Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2026-16143 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16143)
cross-site scripting in wordpress (CVE-2026-16143). Risk of unauthorized operations or information disclosure.
CVE-2026-18903 Path Traversal in path-traversal (CVE-2026-18903)
path traversal in path-traversal (CVE-2026-18903). Risk of unauthorized operations or information disclosure.
CVE-2026-18322 Privilege Escalation in wordpress (CVE-2026-18322)
vulnerability in wordpress (CVE-2026-18322). Successful exploitation can lead to full system takeover. Exploitable via ``save``.
CVE-2026-18898 A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the...
A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the...
CVE-2026-18897 A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted...
A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted...
CVE-2026-18895 A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function...
A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function...
CVE-2026-18896 Vulnerability in sqli (CVE-2026-18896)
vulnerability in sqli (CVE-2026-18896). Risk of unauthorized operations or information disclosure.
CVE-2026-18907 Vulnerability in path-traversal (CVE-2026-18907)
vulnerability in path-traversal (CVE-2026-18907). Risk of unauthorized operations or information disclosure.
CVE-2026-18859 A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of...
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of...
CVE-2026-18819 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-18819)
vulnerability in csrf (CVE-2026-18819). Risk of unauthorized operations or information disclosure.
CVE-2026-18854 Vulnerability in sqli (CVE-2026-18854)
vulnerability in sqli (CVE-2026-18854). Risk of unauthorized operations or information disclosure.
CVE-2026-18853 Path Traversal in c (CVE-2026-18853)
path traversal in c (CVE-2026-18853). Risk of unauthorized operations or information disclosure.
CVE-2026-18103 Vulnerability in dos (CVE-2026-18103)
vulnerability in dos (CVE-2026-18103). Risk of unauthorized operations or information disclosure. Exploitable via ``dhcpd``.
CVE-2026-45809 Vulnerability in dos (CVE-2026-45809)
vulnerability in dos (CVE-2026-45809). Risk of unauthorized operations or information disclosure.
CVE-2026-46334 Vulnerability in dos (CVE-2026-46334)
vulnerability in dos (CVE-2026-46334). Risk of unauthorized operations or information disclosure.
CVE-2026-67858 Vulnerability in dos (CVE-2026-67858)
vulnerability in dos (CVE-2026-67858). Risk of unauthorized operations or information disclosure.
CVE-2026-67859 Vulnerability in dos (CVE-2026-67859)
vulnerability in dos (CVE-2026-67859). Risk of unauthorized operations or information disclosure.
CVE-2026-67861 Vulnerability in dos (CVE-2026-67861)
vulnerability in dos (CVE-2026-67861). Risk of unauthorized operations or information disclosure.
CVE-2026-67862 Vulnerability in c (CVE-2026-67862)
vulnerability in c (CVE-2026-67862). Risk of unauthorized operations or information disclosure.
CVE-2026-67855 Vulnerability in dos (CVE-2026-67855)
vulnerability in dos (CVE-2026-67855). Risk of unauthorized operations or information disclosure.
CVE-2026-67856 Vulnerability in dos (CVE-2026-67856)
vulnerability in dos (CVE-2026-67856). Risk of unauthorized operations or information disclosure.
CVE-2026-51144 Cross-Site Scripting (XSS) in CVE-2026-51144 (CVE-2026-51144)
cross-site scripting in CVE-2026-51144 (CVE-2026-51144). Risk of unauthorized operations or information disclosure.
CVE-2026-52370 Cross-Site Scripting (XSS) in CVE-2026-52370 (CVE-2026-52370)
cross-site scripting in CVE-2026-52370 (CVE-2026-52370). Risk of unauthorized operations or information disclosure.
CVE-2026-45084 Vulnerability in dos (CVE-2026-45084)
vulnerability in dos (CVE-2026-45084). Risk of unauthorized operations or information disclosure.
CVE-2026-70593 Path Traversal in ghost (CVE-2026-70593)
path traversal in ghost (CVE-2026-70593). Data can be tampered with by attackers. Mitigation: upgrade to `6.54.1` or later.
CVE-2026-70554 Unsafe Deserialization in CVE-2026-70554 (CVE-2026-70554)
vulnerability in CVE-2026-70554 (CVE-2026-70554). Successful exploitation can lead to full system takeover.
CVE-2026-45538 Vulnerability in c (CVE-2026-45538)
vulnerability in c (CVE-2026-45538). Successful exploitation can lead to full system takeover.
CVE-2026-65986 Cross-Site Scripting (XSS) in CVE-2026-65986 (CVE-2026-65986)
cross-site scripting in CVE-2026-65986 (CVE-2026-65986). Risk of unauthorized operations or information disclosure.
CVE-2026-70588 Cross-Site Scripting (XSS) in ghost (CVE-2026-70588)
cross-site scripting in ghost (CVE-2026-70588). Data can be tampered with by attackers. Mitigation: upgrade to `6.54.1` or later.
CVE-2026-70553 Code Injection in CVE-2026-70553 (CVE-2026-70553)
code injection in CVE-2026-70553 (CVE-2026-70553). Successful exploitation can lead to full system takeover.
CVE-2026-70552 Vulnerability in CVE-2026-70552 (CVE-2026-70552)
vulnerability in CVE-2026-70552 (CVE-2026-70552). Successful exploitation can lead to full system takeover.
CVE-2026-70475 Vulnerability in flowise (CVE-2026-70475)
vulnerability in flowise (CVE-2026-70475). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/v1/executions/`. Mitigation: upgrade to `3.1.3` or later.
CVE-2026-69704 SQL Injection in sqli (CVE-2026-69704)
SQL injection in sqli (CVE-2026-69704). Data can be tampered with by attackers.
CVE-2026-68743 Out-of-Bounds Read in dos (CVE-2026-68743)
vulnerability in dos (CVE-2026-68743). Risk of unauthorized operations or information disclosure.
CVE-2026-69702 Vulnerability in dos (CVE-2026-69702)
vulnerability in dos (CVE-2026-69702). Risk of unauthorized operations or information disclosure.
CVE-2026-66300 Cross-Site Scripting (XSS) in CVE-2026-66300 (CVE-2026-66300)
cross-site scripting in CVE-2026-66300 (CVE-2026-66300). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.12.2` or later.
CVE-2026-47621 Vulnerability in dos (CVE-2026-47621)
vulnerability in dos (CVE-2026-47621). Risk of unauthorized operations or information disclosure.
CVE-2026-47623 Unsafe Deserialization in dos (CVE-2026-47623)
vulnerability in dos (CVE-2026-47623). Risk of unauthorized operations or information disclosure.
CVE-2026-47620 Vulnerability in dos (CVE-2026-47620)
vulnerability in dos (CVE-2026-47620). Risk of unauthorized operations or information disclosure.
CVE-2026-64634 A vulnerability allowing local privilege escalation to the Reporter service context.
A vulnerability allowing local privilege escalation to the Reporter service context.
CVE-2026-47487 Path Traversal in dos (CVE-2026-47487)
path traversal in dos (CVE-2026-47487). Risk of unauthorized operations or information disclosure.
CVE-2026-24253 Out-of-Bounds Write in dos (CVE-2026-24253)
out-of-bounds write in dos (CVE-2026-24253). Risk of unauthorized operations or information disclosure.
CVE-2026-47619 Vulnerability in dos (CVE-2026-47619)
vulnerability in dos (CVE-2026-47619). Successful exploitation can lead to full system takeover.
CVE-2026-24254 Vulnerability in dos (CVE-2026-24254)
vulnerability in dos (CVE-2026-24254). Successful exploitation can lead to full system takeover.
CVE-2026-15307 Vulnerability in django (CVE-2026-15307)
vulnerability in django (CVE-2026-15307). Successful exploitation can lead to full system takeover. Exploitable via ``django.contrib.gis.gdal.GDALRaster``.
CVE-2026-15920 Vulnerability in django (CVE-2026-15920)
vulnerability in django (CVE-2026-15920). Risk of unauthorized operations or information disclosure. Exploitable via ``URLField``.
CVE-2026-69264 Code Injection in flowise (CVE-2026-69264)
code injection in flowise (CVE-2026-69264). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/prediction/`. Mitigation: upgrade to `3.1.3` or later.
CVE-2026-69098 Unsafe Deserialization in c (CVE-2026-69098)
vulnerability in c (CVE-2026-69098). Successful exploitation can lead to full system takeover.
CVE-2026-69100 Code Injection in CVE-2026-69100 (CVE-2026-69100)
code injection in CVE-2026-69100 (CVE-2026-69100). Successful exploitation can lead to full system takeover.
CVE-2026-25288 Vulnerability in dos (CVE-2026-25288)
vulnerability in dos (CVE-2026-25288). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →