Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Clear
ID Title
CVE-2026-72191 Vulnerability in c (CVE-2026-72191)
vulnerability in c (CVE-2026-72191). Successful exploitation can lead to full system takeover.
CVE-2026-72139 Vulnerability in c (CVE-2026-72139)
vulnerability in c (CVE-2026-72139). Successful exploitation can lead to full system takeover.
CVE-2026-72098 Vulnerability in c (CVE-2026-72098)
vulnerability in c (CVE-2026-72098). Successful exploitation can lead to full system takeover.
CVE-2026-74350 Vulnerability in c (CVE-2026-74350)
vulnerability in c (CVE-2026-74350). Successful exploitation can lead to full system takeover.
CVE-2026-74345 Vulnerability in c (CVE-2026-74345)
vulnerability in c (CVE-2026-74345). Successful exploitation can lead to full system takeover.
CVE-2026-74268 Vulnerability in c (CVE-2026-74268)
vulnerability in c (CVE-2026-74268). Successful exploitation can lead to full system takeover.
CVE-2026-74267 Vulnerability in c (CVE-2026-74267)
vulnerability in c (CVE-2026-74267). Successful exploitation can lead to full system takeover.
CVE-2026-72491 Vulnerability in c (CVE-2026-72491)
vulnerability in c (CVE-2026-72491). Successful exploitation can lead to full system takeover.
CVE-2026-72408 Vulnerability in c (CVE-2026-72408)
vulnerability in c (CVE-2026-72408). Successful exploitation can lead to full system takeover.
CVE-2026-72299 Vulnerability in c (CVE-2026-72299)
vulnerability in c (CVE-2026-72299). Successful exploitation can lead to full system takeover.
CVE-2026-72288 Vulnerability in c (CVE-2026-72288)
vulnerability in c (CVE-2026-72288). Successful exploitation can lead to full system takeover.
CVE-2026-72251 Vulnerability in c (CVE-2026-72251)
vulnerability in c (CVE-2026-72251). Successful exploitation can lead to full system takeover.
CVE-2026-14484 Path Traversal in wordpress (CVE-2026-14484)
path traversal in wordpress (CVE-2026-14484). Data can be tampered with by attackers.
CVE-2026-73678 Code Injection in c (CVE-2026-73678)
code injection in c (CVE-2026-73678). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/responses/`.
CVE-2026-73849 Vulnerability in CVE-2026-73849 (CVE-2026-73849)
vulnerability in CVE-2026-73849 (CVE-2026-73849). Successful exploitation can lead to full system takeover.
CVE-2026-73532 Vulnerability in CVE-2026-73532 (CVE-2026-73532)
vulnerability in CVE-2026-73532 (CVE-2026-73532). Successful exploitation can lead to full system takeover.
CVE-2026-73533 Vulnerability in CVE-2026-73533 (CVE-2026-73533)
vulnerability in CVE-2026-73533 (CVE-2026-73533). Successful exploitation can lead to full system takeover.
CVE-2026-28149 Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
CVE-2026-49827 Vulnerability in CVE-2026-49827 (CVE-2026-49827)
vulnerability in CVE-2026-49827 (CVE-2026-49827). Successful exploitation can lead to full system takeover.
CVE-2026-49819 OS Command Injection in c (CVE-2026-49819)
OS command injection in c (CVE-2026-49819). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/upsnap/init-superuser`.
CVE-2026-49481 OS Command Injection in c (CVE-2026-49481)
OS command injection in c (CVE-2026-49481). Confidential information can be exposed externally.
CVE-2026-73299 Code Injection in CVE-2026-73299 (CVE-2026-73299)
code injection in CVE-2026-73299 (CVE-2026-73299). Successful exploitation can lead to full system takeover.
CVE-2026-73263 OS Command Injection in CVE-2026-73263 (CVE-2026-73263)
OS command injection in CVE-2026-73263 (CVE-2026-73263). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/providers/{id}/connection`.
CVE-2026-18391 Unrestricted File Upload in wordpress (CVE-2026-18391)
vulnerability in wordpress (CVE-2026-18391). Successful exploitation can lead to full system takeover.
CVE-2026-15039 Unrestricted File Upload in wordpress (CVE-2026-15039)
vulnerability in wordpress (CVE-2026-15039). Successful exploitation can lead to full system takeover.
CVE-2026-73034 Path Traversal in path-traversal (CVE-2026-73034)
path traversal in path-traversal (CVE-2026-73034). Successful exploitation can lead to full system takeover.
CVE-2026-73032 Code Injection in CVE-2026-73032 (CVE-2026-73032)
code injection in CVE-2026-73032 (CVE-2026-73032). Successful exploitation can lead to full system takeover.
CVE-2026-48381 SQL Injection in c (CVE-2026-48381)
SQL injection in c (CVE-2026-48381). Successful exploitation can lead to full system takeover.
CVE-2026-72748 Vulnerability in dos (CVE-2026-72748)
vulnerability in dos (CVE-2026-72748). Data can be tampered with by attackers.
CVE-2026-72878 OS Command Injection in c (CVE-2026-72878)
OS command injection in c (CVE-2026-72878). Confidential information can be exposed externally. Mitigation: upgrade to `0.29.13` or later.
CVE-2026-72865 OS Command Injection in c (CVE-2026-72865)
OS command injection in c (CVE-2026-72865). Successful exploitation can lead to full system takeover.
CVE-2026-72869 Command Injection in CVE-2026-72869 (CVE-2026-72869)
command injection in CVE-2026-72869 (CVE-2026-72869). Successful exploitation can lead to full system takeover.
CVE-2026-47754 Path Traversal in tomcat (CVE-2026-47754)
path traversal in tomcat (CVE-2026-47754). Confidential information can be exposed externally. Exploitable via ``archiveEntryName``.
CVE-2026-18412 Vulnerability in path-traversal (CVE-2026-18412)
vulnerability in path-traversal (CVE-2026-18412). Confidential information can be exposed externally.
CVE-2026-63106 SQL Injection in sqli (CVE-2026-63106)
SQL injection in sqli (CVE-2026-63106). Successful exploitation can lead to full system takeover.
CVE-2026-68159 Vulnerability in c (CVE-2026-68159)
vulnerability in c (CVE-2026-68159). Successful exploitation can lead to full system takeover.
CVE-2026-68124 Vulnerability in c (CVE-2026-68124)
vulnerability in c (CVE-2026-68124). Successful exploitation can lead to full system takeover.
CVE-2026-68117 Vulnerability in c (CVE-2026-68117)
vulnerability in c (CVE-2026-68117). Successful exploitation can lead to full system takeover.
CVE-2026-72592 Unrestricted File Upload in CVE-2026-72592 (CVE-2026-72592)
vulnerability in CVE-2026-72592 (CVE-2026-72592). Successful exploitation can lead to full system takeover.
CVE-2026-71991 OS Command Injection in c (CVE-2026-71991)
OS command injection in c (CVE-2026-71991). Successful exploitation can lead to full system takeover.
CVE-2026-71949 OS Command Injection in c (CVE-2026-71949)
OS command injection in c (CVE-2026-71949). Successful exploitation can lead to full system takeover.
CVE-2026-71950 OS Command Injection in c (CVE-2026-71950)
OS command injection in c (CVE-2026-71950). Successful exploitation can lead to full system takeover.
CVE-2026-71951 OS Command Injection in c (CVE-2026-71951)
OS command injection in c (CVE-2026-71951). Successful exploitation can lead to full system takeover.
CVE-2026-68082 Vulnerability in c (CVE-2026-68082)
vulnerability in c (CVE-2026-68082). Successful exploitation can lead to full system takeover.
CVE-2026-14526 Privilege Escalation in wordpress (CVE-2026-14526)
vulnerability in wordpress (CVE-2026-14526). Successful exploitation can lead to full system takeover.
CVE-2026-71851 Vulnerability in crypto-js (CVE-2026-71851)
vulnerability in crypto-js (CVE-2026-71851). Successful exploitation can lead to full system takeover. Exploitable via ``crypto``. Mitigation: upgrade to `4.0.0` or later.
CVE-2026-71558 Unsafe Deserialization in c (CVE-2026-71558)
vulnerability in c (CVE-2026-71558). Successful exploitation can lead to full system takeover.
CVE-2026-71560 Out-of-Bounds Read in c (CVE-2026-71560)
vulnerability in c (CVE-2026-71560). Data can be tampered with by attackers.
CVE-2026-16258 Unsafe Deserialization in wordpress (CVE-2026-16258)
vulnerability in wordpress (CVE-2026-16258). Successful exploitation can lead to full system takeover.
CVE-2026-70558 Unrestricted File Upload in CVE-2026-70558 (CVE-2026-70558)
vulnerability in CVE-2026-70558 (CVE-2026-70558). Successful exploitation can lead to full system takeover. Exploitable via `POST /download/uploadFromRsByLocal`.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →