Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-94 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-18874	Code Injection in CVE-2026-18874 (CVE-2026-18874) code injection in CVE-2026-18874 (CVE-2026-18874). Data can be tampered with by attackers.	Medium	Cwe 94	1 week ago
CVE-2026-72530 KEV	[KEV] Code Injection in trueconf (CVE-2026-72530) code injection in trueconf (CVE-2026-72530). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Cwe 94 Trueconf Trueconf Server	1 week ago
CVE-2026-64850	Code Injection in CVE-2026-64850 (CVE-2026-64850) code injection in CVE-2026-64850 (CVE-2026-64850). Risk of unauthorized operations or information disclosure.		PHP Cwe 94	1 week ago
CVE-2026-53451	Path Traversal in path-traversal (CVE-2026-53451) path traversal in path-traversal (CVE-2026-53451). Successful exploitation can lead to full system takeover.	Critical	Path Traversal Cwe 22 Cwe 73 Cwe 94	1 week ago
CVE-2026-45272	Code Injection in CVE-2026-45272 (CVE-2026-45272) code injection in CVE-2026-45272 (CVE-2026-45272). Risk of unauthorized operations or information disclosure.		Python Cwe 94 Cwe 829	1 week ago
CVE-2026-76224	Code Injection in CVE-2026-76224 (CVE-2026-76224) code injection in CVE-2026-76224 (CVE-2026-76224). Successful exploitation can lead to full system takeover.	High	Java Remote Code Execution Cwe 94	1 week ago
CVE-2026-43961	Code Injection in CVE-2026-43961 (CVE-2026-43961) code injection in CVE-2026-43961 (CVE-2026-43961). Successful exploitation can lead to full system takeover.	High	Cwe 94	1 week ago
CVE-2026-67364	Code Injection in c (CVE-2026-67364) code injection in c (CVE-2026-67364). Risk of unauthorized operations or information disclosure.		PHP C Cross-Site Request Forgery Cwe 94	1 week ago
CVE-2026-18937	Code Injection in wordpress (CVE-2026-18937) code injection in wordpress (CVE-2026-18937). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Cwe 94	1 week ago
CVE-2026-75911	Code Injection in CVE-2026-75911 (CVE-2026-75911) code injection in CVE-2026-75911 (CVE-2026-75911). Successful exploitation can lead to full system takeover.	High	Cwe 94	1 week ago
CVE-2026-75858	Code Injection in CVE-2026-75858 (CVE-2026-75858) code injection in CVE-2026-75858 (CVE-2026-75858). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.8.64` or later.	High	Python Remote Code Execution Cwe 94	1 week ago
CVE-2026-73073	Code Injection in c (CVE-2026-73073) code injection in c (CVE-2026-73073). Risk of unauthorized operations or information disclosure.		C Cwe 94 Cwe 829	1 week ago
CVE-2026-45117	Code Injection in CVE-2026-45117 (CVE-2026-45117) code injection in CVE-2026-45117 (CVE-2026-45117). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 94	1 week ago
CVE-2026-73343	Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions. Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.	Critical	Remote Code Execution Cwe 94	1 week ago
CVE-2026-32444	Contributor Remote Code Execution (RCE) in Cwicly <= 1.4.4 versions. Contributor Remote Code Execution (RCE) in Cwicly <= 1.4.4 versions.	Critical	Remote Code Execution Cwe 94	1 week ago
CVE-2026-50187	Code Injection in CVE-2026-50187 (CVE-2026-50187) code injection in CVE-2026-50187 (CVE-2026-50187). Successful exploitation can lead to full system takeover.	High	Cwe 94	1 week ago
CVE-2026-75827	Code Injection in CVE-2026-75827 (CVE-2026-75827) code injection in CVE-2026-75827 (CVE-2026-75827). Successful exploitation can lead to full system takeover.	High	PHP Remote Code Execution Cwe 94	1 week ago
CVE-2025-62593 KEV	[KEV] Cross-Site Request Forgery (CSRF) in Ray-project ray (CVE-2025-62593) vulnerability in Ray-project ray (CVE-2025-62593). Successful exploitation can lead to full system takeover. Exploitable via ``fetch``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `2.52.0` or later.	High	Remote Code Execution Cwe 94 Cwe 352 Anyscale +1	1 week ago
CVE-2026-67961	Code Injection in CVE-2026-67961 (CVE-2026-67961) code injection in CVE-2026-67961 (CVE-2026-67961). Successful exploitation can lead to full system takeover.	High	Cwe 94	1 week ago
CVE-2026-67919	Code Injection in CVE-2026-67919 (CVE-2026-67919) code injection in CVE-2026-67919 (CVE-2026-67919). Successful exploitation can lead to full system takeover.	Critical	Java Cwe 94	1 week ago
CVE-2026-75078	Cross-Site Scripting (XSS) in CVE-2026-75078 (CVE-2026-75078) cross-site scripting in CVE-2026-75078 (CVE-2026-75078). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Cwe 94	1 week ago
CVE-2026-38165	Code Injection in CVE-2026-38165 (CVE-2026-38165) code injection in CVE-2026-38165 (CVE-2026-38165). Successful exploitation can lead to full system takeover.	Critical	Cwe 94	1 week ago
CVE-2026-67960	Code Injection in CVE-2026-67960 (CVE-2026-67960) code injection in CVE-2026-67960 (CVE-2026-67960). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 94	1 week ago
CVE-2026-75077	Cross-Site Scripting (XSS) in c (CVE-2026-75077) cross-site scripting in c (CVE-2026-75077). Risk of unauthorized operations or information disclosure.	Medium	PHP C Cross-Site Scripting Cwe 79 +1	1 week ago
CVE-2026-67926	Code Injection in CVE-2026-67926 (CVE-2026-67926) code injection in CVE-2026-67926 (CVE-2026-67926). Successful exploitation can lead to full system takeover.	Critical	Cwe 94	1 week ago
CVE-2026-34789	Code Injection in cpp (CVE-2026-34789) code injection in cpp (CVE-2026-34789). Successful exploitation can lead to full system takeover.	High	Python C++ Cwe 94	1 week ago
CVE-2026-19478	Code Injection in CVE-2026-19478 (CVE-2026-19478) code injection in CVE-2026-19478 (CVE-2026-19478). Data can be tampered with by attackers.	Critical	Cwe 94	1 week ago
CVE-2026-74253	Code Injection in CVE-2026-74253 (CVE-2026-74253) code injection in CVE-2026-74253 (CVE-2026-74253). Risk of unauthorized operations or information disclosure.		Remote Code Execution Cwe 94	1 week ago
CVE-2026-50772	Code Injection in CVE-2026-50772 (CVE-2026-50772) code injection in CVE-2026-50772 (CVE-2026-50772). Successful exploitation can lead to full system takeover.	Critical	Cwe 94	1 week ago
CVE-2026-59894	Code Injection in sqlparse (CVE-2026-59894) code injection in sqlparse (CVE-2026-59894). Risk of unauthorized operations or information disclosure. Exploitable via ``EVOHUNT_OUTPUT_FORMAT_INJECTION_VERIFIED``. Mitigation: upgrade to `0.6.0` or later.		PHP Python Cwe 94	1 week ago
CVE-2026-19998	Cross-Site Scripting (XSS) in CVE-2026-19998 (CVE-2026-19998) cross-site scripting in CVE-2026-19998 (CVE-2026-19998). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Cwe 94	1 week ago
CVE-2026-19995	Cross-Site Scripting (XSS) in CVE-2026-19995 (CVE-2026-19995) cross-site scripting in CVE-2026-19995 (CVE-2026-19995). Risk of unauthorized operations or information disclosure.	Low	Cross-Site Scripting Cwe 79 Cwe 94	1 week ago
CVE-2026-19980	Vulnerability in CVE-2026-19980 (CVE-2026-19980) vulnerability in CVE-2026-19980 (CVE-2026-19980). Risk of unauthorized operations or information disclosure.	High	Cwe 74 Cwe 94	1 week ago
CVE-2026-19964	Vulnerability in CVE-2026-19964 (CVE-2026-19964) vulnerability in CVE-2026-19964 (CVE-2026-19964). Risk of unauthorized operations or information disclosure.	Medium	Cwe 74 Cwe 94	1 week ago
CVE-2026-19958	Vulnerability in CVE-2026-19958 (CVE-2026-19958) vulnerability in CVE-2026-19958 (CVE-2026-19958). Risk of unauthorized operations or information disclosure.	Medium	Cwe 74 Cwe 94	1 week ago
CVE-2026-19932	Vulnerability in CVE-2026-19932 (CVE-2026-19932) vulnerability in CVE-2026-19932 (CVE-2026-19932). Risk of unauthorized operations or information disclosure.	Medium	Cwe 74 Cwe 94	2 weeks ago
CVE-2026-18385	Code Injection in wordpress (CVE-2026-18385) code injection in wordpress (CVE-2026-18385). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 94	2 weeks ago
CVE-2026-17581	Code Injection in wordpress (CVE-2026-17581) code injection in wordpress (CVE-2026-17581). Successful exploitation can lead to full system takeover.	High	PHP WordPress Remote Code Execution Cwe 94	2 weeks ago
CVE-2026-19922	Cross-Site Scripting (XSS) in CVE-2026-19922 (CVE-2026-19922) cross-site scripting in CVE-2026-19922 (CVE-2026-19922). Risk of unauthorized operations or information disclosure.	Low	PHP Cross-Site Scripting Cwe 79 Cwe 94	2 weeks ago
CVE-2026-19916	Cross-Site Scripting (XSS) in CVE-2026-19916 (CVE-2026-19916) cross-site scripting in CVE-2026-19916 (CVE-2026-19916). Risk of unauthorized operations or information disclosure.	Low	PHP Cross-Site Scripting Cwe 79 Cwe 94	2 weeks ago
CVE-2026-19904	Cross-Site Scripting (XSS) in CVE-2026-19904 (CVE-2026-19904) cross-site scripting in CVE-2026-19904 (CVE-2026-19904). Risk of unauthorized operations or information disclosure.	Low	PHP Cross-Site Scripting Cwe 79 Cwe 94	2 weeks ago
CVE-2026-73679	Code Injection in CVE-2026-73679 (CVE-2026-73679) code injection in CVE-2026-73679 (CVE-2026-73679). Successful exploitation can lead to full system takeover.	High	PHP Remote Code Execution Cwe 94	2 weeks ago
CVE-2026-73678	Code Injection in c (CVE-2026-73678) code injection in c (CVE-2026-73678). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/responses/`.	Critical	Python C Remote Code Execution Cwe 94	2 weeks ago
CVE-2026-19768	Code Injection in CVE-2026-19768 (CVE-2026-19768) code injection in CVE-2026-19768 (CVE-2026-19768). Confidential information can be exposed externally.	High	Cwe 94	2 weeks ago
CVE-2026-72819	Code Injection in c (CVE-2026-72819) code injection in c (CVE-2026-72819). Successful exploitation can lead to full system takeover.	High	PHP C Remote Code Execution Cwe 94	2 weeks ago
CVE-2026-72676	Code Injection in CVE-2026-72676 (CVE-2026-72676) code injection in CVE-2026-72676 (CVE-2026-72676). Confidential information can be exposed externally.	Medium	Cwe 94	2 weeks ago
CVE-2026-67986	Code Injection in CVE-2026-67986 (CVE-2026-67986) code injection in CVE-2026-67986 (CVE-2026-67986). Successful exploitation can lead to full system takeover.	High	Ruby Cwe 94	2 weeks ago
CVE-2026-61962	Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions. Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions.	Critical	Cwe 94	2 weeks ago
CVE-2026-27544	Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions. Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions.	Critical	Remote Code Execution Cwe 94	2 weeks ago
CVE-2026-73487	Code Injection in ssrf (CVE-2026-73487) code injection in ssrf (CVE-2026-73487). Risk of unauthorized operations or information disclosure.		Python Server-Side Request Forgery Cwe 94	2 weeks ago

Vulnerabilities

🍪 About cookies