Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-55547 |
|
Vulnerability in org.yamcs:yamcs-core (CVE-2026-55547)
vulnerability in org.yamcs:yamcs-core (CVE-2026-55547). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/roles`. Mitigation: upgrade to `5.12.8` or later.
|
| CVE-2026-12514 |
|
Vulnerability in wordpress (CVE-2026-12514)
vulnerability in wordpress (CVE-2026-12514). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65931 |
|
Vulnerability in CVE-2026-65931 (CVE-2026-65931)
vulnerability in CVE-2026-65931 (CVE-2026-65931). Risk of unauthorized operations or information disclosure. Exploitable via `POST /index.php/admin/menuentries/sa/create`.
|
| CVE-2026-80348 |
|
Vulnerability in CVE-2026-80348 (CVE-2026-80348)
vulnerability in CVE-2026-80348 (CVE-2026-80348). Successful exploitation can lead to full system takeover.
|
| CVE-2026-81027 |
|
Vulnerability in c (CVE-2026-81027)
vulnerability in c (CVE-2026-81027). Confidential information can be exposed externally. Exploitable via `Authorization header`.
|
| CVE-2026-54569 |
|
Vulnerability in senaite.core (CVE-2026-54569)
vulnerability in senaite.core (CVE-2026-54569). Successful exploitation can lead to full system takeover. Exploitable via `GET /senaite/bika_setup/`.
|
| CVE-2026-18431 |
|
Vulnerability in wordpress (CVE-2026-18431)
vulnerability in wordpress (CVE-2026-18431). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16645 |
|
Vulnerability in drupal (CVE-2026-16645)
vulnerability in drupal (CVE-2026-16645). Confidential information can be exposed externally.
|
| CVE-2026-62861 |
|
Vulnerability in c (CVE-2026-62861)
vulnerability in c (CVE-2026-62861). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79044 |
|
Vulnerability in c (CVE-2026-79044)
vulnerability in c (CVE-2026-79044). Confidential information can be exposed externally.
|
| CVE-2026-79042 |
|
Vulnerability in c (CVE-2026-79042)
vulnerability in c (CVE-2026-79042). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75930 |
|
Vulnerability in wordpress (CVE-2026-75930)
vulnerability in wordpress (CVE-2026-75930). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56707 |
|
Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass...
Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass...
|
| CVE-2026-71504 |
|
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API...
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API...
|
| CVE-2026-76074 |
|
Vulnerability in wordpress (CVE-2026-76074)
vulnerability in wordpress (CVE-2026-76074). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34836 |
|
Vulnerability in CVE-2026-34836 (CVE-2026-34836)
vulnerability in CVE-2026-34836 (CVE-2026-34836). Confidential information can be exposed externally.
|
| CVE-2026-77391 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-77391 (CVE-2026-77391)
vulnerability in CVE-2026-77391 (CVE-2026-77391). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72843 |
|
Vulnerability in c (CVE-2026-72843)
vulnerability in c (CVE-2026-72843). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76633 |
|
Vulnerability in CVE-2026-76633 (CVE-2026-76633)
vulnerability in CVE-2026-76633 (CVE-2026-76633). Confidential information can be exposed externally.
|
| CVE-2026-76647 |
|
Information Disclosure in CVE-2026-76647 (CVE-2026-76647)
vulnerability in CVE-2026-76647 (CVE-2026-76647). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55703 |
|
Vulnerability in snipe/snipe-it (CVE-2026-55703)
vulnerability in snipe/snipe-it (CVE-2026-55703). Risk of unauthorized operations or information disclosure. Exploitable via `GET /maintenances/5`. Mitigation: upgrade to `8.6.3` or later.
|
| CVE-2026-16938 |
|
Vulnerability in c (CVE-2026-16938)
vulnerability in c (CVE-2026-16938). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64852 |
|
Vulnerability in CVE-2026-64852 (CVE-2026-64852)
vulnerability in CVE-2026-64852 (CVE-2026-64852). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62670 |
|
Vulnerability in CVE-2026-62670 (CVE-2026-62670)
vulnerability in CVE-2026-62670 (CVE-2026-62670). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76223 |
|
Vulnerability in CVE-2026-76223 (CVE-2026-76223)
vulnerability in CVE-2026-76223 (CVE-2026-76223). Data can be tampered with by attackers. Mitigation: upgrade to `26.8.1` or later.
|
| CVE-2026-76215 |
|
Vulnerability in c (CVE-2026-76215)
vulnerability in c (CVE-2026-76215). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12631 |
|
Vulnerability in c (CVE-2026-12631)
vulnerability in c (CVE-2026-12631). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67440 |
|
Vulnerability in CVE-2026-67440 (CVE-2026-67440)
vulnerability in CVE-2026-67440 (CVE-2026-67440). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67443 |
|
Vulnerability in CVE-2026-67443 (CVE-2026-67443)
vulnerability in CVE-2026-67443 (CVE-2026-67443). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/heartbeat`.
|
| CVE-2026-45124 |
|
Vulnerability in CVE-2026-45124 (CVE-2026-45124)
vulnerability in CVE-2026-45124 (CVE-2026-45124). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75835 |
|
Vulnerability in CVE-2026-75835 (CVE-2026-75835)
vulnerability in CVE-2026-75835 (CVE-2026-75835). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63669 |
|
Vulnerability in CVE-2026-63669 (CVE-2026-63669)
vulnerability in CVE-2026-63669 (CVE-2026-63669). Data can be tampered with by attackers.
|
| CVE-2026-9771 |
|
Vulnerability in c (CVE-2026-9771)
vulnerability in c (CVE-2026-9771). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72812 |
|
Vulnerability in c (CVE-2026-72812)
vulnerability in c (CVE-2026-72812). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19786 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-19786 (CVE-2026-19786)
vulnerability in CVE-2026-19786 (CVE-2026-19786). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73665 |
|
Vulnerability in CVE-2026-73665 (CVE-2026-73665)
vulnerability in CVE-2026-73665 (CVE-2026-73665). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49819 |
|
OS Command Injection in c (CVE-2026-49819)
OS command injection in c (CVE-2026-49819). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/upsnap/init-superuser`.
|
| CVE-2026-73287 |
|
Vulnerability in CVE-2026-73287 (CVE-2026-73287)
vulnerability in CVE-2026-73287 (CVE-2026-73287). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73265 |
|
Vulnerability in CVE-2026-73265 (CVE-2026-73265)
vulnerability in CVE-2026-73265 (CVE-2026-73265). Confidential information can be exposed externally.
|
| CVE-2026-53996 |
|
Vulnerability in c (CVE-2026-53996)
vulnerability in c (CVE-2026-53996). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47754 |
|
Path Traversal in tomcat (CVE-2026-47754)
path traversal in tomcat (CVE-2026-47754). Confidential information can be exposed externally. Exploitable via ``archiveEntryName``.
|
| CVE-2026-15060 |
|
Vulnerability in c (CVE-2026-15060)
vulnerability in c (CVE-2026-15060). Risk of unauthorized operations or information disclosure. Exploitable via ``polkit``.
|
| CVE-2026-19350 |
|
Vulnerability in CVE-2026-19350 (CVE-2026-19350)
vulnerability in CVE-2026-19350 (CVE-2026-19350). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19345 |
|
Vulnerability in CVE-2026-19345 (CVE-2026-19345)
vulnerability in CVE-2026-19345 (CVE-2026-19345). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15991 |
|
The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in all versions from 6.0 - 6.9. This makes it possible...
The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in all versions from 6.0 - 6.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to read and delete arbitrary f...
|
| CVE-2026-71316 |
|
Vulnerability in nuxt (CVE-2026-71316)
vulnerability in nuxt (CVE-2026-71316). Confidential information can be exposed externally. Exploitable via ``routeRules``. Mitigation: upgrade to `4.5.1` or later.
|
| CVE-2026-71264 |
|
Vulnerability in cpp (CVE-2026-71264)
vulnerability in cpp (CVE-2026-71264). Data can be tampered with by attackers. Exploitable via `GET /json/cfg`.
|
| CVE-2026-71252 |
|
Vulnerability in CVE-2026-71252 (CVE-2026-71252)
vulnerability in CVE-2026-71252 (CVE-2026-71252). Data can be tampered with by attackers.
|
| CVE-2026-7520 |
|
The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification...
The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification...
|
| CVE-2026-6627 |
|
The WPFormify – Stripe Payments with Form and Checkout plugin for WordPress is vulnerable to...
The WPFormify – Stripe Payments with Form and Checkout plugin for WordPress is vulnerable to...
|