Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-9044 OS Command Injection in tp-link (CVE-2026-9044)
OS command injection in tp-link (CVE-2026-9044). Successful exploitation can lead to full system takeover.
CVE-2026-34641 Out-of-Bounds Write in adobe (CVE-2026-34641)
out-of-bounds write in adobe (CVE-2026-34641). Successful exploitation can lead to full system takeover.
CVE-2026-54768 Vulnerability in wp-graphql/wp-graphql (CVE-2026-54768)
vulnerability in wp-graphql/wp-graphql (CVE-2026-54768). Risk of unauthorized operations or information disclosure. Exploitable via ``sendPasswordResetEmail``.
CVE-2025-69948 SQL Injection in sqli (CVE-2025-69948)
SQL injection in sqli (CVE-2025-69948). Successful exploitation can lead to full system takeover.
CVE-2025-69946 SQL Injection in sqli (CVE-2025-69946)
SQL injection in sqli (CVE-2025-69946). Successful exploitation can lead to full system takeover.
CVE-2026-53599 Unrestricted File Upload in redaxo/source (CVE-2026-53599)
vulnerability in redaxo/source (CVE-2026-53599). Successful exploitation can lead to full system takeover. Exploitable via ``shell.php.any.jpg``. Mitigation: upgrade to `5.21.1` or later.
CVE-2026-57232 SSRF (Server-Side Request Forgery) in symfony (CVE-2026-57232)
SSRF in symfony (CVE-2026-57232). Risk of unauthorized operations or information disclosure.
CVE-2026-67350 Open Redirect in CVE-2026-67350 (CVE-2026-67350)
vulnerability in CVE-2026-67350 (CVE-2026-67350). Risk of unauthorized operations or information disclosure.
CVE-2026-46594 Cross-Site Scripting (XSS) in CVE-2026-46594 (CVE-2026-46594)
cross-site scripting in CVE-2026-46594 (CVE-2026-46594). Risk of unauthorized operations or information disclosure.
CVE-2025-67650 SQL Injection in sqli (CVE-2025-67650)
SQL injection in sqli (CVE-2025-67650). Risk of unauthorized operations or information disclosure.
CVE-2025-67651 Cross-Site Request Forgery (CSRF) in csrf (CVE-2025-67651)
vulnerability in csrf (CVE-2025-67651). Risk of unauthorized operations or information disclosure.
CVE-2026-46593 SQL Injection in sqli (CVE-2026-46593)
SQL injection in sqli (CVE-2026-46593). Risk of unauthorized operations or information disclosure.
CVE-2025-67649 SQL Injection in sqli (CVE-2025-67649)
SQL injection in sqli (CVE-2025-67649). Risk of unauthorized operations or information disclosure.
CVE-2026-62391 Path Traversal in apache (CVE-2026-62391)
path traversal in apache (CVE-2026-62391). Confidential information can be exposed externally.
CVE-2026-64607 Vulnerability in org.apache.httpcomponents.client5:httpclient5 (CVE-2026-64607)
vulnerability in org.apache.httpcomponents.client5:httpclient5 (CVE-2026-64607). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.6.3` or later.
CVE-2026-44615 Path Traversal in apache (CVE-2026-44615)
path traversal in apache (CVE-2026-44615). Confidential information can be exposed externally.
CVE-2026-17567 Vulnerability in wordpress (CVE-2026-17567)
vulnerability in wordpress (CVE-2026-17567). Risk of unauthorized operations or information disclosure.
CVE-2026-18437 Vulnerability in wordpress (CVE-2026-18437)
vulnerability in wordpress (CVE-2026-18437). Risk of unauthorized operations or information disclosure.
CVE-2026-18436 Vulnerability in wordpress (CVE-2026-18436)
vulnerability in wordpress (CVE-2026-18436). Risk of unauthorized operations or information disclosure. Exploitable via `POST /wp-json/mailpress/v1/campaign/`.
CVE-2026-8155 Vulnerability in wordpress (CVE-2026-8155)
vulnerability in wordpress (CVE-2026-8155). Risk of unauthorized operations or information disclosure.
CVE-2026-16236 Unrestricted File Upload in wordpress (CVE-2026-16236)
vulnerability in wordpress (CVE-2026-16236). Successful exploitation can lead to full system takeover.
CVE-2026-15381 SQL Injection in wordpress (CVE-2026-15381)
SQL injection in wordpress (CVE-2026-15381). Risk of unauthorized operations or information disclosure.
CVE-2026-15258 SQL Injection in wordpress (CVE-2026-15258)
SQL injection in wordpress (CVE-2026-15258). Confidential information can be exposed externally.
CVE-2026-15209 Vulnerability in wordpress (CVE-2026-15209)
vulnerability in wordpress (CVE-2026-15209). Confidential information can be exposed externally.
CVE-2026-15048 Information Disclosure in wordpress (CVE-2026-15048)
vulnerability in wordpress (CVE-2026-15048). Confidential information can be exposed externally.
CVE-2026-14931 Information Disclosure in wordpress (CVE-2026-14931)
vulnerability in wordpress (CVE-2026-14931). Confidential information can be exposed externally.
CVE-2026-14930 Vulnerability in wordpress (CVE-2026-14930)
vulnerability in wordpress (CVE-2026-14930). Confidential information can be exposed externally.
CVE-2026-14929 Authorization Flaw in wordpress (CVE-2026-14929)
vulnerability in wordpress (CVE-2026-14929). Risk of unauthorized operations or information disclosure.
CVE-2026-14928 Information Disclosure in wordpress (CVE-2026-14928)
vulnerability in wordpress (CVE-2026-14928). Confidential information can be exposed externally.
CVE-2026-14927 Vulnerability in wordpress (CVE-2026-14927)
vulnerability in wordpress (CVE-2026-14927). Risk of unauthorized operations or information disclosure.
CVE-2026-14921 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14921)
cross-site scripting in wordpress (CVE-2026-14921). Risk of unauthorized operations or information disclosure.
CVE-2026-14922 Cross-Site Scripting (XSS) in CVE-2026-14922 (CVE-2026-14922)
cross-site scripting in CVE-2026-14922 (CVE-2026-14922). Risk of unauthorized operations or information disclosure.
CVE-2026-14919 Authentication Bypass in wordpress (CVE-2026-14919)
authentication bypass in wordpress (CVE-2026-14919). Successful exploitation can lead to full system takeover.
CVE-2026-14862 Vulnerability in wordpress (CVE-2026-14862)
vulnerability in wordpress (CVE-2026-14862). Risk of unauthorized operations or information disclosure.
CVE-2026-14849 Vulnerability in wordpress (CVE-2026-14849)
vulnerability in wordpress (CVE-2026-14849). Risk of unauthorized operations or information disclosure.
CVE-2026-14847 Vulnerability in wordpress (CVE-2026-14847)
vulnerability in wordpress (CVE-2026-14847). Risk of unauthorized operations or information disclosure.
CVE-2026-14845 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14845)
cross-site scripting in wordpress (CVE-2026-14845). Risk of unauthorized operations or information disclosure.
CVE-2026-14843 Vulnerability in wordpress (CVE-2026-14843)
vulnerability in wordpress (CVE-2026-14843). Risk of unauthorized operations or information disclosure.
CVE-2026-14834 Vulnerability in wordpress (CVE-2026-14834)
vulnerability in wordpress (CVE-2026-14834). Risk of unauthorized operations or information disclosure.
CVE-2026-14833 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14833)
cross-site scripting in wordpress (CVE-2026-14833). Successful exploitation can lead to full system takeover.
CVE-2026-14830 Authentication Bypass in wordpress (CVE-2026-14830)
authentication bypass in wordpress (CVE-2026-14830). Data can be tampered with by attackers.
CVE-2026-14554 SQL Injection in wordpress (CVE-2026-14554)
SQL injection in wordpress (CVE-2026-14554). Confidential information can be exposed externally.
CVE-2026-14483 Unrestricted File Upload in wordpress (CVE-2026-14483)
vulnerability in wordpress (CVE-2026-14483). Successful exploitation can lead to full system takeover.
CVE-2026-14333 Privilege Escalation in wordpress (CVE-2026-14333)
vulnerability in wordpress (CVE-2026-14333). Confidential information can be exposed externally.
CVE-2026-14319 Information Disclosure in wordpress (CVE-2026-14319)
vulnerability in wordpress (CVE-2026-14319). Confidential information can be exposed externally.
CVE-2026-14317 Vulnerability in wordpress (CVE-2026-14317)
vulnerability in wordpress (CVE-2026-14317). Risk of unauthorized operations or information disclosure.
CVE-2026-13609 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13609)
cross-site scripting in wordpress (CVE-2026-13609). Successful exploitation can lead to full system takeover.
CVE-2026-13393 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13393)
cross-site scripting in wordpress (CVE-2026-13393). Risk of unauthorized operations or information disclosure.
CVE-2026-12721 SQL Injection in wordpress (CVE-2026-12721)
SQL injection in wordpress (CVE-2026-12721). Confidential information can be exposed externally.
CVE-2026-13392 Code Injection in wordpress (CVE-2026-13392)
code injection in wordpress (CVE-2026-13392). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →