Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2026-59549	Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.	Critical	WordPress SQL Injection Cwe 89	1 month ago
CVE-2026-59550	Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions. Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions.	Critical	SQL Injection Cwe 89	1 month ago
CVE-2026-59551	Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.	High	WordPress SQL Injection Cwe 89	1 month ago
CVE-2026-59537	SQL Injection in sqli (CVE-2026-59537) SQL injection in sqli (CVE-2026-59537). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	1 month ago
CVE-2026-59533	Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions. Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions.	Critical	SQL Injection Cwe 89	1 month ago
CVE-2026-59538	Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions. Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions.	Critical	SQL Injection Cwe 89	1 month ago
CVE-2025-59181	Vulnerability in path-traversal (CVE-2025-59181) vulnerability in path-traversal (CVE-2025-59181). Risk of unauthorized operations or information disclosure.		Path Traversal Cwe 35	1 month ago
CVE-2026-59527	Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.	Critical	SQL Injection Cwe 89	1 month ago
CVE-2026-10819	Vulnerability in dos (CVE-2026-10819) vulnerability in dos (CVE-2026-10819). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 409 Mattermost Mattermost Server	1 month ago
CVE-2026-15003	Out-of-Bounds Read in c (CVE-2026-15003) vulnerability in c (CVE-2026-15003). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 125	1 month ago
CVE-2026-17514	Path Traversal in path-traversal (CVE-2026-17514) path traversal in path-traversal (CVE-2026-17514). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Path Traversal Cwe 22	1 month ago
CVE-2026-65877	SQL Injection in sqli (CVE-2026-65877) SQL injection in sqli (CVE-2026-65877). Risk of unauthorized operations or information disclosure.		SQL Injection Cwe 89	1 month ago
CVE-2026-65766	SQL Injection in sqli (CVE-2026-65766) SQL injection in sqli (CVE-2026-65766). Risk of unauthorized operations or information disclosure.		SQL Injection Cwe 89	1 month ago
CVE-2026-65876	SQL Injection in sqli (CVE-2026-65876) SQL injection in sqli (CVE-2026-65876). Risk of unauthorized operations or information disclosure.		SQL Injection Cwe 89	1 month ago
CVE-2026-57917	XXE (XML External Entity) in ssrf (CVE-2026-57917) vulnerability in ssrf (CVE-2026-57917). Risk of unauthorized operations or information disclosure.		Server-Side Request Forgery Cwe 611	1 month ago
CVE-2026-14856	Cross-Site Scripting (XSS) in csrf (CVE-2026-14856) cross-site scripting in csrf (CVE-2026-14856). Risk of unauthorized operations or information disclosure.		JavaScript Cross-Site Scripting Cross-Site Request Forgery Cwe 79	1 month ago
CVE-2026-12495	Vulnerability in dos (CVE-2026-12495) vulnerability in dos (CVE-2026-12495). Risk of unauthorized operations or information disclosure.		Denial of Service Cwe 121	1 month ago
CVE-2026-17534	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-17534) SSRF in ssrf (CVE-2026-17534). Confidential information can be exposed externally.	Medium	Server-Side Request Forgery Cwe 918	1 month ago
CVE-2026-17523	Vulnerability in privilege-escalation (CVE-2026-17523) vulnerability in privilege-escalation (CVE-2026-17523). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 825 C	1 month ago
CVE-2026-65764	Cross-Site Scripting (XSS) in CVE-2026-65764 (CVE-2026-65764) cross-site scripting in CVE-2026-65764 (CVE-2026-65764). Risk of unauthorized operations or information disclosure.		Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-65765	Path Traversal in path-traversal (CVE-2026-65765) path traversal in path-traversal (CVE-2026-65765). Risk of unauthorized operations or information disclosure.		Path Traversal Cwe 22	1 month ago
CVE-2026-16554	Vulnerability in c (CVE-2026-16554) vulnerability in c (CVE-2026-16554). Risk of unauthorized operations or information disclosure.		C Remote Code Execution Denial of Service Cwe 190	1 month ago
CVE-2026-13400	Cross-Site Scripting (XSS) in wordpress (CVE-2026-13400) cross-site scripting in wordpress (CVE-2026-13400). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-13726	Cross-Site Scripting (XSS) in wordpress (CVE-2026-13726) cross-site scripting in wordpress (CVE-2026-13726). Risk of unauthorized operations or information disclosure.	High	WordPress Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-13714	Unrestricted File Upload in wordpress (CVE-2026-13714) vulnerability in wordpress (CVE-2026-13714). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Remote Code Execution Cwe 434	1 month ago
CVE-2026-14289	Code Injection in wordpress (CVE-2026-14289) code injection in wordpress (CVE-2026-14289). Successful exploitation can lead to full system takeover.	Critical	WordPress Remote Code Execution Cwe 94	1 month ago
CVE-2026-14189	SQL Injection in wordpress (CVE-2026-14189) SQL injection in wordpress (CVE-2026-14189). Risk of unauthorized operations or information disclosure.	Low	WordPress SQL Injection Cwe 89	1 month ago
CVE-2026-12982	Cross-Site Scripting (XSS) in wordpress (CVE-2026-12982) cross-site scripting in wordpress (CVE-2026-12982). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-15928	Cross-Site Scripting (XSS) in c (CVE-2026-15928) cross-site scripting in c (CVE-2026-15928). Risk of unauthorized operations or information disclosure.		C Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-17496	Cross-Site Scripting (XSS) in notegen (CVE-2026-17496) cross-site scripting in notegen (CVE-2026-17496). Confidential information can be exposed externally.	High	JavaScript Cross-Site Scripting Cwe 79 Notegen	1 month ago
CVE-2026-17497	OS Command Injection in notegen (CVE-2026-17497) OS command injection in notegen (CVE-2026-17497). Successful exploitation can lead to full system takeover.	High	JavaScript Python Remote Code Execution Cross-Site Scripting +4	1 month ago
CVE-2026-63720	Code Injection in CVE-2026-63720 (CVE-2026-63720) code injection in CVE-2026-63720 (CVE-2026-63720). Successful exploitation can lead to full system takeover.	High	Python Remote Code Execution Cwe 94	1 month ago
CVE-2026-15962	Unsafe Deserialization in wordpress (CVE-2026-15962) vulnerability in wordpress (CVE-2026-15962). Successful exploitation can lead to full system takeover.	High	PHP WordPress Insecure Deserialization Cwe 502	1 month ago
CVE-2026-66013	Vulnerability in CVE-2026-66013 (CVE-2026-66013) vulnerability in CVE-2026-66013 (CVE-2026-66013). Risk of unauthorized operations or information disclosure.		Authentication Bypass Cwe 639	1 month ago
CVE-2026-64400	Vulnerability in path-traversal (CVE-2026-64400) vulnerability in path-traversal (CVE-2026-64400). Risk of unauthorized operations or information disclosure.	High	Path Traversal	1 month ago
CVE-2026-16766	OS Command Injection in CVE-2026-16766 (CVE-2026-16766) OS command injection in CVE-2026-16766 (CVE-2026-16766). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 78	1 month ago
CVE-2026-15425	Cross-Site Scripting (XSS) in wordpress (CVE-2026-15425) cross-site scripting in wordpress (CVE-2026-15425). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-14955	Path Traversal in wordpress (CVE-2026-14955) path traversal in wordpress (CVE-2026-14955). Confidential information can be exposed externally.	Medium	WordPress Path Traversal Cwe 22	1 month ago
CVE-2026-10818	Unrestricted File Upload in wordpress (CVE-2026-10818) vulnerability in wordpress (CVE-2026-10818). Successful exploitation can lead to full system takeover.	High	WordPress Remote Code Execution Cwe 434	1 month ago
CVE-2026-66373	Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,... Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,...	High	Remote Code Execution Cwe 415 Redis	1 month ago
CVE-2026-66374	Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the... Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the...	High	Remote Code Execution Cwe 1284 DNS Heap Overflow	1 month ago
CVE-2026-73502	Vulnerability in github.com/getkin/kin-openapi (CVE-2026-73502) vulnerability in github.com/getkin/kin-openapi (CVE-2026-73502). Risk of unauthorized operations or information disclosure. Exploitable via ``HEAD``. Mitigation: upgrade to `0.144.0` or later.	Medium	Denial of Service Cwe 476	1 month ago
CVE-2026-73647	Vulnerability in quasar (CVE-2026-73647) vulnerability in quasar (CVE-2026-73647). Risk of unauthorized operations or information disclosure. Exploitable via ``__proto__``. Mitigation: upgrade to `2.22.0` or later.	Medium	JavaScript Vue.js Denial of Service Cwe 1321	1 month ago
CVE-2026-73413	Vulnerability in shescape (CVE-2026-73413) vulnerability in shescape (CVE-2026-73413). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.1` or later.		JavaScript Denial of Service Cwe 400 Cwe 407	1 month ago
CVE-2026-73493	Vulnerability in org.http4s:http4s-blaze-server_2.13 (CVE-2026-73493) vulnerability in org.http4s:http4s-blaze-server_2.13 (CVE-2026-73493). Risk of unauthorized operations or information disclosure. Exploitable via ``OutOfMemoryError``. Mitigation: upgrade to `1.0.0-M42` or later.	High	Denial of Service Cwe 770	1 month ago
CVE-2026-66040	FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability... FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability...	High	Cwe 122 Ffmpeg Remote Code Execution	1 month ago
CVE-2026-66036	FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability... FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability...	High	Cwe 122 Ffmpeg Remote Code Execution	1 month ago
CVE-2026-57531	Cross-Site Scripting (XSS) in CVE-2026-57531 (CVE-2026-57531) cross-site scripting in CVE-2026-57531 (CVE-2026-57531). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-57530	Cross-Site Scripting (XSS) in CVE-2026-57530 (CVE-2026-57530) cross-site scripting in CVE-2026-57530 (CVE-2026-57530). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-65707	SQL Injection in sqli (CVE-2026-65707) SQL injection in sqli (CVE-2026-65707). Confidential information can be exposed externally.	Medium	PHP SQL Injection Cwe 89	1 month ago

Vulnerabilities

🍪 About cookies