Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Clear
ID Title
CVE-2026-10665 Out-of-Bounds Write in c (CVE-2026-10665)
out-of-bounds write in c (CVE-2026-10665). Data can be tampered with by attackers.
CVE-2026-10666 Vulnerability in c (CVE-2026-10666)
vulnerability in c (CVE-2026-10666). Successful exploitation can lead to full system takeover.
CVE-2026-10667 Use-After-Free in c (CVE-2026-10667)
vulnerability in c (CVE-2026-10667). Successful exploitation can lead to full system takeover.
CVE-2026-10668 Vulnerability in c (CVE-2026-10668)
vulnerability in c (CVE-2026-10668). Risk of unauthorized operations or information disclosure.
CVE-2026-10663 Use-After-Free in c (CVE-2026-10663)
vulnerability in c (CVE-2026-10663). Data can be tampered with by attackers.
CVE-2026-15502 Vulnerability in sqli (CVE-2026-15502)
vulnerability in sqli (CVE-2026-15502). Risk of unauthorized operations or information disclosure.
CVE-2026-61875 Cross-Site Scripting (XSS) in CVE-2026-61875 (CVE-2026-61875)
cross-site scripting in CVE-2026-61875 (CVE-2026-61875). Successful exploitation can lead to full system takeover.
CVE-2026-15498 Vulnerability in sqli (CVE-2026-15498)
vulnerability in sqli (CVE-2026-15498). Risk of unauthorized operations or information disclosure.
CVE-2026-15495 Command Injection in CVE-2026-15495 (CVE-2026-15495)
command injection in CVE-2026-15495 (CVE-2026-15495). Risk of unauthorized operations or information disclosure.
CVE-2026-15497 Vulnerability in CVE-2026-15497 (CVE-2026-15497)
vulnerability in CVE-2026-15497 (CVE-2026-15497). Risk of unauthorized operations or information disclosure.
CVE-2026-15496 Command Injection in CVE-2026-15496 (CVE-2026-15496)
command injection in CVE-2026-15496 (CVE-2026-15496). Risk of unauthorized operations or information disclosure.
CVE-2026-15492 Cross-Site Scripting (XSS) in CVE-2026-15492 (CVE-2026-15492)
cross-site scripting in CVE-2026-15492 (CVE-2026-15492). Risk of unauthorized operations or information disclosure.
CVE-2026-15493 Cross-Site Scripting (XSS) in CVE-2026-15493 (CVE-2026-15493)
cross-site scripting in CVE-2026-15493 (CVE-2026-15493). Risk of unauthorized operations or information disclosure.
CVE-2026-15494 Vulnerability in sqli (CVE-2026-15494)
vulnerability in sqli (CVE-2026-15494). Risk of unauthorized operations or information disclosure.
CVE-2026-15490 Vulnerability in sqli (CVE-2026-15490)
vulnerability in sqli (CVE-2026-15490). Risk of unauthorized operations or information disclosure.
CVE-2026-15488 Vulnerability in CVE-2026-15488 (CVE-2026-15488)
vulnerability in CVE-2026-15488 (CVE-2026-15488). Risk of unauthorized operations or information disclosure.
CVE-2026-15489 Vulnerability in sqli (CVE-2026-15489)
vulnerability in sqli (CVE-2026-15489). Risk of unauthorized operations or information disclosure.
CVE-2026-15482 Vulnerability in sqli (CVE-2026-15482)
vulnerability in sqli (CVE-2026-15482). Risk of unauthorized operations or information disclosure.
CVE-2026-15478 Vulnerability in sqli (CVE-2026-15478)
vulnerability in sqli (CVE-2026-15478). Risk of unauthorized operations or information disclosure.
CVE-2026-10660 Out-of-Bounds Write in c (CVE-2026-10660)
out-of-bounds write in c (CVE-2026-10660). Risk of unauthorized operations or information disclosure.
CVE-2026-61447 Code Injection in CVE-2026-61447 (CVE-2026-61447)
code injection in CVE-2026-61447 (CVE-2026-61447). Successful exploitation can lead to full system takeover.
CVE-2026-61454 Information Disclosure in CVE-2026-61454 (CVE-2026-61454)
vulnerability in CVE-2026-61454 (CVE-2026-61454). Risk of unauthorized operations or information disclosure.
CVE-2026-56763 Vulnerability in CVE-2026-56763 (CVE-2026-56763)
vulnerability in CVE-2026-56763 (CVE-2026-56763). Risk of unauthorized operations or information disclosure.
CVE-2026-3576 Vulnerability in wordpress (CVE-2026-3576)
vulnerability in wordpress (CVE-2026-3576). Risk of unauthorized operations or information disclosure.
CVE-2026-2354 Unrestricted File Upload in wordpress (CVE-2026-2354)
vulnerability in wordpress (CVE-2026-2354). Successful exploitation can lead to full system takeover. Exploitable via ``wp_check_filetype_and_ext``.
CVE-2026-13250 Vulnerability in wordpress (CVE-2026-13250)
vulnerability in wordpress (CVE-2026-13250). Risk of unauthorized operations or information disclosure.
CVE-2026-3367 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3367)
cross-site scripting in wordpress (CVE-2026-3367). Risk of unauthorized operations or information disclosure.
CVE-2026-15338 Vulnerability in wordpress (CVE-2026-15338)
vulnerability in wordpress (CVE-2026-15338). Successful exploitation can lead to full system takeover.
CVE-2026-13353 Code Injection in wordpress (CVE-2026-13353)
code injection in wordpress (CVE-2026-13353). Successful exploitation can lead to full system takeover.
CVE-2026-57584 Vulnerability in phalcon/cphalcon (CVE-2026-57584)
vulnerability in phalcon/cphalcon (CVE-2026-57584). Risk of unauthorized operations or information disclosure. Exploitable via ``URI_SOURCE_GET_URL``. Mitigation: upgrade to `5.15.0` or later.
CVE-2026-55810 Vulnerability in drupal/plotly_js (CVE-2026-55810)
vulnerability in drupal/plotly_js (CVE-2026-55810). Confidential information can be exposed externally. Exploitable via ``plotly_js_graph``. Mitigation: upgrade to `3.0.2` or later.
CVE-2026-54736 Vulnerability in phalcon/cphalcon (CVE-2026-54736)
vulnerability in phalcon/cphalcon (CVE-2026-54736). Risk of unauthorized operations or information disclosure. Exploitable via ``useSigning``. Mitigation: upgrade to `5.14.1` or later.
CVE-2026-13039 Vulnerability in wordpress (CVE-2026-13039)
vulnerability in wordpress (CVE-2026-13039). Risk of unauthorized operations or information disclosure.
CVE-2026-57214 Cross-Site Scripting (XSS) in broadcom (CVE-2026-57214)
cross-site scripting in broadcom (CVE-2026-57214). Risk of unauthorized operations or information disclosure.
CVE-2026-57213 Cross-Site Scripting (XSS) in broadcom (CVE-2026-57213)
cross-site scripting in broadcom (CVE-2026-57213). Risk of unauthorized operations or information disclosure.
CVE-2026-55664 Information Disclosure in CVE-2026-55664 (CVE-2026-55664)
vulnerability in CVE-2026-55664 (CVE-2026-55664). Risk of unauthorized operations or information disclosure. Exploitable via `GET /forms`.
CVE-2026-55659 Cross-Site Scripting (XSS) in CVE-2026-55659 (CVE-2026-55659)
cross-site scripting in CVE-2026-55659 (CVE-2026-55659). Confidential information can be exposed externally.
CVE-2026-55665 Cross-Site Scripting (XSS) in CVE-2026-55665 (CVE-2026-55665)
cross-site scripting in CVE-2026-55665 (CVE-2026-55665). Risk of unauthorized operations or information disclosure.
CVE-2026-55213 Vulnerability in c (CVE-2026-55213)
vulnerability in c (CVE-2026-55213). Risk of unauthorized operations or information disclosure.
CVE-2026-54171 Vulnerability in excon (CVE-2026-54171)
vulnerability in excon (CVE-2026-54171). Confidential information can be exposed externally. Mitigation: upgrade to `1.5.0` or later.
CVE-2026-54159 Vulnerability in prestashop/ps_facetedsearch (CVE-2026-54159)
vulnerability in prestashop/ps_facetedsearch (CVE-2026-54159). Successful exploitation can lead to full system takeover. Exploitable via ``ps_facetedsearch``. Mitigation: upgrade to `4.0.4` or later.
CVE-2026-57156 Vulnerability in c (CVE-2026-57156)
vulnerability in c (CVE-2026-57156). Successful exploitation can lead to full system takeover.
CVE-2026-57157 Out-of-Bounds Read in c (CVE-2026-57157)
vulnerability in c (CVE-2026-57157). Risk of unauthorized operations or information disclosure.
CVE-2026-57158 Out-of-Bounds Read in c (CVE-2026-57158)
vulnerability in c (CVE-2026-57158). Confidential information can be exposed externally.
CVE-2026-55481 Cross-Site Scripting (XSS) in snipe/snipe-it (CVE-2026-55481)
cross-site scripting in snipe/snipe-it (CVE-2026-55481). Risk of unauthorized operations or information disclosure. Exploitable via ``default.blade.php``. Mitigation: upgrade to `8.6.2` or later.
CVE-2026-55466 Cross-Site Scripting (XSS) in snipe/snipe-it (CVE-2026-55466)
cross-site scripting in snipe/snipe-it (CVE-2026-55466). Confidential information can be exposed externally. Exploitable via ``mimes``. Mitigation: upgrade to `8.6.2` or later.
CVE-2026-54071 Unsafe Deserialization in BabelDOC (CVE-2026-54071)
vulnerability in BabelDOC (CVE-2026-54071). Successful exploitation can lead to full system takeover. Exploitable via ``psparser._parse_literal_hex``. Mitigation: upgrade to `0.6.3` or later.
CVE-2026-55464 Cross-Site Scripting (XSS) in snipe/snipe-it (CVE-2026-55464)
cross-site scripting in snipe/snipe-it (CVE-2026-55464). Risk of unauthorized operations or information disclosure. Exploitable via ``assets.edit``. Mitigation: upgrade to `8.6.2` or later.
CVE-2025-30008 Cross-Site Scripting (XSS) in hestiacp (CVE-2025-30008)
cross-site scripting in hestiacp (CVE-2025-30008). Risk of unauthorized operations or information disclosure.
CVE-2026-39244 Vulnerability in adm-zip (CVE-2026-39244)
vulnerability in adm-zip (CVE-2026-39244). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.6.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →