Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-8457 Vulnerability in wordpress (CVE-2026-8457)
vulnerability in wordpress (CVE-2026-8457). Successful exploitation can lead to full system takeover.
CVE-2026-15964 Vulnerability in wordpress (CVE-2026-15964)
vulnerability in wordpress (CVE-2026-15964). Successful exploitation can lead to full system takeover. Exploitable via ``wp_ajax_nopriv_ssoprocess_ajax``.
CVE-2026-13596 SQL Injection in wordpress (CVE-2026-13596)
SQL injection in wordpress (CVE-2026-13596). Confidential information can be exposed externally.
CVE-2026-3141 Vulnerability in wordpress (CVE-2026-3141)
vulnerability in wordpress (CVE-2026-3141). Data can be tampered with by attackers.
CVE-2025-69948 SQL Injection in sqli (CVE-2025-69948)
SQL injection in sqli (CVE-2025-69948). Successful exploitation can lead to full system takeover.
CVE-2025-69946 SQL Injection in sqli (CVE-2025-69946)
SQL injection in sqli (CVE-2025-69946). Successful exploitation can lead to full system takeover.
CVE-2026-14919 Authentication Bypass in wordpress (CVE-2026-14919)
authentication bypass in wordpress (CVE-2026-14919). Successful exploitation can lead to full system takeover.
CVE-2026-14483 Unrestricted File Upload in wordpress (CVE-2026-14483)
vulnerability in wordpress (CVE-2026-14483). Successful exploitation can lead to full system takeover.
CVE-2026-63223 Unrestricted File Upload in codeigniter4/framework (CVE-2026-63223)
vulnerability in codeigniter4/framework (CVE-2026-63223). Successful exploitation can lead to full system takeover. Exploitable via ``is_image``. Mitigation: upgrade to `4.7.4` or later.
CVE-2026-63221 SQL Injection in codeigniter4/framework (CVE-2026-63221)
SQL injection in codeigniter4/framework (CVE-2026-63221). Data can be tampered with by attackers. Exploitable via ``WHERE``. Mitigation: upgrade to `4.7.4` or later.
CVE-2026-14537 Authorization Flaw in google (CVE-2026-14537)
vulnerability in google (CVE-2026-14537). Successful exploitation can lead to full system takeover.
CVE-2026-66803 Vulnerability in microsoft (CVE-2026-66803)
vulnerability in microsoft (CVE-2026-66803). Successful exploitation can lead to full system takeover.
CVE-2025-69930 SQL Injection in sqli (CVE-2025-69930)
SQL injection in sqli (CVE-2025-69930). Successful exploitation can lead to full system takeover.
CVE-2026-66756 Vulnerability in apache (CVE-2026-66756)
vulnerability in apache (CVE-2026-66756). Successful exploitation can lead to full system takeover.
CVE-2025-69938 SQL Injection in sqli (CVE-2025-69938)
SQL injection in sqli (CVE-2025-69938). Successful exploitation can lead to full system takeover.
CVE-2025-69933 SQL Injection in sqli (CVE-2025-69933)
SQL injection in sqli (CVE-2025-69933). Successful exploitation can lead to full system takeover.
CVE-2025-69934 SQL Injection in sqli (CVE-2025-69934)
SQL injection in sqli (CVE-2025-69934). Successful exploitation can lead to full system takeover.
CVE-2025-69941 SQL Injection in sqli (CVE-2025-69941)
SQL injection in sqli (CVE-2025-69941). Successful exploitation can lead to full system takeover.
CVE-2025-69947 SQL Injection in sqli (CVE-2025-69947)
SQL injection in sqli (CVE-2025-69947). Successful exploitation can lead to full system takeover.
CVE-2025-69935 SQL Injection in sqli (CVE-2025-69935)
SQL injection in sqli (CVE-2025-69935). Successful exploitation can lead to full system takeover.
CVE-2026-35847 Command Injection in CVE-2026-35847 (CVE-2026-35847)
command injection in CVE-2026-35847 (CVE-2026-35847). Successful exploitation can lead to full system takeover.
CVE-2025-65336 SQL Injection in sqli (CVE-2025-65336)
SQL injection in sqli (CVE-2025-65336). Successful exploitation can lead to full system takeover.
CVE-2025-69936 CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.
CVE-2025-69931 SQL Injection in sqli (CVE-2025-69931)
SQL injection in sqli (CVE-2025-69931). Successful exploitation can lead to full system takeover.
CVE-2025-69937 SQL Injection in sqli (CVE-2025-69937)
SQL injection in sqli (CVE-2025-69937). Successful exploitation can lead to full system takeover.
CVE-2026-12946 Code Injection in langflow (CVE-2026-12946)
code injection in langflow (CVE-2026-12946). Successful exploitation can lead to full system takeover.
CVE-2026-13435 Code Injection in langflow (CVE-2026-13435)
code injection in langflow (CVE-2026-13435). Successful exploitation can lead to full system takeover.
CVE-2026-12943 OS Command Injection in ibm (CVE-2026-12943)
OS command injection in ibm (CVE-2026-12943). Successful exploitation can lead to full system takeover.
CVE-2026-12118 Unsafe Deserialization in deserialization (CVE-2026-12118)
vulnerability in deserialization (CVE-2026-12118). Successful exploitation can lead to full system takeover.
CVE-2026-12940 OS Command Injection in langflow (CVE-2026-12940)
OS command injection in langflow (CVE-2026-12940). Successful exploitation can lead to full system takeover.
CVE-2026-52680 Path Traversal in apache (CVE-2026-52680)
path traversal in apache (CVE-2026-52680). Successful exploitation can lead to full system takeover.
CVE-2026-28812 Vulnerability in apache (CVE-2026-28812)
vulnerability in apache (CVE-2026-28812). Successful exploitation can lead to full system takeover.
CVE-2026-28323 Authentication Bypass in solarwinds (CVE-2026-28323)
authentication bypass in solarwinds (CVE-2026-28323). Successful exploitation can lead to full system takeover.
CVE-2026-15435 Path Traversal in ibm (CVE-2026-15435)
path traversal in ibm (CVE-2026-15435). Successful exploitation can lead to full system takeover.
CVE-2026-11707 Cross-Site Scripting (XSS) in ibm (CVE-2026-11707)
cross-site scripting in ibm (CVE-2026-11707). Confidential information can be exposed externally.
CVE-2026-59310 KEV [KEV] Path Traversal in Broadcom path-traversal (CVE-2026-59310)
path traversal in Broadcom path-traversal (CVE-2026-59310). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-59309 Vulnerability in vmware (CVE-2026-59309)
vulnerability in vmware (CVE-2026-59309). Successful exploitation can lead to full system takeover.
CVE-2026-17544 Out-of-Bounds Write in CVE-2026-17544 (CVE-2026-17544)
out-of-bounds write in CVE-2026-17544 (CVE-2026-17544). Successful exploitation can lead to full system takeover.
CVE-2026-17543 SQL Injection in sqli (CVE-2026-17543)
SQL injection in sqli (CVE-2026-17543). Successful exploitation can lead to full system takeover.
CVE-2026-14602 Code Injection in wordpress (CVE-2026-14602)
code injection in wordpress (CVE-2026-14602). Successful exploitation can lead to full system takeover.
CVE-2026-16610 Unrestricted File Upload in wordpress (CVE-2026-16610)
vulnerability in wordpress (CVE-2026-16610). Successful exploitation can lead to full system takeover.
CVE-2026-48449 Authorization Flaw in adobe (CVE-2026-48449)
vulnerability in adobe (CVE-2026-48449). Successful exploitation can lead to full system takeover.
CVE-2026-18015 Vulnerability in google (CVE-2026-18015)
vulnerability in google (CVE-2026-18015). Successful exploitation can lead to full system takeover.
CVE-2026-18002 Vulnerability in google (CVE-2026-18002)
vulnerability in google (CVE-2026-18002). Successful exploitation can lead to full system takeover.
CVE-2026-17991 Vulnerability in google (CVE-2026-17991)
vulnerability in google (CVE-2026-17991). Successful exploitation can lead to full system takeover.
CVE-2026-17990 Vulnerability in google (CVE-2026-17990)
vulnerability in google (CVE-2026-17990). Successful exploitation can lead to full system takeover.
CVE-2026-17987 Vulnerability in google (CVE-2026-17987)
vulnerability in google (CVE-2026-17987). Successful exploitation can lead to full system takeover.
CVE-2026-17947 Use-After-Free in google (CVE-2026-17947)
vulnerability in google (CVE-2026-17947). Successful exploitation can lead to full system takeover.
CVE-2026-17940 Vulnerability in google (CVE-2026-17940)
vulnerability in google (CVE-2026-17940). Successful exploitation can lead to full system takeover.
CVE-2026-17924 Use-After-Free in google (CVE-2026-17924)
vulnerability in google (CVE-2026-17924). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →