Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-14490 Path Traversal in wordpress (CVE-2026-14490)
path traversal in wordpress (CVE-2026-14490). Confidential information can be exposed externally. Exploitable via ``demi_restore_step``.
CVE-2026-12124 Vulnerability in c (CVE-2026-12124)
vulnerability in c (CVE-2026-12124). Risk of unauthorized operations or information disclosure. Exploitable via ``pdfdraft_embed_pdf``.
CVE-2026-17528 Cross-Site Scripting (XSS) in CVE-2026-17528 (CVE-2026-17528)
cross-site scripting in CVE-2026-17528 (CVE-2026-17528). Risk of unauthorized operations or information disclosure.
CVE-2026-17524 Path Traversal in path-traversal (CVE-2026-17524)
path traversal in path-traversal (CVE-2026-17524). Confidential information can be exposed externally.
CVE-2026-66473 Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.
Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.
CVE-2026-65448 Cross-Site Scripting (XSS) in CVE-2026-65448 (CVE-2026-65448)
cross-site scripting in CVE-2026-65448 (CVE-2026-65448). Risk of unauthorized operations or information disclosure.
CVE-2026-65447 Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.
CVE-2026-65446 Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.
Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.
CVE-2026-65445 Unauthenticated Broken Access Control in Ad Invalid Click Protector (AICP) <= 1.3.0 versions.
Unauthenticated Broken Access Control in Ad Invalid Click Protector (AICP) <= 1.3.0 versions.
CVE-2026-65443 Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.
Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.
CVE-2026-65442 Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.
Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.
CVE-2026-65441 Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.
CVE-2026-65440 Unauthenticated Cross Site Scripting (XSS) in GetGenie <= 4.4.3 versions.
Unauthenticated Cross Site Scripting (XSS) in GetGenie <= 4.4.3 versions.
CVE-2026-65439 Unauthenticated Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <=3.5.45 versions.
Unauthenticated Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <=3.5.45 versions.
CVE-2026-65438 Cross-Site Scripting (XSS) in CVE-2026-65438 (CVE-2026-65438)
cross-site scripting in CVE-2026-65438 (CVE-2026-65438). Risk of unauthorized operations or information disclosure.
CVE-2026-65437 Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <=...
Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <=...
CVE-2026-61957 Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions.
Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions.
CVE-2026-61953 Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.
Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.
CVE-2026-51565 Cross-Site Scripting (XSS) in CVE-2026-51565 (CVE-2026-51565)
cross-site scripting in CVE-2026-51565 (CVE-2026-51565). Risk of unauthorized operations or information disclosure.
CVE-2025-63913 Vulnerability in dos (CVE-2025-63913)
vulnerability in dos (CVE-2025-63913). Risk of unauthorized operations or information disclosure.
CVE-2026-59240 Vulnerability in CVE-2026-59240 (CVE-2026-59240)
vulnerability in CVE-2026-59240 (CVE-2026-59240). Risk of unauthorized operations or information disclosure. Exploitable via `GET /notification/delete/{id}`.
CVE-2026-51564 Open Redirect in CVE-2026-51564 (CVE-2026-51564)
vulnerability in CVE-2026-51564 (CVE-2026-51564). Risk of unauthorized operations or information disclosure.
CVE-2026-51078 Information Disclosure in CVE-2026-51078 (CVE-2026-51078)
vulnerability in CVE-2026-51078 (CVE-2026-51078). Confidential information can be exposed externally.
CVE-2026-51077 SQL Injection in sqli (CVE-2026-51077)
SQL injection in sqli (CVE-2026-51077). Confidential information can be exposed externally.
CVE-2021-32088 Vulnerability in quest (CVE-2021-32088)
vulnerability in quest (CVE-2021-32088). Successful exploitation can lead to full system takeover.
CVE-2021-32087 Vulnerability in quest (CVE-2021-32087)
vulnerability in quest (CVE-2021-32087). Successful exploitation can lead to full system takeover.
CVE-2021-32086 Vulnerability in quest (CVE-2021-32086)
vulnerability in quest (CVE-2021-32086). Successful exploitation can lead to full system takeover.
CVE-2021-32085 Vulnerability in quest (CVE-2021-32085)
vulnerability in quest (CVE-2021-32085). Successful exploitation can lead to full system takeover.
CVE-2021-32084 Vulnerability in quest (CVE-2021-32084)
vulnerability in quest (CVE-2021-32084). Successful exploitation can lead to full system takeover.
CVE-2026-66825 Cross-Site Scripting (XSS) in CVE-2026-66825 (CVE-2026-66825)
cross-site scripting in CVE-2026-66825 (CVE-2026-66825). Risk of unauthorized operations or information disclosure.
CVE-2026-64783 Use-After-Free in apple (CVE-2026-64783)
vulnerability in apple (CVE-2026-64783). Successful exploitation can lead to full system takeover.
CVE-2026-64776 Out-of-Bounds Read in apple (CVE-2026-64776)
vulnerability in apple (CVE-2026-64776). Confidential information can be exposed externally.
CVE-2026-64774 Vulnerability in apple (CVE-2026-64774)
vulnerability in apple (CVE-2026-64774). Successful exploitation can lead to full system takeover.
CVE-2026-64764 Out-of-Bounds Write in apple (CVE-2026-64764)
out-of-bounds write in apple (CVE-2026-64764). Successful exploitation can lead to full system takeover.
CVE-2026-64767 Vulnerability in apple (CVE-2026-64767)
vulnerability in apple (CVE-2026-64767). Successful exploitation can lead to full system takeover.
CVE-2026-64758 Buffer Overflow in apple (CVE-2026-64758)
vulnerability in apple (CVE-2026-64758). Successful exploitation can lead to full system takeover.
CVE-2026-64746 Vulnerability in apple (CVE-2026-64746)
vulnerability in apple (CVE-2026-64746). Successful exploitation can lead to full system takeover.
CVE-2026-64749 Buffer Overflow in apple (CVE-2026-64749)
vulnerability in apple (CVE-2026-64749). Successful exploitation can lead to full system takeover.
CVE-2026-64768 Out-of-Bounds Read in apple (CVE-2026-64768)
vulnerability in apple (CVE-2026-64768). Confidential information can be exposed externally.
CVE-2026-64766 Vulnerability in apple (CVE-2026-64766)
vulnerability in apple (CVE-2026-64766). Successful exploitation can lead to full system takeover.
CVE-2026-64771 Buffer Overflow in apple (CVE-2026-64771)
vulnerability in apple (CVE-2026-64771). Successful exploitation can lead to full system takeover.
CVE-2026-64744 Information Disclosure in apple (CVE-2026-64744)
vulnerability in apple (CVE-2026-64744). Confidential information can be exposed externally.
CVE-2026-64755 Information Disclosure in apple (CVE-2026-64755)
vulnerability in apple (CVE-2026-64755). Confidential information can be exposed externally.
CVE-2026-64775 Vulnerability in apple (CVE-2026-64775)
vulnerability in apple (CVE-2026-64775). Successful exploitation can lead to full system takeover.
CVE-2026-64765 Vulnerability in apple (CVE-2026-64765)
vulnerability in apple (CVE-2026-64765). Successful exploitation can lead to full system takeover.
CVE-2026-64770 Out-of-Bounds Write in apple (CVE-2026-64770)
out-of-bounds write in apple (CVE-2026-64770). Successful exploitation can lead to full system takeover.
CVE-2026-66824 Cross-Site Scripting (XSS) in CVE-2026-66824 (CVE-2026-66824)
cross-site scripting in CVE-2026-66824 (CVE-2026-66824). Risk of unauthorized operations or information disclosure.
CVE-2026-64772 Out-of-Bounds Write in apple (CVE-2026-64772)
out-of-bounds write in apple (CVE-2026-64772). Successful exploitation can lead to full system takeover.
CVE-2026-64769 Out-of-Bounds Write in apple (CVE-2026-64769)
out-of-bounds write in apple (CVE-2026-64769). Successful exploitation can lead to full system takeover.
CVE-2026-64754 Out-of-Bounds Write in apple (CVE-2026-64754)
out-of-bounds write in apple (CVE-2026-64754). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →