Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-16358 Vulnerability in mozilla (CVE-2026-16358)
vulnerability in mozilla (CVE-2026-16358). Successful exploitation can lead to full system takeover.
CVE-2026-16356 Use-After-Free in mozilla (CVE-2026-16356)
vulnerability in mozilla (CVE-2026-16356). Successful exploitation can lead to full system takeover.
CVE-2026-16355 Vulnerability in mozilla (CVE-2026-16355)
vulnerability in mozilla (CVE-2026-16355). Successful exploitation can lead to full system takeover.
CVE-2026-16350 Buffer Overflow in mozilla (CVE-2026-16350)
vulnerability in mozilla (CVE-2026-16350). Successful exploitation can lead to full system takeover.
CVE-2026-16354 Information Disclosure in mozilla (CVE-2026-16354)
vulnerability in mozilla (CVE-2026-16354). Confidential information can be exposed externally.
CVE-2026-16349 Vulnerability in mozilla (CVE-2026-16349)
vulnerability in mozilla (CVE-2026-16349). Successful exploitation can lead to full system takeover.
CVE-2026-16353 Use-After-Free in mozilla (CVE-2026-16353)
vulnerability in mozilla (CVE-2026-16353). Successful exploitation can lead to full system takeover.
CVE-2026-16352 Use-After-Free in mozilla (CVE-2026-16352)
vulnerability in mozilla (CVE-2026-16352). Successful exploitation can lead to full system takeover.
CVE-2026-16351 Use-After-Free in mozilla (CVE-2026-16351)
vulnerability in mozilla (CVE-2026-16351). Successful exploitation can lead to full system takeover.
CVE-2026-73491 Vulnerability in loofah (CVE-2026-73491)
vulnerability in loofah (CVE-2026-73491). Risk of unauthorized operations or information disclosure. Exploitable via ``CGI.unescapeHTML``. Mitigation: upgrade to `2.25.2` or later.
CVE-2026-65008 Code Injection in CVE-2026-65008 (CVE-2026-65008)
code injection in CVE-2026-65008 (CVE-2026-65008). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.0.7` or later.
CVE-2026-64627 Vulnerability in CVE-2026-64627 (CVE-2026-64627)
vulnerability in CVE-2026-64627 (CVE-2026-64627). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.10.0-alpha.4` or later.
CVE-2026-64628 Cross-Site Scripting (XSS) in CVE-2026-64628 (CVE-2026-64628)
cross-site scripting in CVE-2026-64628 (CVE-2026-64628). Risk of unauthorized operations or information disclosure.
CVE-2026-60080 Use-After-Free in apache (CVE-2026-60080)
vulnerability in apache (CVE-2026-60080). Risk of unauthorized operations or information disclosure.
CVE-2026-59845 Vulnerability in dos (CVE-2026-59845)
vulnerability in dos (CVE-2026-59845). Risk of unauthorized operations or information disclosure.
CVE-2026-65009 Information Disclosure in CVE-2026-65009 (CVE-2026-65009)
vulnerability in CVE-2026-65009 (CVE-2026-65009). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/{realm}/syslog/event`.
CVE-2026-65007 Vulnerability in privilege-escalation (CVE-2026-65007)
vulnerability in privilege-escalation (CVE-2026-65007). Confidential information can be exposed externally.
CVE-2026-59842 Out-of-Bounds Read in libssh (CVE-2026-59842)
vulnerability in libssh (CVE-2026-59842). Risk of unauthorized operations or information disclosure.
CVE-2026-59843 Vulnerability in dos (CVE-2026-59843)
vulnerability in dos (CVE-2026-59843). Risk of unauthorized operations or information disclosure.
CVE-2026-59844 Vulnerability in libssh (CVE-2026-59844)
vulnerability in libssh (CVE-2026-59844). Risk of unauthorized operations or information disclosure.
CVE-2026-1617 SQL Injection in sqli (CVE-2026-1617)
SQL injection in sqli (CVE-2026-1617). Successful exploitation can lead to full system takeover.
CVE-2026-16461 Vulnerability in dos (CVE-2026-16461)
vulnerability in dos (CVE-2026-16461). Risk of unauthorized operations or information disclosure.
CVE-2026-64606 Unsafe Deserialization in apache (CVE-2026-64606)
vulnerability in apache (CVE-2026-64606). Successful exploitation can lead to full system takeover.
CVE-2026-64609 Out-of-Bounds Read in apache (CVE-2026-64609)
vulnerability in apache (CVE-2026-64609). Confidential information can be exposed externally.
CVE-2026-64608 Unsafe Deserialization in c (CVE-2026-64608)
vulnerability in c (CVE-2026-64608). Successful exploitation can lead to full system takeover.
CVE-2026-62415 Vulnerability in CVE-2026-62415 (CVE-2026-62415)
vulnerability in CVE-2026-62415 (CVE-2026-62415). Confidential information can be exposed externally.
CVE-2026-1771 Vulnerability in wordpress (CVE-2026-1771)
vulnerability in wordpress (CVE-2026-1771). Successful exploitation can lead to full system takeover.
CVE-2026-1372 Vulnerability in wordpress (CVE-2026-1372)
vulnerability in wordpress (CVE-2026-1372). Risk of unauthorized operations or information disclosure.
CVE-2026-15370 Vulnerability in libssh (CVE-2026-15370)
vulnerability in libssh (CVE-2026-15370). Successful exploitation can lead to full system takeover.
CVE-2026-15145 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15145)
cross-site scripting in wordpress (CVE-2026-15145). Risk of unauthorized operations or information disclosure.
CVE-2026-8593 Vulnerability in CVE-2026-8593 (CVE-2026-8593)
vulnerability in CVE-2026-8593 (CVE-2026-8593). Risk of unauthorized operations or information disclosure.
CVE-2026-3183 Vulnerability in CVE-2026-3183 (CVE-2026-3183)
vulnerability in CVE-2026-3183 (CVE-2026-3183). Data can be tampered with by attackers.
CVE-2026-8082 SQL Injection in wordpress (CVE-2026-8082)
SQL injection in wordpress (CVE-2026-8082). Confidential information can be exposed externally.
CVE-2026-14185 Vulnerability in wordpress (CVE-2026-14185)
vulnerability in wordpress (CVE-2026-14185). Risk of unauthorized operations or information disclosure.
CVE-2026-14184 Vulnerability in wordpress (CVE-2026-14184)
vulnerability in wordpress (CVE-2026-14184). Risk of unauthorized operations or information disclosure.
CVE-2026-14183 Vulnerability in wordpress (CVE-2026-14183)
vulnerability in wordpress (CVE-2026-14183). Risk of unauthorized operations or information disclosure.
CVE-2026-13694 Vulnerability in c (CVE-2026-13694)
vulnerability in c (CVE-2026-13694). Risk of unauthorized operations or information disclosure.
CVE-2026-13693 Path Traversal in wordpress (CVE-2026-13693)
path traversal in wordpress (CVE-2026-13693). Confidential information can be exposed externally.
CVE-2026-11767 Cross-Site Scripting (XSS) in wordpress (CVE-2026-11767)
cross-site scripting in wordpress (CVE-2026-11767). Successful exploitation can lead to full system takeover.
CVE-2026-3182 Vulnerability in CVE-2026-3182 (CVE-2026-3182)
vulnerability in CVE-2026-3182 (CVE-2026-3182). Risk of unauthorized operations or information disclosure.
CVE-2026-13439 Privilege Escalation in wordpress (CVE-2026-13439)
vulnerability in wordpress (CVE-2026-13439). Successful exploitation can lead to full system takeover.
CVE-2026-16266 Vulnerability in CVE-2026-16266 (CVE-2026-16266)
vulnerability in CVE-2026-16266 (CVE-2026-16266). Risk of unauthorized operations or information disclosure.
CVE-2026-15811 Vulnerability in CVE-2026-15811 (CVE-2026-15811)
vulnerability in CVE-2026-15811 (CVE-2026-15811). Confidential information can be exposed externally.
CVE-2026-15782 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15782)
cross-site scripting in wordpress (CVE-2026-15782). Risk of unauthorized operations or information disclosure.
CVE-2026-15927 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-15927)
SSRF in ssrf (CVE-2026-15927). Confidential information can be exposed externally.
CVE-2026-15812 Vulnerability in CVE-2026-15812 (CVE-2026-15812)
vulnerability in CVE-2026-15812 (CVE-2026-15812). Risk of unauthorized operations or information disclosure.
CVE-2023-37507 Vulnerability in hcltech (CVE-2023-37507)
vulnerability in hcltech (CVE-2023-37507). Confidential information can be exposed externally.
CVE-2026-15156 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15156)
cross-site scripting in wordpress (CVE-2026-15156). Risk of unauthorized operations or information disclosure.
CVE-2023-37508 Cross-Site Scripting (XSS) in hcltech (CVE-2023-37508)
cross-site scripting in hcltech (CVE-2023-37508). Risk of unauthorized operations or information disclosure.
CVE-2026-59776 Vulnerability in CVE-2026-59776 (CVE-2026-59776)
vulnerability in CVE-2026-59776 (CVE-2026-59776). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →