Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-38969 Vulnerability in CVE-2026-38969 (CVE-2026-38969)
vulnerability in CVE-2026-38969 (CVE-2026-38969). Data can be tampered with by attackers.
CVE-2026-59095 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-59095)
SSRF in ssrf (CVE-2026-59095). Confidential information can be exposed externally.
CVE-2026-59096 Vulnerability in CVE-2026-59096 (CVE-2026-59096)
vulnerability in CVE-2026-59096 (CVE-2026-59096). Data can be tampered with by attackers. Exploitable via `Host header`.
CVE-2026-59093 Vulnerability in weaviate (CVE-2026-59093)
vulnerability in weaviate (CVE-2026-59093). Successful exploitation can lead to full system takeover. Exploitable via `POST /authz/users/{id}/assign`.
CVE-2026-59094 Vulnerability in CVE-2026-59094 (CVE-2026-59094)
vulnerability in CVE-2026-59094 (CVE-2026-59094). Risk of unauthorized operations or information disclosure.
CVE-2026-59092 Vulnerability in dos (CVE-2026-59092)
vulnerability in dos (CVE-2026-59092). Confidential information can be exposed externally.
CVE-2026-58467 Path Traversal in nginx (CVE-2026-58467)
path traversal in nginx (CVE-2026-58467). Confidential information can be exposed externally.
CVE-2026-52187 Vulnerability in dos (CVE-2026-52187)
vulnerability in dos (CVE-2026-52187). Risk of unauthorized operations or information disclosure.
CVE-2026-7311 Path Traversal in wordpress (CVE-2026-7311)
path traversal in wordpress (CVE-2026-7311). Data can be tampered with by attackers.
CVE-2026-58465 Vulnerability in c (CVE-2026-58465)
vulnerability in c (CVE-2026-58465). Risk of unauthorized operations or information disclosure.
CVE-2026-44454 OS Command Injection in github.com/coder/coder/v2 (CVE-2026-44454)
OS command injection in github.com/coder/coder/v2 (CVE-2026-44454). Confidential information can be exposed externally. Exploitable via ``dotfiles``. Mitigation: upgrade to `2.30.2` or later.
CVE-2026-55952 Vulnerability in erlang (CVE-2026-55952)
vulnerability in erlang (CVE-2026-55952). Risk of unauthorized operations or information disclosure.
CVE-2024-58352 Vulnerability in CVE-2024-58352 (CVE-2024-58352)
vulnerability in CVE-2024-58352 (CVE-2024-58352). Confidential information can be exposed externally.
CVE-2026-44941 Vulnerability in path-traversal (CVE-2026-44941)
vulnerability in path-traversal (CVE-2026-44941). Successful exploitation can lead to full system takeover.
CVE-2026-56842 Authorization Flaw in ui (CVE-2026-56842)
vulnerability in ui (CVE-2026-56842). Successful exploitation can lead to full system takeover.
CVE-2026-9272 SQL Injection in progress (CVE-2026-9272)
SQL injection in progress (CVE-2026-9272). Confidential information can be exposed externally.
CVE-2026-8079 Authorization Flaw in progress (CVE-2026-8079)
vulnerability in progress (CVE-2026-8079). Confidential information can be exposed externally.
CVE-2026-55119 Vulnerability in CVE-2026-55119 (CVE-2026-55119)
vulnerability in CVE-2026-55119 (CVE-2026-55119). Confidential information can be exposed externally.
CVE-2026-56841 SQL Injection in sqli (CVE-2026-56841)
SQL injection in sqli (CVE-2026-56841). Successful exploitation can lead to full system takeover.
CVE-2026-55118 Vulnerability in ui (CVE-2026-55118)
vulnerability in ui (CVE-2026-55118). Data can be tampered with by attackers.
CVE-2026-55117 Path Traversal in path-traversal (CVE-2026-55117)
path traversal in path-traversal (CVE-2026-55117). Confidential information can be exposed externally.
CVE-2026-55114 Vulnerability in ui (CVE-2026-55114)
vulnerability in ui (CVE-2026-55114). Successful exploitation can lead to full system takeover.
CVE-2026-55113 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-55113)
SSRF in ssrf (CVE-2026-55113). Risk of unauthorized operations or information disclosure.
CVE-2026-55112 Vulnerability in CVE-2026-55112 (CVE-2026-55112)
vulnerability in CVE-2026-55112 (CVE-2026-55112). Successful exploitation can lead to full system takeover.
CVE-2026-54408 Vulnerability in ui (CVE-2026-54408)
vulnerability in ui (CVE-2026-54408). Confidential information can be exposed externally.
CVE-2026-55111 Path Traversal in path-traversal (CVE-2026-55111)
path traversal in path-traversal (CVE-2026-55111). Confidential information can be exposed externally.
CVE-2026-55110 Vulnerability in CVE-2026-55110 (CVE-2026-55110)
vulnerability in CVE-2026-55110 (CVE-2026-55110). Successful exploitation can lead to full system takeover.
CVE-2026-54409 Vulnerability in ui (CVE-2026-54409)
vulnerability in ui (CVE-2026-54409). Successful exploitation can lead to full system takeover.
CVE-2026-54407 Vulnerability in ui (CVE-2026-54407)
vulnerability in ui (CVE-2026-54407). Risk of unauthorized operations or information disclosure.
CVE-2026-54404 SQL Injection in sqli (CVE-2026-54404)
SQL injection in sqli (CVE-2026-54404). Successful exploitation can lead to full system takeover.
CVE-2026-54403 Path Traversal in path-traversal (CVE-2026-54403)
path traversal in path-traversal (CVE-2026-54403). Confidential information can be exposed externally.
CVE-2026-54401 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-54401)
SSRF in ssrf (CVE-2026-54401). Confidential information can be exposed externally.
CVE-2026-58652 OS Command Injection in CVE-2026-58652 (CVE-2026-58652)
OS command injection in CVE-2026-58652 (CVE-2026-58652). Successful exploitation can lead to full system takeover.
CVE-2026-54406 Path Traversal in path-traversal (CVE-2026-54406)
path traversal in path-traversal (CVE-2026-54406). Data can be tampered with by attackers.
CVE-2026-54405 Vulnerability in dos (CVE-2026-54405)
vulnerability in dos (CVE-2026-54405). Risk of unauthorized operations or information disclosure.
CVE-2026-12168 Vulnerability in CVE-2026-12168 (CVE-2026-12168)
vulnerability in CVE-2026-12168 (CVE-2026-12168). Successful exploitation can lead to full system takeover. Exploitable via ``GFAC_Sys_x64.sys``.
CVE-2026-12167 Vulnerability in CVE-2026-12167 (CVE-2026-12167)
vulnerability in CVE-2026-12167 (CVE-2026-12167). Successful exploitation can lead to full system takeover. Exploitable via ``GFAC_Sys_x64.sys``.
CVE-2026-57765 Contributor SQL Injection in WP EasyCart <= 5.9.0 versions.
Contributor SQL Injection in WP EasyCart <= 5.9.0 versions.
CVE-2026-57766 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57766)
vulnerability in csrf (CVE-2026-57766). Successful exploitation can lead to full system takeover.
CVE-2026-57759 Unauthenticated Cross Site Request Forgery (CSRF) in ProfileGrid <= 5.9.9.7 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in ProfileGrid <= 5.9.9.7 versions.
CVE-2026-57761 Unauthenticated Cross Site Request Forgery (CSRF) in SEOWP <= 3.12.2 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in SEOWP <= 3.12.2 versions.
CVE-2026-57751 Unauthenticated Cross Site Request Forgery (CSRF) in Heateor Social Login <= 1.1.39 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in Heateor Social Login <= 1.1.39 versions.
CVE-2026-57682 Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions.
CVE-2026-57758 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57758)
vulnerability in csrf (CVE-2026-57758). Risk of unauthorized operations or information disclosure.
CVE-2026-57752 Contributor SQL Injection in iNET Webkit 1.2.4 versions.
Contributor SQL Injection in iNET Webkit 1.2.4 versions.
CVE-2026-57749 Contributor Local File Inclusion in SportsPress Pro <= 2.7.29 versions.
Contributor Local File Inclusion in SportsPress Pro <= 2.7.29 versions.
CVE-2026-57757 Unauthenticated Cross Site Request Forgery (CSRF) in pCloud WP Backup <= 2.0.2 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in pCloud WP Backup <= 2.0.2 versions.
CVE-2026-57686 Unauthenticated Cross Site Scripting (XSS) in WowAddons <= 1.6.14 versions.
Unauthenticated Cross Site Scripting (XSS) in WowAddons <= 1.6.14 versions.
CVE-2026-57687 Contributor SQL Injection in Custom Field Template <= 2.7.8 versions.
Contributor SQL Injection in Custom Field Template <= 2.7.8 versions.
CVE-2026-57748 Contributor Local File Inclusion in Shopify <= 1.0.0 versions.
Contributor Local File Inclusion in Shopify <= 1.0.0 versions.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →