Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2026-14512 Unsafe Deserialization in c (CVE-2026-14512)
vulnerability in c (CVE-2026-14512). Successful exploitation can lead to full system takeover.
CVE-2026-14446 Vulnerability in privilege-escalation (CVE-2026-14446)
vulnerability in privilege-escalation (CVE-2026-14446). Successful exploitation can lead to full system takeover.
CVE-2026-15057 Out-of-Bounds Write in dos (CVE-2026-15057)
out-of-bounds write in dos (CVE-2026-15057). Risk of unauthorized operations or information disclosure.
CVE-2026-14981 Vulnerability in dos (CVE-2026-14981)
vulnerability in dos (CVE-2026-14981). Risk of unauthorized operations or information disclosure.
CVE-2026-14976 Vulnerability in ibm (CVE-2026-14976)
vulnerability in ibm (CVE-2026-14976). Successful exploitation can lead to full system takeover.
CVE-2026-14515 Cross-Site Scripting (XSS) in ibm (CVE-2026-14515)
cross-site scripting in ibm (CVE-2026-14515). Risk of unauthorized operations or information disclosure.
CVE-2026-6881 SQL Injection in sqli (CVE-2026-6881)
SQL injection in sqli (CVE-2026-6881). Risk of unauthorized operations or information disclosure.
CVE-2026-16192 Vulnerability in dos (CVE-2026-16192)
vulnerability in dos (CVE-2026-16192). Risk of unauthorized operations or information disclosure.
CVE-2026-11391 Tanium addressed a SQL injection vulnerability in Patch.
Tanium addressed a SQL injection vulnerability in Patch.
CVE-2026-7769 SQL Injection in sqli (CVE-2026-7769)
SQL injection in sqli (CVE-2026-7769). Confidential information can be exposed externally.
CVE-2026-5114 Path Traversal in wordpress (CVE-2026-5114)
path traversal in wordpress (CVE-2026-5114). Confidential information can be exposed externally.
CVE-2026-50738 Use-After-Free in enterprisedb (CVE-2026-50738)
vulnerability in enterprisedb (CVE-2026-50738). Risk of unauthorized operations or information disclosure.
CVE-2026-48390 Authorization Flaw in privilege-escalation (CVE-2026-48390)
vulnerability in privilege-escalation (CVE-2026-48390). Confidential information can be exposed externally.
CVE-2026-48374 Path Traversal in path-traversal (CVE-2026-48374)
path traversal in path-traversal (CVE-2026-48374). Successful exploitation can lead to full system takeover.
CVE-2026-18107 Privilege Escalation in privilege-escalation (CVE-2026-18107)
vulnerability in privilege-escalation (CVE-2026-18107). Successful exploitation can lead to full system takeover.
CVE-2026-15992 Privilege Escalation in wordpress (CVE-2026-15992)
vulnerability in wordpress (CVE-2026-15992). Successful exploitation can lead to full system takeover. Exploitable via ``Module_Password_Hint``.
CVE-2026-15304 SQL Injection in wordpress (CVE-2026-15304)
SQL injection in wordpress (CVE-2026-15304). Confidential information can be exposed externally.
CVE-2026-67185 Path Traversal in path-traversal (CVE-2026-67185)
path traversal in path-traversal (CVE-2026-67185). Confidential information can be exposed externally.
CVE-2026-51275 Vulnerability in dos (CVE-2026-51275)
vulnerability in dos (CVE-2026-51275). Successful exploitation can lead to full system takeover.
CVE-2026-51274 Vulnerability in dos (CVE-2026-51274)
vulnerability in dos (CVE-2026-51274). Successful exploitation can lead to full system takeover.
CVE-2026-18085 Vulnerability in dos (CVE-2026-18085)
vulnerability in dos (CVE-2026-18085). Risk of unauthorized operations or information disclosure.
CVE-2026-18084 Cross-Site Scripting (XSS) in blackberry (CVE-2026-18084)
cross-site scripting in blackberry (CVE-2026-18084). Risk of unauthorized operations or information disclosure.
CVE-2026-54609 Vulnerability in com.quietterminal:qti-neon (CVE-2026-54609)
vulnerability in com.quietterminal:qti-neon (CVE-2026-54609). Risk of unauthorized operations or information disclosure. Exploitable via ``RECONNECT_REQUEST``.
CVE-2026-7775 Cross-Site Scripting (XSS) in ibm (CVE-2026-7775)
cross-site scripting in ibm (CVE-2026-7775). Risk of unauthorized operations or information disclosure.
CVE-2026-66748 Code Injection in CVE-2026-66748 (CVE-2026-66748)
code injection in CVE-2026-66748 (CVE-2026-66748). Successful exploitation can lead to full system takeover.
CVE-2026-51270 Vulnerability in privilege-escalation (CVE-2026-51270)
vulnerability in privilege-escalation (CVE-2026-51270). Successful exploitation can lead to full system takeover.
CVE-2026-51267 Vulnerability in privilege-escalation (CVE-2026-51267)
vulnerability in privilege-escalation (CVE-2026-51267). Successful exploitation can lead to full system takeover.
CVE-2026-51271 Vulnerability in dos (CVE-2026-51271)
vulnerability in dos (CVE-2026-51271). Successful exploitation can lead to full system takeover.
CVE-2026-47483 Vulnerability in dos (CVE-2026-47483)
vulnerability in dos (CVE-2026-47483). Risk of unauthorized operations or information disclosure.
CVE-2026-54332 Vulnerability in github.com/gopacket/gopacket (CVE-2026-54332)
vulnerability in github.com/gopacket/gopacket (CVE-2026-54332). Risk of unauthorized operations or information disclosure. Exploitable via ``ExtendedGatewayFlow``. Mitigation: upgrade to `1.6.1` or later.
CVE-2026-54345 Vulnerability in github.com/gopacket/gopacket (CVE-2026-54345)
vulnerability in github.com/gopacket/gopacket (CVE-2026-54345). Risk of unauthorized operations or information disclosure. Exploitable via ``headerSize``. Mitigation: upgrade to `1.6.1` or later.
CVE-2026-66713 Unsafe Deserialization in apache (CVE-2026-66713)
vulnerability in apache (CVE-2026-66713). Successful exploitation can lead to full system takeover.
CVE-2026-67174 Cross-Site Scripting (XSS) in CVE-2026-67174 (CVE-2026-67174)
cross-site scripting in CVE-2026-67174 (CVE-2026-67174). Risk of unauthorized operations or information disclosure.
CVE-2026-63727 Vulnerability in privilege-escalation (CVE-2026-63727)
vulnerability in privilege-escalation (CVE-2026-63727). Successful exploitation can lead to full system takeover.
CVE-2026-51259 Vulnerability in dos (CVE-2026-51259)
vulnerability in dos (CVE-2026-51259). Successful exploitation can lead to full system takeover.
CVE-2026-41874 Vulnerability in privilege-escalation (CVE-2026-41874)
vulnerability in privilege-escalation (CVE-2026-41874). Risk of unauthorized operations or information disclosure.
CVE-2026-66922 Vulnerability in dos (CVE-2026-66922)
vulnerability in dos (CVE-2026-66922). Risk of unauthorized operations or information disclosure.
CVE-2026-66920 Vulnerability in dos (CVE-2026-66920)
vulnerability in dos (CVE-2026-66920). Risk of unauthorized operations or information disclosure.
CVE-2026-65882 Cross-Site Scripting (XSS) in CVE-2026-65882 (CVE-2026-65882)
cross-site scripting in CVE-2026-65882 (CVE-2026-65882). Risk of unauthorized operations or information disclosure.
CVE-2026-66919 Cross-Site Scripting (XSS) in CVE-2026-66919 (CVE-2026-66919)
cross-site scripting in CVE-2026-66919 (CVE-2026-66919). Risk of unauthorized operations or information disclosure.
CVE-2026-15393 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15393)
cross-site scripting in wordpress (CVE-2026-15393). Risk of unauthorized operations or information disclosure.
CVE-2026-18047 Vulnerability in tomcat (CVE-2026-18047)
vulnerability in tomcat (CVE-2026-18047). Risk of unauthorized operations or information disclosure.
CVE-2026-15016 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15016)
cross-site scripting in wordpress (CVE-2026-15016). Risk of unauthorized operations or information disclosure.
CVE-2026-61609 Vulnerability in pterodactyl/panel (CVE-2026-61609)
vulnerability in pterodactyl/panel (CVE-2026-61609). Risk of unauthorized operations or information disclosure. Exploitable via `POST /auth/login`. Mitigation: upgrade to `1.13.0` or later.
CVE-2026-47427 Vulnerability in github.com/github/github-mcp-server (CVE-2026-47427)
vulnerability in github.com/github/github-mcp-server (CVE-2026-47427). Risk of unauthorized operations or information disclosure. Exploitable via ``CompletionsHandler``. Mitigation: upgrade to `1.1.0` or later.
CVE-2026-13440 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13440)
cross-site scripting in wordpress (CVE-2026-13440). Risk of unauthorized operations or information disclosure.
CVE-2026-15444 SQL Injection in wordpress (CVE-2026-15444)
SQL injection in wordpress (CVE-2026-15444). Confidential information can be exposed externally.
CVE-2026-65880 Code Injection in CVE-2026-65880 (CVE-2026-65880)
code injection in CVE-2026-65880 (CVE-2026-65880). Risk of unauthorized operations or information disclosure.
CVE-2026-63303 Vulnerability in path-traversal (CVE-2026-63303)
vulnerability in path-traversal (CVE-2026-63303). Risk of unauthorized operations or information disclosure.
CVE-2026-63301 Vulnerability in csrf (CVE-2026-63301)
vulnerability in csrf (CVE-2026-63301). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →