Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-15369 |
|
Privilege Escalation in CVE-2026-15369 (CVE-2026-15369)
vulnerability in CVE-2026-15369 (CVE-2026-15369). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82421 |
|
Vulnerability in CVE-2026-82421 (CVE-2026-82421)
vulnerability in CVE-2026-82421 (CVE-2026-82421). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75807 |
|
Authentication Bypass in wordpress (CVE-2026-75807)
authentication bypass in wordpress (CVE-2026-75807). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82474 |
|
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in...
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in...
|
| CVE-2026-82450 |
|
Unrestricted File Upload in CVE-2026-82450 (CVE-2026-82450)
vulnerability in CVE-2026-82450 (CVE-2026-82450). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14494 |
|
Unrestricted File Upload in wordpress (CVE-2026-14494)
vulnerability in wordpress (CVE-2026-14494). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76547 |
|
Vulnerability in wordpress (CVE-2026-76547)
vulnerability in wordpress (CVE-2026-76547). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77008 |
|
Vulnerability in wordpress (CVE-2026-77008)
vulnerability in wordpress (CVE-2026-77008). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-80488 |
|
Vulnerability in wordpress (CVE-2026-80488)
vulnerability in wordpress (CVE-2026-80488). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-81346 |
|
Vulnerability in wordpress (CVE-2026-81346)
vulnerability in wordpress (CVE-2026-81346). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-80311 |
|
Vulnerability in wordpress (CVE-2026-80311)
vulnerability in wordpress (CVE-2026-80311). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18233 |
|
Vulnerability in wordpress (CVE-2026-18233)
vulnerability in wordpress (CVE-2026-18233). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-81342 |
|
Vulnerability in wordpress (CVE-2026-81342)
vulnerability in wordpress (CVE-2026-81342). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77012 |
|
Vulnerability in wordpress (CVE-2026-77012)
vulnerability in wordpress (CVE-2026-77012). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77007 |
|
Vulnerability in wordpress (CVE-2026-77007)
vulnerability in wordpress (CVE-2026-77007). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76586 |
|
Vulnerability in wordpress (CVE-2026-76586)
vulnerability in wordpress (CVE-2026-76586). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18234 |
|
Vulnerability in wordpress (CVE-2026-18234)
vulnerability in wordpress (CVE-2026-18234). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76546 |
|
Vulnerability in wordpress (CVE-2026-76546)
vulnerability in wordpress (CVE-2026-76546). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19430 |
|
Vulnerability in wordpress (CVE-2026-19430)
vulnerability in wordpress (CVE-2026-19430). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-81026 |
|
Vulnerability in wordpress (CVE-2026-81026)
vulnerability in wordpress (CVE-2026-81026). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-81200 |
|
Vulnerability in wordpress (CVE-2026-81200)
vulnerability in wordpress (CVE-2026-81200). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77010 |
|
Vulnerability in wordpress (CVE-2026-77010)
vulnerability in wordpress (CVE-2026-77010). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76548 |
|
Vulnerability in wordpress (CVE-2026-76548)
vulnerability in wordpress (CVE-2026-76548). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77786 |
|
Vulnerability in wordpress (CVE-2026-77786)
vulnerability in wordpress (CVE-2026-77786). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77704 |
|
Vulnerability in wordpress (CVE-2026-77704)
vulnerability in wordpress (CVE-2026-77704). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17520 |
|
Vulnerability in wordpress (CVE-2026-17520)
vulnerability in wordpress (CVE-2026-17520). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16259 |
|
Vulnerability in wordpress (CVE-2026-16259)
vulnerability in wordpress (CVE-2026-16259). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10522 |
|
Vulnerability in wordpress (CVE-2026-10522)
vulnerability in wordpress (CVE-2026-10522). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17522 |
|
Vulnerability in wordpress (CVE-2026-17522)
vulnerability in wordpress (CVE-2026-17522). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16600 |
|
Vulnerability in wordpress (CVE-2026-16600)
vulnerability in wordpress (CVE-2026-16600). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16061 |
|
Vulnerability in wordpress (CVE-2026-16061)
vulnerability in wordpress (CVE-2026-16061). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16947 |
|
Vulnerability in wordpress (CVE-2026-16947)
vulnerability in wordpress (CVE-2026-16947). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55860 |
|
Vulnerability in org.mariadb:r2dbc-mariadb (CVE-2026-55860)
vulnerability in org.mariadb:r2dbc-mariadb (CVE-2026-55860). Confidential information can be exposed externally. Mitigation: upgrade to `1.4.1` or later.
|
| CVE-2026-55859 |
|
Vulnerability in org.mariadb:r2dbc-mariadb (CVE-2026-55859)
vulnerability in org.mariadb:r2dbc-mariadb (CVE-2026-55859). Data can be tampered with by attackers. Mitigation: upgrade to `1.4.1` or later.
|
| CVE-2026-55858 |
|
Vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55858)
vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55858). Data can be tampered with by attackers. Mitigation: upgrade to `2.7.14` or later.
|
| CVE-2026-55857 |
|
Vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55857)
vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55857). Confidential information can be exposed externally. Mitigation: upgrade to `2.7.14` or later.
|
| CVE-2026-55856 |
|
Vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55856)
vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55856). Confidential information can be exposed externally. Mitigation: upgrade to `2.7.14` or later.
|
| CVE-2026-55848 |
|
XXE (XML External Entity) in org.mapfish.print:print-lib (CVE-2026-55848)
vulnerability in org.mapfish.print:print-lib (CVE-2026-55848). Confidential information can be exposed externally. Mitigation: upgrade to `4.0.5` or later.
|
| CVE-2026-55779 |
|
Cross-Site Scripting (XSS) in silverstripe/versioned (CVE-2026-55779)
cross-site scripting in silverstripe/versioned (CVE-2026-55779). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.1` or later.
|
| CVE-2026-55867 |
|
Vulnerability in org.graylog2:graylog2-server (CVE-2026-55867)
vulnerability in org.graylog2:graylog2-server (CVE-2026-55867). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.2` or later.
|
| CVE-2026-55841 |
|
Vulnerability in org.graylog2:graylog2-server (CVE-2026-55841)
vulnerability in org.graylog2:graylog2-server (CVE-2026-55841). Data can be tampered with by attackers. Mitigation: upgrade to `7.1.2` or later.
|
| CVE-2026-55891 |
|
Vulnerability in privatebin/privatebin (CVE-2026-55891)
vulnerability in privatebin/privatebin (CVE-2026-55891). Risk of unauthorized operations or information disclosure. Exploitable via ``FILTER_SANITIZE_URL``. Mitigation: upgrade to `2.0.5` or later.
|
| CVE-2026-77939 |
|
Code Injection in symfony (CVE-2026-77939)
code injection in symfony (CVE-2026-77939). Confidential information can be exposed externally. Exploitable via `POST /api/v1/query`.
|
| CVE-2026-39070 |
|
Vulnerability in wordpress (CVE-2026-39070)
vulnerability in wordpress (CVE-2026-39070). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39071 |
|
Vulnerability in wordpress (CVE-2026-39071)
vulnerability in wordpress (CVE-2026-39071). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55634 |
|
SQL Injection in pimcore/pimcore (CVE-2026-55634)
SQL injection in pimcore/pimcore (CVE-2026-55634). Successful exploitation can lead to full system takeover. Exploitable via ``objects``. Mitigation: upgrade to `2026.1.6` or later.
|
| CVE-2026-55220 |
|
Unsafe Deserialization in pimcore/pimcore (CVE-2026-55220)
vulnerability in pimcore/pimcore (CVE-2026-55220). Risk of unauthorized operations or information disclosure. Exploitable via ``true``. Mitigation: upgrade to `12.3.10` or later.
|
| CVE-2026-55584 |
|
Vulnerability in phpsysinfo/phpsysinfo (CVE-2026-55584)
vulnerability in phpsysinfo/phpsysinfo (CVE-2026-55584). Confidential information can be exposed externally. Exploitable via ``PSI_ALLOWED``. Mitigation: upgrade to `3.4.6` or later.
|
| CVE-2026-55425 |
|
Vulnerability in org.graylog2:graylog2-server (CVE-2026-55425)
vulnerability in org.graylog2:graylog2-server (CVE-2026-55425). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.4` or later.
|
| CVE-2026-55565 |
|
Code Injection in org.yamcs:yamcs-core (CVE-2026-55565)
code injection in org.yamcs:yamcs-core (CVE-2026-55565). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/archive/{instance}`. Mitigation: upgrade to `5.12.8` or later.
|