Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-22334 |
|
Subscriber Arbitrary File Download in Woocommerce Book Price <= 1.3 versions.
Subscriber Arbitrary File Download in Woocommerce Book Price <= 1.3 versions.
|
| CVE-2026-12466 |
|
Vulnerability in google (CVE-2026-12466)
vulnerability in google (CVE-2026-12466). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12468 |
|
Vulnerability in google (CVE-2026-12468)
vulnerability in google (CVE-2026-12468). Successful exploitation can lead to full system takeover.
|
| CVE-2026-22325 |
|
Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions.
Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions.
|
| CVE-2026-12467 |
|
Use-After-Free in Google chrome (CVE-2026-12467)
vulnerability in Google chrome (CVE-2026-12467). Successful exploitation can lead to full system takeover.
|
| CVE-2026-22339 |
|
Unauthenticated Cross Site Scripting (XSS) in WPJobster <= 6.3.5 versions.
Unauthenticated Cross Site Scripting (XSS) in WPJobster <= 6.3.5 versions.
|
| CVE-2026-22332 |
|
Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions.
Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions.
|
| CVE-2026-22328 |
|
Unauthenticated Cross Site Scripting (XSS) in Auto Repair <= 22.6 versions.
Unauthenticated Cross Site Scripting (XSS) in Auto Repair <= 22.6 versions.
|
| CVE-2026-12491 |
|
Vulnerability in vllm (CVE-2026-12491)
vulnerability in vllm (CVE-2026-12491). Risk of unauthorized operations or information disclosure. Exploitable via ``ImageOps.exif_transpose``. Mitigation: upgrade to `0.24.0` or later.
|
| CVE-2026-12457 |
|
Vulnerability in google (CVE-2026-12457)
vulnerability in google (CVE-2026-12457). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12465 |
|
Vulnerability in google (CVE-2026-12465)
vulnerability in google (CVE-2026-12465). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12451 |
|
Use-After-Free in google (CVE-2026-12451)
vulnerability in google (CVE-2026-12451). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12452 |
|
Use-After-Free in google (CVE-2026-12452)
vulnerability in google (CVE-2026-12452). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12463 |
|
Cross-Site Scripting (XSS) in google (CVE-2026-12463)
cross-site scripting in google (CVE-2026-12463). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12464 |
|
Use-After-Free in google (CVE-2026-12464)
vulnerability in google (CVE-2026-12464). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12458 |
|
Vulnerability in google (CVE-2026-12458)
vulnerability in google (CVE-2026-12458). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12447 |
|
Vulnerability in google (CVE-2026-12447)
vulnerability in google (CVE-2026-12447). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12460 |
|
Vulnerability in google (CVE-2026-12460)
vulnerability in google (CVE-2026-12460). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12461 |
|
Out-of-Bounds Read in google (CVE-2026-12461)
vulnerability in google (CVE-2026-12461). Confidential information can be exposed externally.
|
| CVE-2026-12449 |
|
Use-After-Free in privilege-escalation (CVE-2026-12449)
vulnerability in privilege-escalation (CVE-2026-12449). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12462 |
|
Use-After-Free in google (CVE-2026-12462)
vulnerability in google (CVE-2026-12462). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12448 |
|
Privilege Escalation in privilege-escalation (CVE-2026-12448)
vulnerability in privilege-escalation (CVE-2026-12448). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12456 |
|
Vulnerability in google (CVE-2026-12456)
vulnerability in google (CVE-2026-12456). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12453 |
|
Vulnerability in google (CVE-2026-12453)
vulnerability in google (CVE-2026-12453). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12446 |
|
Authorization Flaw in google (CVE-2026-12446)
vulnerability in google (CVE-2026-12446). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12454 |
|
Vulnerability in google (CVE-2026-12454)
vulnerability in google (CVE-2026-12454). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12444 |
|
Out-of-Bounds Read in google (CVE-2026-12444)
vulnerability in google (CVE-2026-12444). Confidential information can be exposed externally.
|
| CVE-2026-12450 |
|
Privilege Escalation in google (CVE-2026-12450)
vulnerability in google (CVE-2026-12450). Confidential information can be exposed externally.
|
| CVE-2026-12445 |
|
Use-After-Free in google (CVE-2026-12445)
vulnerability in google (CVE-2026-12445). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12443 |
|
Use-After-Free in google (CVE-2026-12443)
vulnerability in google (CVE-2026-12443). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12459 |
|
Cross-Site Scripting (XSS) in google (CVE-2026-12459)
cross-site scripting in google (CVE-2026-12459). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12455 |
|
Use-After-Free in google (CVE-2026-12455)
vulnerability in google (CVE-2026-12455). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12439 |
|
Use-After-Free in google (CVE-2026-12439)
vulnerability in google (CVE-2026-12439). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12360 |
|
SQL Injection in wordpress (CVE-2026-12360)
SQL injection in wordpress (CVE-2026-12360). Confidential information can be exposed externally.
|
| CVE-2026-12165 |
|
Privilege Escalation in wordpress (CVE-2026-12165)
vulnerability in wordpress (CVE-2026-12165). Successful exploitation can lead to full system takeover. Exploitable via ``RegistryUserRole``.
|
| CVE-2026-12442 |
|
Use-After-Free in google (CVE-2026-12442)
vulnerability in google (CVE-2026-12442). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12441 |
|
Use-After-Free in google (CVE-2026-12441)
vulnerability in google (CVE-2026-12441). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12256 |
|
Contributor PHP Object Injection in Avada <= 3.15.3 versions.
Contributor PHP Object Injection in Avada <= 3.15.3 versions.
|
| CVE-2026-12440 |
|
Use-After-Free in google (CVE-2026-12440)
vulnerability in google (CVE-2026-12440). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11975 |
|
Cross-Site Scripting (XSS) in CVE-2026-11975 (CVE-2026-11975)
cross-site scripting in CVE-2026-11975 (CVE-2026-11975). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11858 |
|
Vulnerability in csharp (CVE-2026-11858)
vulnerability in csharp (CVE-2026-11858). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0071 |
|
Vulnerability in google (CVE-2026-0071)
vulnerability in google (CVE-2026-0071). Successful exploitation can lead to full system takeover.
|
| CVE-2026-0082 |
|
Vulnerability in google (CVE-2026-0082)
vulnerability in google (CVE-2026-0082). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11409 |
|
OS Command Injection in tp-link (CVE-2026-11409)
OS command injection in tp-link (CVE-2026-11409). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10837 |
|
Open Redirect in CVE-2026-10837 (CVE-2026-10837)
vulnerability in CVE-2026-10837 (CVE-2026-10837). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
|
| CVE-2026-10839 |
|
Open Redirect in CVE-2026-10839 (CVE-2026-10839)
vulnerability in CVE-2026-10839 (CVE-2026-10839). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
|
| CVE-2026-0092 |
|
Vulnerability in google (CVE-2026-0092)
vulnerability in google (CVE-2026-0092). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0068 |
|
Vulnerability in google (CVE-2026-0068)
vulnerability in google (CVE-2026-0068). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12115 |
|
Unsafe Deserialization in wordpress (CVE-2026-12115)
vulnerability in wordpress (CVE-2026-12115). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11857 |
|
Unsafe Deserialization in csharp (CVE-2026-11857)
vulnerability in csharp (CVE-2026-11857). Risk of unauthorized operations or information disclosure.
|