Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-5230 Vulnerability in CVE-2026-5230 (CVE-2026-5230)
vulnerability in CVE-2026-5230 (CVE-2026-5230). Confidential information can be exposed externally.
CVE-2026-5079 Vulnerability in multer (CVE-2026-5079)
vulnerability in multer (CVE-2026-5079). Risk of unauthorized operations or information disclosure. Exploitable via ``limits.fieldNestingDepth``. Mitigation: upgrade to `3.0.0-alpha.2` or later.
CVE-2026-52704 Code Injection in CVE-2026-52704 (CVE-2026-52704)
code injection in CVE-2026-52704 (CVE-2026-52704). Successful exploitation can lead to full system takeover.
CVE-2026-49111 Vulnerability in privilege-escalation (CVE-2026-49111)
vulnerability in privilege-escalation (CVE-2026-49111). Successful exploitation can lead to full system takeover.
CVE-2026-49064 Vulnerability in CVE-2026-49064 (CVE-2026-49064)
vulnerability in CVE-2026-49064 (CVE-2026-49064). Confidential information can be exposed externally.
CVE-2026-49062 Vulnerability in CVE-2026-49062 (CVE-2026-49062)
vulnerability in CVE-2026-49062 (CVE-2026-49062). Successful exploitation can lead to full system takeover.
CVE-2026-48969 Subscriber Broken Access Control in Really Simple SSL <= 9.5.9 versions.
Subscriber Broken Access Control in Really Simple SSL <= 9.5.9 versions.
CVE-2025-64215 Vulnerability in CVE-2025-64215 (CVE-2025-64215)
vulnerability in CVE-2025-64215 (CVE-2025-64215). Risk of unauthorized operations or information disclosure.
CVE-2019-25746 SQL Injection in wordpress (CVE-2019-25746)
SQL injection in wordpress (CVE-2019-25746). Confidential information can be exposed externally.
CVE-2018-25437 Vulnerability in wordpress (CVE-2018-25437)
vulnerability in wordpress (CVE-2018-25437). Confidential information can be exposed externally.
CVE-2018-25436 Unrestricted File Upload in wordpress (CVE-2018-25436)
vulnerability in wordpress (CVE-2018-25436). Successful exploitation can lead to full system takeover.
CVE-2016-20084 Cross-Site Scripting (XSS) in wordpress (CVE-2016-20084)
cross-site scripting in wordpress (CVE-2016-20084). Risk of unauthorized operations or information disclosure.
CVE-2016-20083 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2016-20083)
vulnerability in wordpress (CVE-2016-20083). Risk of unauthorized operations or information disclosure.
CVE-2016-20082 Vulnerability in wordpress (CVE-2016-20082)
vulnerability in wordpress (CVE-2016-20082). Confidential information can be exposed externally.
CVE-2016-20081 Path Traversal in wordpress (CVE-2016-20081)
path traversal in wordpress (CVE-2016-20081). Confidential information can be exposed externally.
CVE-2016-20080 Vulnerability in wordpress (CVE-2016-20080)
vulnerability in wordpress (CVE-2016-20080). Confidential information can be exposed externally.
CVE-2016-20079 Vulnerability in wordpress (CVE-2016-20079)
vulnerability in wordpress (CVE-2016-20079). Confidential information can be exposed externally.
CVE-2016-20078 Vulnerability in wordpress (CVE-2016-20078)
vulnerability in wordpress (CVE-2016-20078). Confidential information can be exposed externally.
CVE-2016-20077 Vulnerability in wordpress (CVE-2016-20077)
vulnerability in wordpress (CVE-2016-20077). Confidential information can be exposed externally.
CVE-2016-20076 Path Traversal in wordpress (CVE-2016-20076)
path traversal in wordpress (CVE-2016-20076). Confidential information can be exposed externally.
CVE-2016-20075 Authorization Flaw in wordpress (CVE-2016-20075)
vulnerability in wordpress (CVE-2016-20075). Successful exploitation can lead to full system takeover.
CVE-2016-20074 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2016-20074)
vulnerability in wordpress (CVE-2016-20074). Risk of unauthorized operations or information disclosure.
CVE-2016-20073 SQL Injection in wordpress (CVE-2016-20073)
SQL injection in wordpress (CVE-2016-20073). Confidential information can be exposed externally.
CVE-2016-20072 SQL Injection in wordpress (CVE-2016-20072)
SQL injection in wordpress (CVE-2016-20072). Confidential information can be exposed externally.
CVE-2016-20071 SQL Injection in wordpress (CVE-2016-20071)
SQL injection in wordpress (CVE-2016-20071). Confidential information can be exposed externally.
CVE-2016-20070 Cross-Site Scripting (XSS) in wordpress (CVE-2016-20070)
cross-site scripting in wordpress (CVE-2016-20070). Risk of unauthorized operations or information disclosure.
CVE-2016-20069 SQL Injection in wordpress (CVE-2016-20069)
SQL injection in wordpress (CVE-2016-20069). Confidential information can be exposed externally.
CVE-2016-20068 SQL Injection in wordpress (CVE-2016-20068)
SQL injection in wordpress (CVE-2016-20068). Confidential information can be exposed externally.
CVE-2016-20067 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2016-20067)
vulnerability in wordpress (CVE-2016-20067). Risk of unauthorized operations or information disclosure.
CVE-2016-20066 Cross-Site Scripting (XSS) in wordpress (CVE-2016-20066)
cross-site scripting in wordpress (CVE-2016-20066). Risk of unauthorized operations or information disclosure.
openSUSE-SU-2026:20985-1 Vulnerability in hostapd (openSUSE-SU-2026:20985-1)
vulnerability in hostapd (openSUSE-SU-2026:20985-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.11-bp160.2.1` or later.
openSUSE-SU-2026:20986-1 Vulnerability in perl-Crypt-SaltedHash (openSUSE-SU-2026:20986-1)
vulnerability in perl-Crypt-SaltedHash (openSUSE-SU-2026:20986-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.110.0-bp160.1.1` or later.
DEBIAN-CVE-2026-49452 DEBIAN-CVE-2026-49452
openSUSE-SU-2026:20965-1 Vulnerability in dtb-aarch64 (openSUSE-SU-2026:20965-1)
vulnerability in dtb-aarch64 (openSUSE-SU-2026:20965-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.0-160000.35.1` or later.
SUSE-SU-2026:2394-1 Vulnerability in libcaca (SUSE-SU-2026:2394-1)
vulnerability in libcaca (SUSE-SU-2026:2394-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.99.beta18-14.15.1` or later.
SUSE-SU-2026:22127-1 Vulnerability in kernel-64kb (SUSE-SU-2026:22127-1)
vulnerability in kernel-64kb (SUSE-SU-2026:22127-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.0-160000.35.1` or later.
SUSE-SU-2026:22112-1 Vulnerability in kernel-64kb (SUSE-SU-2026:22112-1)
vulnerability in kernel-64kb (SUSE-SU-2026:22112-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.0-160000.35.1` or later.
USN-8428-1 Vulnerability in tmux (USN-8428-1)
vulnerability in tmux (USN-8428-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6a-2ubuntu0.1` or later.
USN-8398-3 Vulnerability in nginx (USN-8398-3)
vulnerability in nginx (USN-8398-3). Risk of unauthorized operations or information disclosure. Exploitable via `Cookie header`. Mitigation: upgrade to `1.18.0-6ubuntu14.15` or later.
CVE-2026-5482 Unrestricted File Upload in CVE-2026-5482 (CVE-2026-5482)
vulnerability in CVE-2026-5482 (CVE-2026-5482). Risk of unauthorized operations or information disclosure.
CVE-2026-49757 Vulnerability in ash_authentication (CVE-2026-49757)
vulnerability in ash_authentication (CVE-2026-49757). Risk of unauthorized operations or information disclosure. Exploitable via ``iss``. Mitigation: upgrade to `4.14.0, 5.0.0-rc.10` or later.
CVE-2026-34030 Vulnerability in path-traversal (CVE-2026-34030)
vulnerability in path-traversal (CVE-2026-34030). Risk of unauthorized operations or information disclosure.
CVE-2026-34029 Vulnerability in CVE-2026-34029 (CVE-2026-34029)
vulnerability in CVE-2026-34029 (CVE-2026-34029). Risk of unauthorized operations or information disclosure.
CVE-2026-34028 Vulnerability in CVE-2026-34028 (CVE-2026-34028)
vulnerability in CVE-2026-34028 (CVE-2026-34028). Risk of unauthorized operations or information disclosure.
CVE-2026-34027 Unrestricted File Upload in CVE-2026-34027 (CVE-2026-34027)
vulnerability in CVE-2026-34027 (CVE-2026-34027). Risk of unauthorized operations or information disclosure.
CVE-2026-34026 Vulnerability in path-traversal (CVE-2026-34026)
vulnerability in path-traversal (CVE-2026-34026). Risk of unauthorized operations or information disclosure.
CVE-2026-34025 Vulnerability in CVE-2026-34025 (CVE-2026-34025)
vulnerability in CVE-2026-34025 (CVE-2026-34025). Risk of unauthorized operations or information disclosure.
CVE-2026-34024 Vulnerability in CVE-2026-34024 (CVE-2026-34024)
vulnerability in CVE-2026-34024 (CVE-2026-34024). Risk of unauthorized operations or information disclosure.
CVE-2026-34023 Authorization Flaw in CVE-2026-34023 (CVE-2026-34023)
vulnerability in CVE-2026-34023 (CVE-2026-34023). Risk of unauthorized operations or information disclosure.
CVE-2026-34022 Vulnerability in CVE-2026-34022 (CVE-2026-34022)
vulnerability in CVE-2026-34022 (CVE-2026-34022). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →