Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-16519 |
|
Vulnerability in CVE-2026-16519 (CVE-2026-16519)
vulnerability in CVE-2026-16519 (CVE-2026-16519). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14603 |
|
Vulnerability in wordpress (CVE-2026-14603)
vulnerability in wordpress (CVE-2026-14603). Confidential information can be exposed externally.
|
| CVE-2026-14172 |
|
Vulnerability in CVE-2026-14172 (CVE-2026-14172)
vulnerability in CVE-2026-14172 (CVE-2026-14172). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12981 |
|
Privilege Escalation in wordpress (CVE-2026-12981)
vulnerability in wordpress (CVE-2026-12981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12497 |
|
Privilege Escalation in wordpress (CVE-2026-12497)
vulnerability in wordpress (CVE-2026-12497). Confidential information can be exposed externally.
|
| CVE-2026-16870 |
|
Vulnerability in CVE-2026-16870 (CVE-2026-16870)
vulnerability in CVE-2026-16870 (CVE-2026-16870). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66138 |
|
OS Command Injection in CVE-2026-66138 (CVE-2026-66138)
OS command injection in CVE-2026-66138 (CVE-2026-66138). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66141 |
|
Vulnerability in privilege-escalation (CVE-2026-66141)
vulnerability in privilege-escalation (CVE-2026-66141). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66140 |
|
Vulnerability in path-traversal (CVE-2026-66140)
vulnerability in path-traversal (CVE-2026-66140). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12736 |
|
Privilege Escalation in wordpress (CVE-2026-12736)
vulnerability in wordpress (CVE-2026-12736). Successful exploitation can lead to full system takeover. Exploitable via `POST /wp-json/wpify-woo/v1/option`.
|
| CVE-2026-56167 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-56167)
SSRF in ssrf (CVE-2026-56167). Confidential information can be exposed externally.
|
| CVE-2026-35425 |
|
Vulnerability in microsoft (CVE-2026-35425)
vulnerability in microsoft (CVE-2026-35425). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28698 |
|
Vulnerability in CVE-2026-28698 (CVE-2026-28698)
vulnerability in CVE-2026-28698 (CVE-2026-28698). Confidential information can be exposed externally.
|
| CVE-2026-40430 |
|
Vulnerability in CVE-2026-40430 (CVE-2026-40430)
vulnerability in CVE-2026-40430 (CVE-2026-40430). Confidential information can be exposed externally.
|
| CVE-2026-16807 |
|
Out-of-Bounds Write in Google chrome (CVE-2026-16807)
out-of-bounds write in Google chrome (CVE-2026-16807). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65694 |
|
Path Traversal in path-traversal (CVE-2026-65694)
path traversal in path-traversal (CVE-2026-65694). Confidential information can be exposed externally.
|
| CVE-2026-65604 |
|
Vulnerability in CVE-2026-65604 (CVE-2026-65604)
vulnerability in CVE-2026-65604 (CVE-2026-65604). Confidential information can be exposed externally.
|
| CVE-2026-63313 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-63313)
SSRF in ssrf (CVE-2026-63313). Confidential information can be exposed externally.
|
| CVE-2026-16806 |
|
Use-After-Free in google (CVE-2026-16806)
vulnerability in google (CVE-2026-16806). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16805 |
|
Use-After-Free in google (CVE-2026-16805)
vulnerability in google (CVE-2026-16805). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16804 |
|
Use-After-Free in google (CVE-2026-16804)
vulnerability in google (CVE-2026-16804). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16765 |
|
Vulnerability in sqli (CVE-2026-16765)
vulnerability in sqli (CVE-2026-16765). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-58355 |
|
Vulnerability in react (CVE-2024-58355)
vulnerability in react (CVE-2024-58355). Confidential information can be exposed externally. Mitigation: upgrade to `4.7.16` or later.
|
| CVE-2024-58353 |
|
Vulnerability in react (CVE-2024-58353)
vulnerability in react (CVE-2024-58353). Confidential information can be exposed externally.
|
| CVE-2026-50039 |
|
Vulnerability in CVE-2026-50039 (CVE-2026-50039)
vulnerability in CVE-2026-50039 (CVE-2026-50039). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50032 |
|
Vulnerability in CVE-2026-50032 (CVE-2026-50032)
vulnerability in CVE-2026-50032 (CVE-2026-50032). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49035 |
|
Vulnerability in dos (CVE-2026-49035)
vulnerability in dos (CVE-2026-49035). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15967 |
|
Vulnerability in progress (CVE-2026-15967)
vulnerability in progress (CVE-2026-15967). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15966 |
|
Vulnerability in progress (CVE-2026-15966)
vulnerability in progress (CVE-2026-15966). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10697 |
|
Authentication Bypass in progress (CVE-2026-10697)
authentication bypass in progress (CVE-2026-10697). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15968 |
|
Cross-Site Scripting (XSS) in progress (CVE-2026-15968)
cross-site scripting in progress (CVE-2026-15968). Successful exploitation can lead to full system takeover.
|
| CVE-2026-38764 |
|
Privilege Escalation in CVE-2026-38764 (CVE-2026-38764)
vulnerability in CVE-2026-38764 (CVE-2026-38764). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16002 |
|
Out-of-Bounds Read in dos (CVE-2026-16002)
vulnerability in dos (CVE-2026-16002). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16796 |
|
Vulnerability in Amazon bedrock-agentcore (CVE-2026-16796)
vulnerability in Amazon bedrock-agentcore (CVE-2026-16796). Confidential information can be exposed externally. Mitigation: upgrade to `1.18.1` or later.
|
| CVE-2026-65706 |
|
Vulnerability in ffmpeg (CVE-2026-65706)
vulnerability in ffmpeg (CVE-2026-65706). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65705 |
|
Vulnerability in ffmpeg (CVE-2026-65705)
vulnerability in ffmpeg (CVE-2026-65705). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65704 |
|
Vulnerability in ffmpeg (CVE-2026-65704)
vulnerability in ffmpeg (CVE-2026-65704). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65703 |
|
Out-of-Bounds Write in ffmpeg (CVE-2026-65703)
out-of-bounds write in ffmpeg (CVE-2026-65703). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60122 |
|
Code Injection in CVE-2026-60122 (CVE-2026-60122)
code injection in CVE-2026-60122 (CVE-2026-60122). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25800 |
|
Vulnerability in CVE-2026-25800 (CVE-2026-25800)
vulnerability in CVE-2026-25800 (CVE-2026-25800). Risk of unauthorized operations or information disclosure. Exploitable via ``Assembler``.
|
| CVE-2026-15212 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15212)
vulnerability in wordpress (CVE-2026-15212). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47219 |
|
Vulnerability in find-my-way (CVE-2026-47219)
vulnerability in find-my-way (CVE-2026-47219). Risk of unauthorized operations or information disclosure. Exploitable via ``req.method``. Mitigation: upgrade to `9.7.0` or later.
|
| CVE-2026-16756 |
|
Vulnerability in Amazon aws-smithy-http-server (CVE-2026-16756)
vulnerability in Amazon aws-smithy-http-server (CVE-2026-16756). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.66.5` or later.
|
| CVE-2026-63765 |
|
Vulnerability in CVE-2026-63765 (CVE-2026-63765)
vulnerability in CVE-2026-63765 (CVE-2026-63765). Data can be tampered with by attackers.
|
| CVE-2026-65919 |
|
Path Traversal in CVE-2026-65919 (CVE-2026-65919)
path traversal in CVE-2026-65919 (CVE-2026-65919). Confidential information can be exposed externally.
|
| CVE-2026-65918 |
|
Out-of-Bounds Read in dos (CVE-2026-65918)
vulnerability in dos (CVE-2026-65918). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65702 |
|
Path Traversal in path-traversal (CVE-2026-65702)
path traversal in path-traversal (CVE-2026-65702). Data can be tampered with by attackers.
|
| CVE-2026-44909 |
|
Vulnerability in dos (CVE-2026-44909)
vulnerability in dos (CVE-2026-44909). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16584 |
|
Vulnerability in Amazon awslabs.aws-api-mcp-server (CVE-2026-16584)
vulnerability in Amazon awslabs.aws-api-mcp-server (CVE-2026-16584). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.3.47` or later.
|
| CVE-2026-65917 |
|
Vulnerability in CVE-2026-65917 (CVE-2026-65917)
vulnerability in CVE-2026-65917 (CVE-2026-65917). Successful exploitation can lead to full system takeover.
|