Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-13221 |
|
Vulnerability in perl (CVE-2026-13221)
vulnerability in perl (CVE-2026-13221). Data can be tampered with by attackers.
|
| CVE-2026-60121 |
|
OS Command Injection in vitec (CVE-2026-60121)
OS command injection in vitec (CVE-2026-60121). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61498 |
|
OS Command Injection in vitec (CVE-2026-61498)
OS command injection in vitec (CVE-2026-61498). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41041 |
|
Vulnerability in apache (CVE-2026-41041)
vulnerability in apache (CVE-2026-41041). Confidential information can be exposed externally.
|
| CVE-2026-11964 |
|
Vulnerability in wordpress (CVE-2026-11964)
vulnerability in wordpress (CVE-2026-11964). Confidential information can be exposed externally.
|
| CVE-2026-56271 |
|
Vulnerability in flowiseai (CVE-2026-56271)
vulnerability in flowiseai (CVE-2026-56271). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15089 |
|
Authentication Bypass in drupal (CVE-2026-15089)
authentication bypass in drupal (CVE-2026-15089). Confidential information can be exposed externally.
|
| CVE-2026-12535 |
|
Vulnerability in drupal/formatter_field (CVE-2026-12535)
vulnerability in drupal/formatter_field (CVE-2026-12535). Successful exploitation can lead to full system takeover. Exploitable via ``formatter_field``. Mitigation: upgrade to `2.0.0` or later.
|
| CVE-2026-12761 |
|
Authentication Bypass in wordpress (CVE-2026-12761)
authentication bypass in wordpress (CVE-2026-12761). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54159 |
|
Vulnerability in prestashop/ps_facetedsearch (CVE-2026-54159)
vulnerability in prestashop/ps_facetedsearch (CVE-2026-54159). Successful exploitation can lead to full system takeover. Exploitable via ``ps_facetedsearch``. Mitigation: upgrade to `4.0.4` or later.
|
| CVE-2026-59792 |
|
Vulnerability in path-traversal (CVE-2026-59792)
vulnerability in path-traversal (CVE-2026-59792). Confidential information can be exposed externally.
|
| CVE-2026-53363 |
|
Vulnerability in linux (CVE-2026-53363)
vulnerability in linux (CVE-2026-53363). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56688 |
|
OS Command Injection in dell (CVE-2026-56688)
OS command injection in dell (CVE-2026-56688). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40008 |
|
Vulnerability in c (CVE-2026-40008)
vulnerability in c (CVE-2026-40008). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40005 |
|
Path Traversal in apache (CVE-2026-40005)
path traversal in apache (CVE-2026-40005). Confidential information can be exposed externally.
|
| CVE-2026-28564 |
|
Vulnerability in apache (CVE-2026-28564)
vulnerability in apache (CVE-2026-28564). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15300 |
|
SQL Injection in wordpress (CVE-2026-15300)
SQL injection in wordpress (CVE-2026-15300). Data can be tampered with by attackers. Mitigation: upgrade to `4.5.5` or later.
|
| CVE-2026-15282 |
|
Unrestricted File Upload in wordpress (CVE-2026-15282)
vulnerability in wordpress (CVE-2026-15282). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14894 |
|
Unrestricted File Upload in wordpress (CVE-2026-14894)
vulnerability in wordpress (CVE-2026-14894). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59826 |
|
Code Injection in metabase (CVE-2026-59826)
code injection in metabase (CVE-2026-59826). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59827 |
|
Unsafe Deserialization in metabase (CVE-2026-59827)
vulnerability in metabase (CVE-2026-59827). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12116 |
|
Vulnerability in CVE-2026-12116 (CVE-2026-12116)
vulnerability in CVE-2026-12116 (CVE-2026-12116). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15158 |
|
Unrestricted File Upload in wordpress (CVE-2026-15158)
vulnerability in wordpress (CVE-2026-15158). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14245 |
|
Vulnerability in wordpress (CVE-2026-14245)
vulnerability in wordpress (CVE-2026-14245). Successful exploitation can lead to full system takeover. Exploitable via ``form_nonce``.
|
| CVE-2026-47646 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-47646)
cross-site scripting in microsoft (CVE-2026-47646). Confidential information can be exposed externally.
|
| CVE-2026-15113 |
|
Use-After-Free in google (CVE-2026-15113)
vulnerability in google (CVE-2026-15113). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9074 |
|
SQL Injection in sqli (CVE-2026-9074)
SQL injection in sqli (CVE-2026-9074). Confidential information can be exposed externally.
|
| CVE-2026-58480 |
|
Unrestricted File Upload in wordpress (CVE-2026-58480)
vulnerability in wordpress (CVE-2026-58480). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41042 |
|
Vulnerability in apache (CVE-2026-41042)
vulnerability in apache (CVE-2026-41042). Confidential information can be exposed externally.
|
| CVE-2026-12153 |
|
Vulnerability in wordpress (CVE-2026-12153)
vulnerability in wordpress (CVE-2026-12153). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9701 |
|
Vulnerability in wordpress (CVE-2026-9701)
vulnerability in wordpress (CVE-2026-9701). Successful exploitation can lead to full system takeover. Exploitable via ``eventer_verification_code``.
|
| CVE-2026-14487 |
|
Path Traversal in wordpress (CVE-2026-14487)
path traversal in wordpress (CVE-2026-14487). Data can be tampered with by attackers.
|
| CVE-2026-14740 |
|
Out-of-Bounds Read in perl (CVE-2026-14740)
vulnerability in perl (CVE-2026-14740). Confidential information can be exposed externally.
|
| CVE-2026-14739 |
|
Out-of-Bounds Write in perl (CVE-2026-14739)
out-of-bounds write in perl (CVE-2026-14739). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13019 |
|
Vulnerability in esri (CVE-2026-13019)
vulnerability in esri (CVE-2026-13019). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53483 |
|
Authentication Bypass in dell (CVE-2026-53483)
authentication bypass in dell (CVE-2026-53483). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53481 |
|
Path Traversal in path-traversal (CVE-2026-53481)
path traversal in path-traversal (CVE-2026-53481). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33264 |
|
Unsafe Deserialization in apache (CVE-2026-33264)
vulnerability in apache (CVE-2026-33264). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12375 |
|
Vulnerability in wordpress (CVE-2026-12375)
vulnerability in wordpress (CVE-2026-12375). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4375 |
|
Vulnerability in wordpress (CVE-2026-4375)
vulnerability in wordpress (CVE-2026-4375). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14345 |
|
Unrestricted File Upload in wordpress (CVE-2026-14345)
vulnerability in wordpress (CVE-2026-14345). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34037 |
|
Vulnerability in CVE-2026-34037 (CVE-2026-34037)
vulnerability in CVE-2026-34037 (CVE-2026-34037). Confidential information can be exposed externally.
|
| CVE-2026-9182 |
|
Unrestricted File Upload in esri (CVE-2026-9182)
vulnerability in esri (CVE-2026-9182). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9181 |
|
Path Traversal in path-traversal (CVE-2026-9181)
path traversal in path-traversal (CVE-2026-9181). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48316 |
|
Vulnerability in adobe (CVE-2026-48316)
vulnerability in adobe (CVE-2026-48316). Confidential information can be exposed externally.
|
| CVE-2026-40141 |
|
Vulnerability in beyondtrust (CVE-2026-40141)
vulnerability in beyondtrust (CVE-2026-40141). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40139 |
|
Authentication Bypass in beyondtrust (CVE-2026-40139)
authentication bypass in beyondtrust (CVE-2026-40139). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56140 |
|
Vulnerability in org.apache.camel:camel-aws2-sns (CVE-2026-56140)
vulnerability in org.apache.camel:camel-aws2-sns (CVE-2026-56140). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-48205 |
|
Vulnerability in org.apache.camel:camel-dns (CVE-2026-48205)
vulnerability in org.apache.camel:camel-dns (CVE-2026-48205). Confidential information can be exposed externally. Mitigation: upgrade to `4.21.0` or later.
|
| CVE-2026-53913 |
|
Authentication Bypass in org.apache.camel:camel-keycloak (CVE-2026-53913)
authentication bypass in org.apache.camel:camel-keycloak (CVE-2026-53913). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.21.0` or later.
|