSS) in CVE-2026-53987 (CVE-2026-53987)
cross-site scripting in CVE-2026-53987 (CVE-2026-53987). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51603 |
|
Vulnerability in dos (CVE-2026-51603)
vulnerability in dos (CVE-2026-51603). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51598 |
|
Vulnerability in dos (CVE-2026-51598)
vulnerability in dos (CVE-2026-51598). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51602 |
|
Vulnerability in dos (CVE-2026-51602)
vulnerability in dos (CVE-2026-51602). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51605 |
|
Vulnerability in dos (CVE-2026-51605)
vulnerability in dos (CVE-2026-51605). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51604 |
|
Vulnerability in dos (CVE-2026-51604)
vulnerability in dos (CVE-2026-51604). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15190 |
|
Vulnerability in sqli (CVE-2026-15190)
vulnerability in sqli (CVE-2026-15190). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55420 |
|
OS Command Injection in discourse (CVE-2026-55420)
OS command injection in discourse (CVE-2026-55420). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.6.0` or later.
|
| CVE-2026-54798 |
|
Vulnerability in dos (CVE-2026-54798)
vulnerability in dos (CVE-2026-54798). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60108 |
|
Vulnerability in dos (CVE-2026-60108)
vulnerability in dos (CVE-2026-60108). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5005 |
|
Cross-Site Scripting (XSS) in CVE-2026-5005 (CVE-2026-5005)
cross-site scripting in CVE-2026-5005 (CVE-2026-5005). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56292 |
|
SQL Injection in sqli (CVE-2026-56292)
SQL injection in sqli (CVE-2026-56292). Confidential information can be exposed externally.
|
| CVE-2026-14261 |
|
Vulnerability in CVE-2026-14261 (CVE-2026-14261)
vulnerability in CVE-2026-14261 (CVE-2026-14261). Confidential information can be exposed externally.
|
| CVE-2026-12116 |
|
Vulnerability in CVE-2026-12116 (CVE-2026-12116)
vulnerability in CVE-2026-12116 (CVE-2026-12116). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53727 |
|
SSRF (Server-Side Request Forgery) in css_parser (CVE-2026-53727)
SSRF in css_parser (CVE-2026-53727). Confidential information can be exposed externally. Exploitable via ``css_parser``. Mitigation: upgrade to `3.0.0` or later.
|
| CVE-2026-49485 |
|
Vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-49485)
vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-49485). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.9.4.2` or later.
|
| CVE-2026-49477 |
|
Vulnerability in soupsieve (CVE-2026-49477)
vulnerability in soupsieve (CVE-2026-49477). Risk of unauthorized operations or information disclosure. Exploitable via ``VALUE``. Mitigation: upgrade to `2.8.4` or later.
|
| CVE-2026-49476 |
|
Vulnerability in soupsieve (CVE-2026-49476)
vulnerability in soupsieve (CVE-2026-49476). Risk of unauthorized operations or information disclosure. Exploitable via ``CSSSelector``. Mitigation: upgrade to `2.8.4` or later.
|
| CVE-2026-56288 |
|
Vulnerability in dos (CVE-2026-56288)
vulnerability in dos (CVE-2026-56288). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56289 |
|
Vulnerability in dos (CVE-2026-56289)
vulnerability in dos (CVE-2026-56289). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59691 |
|
Out-of-Bounds Write in dos (CVE-2026-59691)
out-of-bounds write in dos (CVE-2026-59691). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59692 |
|
Vulnerability in dos (CVE-2026-59692)
vulnerability in dos (CVE-2026-59692). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14372 |
|
Path Traversal in wordpress (CVE-2026-14372)
path traversal in wordpress (CVE-2026-14372). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56291 KEV |
|
[KEV] Unrestricted File Upload in Balbooa forms (CVE-2026-56291)
vulnerability in Balbooa forms (CVE-2026-56291). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-9253 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-9253)
cross-site scripting in wordpress (CVE-2026-9253). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50644 |
|
SQL Injection in sqli (CVE-2026-50644)
SQL injection in sqli (CVE-2026-50644). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15158 |
|
Unrestricted File Upload in wordpress (CVE-2026-15158)
vulnerability in wordpress (CVE-2026-15158). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13441 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13441)
cross-site scripting in wordpress (CVE-2026-13441). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5793 |
|
Cross-Site Scripting (XSS) in CVE-2026-5793 (CVE-2026-5793)
cross-site scripting in CVE-2026-5793 (CVE-2026-5793). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2342 |
|
Cross-Site Scripting (XSS) in CVE-2026-2342 (CVE-2026-2342)
cross-site scripting in CVE-2026-2342 (CVE-2026-2342). Confidential information can be exposed externally.
|
| CVE-2026-5955 |
|
SQL Injection in sqli (CVE-2026-5955)
SQL injection in sqli (CVE-2026-5955). Successful exploitation can lead to full system takeover.
|
| CVE-2026-1365 |
|
Vulnerability in CVE-2026-1365 (CVE-2026-1365)
vulnerability in CVE-2026-1365 (CVE-2026-1365). Confidential information can be exposed externally.
|