Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-67589 |
|
Vulnerability in apache (CVE-2026-67589)
vulnerability in apache (CVE-2026-67589). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15918 |
|
SQL Injection in wordpress (CVE-2026-15918)
SQL injection in wordpress (CVE-2026-15918). Confidential information can be exposed externally.
|
| CVE-2026-11421 |
|
SQL Injection in wordpress (CVE-2026-11421)
SQL injection in wordpress (CVE-2026-11421). Confidential information can be exposed externally.
|
| CVE-2026-15941 |
|
SQL Injection in wordpress (CVE-2026-15941)
SQL injection in wordpress (CVE-2026-15941). Confidential information can be exposed externally. Exploitable via ``edit_posts``.
|
| CVE-2026-18322 |
|
Privilege Escalation in wordpress (CVE-2026-18322)
vulnerability in wordpress (CVE-2026-18322). Successful exploitation can lead to full system takeover. Exploitable via ``save``.
|
| CVE-2026-16143 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16143)
cross-site scripting in wordpress (CVE-2026-16143). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18818 |
|
Vulnerability in django (CVE-2026-18818)
vulnerability in django (CVE-2026-18818). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15337 |
|
Vulnerability in django (CVE-2026-15337)
vulnerability in django (CVE-2026-15337). Risk of unauthorized operations or information disclosure. Exploitable via ``DATA_UPLOAD_MAX_MEMORY_SIZE``.
|
| CVE-2026-15920 |
|
Vulnerability in django (CVE-2026-15920)
vulnerability in django (CVE-2026-15920). Risk of unauthorized operations or information disclosure. Exploitable via ``URLField``.
|
| CVE-2026-15307 |
|
Vulnerability in django (CVE-2026-15307)
vulnerability in django (CVE-2026-15307). Successful exploitation can lead to full system takeover. Exploitable via ``django.contrib.gis.gdal.GDALRaster``.
|
| CVE-2026-15830 |
|
Vulnerability in django (CVE-2026-15830)
vulnerability in django (CVE-2026-15830). Risk of unauthorized operations or information disclosure. Exploitable via ``django.contrib.gis.geos.GEOSGeometry``.
|
| CVE-2026-16623 |
|
Code Injection in wordpress (CVE-2026-16623)
code injection in wordpress (CVE-2026-16623). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16618 |
|
Unrestricted File Upload in wordpress (CVE-2026-16618)
vulnerability in wordpress (CVE-2026-16618). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16548 |
|
Unrestricted File Upload in wordpress (CVE-2026-16548)
vulnerability in wordpress (CVE-2026-16548). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16547 |
|
Vulnerability in wordpress (CVE-2026-16547)
vulnerability in wordpress (CVE-2026-16547). Confidential information can be exposed externally.
|
| CVE-2026-16546 |
|
Vulnerability in wordpress (CVE-2026-16546)
vulnerability in wordpress (CVE-2026-16546). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16536 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-16536)
SSRF in wordpress (CVE-2026-16536). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16296 |
|
Open Redirect in wordpress (CVE-2026-16296)
vulnerability in wordpress (CVE-2026-16296). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16295 |
|
Vulnerability in wordpress (CVE-2026-16295)
vulnerability in wordpress (CVE-2026-16295). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16293 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16293)
cross-site scripting in wordpress (CVE-2026-16293). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16070 |
|
Vulnerability in wordpress (CVE-2026-16070)
vulnerability in wordpress (CVE-2026-16070). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16069 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16069)
cross-site scripting in wordpress (CVE-2026-16069). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16068 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16068)
cross-site scripting in wordpress (CVE-2026-16068). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16056 |
|
Vulnerability in wordpress (CVE-2026-16056)
vulnerability in wordpress (CVE-2026-16056). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16035 |
|
Vulnerability in wordpress (CVE-2026-16035)
vulnerability in wordpress (CVE-2026-16035). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15958 |
|
Vulnerability in wordpress (CVE-2026-15958)
vulnerability in wordpress (CVE-2026-15958). Confidential information can be exposed externally.
|
| CVE-2026-15233 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15233)
cross-site scripting in wordpress (CVE-2026-15233). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14939 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-14939)
SSRF in wordpress (CVE-2026-14939). Confidential information can be exposed externally.
|
| CVE-2026-10526 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-10526)
SSRF in wordpress (CVE-2026-10526). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11366 |
|
Authentication Bypass in wordpress (CVE-2026-11366)
authentication bypass in wordpress (CVE-2026-11366). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12698 |
|
Vulnerability in wordpress (CVE-2026-12698)
vulnerability in wordpress (CVE-2026-12698). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14816 |
|
Vulnerability in wordpress (CVE-2026-14816)
vulnerability in wordpress (CVE-2026-14816). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14824 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14824)
cross-site scripting in wordpress (CVE-2026-14824). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14872 |
|
SQL Injection in wordpress (CVE-2026-14872)
SQL injection in wordpress (CVE-2026-14872). Confidential information can be exposed externally.
|
| CVE-2026-14848 |
|
Vulnerability in wordpress (CVE-2026-14848)
vulnerability in wordpress (CVE-2026-14848). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18648 |
|
Path Traversal in react (CVE-2026-18648)
path traversal in react (CVE-2026-18648). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62354 |
|
Authorization Flaw in apache (CVE-2026-62354)
vulnerability in apache (CVE-2026-62354). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68979 |
|
Vulnerability in apache (CVE-2026-68979)
vulnerability in apache (CVE-2026-68979). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68981 |
|
Vulnerability in apache (CVE-2026-68981)
vulnerability in apache (CVE-2026-68981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68980 |
|
Authorization Flaw in apache (CVE-2026-68980)
vulnerability in apache (CVE-2026-68980). Confidential information can be exposed externally.
|
| CVE-2026-61372 |
|
Path Traversal in apache (CVE-2026-61372)
path traversal in apache (CVE-2026-61372). Confidential information can be exposed externally.
|
| CVE-2026-69151 |
|
Cross-Site Scripting (XSS) in @angular/compiler (CVE-2026-69151)
cross-site scripting in @angular/compiler (CVE-2026-69151). Risk of unauthorized operations or information disclosure. Exploitable via ``onclick``.
|
| CVE-2026-69149 |
|
Cross-Site Scripting (XSS) in @angular/platform-server (CVE-2026-69149)
cross-site scripting in @angular/platform-server (CVE-2026-69149). Risk of unauthorized operations or information disclosure. Exploitable via ``domino``.
|
| CVE-2026-68945 |
|
Vulnerability in @angular/common (CVE-2026-68945)
vulnerability in @angular/common (CVE-2026-68945). Risk of unauthorized operations or information disclosure. Exploitable via ``HttpTransferCache``.
|
| CVE-2026-67609 |
|
Vulnerability in apache (CVE-2026-67609)
vulnerability in apache (CVE-2026-67609). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67608 |
|
OS Command Injection in apache (CVE-2026-67608)
OS command injection in apache (CVE-2026-67608). Successful exploitation can lead to full system takeover.
|
| CVE-2026-69075 |
|
Cross-Site Scripting (XSS) in vue (CVE-2026-69075)
cross-site scripting in vue (CVE-2026-69075). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16565 |
|
Vulnerability in wordpress (CVE-2026-16565)
vulnerability in wordpress (CVE-2026-16565). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16572 |
|
SQL Injection in wordpress (CVE-2026-16572)
SQL injection in wordpress (CVE-2026-16572). Confidential information can be exposed externally.
|
| CVE-2026-16297 |
|
Unsafe Deserialization in wordpress (CVE-2026-16297)
vulnerability in wordpress (CVE-2026-16297). Risk of unauthorized operations or information disclosure.
|