Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-66420 Vulnerability in CVE-2026-66420 (CVE-2026-66420)
vulnerability in CVE-2026-66420 (CVE-2026-66420). Successful exploitation can lead to full system takeover.
CVE-2026-66369 Out-of-Bounds Read in CVE-2026-66369 (CVE-2026-66369)
vulnerability in CVE-2026-66369 (CVE-2026-66369). Risk of unauthorized operations or information disclosure.
CVE-2026-66364 Out-of-Bounds Read in CVE-2026-66364 (CVE-2026-66364)
vulnerability in CVE-2026-66364 (CVE-2026-66364). Risk of unauthorized operations or information disclosure.
CVE-2026-66360 Out-of-Bounds Read in dos (CVE-2026-66360)
vulnerability in dos (CVE-2026-66360). Risk of unauthorized operations or information disclosure.
CVE-2026-66349 Out-of-Bounds Read in CVE-2026-66349 (CVE-2026-66349)
vulnerability in CVE-2026-66349 (CVE-2026-66349). Risk of unauthorized operations or information disclosure.
CVE-2026-65423 Vulnerability in CVE-2026-65423 (CVE-2026-65423)
vulnerability in CVE-2026-65423 (CVE-2026-65423). Successful exploitation can lead to full system takeover.
CVE-2026-65421 Out-of-Bounds Read in CVE-2026-65421 (CVE-2026-65421)
vulnerability in CVE-2026-65421 (CVE-2026-65421). Risk of unauthorized operations or information disclosure.
CVE-2026-63550 Out-of-Bounds Read in CVE-2026-63550 (CVE-2026-63550)
vulnerability in CVE-2026-63550 (CVE-2026-63550). Risk of unauthorized operations or information disclosure.
CVE-2026-63362 Vulnerability in dos (CVE-2026-63362)
vulnerability in dos (CVE-2026-63362). Risk of unauthorized operations or information disclosure.
CVE-2026-63035 Use-After-Free in dos (CVE-2026-63035)
vulnerability in dos (CVE-2026-63035). Data can be tampered with by attackers.
CVE-2026-63033 Out-of-Bounds Read in CVE-2026-63033 (CVE-2026-63033)
vulnerability in CVE-2026-63033 (CVE-2026-63033). Risk of unauthorized operations or information disclosure.
CVE-2026-56758 Out-of-Bounds Read in CVE-2026-56758 (CVE-2026-56758)
vulnerability in CVE-2026-56758 (CVE-2026-56758). Risk of unauthorized operations or information disclosure.
CVE-2026-10031 Authorization Flaw in CVE-2026-10031 (CVE-2026-10031)
vulnerability in CVE-2026-10031 (CVE-2026-10031). Risk of unauthorized operations or information disclosure.
CVE-2026-68563 Vulnerability in CVE-2026-68563 (CVE-2026-68563)
vulnerability in CVE-2026-68563 (CVE-2026-68563). Confidential information can be exposed externally. Exploitable via ``leapp_old_postgresql_data``.
CVE-2026-68562 Vulnerability in CVE-2026-68562 (CVE-2026-68562)
vulnerability in CVE-2026-68562 (CVE-2026-68562). Confidential information can be exposed externally.
CVE-2026-64816 Vulnerability in CVE-2026-64816 (CVE-2026-64816)
vulnerability in CVE-2026-64816 (CVE-2026-64816). Confidential information can be exposed externally.
CVE-2026-63559 Vulnerability in CVE-2026-63559 (CVE-2026-63559)
vulnerability in CVE-2026-63559 (CVE-2026-63559). Confidential information can be exposed externally.
CVE-2026-62845 SQL Injection in sqli (CVE-2026-62845)
SQL injection in sqli (CVE-2026-62845). Risk of unauthorized operations or information disclosure.
CVE-2026-62246 Vulnerability in CVE-2026-62246 (CVE-2026-62246)
vulnerability in CVE-2026-62246 (CVE-2026-62246). Successful exploitation can lead to full system takeover.
CVE-2026-38709 Command Injection in CVE-2026-38709 (CVE-2026-38709)
command injection in CVE-2026-38709 (CVE-2026-38709). Successful exploitation can lead to full system takeover.
CVE-2026-18064 Vulnerability in CVE-2026-18064 (CVE-2026-18064)
vulnerability in CVE-2026-18064 (CVE-2026-18064). Risk of unauthorized operations or information disclosure.
CVE-2026-12562 Vulnerability in CVE-2026-12562 (CVE-2026-12562)
vulnerability in CVE-2026-12562 (CVE-2026-12562). Successful exploitation can lead to full system takeover.
CVE-2026-66803 Vulnerability in microsoft (CVE-2026-66803)
vulnerability in microsoft (CVE-2026-66803). Successful exploitation can lead to full system takeover.
CVE-2026-66418 Cross-Site Scripting (XSS) in CVE-2026-66418 (CVE-2026-66418)
cross-site scripting in CVE-2026-66418 (CVE-2026-66418). Confidential information can be exposed externally.
CVE-2025-69938 SQL Injection in sqli (CVE-2025-69938)
SQL injection in sqli (CVE-2025-69938). Successful exploitation can lead to full system takeover.
CVE-2026-52539 Vulnerability in CVE-2026-52539 (CVE-2026-52539)
vulnerability in CVE-2026-52539 (CVE-2026-52539). Confidential information can be exposed externally.
CVE-2025-69933 SQL Injection in sqli (CVE-2025-69933)
SQL injection in sqli (CVE-2025-69933). Successful exploitation can lead to full system takeover.
CVE-2025-69934 SQL Injection in sqli (CVE-2025-69934)
SQL injection in sqli (CVE-2025-69934). Successful exploitation can lead to full system takeover.
CVE-2025-65342 Cross-Site Scripting (XSS) in CVE-2025-65342 (CVE-2025-65342)
cross-site scripting in CVE-2025-65342 (CVE-2025-65342). Risk of unauthorized operations or information disclosure.
CVE-2025-69941 SQL Injection in sqli (CVE-2025-69941)
SQL injection in sqli (CVE-2025-69941). Successful exploitation can lead to full system takeover.
CVE-2025-69947 SQL Injection in sqli (CVE-2025-69947)
SQL injection in sqli (CVE-2025-69947). Successful exploitation can lead to full system takeover.
CVE-2025-69935 SQL Injection in sqli (CVE-2025-69935)
SQL injection in sqli (CVE-2025-69935). Successful exploitation can lead to full system takeover.
CVE-2025-65341 Ecommerce Fruits Bazar 1.0 is vulnerable to Cross Site Scripting (XSS) in admin/edit_product.php.
Ecommerce Fruits Bazar 1.0 is vulnerable to Cross Site Scripting (XSS) in admin/edit_product.php.
CVE-2025-69930 SQL Injection in sqli (CVE-2025-69930)
SQL injection in sqli (CVE-2025-69930). Successful exploitation can lead to full system takeover.
CVE-2025-69937 SQL Injection in sqli (CVE-2025-69937)
SQL injection in sqli (CVE-2025-69937). Successful exploitation can lead to full system takeover.
CVE-2025-69931 SQL Injection in sqli (CVE-2025-69931)
SQL injection in sqli (CVE-2025-69931). Successful exploitation can lead to full system takeover.
CVE-2026-67207 Vulnerability in CVE-2026-67207 (CVE-2026-67207)
vulnerability in CVE-2026-67207 (CVE-2026-67207). Successful exploitation can lead to full system takeover.
CVE-2026-66756 Vulnerability in apache (CVE-2026-66756)
vulnerability in apache (CVE-2026-66756). Successful exploitation can lead to full system takeover.
CVE-2026-67206 Unrestricted File Upload in CVE-2026-67206 (CVE-2026-67206)
vulnerability in CVE-2026-67206 (CVE-2026-67206). Successful exploitation can lead to full system takeover.
CVE-2025-69936 CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.
CVE-2026-67594 Vulnerability in CVE-2026-67594 (CVE-2026-67594)
vulnerability in CVE-2026-67594 (CVE-2026-67594). Successful exploitation can lead to full system takeover.
CVE-2026-67208 Vulnerability in CVE-2026-67208 (CVE-2026-67208)
vulnerability in CVE-2026-67208 (CVE-2026-67208). Successful exploitation can lead to full system takeover.
CVE-2025-65336 SQL Injection in sqli (CVE-2025-65336)
SQL injection in sqli (CVE-2025-65336). Successful exploitation can lead to full system takeover.
CVE-2026-66755 Path Traversal in apache (CVE-2026-66755)
path traversal in apache (CVE-2026-66755). Confidential information can be exposed externally.
CVE-2026-35847 Command Injection in CVE-2026-35847 (CVE-2026-35847)
command injection in CVE-2026-35847 (CVE-2026-35847). Successful exploitation can lead to full system takeover.
CVE-2026-12946 Code Injection in langflow (CVE-2026-12946)
code injection in langflow (CVE-2026-12946). Successful exploitation can lead to full system takeover.
CVE-2026-11536 Unsafe Deserialization in ibm (CVE-2026-11536)
vulnerability in ibm (CVE-2026-11536). Successful exploitation can lead to full system takeover.
CVE-2025-51684 Cross-Site Scripting (XSS) in CVE-2025-51684 (CVE-2025-51684)
cross-site scripting in CVE-2025-51684 (CVE-2025-51684). Risk of unauthorized operations or information disclosure.
CVE-2026-66415 SSRF (Server-Side Request Forgery) in path-traversal (CVE-2026-66415)
SSRF in path-traversal (CVE-2026-66415). Confidential information can be exposed externally.
CVE-2026-10569 Information Disclosure in ibm (CVE-2026-10569)
vulnerability in ibm (CVE-2026-10569). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →