Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2026-64685 Out-of-Bounds Read in c (CVE-2026-64685)
vulnerability in c (CVE-2026-64685). Risk of unauthorized operations or information disclosure.
CVE-2025-69945 SQL Injection in sqli (CVE-2025-69945)
SQL injection in sqli (CVE-2025-69945). Risk of unauthorized operations or information disclosure.
CVE-2025-69949 SQL Injection in sqli (CVE-2025-69949)
SQL injection in sqli (CVE-2025-69949). Risk of unauthorized operations or information disclosure.
CVE-2025-67403 SQL Injection in sqli (CVE-2025-67403)
SQL injection in sqli (CVE-2025-67403). Successful exploitation can lead to full system takeover.
CVE-2025-67404 SQL Injection in sqli (CVE-2025-67404)
SQL injection in sqli (CVE-2025-67404). Successful exploitation can lead to full system takeover.
CVE-2025-67405 SQL Injection in sqli (CVE-2025-67405)
SQL injection in sqli (CVE-2025-67405). Risk of unauthorized operations or information disclosure.
CVE-2025-67406 SQL Injection in sqli (CVE-2025-67406)
SQL injection in sqli (CVE-2025-67406). Risk of unauthorized operations or information disclosure.
CVE-2025-67407 SQL Injection in sqli (CVE-2025-67407)
SQL injection in sqli (CVE-2025-67407). Risk of unauthorized operations or information disclosure.
CVE-2025-67408 SQL Injection in sqli (CVE-2025-67408)
SQL injection in sqli (CVE-2025-67408). Risk of unauthorized operations or information disclosure.
CVE-2025-69942 SQL Injection in sqli (CVE-2025-69942)
SQL injection in sqli (CVE-2025-69942). Successful exploitation can lead to full system takeover.
CVE-2025-69943 SQL Injection in sqli (CVE-2025-69943)
SQL injection in sqli (CVE-2025-69943). Successful exploitation can lead to full system takeover.
CVE-2025-69944 SQL Injection in sqli (CVE-2025-69944)
SQL injection in sqli (CVE-2025-69944). Risk of unauthorized operations or information disclosure.
CVE-2025-65340 SQL Injection in sqli (CVE-2025-65340)
SQL injection in sqli (CVE-2025-65340). Successful exploitation can lead to full system takeover.
CVE-2025-65337 Cross-Site Scripting (XSS) in CVE-2025-65337 (CVE-2025-65337)
cross-site scripting in CVE-2025-65337 (CVE-2025-65337). Risk of unauthorized operations or information disclosure.
CVE-2026-6267 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5,...
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5,...
CVE-2026-6336 Authorization Flaw in gitlab (CVE-2026-6336)
vulnerability in gitlab (CVE-2026-6336). Risk of unauthorized operations or information disclosure.
CVE-2026-3093 Cross-Site Scripting (XSS) in gitlab (CVE-2026-3093)
cross-site scripting in gitlab (CVE-2026-3093). Risk of unauthorized operations or information disclosure.
CVE-2026-4672 Vulnerability in gitlab (CVE-2026-4672)
vulnerability in gitlab (CVE-2026-4672). Risk of unauthorized operations or information disclosure.
CVE-2026-15975 Vulnerability in dos (CVE-2026-15975)
vulnerability in dos (CVE-2026-15975). Risk of unauthorized operations or information disclosure.
CVE-2026-16553 Vulnerability in gitlab (CVE-2026-16553)
vulnerability in gitlab (CVE-2026-16553). Risk of unauthorized operations or information disclosure.
CVE-2026-14341 Vulnerability in gitlab (CVE-2026-14341)
vulnerability in gitlab (CVE-2026-14341). Data can be tampered with by attackers.
CVE-2026-14351 Vulnerability in gitlab (CVE-2026-14351)
vulnerability in gitlab (CVE-2026-14351). Risk of unauthorized operations or information disclosure.
CVE-2026-15077 Vulnerability in gitlab (CVE-2026-15077)
vulnerability in gitlab (CVE-2026-15077). Risk of unauthorized operations or information disclosure.
CVE-2026-15831 Vulnerability in gitlab (CVE-2026-15831)
vulnerability in gitlab (CVE-2026-15831). Risk of unauthorized operations or information disclosure.
CVE-2025-14562 Authorization Flaw in gitlab (CVE-2025-14562)
vulnerability in gitlab (CVE-2025-14562). Risk of unauthorized operations or information disclosure.
CVE-2026-12436 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19...
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19...
CVE-2026-13113 Vulnerability in gitlab (CVE-2026-13113)
vulnerability in gitlab (CVE-2026-13113). Data can be tampered with by attackers.
CVE-2026-2482 Cross-Site Request Forgery (CSRF) in ibm (CVE-2026-2482)
vulnerability in ibm (CVE-2026-2482). Risk of unauthorized operations or information disclosure.
CVE-2026-14529 Vulnerability in ssrf (CVE-2026-14529)
vulnerability in ssrf (CVE-2026-14529). Confidential information can be exposed externally.
CVE-2026-14266 Vulnerability in 7-zip (CVE-2026-14266)
vulnerability in 7-zip (CVE-2026-14266). Successful exploitation can lead to full system takeover.
CVE-2026-8497 Vulnerability in devolutions (CVE-2026-8497)
vulnerability in devolutions (CVE-2026-8497). Successful exploitation can lead to full system takeover.
CVE-2026-20079 Vulnerability in cisco (CVE-2026-20079)
vulnerability in cisco (CVE-2026-20079). Successful exploitation can lead to full system takeover.
CVE-2026-20316 KEV [KEV] Vulnerability in Cisco secure-firewall-management-center (CVE-2026-20316)
vulnerability in Cisco secure-firewall-management-center (CVE-2026-20316). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-54081 Vulnerability in org.verapdf:parser (CVE-2026-54081)
vulnerability in org.verapdf:parser (CVE-2026-54081). Risk of unauthorized operations or information disclosure. Exploitable via ``for``. Mitigation: upgrade to `1.31.23` or later.
CVE-2026-54080 Vulnerability in org.verapdf:parser (CVE-2026-54080)
vulnerability in org.verapdf:parser (CVE-2026-54080). Risk of unauthorized operations or information disclosure. Exploitable via ``for``. Mitigation: upgrade to `1.31.23` or later.
CVE-2026-54078 XXE (XML External Entity) in org.verapdf:validation-model (CVE-2026-54078)
vulnerability in org.verapdf:validation-model (CVE-2026-54078). Risk of unauthorized operations or information disclosure. Exploitable via ``DocumentBuilderFactory``. Mitigation: upgrade to `1.31.71` or later.
CVE-2026-54079 XXE (XML External Entity) in org.verapdf:validation-model (CVE-2026-54079)
vulnerability in org.verapdf:validation-model (CVE-2026-54079). Risk of unauthorized operations or information disclosure. Exploitable via ``DocumentBuilderFactory``. Mitigation: upgrade to `1.31.71` or later.
CVE-2026-9177 Vulnerability in CVE-2026-9177 (CVE-2026-9177)
vulnerability in CVE-2026-9177 (CVE-2026-9177). Risk of unauthorized operations or information disclosure.
CVE-2026-66400 Vulnerability in CVE-2026-66400 (CVE-2026-66400)
vulnerability in CVE-2026-66400 (CVE-2026-66400). Risk of unauthorized operations or information disclosure.
CVE-2026-14270 Unrestricted File Upload in wordpress (CVE-2026-14270)
vulnerability in wordpress (CVE-2026-14270). Successful exploitation can lead to full system takeover.
CVE-2026-7436 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7436)
cross-site scripting in wordpress (CVE-2026-7436). Risk of unauthorized operations or information disclosure. Exploitable via ``wpcbm_best_seller``.
CVE-2026-6089 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-6089)
SSRF in wordpress (CVE-2026-6089). Confidential information can be exposed externally.
CVE-2026-5060 Vulnerability in wordpress (CVE-2026-5060)
vulnerability in wordpress (CVE-2026-5060). Data can be tampered with by attackers. Exploitable via ``file_id``.
CVE-2026-65883 Unsafe Deserialization in aimy-extensions (CVE-2026-65883)
vulnerability in aimy-extensions (CVE-2026-65883). Successful exploitation can lead to full system takeover.
CVE-2026-8791 Cross-Site Scripting (XSS) in wordpress (CVE-2026-8791)
cross-site scripting in wordpress (CVE-2026-8791). Risk of unauthorized operations or information disclosure. Exploitable via ``bookingWebsiteUrl``.
CVE-2026-4604 Vulnerability in wordpress (CVE-2026-4604)
vulnerability in wordpress (CVE-2026-4604). Risk of unauthorized operations or information disclosure.
CVE-2026-56389 OS Command Injection in gnu (CVE-2026-56389)
OS command injection in gnu (CVE-2026-56389). Successful exploitation can lead to full system takeover.
CVE-2026-56390 Vulnerability in gnu (CVE-2026-56390)
vulnerability in gnu (CVE-2026-56390). Data can be tampered with by attackers.
CVE-2026-16655 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16655)
cross-site scripting in wordpress (CVE-2026-16655). Risk of unauthorized operations or information disclosure. Exploitable via ``password``.
CVE-2026-16597 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16597)
cross-site scripting in wordpress (CVE-2026-16597). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →