Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-72970 Vulnerability in microsoft (CVE-2026-72970)
vulnerability in microsoft (CVE-2026-72970). Confidential information can be exposed externally.
CVE-2026-19629 Authorization Flaw in privilege-escalation (CVE-2026-19629)
vulnerability in privilege-escalation (CVE-2026-19629). Confidential information can be exposed externally.
CVE-2026-19845 Buffer Overflow in CVE-2026-19845 (CVE-2026-19845)
vulnerability in CVE-2026-19845 (CVE-2026-19845). Successful exploitation can lead to full system takeover.
CVE-2026-19680 SQL Injection in sqli (CVE-2026-19680)
SQL injection in sqli (CVE-2026-19680). Confidential information can be exposed externally.
CVE-2026-19635 OS Command Injection in privilege-escalation (CVE-2026-19635)
OS command injection in privilege-escalation (CVE-2026-19635). Successful exploitation can lead to full system takeover.
CVE-2026-19679 OS Command Injection in tenable (CVE-2026-19679)
OS command injection in tenable (CVE-2026-19679). Successful exploitation can lead to full system takeover.
CVE-2026-19844 Buffer Overflow in CVE-2026-19844 (CVE-2026-19844)
vulnerability in CVE-2026-19844 (CVE-2026-19844). Successful exploitation can lead to full system takeover.
CVE-2026-19628 OS Command Injection in tenable (CVE-2026-19628)
OS command injection in tenable (CVE-2026-19628). Successful exploitation can lead to full system takeover.
CVE-2026-12366 Use-After-Free in c (CVE-2026-12366)
vulnerability in c (CVE-2026-12366). Successful exploitation can lead to full system takeover.
CVE-2026-12364 Vulnerability in c (CVE-2026-12364)
vulnerability in c (CVE-2026-12364). Confidential information can be exposed externally.
CVE-2026-46603 Vulnerability in dos (CVE-2026-46603)
vulnerability in dos (CVE-2026-46603). Risk of unauthorized operations or information disclosure.
CVE-2026-66271 Unrestricted File Upload in dell (CVE-2026-66271)
vulnerability in dell (CVE-2026-66271). Successful exploitation can lead to full system takeover.
CVE-2026-66270 Unrestricted File Upload in dell (CVE-2026-66270)
vulnerability in dell (CVE-2026-66270). Successful exploitation can lead to full system takeover.
CVE-2026-63700 Privilege Escalation in privilege-escalation (CVE-2026-63700)
vulnerability in privilege-escalation (CVE-2026-63700). Successful exploitation can lead to full system takeover.
CVE-2026-53970 Vulnerability in CVE-2026-53970 (CVE-2026-53970)
vulnerability in CVE-2026-53970 (CVE-2026-53970). Successful exploitation can lead to full system takeover.
CVE-2026-16772 Privilege Escalation in CVE-2026-16772 (CVE-2026-16772)
vulnerability in CVE-2026-16772 (CVE-2026-16772). Confidential information can be exposed externally. Exploitable via ``UpdateUser``.
CVE-2026-69101 XXE (XML External Entity) in CVE-2026-69101 (CVE-2026-69101)
vulnerability in CVE-2026-69101 (CVE-2026-69101). Confidential information can be exposed externally.
CVE-2026-73633 Vulnerability in apache (CVE-2026-73633)
vulnerability in apache (CVE-2026-73633). Risk of unauthorized operations or information disclosure.
CVE-2026-19768 Code Injection in CVE-2026-19768 (CVE-2026-19768)
code injection in CVE-2026-19768 (CVE-2026-19768). Confidential information can be exposed externally.
CVE-2026-73673 Netis NC63 router firmware V3.0.0.3327 contains an unauthenticated firmware update vulnerability...
Netis NC63 router firmware V3.0.0.3327 contains an unauthenticated firmware update vulnerability...
CVE-2026-19826 A vulnerability was detected in alldatacenter alldata up to 0.6.8. This affects the function...
A vulnerability was detected in alldatacenter alldata up to 0.6.8. This affects the function...
CVE-2026-19825 A security vulnerability has been detected in SourceCodester Simple Client Management System 1.0....
A security vulnerability has been detected in SourceCodester Simple Client Management System 1.0....
CVE-2026-19824 A weakness has been identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. The affected...
A weakness has been identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. The affected...
CVE-2026-19823 A security flaw has been discovered in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. Impacted is...
A security flaw has been discovered in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. Impacted is...
CVE-2026-72859 Authorization Flaw in CVE-2026-72859 (CVE-2026-72859)
vulnerability in CVE-2026-72859 (CVE-2026-72859). Data can be tampered with by attackers.
CVE-2026-72836 Vulnerability in CVE-2026-72836 (CVE-2026-72836)
vulnerability in CVE-2026-72836 (CVE-2026-72836). Successful exploitation can lead to full system takeover.
CVE-2026-72837 Vulnerability in CVE-2026-72837 (CVE-2026-72837)
vulnerability in CVE-2026-72837 (CVE-2026-72837). Successful exploitation can lead to full system takeover.
CVE-2026-72833 Privilege Escalation in privilege-escalation (CVE-2026-72833)
vulnerability in privilege-escalation (CVE-2026-72833). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.0.13` or later.
CVE-2026-72829 Privilege Escalation in CVE-2026-72829 (CVE-2026-72829)
vulnerability in CVE-2026-72829 (CVE-2026-72829). Successful exploitation can lead to full system takeover.
CVE-2026-72830 Privilege Escalation in symfony (CVE-2026-72830)
vulnerability in symfony (CVE-2026-72830). Successful exploitation can lead to full system takeover.
CVE-2026-72826 Vulnerability in CVE-2026-72826 (CVE-2026-72826)
vulnerability in CVE-2026-72826 (CVE-2026-72826). Successful exploitation can lead to full system takeover.
CVE-2026-72827 Vulnerability in CVE-2026-72827 (CVE-2026-72827)
vulnerability in CVE-2026-72827 (CVE-2026-72827). Successful exploitation can lead to full system takeover.
CVE-2026-72828 Privilege Escalation in privilege-escalation (CVE-2026-72828)
vulnerability in privilege-escalation (CVE-2026-72828). Successful exploitation can lead to full system takeover.
CVE-2026-72825 Vulnerability in CVE-2026-72825 (CVE-2026-72825)
vulnerability in CVE-2026-72825 (CVE-2026-72825). Data can be tampered with by attackers. Exploitable via `POST /reports/twig-content/allowlist`.
CVE-2026-72824 Vulnerability in CVE-2026-72824 (CVE-2026-72824)
vulnerability in CVE-2026-72824 (CVE-2026-72824). Successful exploitation can lead to full system takeover.
CVE-2026-72831 Authorization Flaw in CVE-2026-72831 (CVE-2026-72831)
vulnerability in CVE-2026-72831 (CVE-2026-72831). Successful exploitation can lead to full system takeover.
CVE-2026-72822 Vulnerability in CVE-2026-72822 (CVE-2026-72822)
vulnerability in CVE-2026-72822 (CVE-2026-72822). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/users/{user}/2fa/disable`.
CVE-2026-72819 Code Injection in c (CVE-2026-72819)
code injection in c (CVE-2026-72819). Successful exploitation can lead to full system takeover.
CVE-2026-19822 Buffer Overflow in CVE-2026-19822 (CVE-2026-19822)
vulnerability in CVE-2026-19822 (CVE-2026-19822). Successful exploitation can lead to full system takeover.
CVE-2026-19821 Buffer Overflow in CVE-2026-19821 (CVE-2026-19821)
vulnerability in CVE-2026-19821 (CVE-2026-19821). Successful exploitation can lead to full system takeover.
CVE-2026-72810 Vulnerability in CVE-2026-72810 (CVE-2026-72810)
vulnerability in CVE-2026-72810 (CVE-2026-72810). Confidential information can be exposed externally.
CVE-2026-19815 Buffer Overflow in CVE-2026-19815 (CVE-2026-19815)
vulnerability in CVE-2026-19815 (CVE-2026-19815). Successful exploitation can lead to full system takeover.
CVE-2026-19814 Buffer Overflow in CVE-2026-19814 (CVE-2026-19814)
vulnerability in CVE-2026-19814 (CVE-2026-19814). Successful exploitation can lead to full system takeover.
CVE-2026-19813 A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts...
A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts...
CVE-2026-19812 A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the...
A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the...
CVE-2026-19794 The WP-Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up...
The WP-Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up...
CVE-2026-19811 A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted...
A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted...
CVE-2026-18039 Privilege Escalation in wordpress (CVE-2026-18039)
vulnerability in wordpress (CVE-2026-18039). Successful exploitation can lead to full system takeover.
CVE-2026-15205 SQL Injection in wordpress (CVE-2026-15205)
SQL injection in wordpress (CVE-2026-15205). Confidential information can be exposed externally.
CVE-2026-19791 Buffer Overflow in CVE-2026-19791 (CVE-2026-19791)
vulnerability in CVE-2026-19791 (CVE-2026-19791). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →