Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-13029 |
|
Use-After-Free in google (CVE-2026-13029)
vulnerability in google (CVE-2026-13029). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13023 |
|
Vulnerability in google (CVE-2026-13023)
vulnerability in google (CVE-2026-13023). Confidential information can be exposed externally.
|
| CVE-2026-13031 |
|
Use-After-Free in google (CVE-2026-13031)
vulnerability in google (CVE-2026-13031). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13021 |
|
Vulnerability in google (CVE-2026-13021)
vulnerability in google (CVE-2026-13021). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13025 |
|
Vulnerability in google (CVE-2026-13025)
vulnerability in google (CVE-2026-13025). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13027 |
|
Use-After-Free in google (CVE-2026-13027)
vulnerability in google (CVE-2026-13027). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13030 |
|
Vulnerability in google (CVE-2026-13030)
vulnerability in google (CVE-2026-13030). Confidential information can be exposed externally.
|
| CVE-2026-13028 |
|
Use-After-Free in Google chrome (CVE-2026-13028)
vulnerability in Google chrome (CVE-2026-13028). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57299 |
|
Vulnerability in jenkins (CVE-2026-57299)
vulnerability in jenkins (CVE-2026-57299). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57300 |
|
Vulnerability in jenkins (CVE-2026-57300)
vulnerability in jenkins (CVE-2026-57300). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57301 |
|
Vulnerability in jenkins (CVE-2026-57301)
vulnerability in jenkins (CVE-2026-57301). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57302 |
|
Vulnerability in jenkins (CVE-2026-57302)
vulnerability in jenkins (CVE-2026-57302). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57303 |
|
SSRF (Server-Side Request Forgery) in jenkins (CVE-2026-57303)
SSRF in jenkins (CVE-2026-57303). Confidential information can be exposed externally.
|
| CVE-2026-57304 |
|
Vulnerability in jenkins (CVE-2026-57304)
vulnerability in jenkins (CVE-2026-57304). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57305 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57305)
vulnerability in csrf (CVE-2026-57305). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57306 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57306)
vulnerability in csrf (CVE-2026-57306). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57307 |
|
Vulnerability in jenkins (CVE-2026-57307)
vulnerability in jenkins (CVE-2026-57307). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57288 |
|
Vulnerability in jenkins (CVE-2026-57288)
vulnerability in jenkins (CVE-2026-57288). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57289 |
|
Vulnerability in jenkins (CVE-2026-57289)
vulnerability in jenkins (CVE-2026-57289). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57290 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57290)
vulnerability in csrf (CVE-2026-57290). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57294 |
|
Vulnerability in jenkins (CVE-2026-57294)
vulnerability in jenkins (CVE-2026-57294). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57295 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57295)
vulnerability in csrf (CVE-2026-57295). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57297 |
|
Vulnerability in jenkins (CVE-2026-57297)
vulnerability in jenkins (CVE-2026-57297). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57284 |
|
Vulnerability in jenkins (CVE-2026-57284)
vulnerability in jenkins (CVE-2026-57284). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57285 |
|
Vulnerability in jenkins (CVE-2026-57285)
vulnerability in jenkins (CVE-2026-57285). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57286 |
|
Vulnerability in jenkins (CVE-2026-57286)
vulnerability in jenkins (CVE-2026-57286). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57287 |
|
Vulnerability in jenkins (CVE-2026-57287)
vulnerability in jenkins (CVE-2026-57287). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57283 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57283)
vulnerability in csrf (CVE-2026-57283). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57282 |
|
OS Command Injection in jenkins (CVE-2026-57282)
OS command injection in jenkins (CVE-2026-57282). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57281 |
|
Vulnerability in jenkins (CVE-2026-57281)
vulnerability in jenkins (CVE-2026-57281). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57280 |
|
Vulnerability in jenkins (CVE-2026-57280)
vulnerability in jenkins (CVE-2026-57280). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12242 |
|
Code Injection in wordpress (CVE-2026-12242)
code injection in wordpress (CVE-2026-12242). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9643 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-9643)
cross-site scripting in wordpress (CVE-2026-9643). Risk of unauthorized operations or information disclosure. Exploitable via ``wp_wpms_links.link_url``.
|
| CVE-2026-9612 |
|
Information Disclosure in wordpress (CVE-2026-9612)
vulnerability in wordpress (CVE-2026-9612). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8705 |
|
SQL Injection in wordpress (CVE-2026-8705)
SQL injection in wordpress (CVE-2026-8705). Confidential information can be exposed externally. Exploitable via ``clearsale_total_push``.
|
| CVE-2026-8628 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-8628)
cross-site scripting in wordpress (CVE-2026-8628). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12417 |
|
Vulnerability in wordpress (CVE-2026-12417)
vulnerability in wordpress (CVE-2026-12417). Successful exploitation can lead to full system takeover. Exploitable via ``wp_ajax_nopriv_pravel_change_password``.
|
| CVE-2026-10749 |
|
Vulnerability in wordpress (CVE-2026-10749)
vulnerability in wordpress (CVE-2026-10749). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3652 |
|
The ARForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `value`...
The ARForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `value`...
|
| CVE-2026-55519 |
|
Vulnerability in snipe/snipe-it (CVE-2026-55519)
vulnerability in snipe/snipe-it (CVE-2026-55519). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.4.1` or later.
|
| CVE-2026-55483 |
|
Vulnerability in snipe/snipe-it (CVE-2026-55483)
vulnerability in snipe/snipe-it (CVE-2026-55483). Risk of unauthorized operations or information disclosure. Exploitable via ``UsersController``. Mitigation: upgrade to `8.6.0` or later.
|
| CVE-2026-55482 |
|
Vulnerability in snipe/snipe-it (CVE-2026-55482)
vulnerability in snipe/snipe-it (CVE-2026-55482). Risk of unauthorized operations or information disclosure. Exploitable via ``company_id``. Mitigation: upgrade to `8.4.2` or later.
|
| CVE-2026-50550 |
|
Vulnerability in snipe/snipe-it (CVE-2026-50550)
vulnerability in snipe/snipe-it (CVE-2026-50550). Data can be tampered with by attackers. Mitigation: upgrade to `8.5.0` or later.
|
| CVE-2026-49976 |
|
Vulnerability in snipe/snipe-it (CVE-2026-49976)
vulnerability in snipe/snipe-it (CVE-2026-49976). Confidential information can be exposed externally. Exploitable via `PATCH /api/v1/users/{id}`. Mitigation: upgrade to `8.6.0` or later.
|
| CVE-2026-49870 |
|
Vulnerability in snipe/snipe-it (CVE-2026-49870)
vulnerability in snipe/snipe-it (CVE-2026-49870). Confidential information can be exposed externally. Exploitable via `POST /two-factor`. Mitigation: upgrade to `8.6.0` or later.
|
| CVE-2020-9695 |
|
Out-of-Bounds Write in adobe (CVE-2020-9695)
out-of-bounds write in adobe (CVE-2020-9695). Successful exploitation can lead to full system takeover.
|
| CVE-2020-9713 |
|
Out-of-Bounds Read in adobe (CVE-2020-9713)
vulnerability in adobe (CVE-2020-9713). Confidential information can be exposed externally.
|
| CVE-2020-9711 |
|
Out-of-Bounds Read in adobe (CVE-2020-9711)
vulnerability in adobe (CVE-2020-9711). Confidential information can be exposed externally.
|
| CVE-2026-55173 |
|
OS Command Injection in wwbn/avideo (CVE-2026-55173)
OS command injection in wwbn/avideo (CVE-2026-55173). Successful exploitation can lead to full system takeover. Exploitable via ``sanitizeFFmpegCommand``.
|
| CVE-2026-44958 |
|
Vulnerability in CVE-2026-44958 (CVE-2026-44958)
vulnerability in CVE-2026-44958 (CVE-2026-44958). Risk of unauthorized operations or information disclosure.
|