Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-8382 |
|
Vulnerability in wordpress (CVE-2026-8382)
vulnerability in wordpress (CVE-2026-8382). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10155 |
|
Vulnerability in sqli (CVE-2026-10155)
vulnerability in sqli (CVE-2026-10155). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10154 |
|
Vulnerability in CVE-2026-10154 (CVE-2026-10154)
vulnerability in CVE-2026-10154 (CVE-2026-10154). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10153 |
|
Cross-Site Scripting (XSS) in CVE-2026-10153 (CVE-2026-10153)
cross-site scripting in CVE-2026-10153 (CVE-2026-10153). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10152 |
|
Vulnerability in CVE-2026-10152 (CVE-2026-10152)
vulnerability in CVE-2026-10152 (CVE-2026-10152). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-25420 |
|
SQL Injection in sqli (CVE-2018-25420)
SQL injection in sqli (CVE-2018-25420). Confidential information can be exposed externally.
|
| CVE-2018-25421 |
|
Path Traversal in path-traversal (CVE-2018-25421)
path traversal in path-traversal (CVE-2018-25421). Confidential information can be exposed externally.
|
| CVE-2018-25422 |
|
SQL Injection in sqli (CVE-2018-25422)
SQL injection in sqli (CVE-2018-25422). Confidential information can be exposed externally.
|
| CVE-2018-25424 |
|
SQL Injection in sqli (CVE-2018-25424)
SQL injection in sqli (CVE-2018-25424). Confidential information can be exposed externally.
|
| CVE-2018-25425 |
|
SQL Injection in c (CVE-2018-25425)
SQL injection in c (CVE-2018-25425). Confidential information can be exposed externally.
|
| CVE-2018-25413 |
|
SQL Injection in sqli (CVE-2018-25413)
SQL injection in sqli (CVE-2018-25413). Confidential information can be exposed externally.
|
| CVE-2018-25414 |
|
SQL Injection in sqli (CVE-2018-25414)
SQL injection in sqli (CVE-2018-25414). Confidential information can be exposed externally.
|
| CVE-2018-25415 |
|
SQL Injection in sqli (CVE-2018-25415)
SQL injection in sqli (CVE-2018-25415). Confidential information can be exposed externally.
|
| CVE-2018-25416 |
|
SQL Injection in sqli (CVE-2018-25416)
SQL injection in sqli (CVE-2018-25416). Confidential information can be exposed externally.
|
| CVE-2018-25417 |
|
SQL Injection in sqli (CVE-2018-25417)
SQL injection in sqli (CVE-2018-25417). Confidential information can be exposed externally.
|
| CVE-2018-25418 |
|
SQL Injection in sqli (CVE-2018-25418)
SQL injection in sqli (CVE-2018-25418). Confidential information can be exposed externally.
|
| CVE-2018-25419 |
|
SQL Injection in sqli (CVE-2018-25419)
SQL injection in sqli (CVE-2018-25419). Confidential information can be exposed externally.
|
| CVE-2018-25407 |
|
SQL Injection in sqli (CVE-2018-25407)
SQL injection in sqli (CVE-2018-25407). Confidential information can be exposed externally.
|
| CVE-2018-25408 |
|
Path Traversal in path-traversal (CVE-2018-25408)
path traversal in path-traversal (CVE-2018-25408). Confidential information can be exposed externally.
|
| CVE-2018-25409 |
|
Unrestricted File Upload in CVE-2018-25409 (CVE-2018-25409)
vulnerability in CVE-2018-25409 (CVE-2018-25409). Successful exploitation can lead to full system takeover.
|
| CVE-2018-25410 |
|
SQL Injection in sqli (CVE-2018-25410)
SQL injection in sqli (CVE-2018-25410). Confidential information can be exposed externally.
|
| CVE-2018-25411 |
|
SQL Injection in sqli (CVE-2018-25411)
SQL injection in sqli (CVE-2018-25411). Confidential information can be exposed externally.
|
| CVE-2018-25412 |
|
Vulnerability in deltasql-project (CVE-2018-25412)
vulnerability in deltasql-project (CVE-2018-25412). Successful exploitation can lead to full system takeover.
|
| CVE-2018-25406 |
|
SQL Injection in sqli (CVE-2018-25406)
SQL injection in sqli (CVE-2018-25406). Confidential information can be exposed externally.
|
| CVE-2018-25405 |
|
SQL Injection in sqli (CVE-2018-25405)
SQL injection in sqli (CVE-2018-25405). Confidential information can be exposed externally.
|
| CVE-2026-46242 |
|
Use-After-Free in Google linux (CVE-2026-46242)
vulnerability in Google linux (CVE-2026-46242). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7465 |
|
Privilege Escalation in wordpress (CVE-2026-7465)
vulnerability in wordpress (CVE-2026-7465). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9757 |
|
SQL Injection in wordpress (CVE-2026-9757)
SQL injection in wordpress (CVE-2026-9757). Confidential information can be exposed externally.
|
| CVE-2026-7459 |
|
Vulnerability in wordpress (CVE-2026-7459)
vulnerability in wordpress (CVE-2026-7459). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10110 |
|
Vulnerability in sqli (CVE-2026-10110)
vulnerability in sqli (CVE-2026-10110). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48840 |
|
Vulnerability in exim (CVE-2026-48840)
vulnerability in exim (CVE-2026-48840). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47233 |
|
Vulnerability in admidio/admidio (CVE-2026-47233)
vulnerability in admidio/admidio (CVE-2026-47233). Data can be tampered with by attackers. Exploitable via ``d37ca6b27b9674238e58491cf7ba292e66898f15``. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47232 |
|
Cross-Site Request Forgery (CSRF) in admidio/admidio (CVE-2026-47232)
vulnerability in admidio/admidio (CVE-2026-47232). Risk of unauthorized operations or information disclosure. Exploitable via ``adm_csrf_token``. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47231 |
|
Vulnerability in admidio/admidio (CVE-2026-47231)
vulnerability in admidio/admidio (CVE-2026-47231). Confidential information can be exposed externally. Exploitable via `GET /modules/documents-files.php`. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47230 |
|
Vulnerability in admidio/admidio (CVE-2026-47230)
vulnerability in admidio/admidio (CVE-2026-47230). Data can be tampered with by attackers. Exploitable via `GET /modules/documents-files.php`. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47229 |
|
Cross-Site Request Forgery (CSRF) in admidio/admidio (CVE-2026-47229)
vulnerability in admidio/admidio (CVE-2026-47229). Risk of unauthorized operations or information disclosure. Exploitable via `GET /modules/sso/clients.php`. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47228 |
|
Cross-Site Request Forgery (CSRF) in admidio/admidio (CVE-2026-47228)
vulnerability in admidio/admidio (CVE-2026-47228). Data can be tampered with by attackers. Exploitable via `GET /modules/registration.php`. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47227 |
|
Vulnerability in admidio/admidio (CVE-2026-47227)
vulnerability in admidio/admidio (CVE-2026-47227). Data can be tampered with by attackers. Exploitable via `POST /modules/categories.php`. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47226 |
|
Vulnerability in admidio/admidio (CVE-2026-47226)
vulnerability in admidio/admidio (CVE-2026-47226). Data can be tampered with by attackers. Exploitable via ``folder_uuid``. Mitigation: upgrade to `5.0.7` or later.
|
| CVE-2026-47212 |
|
Vulnerability in symfony/symfony (CVE-2026-47212)
vulnerability in symfony/symfony (CVE-2026-47212). Risk of unauthorized operations or information disclosure. Exploitable via ``framework.trusted_proxies``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-48810 |
|
Vulnerability in laravel (CVE-2026-48810)
vulnerability in laravel (CVE-2026-48810). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.221` or later.
|
| CVE-2026-48811 |
|
Vulnerability in laravel (CVE-2026-48811)
vulnerability in laravel (CVE-2026-48811). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.221` or later.
|
| CVE-2026-47123 |
|
Vulnerability in laravel (CVE-2026-47123)
vulnerability in laravel (CVE-2026-47123). Data can be tampered with by attackers. Mitigation: upgrade to `1.8.220` or later.
|
| CVE-2026-48555 |
|
SSRF (Server-Side Request Forgery) in spatie/laravel-medialibrary (CVE-2026-48555)
SSRF in spatie/laravel-medialibrary (CVE-2026-48555). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.23.0` or later.
|
| CVE-2026-48557 |
|
Spatie Laravel Media Library contains a file upload restriction bypass
Spatie Laravel Media Library contains a file upload restriction bypass
|
| CVE-2026-45294 |
|
Vulnerability in laravel (CVE-2026-45294)
vulnerability in laravel (CVE-2026-45294). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.219` or later.
|
| CVE-2026-34127 |
|
Cross-Site Scripting (XSS) in tp-link (CVE-2026-34127)
cross-site scripting in tp-link (CVE-2026-34127). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49381 |
|
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
|
| CVE-2026-49382 |
|
Vulnerability in jetbrains (CVE-2026-49382)
vulnerability in jetbrains (CVE-2026-49382). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49383 |
|
In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible
In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible
|