Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-73329 |
|
Cross-Site Scripting (XSS) in CVE-2026-73329 (CVE-2026-73329)
cross-site scripting in CVE-2026-73329 (CVE-2026-73329). Confidential information can be exposed externally.
|
| CVE-2026-73332 |
|
SQL Injection in c (CVE-2026-73332)
SQL injection in c (CVE-2026-73332). Confidential information can be exposed externally.
|
| CVE-2026-73331 |
|
SQL Injection in sqli (CVE-2026-73331)
SQL injection in sqli (CVE-2026-73331). Confidential information can be exposed externally.
|
| CVE-2026-73326 |
|
Vulnerability in CVE-2026-73326 (CVE-2026-73326)
vulnerability in CVE-2026-73326 (CVE-2026-73326). Data can be tampered with by attackers.
|
| CVE-2026-73268 |
|
Code Injection in privilege-escalation (CVE-2026-73268)
code injection in privilege-escalation (CVE-2026-73268). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73269 |
|
Privilege Escalation in privilege-escalation (CVE-2026-73269)
vulnerability in privilege-escalation (CVE-2026-73269). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72809 |
|
Vulnerability in CVE-2026-72809 (CVE-2026-72809)
vulnerability in CVE-2026-72809 (CVE-2026-72809). Confidential information can be exposed externally. Mitigation: upgrade to `3.7.4` or later.
|
| CVE-2026-72806 |
|
Vulnerability in CVE-2026-72806 (CVE-2026-72806)
vulnerability in CVE-2026-72806 (CVE-2026-72806). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72807 |
|
SQL Injection in sqli (CVE-2026-72807)
SQL injection in sqli (CVE-2026-72807). Confidential information can be exposed externally.
|
| CVE-2026-72787 |
|
Cross-Site Scripting (XSS) in CVE-2026-72787 (CVE-2026-72787)
cross-site scripting in CVE-2026-72787 (CVE-2026-72787). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72508 |
|
Vulnerability in privilege-escalation (CVE-2026-72508)
vulnerability in privilege-escalation (CVE-2026-72508). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72786 |
|
Vulnerability in CVE-2026-72786 (CVE-2026-72786)
vulnerability in CVE-2026-72786 (CVE-2026-72786). Confidential information can be exposed externally.
|
| CVE-2026-67579 |
|
SQL Injection in sqli (CVE-2026-67579)
SQL injection in sqli (CVE-2026-67579). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59914 |
|
Vulnerability in dell (CVE-2026-59914)
vulnerability in dell (CVE-2026-59914). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46731 |
|
Vulnerability in dell (CVE-2026-46731)
vulnerability in dell (CVE-2026-46731). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49466 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-49466)
cross-site scripting in wordpress (CVE-2026-49466). Risk of unauthorized operations or information disclosure. Exploitable via ``template``.
|
| CVE-2026-17111 |
|
SQL Injection in sqli (CVE-2026-17111)
SQL injection in sqli (CVE-2026-17111). Confidential information can be exposed externally.
|
| CVE-2026-15216 |
|
Cross-Site Scripting (XSS) in gitlab (CVE-2026-15216)
cross-site scripting in gitlab (CVE-2026-15216). Confidential information can be exposed externally.
|
| CVE-2026-15217 |
|
Cross-Site Scripting (XSS) in gitlab (CVE-2026-15217)
cross-site scripting in gitlab (CVE-2026-15217). Confidential information can be exposed externally.
|
| CVE-2026-13361 |
|
IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.
IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.
|
| CVE-2026-11937 |
|
Use-After-Free in dos (CVE-2026-11937)
vulnerability in dos (CVE-2026-11937). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12004 |
|
Vulnerability in dos (CVE-2026-12004)
vulnerability in dos (CVE-2026-12004). Confidential information can be exposed externally.
|
| CVE-2026-17418 |
|
SQL Injection in dos (CVE-2026-17418)
SQL injection in dos (CVE-2026-17418). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7427 |
|
Vulnerability in dos (CVE-2026-7427)
vulnerability in dos (CVE-2026-7427). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18713 |
|
Privilege Escalation in privilege-escalation (CVE-2026-18713)
vulnerability in privilege-escalation (CVE-2026-18713). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73327 |
|
Path Traversal in path-traversal (CVE-2026-73327)
path traversal in path-traversal (CVE-2026-73327). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18669 |
|
Vulnerability in privilege-escalation (CVE-2026-18669)
vulnerability in privilege-escalation (CVE-2026-18669). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16931 |
|
Vulnerability in dos (CVE-2026-16931)
vulnerability in dos (CVE-2026-16931). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17271 |
|
Vulnerability in dos (CVE-2026-17271)
vulnerability in dos (CVE-2026-17271). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17248 |
|
OS Command Injection in dos (CVE-2026-17248)
OS command injection in dos (CVE-2026-17248). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18499 |
|
Vulnerability in privilege-escalation (CVE-2026-18499)
vulnerability in privilege-escalation (CVE-2026-18499). Confidential information can be exposed externally.
|
| CVE-2026-18683 |
|
OS Command Injection in privilege-escalation (CVE-2026-18683)
OS command injection in privilege-escalation (CVE-2026-18683). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73237 |
|
Vulnerability in apache (CVE-2026-73237)
vulnerability in apache (CVE-2026-73237). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48552 |
|
Cross-Site Scripting (XSS) in CVE-2026-48552 (CVE-2026-48552)
cross-site scripting in CVE-2026-48552 (CVE-2026-48552). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73238 |
|
Vulnerability in apache (CVE-2026-73238)
vulnerability in apache (CVE-2026-73238). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48550 |
|
Cross-Site Scripting (XSS) in CVE-2026-48550 (CVE-2026-48550)
cross-site scripting in CVE-2026-48550 (CVE-2026-48550). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17094 |
|
Path Traversal in path-traversal (CVE-2026-17094)
path traversal in path-traversal (CVE-2026-17094). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48551 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-48551)
vulnerability in csrf (CVE-2026-48551). Data can be tampered with by attackers.
|
| CVE-2026-48554 |
|
OS Command Injection in CVE-2026-48554 (CVE-2026-48554)
OS command injection in CVE-2026-48554 (CVE-2026-48554). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48553 |
|
OS Command Injection in CVE-2026-48553 (CVE-2026-48553)
OS command injection in CVE-2026-48553 (CVE-2026-48553). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16694 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-16694)
cross-site scripting in ibm (CVE-2026-16694). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73295 |
|
Cross-Site Scripting (XSS) in CVE-2026-73295 (CVE-2026-73295)
cross-site scripting in CVE-2026-73295 (CVE-2026-73295). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73297 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-73297)
SSRF in ssrf (CVE-2026-73297). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73325 |
|
Unsafe Deserialization in deserialization (CVE-2026-73325)
vulnerability in deserialization (CVE-2026-73325). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73292 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73292)
vulnerability in csrf (CVE-2026-73292). Confidential information can be exposed externally.
|
| CVE-2026-67587 |
|
Unsafe Deserialization in apache (CVE-2026-67587)
vulnerability in apache (CVE-2026-67587). Successful exploitation can lead to full system takeover. Exploitable via ``Callback``.
|
| CVE-2026-67260 |
|
Unsafe Deserialization in apache (CVE-2026-67260)
vulnerability in apache (CVE-2026-67260). Risk of unauthorized operations or information disclosure. Exploitable via ``awaiting_input``.
|
| CVE-2026-19548 |
|
Use-After-Free in c (CVE-2026-19548)
vulnerability in c (CVE-2026-19548). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73374 |
|
Cross-Site Scripting (XSS) in CVE-2026-73374 (CVE-2026-73374)
cross-site scripting in CVE-2026-73374 (CVE-2026-73374). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73432 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-73432)
SSRF in ssrf (CVE-2026-73432). Risk of unauthorized operations or information disclosure.
|