Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
ID Title
CVE-2026-72823 Vulnerability in CVE-2026-72823 (CVE-2026-72823)
vulnerability in CVE-2026-72823 (CVE-2026-72823). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/demo/reset`.
CVE-2026-72827 Vulnerability in CVE-2026-72827 (CVE-2026-72827)
vulnerability in CVE-2026-72827 (CVE-2026-72827). Successful exploitation can lead to full system takeover.
CVE-2026-72828 Privilege Escalation in privilege-escalation (CVE-2026-72828)
vulnerability in privilege-escalation (CVE-2026-72828). Successful exploitation can lead to full system takeover.
CVE-2026-72825 Vulnerability in CVE-2026-72825 (CVE-2026-72825)
vulnerability in CVE-2026-72825 (CVE-2026-72825). Data can be tampered with by attackers. Exploitable via `POST /reports/twig-content/allowlist`.
CVE-2026-72824 Vulnerability in CVE-2026-72824 (CVE-2026-72824)
vulnerability in CVE-2026-72824 (CVE-2026-72824). Successful exploitation can lead to full system takeover.
CVE-2026-72831 Authorization Flaw in CVE-2026-72831 (CVE-2026-72831)
vulnerability in CVE-2026-72831 (CVE-2026-72831). Successful exploitation can lead to full system takeover.
CVE-2026-72822 Vulnerability in CVE-2026-72822 (CVE-2026-72822)
vulnerability in CVE-2026-72822 (CVE-2026-72822). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/users/{user}/2fa/disable`.
CVE-2026-72817 Vulnerability in CVE-2026-72817 (CVE-2026-72817)
vulnerability in CVE-2026-72817 (CVE-2026-72817). Risk of unauthorized operations or information disclosure.
CVE-2026-72816 Vulnerability in CVE-2026-72816 (CVE-2026-72816)
vulnerability in CVE-2026-72816 (CVE-2026-72816). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.3.0` or later.
CVE-2026-72820 Path Traversal in CVE-2026-72820 (CVE-2026-72820)
path traversal in CVE-2026-72820 (CVE-2026-72820). Confidential information can be exposed externally.
CVE-2026-72819 Code Injection in c (CVE-2026-72819)
code injection in c (CVE-2026-72819). Successful exploitation can lead to full system takeover.
CVE-2026-72814 Path Traversal in CVE-2026-72814 (CVE-2026-72814)
path traversal in CVE-2026-72814 (CVE-2026-72814). Risk of unauthorized operations or information disclosure.
CVE-2026-72821 Cross-Site Scripting (XSS) in CVE-2026-72821 (CVE-2026-72821)
cross-site scripting in CVE-2026-72821 (CVE-2026-72821). Risk of unauthorized operations or information disclosure.
CVE-2026-72815 Vulnerability in CVE-2026-72815 (CVE-2026-72815)
vulnerability in CVE-2026-72815 (CVE-2026-72815). Risk of unauthorized operations or information disclosure.
CVE-2026-72812 Vulnerability in c (CVE-2026-72812)
vulnerability in c (CVE-2026-72812). Risk of unauthorized operations or information disclosure.
CVE-2026-19822 Buffer Overflow in CVE-2026-19822 (CVE-2026-19822)
vulnerability in CVE-2026-19822 (CVE-2026-19822). Successful exploitation can lead to full system takeover.
CVE-2026-19821 Buffer Overflow in CVE-2026-19821 (CVE-2026-19821)
vulnerability in CVE-2026-19821 (CVE-2026-19821). Successful exploitation can lead to full system takeover.
CVE-2026-72813 Vulnerability in dos (CVE-2026-72813)
vulnerability in dos (CVE-2026-72813). Risk of unauthorized operations or information disclosure.
CVE-2025-71405 Open Redirect in CVE-2025-71405 (CVE-2025-71405)
vulnerability in CVE-2025-71405 (CVE-2025-71405). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
CVE-2026-72810 Vulnerability in CVE-2026-72810 (CVE-2026-72810)
vulnerability in CVE-2026-72810 (CVE-2026-72810). Confidential information can be exposed externally.
CVE-2026-72811 SQL Injection in sqli (CVE-2026-72811)
SQL injection in sqli (CVE-2026-72811). Confidential information can be exposed externally. Mitigation: upgrade to `3.7.4` or later.
CVE-2026-19815 Buffer Overflow in CVE-2026-19815 (CVE-2026-19815)
vulnerability in CVE-2026-19815 (CVE-2026-19815). Successful exploitation can lead to full system takeover.
CVE-2026-19814 Buffer Overflow in CVE-2026-19814 (CVE-2026-19814)
vulnerability in CVE-2026-19814 (CVE-2026-19814). Successful exploitation can lead to full system takeover.
CVE-2026-19813 A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts...
A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts...
CVE-2026-19812 A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the...
A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the...
CVE-2026-19794 The WP-Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up...
The WP-Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up...
CVE-2026-19811 A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted...
A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted...
CVE-2026-18039 Privilege Escalation in wordpress (CVE-2026-18039)
vulnerability in wordpress (CVE-2026-18039). Successful exploitation can lead to full system takeover.
CVE-2026-19617 Vulnerability in dos (CVE-2026-19617)
vulnerability in dos (CVE-2026-19617). Risk of unauthorized operations or information disclosure.
CVE-2026-15205 SQL Injection in wordpress (CVE-2026-15205)
SQL injection in wordpress (CVE-2026-15205). Confidential information can be exposed externally.
CVE-2026-12743 SQL Injection in wordpress (CVE-2026-12743)
SQL injection in wordpress (CVE-2026-12743). Confidential information can be exposed externally.
CVE-2026-19791 Buffer Overflow in CVE-2026-19791 (CVE-2026-19791)
vulnerability in CVE-2026-19791 (CVE-2026-19791). Successful exploitation can lead to full system takeover.
CVE-2026-16739 Authentication Bypass in wordpress (CVE-2026-16739)
authentication bypass in wordpress (CVE-2026-16739). Data can be tampered with by attackers.
CVE-2026-12949 Vulnerability in wordpress (CVE-2026-12949)
vulnerability in wordpress (CVE-2026-12949). Successful exploitation can lead to full system takeover.
CVE-2026-19792 Buffer Overflow in CVE-2026-19792 (CVE-2026-19792)
vulnerability in CVE-2026-19792 (CVE-2026-19792). Successful exploitation can lead to full system takeover.
CVE-2026-16810 SQL Injection in wordpress (CVE-2026-16810)
SQL injection in wordpress (CVE-2026-16810). Confidential information can be exposed externally.
CVE-2026-14290 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14290)
cross-site scripting in wordpress (CVE-2026-14290). Successful exploitation can lead to full system takeover.
CVE-2025-10308 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2025-10308)
vulnerability in wordpress (CVE-2025-10308). Risk of unauthorized operations or information disclosure.
CVE-2026-19790 Buffer Overflow in CVE-2026-19790 (CVE-2026-19790)
vulnerability in CVE-2026-19790 (CVE-2026-19790). Successful exploitation can lead to full system takeover.
CVE-2026-19789 Buffer Overflow in CVE-2026-19789 (CVE-2026-19789)
vulnerability in CVE-2026-19789 (CVE-2026-19789). Successful exploitation can lead to full system takeover.
CVE-2026-19788 Buffer Overflow in CVE-2026-19788 (CVE-2026-19788)
vulnerability in CVE-2026-19788 (CVE-2026-19788). Successful exploitation can lead to full system takeover.
CVE-2026-19784 Vulnerability in CVE-2026-19784 (CVE-2026-19784)
vulnerability in CVE-2026-19784 (CVE-2026-19784). Risk of unauthorized operations or information disclosure.
CVE-2026-19785 Vulnerability in sqli (CVE-2026-19785)
vulnerability in sqli (CVE-2026-19785). Risk of unauthorized operations or information disclosure.
CVE-2026-18109 Cross-Site Scripting (XSS) in wordpress (CVE-2026-18109)
cross-site scripting in wordpress (CVE-2026-18109). Risk of unauthorized operations or information disclosure.
CVE-2026-19786 Cross-Site Request Forgery (CSRF) in CVE-2026-19786 (CVE-2026-19786)
vulnerability in CVE-2026-19786 (CVE-2026-19786). Risk of unauthorized operations or information disclosure.
CVE-2026-19787 Vulnerability in sqli (CVE-2026-19787)
vulnerability in sqli (CVE-2026-19787). Risk of unauthorized operations or information disclosure.
CVE-2026-19771 A vulnerability was identified in Baicells EG3661M BaiCE_BQ6_2.0.5.3_NA. This impacts an unknown...
A vulnerability was identified in Baicells EG3661M BaiCE_BQ6_2.0.5.3_NA. This impacts an unknown...
CVE-2026-19770 SSRF (Server-Side Request Forgery) in CVE-2026-19770 (CVE-2026-19770)
SSRF in CVE-2026-19770 (CVE-2026-19770). Risk of unauthorized operations or information disclosure.
CVE-2026-19767 Vulnerability in sqli (CVE-2026-19767)
vulnerability in sqli (CVE-2026-19767). Risk of unauthorized operations or information disclosure.
CVE-2026-19765 SSRF (Server-Side Request Forgery) in CVE-2026-19765 (CVE-2026-19765)
SSRF in CVE-2026-19765 (CVE-2026-19765). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →