Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-42670 |
|
Vulnerability in CVE-2026-42670 (CVE-2026-42670)
vulnerability in CVE-2026-42670 (CVE-2026-42670). Confidential information can be exposed externally.
|
| CVE-2026-39550 |
|
Unsafe Deserialization in deserialization (CVE-2026-39550)
vulnerability in deserialization (CVE-2026-39550). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39551 |
|
Unsafe Deserialization in deserialization (CVE-2026-39551)
vulnerability in deserialization (CVE-2026-39551). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8993 |
|
Vulnerability in ssrf (CVE-2026-8993)
vulnerability in ssrf (CVE-2026-8993). Confidential information can be exposed externally.
|
| CVE-2026-42684 |
|
SQL Injection in sqli (CVE-2026-42684)
SQL injection in sqli (CVE-2026-42684). Confidential information can be exposed externally.
|
| CVE-2026-42685 |
|
Cross-Site Scripting (XSS) in CVE-2026-42685 (CVE-2026-42685)
cross-site scripting in CVE-2026-42685 (CVE-2026-42685). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5191 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-5191)
cross-site scripting in wordpress (CVE-2026-5191). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5422 |
|
Vulnerability in jupyter-server (CVE-2026-5422)
vulnerability in jupyter-server (CVE-2026-5422). Confidential information can be exposed externally. Mitigation: upgrade to `2.18.2` or later.
|
| CVE-2026-46718 |
|
Vulnerability in org.apache.calcite:calcite-core (CVE-2026-46718)
vulnerability in org.apache.calcite:calcite-core (CVE-2026-46718). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.42.0` or later.
|
| CVE-2026-41115 |
|
Vulnerability in kafka (CVE-2026-41115)
vulnerability in kafka (CVE-2026-41115). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.1` or later.
|
| CVE-2026-34907 |
|
Cross-Site Scripting (XSS) in CVE-2026-34907 (CVE-2026-34907)
cross-site scripting in CVE-2026-34907 (CVE-2026-34907). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34906 |
|
Vulnerability in CVE-2026-34906 (CVE-2026-34906)
vulnerability in CVE-2026-34906 (CVE-2026-34906). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-53345 |
|
Vulnerability in CVE-2025-53345 (CVE-2025-53345)
vulnerability in CVE-2025-53345 (CVE-2025-53345). Successful exploitation can lead to full system takeover.
|
| CVE-2025-53346 |
|
Vulnerability in CVE-2025-53346 (CVE-2025-53346)
vulnerability in CVE-2025-53346 (CVE-2025-53346). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10549 |
|
Vulnerability in CVE-2026-10549 (CVE-2026-10549)
vulnerability in CVE-2026-10549 (CVE-2026-10549). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-52759 |
|
Cross-Site Scripting (XSS) in CVE-2025-52759 (CVE-2025-52759)
cross-site scripting in CVE-2025-52759 (CVE-2025-52759). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-52766 |
|
Vulnerability in CVE-2025-52766 (CVE-2025-52766)
vulnerability in CVE-2025-52766 (CVE-2025-52766). Data can be tampered with by attackers.
|
| CVE-2025-53302 |
|
Vulnerability in CVE-2025-53302 (CVE-2025-53302)
vulnerability in CVE-2025-53302 (CVE-2025-53302). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9234 |
|
Vulnerability in wordpress (CVE-2026-9234)
vulnerability in wordpress (CVE-2026-9234). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3514 |
|
Authorization Flaw in prefect (CVE-2026-3514)
vulnerability in prefect (CVE-2026-3514). Confidential information can be exposed externally. Mitigation: upgrade to `3.6.22.dev7` or later.
|
| CVE-2026-4071 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-4071)
vulnerability in wordpress (CVE-2026-4071). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9722 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9722)
vulnerability in wordpress (CVE-2026-9722). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8422 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8422)
vulnerability in wordpress (CVE-2026-8422). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9599 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9599)
vulnerability in wordpress (CVE-2026-9599). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9730 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9730)
vulnerability in wordpress (CVE-2026-9730). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9723 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9723)
vulnerability in wordpress (CVE-2026-9723). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3620 |
|
Vulnerability in wordpress (CVE-2026-3620)
vulnerability in wordpress (CVE-2026-3620). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8885 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-8885)
cross-site scripting in wordpress (CVE-2026-8885). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-5085 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2025-5085)
cross-site scripting in wordpress (CVE-2025-5085). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1451 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-1451)
cross-site scripting in wordpress (CVE-2026-1451). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1450 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-1450)
cross-site scripting in wordpress (CVE-2026-1450). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2382 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-2382)
cross-site scripting in wordpress (CVE-2026-2382). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2425 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-2425)
cross-site scripting in wordpress (CVE-2026-2425). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4080 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4080)
cross-site scripting in wordpress (CVE-2026-4080). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4081 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4081)
cross-site scripting in wordpress (CVE-2026-4081). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8293 |
|
Authentication Bypass in wordpress (CVE-2026-8293)
authentication bypass in wordpress (CVE-2026-8293). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10583 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-10583 (CVE-2026-10583)
SSRF in CVE-2026-10583 (CVE-2026-10583). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3198 |
|
Vulnerability in mlflow (CVE-2026-3198)
vulnerability in mlflow (CVE-2026-3198). Confidential information can be exposed externally. Exploitable via ``BEFORE_REQUEST_HANDLERS``. Mitigation: upgrade to `3.10.0` or later.
|
| CVE-2026-8206 |
|
Privilege Escalation in wordpress (CVE-2026-8206)
vulnerability in wordpress (CVE-2026-8206). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10581 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-10581 (CVE-2026-10581)
SSRF in CVE-2026-10581 (CVE-2026-10581). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3722 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-3722)
cross-site scripting in wordpress (CVE-2026-3722). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3871 |
|
Vulnerability in dos (CVE-2026-3871)
vulnerability in dos (CVE-2026-3871). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3870 |
|
Vulnerability in dos (CVE-2026-3870)
vulnerability in dos (CVE-2026-3870). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10568 |
|
Vulnerability in sqli (CVE-2026-10568)
vulnerability in sqli (CVE-2026-10568). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10566 |
|
Vulnerability in metagpt (CVE-2026-10566)
vulnerability in metagpt (CVE-2026-10566). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10567 |
|
Cross-Site Scripting (XSS) in CVE-2026-10567 (CVE-2026-10567)
cross-site scripting in CVE-2026-10567 (CVE-2026-10567). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10565 |
|
Vulnerability in c (CVE-2026-10565)
vulnerability in c (CVE-2026-10565). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10510 |
|
Cross-Site Scripting (XSS) in CVE-2026-10510 (CVE-2026-10510)
cross-site scripting in CVE-2026-10510 (CVE-2026-10510). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10100 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-10100)
cross-site scripting in wordpress (CVE-2026-10100). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10550 |
|
Vulnerability in CVE-2026-10550 (CVE-2026-10550)
vulnerability in CVE-2026-10550 (CVE-2026-10550). Risk of unauthorized operations or information disclosure.
|