Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-289 Clear
ID Title
CVE-2026-15985 Vulnerability in wordpress (CVE-2026-15985)
vulnerability in wordpress (CVE-2026-15985). Successful exploitation can lead to full system takeover.
CVE-2026-32639 Vulnerability in winter/wn-cms-module (CVE-2026-32639)
vulnerability in winter/wn-cms-module (CVE-2026-32639). Confidential information can be exposed externally. Exploitable via ``cms.manage_pages``. Mitigation: upgrade to `1.2.13` or later.
CVE-2026-8457 Vulnerability in wordpress (CVE-2026-8457)
vulnerability in wordpress (CVE-2026-8457). Successful exploitation can lead to full system takeover.
CVE-2026-10842 Vulnerability in ibm (CVE-2026-10842)
vulnerability in ibm (CVE-2026-10842). Confidential information can be exposed externally.
CVE-2026-9701 Vulnerability in wordpress (CVE-2026-9701)
vulnerability in wordpress (CVE-2026-9701). Successful exploitation can lead to full system takeover. Exploitable via ``eventer_verification_code``.
CVE-2026-55075 Authentication Bypass in github.com/coder/coder/v2 (CVE-2026-55075)
authentication bypass in github.com/coder/coder/v2 (CVE-2026-55075). Confidential information can be exposed externally. Exploitable via ``email_verified``. Mitigation: upgrade to `2.29.17` or later.
CVE-2026-48618 Vulnerability in nodejs (CVE-2026-48618)
vulnerability in nodejs (CVE-2026-48618). Confidential information can be exposed externally.
CVE-2026-56091 Vulnerability in apache (CVE-2026-56091)
vulnerability in apache (CVE-2026-56091). Risk of unauthorized operations or information disclosure.
CVE-2026-53622 Vulnerability in Traefik (CVE-2026-53622)
vulnerability in Traefik (CVE-2026-53622). Confidential information can be exposed externally. Exploitable via ``Host``. Mitigation: upgrade to `3.7.3` or later.
CVE-2026-50627 Vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50627)
vulnerability in org.apache.cxf:cxf-rt-rs-security-oauth2 (CVE-2026-50627). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.7` or later.
CVE-2026-44492 SSRF (Server-Side Request Forgery) in axios (CVE-2026-44492)
SSRF in axios (CVE-2026-44492). Confidential information can be exposed externally. Mitigation: upgrade to `1.16.0` or later.
CVE-2026-43617 Vulnerability in samba (CVE-2026-43617)
vulnerability in samba (CVE-2026-43617). Risk of unauthorized operations or information disclosure.
CVE-2026-39858 Vulnerability in github.com/traefik/traefik (CVE-2026-39858)
vulnerability in github.com/traefik/traefik (CVE-2026-39858). Confidential information can be exposed externally. Exploitable via `GET /protected`. Mitigation: upgrade to `2.11.43` or later.
CVE-2026-3184 Vulnerability in kernel (CVE-2026-3184)
vulnerability in kernel (CVE-2026-3184). Risk of unauthorized operations or information disclosure. Exploitable via ``PAM_RHOST``.
CVE-2026-23903 Vulnerability in spring (CVE-2026-23903)
vulnerability in spring (CVE-2026-23903). Risk of unauthorized operations or information disclosure.
CVE-2025-55130 Vulnerability in node-min (CVE-2025-55130)
vulnerability in node-min (CVE-2025-55130). Confidential information can be exposed externally. Mitigation: upgrade to `20.20.0, 22.22.0, 24.13.0, 25.3.0` or later.
CVE-2023-1803 Vulnerability in redline (CVE-2023-1803)
vulnerability in redline (CVE-2023-1803). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →