Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-45293 |
|
Vulnerability in wp-coding-standards/wpcs (CVE-2026-45293)
vulnerability in wp-coding-standards/wpcs (CVE-2026-45293). Successful exploitation can lead to full system takeover. Exploitable via ``WordPress.WP.EnqueuedResourceParameters``. Mitigation: upgrade to `3.4.1` or later.
|
| CVE-2026-43910 |
|
Vulnerability in io.appium:java-client (CVE-2026-43910)
vulnerability in io.appium:java-client (CVE-2026-43910). Confidential information can be exposed externally. Exploitable via `POST /wd/hub/session`. Mitigation: upgrade to `10.1.1` or later.
|
| CVE-2026-63302 |
|
Vulnerability in CVE-2026-63302 (CVE-2026-63302)
vulnerability in CVE-2026-63302 (CVE-2026-63302). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-14041 |
|
Vulnerability in bouncycastle (CVE-2024-14041)
vulnerability in bouncycastle (CVE-2024-14041). Confidential information can be exposed externally.
|
| CVE-2026-6251 |
|
SQL Injection in wordpress (CVE-2026-6251)
SQL injection in wordpress (CVE-2026-6251). Confidential information can be exposed externally.
|
| CVE-2026-16587 |
|
Vulnerability in wordpress (CVE-2026-16587)
vulnerability in wordpress (CVE-2026-16587). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16585 |
|
Path Traversal in wordpress (CVE-2026-16585)
path traversal in wordpress (CVE-2026-16585). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12124 |
|
Vulnerability in c (CVE-2026-12124)
vulnerability in c (CVE-2026-12124). Risk of unauthorized operations or information disclosure. Exploitable via ``pdfdraft_embed_pdf``.
|
| CVE-2026-66473 |
|
Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.
Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.
|
| CVE-2026-65447 |
|
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.
|
| CVE-2026-65446 |
|
Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.
Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.
|
| CVE-2026-65443 |
|
Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.
Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.
|
| CVE-2026-65442 |
|
Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.
Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.
|
| CVE-2026-65437 |
|
Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <=...
Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <=...
|
| CVE-2026-61957 |
|
Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions.
Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions.
|
| CVE-2026-61953 |
|
Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.
Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.
|
| CVE-2026-51565 |
|
Cross-Site Scripting (XSS) in CVE-2026-51565 (CVE-2026-51565)
cross-site scripting in CVE-2026-51565 (CVE-2026-51565). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51078 |
|
Information Disclosure in CVE-2026-51078 (CVE-2026-51078)
vulnerability in CVE-2026-51078 (CVE-2026-51078). Confidential information can be exposed externally.
|
| CVE-2026-51077 |
|
SQL Injection in sqli (CVE-2026-51077)
SQL injection in sqli (CVE-2026-51077). Confidential information can be exposed externally.
|
| CVE-2026-66825 |
|
Cross-Site Scripting (XSS) in CVE-2026-66825 (CVE-2026-66825)
cross-site scripting in CVE-2026-66825 (CVE-2026-66825). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66824 |
|
Cross-Site Scripting (XSS) in CVE-2026-66824 (CVE-2026-66824)
cross-site scripting in CVE-2026-66824 (CVE-2026-66824). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64751 |
|
Use-After-Free in c (CVE-2026-64751)
vulnerability in c (CVE-2026-64751). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64729 |
|
Use-After-Free in c (CVE-2026-64729)
vulnerability in c (CVE-2026-64729). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64545 |
|
Vulnerability in c (CVE-2026-64545)
vulnerability in c (CVE-2026-64545). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64541 |
|
Vulnerability in c (CVE-2026-64541)
vulnerability in c (CVE-2026-64541). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64554 |
|
Vulnerability in c (CVE-2026-64554)
vulnerability in c (CVE-2026-64554). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64539 |
|
Vulnerability in c (CVE-2026-64539)
vulnerability in c (CVE-2026-64539). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64542 |
|
Vulnerability in c (CVE-2026-64542)
vulnerability in c (CVE-2026-64542). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64546 |
|
Vulnerability in c (CVE-2026-64546)
vulnerability in c (CVE-2026-64546). Confidential information can be exposed externally.
|
| CVE-2026-64547 |
|
Vulnerability in c (CVE-2026-64547)
vulnerability in c (CVE-2026-64547). Confidential information can be exposed externally.
|
| CVE-2026-64550 |
|
Vulnerability in c (CVE-2026-64550)
vulnerability in c (CVE-2026-64550). Confidential information can be exposed externally.
|
| CVE-2026-64544 |
|
Vulnerability in c (CVE-2026-64544)
vulnerability in c (CVE-2026-64544). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64548 |
|
Vulnerability in c (CVE-2026-64548)
vulnerability in c (CVE-2026-64548). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64540 |
|
Vulnerability in c (CVE-2026-64540)
vulnerability in c (CVE-2026-64540). Confidential information can be exposed externally.
|
| CVE-2026-64543 |
|
Vulnerability in c (CVE-2026-64543)
vulnerability in c (CVE-2026-64543). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56747 |
|
Code Injection in cribl (CVE-2026-56747)
code injection in cribl (CVE-2026-56747). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66031 |
|
Cross-Site Scripting (XSS) in CVE-2026-66031 (CVE-2026-66031)
cross-site scripting in CVE-2026-66031 (CVE-2026-66031). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10682 |
|
Out-of-Bounds Write in c (CVE-2026-10682)
out-of-bounds write in c (CVE-2026-10682). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10683 |
|
Vulnerability in c (CVE-2026-10683)
vulnerability in c (CVE-2026-10683). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66030 |
|
Cross-Site Scripting (XSS) in CVE-2026-66030 (CVE-2026-66030)
cross-site scripting in CVE-2026-66030 (CVE-2026-66030). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66029 |
|
Cross-Site Scripting (XSS) in CVE-2026-66029 (CVE-2026-66029)
cross-site scripting in CVE-2026-66029 (CVE-2026-66029). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59239 |
|
Cross-Site Scripting (XSS) in CVE-2026-59239 (CVE-2026-59239)
cross-site scripting in CVE-2026-59239 (CVE-2026-59239). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-51235 |
|
Vulnerability in cpp (CVE-2026-51235)
vulnerability in cpp (CVE-2026-51235). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66395 |
|
Cross-Site Scripting (XSS) in CVE-2026-66395 (CVE-2026-66395)
cross-site scripting in CVE-2026-66395 (CVE-2026-66395). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66396 |
|
Cross-Site Scripting (XSS) in CVE-2026-66396 (CVE-2026-66396)
cross-site scripting in CVE-2026-66396 (CVE-2026-66396). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66398 |
|
Vulnerability in CVE-2026-66398 (CVE-2026-66398)
vulnerability in CVE-2026-66398 (CVE-2026-66398). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66397 |
|
Path Traversal in path-traversal (CVE-2026-66397)
path traversal in path-traversal (CVE-2026-66397). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50455 |
|
SQL Injection in sqli (CVE-2025-50455)
SQL injection in sqli (CVE-2025-50455). Confidential information can be exposed externally.
|
| CVE-2026-54272 |
|
Vulnerability in ip-address (CVE-2026-54272)
vulnerability in ip-address (CVE-2026-54272). Risk of unauthorized operations or information disclosure. Exploitable via ``Address6``. Mitigation: upgrade to `10.2.1` or later.
|
| CVE-2026-59250 |
|
Vulnerability in c (CVE-2026-59250)
vulnerability in c (CVE-2026-59250). Risk of unauthorized operations or information disclosure.
|