Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-13613 |
|
SQL Injection in wordpress (CVE-2026-13613)
SQL injection in wordpress (CVE-2026-13613). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15039 |
|
Unrestricted File Upload in wordpress (CVE-2026-15039)
vulnerability in wordpress (CVE-2026-15039). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12233 |
|
Vulnerability in c (CVE-2026-12233)
vulnerability in c (CVE-2026-12233). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12234 |
|
Vulnerability in c (CVE-2026-12234)
vulnerability in c (CVE-2026-12234). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12232 |
|
Out-of-Bounds Read in c (CVE-2026-12232)
vulnerability in c (CVE-2026-12232). Confidential information can be exposed externally.
|
| CVE-2025-15687 |
|
Vulnerability in dos (CVE-2025-15687)
vulnerability in dos (CVE-2025-15687). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18961 |
|
Authentication Bypass in wordpress (CVE-2026-18961)
authentication bypass in wordpress (CVE-2026-18961). Successful exploitation can lead to full system takeover.
|
| CVE-2025-15686 |
|
Vulnerability in dos (CVE-2025-15686)
vulnerability in dos (CVE-2025-15686). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9318 |
|
Cross-Site Scripting (XSS) in tablib (CVE-2026-9318)
cross-site scripting in tablib (CVE-2026-9318). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.10.0` or later.
|
| CVE-2026-72526 |
|
Vulnerability in privilege-escalation (CVE-2026-72526)
vulnerability in privilege-escalation (CVE-2026-72526). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66147 |
|
Code Injection in CVE-2026-66147 (CVE-2026-66147)
code injection in CVE-2026-66147 (CVE-2026-66147). Data can be tampered with by attackers.
|
| CVE-2026-14863 |
|
OS Command Injection in CVE-2026-14863 (CVE-2026-14863)
OS command injection in CVE-2026-14863 (CVE-2026-14863). Successful exploitation can lead to full system takeover.
|
| CVE-2026-29035 |
|
Out-of-Bounds Write in dos (CVE-2026-29035)
out-of-bounds write in dos (CVE-2026-29035). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48762 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-48762)
SSRF in ssrf (CVE-2026-48762). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73232 |
|
Vulnerability in dos (CVE-2026-73232)
vulnerability in dos (CVE-2026-73232). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73031 |
|
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers...
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers...
|
| CVE-2026-73034 |
|
Path Traversal in path-traversal (CVE-2026-73034)
path traversal in path-traversal (CVE-2026-73034). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73032 |
|
Code Injection in CVE-2026-73032 (CVE-2026-73032)
code injection in CVE-2026-73032 (CVE-2026-73032). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66146 |
|
Cross-Site Scripting (XSS) in CVE-2026-66146 (CVE-2026-66146)
cross-site scripting in CVE-2026-66146 (CVE-2026-66146). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66145 |
|
Code Injection in CVE-2026-66145 (CVE-2026-66145)
code injection in CVE-2026-66145 (CVE-2026-66145). Confidential information can be exposed externally.
|
| CVE-2026-19091 |
|
Path Traversal in wordpress (CVE-2026-19091)
path traversal in wordpress (CVE-2026-19091). Data can be tampered with by attackers.
|
| CVE-2026-13457 |
|
Unrestricted File Upload in wordpress (CVE-2026-13457)
vulnerability in wordpress (CVE-2026-13457). Confidential information can be exposed externally.
|
| CVE-2026-73226 |
|
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions t...
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade-func in src/app/server/dispatch-center.js and handle...
|
| CVE-2026-73224 |
|
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user do...
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user downloads a crafted folder and invokes Properties and Calculate Size because calcLocal in src/client/c...
|
| CVE-2026-73222 |
|
Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds t...
Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds to all interfaces on port 3444, permits cross-origin requests, and requires no authentication. The PO...
|
| CVE-2026-72742 |
|
DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field...
DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field...
|
| CVE-2026-18707 |
|
Vulnerability in dos (CVE-2026-18707)
vulnerability in dos (CVE-2026-18707). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18708 |
|
Code Injection in dos (CVE-2026-18708)
code injection in dos (CVE-2026-18708). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18699 |
|
Vulnerability in dos (CVE-2026-18699)
vulnerability in dos (CVE-2026-18699). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18700 |
|
Use-After-Free in dos (CVE-2026-18700)
vulnerability in dos (CVE-2026-18700). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18701 |
|
Vulnerability in dos (CVE-2026-18701)
vulnerability in dos (CVE-2026-18701). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18692 |
|
An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated...
An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated...
|
| CVE-2026-18693 |
|
Out-of-Bounds Write in dos (CVE-2026-18693)
out-of-bounds write in dos (CVE-2026-18693). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18694 |
|
Out-of-Bounds Read in dos (CVE-2026-18694)
vulnerability in dos (CVE-2026-18694). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18695 |
|
Vulnerability in dos (CVE-2026-18695)
vulnerability in dos (CVE-2026-18695). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18697 |
|
Vulnerability in dos (CVE-2026-18697)
vulnerability in dos (CVE-2026-18697). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18691 |
|
An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable...
An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable...
|
| CVE-2026-18688 |
|
Out-of-Bounds Read in dos (CVE-2026-18688)
vulnerability in dos (CVE-2026-18688). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15426 |
|
The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress...
The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress...
|
| CVE-2026-59124 |
|
Unsafe Deserialization in deserialization (CVE-2026-59124)
vulnerability in deserialization (CVE-2026-59124). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58639 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-58639)
SSRF in ssrf (CVE-2026-58639). Confidential information can be exposed externally.
|
| CVE-2026-57105 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-57105)
cross-site scripting in microsoft (CVE-2026-57105). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58612 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-58612)
SSRF in ssrf (CVE-2026-58612). Confidential information can be exposed externally.
|
| CVE-2026-57104 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-57104)
cross-site scripting in microsoft (CVE-2026-57104). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48446 |
|
Path Traversal in path-traversal (CVE-2026-48446)
path traversal in path-traversal (CVE-2026-48446). Confidential information can be exposed externally.
|
| CVE-2026-48442 |
|
Path Traversal in path-traversal (CVE-2026-48442)
path traversal in path-traversal (CVE-2026-48442). Data can be tampered with by attackers.
|
| CVE-2026-47922 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-47922)
SSRF in ssrf (CVE-2026-47922). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35502 |
|
Unsafe Deserialization in deserialization (CVE-2026-35502)
vulnerability in deserialization (CVE-2026-35502). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27765 |
|
Vulnerability in dos (CVE-2026-27765)
vulnerability in dos (CVE-2026-27765). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-25652 |
|
Authorization Flaw in privilege-escalation (CVE-2026-25652)
vulnerability in privilege-escalation (CVE-2026-25652). Successful exploitation can lead to full system takeover.
|