Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-19355 |
|
Vulnerability in sqli (CVE-2026-19355)
vulnerability in sqli (CVE-2026-19355). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19351 |
|
Vulnerability in sqli (CVE-2026-19351)
vulnerability in sqli (CVE-2026-19351). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19346 |
|
Vulnerability in CVE-2026-19346 (CVE-2026-19346)
vulnerability in CVE-2026-19346 (CVE-2026-19346). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19344 |
|
Vulnerability in sqli (CVE-2026-19344)
vulnerability in sqli (CVE-2026-19344). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19343 |
|
Vulnerability in sqli (CVE-2026-19343)
vulnerability in sqli (CVE-2026-19343). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19342 |
|
Authentication Bypass in CVE-2026-19342 (CVE-2026-19342)
authentication bypass in CVE-2026-19342 (CVE-2026-19342). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19341 |
|
Buffer Overflow in CVE-2026-19341 (CVE-2026-19341)
vulnerability in CVE-2026-19341 (CVE-2026-19341). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18464 |
|
Vulnerability in wordpress (CVE-2026-18464)
vulnerability in wordpress (CVE-2026-18464). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18357 |
|
Information Disclosure in wordpress (CVE-2026-18357)
vulnerability in wordpress (CVE-2026-18357). Confidential information can be exposed externally.
|
| CVE-2026-17017 |
|
SQL Injection in wordpress (CVE-2026-17017)
SQL injection in wordpress (CVE-2026-17017). Confidential information can be exposed externally.
|
| CVE-2026-16988 |
|
Information Disclosure in wordpress (CVE-2026-16988)
vulnerability in wordpress (CVE-2026-16988). Confidential information can be exposed externally.
|
| CVE-2026-18032 |
|
Information Disclosure in wordpress (CVE-2026-18032)
vulnerability in wordpress (CVE-2026-18032). Confidential information can be exposed externally.
|
| CVE-2026-17044 |
|
SQL Injection in wordpress (CVE-2026-17044)
SQL injection in wordpress (CVE-2026-17044). Confidential information can be exposed externally.
|
| CVE-2026-10595 |
|
Vulnerability in path-traversal (CVE-2026-10595)
vulnerability in path-traversal (CVE-2026-10595). Confidential information can be exposed externally. Exploitable via ``pathlib``.
|
| CVE-2026-17510 |
|
Vulnerability in CVE-2026-17510 (CVE-2026-17510)
vulnerability in CVE-2026-17510 (CVE-2026-17510). Risk of unauthorized operations or information disclosure. Exploitable via ``strncpy``.
|
| CVE-2026-67620 |
|
Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard...
Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard...
|
| CVE-2026-42170 |
|
A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file...
A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file...
|
| CVE-2026-19263 |
|
Vulnerability in CVE-2026-19263 (CVE-2026-19263)
vulnerability in CVE-2026-19263 (CVE-2026-19263). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16948 |
|
Vulnerability in wordpress (CVE-2026-16948)
vulnerability in wordpress (CVE-2026-16948). Data can be tampered with by attackers.
|
| CVE-2026-16594 |
|
Information Disclosure in wordpress (CVE-2026-16594)
vulnerability in wordpress (CVE-2026-16594). Confidential information can be exposed externally.
|
| CVE-2026-16589 |
|
SQL Injection in wordpress (CVE-2026-16589)
SQL injection in wordpress (CVE-2026-16589). Confidential information can be exposed externally.
|
| CVE-2026-16578 |
|
Information Disclosure in wordpress (CVE-2026-16578)
vulnerability in wordpress (CVE-2026-16578). Confidential information can be exposed externally.
|
| CVE-2026-16267 |
|
Unsafe Deserialization in wordpress (CVE-2026-16267)
vulnerability in wordpress (CVE-2026-16267). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48120 |
|
Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, `autorestore.kak` script can be exploited by malicious backup files leading to arbitrary kakoune and shell comma...
Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, `autorestore.kak` script can be exploited by malicious backup files leading to arbitrary kakoune and shell commands being executed by simply opening a file. Kakoune 2026.05.21 fixes the issue. As a workaround, ad...
|
| CVE-2026-48026 |
|
lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to version 1.81.1 of the open source edition and 1.84.0 of the enterprise edition, lakeFS Web UI render...
lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to version 1.81.1 of the open source edition and 1.84.0 of the enterprise edition, lakeFS Web UI renders markdown files from repository objects without sanitizing the resulting HTML. A user with write ac...
|
| CVE-2026-15972 |
|
Vulnerability in dos (CVE-2026-15972)
vulnerability in dos (CVE-2026-15972). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66061 |
|
Vulnerability in CVE-2026-66061 (CVE-2026-66061)
vulnerability in CVE-2026-66061 (CVE-2026-66061). Data can be tampered with by attackers.
|
| CVE-2026-66060 |
|
Vulnerability in CVE-2026-66060 (CVE-2026-66060)
vulnerability in CVE-2026-66060 (CVE-2026-66060). Data can be tampered with by attackers.
|
| CVE-2026-65819 |
|
Out-of-Bounds Read in CVE-2026-65819 (CVE-2026-65819)
vulnerability in CVE-2026-65819 (CVE-2026-65819). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62296 |
|
Vulnerability in CVE-2026-62296 (CVE-2026-62296)
vulnerability in CVE-2026-62296 (CVE-2026-62296). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62295 |
|
Vulnerability in CVE-2026-62295 (CVE-2026-62295)
vulnerability in CVE-2026-62295 (CVE-2026-62295). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71409 |
|
Vulnerability in cisa (CVE-2025-71409)
vulnerability in cisa (CVE-2025-71409). Data can be tampered with by attackers.
|
| CVE-2026-48098 |
|
OS Command Injection in CVE-2026-48098 (CVE-2026-48098)
OS command injection in CVE-2026-48098 (CVE-2026-48098). Confidential information can be exposed externally. Exploitable via ``sudo``.
|
| CVE-2026-48097 |
|
OS Command Injection in CVE-2026-48097 (CVE-2026-48097)
OS command injection in CVE-2026-48097 (CVE-2026-48097). Successful exploitation can lead to full system takeover. Exploitable via ``PATH``.
|
| CVE-2026-19231 |
|
Vulnerability in sqli (CVE-2026-19231)
vulnerability in sqli (CVE-2026-19231). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11430 |
|
Vulnerability in CVE-2026-11430 (CVE-2026-11430)
vulnerability in CVE-2026-11430 (CVE-2026-11430). Risk of unauthorized operations or information disclosure. Exploitable via `POST /scheduler/webhook`.
|
| CVE-2025-71412 |
|
Vulnerability in CVE-2025-71412 (CVE-2025-71412)
vulnerability in CVE-2025-71412 (CVE-2025-71412). Data can be tampered with by attackers.
|
| CVE-2025-63235 |
|
Vulnerability in dos (CVE-2025-63235)
vulnerability in dos (CVE-2025-63235). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64636 |
|
SQL Injection in sqli (CVE-2026-64636)
SQL injection in sqli (CVE-2026-64636). Confidential information can be exposed externally.
|
| CVE-2026-19082 |
|
Out-of-Bounds Read in CVE-2026-19082 (CVE-2026-19082)
vulnerability in CVE-2026-19082 (CVE-2026-19082). Confidential information can be exposed externally.
|
| CVE-2026-68772 |
|
Unsafe Deserialization in CVE-2026-68772 (CVE-2026-68772)
vulnerability in CVE-2026-68772 (CVE-2026-68772). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20348 |
|
Vulnerability in dos (CVE-2026-20348)
vulnerability in dos (CVE-2026-20348). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20347 |
|
Out-of-Bounds Read in dos (CVE-2026-20347)
vulnerability in dos (CVE-2026-20347). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20346 |
|
Out-of-Bounds Read in dos (CVE-2026-20346)
vulnerability in dos (CVE-2026-20346). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20345 |
|
Vulnerability in dos (CVE-2026-20345)
vulnerability in dos (CVE-2026-20345). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20339 |
|
Vulnerability in dos (CVE-2026-20339)
vulnerability in dos (CVE-2026-20339). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20338 |
|
Vulnerability in dos (CVE-2026-20338)
vulnerability in dos (CVE-2026-20338). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19211 |
|
Vulnerability in sqli (CVE-2026-19211)
vulnerability in sqli (CVE-2026-19211). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71556 |
|
Vulnerability in github.com/go-git/go-git/v5 (CVE-2026-71556)
vulnerability in github.com/go-git/go-git/v5 (CVE-2026-71556). Data can be tampered with by attackers. Exploitable via ``worktreeFilesystem``. Mitigation: upgrade to `5.19.2` or later.
|
| CVE-2026-20337 |
|
Vulnerability in Cisco dos (CVE-2026-20337)
vulnerability in Cisco dos (CVE-2026-20337). Risk of unauthorized operations or information disclosure.
|