Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-8457 |
|
Vulnerability in wordpress (CVE-2026-8457)
vulnerability in wordpress (CVE-2026-8457). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15964 |
|
Vulnerability in wordpress (CVE-2026-15964)
vulnerability in wordpress (CVE-2026-15964). Successful exploitation can lead to full system takeover. Exploitable via ``wp_ajax_nopriv_ssoprocess_ajax``.
|
| CVE-2026-13596 |
|
SQL Injection in wordpress (CVE-2026-13596)
SQL injection in wordpress (CVE-2026-13596). Confidential information can be exposed externally.
|
| CVE-2026-3141 |
|
Vulnerability in wordpress (CVE-2026-3141)
vulnerability in wordpress (CVE-2026-3141). Data can be tampered with by attackers.
|
| CVE-2025-69948 |
|
SQL Injection in sqli (CVE-2025-69948)
SQL injection in sqli (CVE-2025-69948). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69946 |
|
SQL Injection in sqli (CVE-2025-69946)
SQL injection in sqli (CVE-2025-69946). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14919 |
|
Authentication Bypass in wordpress (CVE-2026-14919)
authentication bypass in wordpress (CVE-2026-14919). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14483 |
|
Unrestricted File Upload in wordpress (CVE-2026-14483)
vulnerability in wordpress (CVE-2026-14483). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63223 |
|
Unrestricted File Upload in codeigniter4/framework (CVE-2026-63223)
vulnerability in codeigniter4/framework (CVE-2026-63223). Successful exploitation can lead to full system takeover. Exploitable via ``is_image``. Mitigation: upgrade to `4.7.4` or later.
|
| CVE-2026-63221 |
|
SQL Injection in codeigniter4/framework (CVE-2026-63221)
SQL injection in codeigniter4/framework (CVE-2026-63221). Data can be tampered with by attackers. Exploitable via ``WHERE``. Mitigation: upgrade to `4.7.4` or later.
|
| CVE-2026-14537 |
|
Authorization Flaw in google (CVE-2026-14537)
vulnerability in google (CVE-2026-14537). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66803 |
|
Vulnerability in microsoft (CVE-2026-66803)
vulnerability in microsoft (CVE-2026-66803). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69930 |
|
SQL Injection in sqli (CVE-2025-69930)
SQL injection in sqli (CVE-2025-69930). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66756 |
|
Vulnerability in apache (CVE-2026-66756)
vulnerability in apache (CVE-2026-66756). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69938 |
|
SQL Injection in sqli (CVE-2025-69938)
SQL injection in sqli (CVE-2025-69938). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69933 |
|
SQL Injection in sqli (CVE-2025-69933)
SQL injection in sqli (CVE-2025-69933). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69934 |
|
SQL Injection in sqli (CVE-2025-69934)
SQL injection in sqli (CVE-2025-69934). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69941 |
|
SQL Injection in sqli (CVE-2025-69941)
SQL injection in sqli (CVE-2025-69941). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69947 |
|
SQL Injection in sqli (CVE-2025-69947)
SQL injection in sqli (CVE-2025-69947). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69935 |
|
SQL Injection in sqli (CVE-2025-69935)
SQL injection in sqli (CVE-2025-69935). Successful exploitation can lead to full system takeover.
|
| CVE-2026-35847 |
|
Command Injection in CVE-2026-35847 (CVE-2026-35847)
command injection in CVE-2026-35847 (CVE-2026-35847). Successful exploitation can lead to full system takeover.
|
| CVE-2025-65336 |
|
SQL Injection in sqli (CVE-2025-65336)
SQL injection in sqli (CVE-2025-65336). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69936 |
|
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.
|
| CVE-2025-69931 |
|
SQL Injection in sqli (CVE-2025-69931)
SQL injection in sqli (CVE-2025-69931). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69937 |
|
SQL Injection in sqli (CVE-2025-69937)
SQL injection in sqli (CVE-2025-69937). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12946 |
|
Code Injection in langflow (CVE-2026-12946)
code injection in langflow (CVE-2026-12946). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13435 |
|
Code Injection in langflow (CVE-2026-13435)
code injection in langflow (CVE-2026-13435). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12943 |
|
OS Command Injection in ibm (CVE-2026-12943)
OS command injection in ibm (CVE-2026-12943). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12118 |
|
Unsafe Deserialization in deserialization (CVE-2026-12118)
vulnerability in deserialization (CVE-2026-12118). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12940 |
|
OS Command Injection in langflow (CVE-2026-12940)
OS command injection in langflow (CVE-2026-12940). Successful exploitation can lead to full system takeover.
|
| CVE-2026-52680 |
|
Path Traversal in apache (CVE-2026-52680)
path traversal in apache (CVE-2026-52680). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28812 |
|
Vulnerability in apache (CVE-2026-28812)
vulnerability in apache (CVE-2026-28812). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28323 |
|
Authentication Bypass in solarwinds (CVE-2026-28323)
authentication bypass in solarwinds (CVE-2026-28323). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15435 |
|
Path Traversal in ibm (CVE-2026-15435)
path traversal in ibm (CVE-2026-15435). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11707 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-11707)
cross-site scripting in ibm (CVE-2026-11707). Confidential information can be exposed externally.
|
| CVE-2026-59310 KEV |
|
[KEV] Path Traversal in Broadcom path-traversal (CVE-2026-59310)
path traversal in Broadcom path-traversal (CVE-2026-59310). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-59309 |
|
Vulnerability in vmware (CVE-2026-59309)
vulnerability in vmware (CVE-2026-59309). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17544 |
|
Out-of-Bounds Write in CVE-2026-17544 (CVE-2026-17544)
out-of-bounds write in CVE-2026-17544 (CVE-2026-17544). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17543 |
|
SQL Injection in sqli (CVE-2026-17543)
SQL injection in sqli (CVE-2026-17543). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14602 |
|
Code Injection in wordpress (CVE-2026-14602)
code injection in wordpress (CVE-2026-14602). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16610 |
|
Unrestricted File Upload in wordpress (CVE-2026-16610)
vulnerability in wordpress (CVE-2026-16610). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48449 |
|
Authorization Flaw in adobe (CVE-2026-48449)
vulnerability in adobe (CVE-2026-48449). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18015 |
|
Vulnerability in google (CVE-2026-18015)
vulnerability in google (CVE-2026-18015). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18002 |
|
Vulnerability in google (CVE-2026-18002)
vulnerability in google (CVE-2026-18002). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17991 |
|
Vulnerability in google (CVE-2026-17991)
vulnerability in google (CVE-2026-17991). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17990 |
|
Vulnerability in google (CVE-2026-17990)
vulnerability in google (CVE-2026-17990). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17987 |
|
Vulnerability in google (CVE-2026-17987)
vulnerability in google (CVE-2026-17987). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17947 |
|
Use-After-Free in google (CVE-2026-17947)
vulnerability in google (CVE-2026-17947). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17940 |
|
Vulnerability in google (CVE-2026-17940)
vulnerability in google (CVE-2026-17940). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17924 |
|
Use-After-Free in google (CVE-2026-17924)
vulnerability in google (CVE-2026-17924). Successful exploitation can lead to full system takeover.
|