Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
ID Title
CVE-2026-16534 Privilege Escalation in wordpress (CVE-2026-16534)
vulnerability in wordpress (CVE-2026-16534). Confidential information can be exposed externally.
CVE-2026-16532 SQL Injection in wordpress (CVE-2026-16532)
SQL injection in wordpress (CVE-2026-16532). Confidential information can be exposed externally.
CVE-2026-16300 Vulnerability in wordpress (CVE-2026-16300)
vulnerability in wordpress (CVE-2026-16300). Successful exploitation can lead to full system takeover.
CVE-2026-16250 Unrestricted File Upload in wordpress (CVE-2026-16250)
vulnerability in wordpress (CVE-2026-16250). Successful exploitation can lead to full system takeover.
CVE-2026-16060 Unrestricted File Upload in wordpress (CVE-2026-16060)
vulnerability in wordpress (CVE-2026-16060). Successful exploitation can lead to full system takeover.
CVE-2026-15930 Vulnerability in wordpress (CVE-2026-15930)
vulnerability in wordpress (CVE-2026-15930). Data can be tampered with by attackers.
CVE-2026-14557 Authentication Bypass in wordpress (CVE-2026-14557)
authentication bypass in wordpress (CVE-2026-14557). Confidential information can be exposed externally.
CVE-2026-12965 SQL Injection in wordpress (CVE-2026-12965)
SQL injection in wordpress (CVE-2026-12965). Confidential information can be exposed externally.
CVE-2026-12872 Unrestricted File Upload in wordpress (CVE-2026-12872)
vulnerability in wordpress (CVE-2026-12872). Successful exploitation can lead to full system takeover.
CVE-2026-65321 SQL Injection in sqli (CVE-2026-65321)
SQL injection in sqli (CVE-2026-65321). Successful exploitation can lead to full system takeover.
CVE-2026-68579 Out-of-Bounds Write in c (CVE-2026-68579)
out-of-bounds write in c (CVE-2026-68579). Data can be tampered with by attackers.
CVE-2026-16256 Privilege Escalation in wordpress (CVE-2026-16256)
vulnerability in wordpress (CVE-2026-16256). Successful exploitation can lead to full system takeover.
CVE-2026-8457 Vulnerability in wordpress (CVE-2026-8457)
vulnerability in wordpress (CVE-2026-8457). Successful exploitation can lead to full system takeover.
CVE-2026-67342 Vulnerability in CVE-2026-67342 (CVE-2026-67342)
vulnerability in CVE-2026-67342 (CVE-2026-67342). Successful exploitation can lead to full system takeover.
CVE-2026-67341 Authorization Flaw in CVE-2026-67341 (CVE-2026-67341)
vulnerability in CVE-2026-67341 (CVE-2026-67341). Successful exploitation can lead to full system takeover.
CVE-2026-67330 Vulnerability in CVE-2026-67330 (CVE-2026-67330)
vulnerability in CVE-2026-67330 (CVE-2026-67330). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.6.22` or later.
CVE-2026-67324 OS Command Injection in CVE-2026-67324 (CVE-2026-67324)
OS command injection in CVE-2026-67324 (CVE-2026-67324). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.1.51` or later.
CVE-2026-67308 OS Command Injection in CVE-2026-67308 (CVE-2026-67308)
OS command injection in CVE-2026-67308 (CVE-2026-67308). Successful exploitation can lead to full system takeover.
CVE-2026-67289 Vulnerability in CVE-2026-67289 (CVE-2026-67289)
vulnerability in CVE-2026-67289 (CVE-2026-67289). Successful exploitation can lead to full system takeover. Exploitable via `Host header`.
CVE-2026-66402 Vulnerability in CVE-2026-66402 (CVE-2026-66402)
vulnerability in CVE-2026-66402 (CVE-2026-66402). Successful exploitation can lead to full system takeover.
CVE-2026-15964 Vulnerability in wordpress (CVE-2026-15964)
vulnerability in wordpress (CVE-2026-15964). Successful exploitation can lead to full system takeover. Exploitable via ``wp_ajax_nopriv_ssoprocess_ajax``.
CVE-2026-13596 SQL Injection in wordpress (CVE-2026-13596)
SQL injection in wordpress (CVE-2026-13596). Confidential information can be exposed externally.
CVE-2026-3141 Vulnerability in wordpress (CVE-2026-3141)
vulnerability in wordpress (CVE-2026-3141). Data can be tampered with by attackers.
CVE-2026-68771 Unsafe Deserialization in deserialization (CVE-2026-68771)
vulnerability in deserialization (CVE-2026-68771). Successful exploitation can lead to full system takeover. Exploitable via `POST /upload/image`.
CVE-2026-52134 Vulnerability in c (CVE-2026-52134)
vulnerability in c (CVE-2026-52134). Successful exploitation can lead to full system takeover.
CVE-2026-68770 Code Injection in CVE-2026-68770 (CVE-2026-68770)
code injection in CVE-2026-68770 (CVE-2026-68770). Successful exploitation can lead to full system takeover.
CVE-2026-51785 Code Injection in CVE-2026-51785 (CVE-2026-51785)
code injection in CVE-2026-51785 (CVE-2026-51785). Successful exploitation can lead to full system takeover.
CVE-2026-38713 Command Injection in CVE-2026-38713 (CVE-2026-38713)
command injection in CVE-2026-38713 (CVE-2026-38713). Successful exploitation can lead to full system takeover.
CVE-2026-38708 Command Injection in CVE-2026-38708 (CVE-2026-38708)
command injection in CVE-2026-38708 (CVE-2026-38708). Successful exploitation can lead to full system takeover.
CVE-2025-69948 SQL Injection in sqli (CVE-2025-69948)
SQL injection in sqli (CVE-2025-69948). Successful exploitation can lead to full system takeover.
CVE-2025-69946 SQL Injection in sqli (CVE-2025-69946)
SQL injection in sqli (CVE-2025-69946). Successful exploitation can lead to full system takeover.
CVE-2026-38711 Command Injection in CVE-2026-38711 (CVE-2026-38711)
command injection in CVE-2026-38711 (CVE-2026-38711). Successful exploitation can lead to full system takeover.
CVE-2026-21662 Unrestricted File Upload in johnsoncontrols (CVE-2026-21662)
vulnerability in johnsoncontrols (CVE-2026-21662). Successful exploitation can lead to full system takeover.
CVE-2026-54725 SSRF (Server-Side Request Forgery) in github.com/bank-vaults/vault-secrets-webhook (CVE-2026-54725)
SSRF in github.com/bank-vaults/vault-secrets-webhook (CVE-2026-54725). Confidential information can be exposed externally. Exploitable via ``VaultAddrAnnotation``. Mitigation: upgrade to `1.23.1` or later.
CVE-2026-67822 Vulnerability in CVE-2026-67822 (CVE-2026-67822)
vulnerability in CVE-2026-67822 (CVE-2026-67822). Successful exploitation can lead to full system takeover.
CVE-2026-17566 OS Command Injection in pgadmin (CVE-2026-17566)
OS command injection in pgadmin (CVE-2026-17566). Successful exploitation can lead to full system takeover. Exploitable via `POST /import_export/job/`.
CVE-2026-17351 SQL Injection in pgadmin (CVE-2026-17351)
SQL injection in pgadmin (CVE-2026-17351). Successful exploitation can lead to full system takeover.
CVE-2026-17349 Vulnerability in pgadmin (CVE-2026-17349)
vulnerability in pgadmin (CVE-2026-17349). Confidential information can be exposed externally.
CVE-2026-16504 Vulnerability in CVE-2026-16504 (CVE-2026-16504)
vulnerability in CVE-2026-16504 (CVE-2026-16504). Successful exploitation can lead to full system takeover.
CVE-2026-16503 Vulnerability in CVE-2026-16503 (CVE-2026-16503)
vulnerability in CVE-2026-16503 (CVE-2026-16503). Confidential information can be exposed externally.
CVE-2026-52855 Information Disclosure in github.com/pterodactyl/wings (CVE-2026-52855)
vulnerability in github.com/pterodactyl/wings (CVE-2026-52855). Successful exploitation can lead to full system takeover. Exploitable via ``startup.update``. Mitigation: upgrade to `1.12.3` or later.
CVE-2026-17561 Code Injection in CVE-2026-17561 (CVE-2026-17561)
code injection in CVE-2026-17561 (CVE-2026-17561). Successful exploitation can lead to full system takeover.
CVE-2026-18452 Vulnerability in CVE-2026-18452 (CVE-2026-18452)
vulnerability in CVE-2026-18452 (CVE-2026-18452). Successful exploitation can lead to full system takeover.
CVE-2026-14919 Authentication Bypass in wordpress (CVE-2026-14919)
authentication bypass in wordpress (CVE-2026-14919). Successful exploitation can lead to full system takeover.
CVE-2026-14483 Unrestricted File Upload in wordpress (CVE-2026-14483)
vulnerability in wordpress (CVE-2026-14483). Successful exploitation can lead to full system takeover.
CVE-2026-63223 Unrestricted File Upload in codeigniter4/framework (CVE-2026-63223)
vulnerability in codeigniter4/framework (CVE-2026-63223). Successful exploitation can lead to full system takeover. Exploitable via ``is_image``. Mitigation: upgrade to `4.7.4` or later.
CVE-2026-63221 SQL Injection in codeigniter4/framework (CVE-2026-63221)
SQL injection in codeigniter4/framework (CVE-2026-63221). Data can be tampered with by attackers. Exploitable via ``WHERE``. Mitigation: upgrade to `4.7.4` or later.
CVE-2026-43830 Command Injection in CVE-2026-43830 (CVE-2026-43830)
command injection in CVE-2026-43830 (CVE-2026-43830). Successful exploitation can lead to full system takeover.
CVE-2026-14537 Authorization Flaw in google (CVE-2026-14537)
vulnerability in google (CVE-2026-14537). Successful exploitation can lead to full system takeover.
CVE-2026-66421 Cross-Site Scripting (XSS) in CVE-2026-66421 (CVE-2026-66421)
cross-site scripting in CVE-2026-66421 (CVE-2026-66421). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →