Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-74989 |
|
Buffer Overflow in mozilla (CVE-2026-74989)
vulnerability in mozilla (CVE-2026-74989). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74985 |
|
Privilege Escalation in privilege-escalation (CVE-2026-74985)
vulnerability in privilege-escalation (CVE-2026-74985). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74979 |
|
Vulnerability in mozilla (CVE-2026-74979)
vulnerability in mozilla (CVE-2026-74979). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74964 |
|
Vulnerability in mozilla (CVE-2026-74964)
vulnerability in mozilla (CVE-2026-74964). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74961 |
|
Vulnerability in mozilla (CVE-2026-74961)
vulnerability in mozilla (CVE-2026-74961). Confidential information can be exposed externally.
|
| CVE-2026-74959 |
|
Vulnerability in mozilla (CVE-2026-74959)
vulnerability in mozilla (CVE-2026-74959). Confidential information can be exposed externally.
|
| CVE-2026-74956 |
|
Vulnerability in mozilla (CVE-2026-74956)
vulnerability in mozilla (CVE-2026-74956). Confidential information can be exposed externally.
|
| CVE-2026-74938 |
|
Vulnerability in mozilla (CVE-2026-74938)
vulnerability in mozilla (CVE-2026-74938). Confidential information can be exposed externally.
|
| CVE-2026-74940 |
|
Use-After-Free in mozilla (CVE-2026-74940)
vulnerability in mozilla (CVE-2026-74940). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74944 |
|
Use-After-Free in mozilla (CVE-2026-74944)
vulnerability in mozilla (CVE-2026-74944). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74943 |
|
Use-After-Free in mozilla (CVE-2026-74943)
vulnerability in mozilla (CVE-2026-74943). Successful exploitation can lead to full system takeover.
|
| CVE-2026-74936 |
|
Use-After-Free in mozilla (CVE-2026-74936)
vulnerability in mozilla (CVE-2026-74936). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34884 |
|
SSRF (Server-Side Request Forgery) in apache (CVE-2026-34884)
SSRF in apache (CVE-2026-34884). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67960 |
|
Code Injection in CVE-2026-67960 (CVE-2026-67960)
code injection in CVE-2026-67960 (CVE-2026-67960). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50769 |
|
SQL Injection in sqli (CVE-2026-50769)
SQL injection in sqli (CVE-2026-50769). Successful exploitation can lead to full system takeover.
|
| CVE-2024-13784 |
|
Unsafe Deserialization in wordpress (CVE-2024-13784)
vulnerability in wordpress (CVE-2024-13784). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14524 |
|
Path Traversal in wordpress (CVE-2026-14524)
path traversal in wordpress (CVE-2026-14524). Data can be tampered with by attackers.
|
| CVE-2026-18855 |
|
Path Traversal in wordpress (CVE-2026-18855)
path traversal in wordpress (CVE-2026-18855). Data can be tampered with by attackers.
|
| CVE-2026-19598 |
|
Authorization Flaw in wordpress (CVE-2026-19598)
vulnerability in wordpress (CVE-2026-19598). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14484 |
|
Path Traversal in wordpress (CVE-2026-14484)
path traversal in wordpress (CVE-2026-14484). Data can be tampered with by attackers.
|
| CVE-2026-73849 |
|
Vulnerability in CVE-2026-73849 (CVE-2026-73849)
vulnerability in CVE-2026-73849 (CVE-2026-73849). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48528 |
|
SQL Injection in tomcat (CVE-2026-48528)
SQL injection in tomcat (CVE-2026-48528). Successful exploitation can lead to full system takeover. Exploitable via ``nodeId``.
|
| CVE-2026-19297 |
|
Vulnerability in langflow (CVE-2026-19297)
vulnerability in langflow (CVE-2026-19297). Confidential information can be exposed externally.
|
| CVE-2026-14525 |
|
Vulnerability in ibm (CVE-2026-14525)
vulnerability in ibm (CVE-2026-14525). Confidential information can be exposed externally.
|
| CVE-2026-73532 |
|
Vulnerability in CVE-2026-73532 (CVE-2026-73532)
vulnerability in CVE-2026-73532 (CVE-2026-73532). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73533 |
|
Vulnerability in CVE-2026-73533 (CVE-2026-73533)
vulnerability in CVE-2026-73533 (CVE-2026-73533). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28149 |
|
Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
|
| CVE-2026-49827 |
|
Vulnerability in CVE-2026-49827 (CVE-2026-49827)
vulnerability in CVE-2026-49827 (CVE-2026-49827). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73240 |
|
Vulnerability in apache (CVE-2026-73240)
vulnerability in apache (CVE-2026-73240). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18391 |
|
Unrestricted File Upload in wordpress (CVE-2026-18391)
vulnerability in wordpress (CVE-2026-18391). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15039 |
|
Unrestricted File Upload in wordpress (CVE-2026-15039)
vulnerability in wordpress (CVE-2026-15039). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71290 |
|
Vulnerability in apache (CVE-2026-71290)
vulnerability in apache (CVE-2026-71290). Confidential information can be exposed externally.
|
| CVE-2026-48362 |
|
OS Command Injection in adobe (CVE-2026-48362)
OS command injection in adobe (CVE-2026-48362). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71384 |
|
Authorization Flaw in adobe (CVE-2026-71384)
vulnerability in adobe (CVE-2026-71384). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70306 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-70306)
cross-site scripting in microsoft (CVE-2026-70306). Confidential information can be exposed externally.
|
| CVE-2026-69223 |
|
SSRF (Server-Side Request Forgery) in apache (CVE-2026-69223)
SSRF in apache (CVE-2026-69223). Confidential information can be exposed externally.
|
| CVE-2026-72748 |
|
Vulnerability in dos (CVE-2026-72748)
vulnerability in dos (CVE-2026-72748). Data can be tampered with by attackers.
|
| CVE-2026-72898 KEV |
|
[KEV] SQL Injection in metabase (CVE-2026-72898)
SQL injection in metabase (CVE-2026-72898). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-47754 |
|
Path Traversal in tomcat (CVE-2026-47754)
path traversal in tomcat (CVE-2026-47754). Confidential information can be exposed externally. Exploitable via ``archiveEntryName``.
|
| CVE-2026-18412 |
|
Vulnerability in path-traversal (CVE-2026-18412)
vulnerability in path-traversal (CVE-2026-18412). Confidential information can be exposed externally.
|
| CVE-2026-63106 |
|
SQL Injection in sqli (CVE-2026-63106)
SQL injection in sqli (CVE-2026-63106). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72592 |
|
Unrestricted File Upload in CVE-2026-72592 (CVE-2026-72592)
vulnerability in CVE-2026-72592 (CVE-2026-72592). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44416 |
|
Code Injection in apache (CVE-2026-44416)
code injection in apache (CVE-2026-44416). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55799 |
|
Code Injection in apache (CVE-2026-55799)
code injection in apache (CVE-2026-55799). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32227 |
|
SQL Injection in apache (CVE-2026-32227)
SQL injection in apache (CVE-2026-32227). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40920 |
|
Vulnerability in apache (CVE-2026-40920)
vulnerability in apache (CVE-2026-40920). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42537 |
|
Vulnerability in apache (CVE-2026-42537)
vulnerability in apache (CVE-2026-42537). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28672 |
|
Command Injection in apache (CVE-2026-28672)
command injection in apache (CVE-2026-28672). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71558 |
|
Unsafe Deserialization in c (CVE-2026-71558)
vulnerability in c (CVE-2026-71558). Successful exploitation can lead to full system takeover.
|
| CVE-2026-71560 |
|
Out-of-Bounds Read in c (CVE-2026-71560)
vulnerability in c (CVE-2026-71560). Data can be tampered with by attackers.
|