Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-75145 |
|
Vulnerability in c (CVE-2026-75145)
vulnerability in c (CVE-2026-75145). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75144 |
|
Vulnerability in c (CVE-2026-75144)
vulnerability in c (CVE-2026-75144). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75143 |
|
Vulnerability in c (CVE-2026-75143)
vulnerability in c (CVE-2026-75143). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75142 |
|
Vulnerability in c (CVE-2026-75142)
vulnerability in c (CVE-2026-75142). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49392 |
|
Vulnerability in cpp (CVE-2026-49392)
vulnerability in cpp (CVE-2026-49392). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45798 |
|
Vulnerability in c (CVE-2026-45798)
vulnerability in c (CVE-2026-45798). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44901 |
|
Unsafe Deserialization in CVE-2026-44901 (CVE-2026-44901)
vulnerability in CVE-2026-44901 (CVE-2026-44901). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64852 |
|
Vulnerability in CVE-2026-64852 (CVE-2026-64852)
vulnerability in CVE-2026-64852 (CVE-2026-64852). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64850 |
|
Code Injection in CVE-2026-64850 (CVE-2026-64850)
code injection in CVE-2026-64850 (CVE-2026-64850). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64851 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-64851)
cross-site scripting in wordpress (CVE-2026-64851). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63407 |
|
Vulnerability in CVE-2026-63407 (CVE-2026-63407)
vulnerability in CVE-2026-63407 (CVE-2026-63407). Confidential information can be exposed externally.
|
| CVE-2026-62672 |
|
Vulnerability in CVE-2026-62672 (CVE-2026-62672)
vulnerability in CVE-2026-62672 (CVE-2026-62672). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62668 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-62668 (CVE-2026-62668)
SSRF in CVE-2026-62668 (CVE-2026-62668). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62670 |
|
Vulnerability in CVE-2026-62670 (CVE-2026-62670)
vulnerability in CVE-2026-62670 (CVE-2026-62670). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61690 |
|
Vulnerability in CVE-2026-61690 (CVE-2026-61690)
vulnerability in CVE-2026-61690 (CVE-2026-61690). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61607 |
|
Cross-Site Scripting (XSS) in CVE-2026-61607 (CVE-2026-61607)
cross-site scripting in CVE-2026-61607 (CVE-2026-61607). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/media`.
|
| CVE-2026-44254 |
|
Vulnerability in c (CVE-2026-44254)
vulnerability in c (CVE-2026-44254). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18430 |
|
Cross-Site Scripting (XSS) in CVE-2026-18430 (CVE-2026-18430)
cross-site scripting in CVE-2026-18430 (CVE-2026-18430). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75956 |
|
Vulnerability in dos (CVE-2026-75956)
vulnerability in dos (CVE-2026-75956). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47187 |
|
Vulnerability in c (CVE-2026-47187)
vulnerability in c (CVE-2026-47187). Confidential information can be exposed externally.
|
| CVE-2026-45272 |
|
Code Injection in CVE-2026-45272 (CVE-2026-45272)
code injection in CVE-2026-45272 (CVE-2026-45272). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40507 |
|
Cross-Site Scripting (XSS) in CVE-2026-40507 (CVE-2026-40507)
cross-site scripting in CVE-2026-40507 (CVE-2026-40507). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40508 |
|
Cross-Site Scripting (XSS) in CVE-2026-40508 (CVE-2026-40508)
cross-site scripting in CVE-2026-40508 (CVE-2026-40508). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18756 |
|
Cross-Site Scripting (XSS) in CVE-2026-18756 (CVE-2026-18756)
cross-site scripting in CVE-2026-18756 (CVE-2026-18756). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76228 |
|
OS Command Injection in c (CVE-2026-76228)
OS command injection in c (CVE-2026-76228). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76224 |
|
Code Injection in CVE-2026-76224 (CVE-2026-76224)
code injection in CVE-2026-76224 (CVE-2026-76224). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76223 |
|
Vulnerability in CVE-2026-76223 (CVE-2026-76223)
vulnerability in CVE-2026-76223 (CVE-2026-76223). Data can be tampered with by attackers. Mitigation: upgrade to `26.8.1` or later.
|
| CVE-2026-76215 |
|
Vulnerability in c (CVE-2026-76215)
vulnerability in c (CVE-2026-76215). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76210 |
|
Vulnerability in CVE-2026-76210 (CVE-2026-76210)
vulnerability in CVE-2026-76210 (CVE-2026-76210). Confidential information can be exposed externally.
|
| CVE-2026-76212 |
|
Vulnerability in sqli (CVE-2026-76212)
vulnerability in sqli (CVE-2026-76212). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73389 |
|
Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.
Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.
|
| CVE-2026-73364 |
|
Customer PHP Object Injection in Flexible Subscriptions <= 1.8.1 versions.
Customer PHP Object Injection in Flexible Subscriptions <= 1.8.1 versions.
|
| CVE-2026-67364 |
|
Code Injection in c (CVE-2026-67364)
code injection in c (CVE-2026-67364). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75981 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-75981)
cross-site scripting in wordpress (CVE-2026-75981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18937 |
|
Code Injection in wordpress (CVE-2026-18937)
code injection in wordpress (CVE-2026-18937). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19056 |
|
Cross-Site Scripting (XSS) in c (CVE-2026-19056)
cross-site scripting in c (CVE-2026-19056). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11565 |
|
Vulnerability in wordpress (CVE-2026-11565)
vulnerability in wordpress (CVE-2026-11565). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14287 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14287)
cross-site scripting in wordpress (CVE-2026-14287). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14334 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14334)
cross-site scripting in wordpress (CVE-2026-14334). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18202 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18202)
cross-site scripting in wordpress (CVE-2026-18202). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19942 |
|
Path Traversal in wordpress (CVE-2026-19942)
path traversal in wordpress (CVE-2026-19942). Data can be tampered with by attackers.
|
| CVE-2026-76050 |
|
Vulnerability in sqli (CVE-2026-76050)
vulnerability in sqli (CVE-2026-76050). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76049 |
|
Vulnerability in sqli (CVE-2026-76049)
vulnerability in sqli (CVE-2026-76049). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76048 |
|
Vulnerability in sqli (CVE-2026-76048)
vulnerability in sqli (CVE-2026-76048). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76014 |
|
Vulnerability in c (CVE-2026-76014)
vulnerability in c (CVE-2026-76014). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75987 |
|
Vulnerability in deserialization (CVE-2026-75987)
vulnerability in deserialization (CVE-2026-75987). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75986 |
|
Vulnerability in sqli (CVE-2026-75986)
vulnerability in sqli (CVE-2026-75986). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75979 |
|
Vulnerability in CVE-2026-75979 (CVE-2026-75979)
vulnerability in CVE-2026-75979 (CVE-2026-75979). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75978 |
|
Vulnerability in c (CVE-2026-75978)
vulnerability in c (CVE-2026-75978). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52875 |
|
Path Traversal in CVE-2026-52875 (CVE-2026-52875)
path traversal in CVE-2026-52875 (CVE-2026-52875). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.0` or later.
|