Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Clear
ID Title
CVE-2026-45293 Vulnerability in wp-coding-standards/wpcs (CVE-2026-45293)
vulnerability in wp-coding-standards/wpcs (CVE-2026-45293). Successful exploitation can lead to full system takeover. Exploitable via ``WordPress.WP.EnqueuedResourceParameters``. Mitigation: upgrade to `3.4.1` or later.
CVE-2026-43910 Vulnerability in io.appium:java-client (CVE-2026-43910)
vulnerability in io.appium:java-client (CVE-2026-43910). Confidential information can be exposed externally. Exploitable via `POST /wd/hub/session`. Mitigation: upgrade to `10.1.1` or later.
CVE-2026-63302 Vulnerability in CVE-2026-63302 (CVE-2026-63302)
vulnerability in CVE-2026-63302 (CVE-2026-63302). Risk of unauthorized operations or information disclosure.
CVE-2024-14041 Vulnerability in bouncycastle (CVE-2024-14041)
vulnerability in bouncycastle (CVE-2024-14041). Confidential information can be exposed externally.
CVE-2026-6251 SQL Injection in wordpress (CVE-2026-6251)
SQL injection in wordpress (CVE-2026-6251). Confidential information can be exposed externally.
CVE-2026-16587 Vulnerability in wordpress (CVE-2026-16587)
vulnerability in wordpress (CVE-2026-16587). Risk of unauthorized operations or information disclosure.
CVE-2026-16585 Path Traversal in wordpress (CVE-2026-16585)
path traversal in wordpress (CVE-2026-16585). Successful exploitation can lead to full system takeover.
CVE-2026-12124 Vulnerability in c (CVE-2026-12124)
vulnerability in c (CVE-2026-12124). Risk of unauthorized operations or information disclosure. Exploitable via ``pdfdraft_embed_pdf``.
CVE-2026-66473 Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.
Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.
CVE-2026-65447 Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.
CVE-2026-65446 Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.
Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.
CVE-2026-65443 Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.
Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.
CVE-2026-65442 Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.
Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.
CVE-2026-65437 Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <=...
Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <=...
CVE-2026-61957 Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions.
Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions.
CVE-2026-61953 Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.
Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.
CVE-2026-51565 Cross-Site Scripting (XSS) in CVE-2026-51565 (CVE-2026-51565)
cross-site scripting in CVE-2026-51565 (CVE-2026-51565). Risk of unauthorized operations or information disclosure.
CVE-2026-51078 Information Disclosure in CVE-2026-51078 (CVE-2026-51078)
vulnerability in CVE-2026-51078 (CVE-2026-51078). Confidential information can be exposed externally.
CVE-2026-51077 SQL Injection in sqli (CVE-2026-51077)
SQL injection in sqli (CVE-2026-51077). Confidential information can be exposed externally.
CVE-2026-66825 Cross-Site Scripting (XSS) in CVE-2026-66825 (CVE-2026-66825)
cross-site scripting in CVE-2026-66825 (CVE-2026-66825). Risk of unauthorized operations or information disclosure.
CVE-2026-66824 Cross-Site Scripting (XSS) in CVE-2026-66824 (CVE-2026-66824)
cross-site scripting in CVE-2026-66824 (CVE-2026-66824). Risk of unauthorized operations or information disclosure.
CVE-2026-64751 Use-After-Free in c (CVE-2026-64751)
vulnerability in c (CVE-2026-64751). Successful exploitation can lead to full system takeover.
CVE-2026-64729 Use-After-Free in c (CVE-2026-64729)
vulnerability in c (CVE-2026-64729). Successful exploitation can lead to full system takeover.
CVE-2026-64545 Vulnerability in c (CVE-2026-64545)
vulnerability in c (CVE-2026-64545). Risk of unauthorized operations or information disclosure.
CVE-2026-64541 Vulnerability in c (CVE-2026-64541)
vulnerability in c (CVE-2026-64541). Successful exploitation can lead to full system takeover.
CVE-2026-64554 Vulnerability in c (CVE-2026-64554)
vulnerability in c (CVE-2026-64554). Successful exploitation can lead to full system takeover.
CVE-2026-64539 Vulnerability in c (CVE-2026-64539)
vulnerability in c (CVE-2026-64539). Successful exploitation can lead to full system takeover.
CVE-2026-64542 Vulnerability in c (CVE-2026-64542)
vulnerability in c (CVE-2026-64542). Risk of unauthorized operations or information disclosure.
CVE-2026-64546 Vulnerability in c (CVE-2026-64546)
vulnerability in c (CVE-2026-64546). Confidential information can be exposed externally.
CVE-2026-64547 Vulnerability in c (CVE-2026-64547)
vulnerability in c (CVE-2026-64547). Confidential information can be exposed externally.
CVE-2026-64550 Vulnerability in c (CVE-2026-64550)
vulnerability in c (CVE-2026-64550). Confidential information can be exposed externally.
CVE-2026-64544 Vulnerability in c (CVE-2026-64544)
vulnerability in c (CVE-2026-64544). Risk of unauthorized operations or information disclosure.
CVE-2026-64548 Vulnerability in c (CVE-2026-64548)
vulnerability in c (CVE-2026-64548). Successful exploitation can lead to full system takeover.
CVE-2026-64540 Vulnerability in c (CVE-2026-64540)
vulnerability in c (CVE-2026-64540). Confidential information can be exposed externally.
CVE-2026-64543 Vulnerability in c (CVE-2026-64543)
vulnerability in c (CVE-2026-64543). Successful exploitation can lead to full system takeover.
CVE-2026-56747 Code Injection in cribl (CVE-2026-56747)
code injection in cribl (CVE-2026-56747). Successful exploitation can lead to full system takeover.
CVE-2026-66031 Cross-Site Scripting (XSS) in CVE-2026-66031 (CVE-2026-66031)
cross-site scripting in CVE-2026-66031 (CVE-2026-66031). Risk of unauthorized operations or information disclosure.
CVE-2026-10682 Out-of-Bounds Write in c (CVE-2026-10682)
out-of-bounds write in c (CVE-2026-10682). Risk of unauthorized operations or information disclosure.
CVE-2026-10683 Vulnerability in c (CVE-2026-10683)
vulnerability in c (CVE-2026-10683). Risk of unauthorized operations or information disclosure.
CVE-2026-66030 Cross-Site Scripting (XSS) in CVE-2026-66030 (CVE-2026-66030)
cross-site scripting in CVE-2026-66030 (CVE-2026-66030). Risk of unauthorized operations or information disclosure.
CVE-2026-66029 Cross-Site Scripting (XSS) in CVE-2026-66029 (CVE-2026-66029)
cross-site scripting in CVE-2026-66029 (CVE-2026-66029). Risk of unauthorized operations or information disclosure.
CVE-2026-59239 Cross-Site Scripting (XSS) in CVE-2026-59239 (CVE-2026-59239)
cross-site scripting in CVE-2026-59239 (CVE-2026-59239). Risk of unauthorized operations or information disclosure.
CVE-2026-51235 Vulnerability in cpp (CVE-2026-51235)
vulnerability in cpp (CVE-2026-51235). Successful exploitation can lead to full system takeover.
CVE-2026-66395 Cross-Site Scripting (XSS) in CVE-2026-66395 (CVE-2026-66395)
cross-site scripting in CVE-2026-66395 (CVE-2026-66395). Successful exploitation can lead to full system takeover.
CVE-2026-66396 Cross-Site Scripting (XSS) in CVE-2026-66396 (CVE-2026-66396)
cross-site scripting in CVE-2026-66396 (CVE-2026-66396). Successful exploitation can lead to full system takeover.
CVE-2026-66398 Vulnerability in CVE-2026-66398 (CVE-2026-66398)
vulnerability in CVE-2026-66398 (CVE-2026-66398). Risk of unauthorized operations or information disclosure.
CVE-2026-66397 Path Traversal in path-traversal (CVE-2026-66397)
path traversal in path-traversal (CVE-2026-66397). Risk of unauthorized operations or information disclosure.
CVE-2025-50455 SQL Injection in sqli (CVE-2025-50455)
SQL injection in sqli (CVE-2025-50455). Confidential information can be exposed externally.
CVE-2026-54272 Vulnerability in ip-address (CVE-2026-54272)
vulnerability in ip-address (CVE-2026-54272). Risk of unauthorized operations or information disclosure. Exploitable via ``Address6``. Mitigation: upgrade to `10.2.1` or later.
CVE-2026-59250 Vulnerability in c (CVE-2026-59250)
vulnerability in c (CVE-2026-59250). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →