Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-33930 Vulnerability in apache (CVE-2026-33930)
vulnerability in apache (CVE-2026-33930). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
CVE-2026-33267 Vulnerability in apache (CVE-2026-33267)
vulnerability in apache (CVE-2026-33267). Confidential information can be exposed externally.
CVE-2026-24033 Vulnerability in apache (CVE-2026-24033)
vulnerability in apache (CVE-2026-24033). Risk of unauthorized operations or information disclosure.
CVE-2026-22068 Vulnerability in apache (CVE-2026-22068)
vulnerability in apache (CVE-2026-22068). Confidential information can be exposed externally.
CVE-2026-18197 Cross-Site Scripting (XSS) in ylefebvre (CVE-2026-18197)
cross-site scripting in ylefebvre (CVE-2026-18197). Risk of unauthorized operations or information disclosure.
CVE-2026-18192 Vulnerability in path-traversal (CVE-2026-18192)
vulnerability in path-traversal (CVE-2026-18192). Confidential information can be exposed externally.
CVE-2026-18191 Vulnerability in CVE-2026-18191 (CVE-2026-18191)
vulnerability in CVE-2026-18191 (CVE-2026-18191). Successful exploitation can lead to full system takeover.
CVE-2026-63242 Vulnerability in CVE-2026-63242 (CVE-2026-63242)
vulnerability in CVE-2026-63242 (CVE-2026-63242). Risk of unauthorized operations or information disclosure.
CVE-2026-63241 Vulnerability in CVE-2026-63241 (CVE-2026-63241)
vulnerability in CVE-2026-63241 (CVE-2026-63241). Risk of unauthorized operations or information disclosure.
CVE-2026-63240 Information Disclosure in c (CVE-2026-63240)
vulnerability in c (CVE-2026-63240). Risk of unauthorized operations or information disclosure.
CVE-2026-63239 Vulnerability in CVE-2026-63239 (CVE-2026-63239)
vulnerability in CVE-2026-63239 (CVE-2026-63239). Risk of unauthorized operations or information disclosure.
CVE-2026-63238 Authentication Bypass in CVE-2026-63238 (CVE-2026-63238)
authentication bypass in CVE-2026-63238 (CVE-2026-63238). Confidential information can be exposed externally.
CVE-2026-63237 Vulnerability in CVE-2026-63237 (CVE-2026-63237)
vulnerability in CVE-2026-63237 (CVE-2026-63237). Risk of unauthorized operations or information disclosure.
CVE-2026-63236 Vulnerability in CVE-2026-63236 (CVE-2026-63236)
vulnerability in CVE-2026-63236 (CVE-2026-63236). Risk of unauthorized operations or information disclosure.
CVE-2026-63235 Vulnerability in dos (CVE-2026-63235)
vulnerability in dos (CVE-2026-63235). Risk of unauthorized operations or information disclosure.
CVE-2026-63234 SQL Injection in sqli (CVE-2026-63234)
SQL injection in sqli (CVE-2026-63234). Successful exploitation can lead to full system takeover.
CVE-2026-63233 SQL Injection in sqli (CVE-2026-63233)
SQL injection in sqli (CVE-2026-63233). Successful exploitation can lead to full system takeover.
CVE-2026-63232 SQL Injection in sqli (CVE-2026-63232)
SQL injection in sqli (CVE-2026-63232). Successful exploitation can lead to full system takeover.
CVE-2026-63231 SQL Injection in sqli (CVE-2026-63231)
SQL injection in sqli (CVE-2026-63231). Confidential information can be exposed externally.
CVE-2026-63230 SQL Injection in sqli (CVE-2026-63230)
SQL injection in sqli (CVE-2026-63230). Confidential information can be exposed externally.
CVE-2026-63229 SQL Injection in sqli (CVE-2026-63229)
SQL injection in sqli (CVE-2026-63229). Confidential information can be exposed externally.
CVE-2026-63228 Unrestricted File Upload in CVE-2026-63228 (CVE-2026-63228)
vulnerability in CVE-2026-63228 (CVE-2026-63228). Risk of unauthorized operations or information disclosure.
CVE-2026-63227 Unrestricted File Upload in CVE-2026-63227 (CVE-2026-63227)
vulnerability in CVE-2026-63227 (CVE-2026-63227). Successful exploitation can lead to full system takeover.
CVE-2026-14300 Authentication Bypass in wordpress (CVE-2026-14300)
authentication bypass in wordpress (CVE-2026-14300). Successful exploitation can lead to full system takeover.
CVE-2026-14234 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14234)
cross-site scripting in wordpress (CVE-2026-14234). Risk of unauthorized operations or information disclosure.
CVE-2026-14224 Vulnerability in wordpress (CVE-2026-14224)
vulnerability in wordpress (CVE-2026-14224). Risk of unauthorized operations or information disclosure.
CVE-2026-13692 Vulnerability in wordpress (CVE-2026-13692)
vulnerability in wordpress (CVE-2026-13692). Risk of unauthorized operations or information disclosure.
CVE-2026-13690 Authentication Bypass in wordpress (CVE-2026-13690)
authentication bypass in wordpress (CVE-2026-13690). Confidential information can be exposed externally.
CVE-2026-13605 Cross-Site Scripting (XSS) in wordpress (CVE-2026-13605)
cross-site scripting in wordpress (CVE-2026-13605). Successful exploitation can lead to full system takeover.
CVE-2026-13423 Code Injection in wordpress (CVE-2026-13423)
code injection in wordpress (CVE-2026-13423). Successful exploitation can lead to full system takeover.
CVE-2026-11974 Path Traversal in wordpress (CVE-2026-11974)
path traversal in wordpress (CVE-2026-11974). Confidential information can be exposed externally.
CVE-2026-11351 Information Disclosure in wordpress (CVE-2026-11351)
vulnerability in wordpress (CVE-2026-11351). Risk of unauthorized operations or information disclosure.
CVE-2026-18072 Vulnerability in wordpress (CVE-2026-18072)
vulnerability in wordpress (CVE-2026-18072). Successful exploitation can lead to full system takeover. Exploitable via ``init``.
CVE-2026-5626 Vulnerability in wordpress (CVE-2026-5626)
vulnerability in wordpress (CVE-2026-5626). Risk of unauthorized operations or information disclosure.
CVE-2026-15344 SQL Injection in wordpress (CVE-2026-15344)
SQL injection in wordpress (CVE-2026-15344). Confidential information can be exposed externally.
CVE-2026-12476 Unrestricted File Upload in wordpress (CVE-2026-12476)
vulnerability in wordpress (CVE-2026-12476). Successful exploitation can lead to full system takeover.
CVE-2026-3949 Vulnerability in jvn (CVE-2026-3949)
vulnerability in jvn (CVE-2026-3949). Risk of unauthorized operations or information disclosure. Exploitable via ``b97c8b5``.
CVE-2026-17166 Vulnerability in wordpress (CVE-2026-17166)
vulnerability in wordpress (CVE-2026-17166). Risk of unauthorized operations or information disclosure.
CVE-2026-17162 Cross-Site Scripting (XSS) in wordpress (CVE-2026-17162)
cross-site scripting in wordpress (CVE-2026-17162). Risk of unauthorized operations or information disclosure.
CVE-2026-17161 Cross-Site Scripting (XSS) in wordpress (CVE-2026-17161)
cross-site scripting in wordpress (CVE-2026-17161). Risk of unauthorized operations or information disclosure.
CVE-2026-15735 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15735)
cross-site scripting in wordpress (CVE-2026-15735). Risk of unauthorized operations or information disclosure.
CVE-2026-12939 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12939)
cross-site scripting in wordpress (CVE-2026-12939). Risk of unauthorized operations or information disclosure.
CVE-2026-12938 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12938)
cross-site scripting in wordpress (CVE-2026-12938). Risk of unauthorized operations or information disclosure.
CVE-2026-12144 Privilege Escalation in wordpress (CVE-2026-12144)
vulnerability in wordpress (CVE-2026-12144). Successful exploitation can lead to full system takeover. Exploitable via ``user_role_set``.
CVE-2026-66064 Vulnerability in github.com/patrickhener/goshs/v2 (CVE-2026-66064)
vulnerability in github.com/patrickhener/goshs/v2 (CVE-2026-66064). Risk of unauthorized operations or information disclosure. Exploitable via `GET /blocked/secret.txt`. Mitigation: upgrade to `2.1.5-0.20260727065949-f3ef599e4091` or later.
CVE-2026-54659 Path Traversal in pagy (CVE-2026-54659)
path traversal in pagy (CVE-2026-54659). Risk of unauthorized operations or information disclosure. Exploitable via ``nil``. Mitigation: upgrade to `43.5.6` or later.
GHSA-6xx4-9wp6-65p7 Vulnerability in skilo (GHSA-6xx4-9wp6-65p7)
vulnerability in skilo (GHSA-6xx4-9wp6-65p7). Risk of unauthorized operations or information disclosure. Exploitable via ``copy_dir_all``. Mitigation: upgrade to `0.11.1` or later.
CVE-2026-54650 Path Traversal in github.com/bablilayoub/openhole (CVE-2026-54650)
path traversal in github.com/bablilayoub/openhole (CVE-2026-54650). Confidential information can be exposed externally. Exploitable via ``r.URL.Path``. Mitigation: upgrade to `0.1.2` or later.
CVE-2026-54658 SQL Injection in @hypequery/clickhouse (CVE-2026-54658)
SQL injection in @hypequery/clickhouse (CVE-2026-54658). Successful exploitation can lead to full system takeover. Exploitable via ``String``. Mitigation: upgrade to `2.0.2` or later.
CVE-2026-54638 Vulnerability in github.com/gotd/td (CVE-2026-54638)
vulnerability in github.com/gotd/td (CVE-2026-54638). Risk of unauthorized operations or information disclosure. Exploitable via ``dataLen``. Mitigation: upgrade to `0.145.1` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →