Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-75834 Cross-Site Scripting (XSS) in CVE-2026-75834 (CVE-2026-75834)
cross-site scripting in CVE-2026-75834 (CVE-2026-75834). Risk of unauthorized operations or information disclosure.
CVE-2026-75827 Code Injection in CVE-2026-75827 (CVE-2026-75827)
code injection in CVE-2026-75827 (CVE-2026-75827). Successful exploitation can lead to full system takeover.
CVE-2026-75830 Vulnerability in path-traversal (CVE-2026-75830)
vulnerability in path-traversal (CVE-2026-75830). Data can be tampered with by attackers. Exploitable via `POST /api/v1/pages/batch`. Mitigation: upgrade to `1.0.15` or later.
CVE-2026-74908 Cross-Site Scripting (XSS) in CVE-2026-74908 (CVE-2026-74908)
cross-site scripting in CVE-2026-74908 (CVE-2026-74908). Risk of unauthorized operations or information disclosure.
CVE-2026-75107 Cross-Site Scripting (XSS) in CVE-2026-75107 (CVE-2026-75107)
cross-site scripting in CVE-2026-75107 (CVE-2026-75107). Risk of unauthorized operations or information disclosure.
CVE-2026-75774 Authentication Bypass in CVE-2026-75774 (CVE-2026-75774)
authentication bypass in CVE-2026-75774 (CVE-2026-75774). Risk of unauthorized operations or information disclosure.
CVE-2026-74907 Path Traversal in path-traversal (CVE-2026-74907)
path traversal in path-traversal (CVE-2026-74907). Confidential information can be exposed externally.
CVE-2026-74906 Authorization Flaw in CVE-2026-74906 (CVE-2026-74906)
vulnerability in CVE-2026-74906 (CVE-2026-74906). Confidential information can be exposed externally.
CVE-2026-74904 Vulnerability in CVE-2026-74904 (CVE-2026-74904)
vulnerability in CVE-2026-74904 (CVE-2026-74904). Confidential information can be exposed externally.
CVE-2026-74903 Vulnerability in CVE-2026-74903 (CVE-2026-74903)
vulnerability in CVE-2026-74903 (CVE-2026-74903). Risk of unauthorized operations or information disclosure.
CVE-2026-15585 Path Traversal in path-traversal (CVE-2026-15585)
path traversal in path-traversal (CVE-2026-15585). Confidential information can be exposed externally.
CVE-2026-74905 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-74905)
SSRF in ssrf (CVE-2026-74905). Confidential information can be exposed externally.
CVE-2026-74902 Cross-Site Scripting (XSS) in c (CVE-2026-74902)
cross-site scripting in c (CVE-2026-74902). Successful exploitation can lead to full system takeover.
CVE-2026-5224 Vulnerability in CVE-2026-5224 (CVE-2026-5224)
vulnerability in CVE-2026-5224 (CVE-2026-5224). Confidential information can be exposed externally.
CVE-2026-75627 Vulnerability in CVE-2026-75627 (CVE-2026-75627)
vulnerability in CVE-2026-75627 (CVE-2026-75627). Successful exploitation can lead to full system takeover.
CVE-2026-75626 Cross-Site Scripting (XSS) in CVE-2026-75626 (CVE-2026-75626)
cross-site scripting in CVE-2026-75626 (CVE-2026-75626). Confidential information can be exposed externally.
CVE-2026-19447 Cross-Site Scripting (XSS) in CVE-2026-19447 (CVE-2026-19447)
cross-site scripting in CVE-2026-19447 (CVE-2026-19447). Risk of unauthorized operations or information disclosure.
CVE-2026-19608 Vulnerability in CVE-2026-19608 (CVE-2026-19608)
vulnerability in CVE-2026-19608 (CVE-2026-19608). Data can be tampered with by attackers.
CVE-2024-14046 Vulnerability in CVE-2024-14046 (CVE-2024-14046)
vulnerability in CVE-2024-14046 (CVE-2024-14046). Risk of unauthorized operations or information disclosure.
CVE-2026-43971 Vulnerability in CVE-2026-43971 (CVE-2026-43971)
vulnerability in CVE-2026-43971 (CVE-2026-43971). Risk of unauthorized operations or information disclosure.
CVE-2026-34884 SSRF (Server-Side Request Forgery) in apache (CVE-2026-34884)
SSRF in apache (CVE-2026-34884). Successful exploitation can lead to full system takeover.
CVE-2024-14045 Vulnerability in CVE-2024-14045 (CVE-2024-14045)
vulnerability in CVE-2024-14045 (CVE-2024-14045). Risk of unauthorized operations or information disclosure.
CVE-2026-15748 Unrestricted File Upload in wordpress (CVE-2026-15748)
vulnerability in wordpress (CVE-2026-15748). Successful exploitation can lead to full system takeover.
CVE-2026-75091 Cross-Site Scripting (XSS) in wordpress (CVE-2026-75091)
cross-site scripting in wordpress (CVE-2026-75091). Risk of unauthorized operations or information disclosure.
CVE-2026-75151 Cross-Site Request Forgery (CSRF) in CVE-2026-75151 (CVE-2026-75151)
vulnerability in CVE-2026-75151 (CVE-2026-75151). Risk of unauthorized operations or information disclosure.
CVE-2026-11801 Vulnerability in wordpress (CVE-2026-11801)
vulnerability in wordpress (CVE-2026-11801). Confidential information can be exposed externally.
CVE-2026-75094 Command Injection in CVE-2026-75094 (CVE-2026-75094)
command injection in CVE-2026-75094 (CVE-2026-75094). Successful exploitation can lead to full system takeover.
CVE-2026-75093 Vulnerability in CVE-2026-75093 (CVE-2026-75093)
vulnerability in CVE-2026-75093 (CVE-2026-75093). Risk of unauthorized operations or information disclosure.
CVE-2026-75090 Buffer Overflow in c (CVE-2026-75090)
vulnerability in c (CVE-2026-75090). Risk of unauthorized operations or information disclosure.
CVE-2026-75088 Vulnerability in sqli (CVE-2026-75088)
vulnerability in sqli (CVE-2026-75088). Risk of unauthorized operations or information disclosure.
CVE-2026-75089 Vulnerability in sqli (CVE-2026-75089)
vulnerability in sqli (CVE-2026-75089). Risk of unauthorized operations or information disclosure.
CVE-2026-75086 Vulnerability in sqli (CVE-2026-75086)
vulnerability in sqli (CVE-2026-75086). Risk of unauthorized operations or information disclosure.
CVE-2026-75087 Vulnerability in sqli (CVE-2026-75087)
vulnerability in sqli (CVE-2026-75087). Risk of unauthorized operations or information disclosure.
CVE-2026-75079 Vulnerability in sqli (CVE-2026-75079)
vulnerability in sqli (CVE-2026-75079). Risk of unauthorized operations or information disclosure.
CVE-2026-75080 Vulnerability in sqli (CVE-2026-75080)
vulnerability in sqli (CVE-2026-75080). Risk of unauthorized operations or information disclosure.
CVE-2026-75082 Vulnerability in CVE-2026-75082 (CVE-2026-75082)
vulnerability in CVE-2026-75082 (CVE-2026-75082). Risk of unauthorized operations or information disclosure.
CVE-2025-62593 KEV [KEV] Code Injection in Ray-project ray (CVE-2025-62593)
code injection in Ray-project ray (CVE-2025-62593). Successful exploitation can lead to full system takeover. Exploitable via ``fetch``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `2.52.0` or later.
CVE-2026-67961 Code Injection in CVE-2026-67961 (CVE-2026-67961)
code injection in CVE-2026-67961 (CVE-2026-67961). Successful exploitation can lead to full system takeover.
CVE-2026-67919 Code Injection in CVE-2026-67919 (CVE-2026-67919)
code injection in CVE-2026-67919 (CVE-2026-67919). Successful exploitation can lead to full system takeover.
CVE-2026-42164 Information Disclosure in CVE-2026-42164 (CVE-2026-42164)
vulnerability in CVE-2026-42164 (CVE-2026-42164). Successful exploitation can lead to full system takeover.
CVE-2026-75587 Information Disclosure in mattermost (CVE-2026-75587)
vulnerability in mattermost (CVE-2026-75587). Risk of unauthorized operations or information disclosure.
CVE-2026-42162 Path Traversal in CVE-2026-42162 (CVE-2026-42162)
path traversal in CVE-2026-42162 (CVE-2026-42162). Confidential information can be exposed externally.
CVE-2026-9693 Vulnerability in mattermost (CVE-2026-9693)
vulnerability in mattermost (CVE-2026-9693). Risk of unauthorized operations or information disclosure.
CVE-2026-75078 Cross-Site Scripting (XSS) in CVE-2026-75078 (CVE-2026-75078)
cross-site scripting in CVE-2026-75078 (CVE-2026-75078). Risk of unauthorized operations or information disclosure.
CVE-2026-38165 Code Injection in CVE-2026-38165 (CVE-2026-38165)
code injection in CVE-2026-38165 (CVE-2026-38165). Successful exploitation can lead to full system takeover.
CVE-2026-9859 Authorization Flaw in mattermost (CVE-2026-9859)
vulnerability in mattermost (CVE-2026-9859). Confidential information can be exposed externally.
CVE-2026-9816 Authorization Flaw in mattermost (CVE-2026-9816)
vulnerability in mattermost (CVE-2026-9816). Data can be tampered with by attackers. Exploitable via `POST /api/v2/boards/{boardID}/members`.
CVE-2026-71424 Information Disclosure in CVE-2026-71424 (CVE-2026-71424)
vulnerability in CVE-2026-71424 (CVE-2026-71424). Confidential information can be exposed externally. Exploitable via `GET /api/mcp/servers`.
CVE-2026-67960 Code Injection in CVE-2026-67960 (CVE-2026-67960)
code injection in CVE-2026-67960 (CVE-2026-67960). Successful exploitation can lead to full system takeover.
CVE-2026-75077 Cross-Site Scripting (XSS) in c (CVE-2026-75077)
cross-site scripting in c (CVE-2026-75077). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →