Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2026-51821 SQL Injection in sqli (CVE-2026-51821)
SQL injection in sqli (CVE-2026-51821). Successful exploitation can lead to full system takeover.
CVE-2026-39042 Vulnerability in dos (CVE-2026-39042)
vulnerability in dos (CVE-2026-39042). Risk of unauthorized operations or information disclosure.
CVE-2026-15684 Vulnerability in privilege-escalation (CVE-2026-15684)
vulnerability in privilege-escalation (CVE-2026-15684). Successful exploitation can lead to full system takeover.
CVE-2026-15680 Vulnerability in CVE-2026-15680 (CVE-2026-15680)
vulnerability in CVE-2026-15680 (CVE-2026-15680). Successful exploitation can lead to full system takeover.
CVE-2026-15597 Vulnerability in sqli (CVE-2026-15597)
vulnerability in sqli (CVE-2026-15597). Risk of unauthorized operations or information disclosure.
CVE-2026-15596 Cross-Site Scripting (XSS) in CVE-2026-15596 (CVE-2026-15596)
cross-site scripting in CVE-2026-15596 (CVE-2026-15596). Risk of unauthorized operations or information disclosure.
CVE-2026-12536 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12536)
cross-site scripting in wordpress (CVE-2026-12536). Risk of unauthorized operations or information disclosure.
CVE-2026-15595 Cross-Site Scripting (XSS) in CVE-2026-15595 (CVE-2026-15595)
cross-site scripting in CVE-2026-15595 (CVE-2026-15595). Risk of unauthorized operations or information disclosure.
CVE-2026-58409 Unrestricted File Upload in CVE-2026-58409 (CVE-2026-58409)
vulnerability in CVE-2026-58409 (CVE-2026-58409). Successful exploitation can lead to full system takeover. Exploitable via ``php``.
CVE-2026-6875 Code Injection in CVE-2026-6875 (CVE-2026-6875)
code injection in CVE-2026-6875 (CVE-2026-6875). Risk of unauthorized operations or information disclosure.
CVE-2026-58228 Cross-Site Scripting (XSS) in CVE-2026-58228 (CVE-2026-58228)
cross-site scripting in CVE-2026-58228 (CVE-2026-58228). Risk of unauthorized operations or information disclosure.
CVE-2026-49972 Unrestricted File Upload in laravel (CVE-2026-49972)
vulnerability in laravel (CVE-2026-49972). Successful exploitation can lead to full system takeover.
CVE-2026-49971 Cross-Site Scripting (XSS) in laravel (CVE-2026-49971)
cross-site scripting in laravel (CVE-2026-49971). Risk of unauthorized operations or information disclosure.
CVE-2026-49970 Path Traversal in plank/laravel-mediable (CVE-2026-49970)
path traversal in plank/laravel-mediable (CVE-2026-49970). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.0.0` or later.
CVE-2026-26396 Path Traversal in path-traversal (CVE-2026-26396)
path traversal in path-traversal (CVE-2026-26396). Confidential information can be exposed externally.
CVE-2025-45869 SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-45869)
SSRF in ssrf (CVE-2025-45869). Risk of unauthorized operations or information disclosure.
CVE-2026-61505 Path Traversal in path-traversal (CVE-2026-61505)
path traversal in path-traversal (CVE-2026-61505). Risk of unauthorized operations or information disclosure.
CVE-2026-61500 Vulnerability in CVE-2026-61500 (CVE-2026-61500)
vulnerability in CVE-2026-61500 (CVE-2026-61500). Successful exploitation can lead to full system takeover.
CVE-2026-61502 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-61502)
vulnerability in csrf (CVE-2026-61502). Risk of unauthorized operations or information disclosure.
CVE-2026-61462 Vulnerability in path-traversal (CVE-2026-61462)
vulnerability in path-traversal (CVE-2026-61462). Confidential information can be exposed externally.
CVE-2026-61463 Privilege Escalation in privilege-escalation (CVE-2026-61463)
vulnerability in privilege-escalation (CVE-2026-61463). Successful exploitation can lead to full system takeover.
CVE-2026-57433 Vulnerability in deserialization (CVE-2026-57433)
vulnerability in deserialization (CVE-2026-57433). Successful exploitation can lead to full system takeover.
CVE-2026-59245 Privilege Escalation in apache (CVE-2026-59245)
vulnerability in apache (CVE-2026-59245). Confidential information can be exposed externally. Exploitable via ``dag_id``.
CVE-2026-6847 Vulnerability in CVE-2026-6847 (CVE-2026-6847)
vulnerability in CVE-2026-6847 (CVE-2026-6847). Risk of unauthorized operations or information disclosure.
CVE-2026-15559 Vulnerability in sqli (CVE-2026-15559)
vulnerability in sqli (CVE-2026-15559). Risk of unauthorized operations or information disclosure.
CVE-2026-15584 Vulnerability in privilege-escalation (CVE-2026-15584)
vulnerability in privilege-escalation (CVE-2026-15584). Successful exploitation can lead to full system takeover.
CVE-2026-12257 Code Injection in CVE-2026-12257 (CVE-2026-12257)
code injection in CVE-2026-12257 (CVE-2026-12257). Risk of unauthorized operations or information disclosure.
CVE-2026-15558 Vulnerability in sqli (CVE-2026-15558)
vulnerability in sqli (CVE-2026-15558). Risk of unauthorized operations or information disclosure.
CVE-2026-4765 Cross-Site Scripting (XSS) in CVE-2026-4765 (CVE-2026-4765)
cross-site scripting in CVE-2026-4765 (CVE-2026-4765). Risk of unauthorized operations or information disclosure.
CVE-2026-61970 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-61970)
SSRF in ssrf (CVE-2026-61970). Risk of unauthorized operations or information disclosure.
CVE-2026-61956 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-61956)
vulnerability in csrf (CVE-2026-61956). Data can be tampered with by attackers.
CVE-2026-61955 SQL Injection in sqli (CVE-2026-61955)
SQL injection in sqli (CVE-2026-61955). Confidential information can be exposed externally.
CVE-2026-59521 Unsafe Deserialization in deserialization (CVE-2026-59521)
vulnerability in deserialization (CVE-2026-59521). Successful exploitation can lead to full system takeover.
CVE-2026-57813 Vulnerability in privilege-escalation (CVE-2026-57813)
vulnerability in privilege-escalation (CVE-2026-57813). Successful exploitation can lead to full system takeover.
CVE-2026-59518 Unsafe Deserialization in deserialization (CVE-2026-59518)
vulnerability in deserialization (CVE-2026-59518). Successful exploitation can lead to full system takeover.
CVE-2026-59516 Cross-Site Scripting (XSS) in CVE-2026-59516 (CVE-2026-59516)
cross-site scripting in CVE-2026-59516 (CVE-2026-59516). Risk of unauthorized operations or information disclosure.
CVE-2026-57816 Cross-Site Scripting (XSS) in CVE-2026-57816 (CVE-2026-57816)
cross-site scripting in CVE-2026-57816 (CVE-2026-57816). Risk of unauthorized operations or information disclosure.
CVE-2026-57814 Cross-Site Scripting (XSS) in wordpress (CVE-2026-57814)
cross-site scripting in wordpress (CVE-2026-57814). Risk of unauthorized operations or information disclosure.
CVE-2026-59515 SQL Injection in sqli (CVE-2026-59515)
SQL injection in sqli (CVE-2026-59515). Confidential information can be exposed externally.
CVE-2026-57815 Path Traversal in wordpress (CVE-2026-57815)
path traversal in wordpress (CVE-2026-57815). Confidential information can be exposed externally.
CVE-2026-57810 SQL Injection in sqli (CVE-2026-57810)
SQL injection in sqli (CVE-2026-57810). Confidential information can be exposed externally.
CVE-2026-57783 Cross-Site Scripting (XSS) in CVE-2026-57783 (CVE-2026-57783)
cross-site scripting in CVE-2026-57783 (CVE-2026-57783). Risk of unauthorized operations or information disclosure.
CVE-2026-57780 Cross-Site Scripting (XSS) in CVE-2026-57780 (CVE-2026-57780)
cross-site scripting in CVE-2026-57780 (CVE-2026-57780). Risk of unauthorized operations or information disclosure.
CVE-2026-57786 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57786)
vulnerability in csrf (CVE-2026-57786). Successful exploitation can lead to full system takeover.
CVE-2026-57787 SQL Injection in sqli (CVE-2026-57787)
SQL injection in sqli (CVE-2026-57787). Confidential information can be exposed externally.
CVE-2026-57771 SQL Injection in sqli (CVE-2026-57771)
SQL injection in sqli (CVE-2026-57771). Confidential information can be exposed externally.
CVE-2026-57772 SQL Injection in wordpress (CVE-2026-57772)
SQL injection in wordpress (CVE-2026-57772). Confidential information can be exposed externally.
CVE-2026-57773 SQL Injection in sqli (CVE-2026-57773)
SQL injection in sqli (CVE-2026-57773). Confidential information can be exposed externally.
CVE-2026-57770 Unsafe Deserialization in deserialization (CVE-2026-57770)
vulnerability in deserialization (CVE-2026-57770). Successful exploitation can lead to full system takeover.
CVE-2026-57768 Vulnerability in privilege-escalation (CVE-2026-57768)
vulnerability in privilege-escalation (CVE-2026-57768). Data can be tampered with by attackers.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →