Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-8382 Vulnerability in wordpress (CVE-2026-8382)
vulnerability in wordpress (CVE-2026-8382). Risk of unauthorized operations or information disclosure.
CVE-2026-10155 Vulnerability in sqli (CVE-2026-10155)
vulnerability in sqli (CVE-2026-10155). Risk of unauthorized operations or information disclosure.
CVE-2026-10154 Vulnerability in CVE-2026-10154 (CVE-2026-10154)
vulnerability in CVE-2026-10154 (CVE-2026-10154). Risk of unauthorized operations or information disclosure.
CVE-2026-10153 Cross-Site Scripting (XSS) in CVE-2026-10153 (CVE-2026-10153)
cross-site scripting in CVE-2026-10153 (CVE-2026-10153). Risk of unauthorized operations or information disclosure.
CVE-2026-10152 Vulnerability in CVE-2026-10152 (CVE-2026-10152)
vulnerability in CVE-2026-10152 (CVE-2026-10152). Risk of unauthorized operations or information disclosure.
CVE-2018-25420 SQL Injection in sqli (CVE-2018-25420)
SQL injection in sqli (CVE-2018-25420). Confidential information can be exposed externally.
CVE-2018-25421 Path Traversal in path-traversal (CVE-2018-25421)
path traversal in path-traversal (CVE-2018-25421). Confidential information can be exposed externally.
CVE-2018-25422 SQL Injection in sqli (CVE-2018-25422)
SQL injection in sqli (CVE-2018-25422). Confidential information can be exposed externally.
CVE-2018-25424 SQL Injection in sqli (CVE-2018-25424)
SQL injection in sqli (CVE-2018-25424). Confidential information can be exposed externally.
CVE-2018-25425 SQL Injection in c (CVE-2018-25425)
SQL injection in c (CVE-2018-25425). Confidential information can be exposed externally.
CVE-2018-25413 SQL Injection in sqli (CVE-2018-25413)
SQL injection in sqli (CVE-2018-25413). Confidential information can be exposed externally.
CVE-2018-25414 SQL Injection in sqli (CVE-2018-25414)
SQL injection in sqli (CVE-2018-25414). Confidential information can be exposed externally.
CVE-2018-25415 SQL Injection in sqli (CVE-2018-25415)
SQL injection in sqli (CVE-2018-25415). Confidential information can be exposed externally.
CVE-2018-25416 SQL Injection in sqli (CVE-2018-25416)
SQL injection in sqli (CVE-2018-25416). Confidential information can be exposed externally.
CVE-2018-25417 SQL Injection in sqli (CVE-2018-25417)
SQL injection in sqli (CVE-2018-25417). Confidential information can be exposed externally.
CVE-2018-25418 SQL Injection in sqli (CVE-2018-25418)
SQL injection in sqli (CVE-2018-25418). Confidential information can be exposed externally.
CVE-2018-25419 SQL Injection in sqli (CVE-2018-25419)
SQL injection in sqli (CVE-2018-25419). Confidential information can be exposed externally.
CVE-2018-25407 SQL Injection in sqli (CVE-2018-25407)
SQL injection in sqli (CVE-2018-25407). Confidential information can be exposed externally.
CVE-2018-25408 Path Traversal in path-traversal (CVE-2018-25408)
path traversal in path-traversal (CVE-2018-25408). Confidential information can be exposed externally.
CVE-2018-25409 Unrestricted File Upload in CVE-2018-25409 (CVE-2018-25409)
vulnerability in CVE-2018-25409 (CVE-2018-25409). Successful exploitation can lead to full system takeover.
CVE-2018-25410 SQL Injection in sqli (CVE-2018-25410)
SQL injection in sqli (CVE-2018-25410). Confidential information can be exposed externally.
CVE-2018-25411 SQL Injection in sqli (CVE-2018-25411)
SQL injection in sqli (CVE-2018-25411). Confidential information can be exposed externally.
CVE-2018-25412 Vulnerability in deltasql-project (CVE-2018-25412)
vulnerability in deltasql-project (CVE-2018-25412). Successful exploitation can lead to full system takeover.
CVE-2018-25406 SQL Injection in sqli (CVE-2018-25406)
SQL injection in sqli (CVE-2018-25406). Confidential information can be exposed externally.
CVE-2018-25405 SQL Injection in sqli (CVE-2018-25405)
SQL injection in sqli (CVE-2018-25405). Confidential information can be exposed externally.
CVE-2026-46242 Use-After-Free in Google linux (CVE-2026-46242)
vulnerability in Google linux (CVE-2026-46242). Successful exploitation can lead to full system takeover.
CVE-2026-7465 Privilege Escalation in wordpress (CVE-2026-7465)
vulnerability in wordpress (CVE-2026-7465). Successful exploitation can lead to full system takeover.
CVE-2026-9757 SQL Injection in wordpress (CVE-2026-9757)
SQL injection in wordpress (CVE-2026-9757). Confidential information can be exposed externally.
CVE-2026-7459 Vulnerability in wordpress (CVE-2026-7459)
vulnerability in wordpress (CVE-2026-7459). Successful exploitation can lead to full system takeover.
CVE-2026-10110 Vulnerability in sqli (CVE-2026-10110)
vulnerability in sqli (CVE-2026-10110). Risk of unauthorized operations or information disclosure.
CVE-2026-48840 Vulnerability in exim (CVE-2026-48840)
vulnerability in exim (CVE-2026-48840). Risk of unauthorized operations or information disclosure.
CVE-2026-47233 Vulnerability in admidio/admidio (CVE-2026-47233)
vulnerability in admidio/admidio (CVE-2026-47233). Data can be tampered with by attackers. Exploitable via ``d37ca6b27b9674238e58491cf7ba292e66898f15``. Mitigation: upgrade to `5.0.10` or later.
CVE-2026-47232 Cross-Site Request Forgery (CSRF) in admidio/admidio (CVE-2026-47232)
vulnerability in admidio/admidio (CVE-2026-47232). Risk of unauthorized operations or information disclosure. Exploitable via ``adm_csrf_token``. Mitigation: upgrade to `5.0.10` or later.
CVE-2026-47231 Vulnerability in admidio/admidio (CVE-2026-47231)
vulnerability in admidio/admidio (CVE-2026-47231). Confidential information can be exposed externally. Exploitable via `GET /modules/documents-files.php`. Mitigation: upgrade to `5.0.10` or later.
CVE-2026-47230 Vulnerability in admidio/admidio (CVE-2026-47230)
vulnerability in admidio/admidio (CVE-2026-47230). Data can be tampered with by attackers. Exploitable via `GET /modules/documents-files.php`. Mitigation: upgrade to `5.0.10` or later.
CVE-2026-47229 Cross-Site Request Forgery (CSRF) in admidio/admidio (CVE-2026-47229)
vulnerability in admidio/admidio (CVE-2026-47229). Risk of unauthorized operations or information disclosure. Exploitable via `GET /modules/sso/clients.php`. Mitigation: upgrade to `5.0.10` or later.
CVE-2026-47228 Cross-Site Request Forgery (CSRF) in admidio/admidio (CVE-2026-47228)
vulnerability in admidio/admidio (CVE-2026-47228). Data can be tampered with by attackers. Exploitable via `GET /modules/registration.php`. Mitigation: upgrade to `5.0.10` or later.
CVE-2026-47227 Vulnerability in admidio/admidio (CVE-2026-47227)
vulnerability in admidio/admidio (CVE-2026-47227). Data can be tampered with by attackers. Exploitable via `POST /modules/categories.php`. Mitigation: upgrade to `5.0.10` or later.
CVE-2026-47226 Vulnerability in admidio/admidio (CVE-2026-47226)
vulnerability in admidio/admidio (CVE-2026-47226). Data can be tampered with by attackers. Exploitable via ``folder_uuid``. Mitigation: upgrade to `5.0.7` or later.
CVE-2026-47212 Vulnerability in symfony/symfony (CVE-2026-47212)
vulnerability in symfony/symfony (CVE-2026-47212). Risk of unauthorized operations or information disclosure. Exploitable via ``framework.trusted_proxies``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-48810 Vulnerability in laravel (CVE-2026-48810)
vulnerability in laravel (CVE-2026-48810). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.221` or later.
CVE-2026-48811 Vulnerability in laravel (CVE-2026-48811)
vulnerability in laravel (CVE-2026-48811). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.221` or later.
CVE-2026-47123 Vulnerability in laravel (CVE-2026-47123)
vulnerability in laravel (CVE-2026-47123). Data can be tampered with by attackers. Mitigation: upgrade to `1.8.220` or later.
CVE-2026-48555 SSRF (Server-Side Request Forgery) in spatie/laravel-medialibrary (CVE-2026-48555)
SSRF in spatie/laravel-medialibrary (CVE-2026-48555). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.23.0` or later.
CVE-2026-48557 Spatie Laravel Media Library contains a file upload restriction bypass
Spatie Laravel Media Library contains a file upload restriction bypass
CVE-2026-45294 Vulnerability in laravel (CVE-2026-45294)
vulnerability in laravel (CVE-2026-45294). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.219` or later.
CVE-2026-34127 Cross-Site Scripting (XSS) in tp-link (CVE-2026-34127)
cross-site scripting in tp-link (CVE-2026-34127). Risk of unauthorized operations or information disclosure.
CVE-2026-49381 In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
CVE-2026-49382 Vulnerability in jetbrains (CVE-2026-49382)
vulnerability in jetbrains (CVE-2026-49382). Risk of unauthorized operations or information disclosure.
CVE-2026-49383 In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible
In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →