Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-51252 |
|
Vulnerability in CVE-2026-51252 (CVE-2026-51252)
vulnerability in CVE-2026-51252 (CVE-2026-51252). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62424 |
|
Vulnerability in CVE-2026-62424 (CVE-2026-62424)
vulnerability in CVE-2026-62424 (CVE-2026-62424). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62435 |
|
Vulnerability in CVE-2026-62435 (CVE-2026-62435)
vulnerability in CVE-2026-62435 (CVE-2026-62435). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59878 |
|
Vulnerability in apache (CVE-2026-59878)
vulnerability in apache (CVE-2026-59878). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62426 |
|
Vulnerability in c (CVE-2026-62426)
vulnerability in c (CVE-2026-62426). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62428 |
|
Vulnerability in CVE-2026-62428 (CVE-2026-62428)
vulnerability in CVE-2026-62428 (CVE-2026-62428). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62431 |
|
Vulnerability in CVE-2026-62431 (CVE-2026-62431)
vulnerability in CVE-2026-62431 (CVE-2026-62431). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62429 |
|
Vulnerability in CVE-2026-62429 (CVE-2026-62429)
vulnerability in CVE-2026-62429 (CVE-2026-62429). Confidential information can be exposed externally.
|
| CVE-2026-62433 |
|
Vulnerability in CVE-2026-62433 (CVE-2026-62433)
vulnerability in CVE-2026-62433 (CVE-2026-62433). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62425 |
|
Vulnerability in CVE-2026-62425 (CVE-2026-62425)
vulnerability in CVE-2026-62425 (CVE-2026-62425). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62423 |
|
Vulnerability in CVE-2026-62423 (CVE-2026-62423)
vulnerability in CVE-2026-62423 (CVE-2026-62423). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42493 |
|
Vulnerability in CVE-2026-42493 (CVE-2026-42493)
vulnerability in CVE-2026-42493 (CVE-2026-42493). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62432 |
|
Vulnerability in CVE-2026-62432 (CVE-2026-62432)
vulnerability in CVE-2026-62432 (CVE-2026-62432). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42495 |
|
Vulnerability in CVE-2026-42495 (CVE-2026-42495)
vulnerability in CVE-2026-42495 (CVE-2026-42495). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62427 |
|
Vulnerability in c (CVE-2026-62427)
vulnerability in c (CVE-2026-62427). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41874 |
|
Vulnerability in privilege-escalation (CVE-2026-41874)
vulnerability in privilege-escalation (CVE-2026-41874). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42494 |
|
Out-of-Bounds Read in CVE-2026-42494 (CVE-2026-42494)
vulnerability in CVE-2026-42494 (CVE-2026-42494). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42492 |
|
Vulnerability in CVE-2026-42492 (CVE-2026-42492)
vulnerability in CVE-2026-42492 (CVE-2026-42492). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61487 |
|
Vulnerability in apache (CVE-2026-61487)
vulnerability in apache (CVE-2026-61487). Data can be tampered with by attackers.
|
| CVE-2026-7187 |
|
Vulnerability in CVE-2026-7187 (CVE-2026-7187)
vulnerability in CVE-2026-7187 (CVE-2026-7187). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67173 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-67173 (CVE-2026-67173)
SSRF in CVE-2026-67173 (CVE-2026-67173). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66919 |
|
Cross-Site Scripting (XSS) in CVE-2026-66919 (CVE-2026-66919)
cross-site scripting in CVE-2026-66919 (CVE-2026-66919). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66920 |
|
Vulnerability in dos (CVE-2026-66920)
vulnerability in dos (CVE-2026-66920). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65882 |
|
Cross-Site Scripting (XSS) in CVE-2026-65882 (CVE-2026-65882)
cross-site scripting in CVE-2026-65882 (CVE-2026-65882). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66918 |
|
Cross-Site Scripting (XSS) in CVE-2026-66918 (CVE-2026-66918)
cross-site scripting in CVE-2026-66918 (CVE-2026-66918). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65881 |
|
Information Disclosure in CVE-2026-65881 (CVE-2026-65881)
vulnerability in CVE-2026-65881 (CVE-2026-65881). Confidential information can be exposed externally.
|
| CVE-2026-49332 |
|
Vulnerability in CVE-2026-49332 (CVE-2026-49332)
vulnerability in CVE-2026-49332 (CVE-2026-49332). Confidential information can be exposed externally.
|
| CVE-2026-18047 |
|
Vulnerability in tomcat (CVE-2026-18047)
vulnerability in tomcat (CVE-2026-18047). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18038 |
|
Information Disclosure in CVE-2026-18038 (CVE-2026-18038)
vulnerability in CVE-2026-18038 (CVE-2026-18038). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15393 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15393)
cross-site scripting in wordpress (CVE-2026-15393). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15016 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15016)
cross-site scripting in wordpress (CVE-2026-15016). Risk of unauthorized operations or information disclosure.
|
| GHSA-vg6v-j97m-h5xq |
|
SSRF (Server-Side Request Forgery) in @novu/application-generic (GHSA-vg6v-j97m-h5xq)
SSRF in @novu/application-generic (GHSA-vg6v-j97m-h5xq). Risk of unauthorized operations or information disclosure. Exploitable via `POST /workflow-http-step`. Mitigation: upgrade to `3.17.0` or later.
|
| CVE-2026-61609 |
|
Vulnerability in pterodactyl/panel (CVE-2026-61609)
vulnerability in pterodactyl/panel (CVE-2026-61609). Risk of unauthorized operations or information disclosure. Exploitable via `POST /auth/login`. Mitigation: upgrade to `1.13.0` or later.
|
| CVE-2026-54545 |
|
Path Traversal in @wakaru/cli (CVE-2026-54545)
path traversal in @wakaru/cli (CVE-2026-54545). Data can be tampered with by attackers. Mitigation: upgrade to `1.4.0` or later.
|
| CVE-2026-47427 |
|
Vulnerability in github.com/github/github-mcp-server (CVE-2026-47427)
vulnerability in github.com/github/github-mcp-server (CVE-2026-47427). Risk of unauthorized operations or information disclosure. Exploitable via ``CompletionsHandler``. Mitigation: upgrade to `1.1.0` or later.
|
| CVE-2026-45293 |
|
Vulnerability in wp-coding-standards/wpcs (CVE-2026-45293)
vulnerability in wp-coding-standards/wpcs (CVE-2026-45293). Successful exploitation can lead to full system takeover. Exploitable via ``WordPress.WP.EnqueuedResourceParameters``. Mitigation: upgrade to `3.4.1` or later.
|
| CVE-2026-43910 |
|
Vulnerability in io.appium:java-client (CVE-2026-43910)
vulnerability in io.appium:java-client (CVE-2026-43910). Confidential information can be exposed externally. Exploitable via `POST /wd/hub/session`. Mitigation: upgrade to `10.1.1` or later.
|
| GHSA-hp74-gm6m-2qm5 |
|
Authentication Bypass in github.com/pocket-id/pocket-id/backend (GHSA-hp74-gm6m-2qm5)
authentication bypass in github.com/pocket-id/pocket-id/backend (GHSA-hp74-gm6m-2qm5). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/webauthn/reauthenticate`. Mitigation: upgrade to `0.0.0-20260419162744-978ac87deffe` or later.
|
| CVE-2026-66913 |
|
Vulnerability in CVE-2026-66913 (CVE-2026-66913)
vulnerability in CVE-2026-66913 (CVE-2026-66913). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15025 |
|
Vulnerability in wordpress (CVE-2026-15025)
vulnerability in wordpress (CVE-2026-15025). Confidential information can be exposed externally.
|
| CVE-2026-21047 |
|
Out-of-Bounds Write in CVE-2026-21047 (CVE-2026-21047)
out-of-bounds write in CVE-2026-21047 (CVE-2026-21047). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16773 |
|
Information Disclosure in wordpress (CVE-2026-16773)
vulnerability in wordpress (CVE-2026-16773). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13440 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13440)
cross-site scripting in wordpress (CVE-2026-13440). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15444 |
|
SQL Injection in wordpress (CVE-2026-15444)
SQL injection in wordpress (CVE-2026-15444). Confidential information can be exposed externally.
|
| CVE-2026-13110 |
|
Vulnerability in wordpress (CVE-2026-13110)
vulnerability in wordpress (CVE-2026-13110). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4648 |
|
Vulnerability in CVE-2026-4648 (CVE-2026-4648)
vulnerability in CVE-2026-4648 (CVE-2026-4648). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16774 |
|
Vulnerability in wordpress (CVE-2026-16774)
vulnerability in wordpress (CVE-2026-16774). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15411 |
|
Vulnerability in wordpress (CVE-2026-15411)
vulnerability in wordpress (CVE-2026-15411). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65880 |
|
Code Injection in CVE-2026-65880 (CVE-2026-65880)
code injection in CVE-2026-65880 (CVE-2026-65880). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63303 |
|
Vulnerability in path-traversal (CVE-2026-63303)
vulnerability in path-traversal (CVE-2026-63303). Risk of unauthorized operations or information disclosure.
|