Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-66421 Cross-Site Scripting (XSS) in CVE-2026-66421 (CVE-2026-66421)
cross-site scripting in CVE-2026-66421 (CVE-2026-66421). Confidential information can be exposed externally.
CVE-2026-38709 Command Injection in CVE-2026-38709 (CVE-2026-38709)
command injection in CVE-2026-38709 (CVE-2026-38709). Successful exploitation can lead to full system takeover.
CVE-2026-66803 Vulnerability in microsoft (CVE-2026-66803)
vulnerability in microsoft (CVE-2026-66803). Successful exploitation can lead to full system takeover.
CVE-2026-66418 Cross-Site Scripting (XSS) in CVE-2026-66418 (CVE-2026-66418)
cross-site scripting in CVE-2026-66418 (CVE-2026-66418). Confidential information can be exposed externally.
CVE-2026-52539 Vulnerability in CVE-2026-52539 (CVE-2026-52539)
vulnerability in CVE-2026-52539 (CVE-2026-52539). Confidential information can be exposed externally.
CVE-2025-69933 SQL Injection in sqli (CVE-2025-69933)
SQL injection in sqli (CVE-2025-69933). Successful exploitation can lead to full system takeover.
CVE-2025-69947 SQL Injection in sqli (CVE-2025-69947)
SQL injection in sqli (CVE-2025-69947). Successful exploitation can lead to full system takeover.
CVE-2025-69938 SQL Injection in sqli (CVE-2025-69938)
SQL injection in sqli (CVE-2025-69938). Successful exploitation can lead to full system takeover.
CVE-2026-66756 Vulnerability in apache (CVE-2026-66756)
vulnerability in apache (CVE-2026-66756). Successful exploitation can lead to full system takeover.
CVE-2025-65336 SQL Injection in sqli (CVE-2025-65336)
SQL injection in sqli (CVE-2025-65336). Successful exploitation can lead to full system takeover.
CVE-2025-69934 SQL Injection in sqli (CVE-2025-69934)
SQL injection in sqli (CVE-2025-69934). Successful exploitation can lead to full system takeover.
CVE-2025-69931 SQL Injection in sqli (CVE-2025-69931)
SQL injection in sqli (CVE-2025-69931). Successful exploitation can lead to full system takeover.
CVE-2025-69935 SQL Injection in sqli (CVE-2025-69935)
SQL injection in sqli (CVE-2025-69935). Successful exploitation can lead to full system takeover.
CVE-2025-69930 SQL Injection in sqli (CVE-2025-69930)
SQL injection in sqli (CVE-2025-69930). Successful exploitation can lead to full system takeover.
CVE-2026-67594 Vulnerability in CVE-2026-67594 (CVE-2026-67594)
vulnerability in CVE-2026-67594 (CVE-2026-67594). Successful exploitation can lead to full system takeover.
CVE-2025-69941 SQL Injection in sqli (CVE-2025-69941)
SQL injection in sqli (CVE-2025-69941). Successful exploitation can lead to full system takeover.
CVE-2025-69937 SQL Injection in sqli (CVE-2025-69937)
SQL injection in sqli (CVE-2025-69937). Successful exploitation can lead to full system takeover.
CVE-2025-69936 CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.
CVE-2026-35847 Command Injection in CVE-2026-35847 (CVE-2026-35847)
command injection in CVE-2026-35847 (CVE-2026-35847). Successful exploitation can lead to full system takeover.
CVE-2026-67208 Vulnerability in CVE-2026-67208 (CVE-2026-67208)
vulnerability in CVE-2026-67208 (CVE-2026-67208). Successful exploitation can lead to full system takeover.
CVE-2026-15971 Vulnerability in lmsys (CVE-2026-15971)
vulnerability in lmsys (CVE-2026-15971). Successful exploitation can lead to full system takeover.
CVE-2026-12946 Code Injection in langflow (CVE-2026-12946)
code injection in langflow (CVE-2026-12946). Successful exploitation can lead to full system takeover.
CVE-2026-51272 Vulnerability in privilege-escalation (CVE-2026-51272)
vulnerability in privilege-escalation (CVE-2026-51272). Successful exploitation can lead to full system takeover.
CVE-2026-15976 Unsafe Deserialization in deserialization (CVE-2026-15976)
vulnerability in deserialization (CVE-2026-15976). Successful exploitation can lead to full system takeover.
CVE-2026-12118 Unsafe Deserialization in deserialization (CVE-2026-12118)
vulnerability in deserialization (CVE-2026-12118). Successful exploitation can lead to full system takeover.
CVE-2026-13435 Code Injection in langflow (CVE-2026-13435)
code injection in langflow (CVE-2026-13435). Successful exploitation can lead to full system takeover.
CVE-2026-15969 Unsafe Deserialization in lmsys (CVE-2026-15969)
vulnerability in lmsys (CVE-2026-15969). Successful exploitation can lead to full system takeover.
CVE-2026-12943 OS Command Injection in ibm (CVE-2026-12943)
OS command injection in ibm (CVE-2026-12943). Successful exploitation can lead to full system takeover.
CVE-2026-68503 Vulnerability in CVE-2026-68503 (CVE-2026-68503)
vulnerability in CVE-2026-68503 (CVE-2026-68503). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.2.154` or later.
CVE-2026-68502 Vulnerability in CVE-2026-68502 (CVE-2026-68502)
vulnerability in CVE-2026-68502 (CVE-2026-68502). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.2.154` or later.
CVE-2026-18245 Code Injection in react (CVE-2026-18245)
code injection in react (CVE-2026-18245). Successful exploitation can lead to full system takeover.
CVE-2026-51290 Use-After-Free in dos (CVE-2026-51290)
vulnerability in dos (CVE-2026-51290). Confidential information can be exposed externally.
CVE-2026-12940 OS Command Injection in langflow (CVE-2026-12940)
OS command injection in langflow (CVE-2026-12940). Successful exploitation can lead to full system takeover.
CVE-2026-51291 Use-After-Free in c (CVE-2026-51291)
vulnerability in c (CVE-2026-51291). Successful exploitation can lead to full system takeover.
CVE-2026-13379 Out-of-Bounds Read in openvpn (CVE-2026-13379)
vulnerability in openvpn (CVE-2026-13379). Confidential information can be exposed externally.
CVE-2026-28812 Vulnerability in apache (CVE-2026-28812)
vulnerability in apache (CVE-2026-28812). Successful exploitation can lead to full system takeover.
CVE-2026-52680 Path Traversal in apache (CVE-2026-52680)
path traversal in apache (CVE-2026-52680). Successful exploitation can lead to full system takeover.
CVE-2026-4978 SQL Injection in sqli (CVE-2026-4978)
SQL injection in sqli (CVE-2026-4978). Successful exploitation can lead to full system takeover.
CVE-2026-28323 Authentication Bypass in solarwinds (CVE-2026-28323)
authentication bypass in solarwinds (CVE-2026-28323). Successful exploitation can lead to full system takeover.
CVE-2026-15435 Path Traversal in ibm (CVE-2026-15435)
path traversal in ibm (CVE-2026-15435). Successful exploitation can lead to full system takeover.
CVE-2026-11707 Cross-Site Scripting (XSS) in ibm (CVE-2026-11707)
cross-site scripting in ibm (CVE-2026-11707). Confidential information can be exposed externally.
CVE-2026-47876 Out-of-Bounds Write in CVE-2026-47876 (CVE-2026-47876)
out-of-bounds write in CVE-2026-47876 (CVE-2026-47876). Successful exploitation can lead to full system takeover.
CVE-2026-54363 Vulnerability in CVE-2026-54363 (CVE-2026-54363)
vulnerability in CVE-2026-54363 (CVE-2026-54363). Confidential information can be exposed externally.
CVE-2026-59310 KEV [KEV] Path Traversal in Broadcom path-traversal (CVE-2026-59310)
path traversal in Broadcom path-traversal (CVE-2026-59310). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-59309 Vulnerability in vmware (CVE-2026-59309)
vulnerability in vmware (CVE-2026-59309). Successful exploitation can lead to full system takeover.
CVE-2026-17544 Out-of-Bounds Write in CVE-2026-17544 (CVE-2026-17544)
out-of-bounds write in CVE-2026-17544 (CVE-2026-17544). Successful exploitation can lead to full system takeover.
CVE-2026-17543 SQL Injection in sqli (CVE-2026-17543)
SQL injection in sqli (CVE-2026-17543). Successful exploitation can lead to full system takeover.
CVE-2026-7849 Command Injection in CVE-2026-7849 (CVE-2026-7849)
command injection in CVE-2026-7849 (CVE-2026-7849). Successful exploitation can lead to full system takeover.
CVE-2026-44108 Vulnerability in CVE-2026-44108 (CVE-2026-44108)
vulnerability in CVE-2026-44108 (CVE-2026-44108). Successful exploitation can lead to full system takeover.
CVE-2026-44101 Vulnerability in CVE-2026-44101 (CVE-2026-44101)
vulnerability in CVE-2026-44101 (CVE-2026-44101). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →