Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-15369 Privilege Escalation in wordpress (CVE-2026-15369)
vulnerability in wordpress (CVE-2026-15369). Successful exploitation can lead to full system takeover.
CVE-2026-82460 Path Traversal in path-traversal (CVE-2026-82460)
path traversal in path-traversal (CVE-2026-82460). Successful exploitation can lead to full system takeover.
CVE-2026-82454 Vulnerability in CVE-2026-82454 (CVE-2026-82454)
vulnerability in CVE-2026-82454 (CVE-2026-82454). Confidential information can be exposed externally.
CVE-2026-82452 Vulnerability in c (CVE-2026-82452)
vulnerability in c (CVE-2026-82452). Successful exploitation can lead to full system takeover.
CVE-2026-82448 Vulnerability in CVE-2026-82448 (CVE-2026-82448)
vulnerability in CVE-2026-82448 (CVE-2026-82448). Successful exploitation can lead to full system takeover.
CVE-2026-14494 Unrestricted File Upload in wordpress (CVE-2026-14494)
vulnerability in wordpress (CVE-2026-14494). Successful exploitation can lead to full system takeover.
CVE-2026-19295 Vulnerability in privilege-escalation (CVE-2026-19295)
vulnerability in privilege-escalation (CVE-2026-19295). Successful exploitation can lead to full system takeover.
CVE-2026-19286 Code Injection in CVE-2026-19286 (CVE-2026-19286)
code injection in CVE-2026-19286 (CVE-2026-19286). Successful exploitation can lead to full system takeover.
CVE-2026-82329 Authentication Bypass in CVE-2026-82329 (CVE-2026-82329)
authentication bypass in CVE-2026-82329 (CVE-2026-82329). Successful exploitation can lead to full system takeover.
CVE-2026-82277 Vulnerability in csrf (CVE-2026-82277)
vulnerability in csrf (CVE-2026-82277). Successful exploitation can lead to full system takeover.
CVE-2026-82266 Vulnerability in CVE-2026-82266 (CVE-2026-82266)
vulnerability in CVE-2026-82266 (CVE-2026-82266). Successful exploitation can lead to full system takeover.
CVE-2026-54745 Vulnerability in CVE-2026-54745 (CVE-2026-54745)
vulnerability in CVE-2026-54745 (CVE-2026-54745). Successful exploitation can lead to full system takeover. Exploitable via `Referer header`.
CVE-2026-55634 SQL Injection in pimcore/pimcore (CVE-2026-55634)
SQL injection in pimcore/pimcore (CVE-2026-55634). Successful exploitation can lead to full system takeover. Exploitable via ``objects``. Mitigation: upgrade to `2026.1.6` or later.
CVE-2026-55247 Vulnerability in plone.app.event (CVE-2026-55247)
vulnerability in plone.app.event (CVE-2026-55247). Risk of unauthorized operations or information disclosure. Exploitable via ``plone.app.event``. Mitigation: upgrade to `6.0.1` or later.
CVE-2026-55248 Vulnerability in plone.app.portlets (CVE-2026-55248)
vulnerability in plone.app.portlets (CVE-2026-55248). Risk of unauthorized operations or information disclosure. Exploitable via ``plone.app.portlets``. Mitigation: upgrade to `5.0.8` or later.
CVE-2026-55565 Code Injection in org.yamcs:yamcs-core (CVE-2026-55565)
code injection in org.yamcs:yamcs-core (CVE-2026-55565). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/archive/{instance}`. Mitigation: upgrade to `5.12.8` or later.
CVE-2026-55559 Code Injection in org.yamcs:yamcs-core (CVE-2026-55559)
code injection in org.yamcs:yamcs-core (CVE-2026-55559). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/instances`. Mitigation: upgrade to `5.12.8` or later.
CVE-2026-55511 Code Injection in org.yamcs:yamcs-core (CVE-2026-55511)
code injection in org.yamcs:yamcs-core (CVE-2026-55511). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/archive/{instance}`. Mitigation: upgrade to `5.12.8` or later.
CVE-2026-54755 Vulnerability in github.com/klever-io/klever-go (CVE-2026-54755)
vulnerability in github.com/klever-io/klever-go (CVE-2026-54755). Data can be tampered with by attackers. Exploitable via ``uint32``. Mitigation: upgrade to `1.7.19` or later.
CVE-2026-54754 Vulnerability in github.com/klever-io/klever-go (CVE-2026-54754)
vulnerability in github.com/klever-io/klever-go (CVE-2026-54754). Data can be tampered with by attackers. Exploitable via ``MarketBuy``. Mitigation: upgrade to `1.7.19` or later.
CVE-2026-37751 OS Command Injection in CVE-2026-37751 (CVE-2026-37751)
OS command injection in CVE-2026-37751 (CVE-2026-37751). Successful exploitation can lead to full system takeover.
CVE-2026-82244 Code Injection in CVE-2026-82244 (CVE-2026-82244)
code injection in CVE-2026-82244 (CVE-2026-82244). Successful exploitation can lead to full system takeover.
CVE-2026-82222 Unsafe Deserialization in deserialization (CVE-2026-82222)
vulnerability in deserialization (CVE-2026-82222). Successful exploitation can lead to full system takeover.
CVE-2026-42007 Use-After-Free in CVE-2026-42007 (CVE-2026-42007)
vulnerability in CVE-2026-42007 (CVE-2026-42007). Risk of unauthorized operations or information disclosure.
CVE-2026-76581 Vulnerability in wordpress (CVE-2026-76581)
vulnerability in wordpress (CVE-2026-76581). Successful exploitation can lead to full system takeover. Exploitable via ``wdpsso_step1``.
CVE-2026-78032 Unsafe Deserialization in deserialization (CVE-2026-78032)
vulnerability in deserialization (CVE-2026-78032). Successful exploitation can lead to full system takeover.
CVE-2026-40541 Cross-Site Scripting (XSS) in CVE-2026-40541 (CVE-2026-40541)
cross-site scripting in CVE-2026-40541 (CVE-2026-40541). Successful exploitation can lead to full system takeover.
CVE-2026-82082 OS Command Injection in CVE-2026-82082 (CVE-2026-82082)
OS command injection in CVE-2026-82082 (CVE-2026-82082). Successful exploitation can lead to full system takeover.
CVE-2026-61800 Path Traversal in CVE-2026-61800 (CVE-2026-61800)
path traversal in CVE-2026-61800 (CVE-2026-61800). Successful exploitation can lead to full system takeover.
CVE-2026-76943 Vulnerability in CVE-2026-76943 (CVE-2026-76943)
vulnerability in CVE-2026-76943 (CVE-2026-76943). Successful exploitation can lead to full system takeover.
CVE-2026-78239 Vulnerability in CVE-2026-78239 (CVE-2026-78239)
vulnerability in CVE-2026-78239 (CVE-2026-78239). Successful exploitation can lead to full system takeover.
CVE-2026-75337 Path Traversal in path-traversal (CVE-2026-75337)
path traversal in path-traversal (CVE-2026-75337). Successful exploitation can lead to full system takeover.
CVE-2026-50152 Vulnerability in CVE-2026-50152 (CVE-2026-50152)
vulnerability in CVE-2026-50152 (CVE-2026-50152). Confidential information can be exposed externally.
CVE-2026-81934 Use-After-Free in CVE-2026-81934 (CVE-2026-81934)
vulnerability in CVE-2026-81934 (CVE-2026-81934). Successful exploitation can lead to full system takeover.
CVE-2026-59313 Vulnerability in spring (CVE-2026-59313)
vulnerability in spring (CVE-2026-59313). Successful exploitation can lead to full system takeover.
CVE-2026-59283 Vulnerability in spring (CVE-2026-59283)
vulnerability in spring (CVE-2026-59283). Data can be tampered with by attackers.
CVE-2026-37006 Authentication Bypass in CVE-2026-37006 (CVE-2026-37006)
authentication bypass in CVE-2026-37006 (CVE-2026-37006). Successful exploitation can lead to full system takeover.
CVE-2026-19092 Vulnerability in wordpress (CVE-2026-19092)
vulnerability in wordpress (CVE-2026-19092). Successful exploitation can lead to full system takeover.
CVE-2026-81735 Vulnerability in CVE-2026-81735 (CVE-2026-81735)
vulnerability in CVE-2026-81735 (CVE-2026-81735). Successful exploitation can lead to full system takeover.
CVE-2026-81707 Vulnerability in CVE-2026-81707 (CVE-2026-81707)
vulnerability in CVE-2026-81707 (CVE-2026-81707). Successful exploitation can lead to full system takeover.
CVE-2026-81701 Vulnerability in CVE-2026-81701 (CVE-2026-81701)
vulnerability in CVE-2026-81701 (CVE-2026-81701). Successful exploitation can lead to full system takeover.
CVE-2026-81700 Vulnerability in CVE-2026-81700 (CVE-2026-81700)
vulnerability in CVE-2026-81700 (CVE-2026-81700). Successful exploitation can lead to full system takeover.
CVE-2026-81098 Vulnerability in CVE-2026-81098 (CVE-2026-81098)
vulnerability in CVE-2026-81098 (CVE-2026-81098). Confidential information can be exposed externally.
CVE-2026-81094 Vulnerability in CVE-2026-81094 (CVE-2026-81094)
vulnerability in CVE-2026-81094 (CVE-2026-81094). Confidential information can be exposed externally.
CVE-2026-81096 Code Injection in CVE-2026-81096 (CVE-2026-81096)
code injection in CVE-2026-81096 (CVE-2026-81096). Successful exploitation can lead to full system takeover.
CVE-2026-57499 Vulnerability in CVE-2026-57499 (CVE-2026-57499)
vulnerability in CVE-2026-57499 (CVE-2026-57499). Successful exploitation can lead to full system takeover. Exploitable via ``ip_address``. Mitigation: upgrade to `2.2.2` or later.
CVE-2026-16279 Vulnerability in CVE-2026-16279 (CVE-2026-16279)
vulnerability in CVE-2026-16279 (CVE-2026-16279). Confidential information can be exposed externally.
CVE-2026-74233 OS Command Injection in c (CVE-2026-74233)
OS command injection in c (CVE-2026-74233). Successful exploitation can lead to full system takeover.
CVE-2026-74232 Vulnerability in CVE-2026-74232 (CVE-2026-74232)
vulnerability in CVE-2026-74232 (CVE-2026-74232). Successful exploitation can lead to full system takeover.
CVE-2026-78288 Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.
Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →