Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-48392 |
|
Out-of-Bounds Write in adobe (CVE-2026-48392)
out-of-bounds write in adobe (CVE-2026-48392). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48391 |
|
Vulnerability in adobe (CVE-2026-48391)
vulnerability in adobe (CVE-2026-48391). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48390 |
|
Authorization Flaw in privilege-escalation (CVE-2026-48390)
vulnerability in privilege-escalation (CVE-2026-48390). Confidential information can be exposed externally.
|
| CVE-2026-48374 |
|
Path Traversal in path-traversal (CVE-2026-48374)
path traversal in path-traversal (CVE-2026-48374). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15992 |
|
Privilege Escalation in wordpress (CVE-2026-15992)
vulnerability in wordpress (CVE-2026-15992). Successful exploitation can lead to full system takeover. Exploitable via ``Module_Password_Hint``.
|
| CVE-2026-15304 |
|
SQL Injection in wordpress (CVE-2026-15304)
SQL injection in wordpress (CVE-2026-15304). Confidential information can be exposed externally.
|
| CVE-2026-48388 |
|
Vulnerability in adobe (CVE-2026-48388)
vulnerability in adobe (CVE-2026-48388). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48372 |
|
Vulnerability in adobe (CVE-2026-48372)
vulnerability in adobe (CVE-2026-48372). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7775 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-7775)
cross-site scripting in ibm (CVE-2026-7775). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62828 |
|
Vulnerability in microsoft (CVE-2026-62828)
vulnerability in microsoft (CVE-2026-62828). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67178 |
|
Open Redirect in apache (CVE-2026-67178)
vulnerability in apache (CVE-2026-67178). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66713 |
|
Unsafe Deserialization in apache (CVE-2026-66713)
vulnerability in apache (CVE-2026-66713). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66299 |
|
Vulnerability in apache (CVE-2026-66299)
vulnerability in apache (CVE-2026-66299). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61487 |
|
Vulnerability in apache (CVE-2026-61487)
vulnerability in apache (CVE-2026-61487). Data can be tampered with by attackers.
|
| CVE-2026-59878 |
|
Vulnerability in apache (CVE-2026-59878)
vulnerability in apache (CVE-2026-59878). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49332 |
|
Vulnerability in CVE-2026-49332 (CVE-2026-49332)
vulnerability in CVE-2026-49332 (CVE-2026-49332). Confidential information can be exposed externally.
|
| CVE-2026-15393 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15393)
cross-site scripting in wordpress (CVE-2026-15393). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15016 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15016)
cross-site scripting in wordpress (CVE-2026-15016). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61609 |
|
Vulnerability in pterodactyl/panel (CVE-2026-61609)
vulnerability in pterodactyl/panel (CVE-2026-61609). Risk of unauthorized operations or information disclosure. Exploitable via `POST /auth/login`. Mitigation: upgrade to `1.13.0` or later.
|
| CVE-2026-45293 |
|
Vulnerability in wp-coding-standards/wpcs (CVE-2026-45293)
vulnerability in wp-coding-standards/wpcs (CVE-2026-45293). Successful exploitation can lead to full system takeover. Exploitable via ``WordPress.WP.EnqueuedResourceParameters``. Mitigation: upgrade to `3.4.1` or later.
|
| CVE-2026-43910 |
|
Vulnerability in io.appium:java-client (CVE-2026-43910)
vulnerability in io.appium:java-client (CVE-2026-43910). Confidential information can be exposed externally. Exploitable via `POST /wd/hub/session`. Mitigation: upgrade to `10.1.1` or later.
|
| CVE-2026-15025 |
|
Vulnerability in wordpress (CVE-2026-15025)
vulnerability in wordpress (CVE-2026-15025). Confidential information can be exposed externally.
|
| CVE-2026-16773 |
|
Information Disclosure in wordpress (CVE-2026-16773)
vulnerability in wordpress (CVE-2026-16773). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13440 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13440)
cross-site scripting in wordpress (CVE-2026-13440). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15444 |
|
SQL Injection in wordpress (CVE-2026-15444)
SQL injection in wordpress (CVE-2026-15444). Confidential information can be exposed externally.
|
| CVE-2026-13110 |
|
Vulnerability in wordpress (CVE-2026-13110)
vulnerability in wordpress (CVE-2026-13110). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16774 |
|
Vulnerability in wordpress (CVE-2026-16774)
vulnerability in wordpress (CVE-2026-16774). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15411 |
|
Vulnerability in wordpress (CVE-2026-15411)
vulnerability in wordpress (CVE-2026-15411). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63302 |
|
Vulnerability in CVE-2026-63302 (CVE-2026-63302)
vulnerability in CVE-2026-63302 (CVE-2026-63302). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14785 |
|
SQL Injection in wordpress (CVE-2026-14785)
SQL injection in wordpress (CVE-2026-14785). Confidential information can be exposed externally.
|
| CVE-2026-14328 |
|
Privilege Escalation in wordpress (CVE-2026-14328)
vulnerability in wordpress (CVE-2026-14328). Successful exploitation can lead to full system takeover. Exploitable via `GET /wp-json/epm/v1/admin/login`.
|
| CVE-2026-11598 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-11598)
cross-site scripting in wordpress (CVE-2026-11598). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10207 |
|
SQL Injection in wordpress (CVE-2026-10207)
SQL injection in wordpress (CVE-2026-10207). Confidential information can be exposed externally.
|
| CVE-2026-15267 |
|
SQL Injection in wordpress (CVE-2026-15267)
SQL injection in wordpress (CVE-2026-15267). Confidential information can be exposed externally.
|
| CVE-2026-13161 |
|
SQL Injection in wordpress (CVE-2026-13161)
SQL injection in wordpress (CVE-2026-13161). Confidential information can be exposed externally.
|
| CVE-2026-15730 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15730)
cross-site scripting in wordpress (CVE-2026-15730). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15673 |
|
SQL Injection in wordpress (CVE-2026-15673)
SQL injection in wordpress (CVE-2026-15673). Confidential information can be exposed externally.
|
| CVE-2026-15014 |
|
Vulnerability in wordpress (CVE-2026-15014)
vulnerability in wordpress (CVE-2026-15014). Successful exploitation can lead to full system takeover. Exploitable via ``billing_phone``.
|
| CVE-2026-15671 |
|
SQL Injection in wordpress (CVE-2026-15671)
SQL injection in wordpress (CVE-2026-15671). Confidential information can be exposed externally.
|
| CVE-2026-15670 |
|
SQL Injection in wordpress (CVE-2026-15670)
SQL injection in wordpress (CVE-2026-15670). Confidential information can be exposed externally.
|
| CVE-2026-14516 |
|
SQL Injection in wordpress (CVE-2026-14516)
SQL injection in wordpress (CVE-2026-14516). Confidential information can be exposed externally.
|
| CVE-2026-12741 |
|
SQL Injection in wordpress (CVE-2026-12741)
SQL injection in wordpress (CVE-2026-12741). Confidential information can be exposed externally.
|
| CVE-2026-12800 |
|
SQL Injection in wordpress (CVE-2026-12800)
SQL injection in wordpress (CVE-2026-12800). Confidential information can be exposed externally. Exploitable via `POST /wp-json/wpdmpp/v1/cart/coupon`.
|
| CVE-2024-14041 |
|
Vulnerability in bouncycastle (CVE-2024-14041)
vulnerability in bouncycastle (CVE-2024-14041). Confidential information can be exposed externally.
|
| CVE-2026-16811 |
|
SQL Injection in wordpress (CVE-2026-16811)
SQL injection in wordpress (CVE-2026-16811). Confidential information can be exposed externally.
|
| CVE-2026-16797 |
|
Vulnerability in wordpress (CVE-2026-16797)
vulnerability in wordpress (CVE-2026-16797). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16587 |
|
Vulnerability in wordpress (CVE-2026-16587)
vulnerability in wordpress (CVE-2026-16587). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6251 |
|
SQL Injection in wordpress (CVE-2026-6251)
SQL injection in wordpress (CVE-2026-6251). Confidential information can be exposed externally.
|
| CVE-2026-15136 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-15136)
vulnerability in wordpress (CVE-2026-15136). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15012 |
|
Information Disclosure in wordpress (CVE-2026-15012)
vulnerability in wordpress (CVE-2026-15012). Risk of unauthorized operations or information disclosure.
|