Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-8707 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8707)
cross-site scripting in wordpress (CVE-2026-8707). Risk of unauthorized operations or information disclosure.
CVE-2026-8708 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-8708)
vulnerability in wordpress (CVE-2026-8708). Risk of unauthorized operations or information disclosure.
CVE-2026-8760 Vulnerability in wordpress (CVE-2026-8760)
vulnerability in wordpress (CVE-2026-8760). Successful exploitation can lead to full system takeover.
CVE-2026-7614 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-7614)
vulnerability in wordpress (CVE-2026-7614). Risk of unauthorized operations or information disclosure.
CVE-2026-8040 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8040)
cross-site scripting in wordpress (CVE-2026-8040). Risk of unauthorized operations or information disclosure.
CVE-2026-6268 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6268)
cross-site scripting in wordpress (CVE-2026-6268). Risk of unauthorized operations or information disclosure.
CVE-2026-9236 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-9236)
vulnerability in wordpress (CVE-2026-9236). Risk of unauthorized operations or information disclosure.
CVE-2026-6287 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6287)
cross-site scripting in wordpress (CVE-2026-6287). Risk of unauthorized operations or information disclosure.
CVE-2025-14481 Vulnerability in wordpress (CVE-2025-14481)
vulnerability in wordpress (CVE-2025-14481). Risk of unauthorized operations or information disclosure.
CVE-2026-9022 Cross-Site Scripting (XSS) in wordpress (CVE-2026-9022)
cross-site scripting in wordpress (CVE-2026-9022). Risk of unauthorized operations or information disclosure.
CVE-2026-7493 Vulnerability in wordpress (CVE-2026-7493)
vulnerability in wordpress (CVE-2026-7493). Risk of unauthorized operations or information disclosure.
CVE-2026-9609 Vulnerability in CVE-2026-9609 (CVE-2026-9609)
vulnerability in CVE-2026-9609 (CVE-2026-9609). Risk of unauthorized operations or information disclosure.
CVE-2026-6565 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6565)
cross-site scripting in wordpress (CVE-2026-6565). Risk of unauthorized operations or information disclosure.
CVE-2026-49014 Vulnerability in gdal (CVE-2026-49014)
vulnerability in gdal (CVE-2026-49014). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.13.1` or later.
CVE-2026-7899504660052 Vulnerability in Google chrome (CVE-2026-7899504660052)
vulnerability in Google chrome (CVE-2026-7899504660052). Risk of unauthorized operations or information disclosure.
CVE-2026-44974 Vulnerability in @hapi/content (CVE-2026-44974)
vulnerability in @hapi/content (CVE-2026-44974). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.0.2` or later.
CVE-2026-44739 SQL Injection in pimcore/pimcore (CVE-2026-44739)
SQL injection in pimcore/pimcore (CVE-2026-44739). Confidential information can be exposed externally. Exploitable via `POST /admin/bundle/customreports/custom-report/column-config`. Mitigation: upgrade to `12.3.6` or later.
CVE-2026-9607 Vulnerability in sqli (CVE-2026-9607)
vulnerability in sqli (CVE-2026-9607). Risk of unauthorized operations or information disclosure.
CVE-2026-9606 Vulnerability in sqli (CVE-2026-9606)
vulnerability in sqli (CVE-2026-9606). Risk of unauthorized operations or information disclosure.
CVE-2026-44632 Code Injection in org.yamcs:yamcs-core (CVE-2026-44632)
code injection in org.yamcs:yamcs-core (CVE-2026-44632). Successful exploitation can lead to full system takeover. Exploitable via ``ChangeMissionDatabase``. Mitigation: upgrade to `5.12.7` or later.
CVE-2026-44596 Vulnerability in org.yamcs:yamcs-core (CVE-2026-44596)
vulnerability in org.yamcs:yamcs-core (CVE-2026-44596). Risk of unauthorized operations or information disclosure. Exploitable via `POST /auth/token`. Mitigation: upgrade to `5.12.7` or later.
CVE-2026-44595 Vulnerability in org.yamcs:yamcs-core (CVE-2026-44595)
vulnerability in org.yamcs:yamcs-core (CVE-2026-44595). Risk of unauthorized operations or information disclosure. Exploitable via ``listUsers``. Mitigation: upgrade to `5.12.7` or later.
CVE-2026-44177 Path Traversal in getkirby/cms (CVE-2026-44177)
path traversal in getkirby/cms (CVE-2026-44177). Risk of unauthorized operations or information disclosure. Exploitable via ``Users``. Mitigation: upgrade to `5.4.1` or later.
CVE-2026-41207 Vulnerability in io.netty.incubator:netty-incubator-codec-ohttp (CVE-2026-41207)
vulnerability in io.netty.incubator:netty-incubator-codec-ohttp (CVE-2026-41207). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.0.21.Final` or later.
CVE-2026-9584 A security vulnerability has been detected in code-projects Project Management System 1.0....
A security vulnerability has been detected in code-projects Project Management System 1.0....
CVE-2026-9603 Vulnerability in CVE-2026-9603 (CVE-2026-9603)
vulnerability in CVE-2026-9603 (CVE-2026-9603). Risk of unauthorized operations or information disclosure.
CVE-2025-43451 Vulnerability in apple (CVE-2025-43451)
vulnerability in apple (CVE-2025-43451). Confidential information can be exposed externally.
CVE-2025-46280 Out-of-Bounds Read in apple (CVE-2025-46280)
vulnerability in apple (CVE-2025-46280). Risk of unauthorized operations or information disclosure.
CVE-2025-46284 Vulnerability in apple (CVE-2025-46284)
vulnerability in apple (CVE-2025-46284). Successful exploitation can lead to full system takeover.
CVE-2025-46307 Vulnerability in apple (CVE-2025-46307)
vulnerability in apple (CVE-2025-46307). Confidential information can be exposed externally.
CVE-2025-43289 Vulnerability in apple (CVE-2025-43289)
vulnerability in apple (CVE-2025-43289). Confidential information can be exposed externally.
CVE-2025-43290 Vulnerability in apple (CVE-2025-43290)
vulnerability in apple (CVE-2025-43290). Data can be tampered with by attackers.
CVE-2025-43306 Privilege Escalation in apple (CVE-2025-43306)
vulnerability in apple (CVE-2025-43306). Successful exploitation can lead to full system takeover.
CVE-2026-9583 Information Disclosure in CVE-2026-9583 (CVE-2026-9583)
vulnerability in CVE-2026-9583 (CVE-2026-9583). Risk of unauthorized operations or information disclosure.
CVE-2026-47672 Vulnerability in com.oviva.telematik:epa4all-rest-service (CVE-2026-47672)
vulnerability in com.oviva.telematik:epa4all-rest-service (CVE-2026-47672). Data can be tampered with by attackers.
CVE-2026-9573 Vulnerability in sqli (CVE-2026-9573)
vulnerability in sqli (CVE-2026-9573). Risk of unauthorized operations or information disclosure.
CVE-2026-9574 Vulnerability in sqli (CVE-2026-9574)
vulnerability in sqli (CVE-2026-9574). Risk of unauthorized operations or information disclosure.
CVE-2026-9575 Vulnerability in sqli (CVE-2026-9575)
vulnerability in sqli (CVE-2026-9575). Risk of unauthorized operations or information disclosure.
CVE-2026-4051 Vulnerability in ibm (CVE-2026-4051)
vulnerability in ibm (CVE-2026-4051). Successful exploitation can lead to full system takeover.
CVE-2026-3603 XXE (XML External Entity) in ibm (CVE-2026-3603)
vulnerability in ibm (CVE-2026-3603). Confidential information can be exposed externally.
CVE-2026-3660 Authorization Flaw in ibm (CVE-2026-3660)
vulnerability in ibm (CVE-2026-3660). Successful exploitation can lead to full system takeover.
CVE-2026-9170 Code Injection in dos (CVE-2026-9170)
code injection in dos (CVE-2026-9170). Successful exploitation can lead to full system takeover.
CVE-2026-8633 Code Injection in ibm (CVE-2026-8633)
code injection in ibm (CVE-2026-8633). Successful exploitation can lead to full system takeover.
CVE-2026-8620 Vulnerability in ibm (CVE-2026-8620)
vulnerability in ibm (CVE-2026-8620). Confidential information can be exposed externally.
CVE-2026-8835 Vulnerability in dos (CVE-2026-8835)
vulnerability in dos (CVE-2026-8835). Confidential information can be exposed externally.
CVE-2026-8856 Vulnerability in dos (CVE-2026-8856)
vulnerability in dos (CVE-2026-8856). Data can be tampered with by attackers.
CVE-2026-8834 Vulnerability in dos (CVE-2026-8834)
vulnerability in dos (CVE-2026-8834). Successful exploitation can lead to full system takeover.
CVE-2026-8854 Vulnerability in dos (CVE-2026-8854)
vulnerability in dos (CVE-2026-8854). Risk of unauthorized operations or information disclosure.
CVE-2026-8855 Code Injection in dos (CVE-2026-8855)
code injection in dos (CVE-2026-8855). Successful exploitation can lead to full system takeover.
CVE-2026-48695 OS Command Injection in pavel-odintsov (CVE-2026-48695)
OS command injection in pavel-odintsov (CVE-2026-48695). Confidential information can be exposed externally. Exploitable via ``date``.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →