Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-13492 Path Traversal in wordpress (CVE-2026-13492)
path traversal in wordpress (CVE-2026-13492). Successful exploitation can lead to full system takeover.
CVE-2026-0287 Vulnerability in dos (CVE-2026-0287)
vulnerability in dos (CVE-2026-0287). Risk of unauthorized operations or information disclosure.
CVE-2026-0284 Vulnerability in paloaltonetworks (CVE-2026-0284)
vulnerability in paloaltonetworks (CVE-2026-0284). Confidential information can be exposed externally.
CVE-2026-0283 Vulnerability in paloaltonetworks (CVE-2026-0283)
vulnerability in paloaltonetworks (CVE-2026-0283). Risk of unauthorized operations or information disclosure.
CVE-2025-63579 Information Disclosure in CVE-2025-63579 (CVE-2025-63579)
vulnerability in CVE-2025-63579 (CVE-2025-63579). Confidential information can be exposed externally.
CVE-2026-55208 SQL Injection in pimcore/studio-backend-bundle (CVE-2026-55208)
SQL injection in pimcore/studio-backend-bundle (CVE-2026-55208). Confidential information can be exposed externally. Exploitable via `POST /pimcore-studio/api/website-settings`. Mitigation: upgrade to `2026.1.6` or later.
CVE-2026-55212 Vulnerability in pimcore/studio-backend-bundle (CVE-2026-55212)
vulnerability in pimcore/studio-backend-bundle (CVE-2026-55212). Data can be tampered with by attackers. Exploitable via `POST /pimcore-studio/api/class/definition/configuration-view/detail/create`. Mitigation: upgrade to `2026.1.6` or later.
CVE-2026-21901 Vulnerability in dos (CVE-2026-21901)
vulnerability in dos (CVE-2026-21901). Risk of unauthorized operations or information disclosure.
CVE-2026-52777 Cross-Site Request Forgery (CSRF) in yeswiki/yeswiki (CVE-2026-52777)
vulnerability in yeswiki/yeswiki (CVE-2026-52777). Risk of unauthorized operations or information disclosure. Exploitable via ``__toString``. Mitigation: upgrade to `4.6.6` or later.
CVE-2026-52775 SQL Injection in yeswiki/yeswiki (CVE-2026-52775)
SQL injection in yeswiki/yeswiki (CVE-2026-52775). Successful exploitation can lead to full system takeover. Exploitable via `DELETE /wiki/`. Mitigation: upgrade to `4.6.6` or later.
CVE-2026-52774 Vulnerability in yeswiki/yeswiki (CVE-2026-52774)
vulnerability in yeswiki/yeswiki (CVE-2026-52774). Risk of unauthorized operations or information disclosure. Exploitable via ``GET``. Mitigation: upgrade to `4.6.6` or later.
CVE-2026-52773 Vulnerability in yeswiki/yeswiki (CVE-2026-52773)
vulnerability in yeswiki/yeswiki (CVE-2026-52773). Risk of unauthorized operations or information disclosure. Exploitable via ``time``. Mitigation: upgrade to `4.6.6` or later.
CVE-2026-52772 Cross-Site Scripting (XSS) in yeswiki/yeswiki (CVE-2026-52772)
cross-site scripting in yeswiki/yeswiki (CVE-2026-52772). Risk of unauthorized operations or information disclosure. Exploitable via ``field.label``. Mitigation: upgrade to `4.6.6` or later.
CVE-2026-52771 SQL Injection in yeswiki/yeswiki (CVE-2026-52771)
SQL injection in yeswiki/yeswiki (CVE-2026-52771). Confidential information can be exposed externally. Exploitable via `POST /api/pages/{tag}`. Mitigation: upgrade to `4.6.6` or later.
CVE-2026-52770 SQL Injection in yeswiki/yeswiki (CVE-2026-52770)
SQL injection in yeswiki/yeswiki (CVE-2026-52770). Confidential information can be exposed externally. Exploitable via ``query``. Mitigation: upgrade to `4.6.6` or later.
CVE-2026-52769 SSRF (Server-Side Request Forgery) in yeswiki/yeswiki (CVE-2026-52769)
SSRF in yeswiki/yeswiki (CVE-2026-52769). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/forms/{formId}/actor/inbox`. Mitigation: upgrade to `4.6.6` or later.
CVE-2026-52767 Vulnerability in yeswiki/yeswiki (CVE-2026-52767)
vulnerability in yeswiki/yeswiki (CVE-2026-52767). Data can be tampered with by attackers. Exploitable via `POST /api/forms/{enabled-form-id}/actor/inbox`. Mitigation: upgrade to `4.6.6` or later.
CVE-2026-52766 Vulnerability in yeswiki/yeswiki (CVE-2026-52766)
vulnerability in yeswiki/yeswiki (CVE-2026-52766). Data can be tampered with by attackers. Exploitable via ``POST``. Mitigation: upgrade to `4.6.6` or later.
CVE-2026-52763 SQL Injection in yeswiki/yeswiki (CVE-2026-52763)
SQL injection in yeswiki/yeswiki (CVE-2026-52763). Confidential information can be exposed externally. Exploitable via ``recentchanges``. Mitigation: upgrade to `4.6.6` or later.
CVE-2026-52762 Vulnerability in yeswiki/yeswiki (CVE-2026-52762)
vulnerability in yeswiki/yeswiki (CVE-2026-52762). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/forms/2/entries/json-ld`. Mitigation: upgrade to `4.6.6` or later.
CVE-2026-53769 Vulnerability in avo (CVE-2026-53769)
vulnerability in avo (CVE-2026-53769). Data can be tampered with by attackers. Exploitable via ``attachment_key``. Mitigation: upgrade to `3.32.0` or later.
CVE-2026-53932 Command Injection in wnx/laravel-backup-restore (CVE-2026-53932)
command injection in wnx/laravel-backup-restore (CVE-2026-53932). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.9.4` or later.
CVE-2026-53602 Vulnerability in github.com/forgekeep/nebula-mesh (CVE-2026-53602)
vulnerability in github.com/forgekeep/nebula-mesh (CVE-2026-53602). Risk of unauthorized operations or information disclosure. Exploitable via ``fingerprintInBlocklist``. Mitigation: upgrade to `0.3.7` or later.
CVE-2026-59149 Path Traversal in CVE-2026-59149 (CVE-2026-59149)
path traversal in CVE-2026-59149 (CVE-2026-59149). Confidential information can be exposed externally.
CVE-2026-59148 Vulnerability in express (CVE-2026-59148)
vulnerability in express (CVE-2026-59148). Successful exploitation can lead to full system takeover. Exploitable via `PUT /mockoon-admin/environment`.
CVE-2026-58198 Vulnerability in CVE-2026-58198 (CVE-2026-58198)
vulnerability in CVE-2026-58198 (CVE-2026-58198). Confidential information can be exposed externally.
CVE-2026-61344 Vulnerability in CVE-2026-61344 (CVE-2026-61344)
vulnerability in CVE-2026-61344 (CVE-2026-61344). Risk of unauthorized operations or information disclosure.
CVE-2026-43752 Unrestricted File Upload in claris (CVE-2026-43752)
vulnerability in claris (CVE-2026-43752). Confidential information can be exposed externally.
CVE-2026-61343 Vulnerability in CVE-2026-61343 (CVE-2026-61343)
vulnerability in CVE-2026-61343 (CVE-2026-61343). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.1.0` or later.
CVE-2026-15204 Path Traversal in path-traversal (CVE-2026-15204)
path traversal in path-traversal (CVE-2026-15204). Risk of unauthorized operations or information disclosure.
CVE-2026-15202 Cross-Site Scripting (XSS) in CVE-2026-15202 (CVE-2026-15202)
cross-site scripting in CVE-2026-15202 (CVE-2026-15202). Risk of unauthorized operations or information disclosure.
CVE-2026-15195 Code Injection in CVE-2026-15195 (CVE-2026-15195)
code injection in CVE-2026-15195 (CVE-2026-15195). Risk of unauthorized operations or information disclosure.
CVE-2026-58459 OS Command Injection in gpsd-project (CVE-2026-58459)
OS command injection in gpsd-project (CVE-2026-58459). Successful exploitation can lead to full system takeover.
CVE-2026-51600 Vulnerability in CVE-2026-51600 (CVE-2026-51600)
vulnerability in CVE-2026-51600 (CVE-2026-51600). Risk of unauthorized operations or information disclosure.
CVE-2026-51601 Vulnerability in CVE-2026-51601 (CVE-2026-51601)
vulnerability in CVE-2026-51601 (CVE-2026-51601). Risk of unauthorized operations or information disclosure.
CVE-2026-51603 Vulnerability in dos (CVE-2026-51603)
vulnerability in dos (CVE-2026-51603). Risk of unauthorized operations or information disclosure.
CVE-2026-51602 Vulnerability in dos (CVE-2026-51602)
vulnerability in dos (CVE-2026-51602). Risk of unauthorized operations or information disclosure.
CVE-2026-51605 Vulnerability in dos (CVE-2026-51605)
vulnerability in dos (CVE-2026-51605). Risk of unauthorized operations or information disclosure.
CVE-2026-51604 Vulnerability in dos (CVE-2026-51604)
vulnerability in dos (CVE-2026-51604). Risk of unauthorized operations or information disclosure.
CVE-2026-51598 Vulnerability in dos (CVE-2026-51598)
vulnerability in dos (CVE-2026-51598). Risk of unauthorized operations or information disclosure.
CVE-2026-51606 Vulnerability in CVE-2026-51606 (CVE-2026-51606)
vulnerability in CVE-2026-51606 (CVE-2026-51606). Risk of unauthorized operations or information disclosure.
CVE-2026-51599 Vulnerability in CVE-2026-51599 (CVE-2026-51599)
vulnerability in CVE-2026-51599 (CVE-2026-51599). Successful exploitation can lead to full system takeover.
CVE-2026-53987 Cross-Site Scripting (XSS) in CVE-2026-53987 (CVE-2026-53987)
cross-site scripting in CVE-2026-53987 (CVE-2026-53987). Successful exploitation can lead to full system takeover.
CVE-2026-15190 Vulnerability in sqli (CVE-2026-15190)
vulnerability in sqli (CVE-2026-15190). Risk of unauthorized operations or information disclosure.
CVE-2026-15193 Command Injection in CVE-2026-15193 (CVE-2026-15193)
command injection in CVE-2026-15193 (CVE-2026-15193). Risk of unauthorized operations or information disclosure.
CVE-2026-15308 Vulnerability in CVE-2026-15308 (CVE-2026-15308)
vulnerability in CVE-2026-15308 (CVE-2026-15308). Risk of unauthorized operations or information disclosure.
CVE-2026-61474 Authorization Flaw in CVE-2026-61474 (CVE-2026-61474)
vulnerability in CVE-2026-61474 (CVE-2026-61474). Risk of unauthorized operations or information disclosure.
CVE-2026-15192 Authentication Bypass in CVE-2026-15192 (CVE-2026-15192)
authentication bypass in CVE-2026-15192 (CVE-2026-15192). Risk of unauthorized operations or information disclosure.
CVE-2026-51597 Vulnerability in CVE-2026-51597 (CVE-2026-51597)
vulnerability in CVE-2026-51597 (CVE-2026-51597). Confidential information can be exposed externally.
CVE-2026-15194 Buffer Overflow in c (CVE-2026-15194)
vulnerability in c (CVE-2026-15194). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →