Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2026-9451 Vulnerability in sqli (CVE-2026-9451)
vulnerability in sqli (CVE-2026-9451). Risk of unauthorized operations or information disclosure.
CVE-2026-9449 Vulnerability in sqli (CVE-2026-9449)
vulnerability in sqli (CVE-2026-9449). Risk of unauthorized operations or information disclosure.
CVE-2026-9450 Vulnerability in sqli (CVE-2026-9450)
vulnerability in sqli (CVE-2026-9450). Risk of unauthorized operations or information disclosure.
CVE-2026-7766 Path Traversal in path-traversal (CVE-2026-7766)
path traversal in path-traversal (CVE-2026-7766). Risk of unauthorized operations or information disclosure.
CVE-2026-9058 Vulnerability in CVE-2026-9058 (CVE-2026-9058)
vulnerability in CVE-2026-9058 (CVE-2026-9058). Risk of unauthorized operations or information disclosure.
CVE-2026-9446 Vulnerability in sqli (CVE-2026-9446)
vulnerability in sqli (CVE-2026-9446). Risk of unauthorized operations or information disclosure.
CVE-2026-9444 Vulnerability in sqli (CVE-2026-9444)
vulnerability in sqli (CVE-2026-9444). Risk of unauthorized operations or information disclosure.
CVE-2026-9447 Vulnerability in sqli (CVE-2026-9447)
vulnerability in sqli (CVE-2026-9447). Risk of unauthorized operations or information disclosure.
CVE-2026-9448 Cross-Site Scripting (XSS) in CVE-2026-9448 (CVE-2026-9448)
cross-site scripting in CVE-2026-9448 (CVE-2026-9448). Risk of unauthorized operations or information disclosure.
CVE-2026-45249 Cross-Site Scripting (XSS) in echarts (CVE-2026-45249)
cross-site scripting in echarts (CVE-2026-45249). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.1.0` or later.
CVE-2026-4915 Vulnerability in github.com/mattermost/mattermost-server (CVE-2026-4915)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-4915). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.11.15` or later.
CVE-2026-9489 Path Traversal in privilege-escalation (CVE-2026-9489)
path traversal in privilege-escalation (CVE-2026-9489). Risk of unauthorized operations or information disclosure.
CVE-2026-9418 Cross-Site Scripting (XSS) in CVE-2026-9418 (CVE-2026-9418)
cross-site scripting in CVE-2026-9418 (CVE-2026-9418). Risk of unauthorized operations or information disclosure.
CVE-2026-9419 Cross-Site Scripting (XSS) in CVE-2026-9419 (CVE-2026-9419)
cross-site scripting in CVE-2026-9419 (CVE-2026-9419). Risk of unauthorized operations or information disclosure.
CVE-2026-9417 Cross-Site Scripting (XSS) in CVE-2026-9417 (CVE-2026-9417)
cross-site scripting in CVE-2026-9417 (CVE-2026-9417). Risk of unauthorized operations or information disclosure.
CVE-2026-9416 Cross-Site Scripting (XSS) in c (CVE-2026-9416)
cross-site scripting in c (CVE-2026-9416). Risk of unauthorized operations or information disclosure.
CVE-2026-9411 Vulnerability in sqli (CVE-2026-9411)
vulnerability in sqli (CVE-2026-9411). Risk of unauthorized operations or information disclosure.
CVE-2026-9413 Cross-Site Scripting (XSS) in CVE-2026-9413 (CVE-2026-9413)
cross-site scripting in CVE-2026-9413 (CVE-2026-9413). Risk of unauthorized operations or information disclosure.
CVE-2026-9415 Cross-Site Scripting (XSS) in CVE-2026-9415 (CVE-2026-9415)
cross-site scripting in CVE-2026-9415 (CVE-2026-9415). Risk of unauthorized operations or information disclosure.
CVE-2026-9414 Cross-Site Scripting (XSS) in CVE-2026-9414 (CVE-2026-9414)
cross-site scripting in CVE-2026-9414 (CVE-2026-9414). Risk of unauthorized operations or information disclosure.
CVE-2026-9398 Authentication Bypass in CVE-2026-9398 (CVE-2026-9398)
authentication bypass in CVE-2026-9398 (CVE-2026-9398). Risk of unauthorized operations or information disclosure.
CVE-2026-4372 Vulnerability in transformers (CVE-2026-4372)
vulnerability in transformers (CVE-2026-4372). Successful exploitation can lead to full system takeover. Exploitable via ``_attn_implementation_internal``. Mitigation: upgrade to `5.3.0` or later.
CVE-2026-9383 Vulnerability in sqli (CVE-2026-9383)
vulnerability in sqli (CVE-2026-9383). Risk of unauthorized operations or information disclosure.
CVE-2026-9377 Cross-Site Scripting (XSS) in CVE-2026-9377 (CVE-2026-9377)
cross-site scripting in CVE-2026-9377 (CVE-2026-9377). Risk of unauthorized operations or information disclosure.
CVE-2026-9364 Vulnerability in sqli (CVE-2026-9364)
vulnerability in sqli (CVE-2026-9364). Risk of unauthorized operations or information disclosure.
CVE-2026-9356 Vulnerability in sqli (CVE-2026-9356)
vulnerability in sqli (CVE-2026-9356). Risk of unauthorized operations or information disclosure.
CVE-2026-9355 Vulnerability in sqli (CVE-2026-9355)
vulnerability in sqli (CVE-2026-9355). Risk of unauthorized operations or information disclosure.
CVE-2026-9357 Cross-Site Scripting (XSS) in CVE-2026-9357 (CVE-2026-9357)
cross-site scripting in CVE-2026-9357 (CVE-2026-9357). Risk of unauthorized operations or information disclosure.
CVE-2026-9358 Vulnerability in dos (CVE-2026-9358)
vulnerability in dos (CVE-2026-9358). Risk of unauthorized operations or information disclosure.
CVE-2026-3515 Vulnerability in prefect (CVE-2026-3515)
vulnerability in prefect (CVE-2026-3515). Confidential information can be exposed externally. Exploitable via ``GitHubRepository``.
CVE-2026-9351 Path Traversal in path-traversal (CVE-2026-9351)
path traversal in path-traversal (CVE-2026-9351). Risk of unauthorized operations or information disclosure.
CVE-2026-9342 Vulnerability in sqli (CVE-2026-9342)
vulnerability in sqli (CVE-2026-9342). Risk of unauthorized operations or information disclosure.
CVE-2018-25357 Code Injection in dolibarr/dolibarr (CVE-2018-25357)
code injection in dolibarr/dolibarr (CVE-2018-25357). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.0.8` or later.
CVE-2018-25347 SQL Injection in wordpress (CVE-2018-25347)
SQL injection in wordpress (CVE-2018-25347). Confidential information can be exposed externally.
CVE-2018-25348 SQL Injection in sqli (CVE-2018-25348)
SQL injection in sqli (CVE-2018-25348). Confidential information can be exposed externally.
CVE-2018-25351 SQL Injection in sqli (CVE-2018-25351)
SQL injection in sqli (CVE-2018-25351). Confidential information can be exposed externally.
CVE-2018-25352 SQL Injection in wordpress (CVE-2018-25352)
SQL injection in wordpress (CVE-2018-25352). Confidential information can be exposed externally.
CVE-2018-25349 Cross-Site Scripting (XSS) in CVE-2018-25349 (CVE-2018-25349)
cross-site scripting in CVE-2018-25349 (CVE-2018-25349). Risk of unauthorized operations or information disclosure.
CVE-2018-25346 SQL Injection in wordpress (CVE-2018-25346)
SQL injection in wordpress (CVE-2018-25346). Confidential information can be exposed externally.
CVE-2018-25340 SQL Injection in sqli (CVE-2018-25340)
SQL injection in sqli (CVE-2018-25340). Confidential information can be exposed externally.
CVE-2026-9305 Vulnerability in sqli (CVE-2026-9305)
vulnerability in sqli (CVE-2026-9305). Risk of unauthorized operations or information disclosure.
CVE-2018-25342 SQL Injection in sqli (CVE-2018-25342)
SQL injection in sqli (CVE-2018-25342). Confidential information can be exposed externally.
CVE-2018-25341 SQL Injection in sqli (CVE-2018-25341)
SQL injection in sqli (CVE-2018-25341). Confidential information can be exposed externally.
CVE-2026-6419 Privilege Escalation in wordpress (CVE-2026-6419)
vulnerability in wordpress (CVE-2026-6419). Successful exploitation can lead to full system takeover.
CVE-2026-6895 Privilege Escalation in wordpress (CVE-2026-6895)
vulnerability in wordpress (CVE-2026-6895). Successful exploitation can lead to full system takeover.
CVE-2026-45659 KEV [KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-45659)
vulnerability in Microsoft deserialization (CVE-2026-45659). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-41104 Unsafe Deserialization in deserialization (CVE-2026-41104)
vulnerability in deserialization (CVE-2026-41104). Successful exploitation can lead to full system takeover.
CVE-2026-33843 Vulnerability in microsoft (CVE-2026-33843)
vulnerability in microsoft (CVE-2026-33843). Confidential information can be exposed externally.
CVE-2026-36226 Cross-Site Scripting (XSS) in CVE-2026-36226 (CVE-2026-36226)
cross-site scripting in CVE-2026-36226 (CVE-2026-36226). Risk of unauthorized operations or information disclosure.
CVE-2026-36227 Path Traversal in path-traversal (CVE-2026-36227)
path traversal in path-traversal (CVE-2026-36227). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →