Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-9451 |
|
Vulnerability in sqli (CVE-2026-9451)
vulnerability in sqli (CVE-2026-9451). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9449 |
|
Vulnerability in sqli (CVE-2026-9449)
vulnerability in sqli (CVE-2026-9449). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9450 |
|
Vulnerability in sqli (CVE-2026-9450)
vulnerability in sqli (CVE-2026-9450). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7766 |
|
Path Traversal in path-traversal (CVE-2026-7766)
path traversal in path-traversal (CVE-2026-7766). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9058 |
|
Vulnerability in CVE-2026-9058 (CVE-2026-9058)
vulnerability in CVE-2026-9058 (CVE-2026-9058). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9446 |
|
Vulnerability in sqli (CVE-2026-9446)
vulnerability in sqli (CVE-2026-9446). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9444 |
|
Vulnerability in sqli (CVE-2026-9444)
vulnerability in sqli (CVE-2026-9444). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9447 |
|
Vulnerability in sqli (CVE-2026-9447)
vulnerability in sqli (CVE-2026-9447). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9448 |
|
Cross-Site Scripting (XSS) in CVE-2026-9448 (CVE-2026-9448)
cross-site scripting in CVE-2026-9448 (CVE-2026-9448). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45249 |
|
Cross-Site Scripting (XSS) in echarts (CVE-2026-45249)
cross-site scripting in echarts (CVE-2026-45249). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.1.0` or later.
|
| CVE-2026-4915 |
|
Vulnerability in github.com/mattermost/mattermost-server (CVE-2026-4915)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-4915). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.11.15` or later.
|
| CVE-2026-9489 |
|
Path Traversal in privilege-escalation (CVE-2026-9489)
path traversal in privilege-escalation (CVE-2026-9489). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9418 |
|
Cross-Site Scripting (XSS) in CVE-2026-9418 (CVE-2026-9418)
cross-site scripting in CVE-2026-9418 (CVE-2026-9418). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9419 |
|
Cross-Site Scripting (XSS) in CVE-2026-9419 (CVE-2026-9419)
cross-site scripting in CVE-2026-9419 (CVE-2026-9419). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9417 |
|
Cross-Site Scripting (XSS) in CVE-2026-9417 (CVE-2026-9417)
cross-site scripting in CVE-2026-9417 (CVE-2026-9417). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9416 |
|
Cross-Site Scripting (XSS) in c (CVE-2026-9416)
cross-site scripting in c (CVE-2026-9416). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9411 |
|
Vulnerability in sqli (CVE-2026-9411)
vulnerability in sqli (CVE-2026-9411). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9413 |
|
Cross-Site Scripting (XSS) in CVE-2026-9413 (CVE-2026-9413)
cross-site scripting in CVE-2026-9413 (CVE-2026-9413). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9415 |
|
Cross-Site Scripting (XSS) in CVE-2026-9415 (CVE-2026-9415)
cross-site scripting in CVE-2026-9415 (CVE-2026-9415). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9414 |
|
Cross-Site Scripting (XSS) in CVE-2026-9414 (CVE-2026-9414)
cross-site scripting in CVE-2026-9414 (CVE-2026-9414). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9398 |
|
Authentication Bypass in CVE-2026-9398 (CVE-2026-9398)
authentication bypass in CVE-2026-9398 (CVE-2026-9398). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4372 |
|
Vulnerability in transformers (CVE-2026-4372)
vulnerability in transformers (CVE-2026-4372). Successful exploitation can lead to full system takeover. Exploitable via ``_attn_implementation_internal``. Mitigation: upgrade to `5.3.0` or later.
|
| CVE-2026-9383 |
|
Vulnerability in sqli (CVE-2026-9383)
vulnerability in sqli (CVE-2026-9383). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9377 |
|
Cross-Site Scripting (XSS) in CVE-2026-9377 (CVE-2026-9377)
cross-site scripting in CVE-2026-9377 (CVE-2026-9377). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9364 |
|
Vulnerability in sqli (CVE-2026-9364)
vulnerability in sqli (CVE-2026-9364). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9356 |
|
Vulnerability in sqli (CVE-2026-9356)
vulnerability in sqli (CVE-2026-9356). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9355 |
|
Vulnerability in sqli (CVE-2026-9355)
vulnerability in sqli (CVE-2026-9355). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9357 |
|
Cross-Site Scripting (XSS) in CVE-2026-9357 (CVE-2026-9357)
cross-site scripting in CVE-2026-9357 (CVE-2026-9357). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9358 |
|
Vulnerability in dos (CVE-2026-9358)
vulnerability in dos (CVE-2026-9358). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3515 |
|
Vulnerability in prefect (CVE-2026-3515)
vulnerability in prefect (CVE-2026-3515). Confidential information can be exposed externally. Exploitable via ``GitHubRepository``.
|
| CVE-2026-9351 |
|
Path Traversal in path-traversal (CVE-2026-9351)
path traversal in path-traversal (CVE-2026-9351). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9342 |
|
Vulnerability in sqli (CVE-2026-9342)
vulnerability in sqli (CVE-2026-9342). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-25357 |
|
Code Injection in dolibarr/dolibarr (CVE-2018-25357)
code injection in dolibarr/dolibarr (CVE-2018-25357). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.0.8` or later.
|
| CVE-2018-25347 |
|
SQL Injection in wordpress (CVE-2018-25347)
SQL injection in wordpress (CVE-2018-25347). Confidential information can be exposed externally.
|
| CVE-2018-25348 |
|
SQL Injection in sqli (CVE-2018-25348)
SQL injection in sqli (CVE-2018-25348). Confidential information can be exposed externally.
|
| CVE-2018-25351 |
|
SQL Injection in sqli (CVE-2018-25351)
SQL injection in sqli (CVE-2018-25351). Confidential information can be exposed externally.
|
| CVE-2018-25352 |
|
SQL Injection in wordpress (CVE-2018-25352)
SQL injection in wordpress (CVE-2018-25352). Confidential information can be exposed externally.
|
| CVE-2018-25349 |
|
Cross-Site Scripting (XSS) in CVE-2018-25349 (CVE-2018-25349)
cross-site scripting in CVE-2018-25349 (CVE-2018-25349). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-25346 |
|
SQL Injection in wordpress (CVE-2018-25346)
SQL injection in wordpress (CVE-2018-25346). Confidential information can be exposed externally.
|
| CVE-2018-25340 |
|
SQL Injection in sqli (CVE-2018-25340)
SQL injection in sqli (CVE-2018-25340). Confidential information can be exposed externally.
|
| CVE-2026-9305 |
|
Vulnerability in sqli (CVE-2026-9305)
vulnerability in sqli (CVE-2026-9305). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-25342 |
|
SQL Injection in sqli (CVE-2018-25342)
SQL injection in sqli (CVE-2018-25342). Confidential information can be exposed externally.
|
| CVE-2018-25341 |
|
SQL Injection in sqli (CVE-2018-25341)
SQL injection in sqli (CVE-2018-25341). Confidential information can be exposed externally.
|
| CVE-2026-6419 |
|
Privilege Escalation in wordpress (CVE-2026-6419)
vulnerability in wordpress (CVE-2026-6419). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6895 |
|
Privilege Escalation in wordpress (CVE-2026-6895)
vulnerability in wordpress (CVE-2026-6895). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45659 KEV |
|
[KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-45659)
vulnerability in Microsoft deserialization (CVE-2026-45659). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-41104 |
|
Unsafe Deserialization in deserialization (CVE-2026-41104)
vulnerability in deserialization (CVE-2026-41104). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33843 |
|
Vulnerability in microsoft (CVE-2026-33843)
vulnerability in microsoft (CVE-2026-33843). Confidential information can be exposed externally.
|
| CVE-2026-36226 |
|
Cross-Site Scripting (XSS) in CVE-2026-36226 (CVE-2026-36226)
cross-site scripting in CVE-2026-36226 (CVE-2026-36226). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-36227 |
|
Path Traversal in path-traversal (CVE-2026-36227)
path traversal in path-traversal (CVE-2026-36227). Risk of unauthorized operations or information disclosure.
|