Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-17350 |
|
Vulnerability in flask (CVE-2026-17350)
vulnerability in flask (CVE-2026-17350). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17348 |
|
Vulnerability in pgadmin (CVE-2026-17348)
vulnerability in pgadmin (CVE-2026-17348). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16504 |
|
Vulnerability in CVE-2026-16504 (CVE-2026-16504)
vulnerability in CVE-2026-16504 (CVE-2026-16504). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17346 |
|
The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched sixteen COMMENT ON /...
The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched sixteen COMMENT ON /...
|
| CVE-2026-16503 |
|
Vulnerability in CVE-2026-16503 (CVE-2026-16503)
vulnerability in CVE-2026-16503 (CVE-2026-16503). Confidential information can be exposed externally.
|
| CVE-2026-10686 |
|
Vulnerability in c (CVE-2026-10686)
vulnerability in c (CVE-2026-10686). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-62347 |
|
Vulnerability in CVE-2025-62347 (CVE-2025-62347)
vulnerability in CVE-2025-62347 (CVE-2025-62347). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52855 |
|
Information Disclosure in github.com/pterodactyl/wings (CVE-2026-52855)
vulnerability in github.com/pterodactyl/wings (CVE-2026-52855). Successful exploitation can lead to full system takeover. Exploitable via ``startup.update``. Mitigation: upgrade to `1.12.3` or later.
|
| CVE-2026-52857 |
|
Vulnerability in github.com/pterodactyl/wings (CVE-2026-52857)
vulnerability in github.com/pterodactyl/wings (CVE-2026-52857). Risk of unauthorized operations or information disclosure. Exploitable via ``json``. Mitigation: upgrade to `1.13.0` or later.
|
| CVE-2026-67350 |
|
Open Redirect in CVE-2026-67350 (CVE-2026-67350)
vulnerability in CVE-2026-67350 (CVE-2026-67350). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18446 |
|
Vulnerability in fast-uri (CVE-2026-18446)
vulnerability in fast-uri (CVE-2026-18446). Data can be tampered with by attackers. Exploitable via ``URL``. Mitigation: upgrade to `4.1.2` or later.
|
| CVE-2026-10685 |
|
Use-After-Free in c (CVE-2026-10685)
vulnerability in c (CVE-2026-10685). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65636 |
|
Vulnerability in CVE-2026-65636 (CVE-2026-65636)
vulnerability in CVE-2026-65636 (CVE-2026-65636). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17561 |
|
Code Injection in CVE-2026-17561 (CVE-2026-17561)
code injection in CVE-2026-17561 (CVE-2026-17561). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18358 |
|
Vulnerability in CVE-2026-18358 (CVE-2026-18358)
vulnerability in CVE-2026-18358 (CVE-2026-18358). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15227 |
|
Vulnerability in CVE-2026-15227 (CVE-2026-15227)
vulnerability in CVE-2026-15227 (CVE-2026-15227). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-67651 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2025-67651)
vulnerability in csrf (CVE-2025-67651). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-67649 |
|
SQL Injection in sqli (CVE-2025-67649)
SQL injection in sqli (CVE-2025-67649). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46593 |
|
SQL Injection in sqli (CVE-2026-46593)
SQL injection in sqli (CVE-2026-46593). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-67650 |
|
SQL Injection in sqli (CVE-2025-67650)
SQL injection in sqli (CVE-2025-67650). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46594 |
|
Cross-Site Scripting (XSS) in CVE-2026-46594 (CVE-2026-46594)
cross-site scripting in CVE-2026-46594 (CVE-2026-46594). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64607 |
|
Vulnerability in org.apache.httpcomponents.client5:httpclient5 (CVE-2026-64607)
vulnerability in org.apache.httpcomponents.client5:httpclient5 (CVE-2026-64607). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.6.3` or later.
|
| CVE-2026-62391 |
|
Path Traversal in apache (CVE-2026-62391)
path traversal in apache (CVE-2026-62391). Confidential information can be exposed externally.
|
| CVE-2026-44615 |
|
Path Traversal in apache (CVE-2026-44615)
path traversal in apache (CVE-2026-44615). Confidential information can be exposed externally.
|
| CVE-2026-16843 |
|
OS Command Injection in CVE-2026-16843 (CVE-2026-16843)
OS command injection in CVE-2026-16843 (CVE-2026-16843). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18436 |
|
Vulnerability in wordpress (CVE-2026-18436)
vulnerability in wordpress (CVE-2026-18436). Risk of unauthorized operations or information disclosure. Exploitable via `POST /wp-json/mailpress/v1/campaign/`.
|
| CVE-2026-18437 |
|
Vulnerability in wordpress (CVE-2026-18437)
vulnerability in wordpress (CVE-2026-18437). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15722 |
|
Vulnerability in c (CVE-2026-15722)
vulnerability in c (CVE-2026-15722). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65313 |
|
Vulnerability in CVE-2026-65313 (CVE-2026-65313)
vulnerability in CVE-2026-65313 (CVE-2026-65313). Confidential information can be exposed externally.
|
| CVE-2026-65310 |
|
Vulnerability in CVE-2026-65310 (CVE-2026-65310)
vulnerability in CVE-2026-65310 (CVE-2026-65310). Confidential information can be exposed externally.
|
| CVE-2026-65311 |
|
Vulnerability in CVE-2026-65311 (CVE-2026-65311)
vulnerability in CVE-2026-65311 (CVE-2026-65311). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18218 |
|
Vulnerability in redhat (CVE-2026-18218)
vulnerability in redhat (CVE-2026-18218). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18217 |
|
Vulnerability in redhat (CVE-2026-18217)
vulnerability in redhat (CVE-2026-18217). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65309 |
|
Vulnerability in CVE-2026-65309 (CVE-2026-65309)
vulnerability in CVE-2026-65309 (CVE-2026-65309). Confidential information can be exposed externally.
|
| CVE-2026-18206 |
|
Vulnerability in redhat (CVE-2026-18206)
vulnerability in redhat (CVE-2026-18206). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18211 |
|
Vulnerability in redhat (CVE-2026-18211)
vulnerability in redhat (CVE-2026-18211). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18208 |
|
Vulnerability in redhat (CVE-2026-18208)
vulnerability in redhat (CVE-2026-18208). Confidential information can be exposed externally.
|
| CVE-2026-18214 |
|
Vulnerability in redhat (CVE-2026-18214)
vulnerability in redhat (CVE-2026-18214). Confidential information can be exposed externally.
|
| CVE-2026-18203 |
|
Authorization Flaw in redhat (CVE-2026-18203)
vulnerability in redhat (CVE-2026-18203). Data can be tampered with by attackers.
|
| CVE-2026-18215 |
|
Authentication Bypass in redhat (CVE-2026-18215)
authentication bypass in redhat (CVE-2026-18215). Confidential information can be exposed externally.
|
| CVE-2026-16105 |
|
Vulnerability in redhat (CVE-2026-16105)
vulnerability in redhat (CVE-2026-16105). Data can be tampered with by attackers.
|
| CVE-2026-15258 |
|
SQL Injection in wordpress (CVE-2026-15258)
SQL injection in wordpress (CVE-2026-15258). Confidential information can be exposed externally.
|
| CVE-2026-15381 |
|
SQL Injection in wordpress (CVE-2026-15381)
SQL injection in wordpress (CVE-2026-15381). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18452 |
|
Vulnerability in CVE-2026-18452 (CVE-2026-18452)
vulnerability in CVE-2026-18452 (CVE-2026-18452). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16236 |
|
Unrestricted File Upload in wordpress (CVE-2026-16236)
vulnerability in wordpress (CVE-2026-16236). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14928 |
|
Information Disclosure in wordpress (CVE-2026-14928)
vulnerability in wordpress (CVE-2026-14928). Confidential information can be exposed externally.
|
| CVE-2026-14931 |
|
Information Disclosure in wordpress (CVE-2026-14931)
vulnerability in wordpress (CVE-2026-14931). Confidential information can be exposed externally.
|
| CVE-2026-15048 |
|
Information Disclosure in wordpress (CVE-2026-15048)
vulnerability in wordpress (CVE-2026-15048). Confidential information can be exposed externally.
|
| CVE-2026-14921 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14921)
cross-site scripting in wordpress (CVE-2026-14921). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14922 |
|
Cross-Site Scripting (XSS) in CVE-2026-14922 (CVE-2026-14922)
cross-site scripting in CVE-2026-14922 (CVE-2026-14922). Risk of unauthorized operations or information disclosure.
|