Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Clear
ID Title
CVE-2026-73366 Unauthenticated PHP Object Injection in Easy Google Maps <= 1.13.0 versions.
Unauthenticated PHP Object Injection in Easy Google Maps <= 1.13.0 versions.
CVE-2026-73341 Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions.
Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions.
CVE-2026-66046 Vulnerability in c (CVE-2026-66046)
vulnerability in c (CVE-2026-66046). Risk of unauthorized operations or information disclosure.
CVE-2026-32470 Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.
Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.
CVE-2026-66620 Editor PHP Object Injection in OptionTree <= 2.7.3 versions.
Editor PHP Object Injection in OptionTree <= 2.7.3 versions.
CVE-2026-32465 Customer PHP Object Injection in Essential Real Estate <= 5.3.3 versions.
Customer PHP Object Injection in Essential Real Estate <= 5.3.3 versions.
CVE-2026-75778 Vulnerability in sqli (CVE-2026-75778)
vulnerability in sqli (CVE-2026-75778). Risk of unauthorized operations or information disclosure.
CVE-2026-74984 Vulnerability in mozilla (CVE-2026-74984)
vulnerability in mozilla (CVE-2026-74984). Confidential information can be exposed externally.
CVE-2026-74976 Vulnerability in mozilla (CVE-2026-74976)
vulnerability in mozilla (CVE-2026-74976). Confidential information can be exposed externally.
CVE-2026-74938 Vulnerability in mozilla (CVE-2026-74938)
vulnerability in mozilla (CVE-2026-74938). Confidential information can be exposed externally.
CVE-2026-74937 Use-After-Free in mozilla (CVE-2026-74937)
vulnerability in mozilla (CVE-2026-74937). Successful exploitation can lead to full system takeover.
CVE-2026-74936 Use-After-Free in mozilla (CVE-2026-74936)
vulnerability in mozilla (CVE-2026-74936). Successful exploitation can lead to full system takeover.
CVE-2026-23935 Out-of-Bounds Read in CVE-2026-23935 (CVE-2026-23935)
vulnerability in CVE-2026-23935 (CVE-2026-23935). Risk of unauthorized operations or information disclosure.
CVE-2026-23938 Vulnerability in dos (CVE-2026-23938)
vulnerability in dos (CVE-2026-23938). Risk of unauthorized operations or information disclosure.
CVE-2026-68939 OS Command Injection in CVE-2026-68939 (CVE-2026-68939)
OS command injection in CVE-2026-68939 (CVE-2026-68939). Risk of unauthorized operations or information disclosure.
CVE-2026-75851 Privilege Escalation in CVE-2026-75851 (CVE-2026-75851)
vulnerability in CVE-2026-75851 (CVE-2026-75851). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `26.8.1` or later.
CVE-2026-75843 Privilege Escalation in CVE-2026-75843 (CVE-2026-75843)
vulnerability in CVE-2026-75843 (CVE-2026-75843). Successful exploitation can lead to full system takeover.
CVE-2026-75852 Vulnerability in c (CVE-2026-75852)
vulnerability in c (CVE-2026-75852). Successful exploitation can lead to full system takeover.
CVE-2026-75831 Cross-Site Scripting (XSS) in CVE-2026-75831 (CVE-2026-75831)
cross-site scripting in CVE-2026-75831 (CVE-2026-75831). Confidential information can be exposed externally.
CVE-2026-75840 Vulnerability in CVE-2026-75840 (CVE-2026-75840)
vulnerability in CVE-2026-75840 (CVE-2026-75840). Confidential information can be exposed externally.
CVE-2026-75827 Code Injection in CVE-2026-75827 (CVE-2026-75827)
code injection in CVE-2026-75827 (CVE-2026-75827). Successful exploitation can lead to full system takeover.
CVE-2026-75834 Cross-Site Scripting (XSS) in CVE-2026-75834 (CVE-2026-75834)
cross-site scripting in CVE-2026-75834 (CVE-2026-75834). Risk of unauthorized operations or information disclosure.
CVE-2026-75835 Vulnerability in CVE-2026-75835 (CVE-2026-75835)
vulnerability in CVE-2026-75835 (CVE-2026-75835). Risk of unauthorized operations or information disclosure.
CVE-2026-75107 Cross-Site Scripting (XSS) in CVE-2026-75107 (CVE-2026-75107)
cross-site scripting in CVE-2026-75107 (CVE-2026-75107). Risk of unauthorized operations or information disclosure.
CVE-2026-74907 Path Traversal in path-traversal (CVE-2026-74907)
path traversal in path-traversal (CVE-2026-74907). Confidential information can be exposed externally.
CVE-2026-74902 Cross-Site Scripting (XSS) in c (CVE-2026-74902)
cross-site scripting in c (CVE-2026-74902). Successful exploitation can lead to full system takeover.
CVE-2026-15371 Vulnerability in CVE-2026-15371 (CVE-2026-15371)
vulnerability in CVE-2026-15371 (CVE-2026-15371). Confidential information can be exposed externally.
CVE-2026-75090 Buffer Overflow in c (CVE-2026-75090)
vulnerability in c (CVE-2026-75090). Risk of unauthorized operations or information disclosure.
CVE-2026-75088 Vulnerability in sqli (CVE-2026-75088)
vulnerability in sqli (CVE-2026-75088). Risk of unauthorized operations or information disclosure.
CVE-2026-75089 Vulnerability in sqli (CVE-2026-75089)
vulnerability in sqli (CVE-2026-75089). Risk of unauthorized operations or information disclosure.
CVE-2026-75086 Vulnerability in sqli (CVE-2026-75086)
vulnerability in sqli (CVE-2026-75086). Risk of unauthorized operations or information disclosure.
CVE-2026-75087 Vulnerability in sqli (CVE-2026-75087)
vulnerability in sqli (CVE-2026-75087). Risk of unauthorized operations or information disclosure.
CVE-2026-75079 Vulnerability in sqli (CVE-2026-75079)
vulnerability in sqli (CVE-2026-75079). Risk of unauthorized operations or information disclosure.
CVE-2026-75080 Vulnerability in sqli (CVE-2026-75080)
vulnerability in sqli (CVE-2026-75080). Risk of unauthorized operations or information disclosure.
CVE-2026-67919 Code Injection in CVE-2026-67919 (CVE-2026-67919)
code injection in CVE-2026-67919 (CVE-2026-67919). Successful exploitation can lead to full system takeover.
CVE-2026-75078 Cross-Site Scripting (XSS) in CVE-2026-75078 (CVE-2026-75078)
cross-site scripting in CVE-2026-75078 (CVE-2026-75078). Risk of unauthorized operations or information disclosure.
CVE-2026-67960 Code Injection in CVE-2026-67960 (CVE-2026-67960)
code injection in CVE-2026-67960 (CVE-2026-67960). Successful exploitation can lead to full system takeover.
CVE-2026-75077 Cross-Site Scripting (XSS) in c (CVE-2026-75077)
cross-site scripting in c (CVE-2026-75077). Risk of unauthorized operations or information disclosure.
CVE-2026-64782 Vulnerability in c (CVE-2026-64782)
vulnerability in c (CVE-2026-64782). Risk of unauthorized operations or information disclosure.
CVE-2026-64781 Vulnerability in c (CVE-2026-64781)
vulnerability in c (CVE-2026-64781). Risk of unauthorized operations or information disclosure.
CVE-2026-64779 Vulnerability in c (CVE-2026-64779)
vulnerability in c (CVE-2026-64779). Risk of unauthorized operations or information disclosure.
CVE-2026-43794 Buffer Overflow in c (CVE-2026-43794)
vulnerability in c (CVE-2026-43794). Successful exploitation can lead to full system takeover.
CVE-2026-64849 KEV [KEV] SSRF (Server-Side Request Forgery) in mlflow (CVE-2026-64849)
SSRF in mlflow (CVE-2026-64849). Confidential information can be exposed externally. Exploitable via `POST /api/2.0/mlflow/webhooks/{id}/test`. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `3.15.0` or later.
CVE-2026-56677 Vulnerability in 9router (CVE-2026-56677)
vulnerability in 9router (CVE-2026-56677). Data can be tampered with by attackers. Exploitable via `POST /api/auth/oidc/test`.
CVE-2026-75531 Cross-Site Scripting (XSS) in CVE-2026-75531 (CVE-2026-75531)
cross-site scripting in CVE-2026-75531 (CVE-2026-75531). Risk of unauthorized operations or information disclosure.
CVE-2026-75105 Vulnerability in CVE-2026-75105 (CVE-2026-75105)
vulnerability in CVE-2026-75105 (CVE-2026-75105). Confidential information can be exposed externally.
CVE-2026-65976 Vulnerability in cpp (CVE-2026-65976)
vulnerability in cpp (CVE-2026-65976). Risk of unauthorized operations or information disclosure.
CVE-2026-65832 Out-of-Bounds Read in cpp (CVE-2026-65832)
vulnerability in cpp (CVE-2026-65832). Risk of unauthorized operations or information disclosure.
CVE-2026-63409 Out-of-Bounds Read in cpp (CVE-2026-63409)
vulnerability in cpp (CVE-2026-63409). Risk of unauthorized operations or information disclosure.
CVE-2026-40506 Path Traversal in path-traversal (CVE-2026-40506)
path traversal in path-traversal (CVE-2026-40506). Data can be tampered with by attackers.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →