Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-60821 |
|
Vulnerability in c (CVE-2026-60821)
vulnerability in c (CVE-2026-60821). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60782 |
|
Vulnerability in c (CVE-2026-60782)
vulnerability in c (CVE-2026-60782). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60754 |
|
Vulnerability in c (CVE-2026-60754)
vulnerability in c (CVE-2026-60754). Confidential information can be exposed externally.
|
| CVE-2026-60737 |
|
Vulnerability in c (CVE-2026-60737)
vulnerability in c (CVE-2026-60737). Confidential information can be exposed externally.
|
| CVE-2026-60730 |
|
Vulnerability in c (CVE-2026-60730)
vulnerability in c (CVE-2026-60730). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60728 |
|
Vulnerability in c (CVE-2026-60728)
vulnerability in c (CVE-2026-60728). Confidential information can be exposed externally.
|
| CVE-2026-60727 |
|
Vulnerability in c (CVE-2026-60727)
vulnerability in c (CVE-2026-60727). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60721 |
|
Vulnerability in c (CVE-2026-60721)
vulnerability in c (CVE-2026-60721). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60720 |
|
Vulnerability in c (CVE-2026-60720)
vulnerability in c (CVE-2026-60720). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60702 |
|
Vulnerability in c (CVE-2026-60702)
vulnerability in c (CVE-2026-60702). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60698 |
|
Vulnerability in c (CVE-2026-60698)
vulnerability in c (CVE-2026-60698). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60696 |
|
Vulnerability in c (CVE-2026-60696)
vulnerability in c (CVE-2026-60696). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60672 |
|
Vulnerability in c (CVE-2026-60672)
vulnerability in c (CVE-2026-60672). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60591 |
|
Vulnerability in c (CVE-2026-60591)
vulnerability in c (CVE-2026-60591). Data can be tampered with by attackers.
|
| CVE-2026-62988 |
|
Information Disclosure in froxlor/froxlor (CVE-2026-62988)
vulnerability in froxlor/froxlor (CVE-2026-62988). Confidential information can be exposed externally. Exploitable via ``password``. Mitigation: upgrade to `2.3.8` or later.
|
| CVE-2026-52610 |
|
Path Traversal in path-traversal (CVE-2026-52610)
path traversal in path-traversal (CVE-2026-52610). Confidential information can be exposed externally.
|
| CVE-2026-52608 |
|
Vulnerability in CVE-2026-52608 (CVE-2026-52608)
vulnerability in CVE-2026-52608 (CVE-2026-52608). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67921 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-67921)
vulnerability in csrf (CVE-2026-67921). Confidential information can be exposed externally.
|
| CVE-2026-45118 |
|
Vulnerability in CVE-2026-45118 (CVE-2026-45118)
vulnerability in CVE-2026-45118 (CVE-2026-45118). Confidential information can be exposed externally. Exploitable via `Referer header`.
|
| CVE-2026-45117 |
|
Code Injection in CVE-2026-45117 (CVE-2026-45117)
code injection in CVE-2026-45117 (CVE-2026-45117). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73376 |
|
Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions.
Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions.
|
| CVE-2026-73380 |
|
Unauthenticated PHP Object Injection in Popup by Supsystic <= 1.13.0 versions.
Unauthenticated PHP Object Injection in Popup by Supsystic <= 1.13.0 versions.
|
| CVE-2026-73366 |
|
Unauthenticated PHP Object Injection in Easy Google Maps <= 1.13.0 versions.
Unauthenticated PHP Object Injection in Easy Google Maps <= 1.13.0 versions.
|
| CVE-2026-73341 |
|
Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions.
Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions.
|
| CVE-2026-32470 |
|
Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.
Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.
|
| CVE-2026-74938 |
|
Vulnerability in mozilla (CVE-2026-74938)
vulnerability in mozilla (CVE-2026-74938). Confidential information can be exposed externally.
|
| CVE-2026-74936 |
|
Use-After-Free in mozilla (CVE-2026-74936)
vulnerability in mozilla (CVE-2026-74936). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75852 |
|
Vulnerability in c (CVE-2026-75852)
vulnerability in c (CVE-2026-75852). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75851 |
|
Privilege Escalation in CVE-2026-75851 (CVE-2026-75851)
vulnerability in CVE-2026-75851 (CVE-2026-75851). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `26.8.1` or later.
|
| CVE-2026-75843 |
|
Privilege Escalation in CVE-2026-75843 (CVE-2026-75843)
vulnerability in CVE-2026-75843 (CVE-2026-75843). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67919 |
|
Code Injection in CVE-2026-67919 (CVE-2026-67919)
code injection in CVE-2026-67919 (CVE-2026-67919). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67960 |
|
Code Injection in CVE-2026-67960 (CVE-2026-67960)
code injection in CVE-2026-67960 (CVE-2026-67960). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64849 KEV |
|
[KEV] SSRF (Server-Side Request Forgery) in mlflow (CVE-2026-64849)
SSRF in mlflow (CVE-2026-64849). Confidential information can be exposed externally. Exploitable via `POST /api/2.0/mlflow/webhooks/{id}/test`. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `3.15.0` or later.
|
| CVE-2026-68004 |
|
Vulnerability in cpp (CVE-2026-68004)
vulnerability in cpp (CVE-2026-68004). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50769 |
|
SQL Injection in sqli (CVE-2026-50769)
SQL injection in sqli (CVE-2026-50769). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47698 |
|
Vulnerability in vm2 (CVE-2026-47698)
vulnerability in vm2 (CVE-2026-47698). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.11.6` or later.
|
| CVE-2026-47686 |
|
Vulnerability in vm2 (CVE-2026-47686)
vulnerability in vm2 (CVE-2026-47686). Successful exploitation can lead to full system takeover. Exploitable via ``process``. Mitigation: upgrade to `3.11.6` or later.
|
| CVE-2026-55674 |
|
Cross-Site Scripting (XSS) in CVE-2026-55674 (CVE-2026-55674)
cross-site scripting in CVE-2026-55674 (CVE-2026-55674). Confidential information can be exposed externally.
|
| CVE-2026-74895 |
|
Vulnerability in CVE-2026-74895 (CVE-2026-74895)
vulnerability in CVE-2026-74895 (CVE-2026-74895). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74899 |
|
Vulnerability in jahlives (CVE-2026-74899)
vulnerability in jahlives (CVE-2026-74899). Successful exploitation can lead to full system takeover.
|
| CVE-2024-13784 |
|
Unsafe Deserialization in wordpress (CVE-2024-13784)
vulnerability in wordpress (CVE-2024-13784). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14524 |
|
Path Traversal in wordpress (CVE-2026-14524)
path traversal in wordpress (CVE-2026-14524). Data can be tampered with by attackers.
|
| CVE-2026-73052 |
|
Cross-Site Scripting (XSS) in CVE-2026-73052 (CVE-2026-73052)
cross-site scripting in CVE-2026-73052 (CVE-2026-73052). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73043 |
|
Cross-Site Scripting (XSS) in CVE-2026-73043 (CVE-2026-73043)
cross-site scripting in CVE-2026-73043 (CVE-2026-73043). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73050 |
|
Cross-Site Scripting (XSS) in CVE-2026-73050 (CVE-2026-73050)
cross-site scripting in CVE-2026-73050 (CVE-2026-73050). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73041 |
|
Cross-Site Scripting (XSS) in CVE-2026-73041 (CVE-2026-73041)
cross-site scripting in CVE-2026-73041 (CVE-2026-73041). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18855 |
|
Path Traversal in wordpress (CVE-2026-18855)
path traversal in wordpress (CVE-2026-18855). Data can be tampered with by attackers.
|
| CVE-2026-19598 |
|
Authorization Flaw in wordpress (CVE-2026-19598)
vulnerability in wordpress (CVE-2026-19598). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74569 |
|
Vulnerability in c (CVE-2026-74569)
vulnerability in c (CVE-2026-74569). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74517 |
|
Vulnerability in c (CVE-2026-74517)
vulnerability in c (CVE-2026-74517). Successful exploitation can lead to full system takeover.
|