Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2026-7304 Unsafe Deserialization in sglang (CVE-2026-7304)
vulnerability in sglang (CVE-2026-7304). Successful exploitation can lead to full system takeover.
CVE-2026-7301 Unsafe Deserialization in sglang (CVE-2026-7301)
vulnerability in sglang (CVE-2026-7301). Successful exploitation can lead to full system takeover.
CVE-2026-7302 Vulnerability in sglang (CVE-2026-7302)
vulnerability in sglang (CVE-2026-7302). Data can be tampered with by attackers.
CVE-2026-8802 Path Traversal in path-traversal (CVE-2026-8802)
path traversal in path-traversal (CVE-2026-8802). Risk of unauthorized operations or information disclosure.
CVE-2026-4320 Vulnerability in privilege-escalation (CVE-2026-4320)
vulnerability in privilege-escalation (CVE-2026-4320). Risk of unauthorized operations or information disclosure.
CVE-2026-4643 Vulnerability in dos (CVE-2026-4643)
vulnerability in dos (CVE-2026-4643). Risk of unauthorized operations or information disclosure.
CVE-2026-6902 Code Injection in CVE-2026-6902 (CVE-2026-6902)
code injection in CVE-2026-6902 (CVE-2026-6902). Risk of unauthorized operations or information disclosure.
CVE-2026-7498 Cross-Site Scripting (XSS) in CVE-2026-7498 (CVE-2026-7498)
cross-site scripting in CVE-2026-7498 (CVE-2026-7498). Successful exploitation can lead to full system takeover.
CVE-2026-2325 Vulnerability in github.com/mattermost/mattermost-server (CVE-2026-2325)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-2325). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.4.4` or later.
CVE-2026-6340 Vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-6340)
vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-6340). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0-20260325191733-fb11968f8798` or later.
CVE-2026-6379 SQL Injection in wordpress (CVE-2026-6379)
SQL injection in wordpress (CVE-2026-6379). Confidential information can be exposed externally.
CVE-2026-3220 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3220)
cross-site scripting in wordpress (CVE-2026-3220). Successful exploitation can lead to full system takeover.
CVE-2026-6495 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6495)
cross-site scripting in wordpress (CVE-2026-6495). Risk of unauthorized operations or information disclosure.
CVE-2026-8785 Vulnerability in sqli (CVE-2026-8785)
vulnerability in sqli (CVE-2026-8785). Risk of unauthorized operations or information disclosure.
CVE-2026-8771 Vulnerability in org.linlinjava:litemall-wx-api (CVE-2026-8771)
vulnerability in org.linlinjava:litemall-wx-api (CVE-2026-8771). Risk of unauthorized operations or information disclosure.
CVE-2026-8772 Vulnerability in sqli (CVE-2026-8772)
vulnerability in sqli (CVE-2026-8772). Risk of unauthorized operations or information disclosure.
CVE-2026-8770 Path Traversal in path-traversal (CVE-2026-8770)
path traversal in path-traversal (CVE-2026-8770). Risk of unauthorized operations or information disclosure.
CVE-2026-8765 Path Traversal in path-traversal (CVE-2026-8765)
path traversal in path-traversal (CVE-2026-8765). Risk of unauthorized operations or information disclosure.
CVE-2026-8507 Out-of-Bounds Write in CVE-2026-8507 (CVE-2026-8507)
out-of-bounds write in CVE-2026-8507 (CVE-2026-8507). Successful exploitation can lead to full system takeover.
CVE-2026-8757 Path Traversal in path-traversal (CVE-2026-8757)
path traversal in path-traversal (CVE-2026-8757). Risk of unauthorized operations or information disclosure.
CVE-2026-8754 Path Traversal in AstrBot (CVE-2026-8754)
path traversal in AstrBot (CVE-2026-8754). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.23.6` or later.
CVE-2026-8755 Path Traversal in path-traversal (CVE-2026-8755)
path traversal in path-traversal (CVE-2026-8755). Risk of unauthorized operations or information disclosure.
CVE-2026-8756 Path Traversal in path-traversal (CVE-2026-8756)
path traversal in path-traversal (CVE-2026-8756). Risk of unauthorized operations or information disclosure.
CVE-2018-25338 SQL Injection in sqli (CVE-2018-25338)
SQL injection in sqli (CVE-2018-25338). Confidential information can be exposed externally.
CVE-2018-25339 SQL Injection in sqli (CVE-2018-25339)
SQL injection in sqli (CVE-2018-25339). Confidential information can be exposed externally.
CVE-2018-25334 Cross-Site Request Forgery (CSRF) in csrf (CVE-2018-25334)
vulnerability in csrf (CVE-2018-25334). Risk of unauthorized operations or information disclosure.
CVE-2018-25332 Vulnerability in gitbucket (CVE-2018-25332)
vulnerability in gitbucket (CVE-2018-25332). Successful exploitation can lead to full system takeover.
CVE-2018-25330 SQL Injection in sqli (CVE-2018-25330)
SQL injection in sqli (CVE-2018-25330). Confidential information can be exposed externally.
CVE-2018-25333 SQL Injection in sqli (CVE-2018-25333)
SQL injection in sqli (CVE-2018-25333). Confidential information can be exposed externally.
CVE-2018-25331 Cross-Site Scripting (XSS) in CVE-2018-25331 (CVE-2018-25331)
cross-site scripting in CVE-2018-25331 (CVE-2018-25331). Risk of unauthorized operations or information disclosure.
CVE-2018-25326 Path Traversal in wordpress (CVE-2018-25326)
path traversal in wordpress (CVE-2018-25326). Confidential information can be exposed externally.
CVE-2018-25324 Vulnerability in wordpress (CVE-2018-25324)
vulnerability in wordpress (CVE-2018-25324). Confidential information can be exposed externally.
CVE-2018-25319 SQL Injection in sqli (CVE-2018-25319)
SQL injection in sqli (CVE-2018-25319). Confidential information can be exposed externally.
CVE-2018-25325 Path Traversal in wordpress (CVE-2018-25325)
path traversal in wordpress (CVE-2018-25325). Confidential information can be exposed externally.
CVE-2026-8751 Vulnerability in deserialization (CVE-2026-8751)
vulnerability in deserialization (CVE-2026-8751). Risk of unauthorized operations or information disclosure.
CVE-2026-8744 Vulnerability in c (CVE-2026-8744)
vulnerability in c (CVE-2026-8744). Risk of unauthorized operations or information disclosure.
CVE-2026-8745 Vulnerability in c (CVE-2026-8745)
vulnerability in c (CVE-2026-8745). Risk of unauthorized operations or information disclosure.
CVE-2026-8736 Path Traversal in path-traversal (CVE-2026-8736)
path traversal in path-traversal (CVE-2026-8736). Risk of unauthorized operations or information disclosure.
CVE-2026-8734 Vulnerability in sqli (CVE-2026-8734)
vulnerability in sqli (CVE-2026-8734). Risk of unauthorized operations or information disclosure.
CVE-2026-8735 Vulnerability in deserialization (CVE-2026-8735)
vulnerability in deserialization (CVE-2026-8735). Risk of unauthorized operations or information disclosure.
CVE-2026-8729 Vulnerability in c (CVE-2026-8729)
vulnerability in c (CVE-2026-8729). Risk of unauthorized operations or information disclosure.
CVE-2026-8730 Vulnerability in c (CVE-2026-8730)
vulnerability in c (CVE-2026-8730). Risk of unauthorized operations or information disclosure.
CVE-2026-8731 Vulnerability in c (CVE-2026-8731)
vulnerability in c (CVE-2026-8731). Risk of unauthorized operations or information disclosure.
CVE-2026-8728 Vulnerability in c (CVE-2026-8728)
vulnerability in c (CVE-2026-8728). Risk of unauthorized operations or information disclosure.
CVE-2026-8719 Privilege Escalation in wordpress (CVE-2026-8719)
vulnerability in wordpress (CVE-2026-8719). Successful exploitation can lead to full system takeover.
CVE-2026-8724 Vulnerability in sqli (CVE-2026-8724)
vulnerability in sqli (CVE-2026-8724). Risk of unauthorized operations or information disclosure.
CVE-2021-47976 Cross-Site Request Forgery (CSRF) in csrf (CVE-2021-47976)
vulnerability in csrf (CVE-2021-47976). Successful exploitation can lead to full system takeover.
CVE-2021-47980 SQL Injection in sqli (CVE-2021-47980)
SQL injection in sqli (CVE-2021-47980). Confidential information can be exposed externally.
CVE-2021-47981 Cross-Site Scripting (XSS) in csrf (CVE-2021-47981)
cross-site scripting in csrf (CVE-2021-47981). Risk of unauthorized operations or information disclosure.
CVE-2021-47977 Path Traversal in wordpress (CVE-2021-47977)
path traversal in wordpress (CVE-2021-47977). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →