Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-82460 |
|
Path Traversal in path-traversal (CVE-2026-82460)
path traversal in path-traversal (CVE-2026-82460). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82456 |
|
Vulnerability in CVE-2026-82456 (CVE-2026-82456)
vulnerability in CVE-2026-82456 (CVE-2026-82456). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82454 |
|
Vulnerability in CVE-2026-82454 (CVE-2026-82454)
vulnerability in CVE-2026-82454 (CVE-2026-82454). Confidential information can be exposed externally.
|
| CVE-2026-82452 |
|
Vulnerability in c (CVE-2026-82452)
vulnerability in c (CVE-2026-82452). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82448 |
|
Vulnerability in CVE-2026-82448 (CVE-2026-82448)
vulnerability in CVE-2026-82448 (CVE-2026-82448). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14494 |
|
Unrestricted File Upload in wordpress (CVE-2026-14494)
vulnerability in wordpress (CVE-2026-14494). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3627 |
|
Vulnerability in sqli (CVE-2026-3627)
vulnerability in sqli (CVE-2026-3627). Confidential information can be exposed externally.
|
| CVE-2026-19295 |
|
Vulnerability in privilege-escalation (CVE-2026-19295)
vulnerability in privilege-escalation (CVE-2026-19295). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19286 |
|
Code Injection in CVE-2026-19286 (CVE-2026-19286)
code injection in CVE-2026-19286 (CVE-2026-19286). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18527 |
|
Vulnerability in CVE-2026-18527 (CVE-2026-18527)
vulnerability in CVE-2026-18527 (CVE-2026-18527). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82329 |
|
Authentication Bypass in CVE-2026-82329 (CVE-2026-82329)
authentication bypass in CVE-2026-82329 (CVE-2026-82329). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82277 |
|
Vulnerability in csrf (CVE-2026-82277)
vulnerability in csrf (CVE-2026-82277). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82266 |
|
Vulnerability in CVE-2026-82266 (CVE-2026-82266)
vulnerability in CVE-2026-82266 (CVE-2026-82266). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54745 |
|
Vulnerability in CVE-2026-54745 (CVE-2026-54745)
vulnerability in CVE-2026-54745 (CVE-2026-54745). Successful exploitation can lead to full system takeover. Exploitable via `Referer header`.
|
| CVE-2026-55634 |
|
SQL Injection in pimcore/pimcore (CVE-2026-55634)
SQL injection in pimcore/pimcore (CVE-2026-55634). Successful exploitation can lead to full system takeover. Exploitable via ``objects``. Mitigation: upgrade to `2026.1.6` or later.
|
| CVE-2026-55247 |
|
Vulnerability in plone.app.event (CVE-2026-55247)
vulnerability in plone.app.event (CVE-2026-55247). Risk of unauthorized operations or information disclosure. Exploitable via ``plone.app.event``. Mitigation: upgrade to `6.0.1` or later.
|
| CVE-2026-55248 |
|
Vulnerability in plone.app.portlets (CVE-2026-55248)
vulnerability in plone.app.portlets (CVE-2026-55248). Risk of unauthorized operations or information disclosure. Exploitable via ``plone.app.portlets``. Mitigation: upgrade to `5.0.8` or later.
|
| CVE-2026-55565 |
|
Code Injection in org.yamcs:yamcs-core (CVE-2026-55565)
code injection in org.yamcs:yamcs-core (CVE-2026-55565). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/archive/{instance}`. Mitigation: upgrade to `5.12.8` or later.
|
| CVE-2026-55559 |
|
Code Injection in org.yamcs:yamcs-core (CVE-2026-55559)
code injection in org.yamcs:yamcs-core (CVE-2026-55559). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/instances`. Mitigation: upgrade to `5.12.8` or later.
|
| CVE-2026-55511 |
|
Code Injection in org.yamcs:yamcs-core (CVE-2026-55511)
code injection in org.yamcs:yamcs-core (CVE-2026-55511). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/archive/{instance}`. Mitigation: upgrade to `5.12.8` or later.
|
| CVE-2026-54755 |
|
Vulnerability in github.com/klever-io/klever-go (CVE-2026-54755)
vulnerability in github.com/klever-io/klever-go (CVE-2026-54755). Data can be tampered with by attackers. Exploitable via ``uint32``. Mitigation: upgrade to `1.7.19` or later.
|
| CVE-2026-54754 |
|
Vulnerability in github.com/klever-io/klever-go (CVE-2026-54754)
vulnerability in github.com/klever-io/klever-go (CVE-2026-54754). Data can be tampered with by attackers. Exploitable via ``MarketBuy``. Mitigation: upgrade to `1.7.19` or later.
|
| CVE-2026-37751 |
|
OS Command Injection in CVE-2026-37751 (CVE-2026-37751)
OS command injection in CVE-2026-37751 (CVE-2026-37751). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82244 |
|
Code Injection in CVE-2026-82244 (CVE-2026-82244)
code injection in CVE-2026-82244 (CVE-2026-82244). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82222 |
|
Unsafe Deserialization in deserialization (CVE-2026-82222)
vulnerability in deserialization (CVE-2026-82222). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42007 |
|
Use-After-Free in CVE-2026-42007 (CVE-2026-42007)
vulnerability in CVE-2026-42007 (CVE-2026-42007). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-80714 |
|
Vulnerability in CVE-2026-80714 (CVE-2026-80714)
vulnerability in CVE-2026-80714 (CVE-2026-80714). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80694 |
|
Vulnerability in CVE-2026-80694 (CVE-2026-80694)
vulnerability in CVE-2026-80694 (CVE-2026-80694). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80693 |
|
Vulnerability in CVE-2026-80693 (CVE-2026-80693)
vulnerability in CVE-2026-80693 (CVE-2026-80693). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80684 |
|
Vulnerability in CVE-2026-80684 (CVE-2026-80684)
vulnerability in CVE-2026-80684 (CVE-2026-80684). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80681 |
|
Vulnerability in CVE-2026-80681 (CVE-2026-80681)
vulnerability in CVE-2026-80681 (CVE-2026-80681). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80674 |
|
Vulnerability in CVE-2026-80674 (CVE-2026-80674)
vulnerability in CVE-2026-80674 (CVE-2026-80674). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80673 |
|
Vulnerability in CVE-2026-80673 (CVE-2026-80673)
vulnerability in CVE-2026-80673 (CVE-2026-80673). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80671 |
|
Vulnerability in CVE-2026-80671 (CVE-2026-80671)
vulnerability in CVE-2026-80671 (CVE-2026-80671). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80670 |
|
Vulnerability in c (CVE-2026-80670)
vulnerability in c (CVE-2026-80670). Confidential information can be exposed externally.
|
| CVE-2026-80668 |
|
Vulnerability in CVE-2026-80668 (CVE-2026-80668)
vulnerability in CVE-2026-80668 (CVE-2026-80668). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80634 |
|
Vulnerability in CVE-2026-80634 (CVE-2026-80634)
vulnerability in CVE-2026-80634 (CVE-2026-80634). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80630 |
|
Vulnerability in c (CVE-2026-80630)
vulnerability in c (CVE-2026-80630). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80617 |
|
Vulnerability in CVE-2026-80617 (CVE-2026-80617)
vulnerability in CVE-2026-80617 (CVE-2026-80617). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80612 |
|
Vulnerability in CVE-2026-80612 (CVE-2026-80612)
vulnerability in CVE-2026-80612 (CVE-2026-80612). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80609 |
|
Vulnerability in CVE-2026-80609 (CVE-2026-80609)
vulnerability in CVE-2026-80609 (CVE-2026-80609). Successful exploitation can lead to full system takeover.
|
| CVE-2026-80603 |
|
Vulnerability in CVE-2026-80603 (CVE-2026-80603)
vulnerability in CVE-2026-80603 (CVE-2026-80603). Confidential information can be exposed externally.
|
| CVE-2026-80600 |
|
Vulnerability in CVE-2026-80600 (CVE-2026-80600)
vulnerability in CVE-2026-80600 (CVE-2026-80600). Successful exploitation can lead to full system takeover.
|
| CVE-2026-78032 |
|
Unsafe Deserialization in deserialization (CVE-2026-78032)
vulnerability in deserialization (CVE-2026-78032). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76581 |
|
Vulnerability in wordpress (CVE-2026-76581)
vulnerability in wordpress (CVE-2026-76581). Successful exploitation can lead to full system takeover. Exploitable via ``wdpsso_step1``.
|
| CVE-2026-40541 |
|
Cross-Site Scripting (XSS) in CVE-2026-40541 (CVE-2026-40541)
cross-site scripting in CVE-2026-40541 (CVE-2026-40541). Successful exploitation can lead to full system takeover.
|
| CVE-2026-82082 |
|
OS Command Injection in CVE-2026-82082 (CVE-2026-82082)
OS command injection in CVE-2026-82082 (CVE-2026-82082). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61800 |
|
Path Traversal in CVE-2026-61800 (CVE-2026-61800)
path traversal in CVE-2026-61800 (CVE-2026-61800). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76179 |
|
Vulnerability in CVE-2026-76179 (CVE-2026-76179)
vulnerability in CVE-2026-76179 (CVE-2026-76179). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76943 |
|
Vulnerability in CVE-2026-76943 (CVE-2026-76943)
vulnerability in CVE-2026-76943 (CVE-2026-76943). Successful exploitation can lead to full system takeover.
|