Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
GHSA-wg23-69c2-gjc8 Vulnerability in craftcms/cms (GHSA-wg23-69c2-gjc8)
vulnerability in craftcms/cms (GHSA-wg23-69c2-gjc8). Risk of unauthorized operations or information disclosure. Exploitable via `POST /actions/users/login-with-passkey`. Mitigation: upgrade to `5.10.5` or later.
CVE-2026-66838 SQL Injection in sqli (CVE-2026-66838)
SQL injection in sqli (CVE-2026-66838). Confidential information can be exposed externally.
CVE-2026-66494 Cross-Site Scripting (XSS) in CVE-2026-66494 (CVE-2026-66494)
cross-site scripting in CVE-2026-66494 (CVE-2026-66494). Risk of unauthorized operations or information disclosure.
CVE-2026-56794 Vulnerability in path-traversal (CVE-2026-56794)
vulnerability in path-traversal (CVE-2026-56794). Confidential information can be exposed externally.
CVE-2026-56793 Authentication Bypass in dell (CVE-2026-56793)
authentication bypass in dell (CVE-2026-56793). Confidential information can be exposed externally.
CVE-2026-48094 Cross-Site Scripting (XSS) in wordpress (CVE-2026-48094)
cross-site scripting in wordpress (CVE-2026-48094). Risk of unauthorized operations or information disclosure. Exploitable via ``href``.
CVE-2026-15816 OS Command Injection in CVE-2026-15816 (CVE-2026-15816)
OS command injection in CVE-2026-15816 (CVE-2026-15816). Successful exploitation can lead to full system takeover.
CVE-2026-71560 Out-of-Bounds Read in c (CVE-2026-71560)
vulnerability in c (CVE-2026-71560). Data can be tampered with by attackers.
CVE-2026-71559 Unsafe Deserialization in apache (CVE-2026-71559)
vulnerability in apache (CVE-2026-71559). Risk of unauthorized operations or information disclosure.
CVE-2026-71558 Unsafe Deserialization in c (CVE-2026-71558)
vulnerability in c (CVE-2026-71558). Successful exploitation can lead to full system takeover.
CVE-2026-54218 Vulnerability in CVE-2026-54218 (CVE-2026-54218)
vulnerability in CVE-2026-54218 (CVE-2026-54218). Risk of unauthorized operations or information disclosure.
CVE-2026-54217 Vulnerability in CVE-2026-54217 (CVE-2026-54217)
vulnerability in CVE-2026-54217 (CVE-2026-54217). Risk of unauthorized operations or information disclosure.
CVE-2026-54216 Cross-Site Scripting (XSS) in CVE-2026-54216 (CVE-2026-54216)
cross-site scripting in CVE-2026-54216 (CVE-2026-54216). Risk of unauthorized operations or information disclosure.
CVE-2026-54215 Open Redirect in CVE-2026-54215 (CVE-2026-54215)
vulnerability in CVE-2026-54215 (CVE-2026-54215). Risk of unauthorized operations or information disclosure.
CVE-2026-54214 Open Redirect in CVE-2026-54214 (CVE-2026-54214)
vulnerability in CVE-2026-54214 (CVE-2026-54214). Risk of unauthorized operations or information disclosure.
CVE-2026-54213 Vulnerability in dos (CVE-2026-54213)
vulnerability in dos (CVE-2026-54213). Risk of unauthorized operations or information disclosure.
CVE-2026-54212 Out-of-Bounds Write in dos (CVE-2026-54212)
out-of-bounds write in dos (CVE-2026-54212). Risk of unauthorized operations or information disclosure.
CVE-2026-54211 Out-of-Bounds Write in dos (CVE-2026-54211)
out-of-bounds write in dos (CVE-2026-54211). Risk of unauthorized operations or information disclosure.
CVE-2026-54210 Out-of-Bounds Write in dos (CVE-2026-54210)
out-of-bounds write in dos (CVE-2026-54210). Risk of unauthorized operations or information disclosure.
CVE-2026-54209 Out-of-Bounds Read in dos (CVE-2026-54209)
vulnerability in dos (CVE-2026-54209). Risk of unauthorized operations or information disclosure.
CVE-2026-54208 Vulnerability in CVE-2026-54208 (CVE-2026-54208)
vulnerability in CVE-2026-54208 (CVE-2026-54208). Risk of unauthorized operations or information disclosure.
CVE-2026-54207 Vulnerability in CVE-2026-54207 (CVE-2026-54207)
vulnerability in CVE-2026-54207 (CVE-2026-54207). Risk of unauthorized operations or information disclosure.
CVE-2026-54206 Vulnerability in CVE-2026-54206 (CVE-2026-54206)
vulnerability in CVE-2026-54206 (CVE-2026-54206). Risk of unauthorized operations or information disclosure.
CVE-2026-54205 Vulnerability in CVE-2026-54205 (CVE-2026-54205)
vulnerability in CVE-2026-54205 (CVE-2026-54205). Risk of unauthorized operations or information disclosure.
CVE-2026-54204 Vulnerability in CVE-2026-54204 (CVE-2026-54204)
vulnerability in CVE-2026-54204 (CVE-2026-54204). Risk of unauthorized operations or information disclosure.
CVE-2026-54203 Information Disclosure in CVE-2026-54203 (CVE-2026-54203)
vulnerability in CVE-2026-54203 (CVE-2026-54203). Risk of unauthorized operations or information disclosure.
CVE-2026-54202 Vulnerability in c (CVE-2026-54202)
vulnerability in c (CVE-2026-54202). Risk of unauthorized operations or information disclosure.
CVE-2026-54201 Vulnerability in CVE-2026-54201 (CVE-2026-54201)
vulnerability in CVE-2026-54201 (CVE-2026-54201). Risk of unauthorized operations or information disclosure.
CVE-2026-54200 Vulnerability in CVE-2026-54200 (CVE-2026-54200)
vulnerability in CVE-2026-54200 (CVE-2026-54200). Risk of unauthorized operations or information disclosure.
CVE-2026-54199 Vulnerability in CVE-2026-54199 (CVE-2026-54199)
vulnerability in CVE-2026-54199 (CVE-2026-54199). Risk of unauthorized operations or information disclosure.
CVE-2026-12071 Open Redirect in CVE-2026-12071 (CVE-2026-12071)
vulnerability in CVE-2026-12071 (CVE-2026-12071). Risk of unauthorized operations or information disclosure.
CVE-2026-12070 Vulnerability in CVE-2026-12070 (CVE-2026-12070)
vulnerability in CVE-2026-12070 (CVE-2026-12070). Risk of unauthorized operations or information disclosure.
CVE-2026-66493 Path Traversal in path-traversal (CVE-2026-66493)
path traversal in path-traversal (CVE-2026-66493). Risk of unauthorized operations or information disclosure.
CVE-2026-49007 Vulnerability in CVE-2026-49007 (CVE-2026-49007)
vulnerability in CVE-2026-49007 (CVE-2026-49007). Confidential information can be exposed externally.
CVE-2026-18938 Vulnerability in dos (CVE-2026-18938)
vulnerability in dos (CVE-2026-18938). Risk of unauthorized operations or information disclosure.
CVE-2026-9169 Vulnerability in CVE-2026-9169 (CVE-2026-9169)
vulnerability in CVE-2026-9169 (CVE-2026-9169). Successful exploitation can lead to full system takeover.
CVE-2026-49008 Vulnerability in CVE-2026-49008 (CVE-2026-49008)
vulnerability in CVE-2026-49008 (CVE-2026-49008). Data can be tampered with by attackers.
CVE-2026-66491 Path Traversal in CVE-2026-66491 (CVE-2026-66491)
path traversal in CVE-2026-66491 (CVE-2026-66491). Risk of unauthorized operations or information disclosure.
CVE-2026-66492 Path Traversal in path-traversal (CVE-2026-66492)
path traversal in path-traversal (CVE-2026-66492). Risk of unauthorized operations or information disclosure.
CVE-2026-15148 Vulnerability in wordpress (CVE-2026-15148)
vulnerability in wordpress (CVE-2026-15148). Risk of unauthorized operations or information disclosure.
CVE-2026-15211 Vulnerability in wordpress (CVE-2026-15211)
vulnerability in wordpress (CVE-2026-15211). Data can be tampered with by attackers.
CVE-2026-49006 Vulnerability in CVE-2026-49006 (CVE-2026-49006)
vulnerability in CVE-2026-49006 (CVE-2026-49006). Confidential information can be exposed externally.
CVE-2026-15239 Vulnerability in wordpress (CVE-2026-15239)
vulnerability in wordpress (CVE-2026-15239). Risk of unauthorized operations or information disclosure.
CVE-2026-19079 Vulnerability in CVE-2026-19079 (CVE-2026-19079)
vulnerability in CVE-2026-19079 (CVE-2026-19079). Data can be tampered with by attackers.
CVE-2026-16027 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-16027)
SSRF in ssrf (CVE-2026-16027). Risk of unauthorized operations or information disclosure.
CVE-2026-12261 Vulnerability in CVE-2026-12261 (CVE-2026-12261)
vulnerability in CVE-2026-12261 (CVE-2026-12261). Data can be tampered with by attackers. Exploitable via ``nltk.downloader``.
CVE-2026-16258 Unsafe Deserialization in wordpress (CVE-2026-16258)
vulnerability in wordpress (CVE-2026-16258). Successful exploitation can lead to full system takeover.
CVE-2026-14331 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14331)
cross-site scripting in wordpress (CVE-2026-14331). Risk of unauthorized operations or information disclosure.
CVE-2026-15359 Vulnerability in wordpress (CVE-2026-15359)
vulnerability in wordpress (CVE-2026-15359). Risk of unauthorized operations or information disclosure.
CVE-2026-14205 Authentication Bypass in wordpress (CVE-2026-14205)
authentication bypass in wordpress (CVE-2026-14205). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →