Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-51027 Information Disclosure in CVE-2026-51027 (CVE-2026-51027)
vulnerability in CVE-2026-51027 (CVE-2026-51027). Successful exploitation can lead to full system takeover.
CVE-2026-35198 Cross-Site Scripting (XSS) in privilege-escalation (CVE-2026-35198)
cross-site scripting in privilege-escalation (CVE-2026-35198). Successful exploitation can lead to full system takeover.
CVE-2026-53421 Vulnerability in apache (CVE-2026-53421)
vulnerability in apache (CVE-2026-53421). Successful exploitation can lead to full system takeover.
CVE-2026-63071 Vulnerability in apache (CVE-2026-63071)
vulnerability in apache (CVE-2026-63071). Successful exploitation can lead to full system takeover.
CVE-2026-53405 Vulnerability in apache (CVE-2026-53405)
vulnerability in apache (CVE-2026-53405). Successful exploitation can lead to full system takeover.
CVE-2026-62183 Privilege Escalation in apache (CVE-2026-62183)
vulnerability in apache (CVE-2026-62183). Successful exploitation can lead to full system takeover.
CVE-2026-57308 SQL Injection in apache (CVE-2026-57308)
SQL injection in apache (CVE-2026-57308). Successful exploitation can lead to full system takeover.
CVE-2026-12701 Path Traversal in path-traversal (CVE-2026-12701)
path traversal in path-traversal (CVE-2026-12701). Data can be tampered with by attackers.
CVE-2026-64620 Vulnerability in c (CVE-2026-64620)
vulnerability in c (CVE-2026-64620). Successful exploitation can lead to full system takeover.
CVE-2026-16242 Vulnerability in CVE-2026-16242 (CVE-2026-16242)
vulnerability in CVE-2026-16242 (CVE-2026-16242). Confidential information can be exposed externally.
CVE-2026-44359 Code Injection in CVE-2026-44359 (CVE-2026-44359)
code injection in CVE-2026-44359 (CVE-2026-44359). Confidential information can be exposed externally.
CVE-2026-64142 Use-After-Free in c (CVE-2026-64142)
vulnerability in c (CVE-2026-64142). Successful exploitation can lead to full system takeover.
CVE-2026-64132 Use-After-Free in linux (CVE-2026-64132)
vulnerability in linux (CVE-2026-64132). Successful exploitation can lead to full system takeover.
CVE-2026-64122 Use-After-Free in linux (CVE-2026-64122)
vulnerability in linux (CVE-2026-64122). Successful exploitation can lead to full system takeover.
CVE-2026-64113 Use-After-Free in linux (CVE-2026-64113)
vulnerability in linux (CVE-2026-64113). Successful exploitation can lead to full system takeover.
CVE-2026-64102 Out-of-Bounds Read in c (CVE-2026-64102)
vulnerability in c (CVE-2026-64102). Successful exploitation can lead to full system takeover.
CVE-2026-64091 Vulnerability in linux (CVE-2026-64091)
vulnerability in linux (CVE-2026-64091). Successful exploitation can lead to full system takeover.
CVE-2026-63800 Use-After-Free in linux (CVE-2026-63800)
vulnerability in linux (CVE-2026-63800). Successful exploitation can lead to full system takeover.
CVE-2026-63795 Use-After-Free in linux (CVE-2026-63795)
vulnerability in linux (CVE-2026-63795). Successful exploitation can lead to full system takeover.
CVE-2026-53399 Vulnerability in linux (CVE-2026-53399)
vulnerability in linux (CVE-2026-53399). Successful exploitation can lead to full system takeover.
CVE-2026-53384 Use-After-Free in linux (CVE-2026-53384)
vulnerability in linux (CVE-2026-53384). Successful exploitation can lead to full system takeover.
CVE-2026-15899 Use-After-Free in Google chrome (CVE-2026-15899)
vulnerability in Google chrome (CVE-2026-15899). Successful exploitation can lead to full system takeover.
CVE-2026-16117 Vulnerability in fastify (CVE-2026-16117)
vulnerability in fastify (CVE-2026-16117). Confidential information can be exposed externally.
CVE-2026-47865 Authentication Bypass in broadcom (CVE-2026-47865)
authentication bypass in broadcom (CVE-2026-47865). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `31.2.2-2p3` or later.
CVE-2026-52348 cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() method of CrudOption.java.
cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() method of CrudOption.java.
CVE-2026-13446 Vulnerability in langflow (CVE-2026-13446)
vulnerability in langflow (CVE-2026-13446). Successful exploitation can lead to full system takeover.
CVE-2026-8505 Vulnerability in langflow (CVE-2026-8505)
vulnerability in langflow (CVE-2026-8505). Successful exploitation can lead to full system takeover.
CVE-2026-8635 Code Injection in c (CVE-2026-8635)
code injection in c (CVE-2026-8635). Successful exploitation can lead to full system takeover.
CVE-2026-8859 Path Traversal in path-traversal (CVE-2026-8859)
path traversal in path-traversal (CVE-2026-8859). Successful exploitation can lead to full system takeover.
CVE-2026-8476 Unsafe Deserialization in langflow (CVE-2026-8476)
vulnerability in langflow (CVE-2026-8476). Successful exploitation can lead to full system takeover.
CVE-2026-8481 Code Injection in c (CVE-2026-8481)
code injection in c (CVE-2026-8481). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/validate/code`.
CVE-2026-63030 KEV WordPress Core — WordPress Core Interpretation Conflict Vulnerability
WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.
CVE-2026-52199 Command Injection in CVE-2026-52199 (CVE-2026-52199)
command injection in CVE-2026-52199 (CVE-2026-52199). Confidential information can be exposed externally.
CVE-2026-36669 Unrestricted File Upload in CVE-2026-36669 (CVE-2026-36669)
vulnerability in CVE-2026-36669 (CVE-2026-36669). Successful exploitation can lead to full system takeover.
CVE-2026-42168 OS Command Injection in django (CVE-2026-42168)
OS command injection in django (CVE-2026-42168). Confidential information can be exposed externally.
CVE-2026-15091 Cross-Site Scripting (XSS) in ibm (CVE-2026-15091)
cross-site scripting in ibm (CVE-2026-15091). Confidential information can be exposed externally.
CVE-2025-51677 Vulnerability in CVE-2025-51677 (CVE-2025-51677)
vulnerability in CVE-2025-51677 (CVE-2025-51677). Data can be tampered with by attackers.
CVE-2026-9135 Code Injection in langflow (CVE-2026-9135)
code injection in langflow (CVE-2026-9135). Successful exploitation can lead to full system takeover.
CVE-2026-9103 Vulnerability in langflow (CVE-2026-9103)
vulnerability in langflow (CVE-2026-9103). Successful exploitation can lead to full system takeover.
CVE-2026-9198 KEV [KEV] Code Injection in Ibm langflow (CVE-2026-9198)
code injection in Ibm langflow (CVE-2026-9198). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-8297 SQL Injection in sqli (CVE-2026-8297)
SQL injection in sqli (CVE-2026-8297). Successful exploitation can lead to full system takeover.
CVE-2026-9202 Vulnerability in langflow (CVE-2026-9202)
vulnerability in langflow (CVE-2026-9202). Successful exploitation can lead to full system takeover.
CVE-2026-12694 Vulnerability in CVE-2026-12694 (CVE-2026-12694)
vulnerability in CVE-2026-12694 (CVE-2026-12694). Data can be tampered with by attackers.
CVE-2026-60024 Vulnerability in CVE-2026-60024 (CVE-2026-60024)
vulnerability in CVE-2026-60024 (CVE-2026-60024). Successful exploitation can lead to full system takeover.
CVE-2024-23564 Vulnerability in CVE-2024-23564 (CVE-2024-23564)
vulnerability in CVE-2024-23564 (CVE-2024-23564). Confidential information can be exposed externally.
CVE-2026-51080 XXE (XML External Entity) in proxmox (CVE-2026-51080)
vulnerability in proxmox (CVE-2026-51080). Successful exploitation can lead to full system takeover.
CVE-2026-9810 Privilege Escalation in wordpress (CVE-2026-9810)
vulnerability in wordpress (CVE-2026-9810). Successful exploitation can lead to full system takeover.
CVE-2026-15982 Privilege Escalation in wordpress (CVE-2026-15982)
vulnerability in wordpress (CVE-2026-15982). Successful exploitation can lead to full system takeover.
CVE-2026-62241 Vulnerability in mohibshaikh (CVE-2026-62241)
vulnerability in mohibshaikh (CVE-2026-62241). Confidential information can be exposed externally. Exploitable via `GET /api/v1/scans`.
CVE-2026-14956 Privilege Escalation in wordpress (CVE-2026-14956)
vulnerability in wordpress (CVE-2026-14956). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →