Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-15980 Vulnerability in wordpress (CVE-2026-15980)
vulnerability in wordpress (CVE-2026-15980). Successful exploitation can lead to full system takeover.
CVE-2026-82424 Vulnerability in sqli (CVE-2026-82424)
vulnerability in sqli (CVE-2026-82424). Risk of unauthorized operations or information disclosure.
CVE-2026-82422 Vulnerability in sqli (CVE-2026-82422)
vulnerability in sqli (CVE-2026-82422). Risk of unauthorized operations or information disclosure.
CVE-2026-82421 Vulnerability in sqli (CVE-2026-82421)
vulnerability in sqli (CVE-2026-82421). Risk of unauthorized operations or information disclosure.
CVE-2026-15369 Privilege Escalation in wordpress (CVE-2026-15369)
vulnerability in wordpress (CVE-2026-15369). Successful exploitation can lead to full system takeover.
CVE-2026-75807 Authentication Bypass in wordpress (CVE-2026-75807)
authentication bypass in wordpress (CVE-2026-75807). Successful exploitation can lead to full system takeover.
CVE-2026-82474 Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in...
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in...
CVE-2026-82450 Unrestricted File Upload in CVE-2026-82450 (CVE-2026-82450)
vulnerability in CVE-2026-82450 (CVE-2026-82450). Successful exploitation can lead to full system takeover.
CVE-2026-14494 Unrestricted File Upload in wordpress (CVE-2026-14494)
vulnerability in wordpress (CVE-2026-14494). Successful exploitation can lead to full system takeover.
CVE-2026-80311 Vulnerability in wordpress (CVE-2026-80311)
vulnerability in wordpress (CVE-2026-80311). Risk of unauthorized operations or information disclosure.
CVE-2026-76547 Unsafe Deserialization in wordpress (CVE-2026-76547)
vulnerability in wordpress (CVE-2026-76547). Successful exploitation can lead to full system takeover.
CVE-2026-77010 Vulnerability in wordpress (CVE-2026-77010)
vulnerability in wordpress (CVE-2026-77010). Risk of unauthorized operations or information disclosure.
CVE-2026-77007 Information Disclosure in wordpress (CVE-2026-77007)
vulnerability in wordpress (CVE-2026-77007). Confidential information can be exposed externally.
CVE-2026-77012 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-77012)
SSRF in wordpress (CVE-2026-77012). Confidential information can be exposed externally.
CVE-2026-81342 Open Redirect in wordpress (CVE-2026-81342)
vulnerability in wordpress (CVE-2026-81342). Risk of unauthorized operations or information disclosure.
CVE-2026-80488 SQL Injection in wordpress (CVE-2026-80488)
SQL injection in wordpress (CVE-2026-80488). Risk of unauthorized operations or information disclosure.
CVE-2026-76548 Authentication Bypass in wordpress (CVE-2026-76548)
authentication bypass in wordpress (CVE-2026-76548). Data can be tampered with by attackers.
CVE-2026-76546 Cross-Site Scripting (XSS) in wordpress (CVE-2026-76546)
cross-site scripting in wordpress (CVE-2026-76546). Successful exploitation can lead to full system takeover.
CVE-2026-81026 Vulnerability in wordpress (CVE-2026-81026)
vulnerability in wordpress (CVE-2026-81026). Risk of unauthorized operations or information disclosure.
CVE-2026-77008 Vulnerability in wordpress (CVE-2026-77008)
vulnerability in wordpress (CVE-2026-77008). Risk of unauthorized operations or information disclosure.
CVE-2026-19430 Vulnerability in wordpress (CVE-2026-19430)
vulnerability in wordpress (CVE-2026-19430). Risk of unauthorized operations or information disclosure.
CVE-2026-76586 Vulnerability in wordpress (CVE-2026-76586)
vulnerability in wordpress (CVE-2026-76586). Data can be tampered with by attackers.
CVE-2026-77704 Authorization Flaw in wordpress (CVE-2026-77704)
vulnerability in wordpress (CVE-2026-77704). Risk of unauthorized operations or information disclosure.
CVE-2026-18234 Vulnerability in wordpress (CVE-2026-18234)
vulnerability in wordpress (CVE-2026-18234). Data can be tampered with by attackers.
CVE-2026-77786 Authorization Flaw in wordpress (CVE-2026-77786)
vulnerability in wordpress (CVE-2026-77786). Data can be tampered with by attackers.
CVE-2026-81346 Vulnerability in wordpress (CVE-2026-81346)
vulnerability in wordpress (CVE-2026-81346). Risk of unauthorized operations or information disclosure.
CVE-2026-18233 Vulnerability in wordpress (CVE-2026-18233)
vulnerability in wordpress (CVE-2026-18233). Data can be tampered with by attackers.
CVE-2026-81200 Vulnerability in wordpress (CVE-2026-81200)
vulnerability in wordpress (CVE-2026-81200). Risk of unauthorized operations or information disclosure.
CVE-2026-16061 SQL Injection in wordpress (CVE-2026-16061)
SQL injection in wordpress (CVE-2026-16061). Confidential information can be exposed externally.
CVE-2026-16259 Privilege Escalation in wordpress (CVE-2026-16259)
vulnerability in wordpress (CVE-2026-16259). Successful exploitation can lead to full system takeover.
CVE-2026-16600 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-16600)
SSRF in wordpress (CVE-2026-16600). Confidential information can be exposed externally.
CVE-2026-17520 Vulnerability in wordpress (CVE-2026-17520)
vulnerability in wordpress (CVE-2026-17520). Risk of unauthorized operations or information disclosure.
CVE-2026-10522 Vulnerability in wordpress (CVE-2026-10522)
vulnerability in wordpress (CVE-2026-10522). Risk of unauthorized operations or information disclosure.
CVE-2026-16947 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-16947)
SSRF in wordpress (CVE-2026-16947). Confidential information can be exposed externally.
CVE-2026-17522 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-17522)
vulnerability in wordpress (CVE-2026-17522). Risk of unauthorized operations or information disclosure.
CVE-2026-55860 Vulnerability in org.mariadb:r2dbc-mariadb (CVE-2026-55860)
vulnerability in org.mariadb:r2dbc-mariadb (CVE-2026-55860). Confidential information can be exposed externally. Mitigation: upgrade to `1.4.1` or later.
CVE-2026-55859 Vulnerability in org.mariadb:r2dbc-mariadb (CVE-2026-55859)
vulnerability in org.mariadb:r2dbc-mariadb (CVE-2026-55859). Data can be tampered with by attackers. Mitigation: upgrade to `1.4.1` or later.
CVE-2026-55858 Vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55858)
vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55858). Data can be tampered with by attackers. Mitigation: upgrade to `2.7.14` or later.
CVE-2026-55857 Vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55857)
vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55857). Confidential information can be exposed externally. Mitigation: upgrade to `2.7.14` or later.
CVE-2026-55856 Vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55856)
vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55856). Confidential information can be exposed externally. Mitigation: upgrade to `2.7.14` or later.
CVE-2026-55848 XXE (XML External Entity) in org.mapfish.print:print-lib (CVE-2026-55848)
vulnerability in org.mapfish.print:print-lib (CVE-2026-55848). Confidential information can be exposed externally. Mitigation: upgrade to `4.0.5` or later.
CVE-2026-55779 Cross-Site Scripting (XSS) in silverstripe/versioned (CVE-2026-55779)
cross-site scripting in silverstripe/versioned (CVE-2026-55779). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.1` or later.
CVE-2026-55867 Vulnerability in org.graylog2:graylog2-server (CVE-2026-55867)
vulnerability in org.graylog2:graylog2-server (CVE-2026-55867). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.2` or later.
CVE-2026-55841 Vulnerability in org.graylog2:graylog2-server (CVE-2026-55841)
vulnerability in org.graylog2:graylog2-server (CVE-2026-55841). Data can be tampered with by attackers. Mitigation: upgrade to `7.1.2` or later.
CVE-2026-55891 Vulnerability in privatebin/privatebin (CVE-2026-55891)
vulnerability in privatebin/privatebin (CVE-2026-55891). Risk of unauthorized operations or information disclosure. Exploitable via ``FILTER_SANITIZE_URL``. Mitigation: upgrade to `2.0.5` or later.
CVE-2026-77939 Code Injection in symfony (CVE-2026-77939)
code injection in symfony (CVE-2026-77939). Confidential information can be exposed externally. Exploitable via `POST /api/v1/query`.
CVE-2026-39071 Vulnerability in wordpress (CVE-2026-39071)
vulnerability in wordpress (CVE-2026-39071). Risk of unauthorized operations or information disclosure.
CVE-2026-39070 Vulnerability in wordpress (CVE-2026-39070)
vulnerability in wordpress (CVE-2026-39070). Risk of unauthorized operations or information disclosure.
CVE-2026-55634 SQL Injection in pimcore/pimcore (CVE-2026-55634)
SQL injection in pimcore/pimcore (CVE-2026-55634). Successful exploitation can lead to full system takeover. Exploitable via ``objects``. Mitigation: upgrade to `2026.1.6` or later.
CVE-2026-55220 Unsafe Deserialization in pimcore/pimcore (CVE-2026-55220)
vulnerability in pimcore/pimcore (CVE-2026-55220). Risk of unauthorized operations or information disclosure. Exploitable via ``true``. Mitigation: upgrade to `12.3.10` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →