Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-14512 |
|
Unsafe Deserialization in c (CVE-2026-14512)
vulnerability in c (CVE-2026-14512). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14446 |
|
Vulnerability in privilege-escalation (CVE-2026-14446)
vulnerability in privilege-escalation (CVE-2026-14446). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15057 |
|
Out-of-Bounds Write in dos (CVE-2026-15057)
out-of-bounds write in dos (CVE-2026-15057). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14981 |
|
Vulnerability in dos (CVE-2026-14981)
vulnerability in dos (CVE-2026-14981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14976 |
|
Vulnerability in ibm (CVE-2026-14976)
vulnerability in ibm (CVE-2026-14976). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14515 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-14515)
cross-site scripting in ibm (CVE-2026-14515). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6881 |
|
SQL Injection in sqli (CVE-2026-6881)
SQL injection in sqli (CVE-2026-6881). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16192 |
|
Vulnerability in dos (CVE-2026-16192)
vulnerability in dos (CVE-2026-16192). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11391 |
|
Tanium addressed a SQL injection vulnerability in Patch.
Tanium addressed a SQL injection vulnerability in Patch.
|
| CVE-2026-7769 |
|
SQL Injection in sqli (CVE-2026-7769)
SQL injection in sqli (CVE-2026-7769). Confidential information can be exposed externally.
|
| CVE-2026-5114 |
|
Path Traversal in wordpress (CVE-2026-5114)
path traversal in wordpress (CVE-2026-5114). Confidential information can be exposed externally.
|
| CVE-2026-50738 |
|
Use-After-Free in enterprisedb (CVE-2026-50738)
vulnerability in enterprisedb (CVE-2026-50738). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48390 |
|
Authorization Flaw in privilege-escalation (CVE-2026-48390)
vulnerability in privilege-escalation (CVE-2026-48390). Confidential information can be exposed externally.
|
| CVE-2026-48374 |
|
Path Traversal in path-traversal (CVE-2026-48374)
path traversal in path-traversal (CVE-2026-48374). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18107 |
|
Privilege Escalation in privilege-escalation (CVE-2026-18107)
vulnerability in privilege-escalation (CVE-2026-18107). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15992 |
|
Privilege Escalation in wordpress (CVE-2026-15992)
vulnerability in wordpress (CVE-2026-15992). Successful exploitation can lead to full system takeover. Exploitable via ``Module_Password_Hint``.
|
| CVE-2026-15304 |
|
SQL Injection in wordpress (CVE-2026-15304)
SQL injection in wordpress (CVE-2026-15304). Confidential information can be exposed externally.
|
| CVE-2026-67185 |
|
Path Traversal in path-traversal (CVE-2026-67185)
path traversal in path-traversal (CVE-2026-67185). Confidential information can be exposed externally.
|
| CVE-2026-51275 |
|
Vulnerability in dos (CVE-2026-51275)
vulnerability in dos (CVE-2026-51275). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51274 |
|
Vulnerability in dos (CVE-2026-51274)
vulnerability in dos (CVE-2026-51274). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18085 |
|
Vulnerability in dos (CVE-2026-18085)
vulnerability in dos (CVE-2026-18085). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18084 |
|
Cross-Site Scripting (XSS) in blackberry (CVE-2026-18084)
cross-site scripting in blackberry (CVE-2026-18084). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54609 |
|
Vulnerability in com.quietterminal:qti-neon (CVE-2026-54609)
vulnerability in com.quietterminal:qti-neon (CVE-2026-54609). Risk of unauthorized operations or information disclosure. Exploitable via ``RECONNECT_REQUEST``.
|
| CVE-2026-7775 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-7775)
cross-site scripting in ibm (CVE-2026-7775). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66748 |
|
Code Injection in CVE-2026-66748 (CVE-2026-66748)
code injection in CVE-2026-66748 (CVE-2026-66748). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51270 |
|
Vulnerability in privilege-escalation (CVE-2026-51270)
vulnerability in privilege-escalation (CVE-2026-51270). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51267 |
|
Vulnerability in privilege-escalation (CVE-2026-51267)
vulnerability in privilege-escalation (CVE-2026-51267). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51271 |
|
Vulnerability in dos (CVE-2026-51271)
vulnerability in dos (CVE-2026-51271). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47483 |
|
Vulnerability in dos (CVE-2026-47483)
vulnerability in dos (CVE-2026-47483). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54332 |
|
Vulnerability in github.com/gopacket/gopacket (CVE-2026-54332)
vulnerability in github.com/gopacket/gopacket (CVE-2026-54332). Risk of unauthorized operations or information disclosure. Exploitable via ``ExtendedGatewayFlow``. Mitigation: upgrade to `1.6.1` or later.
|
| CVE-2026-54345 |
|
Vulnerability in github.com/gopacket/gopacket (CVE-2026-54345)
vulnerability in github.com/gopacket/gopacket (CVE-2026-54345). Risk of unauthorized operations or information disclosure. Exploitable via ``headerSize``. Mitigation: upgrade to `1.6.1` or later.
|
| CVE-2026-66713 |
|
Unsafe Deserialization in apache (CVE-2026-66713)
vulnerability in apache (CVE-2026-66713). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67174 |
|
Cross-Site Scripting (XSS) in CVE-2026-67174 (CVE-2026-67174)
cross-site scripting in CVE-2026-67174 (CVE-2026-67174). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63727 |
|
Vulnerability in privilege-escalation (CVE-2026-63727)
vulnerability in privilege-escalation (CVE-2026-63727). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51259 |
|
Vulnerability in dos (CVE-2026-51259)
vulnerability in dos (CVE-2026-51259). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41874 |
|
Vulnerability in privilege-escalation (CVE-2026-41874)
vulnerability in privilege-escalation (CVE-2026-41874). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66922 |
|
Vulnerability in dos (CVE-2026-66922)
vulnerability in dos (CVE-2026-66922). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66920 |
|
Vulnerability in dos (CVE-2026-66920)
vulnerability in dos (CVE-2026-66920). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65882 |
|
Cross-Site Scripting (XSS) in CVE-2026-65882 (CVE-2026-65882)
cross-site scripting in CVE-2026-65882 (CVE-2026-65882). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66919 |
|
Cross-Site Scripting (XSS) in CVE-2026-66919 (CVE-2026-66919)
cross-site scripting in CVE-2026-66919 (CVE-2026-66919). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15393 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15393)
cross-site scripting in wordpress (CVE-2026-15393). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18047 |
|
Vulnerability in tomcat (CVE-2026-18047)
vulnerability in tomcat (CVE-2026-18047). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15016 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15016)
cross-site scripting in wordpress (CVE-2026-15016). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61609 |
|
Vulnerability in pterodactyl/panel (CVE-2026-61609)
vulnerability in pterodactyl/panel (CVE-2026-61609). Risk of unauthorized operations or information disclosure. Exploitable via `POST /auth/login`. Mitigation: upgrade to `1.13.0` or later.
|
| CVE-2026-47427 |
|
Vulnerability in github.com/github/github-mcp-server (CVE-2026-47427)
vulnerability in github.com/github/github-mcp-server (CVE-2026-47427). Risk of unauthorized operations or information disclosure. Exploitable via ``CompletionsHandler``. Mitigation: upgrade to `1.1.0` or later.
|
| CVE-2026-13440 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13440)
cross-site scripting in wordpress (CVE-2026-13440). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15444 |
|
SQL Injection in wordpress (CVE-2026-15444)
SQL injection in wordpress (CVE-2026-15444). Confidential information can be exposed externally.
|
| CVE-2026-65880 |
|
Code Injection in CVE-2026-65880 (CVE-2026-65880)
code injection in CVE-2026-65880 (CVE-2026-65880). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63303 |
|
Vulnerability in path-traversal (CVE-2026-63303)
vulnerability in path-traversal (CVE-2026-63303). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63301 |
|
Vulnerability in csrf (CVE-2026-63301)
vulnerability in csrf (CVE-2026-63301). Risk of unauthorized operations or information disclosure.
|