Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-8707 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-8707)
cross-site scripting in wordpress (CVE-2026-8707). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8708 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8708)
vulnerability in wordpress (CVE-2026-8708). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8760 |
|
Vulnerability in wordpress (CVE-2026-8760)
vulnerability in wordpress (CVE-2026-8760). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7614 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-7614)
vulnerability in wordpress (CVE-2026-7614). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8040 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-8040)
cross-site scripting in wordpress (CVE-2026-8040). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6268 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6268)
cross-site scripting in wordpress (CVE-2026-6268). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9236 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9236)
vulnerability in wordpress (CVE-2026-9236). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6287 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6287)
cross-site scripting in wordpress (CVE-2026-6287). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-14481 |
|
Vulnerability in wordpress (CVE-2025-14481)
vulnerability in wordpress (CVE-2025-14481). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9022 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-9022)
cross-site scripting in wordpress (CVE-2026-9022). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7493 |
|
Vulnerability in wordpress (CVE-2026-7493)
vulnerability in wordpress (CVE-2026-7493). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9609 |
|
Vulnerability in CVE-2026-9609 (CVE-2026-9609)
vulnerability in CVE-2026-9609 (CVE-2026-9609). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6565 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6565)
cross-site scripting in wordpress (CVE-2026-6565). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49014 |
|
Vulnerability in gdal (CVE-2026-49014)
vulnerability in gdal (CVE-2026-49014). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.13.1` or later.
|
| CVE-2026-7899504660052 |
|
Vulnerability in Google chrome (CVE-2026-7899504660052)
vulnerability in Google chrome (CVE-2026-7899504660052). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44974 |
|
Vulnerability in @hapi/content (CVE-2026-44974)
vulnerability in @hapi/content (CVE-2026-44974). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.0.2` or later.
|
| CVE-2026-44739 |
|
SQL Injection in pimcore/pimcore (CVE-2026-44739)
SQL injection in pimcore/pimcore (CVE-2026-44739). Confidential information can be exposed externally. Exploitable via `POST /admin/bundle/customreports/custom-report/column-config`. Mitigation: upgrade to `12.3.6` or later.
|
| CVE-2026-9607 |
|
Vulnerability in sqli (CVE-2026-9607)
vulnerability in sqli (CVE-2026-9607). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9606 |
|
Vulnerability in sqli (CVE-2026-9606)
vulnerability in sqli (CVE-2026-9606). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44632 |
|
Code Injection in org.yamcs:yamcs-core (CVE-2026-44632)
code injection in org.yamcs:yamcs-core (CVE-2026-44632). Successful exploitation can lead to full system takeover. Exploitable via ``ChangeMissionDatabase``. Mitigation: upgrade to `5.12.7` or later.
|
| CVE-2026-44596 |
|
Vulnerability in org.yamcs:yamcs-core (CVE-2026-44596)
vulnerability in org.yamcs:yamcs-core (CVE-2026-44596). Risk of unauthorized operations or information disclosure. Exploitable via `POST /auth/token`. Mitigation: upgrade to `5.12.7` or later.
|
| CVE-2026-44595 |
|
Vulnerability in org.yamcs:yamcs-core (CVE-2026-44595)
vulnerability in org.yamcs:yamcs-core (CVE-2026-44595). Risk of unauthorized operations or information disclosure. Exploitable via ``listUsers``. Mitigation: upgrade to `5.12.7` or later.
|
| CVE-2026-44177 |
|
Path Traversal in getkirby/cms (CVE-2026-44177)
path traversal in getkirby/cms (CVE-2026-44177). Risk of unauthorized operations or information disclosure. Exploitable via ``Users``. Mitigation: upgrade to `5.4.1` or later.
|
| CVE-2026-41207 |
|
Vulnerability in io.netty.incubator:netty-incubator-codec-ohttp (CVE-2026-41207)
vulnerability in io.netty.incubator:netty-incubator-codec-ohttp (CVE-2026-41207). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.0.21.Final` or later.
|
| CVE-2026-9584 |
|
A security vulnerability has been detected in code-projects Project Management System 1.0....
A security vulnerability has been detected in code-projects Project Management System 1.0....
|
| CVE-2026-9603 |
|
Vulnerability in CVE-2026-9603 (CVE-2026-9603)
vulnerability in CVE-2026-9603 (CVE-2026-9603). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-43451 |
|
Vulnerability in apple (CVE-2025-43451)
vulnerability in apple (CVE-2025-43451). Confidential information can be exposed externally.
|
| CVE-2025-46280 |
|
Out-of-Bounds Read in apple (CVE-2025-46280)
vulnerability in apple (CVE-2025-46280). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-46284 |
|
Vulnerability in apple (CVE-2025-46284)
vulnerability in apple (CVE-2025-46284). Successful exploitation can lead to full system takeover.
|
| CVE-2025-46307 |
|
Vulnerability in apple (CVE-2025-46307)
vulnerability in apple (CVE-2025-46307). Confidential information can be exposed externally.
|
| CVE-2025-43289 |
|
Vulnerability in apple (CVE-2025-43289)
vulnerability in apple (CVE-2025-43289). Confidential information can be exposed externally.
|
| CVE-2025-43290 |
|
Vulnerability in apple (CVE-2025-43290)
vulnerability in apple (CVE-2025-43290). Data can be tampered with by attackers.
|
| CVE-2025-43306 |
|
Privilege Escalation in apple (CVE-2025-43306)
vulnerability in apple (CVE-2025-43306). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9583 |
|
Information Disclosure in CVE-2026-9583 (CVE-2026-9583)
vulnerability in CVE-2026-9583 (CVE-2026-9583). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47672 |
|
Vulnerability in com.oviva.telematik:epa4all-rest-service (CVE-2026-47672)
vulnerability in com.oviva.telematik:epa4all-rest-service (CVE-2026-47672). Data can be tampered with by attackers.
|
| CVE-2026-9573 |
|
Vulnerability in sqli (CVE-2026-9573)
vulnerability in sqli (CVE-2026-9573). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9574 |
|
Vulnerability in sqli (CVE-2026-9574)
vulnerability in sqli (CVE-2026-9574). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9575 |
|
Vulnerability in sqli (CVE-2026-9575)
vulnerability in sqli (CVE-2026-9575). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4051 |
|
Vulnerability in ibm (CVE-2026-4051)
vulnerability in ibm (CVE-2026-4051). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3603 |
|
XXE (XML External Entity) in ibm (CVE-2026-3603)
vulnerability in ibm (CVE-2026-3603). Confidential information can be exposed externally.
|
| CVE-2026-3660 |
|
Authorization Flaw in ibm (CVE-2026-3660)
vulnerability in ibm (CVE-2026-3660). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9170 |
|
Code Injection in dos (CVE-2026-9170)
code injection in dos (CVE-2026-9170). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8633 |
|
Code Injection in ibm (CVE-2026-8633)
code injection in ibm (CVE-2026-8633). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8620 |
|
Vulnerability in ibm (CVE-2026-8620)
vulnerability in ibm (CVE-2026-8620). Confidential information can be exposed externally.
|
| CVE-2026-8835 |
|
Vulnerability in dos (CVE-2026-8835)
vulnerability in dos (CVE-2026-8835). Confidential information can be exposed externally.
|
| CVE-2026-8856 |
|
Vulnerability in dos (CVE-2026-8856)
vulnerability in dos (CVE-2026-8856). Data can be tampered with by attackers.
|
| CVE-2026-8834 |
|
Vulnerability in dos (CVE-2026-8834)
vulnerability in dos (CVE-2026-8834). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8854 |
|
Vulnerability in dos (CVE-2026-8854)
vulnerability in dos (CVE-2026-8854). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8855 |
|
Code Injection in dos (CVE-2026-8855)
code injection in dos (CVE-2026-8855). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48695 |
|
OS Command Injection in pavel-odintsov (CVE-2026-48695)
OS command injection in pavel-odintsov (CVE-2026-48695). Confidential information can be exposed externally. Exploitable via ``date``.
|