Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-16814 Out-of-Bounds Write in ibm (CVE-2026-16814)
out-of-bounds write in ibm (CVE-2026-16814). Successful exploitation can lead to full system takeover.
CVE-2026-16706 Out-of-Bounds Write in dos (CVE-2026-16706)
out-of-bounds write in dos (CVE-2026-16706). Risk of unauthorized operations or information disclosure.
CVE-2026-16703 Privilege Escalation in ibm (CVE-2026-16703)
vulnerability in ibm (CVE-2026-16703). Successful exploitation can lead to full system takeover.
CVE-2026-16690 Vulnerability in dos (CVE-2026-16690)
vulnerability in dos (CVE-2026-16690). Risk of unauthorized operations or information disclosure.
CVE-2026-16686 Authentication Bypass in ibm (CVE-2026-16686)
authentication bypass in ibm (CVE-2026-16686). Confidential information can be exposed externally.
CVE-2026-15078 Vulnerability in ibm (CVE-2026-15078)
vulnerability in ibm (CVE-2026-15078). Confidential information can be exposed externally.
CVE-2026-15061 Path Traversal in path-traversal (CVE-2026-15061)
path traversal in path-traversal (CVE-2026-15061). Data can be tampered with by attackers.
CVE-2026-14970 Vulnerability in ibm (CVE-2026-14970)
vulnerability in ibm (CVE-2026-14970). Risk of unauthorized operations or information disclosure.
CVE-2026-76234 Vulnerability in CVE-2026-76234 (CVE-2026-76234)
vulnerability in CVE-2026-76234 (CVE-2026-76234). Risk of unauthorized operations or information disclosure.
CVE-2026-76225 SSRF (Server-Side Request Forgery) in CVE-2026-76225 (CVE-2026-76225)
SSRF in CVE-2026-76225 (CVE-2026-76225). Confidential information can be exposed externally.
CVE-2026-76224 Code Injection in CVE-2026-76224 (CVE-2026-76224)
code injection in CVE-2026-76224 (CVE-2026-76224). Successful exploitation can lead to full system takeover.
CVE-2026-76223 Vulnerability in CVE-2026-76223 (CVE-2026-76223)
vulnerability in CVE-2026-76223 (CVE-2026-76223). Data can be tampered with by attackers. Mitigation: upgrade to `26.8.1` or later.
CVE-2026-76222 Path Traversal in CVE-2026-76222 (CVE-2026-76222)
path traversal in CVE-2026-76222 (CVE-2026-76222). Data can be tampered with by attackers.
CVE-2026-76221 Vulnerability in CVE-2026-76221 (CVE-2026-76221)
vulnerability in CVE-2026-76221 (CVE-2026-76221). Successful exploitation can lead to full system takeover.
CVE-2026-76220 Vulnerability in CVE-2026-76220 (CVE-2026-76220)
vulnerability in CVE-2026-76220 (CVE-2026-76220). Successful exploitation can lead to full system takeover.
CVE-2026-76219 Vulnerability in CVE-2026-76219 (CVE-2026-76219)
vulnerability in CVE-2026-76219 (CVE-2026-76219). Data can be tampered with by attackers.
CVE-2026-76218 Vulnerability in CVE-2026-76218 (CVE-2026-76218)
vulnerability in CVE-2026-76218 (CVE-2026-76218). Successful exploitation can lead to full system takeover.
CVE-2026-76216 Vulnerability in CVE-2026-76216 (CVE-2026-76216)
vulnerability in CVE-2026-76216 (CVE-2026-76216). Successful exploitation can lead to full system takeover.
CVE-2026-76214 Vulnerability in CVE-2026-76214 (CVE-2026-76214)
vulnerability in CVE-2026-76214 (CVE-2026-76214). Confidential information can be exposed externally.
CVE-2026-76213 Vulnerability in CVE-2026-76213 (CVE-2026-76213)
vulnerability in CVE-2026-76213 (CVE-2026-76213). Confidential information can be exposed externally.
CVE-2026-76208 Vulnerability in CVE-2026-76208 (CVE-2026-76208)
vulnerability in CVE-2026-76208 (CVE-2026-76208). Data can be tampered with by attackers. Mitigation: upgrade to `4.1.7` or later.
CVE-2026-76207 Vulnerability in CVE-2026-76207 (CVE-2026-76207)
vulnerability in CVE-2026-76207 (CVE-2026-76207). Confidential information can be exposed externally.
CVE-2026-76205 SQL Injection in sqli (CVE-2026-76205)
SQL injection in sqli (CVE-2026-76205). Confidential information can be exposed externally.
CVE-2026-75918 Information Disclosure in CVE-2026-75918 (CVE-2026-75918)
vulnerability in CVE-2026-75918 (CVE-2026-75918). Successful exploitation can lead to full system takeover.
CVE-2026-75917 Cross-Site Scripting (XSS) in CVE-2026-75917 (CVE-2026-75917)
cross-site scripting in CVE-2026-75917 (CVE-2026-75917). Successful exploitation can lead to full system takeover.
CVE-2026-75916 Cross-Site Scripting (XSS) in CVE-2026-75916 (CVE-2026-75916)
cross-site scripting in CVE-2026-75916 (CVE-2026-75916). Successful exploitation can lead to full system takeover.
CVE-2026-71694 Cross-Site Request Forgery (CSRF) in CVE-2026-71694 (CVE-2026-71694)
vulnerability in CVE-2026-71694 (CVE-2026-71694). Successful exploitation can lead to full system takeover.
CVE-2026-70422 SQL Injection in sqli (CVE-2026-70422)
SQL injection in sqli (CVE-2026-70422). Confidential information can be exposed externally.
CVE-2026-70421 Privilege Escalation in dell (CVE-2026-70421)
vulnerability in dell (CVE-2026-70421). Successful exploitation can lead to full system takeover.
CVE-2026-56088 SQL Injection in sqli (CVE-2026-56088)
SQL injection in sqli (CVE-2026-56088). Confidential information can be exposed externally.
CVE-2026-54796 OS Command Injection in dell (CVE-2026-54796)
OS command injection in dell (CVE-2026-54796). Successful exploitation can lead to full system takeover.
CVE-2026-54795 OS Command Injection in dell (CVE-2026-54795)
OS command injection in dell (CVE-2026-54795). Successful exploitation can lead to full system takeover.
CVE-2026-54794 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-54794)
SSRF in ssrf (CVE-2026-54794). Risk of unauthorized operations or information disclosure.
CVE-2026-51367 Vulnerability in CVE-2026-51367 (CVE-2026-51367)
vulnerability in CVE-2026-51367 (CVE-2026-51367). Confidential information can be exposed externally.
CVE-2026-43961 Code Injection in CVE-2026-43961 (CVE-2026-43961)
code injection in CVE-2026-43961 (CVE-2026-43961). Successful exploitation can lead to full system takeover.
CVE-2024-58376 OS Command Injection in CVE-2024-58376 (CVE-2024-58376)
OS command injection in CVE-2024-58376 (CVE-2024-58376). Successful exploitation can lead to full system takeover.
CVE-2020-37267 Vulnerability in CVE-2020-37267 (CVE-2020-37267)
vulnerability in CVE-2020-37267 (CVE-2020-37267). Confidential information can be exposed externally. Mitigation: upgrade to `23.25.1` or later.
CVE-2019-25766 Vulnerability in CVE-2019-25766 (CVE-2019-25766)
vulnerability in CVE-2019-25766 (CVE-2019-25766). Confidential information can be exposed externally.
CVE-2026-76235 Vulnerability in dos (CVE-2026-76235)
vulnerability in dos (CVE-2026-76235). Risk of unauthorized operations or information disclosure.
CVE-2026-73394 Unauthenticated Broken Access Control in Stitch Express <= 1.9.0 versions.
Unauthenticated Broken Access Control in Stitch Express <= 1.9.0 versions.
CVE-2026-73387 Unauthenticated Local File Inclusion in Resido <= 1.5 versions.
Unauthenticated Local File Inclusion in Resido <= 1.5 versions.
CVE-2026-73386 Vulnerability in CVE-2026-73386 (CVE-2026-73386)
vulnerability in CVE-2026-73386 (CVE-2026-73386). Confidential information can be exposed externally.
CVE-2026-73385 Unauthenticated Broken Access Control in Outranking Plugin Options <= 1.1.3 versions.
Unauthenticated Broken Access Control in Outranking Plugin Options <= 1.1.3 versions.
CVE-2026-73384 Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions.
Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions.
CVE-2026-73354 Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.
Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.
CVE-2026-73184 Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.
CVE-2026-73182 Unauthenticated Cross Site Scripting (XSS) in BBQ Pro <= 3.9 versions.
Unauthenticated Cross Site Scripting (XSS) in BBQ Pro <= 3.9 versions.
CVE-2026-66668 Subscriber SQL Injection in Community by PeepSo <= 9.0.5.2 versions.
Subscriber SQL Injection in Community by PeepSo <= 9.0.5.2 versions.
CVE-2026-66596 Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.
CVE-2026-61986 Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →