Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2020-15876 |
|
Vulnerability in sqli (CVE-2020-15876)
vulnerability in sqli (CVE-2020-15876). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-15878 |
|
Vulnerability in sqli (CVE-2020-15878)
vulnerability in sqli (CVE-2020-15878). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-15874 |
|
Vulnerability in CVE-2020-15874 (CVE-2020-15874)
vulnerability in CVE-2020-15874 (CVE-2020-15874). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-81033 |
|
Vulnerability in CVE-2026-81033 (CVE-2026-81033)
vulnerability in CVE-2026-81033 (CVE-2026-81033). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-81032 |
|
Vulnerability in cpp (CVE-2026-81032)
vulnerability in cpp (CVE-2026-81032). Successful exploitation can lead to full system takeover.
|
| CVE-2026-81027 |
|
Vulnerability in c (CVE-2026-81027)
vulnerability in c (CVE-2026-81027). Confidential information can be exposed externally. Exploitable via `Authorization header`.
|
| CVE-2026-81028 |
|
Path Traversal in cpp (CVE-2026-81028)
path traversal in cpp (CVE-2026-81028). Confidential information can be exposed externally.
|
| CVE-2026-81031 |
|
Vulnerability in CVE-2026-81031 (CVE-2026-81031)
vulnerability in CVE-2026-81031 (CVE-2026-81031). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80428 |
|
Unsafe Deserialization in CVE-2026-80428 (CVE-2026-80428)
vulnerability in CVE-2026-80428 (CVE-2026-80428). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54614 |
|
Vulnerability in cakephp/debug_kit (CVE-2026-54614)
vulnerability in cakephp/debug_kit (CVE-2026-54614). Risk of unauthorized operations or information disclosure. Exploitable via ``MailPreview``. Mitigation: upgrade to `5.2.4` or later.
|
| CVE-2026-54569 |
|
Vulnerability in senaite.core (CVE-2026-54569)
vulnerability in senaite.core (CVE-2026-54569). Successful exploitation can lead to full system takeover. Exploitable via `GET /senaite/bika_setup/`.
|
| CVE-2026-54606 |
|
Cross-Site Scripting (XSS) in suneditor (CVE-2026-54606)
cross-site scripting in suneditor (CVE-2026-54606). Risk of unauthorized operations or information disclosure. Exploitable via `GET /poc.js`. Mitigation: upgrade to `3.1.4` or later.
|
| CVE-2026-80589 |
|
Vulnerability in c (CVE-2026-80589)
vulnerability in c (CVE-2026-80589). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80587 |
|
Vulnerability in c (CVE-2026-80587)
vulnerability in c (CVE-2026-80587). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80578 |
|
Vulnerability in c (CVE-2026-80578)
vulnerability in c (CVE-2026-80578). Confidential information can be exposed externally.
|
| CVE-2026-80561 |
|
Vulnerability in c (CVE-2026-80561)
vulnerability in c (CVE-2026-80561). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80545 |
|
Vulnerability in c (CVE-2026-80545)
vulnerability in c (CVE-2026-80545). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80537 |
|
Vulnerability in c (CVE-2026-80537)
vulnerability in c (CVE-2026-80537). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80536 |
|
Vulnerability in c (CVE-2026-80536)
vulnerability in c (CVE-2026-80536). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75062 |
|
Vulnerability in CVE-2026-75062 (CVE-2026-75062)
vulnerability in CVE-2026-75062 (CVE-2026-75062). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74748 |
|
Vulnerability in c (CVE-2026-74748)
vulnerability in c (CVE-2026-74748). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74736 |
|
Vulnerability in c (CVE-2026-74736)
vulnerability in c (CVE-2026-74736). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74734 |
|
Vulnerability in c (CVE-2026-74734)
vulnerability in c (CVE-2026-74734). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13481 |
|
Out-of-Bounds Read in c (CVE-2026-13481)
vulnerability in c (CVE-2026-13481). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13480 |
|
Vulnerability in c (CVE-2026-13480)
vulnerability in c (CVE-2026-13480). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13479 |
|
Out-of-Bounds Read in c (CVE-2026-13479)
vulnerability in c (CVE-2026-13479). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54511 |
|
Vulnerability in @logtape/syslog (CVE-2026-54511)
vulnerability in @logtape/syslog (CVE-2026-54511). Data can be tampered with by attackers. Mitigation: upgrade to `1.3.11` or later.
|
| CVE-2026-54550 |
|
Path Traversal in org.codehaus.izpack:izpack-installer (CVE-2026-54550)
path traversal in org.codehaus.izpack:izpack-installer (CVE-2026-54550). Data can be tampered with by attackers. Exploitable via ``targetPath``.
|
| CVE-2026-79902 |
|
Vulnerability in c (CVE-2026-79902)
vulnerability in c (CVE-2026-79902). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54553 |
|
Information Disclosure in starlette-admin (CVE-2026-54553)
vulnerability in starlette-admin (CVE-2026-54553). Risk of unauthorized operations or information disclosure. Exploitable via ``metadata``. Mitigation: upgrade to `0.16.1` or later.
|
| CVE-2026-77658 |
|
Vulnerability in c (CVE-2026-77658)
vulnerability in c (CVE-2026-77658). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80203 |
|
Authorization Flaw in CVE-2026-80203 (CVE-2026-80203)
vulnerability in CVE-2026-80203 (CVE-2026-80203). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80205 |
|
Vulnerability in dos (CVE-2026-80205)
vulnerability in dos (CVE-2026-80205). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18080 |
|
Unrestricted File Upload in wordpress (CVE-2026-18080)
vulnerability in wordpress (CVE-2026-18080). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18331 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18331)
cross-site scripting in wordpress (CVE-2026-18331). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18431 |
|
Vulnerability in wordpress (CVE-2026-18431)
vulnerability in wordpress (CVE-2026-18431). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19760 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-19760)
cross-site scripting in wordpress (CVE-2026-19760). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
|
| CVE-2026-73335 |
|
Vulnerability in CVE-2026-73335 (CVE-2026-73335)
vulnerability in CVE-2026-73335 (CVE-2026-73335). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57171 |
|
Path Traversal in CVE-2026-57171 (CVE-2026-57171)
path traversal in CVE-2026-57171 (CVE-2026-57171). Data can be tampered with by attackers.
|
| CVE-2026-57170 |
|
Code Injection in CVE-2026-57170 (CVE-2026-57170)
code injection in CVE-2026-57170 (CVE-2026-57170). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16645 |
|
Vulnerability in drupal (CVE-2026-16645)
vulnerability in drupal (CVE-2026-16645). Confidential information can be exposed externally.
|
| CVE-2026-80185 |
|
Vulnerability in c (CVE-2026-80185)
vulnerability in c (CVE-2026-80185). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79845 |
|
Vulnerability in sqli (CVE-2026-79845)
vulnerability in sqli (CVE-2026-79845). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79804 |
|
Vulnerability in sqli (CVE-2026-79804)
vulnerability in sqli (CVE-2026-79804). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38466 |
|
Vulnerability in CVE-2026-38466 (CVE-2026-38466)
vulnerability in CVE-2026-38466 (CVE-2026-38466). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38465 |
|
Vulnerability in CVE-2026-38465 (CVE-2026-38465)
vulnerability in CVE-2026-38465 (CVE-2026-38465). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38474 |
|
Vulnerability in CVE-2026-38474 (CVE-2026-38474)
vulnerability in CVE-2026-38474 (CVE-2026-38474). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38467 |
|
Vulnerability in sqli (CVE-2026-38467)
vulnerability in sqli (CVE-2026-38467). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38472 |
|
Vulnerability in c (CVE-2026-38472)
vulnerability in c (CVE-2026-38472). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38468 |
|
Vulnerability in sqli (CVE-2026-38468)
vulnerability in sqli (CVE-2026-38468). Risk of unauthorized operations or information disclosure.
|