Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-22334 Subscriber Arbitrary File Download in Woocommerce Book Price <= 1.3 versions.
Subscriber Arbitrary File Download in Woocommerce Book Price <= 1.3 versions.
CVE-2026-12466 Vulnerability in google (CVE-2026-12466)
vulnerability in google (CVE-2026-12466). Successful exploitation can lead to full system takeover.
CVE-2026-12468 Vulnerability in google (CVE-2026-12468)
vulnerability in google (CVE-2026-12468). Successful exploitation can lead to full system takeover.
CVE-2026-22325 Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions.
Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions.
CVE-2026-12467 Use-After-Free in Google chrome (CVE-2026-12467)
vulnerability in Google chrome (CVE-2026-12467). Successful exploitation can lead to full system takeover.
CVE-2026-22339 Unauthenticated Cross Site Scripting (XSS) in WPJobster <= 6.3.5 versions.
Unauthenticated Cross Site Scripting (XSS) in WPJobster <= 6.3.5 versions.
CVE-2026-22332 Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions.
Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions.
CVE-2026-22328 Unauthenticated Cross Site Scripting (XSS) in Auto Repair <= 22.6 versions.
Unauthenticated Cross Site Scripting (XSS) in Auto Repair <= 22.6 versions.
CVE-2026-12491 Vulnerability in vllm (CVE-2026-12491)
vulnerability in vllm (CVE-2026-12491). Risk of unauthorized operations or information disclosure. Exploitable via ``ImageOps.exif_transpose``. Mitigation: upgrade to `0.24.0` or later.
CVE-2026-12457 Vulnerability in google (CVE-2026-12457)
vulnerability in google (CVE-2026-12457). Risk of unauthorized operations or information disclosure.
CVE-2026-12465 Vulnerability in google (CVE-2026-12465)
vulnerability in google (CVE-2026-12465). Successful exploitation can lead to full system takeover.
CVE-2026-12451 Use-After-Free in google (CVE-2026-12451)
vulnerability in google (CVE-2026-12451). Successful exploitation can lead to full system takeover.
CVE-2026-12452 Use-After-Free in google (CVE-2026-12452)
vulnerability in google (CVE-2026-12452). Successful exploitation can lead to full system takeover.
CVE-2026-12463 Cross-Site Scripting (XSS) in google (CVE-2026-12463)
cross-site scripting in google (CVE-2026-12463). Risk of unauthorized operations or information disclosure.
CVE-2026-12464 Use-After-Free in google (CVE-2026-12464)
vulnerability in google (CVE-2026-12464). Successful exploitation can lead to full system takeover.
CVE-2026-12458 Vulnerability in google (CVE-2026-12458)
vulnerability in google (CVE-2026-12458). Risk of unauthorized operations or information disclosure.
CVE-2026-12447 Vulnerability in google (CVE-2026-12447)
vulnerability in google (CVE-2026-12447). Successful exploitation can lead to full system takeover.
CVE-2026-12460 Vulnerability in google (CVE-2026-12460)
vulnerability in google (CVE-2026-12460). Risk of unauthorized operations or information disclosure.
CVE-2026-12461 Out-of-Bounds Read in google (CVE-2026-12461)
vulnerability in google (CVE-2026-12461). Confidential information can be exposed externally.
CVE-2026-12449 Use-After-Free in privilege-escalation (CVE-2026-12449)
vulnerability in privilege-escalation (CVE-2026-12449). Successful exploitation can lead to full system takeover.
CVE-2026-12462 Use-After-Free in google (CVE-2026-12462)
vulnerability in google (CVE-2026-12462). Successful exploitation can lead to full system takeover.
CVE-2026-12448 Privilege Escalation in privilege-escalation (CVE-2026-12448)
vulnerability in privilege-escalation (CVE-2026-12448). Successful exploitation can lead to full system takeover.
CVE-2026-12456 Vulnerability in google (CVE-2026-12456)
vulnerability in google (CVE-2026-12456). Risk of unauthorized operations or information disclosure.
CVE-2026-12453 Vulnerability in google (CVE-2026-12453)
vulnerability in google (CVE-2026-12453). Risk of unauthorized operations or information disclosure.
CVE-2026-12446 Authorization Flaw in google (CVE-2026-12446)
vulnerability in google (CVE-2026-12446). Risk of unauthorized operations or information disclosure.
CVE-2026-12454 Vulnerability in google (CVE-2026-12454)
vulnerability in google (CVE-2026-12454). Successful exploitation can lead to full system takeover.
CVE-2026-12444 Out-of-Bounds Read in google (CVE-2026-12444)
vulnerability in google (CVE-2026-12444). Confidential information can be exposed externally.
CVE-2026-12450 Privilege Escalation in google (CVE-2026-12450)
vulnerability in google (CVE-2026-12450). Confidential information can be exposed externally.
CVE-2026-12445 Use-After-Free in google (CVE-2026-12445)
vulnerability in google (CVE-2026-12445). Successful exploitation can lead to full system takeover.
CVE-2026-12443 Use-After-Free in google (CVE-2026-12443)
vulnerability in google (CVE-2026-12443). Successful exploitation can lead to full system takeover.
CVE-2026-12459 Cross-Site Scripting (XSS) in google (CVE-2026-12459)
cross-site scripting in google (CVE-2026-12459). Risk of unauthorized operations or information disclosure.
CVE-2026-12455 Use-After-Free in google (CVE-2026-12455)
vulnerability in google (CVE-2026-12455). Successful exploitation can lead to full system takeover.
CVE-2026-12439 Use-After-Free in google (CVE-2026-12439)
vulnerability in google (CVE-2026-12439). Successful exploitation can lead to full system takeover.
CVE-2026-12360 SQL Injection in wordpress (CVE-2026-12360)
SQL injection in wordpress (CVE-2026-12360). Confidential information can be exposed externally.
CVE-2026-12165 Privilege Escalation in wordpress (CVE-2026-12165)
vulnerability in wordpress (CVE-2026-12165). Successful exploitation can lead to full system takeover. Exploitable via ``RegistryUserRole``.
CVE-2026-12442 Use-After-Free in google (CVE-2026-12442)
vulnerability in google (CVE-2026-12442). Successful exploitation can lead to full system takeover.
CVE-2026-12441 Use-After-Free in google (CVE-2026-12441)
vulnerability in google (CVE-2026-12441). Successful exploitation can lead to full system takeover.
CVE-2026-12256 Contributor PHP Object Injection in Avada <= 3.15.3 versions.
Contributor PHP Object Injection in Avada <= 3.15.3 versions.
CVE-2026-12440 Use-After-Free in google (CVE-2026-12440)
vulnerability in google (CVE-2026-12440). Successful exploitation can lead to full system takeover.
CVE-2026-11975 Cross-Site Scripting (XSS) in CVE-2026-11975 (CVE-2026-11975)
cross-site scripting in CVE-2026-11975 (CVE-2026-11975). Risk of unauthorized operations or information disclosure.
CVE-2026-11858 Vulnerability in csharp (CVE-2026-11858)
vulnerability in csharp (CVE-2026-11858). Risk of unauthorized operations or information disclosure.
CVE-2026-0071 Vulnerability in google (CVE-2026-0071)
vulnerability in google (CVE-2026-0071). Successful exploitation can lead to full system takeover.
CVE-2026-0082 Vulnerability in google (CVE-2026-0082)
vulnerability in google (CVE-2026-0082). Successful exploitation can lead to full system takeover.
CVE-2026-11409 OS Command Injection in tp-link (CVE-2026-11409)
OS command injection in tp-link (CVE-2026-11409). Successful exploitation can lead to full system takeover.
CVE-2026-10837 Open Redirect in CVE-2026-10837 (CVE-2026-10837)
vulnerability in CVE-2026-10837 (CVE-2026-10837). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
CVE-2026-10839 Open Redirect in CVE-2026-10839 (CVE-2026-10839)
vulnerability in CVE-2026-10839 (CVE-2026-10839). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
CVE-2026-0092 Vulnerability in google (CVE-2026-0092)
vulnerability in google (CVE-2026-0092). Risk of unauthorized operations or information disclosure.
CVE-2026-0068 Vulnerability in google (CVE-2026-0068)
vulnerability in google (CVE-2026-0068). Successful exploitation can lead to full system takeover.
CVE-2026-12115 Unsafe Deserialization in wordpress (CVE-2026-12115)
vulnerability in wordpress (CVE-2026-12115). Successful exploitation can lead to full system takeover.
CVE-2026-11857 Unsafe Deserialization in csharp (CVE-2026-11857)
vulnerability in csharp (CVE-2026-11857). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →