Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-12697 |
|
Vulnerability in wordpress (CVE-2026-12697)
vulnerability in wordpress (CVE-2026-12697). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12695 |
|
Authentication Bypass in wordpress (CVE-2026-12695)
authentication bypass in wordpress (CVE-2026-12695). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12376 |
|
Vulnerability in wordpress (CVE-2026-12376)
vulnerability in wordpress (CVE-2026-12376). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12251 |
|
Privilege Escalation in wordpress (CVE-2026-12251)
vulnerability in wordpress (CVE-2026-12251). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12720 |
|
Unsafe Deserialization in wordpress (CVE-2026-12720)
vulnerability in wordpress (CVE-2026-12720). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63223 |
|
Unrestricted File Upload in codeigniter4/framework (CVE-2026-63223)
vulnerability in codeigniter4/framework (CVE-2026-63223). Successful exploitation can lead to full system takeover. Exploitable via ``is_image``. Mitigation: upgrade to `4.7.4` or later.
|
| CVE-2026-63222 |
|
Path Traversal in codeigniter4/framework (CVE-2026-63222)
path traversal in codeigniter4/framework (CVE-2026-63222). Data can be tampered with by attackers. Mitigation: upgrade to `4.7.4` or later.
|
| CVE-2026-63221 |
|
SQL Injection in codeigniter4/framework (CVE-2026-63221)
SQL injection in codeigniter4/framework (CVE-2026-63221). Data can be tampered with by attackers. Exploitable via ``WHERE``. Mitigation: upgrade to `4.7.4` or later.
|
| CVE-2026-63220 |
|
Vulnerability in codeigniter4/framework (CVE-2026-63220)
vulnerability in codeigniter4/framework (CVE-2026-63220). Risk of unauthorized operations or information disclosure. Exploitable via ``forceGlobalSecureRequests``. Mitigation: upgrade to `4.7.4` or later.
|
| CVE-2026-14541 |
|
Authentication Bypass in google (CVE-2026-14541)
authentication bypass in google (CVE-2026-14541). Confidential information can be exposed externally.
|
| CVE-2026-14540 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-14540)
SSRF in ssrf (CVE-2026-14540). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14539 |
|
Vulnerability in dos (CVE-2026-14539)
vulnerability in dos (CVE-2026-14539). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14538 |
|
Vulnerability in google (CVE-2026-14538)
vulnerability in google (CVE-2026-14538). Confidential information can be exposed externally.
|
| CVE-2026-14537 |
|
Authorization Flaw in google (CVE-2026-14537)
vulnerability in google (CVE-2026-14537). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66803 |
|
Vulnerability in microsoft (CVE-2026-66803)
vulnerability in microsoft (CVE-2026-66803). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69938 |
|
SQL Injection in sqli (CVE-2025-69938)
SQL injection in sqli (CVE-2025-69938). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69933 |
|
SQL Injection in sqli (CVE-2025-69933)
SQL injection in sqli (CVE-2025-69933). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69934 |
|
SQL Injection in sqli (CVE-2025-69934)
SQL injection in sqli (CVE-2025-69934). Successful exploitation can lead to full system takeover.
|
| CVE-2025-65342 |
|
Cross-Site Scripting (XSS) in CVE-2025-65342 (CVE-2025-65342)
cross-site scripting in CVE-2025-65342 (CVE-2025-65342). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-69941 |
|
SQL Injection in sqli (CVE-2025-69941)
SQL injection in sqli (CVE-2025-69941). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69947 |
|
SQL Injection in sqli (CVE-2025-69947)
SQL injection in sqli (CVE-2025-69947). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69935 |
|
SQL Injection in sqli (CVE-2025-69935)
SQL injection in sqli (CVE-2025-69935). Successful exploitation can lead to full system takeover.
|
| CVE-2025-65341 |
|
Ecommerce Fruits Bazar 1.0 is vulnerable to Cross Site Scripting (XSS) in admin/edit_product.php.
Ecommerce Fruits Bazar 1.0 is vulnerable to Cross Site Scripting (XSS) in admin/edit_product.php.
|
| CVE-2025-69930 |
|
SQL Injection in sqli (CVE-2025-69930)
SQL injection in sqli (CVE-2025-69930). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69937 |
|
SQL Injection in sqli (CVE-2025-69937)
SQL injection in sqli (CVE-2025-69937). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69931 |
|
SQL Injection in sqli (CVE-2025-69931)
SQL injection in sqli (CVE-2025-69931). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67207 |
|
Vulnerability in CVE-2026-67207 (CVE-2026-67207)
vulnerability in CVE-2026-67207 (CVE-2026-67207). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67206 |
|
Unrestricted File Upload in CVE-2026-67206 (CVE-2026-67206)
vulnerability in CVE-2026-67206 (CVE-2026-67206). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69936 |
|
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.
|
| CVE-2025-65336 |
|
SQL Injection in sqli (CVE-2025-65336)
SQL injection in sqli (CVE-2025-65336). Successful exploitation can lead to full system takeover.
|
| CVE-2026-35847 |
|
Command Injection in CVE-2026-35847 (CVE-2026-35847)
command injection in CVE-2026-35847 (CVE-2026-35847). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66755 |
|
Path Traversal in apache (CVE-2026-66755)
path traversal in apache (CVE-2026-66755). Confidential information can be exposed externally.
|
| CVE-2026-66756 |
|
Vulnerability in apache (CVE-2026-66756)
vulnerability in apache (CVE-2026-66756). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11536 |
|
Unsafe Deserialization in ibm (CVE-2026-11536)
vulnerability in ibm (CVE-2026-11536). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10569 |
|
Information Disclosure in ibm (CVE-2026-10569)
vulnerability in ibm (CVE-2026-10569). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12946 |
|
Code Injection in langflow (CVE-2026-12946)
code injection in langflow (CVE-2026-12946). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66416 |
|
Cross-Site Request Forgery (CSRF) in laravel (CVE-2026-66416)
vulnerability in laravel (CVE-2026-66416). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12118 |
|
Unsafe Deserialization in deserialization (CVE-2026-12118)
vulnerability in deserialization (CVE-2026-12118). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12733 |
|
Vulnerability in dos (CVE-2026-12733)
vulnerability in dos (CVE-2026-12733). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11904 |
|
Vulnerability in ibm (CVE-2026-11904)
vulnerability in ibm (CVE-2026-11904). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10695 |
|
Vulnerability in dos (CVE-2026-10695)
vulnerability in dos (CVE-2026-10695). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10545 |
|
Open Redirect in ibm (CVE-2026-10545)
vulnerability in ibm (CVE-2026-10545). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12943 |
|
OS Command Injection in ibm (CVE-2026-12943)
OS command injection in ibm (CVE-2026-12943). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10535 |
|
Vulnerability in ibm (CVE-2026-10535)
vulnerability in ibm (CVE-2026-10535). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13444 |
|
Vulnerability in langflow (CVE-2026-13444)
vulnerability in langflow (CVE-2026-13444). Confidential information can be exposed externally.
|
| CVE-2026-13435 |
|
Code Injection in langflow (CVE-2026-13435)
code injection in langflow (CVE-2026-13435). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12942 |
|
Path Traversal in langflow (CVE-2026-12942)
path traversal in langflow (CVE-2026-12942). Confidential information can be exposed externally.
|
| CVE-2026-10700 |
|
Vulnerability in langflow (CVE-2026-10700)
vulnerability in langflow (CVE-2026-10700). Confidential information can be exposed externally.
|
| CVE-2024-25039 |
|
Vulnerability in dos (CVE-2024-25039)
vulnerability in dos (CVE-2024-25039). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-0152 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2025-0152)
cross-site scripting in ibm (CVE-2025-0152). Risk of unauthorized operations or information disclosure.
|