Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-71261 Vulnerability in CVE-2026-71261 (CVE-2026-71261)
vulnerability in CVE-2026-71261 (CVE-2026-71261). Successful exploitation can lead to full system takeover.
CVE-2026-71260 Vulnerability in cpp (CVE-2026-71260)
vulnerability in cpp (CVE-2026-71260). Confidential information can be exposed externally. Exploitable via `GET /text/`.
CVE-2026-71259 ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url() validator in...
ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url() validator in...
CVE-2026-71227 Vulnerability in dos (CVE-2026-71227)
vulnerability in dos (CVE-2026-71227). Risk of unauthorized operations or information disclosure.
CVE-2026-71226 Use-After-Free in redhat (CVE-2026-71226)
vulnerability in redhat (CVE-2026-71226). Risk of unauthorized operations or information disclosure.
CVE-2026-71225 Vulnerability in redhat (CVE-2026-71225)
vulnerability in redhat (CVE-2026-71225). Confidential information can be exposed externally.
CVE-2026-16022 OS Command Injection in CVE-2026-16022 (CVE-2026-16022)
OS command injection in CVE-2026-16022 (CVE-2026-16022). Successful exploitation can lead to full system takeover.
CVE-2026-0516 Vulnerability in CVE-2026-0516 (CVE-2026-0516)
vulnerability in CVE-2026-0516 (CVE-2026-0516). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
CVE-2026-71256 Out-of-Bounds Read in c (CVE-2026-71256)
vulnerability in c (CVE-2026-71256). Successful exploitation can lead to full system takeover.
CVE-2026-64582 Vulnerability in CVE-2026-64582 (CVE-2026-64582)
vulnerability in CVE-2026-64582 (CVE-2026-64582). Successful exploitation can lead to full system takeover.
CVE-2026-71255 Out-of-Bounds Write in c (CVE-2026-71255)
out-of-bounds write in c (CVE-2026-71255). Risk of unauthorized operations or information disclosure.
CVE-2026-61891 Path Traversal in eclipse (CVE-2026-61891)
path traversal in eclipse (CVE-2026-61891). Confidential information can be exposed externally. Exploitable via `GET /file`.
CVE-2026-71251 Vulnerability in CVE-2026-71251 (CVE-2026-71251)
vulnerability in CVE-2026-71251 (CVE-2026-71251). Confidential information can be exposed externally.
CVE-2026-71252 Vulnerability in CVE-2026-71252 (CVE-2026-71252)
vulnerability in CVE-2026-71252 (CVE-2026-71252). Data can be tampered with by attackers.
CVE-2026-46581 Path Traversal in eclipse (CVE-2026-46581)
path traversal in eclipse (CVE-2026-46581). Confidential information can be exposed externally. Exploitable via ``DefaultFaceletFactory``.
CVE-2026-18933 Unrestricted File Upload in wordpress (CVE-2026-18933)
vulnerability in wordpress (CVE-2026-18933). Successful exploitation can lead to full system takeover.
CVE-2026-71254 Out-of-Bounds Write in c (CVE-2026-71254)
out-of-bounds write in c (CVE-2026-71254). Successful exploitation can lead to full system takeover.
CVE-2026-71250 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-71250)
SSRF in ssrf (CVE-2026-71250). Risk of unauthorized operations or information disclosure.
CVE-2026-71249 Cross-Site Scripting (XSS) in CVE-2026-71249 (CVE-2026-71249)
cross-site scripting in CVE-2026-71249 (CVE-2026-71249). Risk of unauthorized operations or information disclosure.
CVE-2026-71248 SQL Injection in sqli (CVE-2026-71248)
SQL injection in sqli (CVE-2026-71248). Successful exploitation can lead to full system takeover.
CVE-2026-71243 OS Command Injection in CVE-2026-71243 (CVE-2026-71243)
OS command injection in CVE-2026-71243 (CVE-2026-71243). Successful exploitation can lead to full system takeover.
CVE-2026-71244 SSRF (Server-Side Request Forgery) in CVE-2026-71244 (CVE-2026-71244)
SSRF in CVE-2026-71244 (CVE-2026-71244). Confidential information can be exposed externally.
CVE-2026-71241 Vulnerability in flask (CVE-2026-71241)
vulnerability in flask (CVE-2026-71241). Confidential information can be exposed externally.
CVE-2026-71245 SQL Injection in CVE-2026-71245 (CVE-2026-71245)
SQL injection in CVE-2026-71245 (CVE-2026-71245). Confidential information can be exposed externally.
CVE-2026-71242 Vulnerability in CVE-2026-71242 (CVE-2026-71242)
vulnerability in CVE-2026-71242 (CVE-2026-71242). Confidential information can be exposed externally.
CVE-2026-71247 Authorization Flaw in CVE-2026-71247 (CVE-2026-71247)
vulnerability in CVE-2026-71247 (CVE-2026-71247). Data can be tampered with by attackers.
CVE-2026-71246 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-71246)
SSRF in ssrf (CVE-2026-71246). Risk of unauthorized operations or information disclosure.
CVE-2026-71240 Open Redirect in CVE-2026-71240 (CVE-2026-71240)
vulnerability in CVE-2026-71240 (CVE-2026-71240). Risk of unauthorized operations or information disclosure.
CVE-2026-71239 Vulnerability in django (CVE-2026-71239)
vulnerability in django (CVE-2026-71239). Confidential information can be exposed externally.
CVE-2026-71238 Vulnerability in django (CVE-2026-71238)
vulnerability in django (CVE-2026-71238). Confidential information can be exposed externally.
CVE-2026-71235 Code Injection in ssrf (CVE-2026-71235)
code injection in ssrf (CVE-2026-71235). Successful exploitation can lead to full system takeover.
CVE-2026-71237 SQL Injection in sqli (CVE-2026-71237)
SQL injection in sqli (CVE-2026-71237). Successful exploitation can lead to full system takeover. Exploitable via `POST /userlogin`.
CVE-2026-71234 Authorization Flaw in CVE-2026-71234 (CVE-2026-71234)
vulnerability in CVE-2026-71234 (CVE-2026-71234). Confidential information can be exposed externally. Exploitable via ``secure``.
CVE-2026-71236 Cross-Site Scripting (XSS) in CVE-2026-71236 (CVE-2026-71236)
cross-site scripting in CVE-2026-71236 (CVE-2026-71236). Confidential information can be exposed externally.
CVE-2026-71233 Cross-Site Scripting (XSS) in laravel (CVE-2026-71233)
cross-site scripting in laravel (CVE-2026-71233). Confidential information can be exposed externally. Exploitable via `PUT /api/v1/invoices/{id}`.
CVE-2026-66747 Vulnerability in CVE-2026-66747 (CVE-2026-66747)
vulnerability in CVE-2026-66747 (CVE-2026-66747). Successful exploitation can lead to full system takeover.
CVE-2026-71231 SQL Injection in sqli (CVE-2026-71231)
SQL injection in sqli (CVE-2026-71231). Successful exploitation can lead to full system takeover.
CVE-2026-14574 Vulnerability in eclipse (CVE-2026-14574)
vulnerability in eclipse (CVE-2026-14574). Data can be tampered with by attackers. Exploitable via ``PreferenceUtils.merge``.
CVE-2026-14304 XXE (XML External Entity) in eclipse (CVE-2026-14304)
vulnerability in eclipse (CVE-2026-14304). Confidential information can be exposed externally.
CVE-2026-17578 Vulnerability in CVE-2026-17578 (CVE-2026-17578)
vulnerability in CVE-2026-17578 (CVE-2026-17578). Risk of unauthorized operations or information disclosure.
CVE-2026-12609 Path Traversal in eclipse (CVE-2026-12609)
path traversal in eclipse (CVE-2026-12609). Confidential information can be exposed externally.
CVE-2026-71232 Code Injection in CVE-2026-71232 (CVE-2026-71232)
code injection in CVE-2026-71232 (CVE-2026-71232). Successful exploitation can lead to full system takeover.
CVE-2026-60009 Path Traversal in eclipse (CVE-2026-60009)
path traversal in eclipse (CVE-2026-60009). Successful exploitation can lead to full system takeover. Exploitable via `POST /file-upload`.
CVE-2026-44945 Vulnerability in privilege-escalation (CVE-2026-44945)
vulnerability in privilege-escalation (CVE-2026-44945). Successful exploitation can lead to full system takeover.
CVE-2026-25703 Vulnerability in CVE-2026-25703 (CVE-2026-25703)
vulnerability in CVE-2026-25703 (CVE-2026-25703). Risk of unauthorized operations or information disclosure.
CVE-2026-15452 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15452)
cross-site scripting in wordpress (CVE-2026-15452). Risk of unauthorized operations or information disclosure.
CVE-2026-0931 Vulnerability in CVE-2026-0931 (CVE-2026-0931)
vulnerability in CVE-2026-0931 (CVE-2026-0931). Risk of unauthorized operations or information disclosure.
CVE-2026-10059 Vulnerability in privilege-escalation (CVE-2026-10059)
vulnerability in privilege-escalation (CVE-2026-10059). Successful exploitation can lead to full system takeover.
CVE-2026-8029 SQL Injection in sqli (CVE-2026-8029)
SQL injection in sqli (CVE-2026-8029). Confidential information can be exposed externally.
CVE-2026-10090 Vulnerability in privilege-escalation (CVE-2026-10090)
vulnerability in privilege-escalation (CVE-2026-10090). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →