Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2024-40683 |
|
Vulnerability in ibm (CVE-2024-40683)
vulnerability in ibm (CVE-2024-40683). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9322 |
|
Vulnerability in dos (CVE-2026-9322)
vulnerability in dos (CVE-2026-9322). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12940 |
|
OS Command Injection in langflow (CVE-2026-12940)
OS command injection in langflow (CVE-2026-12940). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12945 |
|
Vulnerability in langflow (CVE-2026-12945)
vulnerability in langflow (CVE-2026-12945). Confidential information can be exposed externally.
|
| CVE-2026-28812 |
|
Vulnerability in apache (CVE-2026-28812)
vulnerability in apache (CVE-2026-28812). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44617 |
|
Vulnerability in apache (CVE-2026-44617)
vulnerability in apache (CVE-2026-44617). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52680 |
|
Path Traversal in apache (CVE-2026-52680)
path traversal in apache (CVE-2026-52680). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44616 |
|
Vulnerability in apache (CVE-2026-44616)
vulnerability in apache (CVE-2026-44616). Confidential information can be exposed externally.
|
| CVE-2026-28814 |
|
Vulnerability in apache (CVE-2026-28814)
vulnerability in apache (CVE-2026-28814). Confidential information can be exposed externally.
|
| CVE-2026-28813 |
|
Cross-Site Request Forgery (CSRF) in apache (CVE-2026-28813)
vulnerability in apache (CVE-2026-28813). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48910 |
|
Vulnerability in apache (CVE-2026-48910)
vulnerability in apache (CVE-2026-48910). Confidential information can be exposed externally.
|
| CVE-2026-44613 |
|
Cross-Site Request Forgery (CSRF) in apache (CVE-2026-44613)
vulnerability in apache (CVE-2026-44613). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57862 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-57862)
SSRF in ssrf (CVE-2026-57862). Confidential information can be exposed externally.
|
| CVE-2026-23981 |
|
Vulnerability in apache (CVE-2026-23981)
vulnerability in apache (CVE-2026-23981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28811 |
|
Vulnerability in apache (CVE-2026-28811)
vulnerability in apache (CVE-2026-28811). Confidential information can be exposed externally.
|
| CVE-2026-23985 |
|
Vulnerability in apache (CVE-2026-23985)
vulnerability in apache (CVE-2026-23985). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28323 |
|
Authentication Bypass in solarwinds (CVE-2026-28323)
authentication bypass in solarwinds (CVE-2026-28323). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10842 |
|
Vulnerability in ibm (CVE-2026-10842)
vulnerability in ibm (CVE-2026-10842). Confidential information can be exposed externally.
|
| CVE-2026-66066 |
|
Vulnerability in activestorage (CVE-2026-66066)
vulnerability in activestorage (CVE-2026-66066). Risk of unauthorized operations or information disclosure. Exploitable via ``secret_key_base``. Mitigation: upgrade to `8.1.3.1` or later.
|
| CVE-2026-11707 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-11707)
cross-site scripting in ibm (CVE-2026-11707). Confidential information can be exposed externally.
|
| CVE-2026-11980 |
|
Vulnerability in ibm (CVE-2026-11980)
vulnerability in ibm (CVE-2026-11980). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15435 |
|
Path Traversal in ibm (CVE-2026-15435)
path traversal in ibm (CVE-2026-15435). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14980 |
|
Privilege Escalation in ssrf (CVE-2026-14980)
vulnerability in ssrf (CVE-2026-14980). Confidential information can be exposed externally.
|
| CVE-2026-12947 |
|
Vulnerability in ibm (CVE-2026-12947)
vulnerability in ibm (CVE-2026-12947). Confidential information can be exposed externally.
|
| CVE-2026-11897 |
|
Vulnerability in dos (CVE-2026-11897)
vulnerability in dos (CVE-2026-11897). Confidential information can be exposed externally.
|
| CVE-2026-14522 |
|
OS Command Injection in ibm (CVE-2026-14522)
OS command injection in ibm (CVE-2026-14522). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14519 |
|
Path Traversal in path-traversal (CVE-2026-14519)
path traversal in path-traversal (CVE-2026-14519). Confidential information can be exposed externally.
|
| CVE-2025-36298 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2025-36298)
cross-site scripting in ibm (CVE-2025-36298). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11383 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-11383)
cross-site scripting in ibm (CVE-2026-11383). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-36431 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2025-36431)
cross-site scripting in ibm (CVE-2025-36431). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59309 |
|
Vulnerability in vmware (CVE-2026-59309)
vulnerability in vmware (CVE-2026-59309). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59310 KEV |
|
[KEV] Path Traversal in Broadcom path-traversal (CVE-2026-59310)
path traversal in Broadcom path-traversal (CVE-2026-59310). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-57859 |
|
Unsafe Deserialization in deserialization (CVE-2026-57859)
vulnerability in deserialization (CVE-2026-57859). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5582 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-5582)
vulnerability in wordpress (CVE-2026-5582). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15397 |
|
Vulnerability in wordpress (CVE-2026-15397)
vulnerability in wordpress (CVE-2026-15397). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7260 |
|
Vulnerability in c (CVE-2026-7260)
vulnerability in c (CVE-2026-7260). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17544 |
|
Out-of-Bounds Write in CVE-2026-17544 (CVE-2026-17544)
out-of-bounds write in CVE-2026-17544 (CVE-2026-17544). Successful exploitation can lead to full system takeover.
|
| CVE-2026-17543 |
|
SQL Injection in sqli (CVE-2026-17543)
SQL injection in sqli (CVE-2026-17543). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44096 |
|
A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute...
A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute...
|
| CVE-2026-15257 |
|
Vulnerability in wordpress (CVE-2026-15257)
vulnerability in wordpress (CVE-2026-15257). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14318 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14318)
cross-site scripting in wordpress (CVE-2026-14318). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15382 |
|
Vulnerability in wordpress (CVE-2026-15382)
vulnerability in wordpress (CVE-2026-15382). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15252 |
|
Vulnerability in wordpress (CVE-2026-15252)
vulnerability in wordpress (CVE-2026-15252). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14592 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14592)
cross-site scripting in wordpress (CVE-2026-14592). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15240 |
|
Authentication Bypass in c (CVE-2026-15240)
authentication bypass in c (CVE-2026-15240). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15054 |
|
Vulnerability in wordpress (CVE-2026-15054)
vulnerability in wordpress (CVE-2026-15054). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14923 |
|
Authorization Flaw in wordpress (CVE-2026-14923)
vulnerability in wordpress (CVE-2026-14923). Confidential information can be exposed externally.
|
| CVE-2026-14223 |
|
Vulnerability in wordpress (CVE-2026-14223)
vulnerability in wordpress (CVE-2026-14223). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14221 |
|
Vulnerability in wordpress (CVE-2026-14221)
vulnerability in wordpress (CVE-2026-14221). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15235 |
|
Information Disclosure in wordpress (CVE-2026-15235)
vulnerability in wordpress (CVE-2026-15235). Risk of unauthorized operations or information disclosure.
|