Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-64685 |
|
Out-of-Bounds Read in c (CVE-2026-64685)
vulnerability in c (CVE-2026-64685). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-69945 |
|
SQL Injection in sqli (CVE-2025-69945)
SQL injection in sqli (CVE-2025-69945). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-69949 |
|
SQL Injection in sqli (CVE-2025-69949)
SQL injection in sqli (CVE-2025-69949). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-67403 |
|
SQL Injection in sqli (CVE-2025-67403)
SQL injection in sqli (CVE-2025-67403). Successful exploitation can lead to full system takeover.
|
| CVE-2025-67404 |
|
SQL Injection in sqli (CVE-2025-67404)
SQL injection in sqli (CVE-2025-67404). Successful exploitation can lead to full system takeover.
|
| CVE-2025-67405 |
|
SQL Injection in sqli (CVE-2025-67405)
SQL injection in sqli (CVE-2025-67405). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-67406 |
|
SQL Injection in sqli (CVE-2025-67406)
SQL injection in sqli (CVE-2025-67406). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-67407 |
|
SQL Injection in sqli (CVE-2025-67407)
SQL injection in sqli (CVE-2025-67407). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-67408 |
|
SQL Injection in sqli (CVE-2025-67408)
SQL injection in sqli (CVE-2025-67408). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-69942 |
|
SQL Injection in sqli (CVE-2025-69942)
SQL injection in sqli (CVE-2025-69942). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69943 |
|
SQL Injection in sqli (CVE-2025-69943)
SQL injection in sqli (CVE-2025-69943). Successful exploitation can lead to full system takeover.
|
| CVE-2025-69944 |
|
SQL Injection in sqli (CVE-2025-69944)
SQL injection in sqli (CVE-2025-69944). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-65340 |
|
SQL Injection in sqli (CVE-2025-65340)
SQL injection in sqli (CVE-2025-65340). Successful exploitation can lead to full system takeover.
|
| CVE-2025-65337 |
|
Cross-Site Scripting (XSS) in CVE-2025-65337 (CVE-2025-65337)
cross-site scripting in CVE-2025-65337 (CVE-2025-65337). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6267 |
|
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5,...
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5,...
|
| CVE-2026-6336 |
|
Authorization Flaw in gitlab (CVE-2026-6336)
vulnerability in gitlab (CVE-2026-6336). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3093 |
|
Cross-Site Scripting (XSS) in gitlab (CVE-2026-3093)
cross-site scripting in gitlab (CVE-2026-3093). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4672 |
|
Vulnerability in gitlab (CVE-2026-4672)
vulnerability in gitlab (CVE-2026-4672). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15975 |
|
Vulnerability in dos (CVE-2026-15975)
vulnerability in dos (CVE-2026-15975). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16553 |
|
Vulnerability in gitlab (CVE-2026-16553)
vulnerability in gitlab (CVE-2026-16553). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14341 |
|
Vulnerability in gitlab (CVE-2026-14341)
vulnerability in gitlab (CVE-2026-14341). Data can be tampered with by attackers.
|
| CVE-2026-14351 |
|
Vulnerability in gitlab (CVE-2026-14351)
vulnerability in gitlab (CVE-2026-14351). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15077 |
|
Vulnerability in gitlab (CVE-2026-15077)
vulnerability in gitlab (CVE-2026-15077). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15831 |
|
Vulnerability in gitlab (CVE-2026-15831)
vulnerability in gitlab (CVE-2026-15831). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-14562 |
|
Authorization Flaw in gitlab (CVE-2025-14562)
vulnerability in gitlab (CVE-2025-14562). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12436 |
|
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19...
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19...
|
| CVE-2026-13113 |
|
Vulnerability in gitlab (CVE-2026-13113)
vulnerability in gitlab (CVE-2026-13113). Data can be tampered with by attackers.
|
| CVE-2026-2482 |
|
Cross-Site Request Forgery (CSRF) in ibm (CVE-2026-2482)
vulnerability in ibm (CVE-2026-2482). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14529 |
|
Vulnerability in ssrf (CVE-2026-14529)
vulnerability in ssrf (CVE-2026-14529). Confidential information can be exposed externally.
|
| CVE-2026-14266 |
|
Vulnerability in 7-zip (CVE-2026-14266)
vulnerability in 7-zip (CVE-2026-14266). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8497 |
|
Vulnerability in devolutions (CVE-2026-8497)
vulnerability in devolutions (CVE-2026-8497). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20079 |
|
Vulnerability in cisco (CVE-2026-20079)
vulnerability in cisco (CVE-2026-20079). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20316 KEV |
|
[KEV] Vulnerability in Cisco secure-firewall-management-center (CVE-2026-20316)
vulnerability in Cisco secure-firewall-management-center (CVE-2026-20316). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-54081 |
|
Vulnerability in org.verapdf:parser (CVE-2026-54081)
vulnerability in org.verapdf:parser (CVE-2026-54081). Risk of unauthorized operations or information disclosure. Exploitable via ``for``. Mitigation: upgrade to `1.31.23` or later.
|
| CVE-2026-54080 |
|
Vulnerability in org.verapdf:parser (CVE-2026-54080)
vulnerability in org.verapdf:parser (CVE-2026-54080). Risk of unauthorized operations or information disclosure. Exploitable via ``for``. Mitigation: upgrade to `1.31.23` or later.
|
| CVE-2026-54078 |
|
XXE (XML External Entity) in org.verapdf:validation-model (CVE-2026-54078)
vulnerability in org.verapdf:validation-model (CVE-2026-54078). Risk of unauthorized operations or information disclosure. Exploitable via ``DocumentBuilderFactory``. Mitigation: upgrade to `1.31.71` or later.
|
| CVE-2026-54079 |
|
XXE (XML External Entity) in org.verapdf:validation-model (CVE-2026-54079)
vulnerability in org.verapdf:validation-model (CVE-2026-54079). Risk of unauthorized operations or information disclosure. Exploitable via ``DocumentBuilderFactory``. Mitigation: upgrade to `1.31.71` or later.
|
| CVE-2026-9177 |
|
Vulnerability in CVE-2026-9177 (CVE-2026-9177)
vulnerability in CVE-2026-9177 (CVE-2026-9177). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66400 |
|
Vulnerability in CVE-2026-66400 (CVE-2026-66400)
vulnerability in CVE-2026-66400 (CVE-2026-66400). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14270 |
|
Unrestricted File Upload in wordpress (CVE-2026-14270)
vulnerability in wordpress (CVE-2026-14270). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7436 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-7436)
cross-site scripting in wordpress (CVE-2026-7436). Risk of unauthorized operations or information disclosure. Exploitable via ``wpcbm_best_seller``.
|
| CVE-2026-6089 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-6089)
SSRF in wordpress (CVE-2026-6089). Confidential information can be exposed externally.
|
| CVE-2026-5060 |
|
Vulnerability in wordpress (CVE-2026-5060)
vulnerability in wordpress (CVE-2026-5060). Data can be tampered with by attackers. Exploitable via ``file_id``.
|
| CVE-2026-65883 |
|
Unsafe Deserialization in aimy-extensions (CVE-2026-65883)
vulnerability in aimy-extensions (CVE-2026-65883). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8791 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-8791)
cross-site scripting in wordpress (CVE-2026-8791). Risk of unauthorized operations or information disclosure. Exploitable via ``bookingWebsiteUrl``.
|
| CVE-2026-4604 |
|
Vulnerability in wordpress (CVE-2026-4604)
vulnerability in wordpress (CVE-2026-4604). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56389 |
|
OS Command Injection in gnu (CVE-2026-56389)
OS command injection in gnu (CVE-2026-56389). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56390 |
|
Vulnerability in gnu (CVE-2026-56390)
vulnerability in gnu (CVE-2026-56390). Data can be tampered with by attackers.
|
| CVE-2026-16655 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16655)
cross-site scripting in wordpress (CVE-2026-16655). Risk of unauthorized operations or information disclosure. Exploitable via ``password``.
|
| CVE-2026-16597 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16597)
cross-site scripting in wordpress (CVE-2026-16597). Risk of unauthorized operations or information disclosure.
|