Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-51821 |
|
SQL Injection in sqli (CVE-2026-51821)
SQL injection in sqli (CVE-2026-51821). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39042 |
|
Vulnerability in dos (CVE-2026-39042)
vulnerability in dos (CVE-2026-39042). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15684 |
|
Vulnerability in privilege-escalation (CVE-2026-15684)
vulnerability in privilege-escalation (CVE-2026-15684). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15680 |
|
Vulnerability in CVE-2026-15680 (CVE-2026-15680)
vulnerability in CVE-2026-15680 (CVE-2026-15680). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15597 |
|
Vulnerability in sqli (CVE-2026-15597)
vulnerability in sqli (CVE-2026-15597). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15596 |
|
Cross-Site Scripting (XSS) in CVE-2026-15596 (CVE-2026-15596)
cross-site scripting in CVE-2026-15596 (CVE-2026-15596). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12536 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12536)
cross-site scripting in wordpress (CVE-2026-12536). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15595 |
|
Cross-Site Scripting (XSS) in CVE-2026-15595 (CVE-2026-15595)
cross-site scripting in CVE-2026-15595 (CVE-2026-15595). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58409 |
|
Unrestricted File Upload in CVE-2026-58409 (CVE-2026-58409)
vulnerability in CVE-2026-58409 (CVE-2026-58409). Successful exploitation can lead to full system takeover. Exploitable via ``php``.
|
| CVE-2026-6875 |
|
Code Injection in CVE-2026-6875 (CVE-2026-6875)
code injection in CVE-2026-6875 (CVE-2026-6875). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58228 |
|
Cross-Site Scripting (XSS) in CVE-2026-58228 (CVE-2026-58228)
cross-site scripting in CVE-2026-58228 (CVE-2026-58228). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49972 |
|
Unrestricted File Upload in laravel (CVE-2026-49972)
vulnerability in laravel (CVE-2026-49972). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49971 |
|
Cross-Site Scripting (XSS) in laravel (CVE-2026-49971)
cross-site scripting in laravel (CVE-2026-49971). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49970 |
|
Path Traversal in plank/laravel-mediable (CVE-2026-49970)
path traversal in plank/laravel-mediable (CVE-2026-49970). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.0.0` or later.
|
| CVE-2026-26396 |
|
Path Traversal in path-traversal (CVE-2026-26396)
path traversal in path-traversal (CVE-2026-26396). Confidential information can be exposed externally.
|
| CVE-2025-45869 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-45869)
SSRF in ssrf (CVE-2025-45869). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61505 |
|
Path Traversal in path-traversal (CVE-2026-61505)
path traversal in path-traversal (CVE-2026-61505). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61500 |
|
Vulnerability in CVE-2026-61500 (CVE-2026-61500)
vulnerability in CVE-2026-61500 (CVE-2026-61500). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61502 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-61502)
vulnerability in csrf (CVE-2026-61502). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61462 |
|
Vulnerability in path-traversal (CVE-2026-61462)
vulnerability in path-traversal (CVE-2026-61462). Confidential information can be exposed externally.
|
| CVE-2026-61463 |
|
Privilege Escalation in privilege-escalation (CVE-2026-61463)
vulnerability in privilege-escalation (CVE-2026-61463). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57433 |
|
Vulnerability in deserialization (CVE-2026-57433)
vulnerability in deserialization (CVE-2026-57433). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59245 |
|
Privilege Escalation in apache (CVE-2026-59245)
vulnerability in apache (CVE-2026-59245). Confidential information can be exposed externally. Exploitable via ``dag_id``.
|
| CVE-2026-6847 |
|
Vulnerability in CVE-2026-6847 (CVE-2026-6847)
vulnerability in CVE-2026-6847 (CVE-2026-6847). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15559 |
|
Vulnerability in sqli (CVE-2026-15559)
vulnerability in sqli (CVE-2026-15559). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15584 |
|
Vulnerability in privilege-escalation (CVE-2026-15584)
vulnerability in privilege-escalation (CVE-2026-15584). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12257 |
|
Code Injection in CVE-2026-12257 (CVE-2026-12257)
code injection in CVE-2026-12257 (CVE-2026-12257). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15558 |
|
Vulnerability in sqli (CVE-2026-15558)
vulnerability in sqli (CVE-2026-15558). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4765 |
|
Cross-Site Scripting (XSS) in CVE-2026-4765 (CVE-2026-4765)
cross-site scripting in CVE-2026-4765 (CVE-2026-4765). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61970 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-61970)
SSRF in ssrf (CVE-2026-61970). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61956 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-61956)
vulnerability in csrf (CVE-2026-61956). Data can be tampered with by attackers.
|
| CVE-2026-61955 |
|
SQL Injection in sqli (CVE-2026-61955)
SQL injection in sqli (CVE-2026-61955). Confidential information can be exposed externally.
|
| CVE-2026-59521 |
|
Unsafe Deserialization in deserialization (CVE-2026-59521)
vulnerability in deserialization (CVE-2026-59521). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57813 |
|
Vulnerability in privilege-escalation (CVE-2026-57813)
vulnerability in privilege-escalation (CVE-2026-57813). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59518 |
|
Unsafe Deserialization in deserialization (CVE-2026-59518)
vulnerability in deserialization (CVE-2026-59518). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59516 |
|
Cross-Site Scripting (XSS) in CVE-2026-59516 (CVE-2026-59516)
cross-site scripting in CVE-2026-59516 (CVE-2026-59516). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57816 |
|
Cross-Site Scripting (XSS) in CVE-2026-57816 (CVE-2026-57816)
cross-site scripting in CVE-2026-57816 (CVE-2026-57816). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57814 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-57814)
cross-site scripting in wordpress (CVE-2026-57814). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59515 |
|
SQL Injection in sqli (CVE-2026-59515)
SQL injection in sqli (CVE-2026-59515). Confidential information can be exposed externally.
|
| CVE-2026-57815 |
|
Path Traversal in wordpress (CVE-2026-57815)
path traversal in wordpress (CVE-2026-57815). Confidential information can be exposed externally.
|
| CVE-2026-57810 |
|
SQL Injection in sqli (CVE-2026-57810)
SQL injection in sqli (CVE-2026-57810). Confidential information can be exposed externally.
|
| CVE-2026-57783 |
|
Cross-Site Scripting (XSS) in CVE-2026-57783 (CVE-2026-57783)
cross-site scripting in CVE-2026-57783 (CVE-2026-57783). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57780 |
|
Cross-Site Scripting (XSS) in CVE-2026-57780 (CVE-2026-57780)
cross-site scripting in CVE-2026-57780 (CVE-2026-57780). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57786 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57786)
vulnerability in csrf (CVE-2026-57786). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57787 |
|
SQL Injection in sqli (CVE-2026-57787)
SQL injection in sqli (CVE-2026-57787). Confidential information can be exposed externally.
|
| CVE-2026-57771 |
|
SQL Injection in sqli (CVE-2026-57771)
SQL injection in sqli (CVE-2026-57771). Confidential information can be exposed externally.
|
| CVE-2026-57772 |
|
SQL Injection in wordpress (CVE-2026-57772)
SQL injection in wordpress (CVE-2026-57772). Confidential information can be exposed externally.
|
| CVE-2026-57773 |
|
SQL Injection in sqli (CVE-2026-57773)
SQL injection in sqli (CVE-2026-57773). Confidential information can be exposed externally.
|
| CVE-2026-57770 |
|
Unsafe Deserialization in deserialization (CVE-2026-57770)
vulnerability in deserialization (CVE-2026-57770). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57768 |
|
Vulnerability in privilege-escalation (CVE-2026-57768)
vulnerability in privilege-escalation (CVE-2026-57768). Data can be tampered with by attackers.
|