Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-55549 |
|
Cross-Site Scripting (XSS) in org.yamcs:yamcs-core (CVE-2026-55549)
cross-site scripting in org.yamcs:yamcs-core (CVE-2026-55549). Confidential information can be exposed externally. Exploitable via ``fetch``. Mitigation: upgrade to `5.9.4` or later.
|
| CVE-2026-55547 |
|
Vulnerability in org.yamcs:yamcs-core (CVE-2026-55547)
vulnerability in org.yamcs:yamcs-core (CVE-2026-55547). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/roles`. Mitigation: upgrade to `5.12.8` or later.
|
| CVE-2026-55511 |
|
Code Injection in org.yamcs:yamcs-core (CVE-2026-55511)
code injection in org.yamcs:yamcs-core (CVE-2026-55511). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/archive/{instance}`. Mitigation: upgrade to `5.12.8` or later.
|
| CVE-2026-82078 |
|
Vulnerability in CVE-2026-82078 (CVE-2026-82078)
vulnerability in CVE-2026-82078 (CVE-2026-82078). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6176 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6176)
cross-site scripting in wordpress (CVE-2026-6176). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5934 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5934)
cross-site scripting in wordpress (CVE-2026-5934). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5096 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-5096)
SSRF in wordpress (CVE-2026-5096). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3423 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-3423)
cross-site scripting in wordpress (CVE-2026-3423). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38725 |
|
Cross-Site Scripting (XSS) in CVE-2026-38725 (CVE-2026-38725)
cross-site scripting in CVE-2026-38725 (CVE-2026-38725). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14942 |
|
Vulnerability in wordpress (CVE-2026-14942)
vulnerability in wordpress (CVE-2026-14942). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6128 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6128)
cross-site scripting in wordpress (CVE-2026-6128). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5510 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5510)
cross-site scripting in wordpress (CVE-2026-5510). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-81733 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-81733)
vulnerability in csrf (CVE-2026-81733). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-81732 |
|
Information Disclosure in CVE-2026-81732 (CVE-2026-81732)
vulnerability in CVE-2026-81732 (CVE-2026-81732). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79995 |
|
Vulnerability in wordpress (CVE-2026-79995)
vulnerability in wordpress (CVE-2026-79995). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79996 |
|
Privilege Escalation in wordpress (CVE-2026-79996)
vulnerability in wordpress (CVE-2026-79996). Successful exploitation can lead to full system takeover.
|
| CVE-2026-79615 |
|
Vulnerability in wordpress (CVE-2026-79615)
vulnerability in wordpress (CVE-2026-79615). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79706 |
|
Unrestricted File Upload in wordpress (CVE-2026-79706)
vulnerability in wordpress (CVE-2026-79706). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6286 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6286)
cross-site scripting in wordpress (CVE-2026-6286). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76581 |
|
Vulnerability in wordpress (CVE-2026-76581)
vulnerability in wordpress (CVE-2026-76581). Successful exploitation can lead to full system takeover. Exploitable via ``wdpsso_step1``.
|
| CVE-2026-5097 |
|
SQL Injection in wordpress (CVE-2026-5097)
SQL injection in wordpress (CVE-2026-5097). Confidential information can be exposed externally.
|
| CVE-2026-77701 |
|
Vulnerability in wordpress (CVE-2026-77701)
vulnerability in wordpress (CVE-2026-77701). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19423 |
|
Privilege Escalation in wordpress (CVE-2026-19423)
vulnerability in wordpress (CVE-2026-19423). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19084 |
|
Vulnerability in wordpress (CVE-2026-19084)
vulnerability in wordpress (CVE-2026-19084). Confidential information can be exposed externally.
|
| CVE-2026-14558 |
|
Unsafe Deserialization in wordpress (CVE-2026-14558)
vulnerability in wordpress (CVE-2026-14558). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14567 |
|
Information Disclosure in wordpress (CVE-2026-14567)
vulnerability in wordpress (CVE-2026-14567). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12513 |
|
Vulnerability in wordpress (CVE-2026-12513)
vulnerability in wordpress (CVE-2026-12513). Data can be tampered with by attackers.
|
| CVE-2026-12514 |
|
Vulnerability in wordpress (CVE-2026-12514)
vulnerability in wordpress (CVE-2026-12514). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4246 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4246)
cross-site scripting in wordpress (CVE-2026-4246). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76053 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-76053)
cross-site scripting in wordpress (CVE-2026-76053). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77365 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-77365)
cross-site scripting in wordpress (CVE-2026-77365). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18983 |
|
Unrestricted File Upload in wordpress (CVE-2026-18983)
vulnerability in wordpress (CVE-2026-18983). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3129 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-3129)
cross-site scripting in wordpress (CVE-2026-3129). Risk of unauthorized operations or information disclosure. Exploitable via ``width``.
|
| CVE-2026-18324 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18324)
cross-site scripting in wordpress (CVE-2026-18324). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16654 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16654)
cross-site scripting in wordpress (CVE-2026-16654). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16759 |
|
Vulnerability in wordpress (CVE-2026-16759)
vulnerability in wordpress (CVE-2026-16759). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15798 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15798)
cross-site scripting in wordpress (CVE-2026-15798). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18978 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-18978)
cross-site scripting in wordpress (CVE-2026-18978). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-82072 |
|
Out-of-Bounds Read in google (CVE-2026-82072)
vulnerability in google (CVE-2026-82072). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75417 |
|
SQL Injection in sqli (CVE-2026-75417)
SQL injection in sqli (CVE-2026-75417). Successful exploitation can lead to full system takeover.
|
| CVE-2026-81931 |
|
Unrestricted File Upload in CVE-2026-81931 (CVE-2026-81931)
vulnerability in CVE-2026-81931 (CVE-2026-81931). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-81729 |
|
Authorization Flaw in CVE-2026-81729 (CVE-2026-81729)
vulnerability in CVE-2026-81729 (CVE-2026-81729). Data can be tampered with by attackers. Exploitable via `DELETE /api/index.php/documents`.
|
| CVE-2026-81730 |
|
Path Traversal in CVE-2026-81730 (CVE-2026-81730)
path traversal in CVE-2026-81730 (CVE-2026-81730). Data can be tampered with by attackers.
|
| CVE-2026-81728 |
|
SQL Injection in sqli (CVE-2026-81728)
SQL injection in sqli (CVE-2026-81728). Confidential information can be exposed externally.
|
| CVE-2026-81525 |
|
Vulnerability in CVE-2026-81525 (CVE-2026-81525)
vulnerability in CVE-2026-81525 (CVE-2026-81525). Confidential information can be exposed externally.
|
| CVE-2026-65931 |
|
Vulnerability in CVE-2026-65931 (CVE-2026-65931)
vulnerability in CVE-2026-65931 (CVE-2026-65931). Risk of unauthorized operations or information disclosure. Exploitable via `POST /index.php/admin/menuentries/sa/create`.
|
| CVE-2026-59317 |
|
Vulnerability in apache (CVE-2026-59317)
vulnerability in apache (CVE-2026-59317). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59292 |
|
Vulnerability in CVE-2026-59292 (CVE-2026-59292)
vulnerability in CVE-2026-59292 (CVE-2026-59292). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55758 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-55758)
SSRF in ssrf (CVE-2026-55758). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-37072 |
|
Vulnerability in CVE-2026-37072 (CVE-2026-37072)
vulnerability in CVE-2026-37072 (CVE-2026-37072). Risk of unauthorized operations or information disclosure.
|