Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-13251 |
|
Path Traversal in wordpress (CVE-2026-13251)
path traversal in wordpress (CVE-2026-13251). Confidential information can be exposed externally.
|
| CVE-2026-14249 |
|
Vulnerability in wordpress (CVE-2026-14249)
vulnerability in wordpress (CVE-2026-14249). Data can be tampered with by attackers.
|
| CVE-2026-5821 |
|
Vulnerability in wordpress (CVE-2026-5821)
vulnerability in wordpress (CVE-2026-5821). Data can be tampered with by attackers.
|
| CVE-2026-54263 |
|
Cross-Site Scripting (XSS) in wagtail (CVE-2026-54263)
cross-site scripting in wagtail (CVE-2026-54263). Confidential information can be exposed externally. Mitigation: upgrade to `7.4.2` or later.
|
| CVE-2026-49981 |
|
Vulnerability in twig/twig (CVE-2026-49981)
vulnerability in twig/twig (CVE-2026-49981). Confidential information can be exposed externally. Exploitable via ``Template``. Mitigation: upgrade to `3.27.0` or later.
|
| CVE-2026-54428 |
|
Vulnerability in org.apache.httpcomponents.core5:httpcore5-h2 (CVE-2026-54428)
vulnerability in org.apache.httpcomponents.core5:httpcore5-h2 (CVE-2026-54428). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.5-beta2` or later.
|
| CVE-2026-54399 |
|
Vulnerability in org.apache.httpcomponents.core5:httpcore5 (CVE-2026-54399)
vulnerability in org.apache.httpcomponents.core5:httpcore5 (CVE-2026-54399). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.5-beta2` or later.
|
| CVE-2026-12142 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12142)
cross-site scripting in wordpress (CVE-2026-12142). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13228 |
|
Privilege Escalation in wordpress (CVE-2026-13228)
vulnerability in wordpress (CVE-2026-13228). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12158 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-12158)
vulnerability in wordpress (CVE-2026-12158). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12224 |
|
Privilege Escalation in wordpress (CVE-2026-12224)
vulnerability in wordpress (CVE-2026-12224). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11823 |
|
SQL Injection in wordpress (CVE-2026-11823)
SQL injection in wordpress (CVE-2026-11823). Confidential information can be exposed externally.
|
| CVE-2026-1239 |
|
Vulnerability in wordpress (CVE-2026-1239)
vulnerability in wordpress (CVE-2026-1239). Confidential information can be exposed externally.
|
| CVE-2026-11794 |
|
Vulnerability in wordpress (CVE-2026-11794)
vulnerability in wordpress (CVE-2026-11794). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11883 |
|
Vulnerability in wordpress (CVE-2026-11883)
vulnerability in wordpress (CVE-2026-11883). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11568 |
|
Vulnerability in wordpress (CVE-2026-11568)
vulnerability in wordpress (CVE-2026-11568). Confidential information can be exposed externally.
|
| CVE-2026-10750 |
|
Vulnerability in wordpress (CVE-2026-10750)
vulnerability in wordpress (CVE-2026-10750). Confidential information can be exposed externally.
|
| CVE-2026-7517 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-7517)
cross-site scripting in wordpress (CVE-2026-7517). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13731 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13731)
cross-site scripting in wordpress (CVE-2026-13731). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13468 |
|
Vulnerability in wordpress (CVE-2026-13468)
vulnerability in wordpress (CVE-2026-13468). Confidential information can be exposed externally.
|
| CVE-2026-12923 |
|
Vulnerability in wordpress (CVE-2026-12923)
vulnerability in wordpress (CVE-2026-12923). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10513 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-10513)
cross-site scripting in wordpress (CVE-2026-10513). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48808 |
|
Vulnerability in twig/twig (CVE-2026-48808)
vulnerability in twig/twig (CVE-2026-48808). Confidential information can be exposed externally. Exploitable via ``SourcePolicyInterface``. Mitigation: upgrade to `3.27.0` or later.
|
| CVE-2026-49473 |
|
Vulnerability in @cedar-policy/authorization-for-expressjs (CVE-2026-49473)
vulnerability in @cedar-policy/authorization-for-expressjs (CVE-2026-49473). Successful exploitation can lead to full system takeover. Exploitable via `GET /users`. Mitigation: upgrade to `0.3.0` or later.
|
| CVE-2026-49434 |
|
Vulnerability in activemq (CVE-2026-49434)
vulnerability in activemq (CVE-2026-49434). Data can be tampered with by attackers. Mitigation: upgrade to `5.19.8, 6.2.7` or later.
|
| CVE-2026-49877 |
|
Vulnerability in activemq (CVE-2026-49877)
vulnerability in activemq (CVE-2026-49877). Confidential information can be exposed externally. Mitigation: upgrade to `5.19.8, 6.2.7` or later.
|
| CVE-2026-50734 |
|
Vulnerability in activemq (CVE-2026-50734)
vulnerability in activemq (CVE-2026-50734). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.19.8, 6.2.7` or later.
|
| CVE-2026-53916 |
|
Vulnerability in activemq (CVE-2026-53916)
vulnerability in activemq (CVE-2026-53916). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.19.8, 6.2.7` or later.
|
| CVE-2026-49432 |
|
Vulnerability in activemq (CVE-2026-49432)
vulnerability in activemq (CVE-2026-49432). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.19.8, 6.2.7` or later.
|
| CVE-2026-54475 |
|
Vulnerability in activemq (CVE-2026-54475)
vulnerability in activemq (CVE-2026-54475). Data can be tampered with by attackers. Mitigation: upgrade to `5.19.8, 6.2.7` or later.
|
| CVE-2026-53917 |
|
Vulnerability in activemq (CVE-2026-53917)
vulnerability in activemq (CVE-2026-53917). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.19.8, 6.2.7` or later.
|
| CVE-2026-50750 |
|
Vulnerability in activemq (CVE-2026-50750)
vulnerability in activemq (CVE-2026-50750). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.19.8, 6.2.7` or later.
|
| CVE-2026-8141 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-8141)
cross-site scripting in wordpress (CVE-2026-8141). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12240 |
|
Unsafe Deserialization in wordpress (CVE-2026-12240)
vulnerability in wordpress (CVE-2026-12240). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11590 |
|
Vulnerability in wordpress (CVE-2026-11590)
vulnerability in wordpress (CVE-2026-11590). Confidential information can be exposed externally.
|
| CVE-2026-11589 |
|
Vulnerability in wordpress (CVE-2026-11589)
vulnerability in wordpress (CVE-2026-11589). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55957 |
|
Vulnerability in tomcat (CVE-2026-55957)
vulnerability in tomcat (CVE-2026-55957). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.0.101, 10.1.37, 11.0.5` or later.
|
| CVE-2026-53404 |
|
Vulnerability in tomcat (CVE-2026-53404)
vulnerability in tomcat (CVE-2026-53404). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.0.101, 10.1.37, 11.0.5` or later.
|
| CVE-2026-57950 |
|
ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control...
ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control...
|
| CVE-2026-36848 |
|
Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.
Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.
|
| CVE-2026-10083 |
|
Vulnerability in wordpress (CVE-2026-10083)
vulnerability in wordpress (CVE-2026-10083). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13528 |
|
Path Traversal in vue (CVE-2026-13528)
path traversal in vue (CVE-2026-13528). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8095 |
|
Vulnerability in wordpress (CVE-2026-8095)
vulnerability in wordpress (CVE-2026-8095). Data can be tampered with by attackers.
|
| CVE-2026-10820 |
|
Vulnerability in wordpress (CVE-2026-10820)
vulnerability in wordpress (CVE-2026-10820). Data can be tampered with by attackers.
|
| CVE-2026-52783 |
|
Vulnerability in rails (CVE-2026-52783)
vulnerability in rails (CVE-2026-52783). Confidential information can be exposed externally. Mitigation: upgrade to `17.3.3` or later.
|
| CVE-2026-56011 |
|
Unauthenticated Cross Site Scripting (XSS) in MapPress Maps for WordPress <= 2.97.3 versions.
Unauthenticated Cross Site Scripting (XSS) in MapPress Maps for WordPress <= 2.97.3 versions.
|
| CVE-2025-68063 |
|
Vulnerability in wordpress (CVE-2025-68063)
vulnerability in wordpress (CVE-2025-68063). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57915 |
|
Vulnerability in apache (CVE-2026-57915)
vulnerability in apache (CVE-2026-57915). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10835 |
|
Vulnerability in wordpress (CVE-2026-10835)
vulnerability in wordpress (CVE-2026-10835). Confidential information can be exposed externally.
|
| CVE-2026-49486 |
|
Vulnerability in apache-airflow-providers-ftp (CVE-2026-49486)
vulnerability in apache-airflow-providers-ftp (CVE-2026-49486). Confidential information can be exposed externally. Exploitable via ``ftplib.FTP_TLS``. Mitigation: upgrade to `3.15.1` or later.
|