Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-15369 |
|
Privilege Escalation in wordpress (CVE-2026-15369)
vulnerability in wordpress (CVE-2026-15369). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82460 |
|
Path Traversal in path-traversal (CVE-2026-82460)
path traversal in path-traversal (CVE-2026-82460). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82454 |
|
Vulnerability in CVE-2026-82454 (CVE-2026-82454)
vulnerability in CVE-2026-82454 (CVE-2026-82454). Confidential information can be exposed externally.
|
| CVE-2026-82452 |
|
Vulnerability in c (CVE-2026-82452)
vulnerability in c (CVE-2026-82452). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82448 |
|
Vulnerability in CVE-2026-82448 (CVE-2026-82448)
vulnerability in CVE-2026-82448 (CVE-2026-82448). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14494 |
|
Unrestricted File Upload in wordpress (CVE-2026-14494)
vulnerability in wordpress (CVE-2026-14494). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19295 |
|
Vulnerability in privilege-escalation (CVE-2026-19295)
vulnerability in privilege-escalation (CVE-2026-19295). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19286 |
|
Code Injection in CVE-2026-19286 (CVE-2026-19286)
code injection in CVE-2026-19286 (CVE-2026-19286). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82329 |
|
Authentication Bypass in CVE-2026-82329 (CVE-2026-82329)
authentication bypass in CVE-2026-82329 (CVE-2026-82329). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82277 |
|
Vulnerability in csrf (CVE-2026-82277)
vulnerability in csrf (CVE-2026-82277). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82266 |
|
Vulnerability in CVE-2026-82266 (CVE-2026-82266)
vulnerability in CVE-2026-82266 (CVE-2026-82266). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54745 |
|
Vulnerability in CVE-2026-54745 (CVE-2026-54745)
vulnerability in CVE-2026-54745 (CVE-2026-54745). Successful exploitation can lead to full system takeover. Exploitable via `Referer header`.
|
| CVE-2026-55634 |
|
SQL Injection in pimcore/pimcore (CVE-2026-55634)
SQL injection in pimcore/pimcore (CVE-2026-55634). Successful exploitation can lead to full system takeover. Exploitable via ``objects``. Mitigation: upgrade to `2026.1.6` or later.
|
| CVE-2026-55247 |
|
Vulnerability in plone.app.event (CVE-2026-55247)
vulnerability in plone.app.event (CVE-2026-55247). Risk of unauthorized operations or information disclosure. Exploitable via ``plone.app.event``. Mitigation: upgrade to `6.0.1` or later.
|
| CVE-2026-55248 |
|
Vulnerability in plone.app.portlets (CVE-2026-55248)
vulnerability in plone.app.portlets (CVE-2026-55248). Risk of unauthorized operations or information disclosure. Exploitable via ``plone.app.portlets``. Mitigation: upgrade to `5.0.8` or later.
|
| CVE-2026-55565 |
|
Code Injection in org.yamcs:yamcs-core (CVE-2026-55565)
code injection in org.yamcs:yamcs-core (CVE-2026-55565). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/archive/{instance}`. Mitigation: upgrade to `5.12.8` or later.
|
| CVE-2026-55559 |
|
Code Injection in org.yamcs:yamcs-core (CVE-2026-55559)
code injection in org.yamcs:yamcs-core (CVE-2026-55559). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/instances`. Mitigation: upgrade to `5.12.8` or later.
|
| CVE-2026-55511 |
|
Code Injection in org.yamcs:yamcs-core (CVE-2026-55511)
code injection in org.yamcs:yamcs-core (CVE-2026-55511). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/archive/{instance}`. Mitigation: upgrade to `5.12.8` or later.
|
| CVE-2026-54755 |
|
Vulnerability in github.com/klever-io/klever-go (CVE-2026-54755)
vulnerability in github.com/klever-io/klever-go (CVE-2026-54755). Data can be tampered with by attackers. Exploitable via ``uint32``. Mitigation: upgrade to `1.7.19` or later.
|
| CVE-2026-54754 |
|
Vulnerability in github.com/klever-io/klever-go (CVE-2026-54754)
vulnerability in github.com/klever-io/klever-go (CVE-2026-54754). Data can be tampered with by attackers. Exploitable via ``MarketBuy``. Mitigation: upgrade to `1.7.19` or later.
|
| CVE-2026-37751 |
|
OS Command Injection in CVE-2026-37751 (CVE-2026-37751)
OS command injection in CVE-2026-37751 (CVE-2026-37751). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82244 |
|
Code Injection in CVE-2026-82244 (CVE-2026-82244)
code injection in CVE-2026-82244 (CVE-2026-82244). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82222 |
|
Unsafe Deserialization in deserialization (CVE-2026-82222)
vulnerability in deserialization (CVE-2026-82222). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42007 |
|
Use-After-Free in CVE-2026-42007 (CVE-2026-42007)
vulnerability in CVE-2026-42007 (CVE-2026-42007). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76581 |
|
Vulnerability in wordpress (CVE-2026-76581)
vulnerability in wordpress (CVE-2026-76581). Successful exploitation can lead to full system takeover. Exploitable via ``wdpsso_step1``.
|
| CVE-2026-78032 |
|
Unsafe Deserialization in deserialization (CVE-2026-78032)
vulnerability in deserialization (CVE-2026-78032). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40541 |
|
Cross-Site Scripting (XSS) in CVE-2026-40541 (CVE-2026-40541)
cross-site scripting in CVE-2026-40541 (CVE-2026-40541). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82082 |
|
OS Command Injection in CVE-2026-82082 (CVE-2026-82082)
OS command injection in CVE-2026-82082 (CVE-2026-82082). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61800 |
|
Path Traversal in CVE-2026-61800 (CVE-2026-61800)
path traversal in CVE-2026-61800 (CVE-2026-61800). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76943 |
|
Vulnerability in CVE-2026-76943 (CVE-2026-76943)
vulnerability in CVE-2026-76943 (CVE-2026-76943). Successful exploitation can lead to full system takeover.
|
| CVE-2026-78239 |
|
Vulnerability in CVE-2026-78239 (CVE-2026-78239)
vulnerability in CVE-2026-78239 (CVE-2026-78239). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75337 |
|
Path Traversal in path-traversal (CVE-2026-75337)
path traversal in path-traversal (CVE-2026-75337). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50152 |
|
Vulnerability in CVE-2026-50152 (CVE-2026-50152)
vulnerability in CVE-2026-50152 (CVE-2026-50152). Confidential information can be exposed externally.
|
| CVE-2026-81934 |
|
Use-After-Free in CVE-2026-81934 (CVE-2026-81934)
vulnerability in CVE-2026-81934 (CVE-2026-81934). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59313 |
|
Vulnerability in spring (CVE-2026-59313)
vulnerability in spring (CVE-2026-59313). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59283 |
|
Vulnerability in spring (CVE-2026-59283)
vulnerability in spring (CVE-2026-59283). Data can be tampered with by attackers.
|
| CVE-2026-37006 |
|
Authentication Bypass in CVE-2026-37006 (CVE-2026-37006)
authentication bypass in CVE-2026-37006 (CVE-2026-37006). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19092 |
|
Vulnerability in wordpress (CVE-2026-19092)
vulnerability in wordpress (CVE-2026-19092). Successful exploitation can lead to full system takeover.
|
| CVE-2026-81735 |
|
Vulnerability in CVE-2026-81735 (CVE-2026-81735)
vulnerability in CVE-2026-81735 (CVE-2026-81735). Successful exploitation can lead to full system takeover.
|
| CVE-2026-81707 |
|
Vulnerability in CVE-2026-81707 (CVE-2026-81707)
vulnerability in CVE-2026-81707 (CVE-2026-81707). Successful exploitation can lead to full system takeover.
|
| CVE-2026-81701 |
|
Vulnerability in CVE-2026-81701 (CVE-2026-81701)
vulnerability in CVE-2026-81701 (CVE-2026-81701). Successful exploitation can lead to full system takeover.
|
| CVE-2026-81700 |
|
Vulnerability in CVE-2026-81700 (CVE-2026-81700)
vulnerability in CVE-2026-81700 (CVE-2026-81700). Successful exploitation can lead to full system takeover.
|
| CVE-2026-81098 |
|
Vulnerability in CVE-2026-81098 (CVE-2026-81098)
vulnerability in CVE-2026-81098 (CVE-2026-81098). Confidential information can be exposed externally.
|
| CVE-2026-81094 |
|
Vulnerability in CVE-2026-81094 (CVE-2026-81094)
vulnerability in CVE-2026-81094 (CVE-2026-81094). Confidential information can be exposed externally.
|
| CVE-2026-81096 |
|
Code Injection in CVE-2026-81096 (CVE-2026-81096)
code injection in CVE-2026-81096 (CVE-2026-81096). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57499 |
|
Vulnerability in CVE-2026-57499 (CVE-2026-57499)
vulnerability in CVE-2026-57499 (CVE-2026-57499). Successful exploitation can lead to full system takeover. Exploitable via ``ip_address``. Mitigation: upgrade to `2.2.2` or later.
|
| CVE-2026-16279 |
|
Vulnerability in CVE-2026-16279 (CVE-2026-16279)
vulnerability in CVE-2026-16279 (CVE-2026-16279). Confidential information can be exposed externally.
|
| CVE-2026-74233 |
|
OS Command Injection in c (CVE-2026-74233)
OS command injection in c (CVE-2026-74233). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74232 |
|
Vulnerability in CVE-2026-74232 (CVE-2026-74232)
vulnerability in CVE-2026-74232 (CVE-2026-74232). Successful exploitation can lead to full system takeover.
|
| CVE-2026-78288 |
|
Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.
Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.
|