Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-16878 |
|
Out-of-Bounds Read in ibm (CVE-2026-16878)
vulnerability in ibm (CVE-2026-16878). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16871 |
|
Out-of-Bounds Write in ibm (CVE-2026-16871)
out-of-bounds write in ibm (CVE-2026-16871). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16868 |
|
Vulnerability in dos (CVE-2026-16868)
vulnerability in dos (CVE-2026-16868). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16867 |
|
Authentication Bypass in ibm (CVE-2026-16867)
authentication bypass in ibm (CVE-2026-16867). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16861 |
|
Out-of-Bounds Read in dos (CVE-2026-16861)
vulnerability in dos (CVE-2026-16861). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16859 |
|
Out-of-Bounds Read in ibm (CVE-2026-16859)
vulnerability in ibm (CVE-2026-16859). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16853 |
|
Out-of-Bounds Read in ibm (CVE-2026-16853)
vulnerability in ibm (CVE-2026-16853). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16815 |
|
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and...
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and...
|
| CVE-2026-16722 |
|
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized...
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized...
|
| CVE-2026-16713 |
|
Vulnerability in ibm (CVE-2026-16713)
vulnerability in ibm (CVE-2026-16713). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16692 |
|
Out-of-Bounds Write in dos (CVE-2026-16692)
out-of-bounds write in dos (CVE-2026-16692). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16674 |
|
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary...
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary...
|
| CVE-2026-14875 |
|
Vulnerability in ibm (CVE-2026-14875)
vulnerability in ibm (CVE-2026-14875). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13460 |
|
Vulnerability in ibm (CVE-2026-13460)
vulnerability in ibm (CVE-2026-13460). Confidential information can be exposed externally.
|
| CVE-2026-14525 |
|
Vulnerability in ibm (CVE-2026-14525)
vulnerability in ibm (CVE-2026-14525). Confidential information can be exposed externally.
|
| CVE-2026-10571 |
|
Unsafe Deserialization in dos (CVE-2026-10571)
vulnerability in dos (CVE-2026-10571). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13365 |
|
Cross-Site Request Forgery (CSRF) in ibm (CVE-2026-13365)
vulnerability in ibm (CVE-2026-13365). Data can be tampered with by attackers.
|
| CVE-2026-73482 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73482)
vulnerability in csrf (CVE-2026-73482). Data can be tampered with by attackers.
|
| CVE-2026-73481 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73481)
vulnerability in csrf (CVE-2026-73481). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18071 |
|
Privilege Escalation in ibm (CVE-2026-18071)
vulnerability in ibm (CVE-2026-18071). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17220 |
|
Vulnerability in dos (CVE-2026-17220)
vulnerability in dos (CVE-2026-17220). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17197 |
|
Authentication Bypass in ibm (CVE-2026-17197)
authentication bypass in ibm (CVE-2026-17197). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18428 |
|
Vulnerability in Amazon aws (CVE-2026-18428)
vulnerability in Amazon aws (CVE-2026-18428). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73671 |
|
Open Redirect in CVE-2026-73671 (CVE-2026-73671)
vulnerability in CVE-2026-73671 (CVE-2026-73671). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73670 |
|
SQL Injection in sqli (CVE-2026-73670)
SQL injection in sqli (CVE-2026-73670). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73570 KEV |
|
[KEV] OS Command Injection in Synacor zimbra-collaboration-suite (CVE-2026-73570)
OS command injection in Synacor zimbra-collaboration-suite (CVE-2026-73570). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2026-73571 |
|
Authorization Flaw in c (CVE-2026-73571)
vulnerability in c (CVE-2026-73571). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73572 |
|
Cross-Site Scripting (XSS) in synacor (CVE-2026-73572)
cross-site scripting in synacor (CVE-2026-73572). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73573 |
|
Vulnerability in path-traversal (CVE-2026-73573)
vulnerability in path-traversal (CVE-2026-73573). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73574 |
|
Vulnerability in synacor (CVE-2026-73574)
vulnerability in synacor (CVE-2026-73574). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73575 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73575)
vulnerability in csrf (CVE-2026-73575). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73576 |
|
Vulnerability in synacor (CVE-2026-73576)
vulnerability in synacor (CVE-2026-73576). Data can be tampered with by attackers.
|
| CVE-2026-73533 |
|
Vulnerability in CVE-2026-73533 (CVE-2026-73533)
vulnerability in CVE-2026-73533 (CVE-2026-73533). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73532 |
|
Vulnerability in CVE-2026-73532 (CVE-2026-73532)
vulnerability in CVE-2026-73532 (CVE-2026-73532). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19710 |
|
Vulnerability in sqli (CVE-2026-19710)
vulnerability in sqli (CVE-2026-19710). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66256 |
|
Unsafe Deserialization in apache (CVE-2026-66256)
vulnerability in apache (CVE-2026-66256). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28154 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-28154)
cross-site scripting in wordpress (CVE-2026-28154). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67990 |
|
Cross-Site Request Forgery (CSRF) in rails (CVE-2026-67990)
vulnerability in rails (CVE-2026-67990). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66426 |
|
Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions.
Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions.
|
| CVE-2026-28176 |
|
Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions.
Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions.
|
| CVE-2026-28149 |
|
Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
|
| CVE-2026-27380 |
|
Editor PHP Object Injection in Car Rental Manager <= 1.3.9 versions.
Editor PHP Object Injection in Car Rental Manager <= 1.3.9 versions.
|
| CVE-2026-49827 |
|
Vulnerability in CVE-2026-49827 (CVE-2026-49827)
vulnerability in CVE-2026-49827 (CVE-2026-49827). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73628 |
|
Cross-Site Scripting (XSS) in CVE-2026-73628 (CVE-2026-73628)
cross-site scripting in CVE-2026-73628 (CVE-2026-73628). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.1` or later.
|
| CVE-2026-15413 |
|
Vulnerability in wordpress (CVE-2026-15413)
vulnerability in wordpress (CVE-2026-15413). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14332 |
|
Vulnerability in wordpress (CVE-2026-14332)
vulnerability in wordpress (CVE-2026-14332). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3639 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-3639)
cross-site scripting in wordpress (CVE-2026-3639). Risk of unauthorized operations or information disclosure. Exploitable via ``ppwp``.
|
| CVE-2026-18146 |
|
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin...
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin...
|
| CVE-2026-3835 |
|
Vulnerability in wordpress (CVE-2026-3835)
vulnerability in wordpress (CVE-2026-3835). Risk of unauthorized operations or information disclosure. Exploitable via ``LIKE``.
|
| CVE-2026-19088 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-19088)
vulnerability in wordpress (CVE-2026-19088). Risk of unauthorized operations or information disclosure.
|