Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-33930 |
|
Vulnerability in apache (CVE-2026-33930)
vulnerability in apache (CVE-2026-33930). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
|
| CVE-2026-33267 |
|
Vulnerability in apache (CVE-2026-33267)
vulnerability in apache (CVE-2026-33267). Confidential information can be exposed externally.
|
| CVE-2026-24033 |
|
Vulnerability in apache (CVE-2026-24033)
vulnerability in apache (CVE-2026-24033). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-22068 |
|
Vulnerability in apache (CVE-2026-22068)
vulnerability in apache (CVE-2026-22068). Confidential information can be exposed externally.
|
| CVE-2026-18197 |
|
Cross-Site Scripting (XSS) in ylefebvre (CVE-2026-18197)
cross-site scripting in ylefebvre (CVE-2026-18197). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18192 |
|
Vulnerability in path-traversal (CVE-2026-18192)
vulnerability in path-traversal (CVE-2026-18192). Confidential information can be exposed externally.
|
| CVE-2026-18191 |
|
Vulnerability in CVE-2026-18191 (CVE-2026-18191)
vulnerability in CVE-2026-18191 (CVE-2026-18191). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63242 |
|
Vulnerability in CVE-2026-63242 (CVE-2026-63242)
vulnerability in CVE-2026-63242 (CVE-2026-63242). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63241 |
|
Vulnerability in CVE-2026-63241 (CVE-2026-63241)
vulnerability in CVE-2026-63241 (CVE-2026-63241). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63240 |
|
Information Disclosure in c (CVE-2026-63240)
vulnerability in c (CVE-2026-63240). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63239 |
|
Vulnerability in CVE-2026-63239 (CVE-2026-63239)
vulnerability in CVE-2026-63239 (CVE-2026-63239). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63238 |
|
Authentication Bypass in CVE-2026-63238 (CVE-2026-63238)
authentication bypass in CVE-2026-63238 (CVE-2026-63238). Confidential information can be exposed externally.
|
| CVE-2026-63237 |
|
Vulnerability in CVE-2026-63237 (CVE-2026-63237)
vulnerability in CVE-2026-63237 (CVE-2026-63237). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63236 |
|
Vulnerability in CVE-2026-63236 (CVE-2026-63236)
vulnerability in CVE-2026-63236 (CVE-2026-63236). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63235 |
|
Vulnerability in dos (CVE-2026-63235)
vulnerability in dos (CVE-2026-63235). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63234 |
|
SQL Injection in sqli (CVE-2026-63234)
SQL injection in sqli (CVE-2026-63234). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63233 |
|
SQL Injection in sqli (CVE-2026-63233)
SQL injection in sqli (CVE-2026-63233). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63232 |
|
SQL Injection in sqli (CVE-2026-63232)
SQL injection in sqli (CVE-2026-63232). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63231 |
|
SQL Injection in sqli (CVE-2026-63231)
SQL injection in sqli (CVE-2026-63231). Confidential information can be exposed externally.
|
| CVE-2026-63230 |
|
SQL Injection in sqli (CVE-2026-63230)
SQL injection in sqli (CVE-2026-63230). Confidential information can be exposed externally.
|
| CVE-2026-63229 |
|
SQL Injection in sqli (CVE-2026-63229)
SQL injection in sqli (CVE-2026-63229). Confidential information can be exposed externally.
|
| CVE-2026-63228 |
|
Unrestricted File Upload in CVE-2026-63228 (CVE-2026-63228)
vulnerability in CVE-2026-63228 (CVE-2026-63228). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63227 |
|
Unrestricted File Upload in CVE-2026-63227 (CVE-2026-63227)
vulnerability in CVE-2026-63227 (CVE-2026-63227). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14300 |
|
Authentication Bypass in wordpress (CVE-2026-14300)
authentication bypass in wordpress (CVE-2026-14300). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14234 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14234)
cross-site scripting in wordpress (CVE-2026-14234). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14224 |
|
Vulnerability in wordpress (CVE-2026-14224)
vulnerability in wordpress (CVE-2026-14224). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13692 |
|
Vulnerability in wordpress (CVE-2026-13692)
vulnerability in wordpress (CVE-2026-13692). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13690 |
|
Authentication Bypass in wordpress (CVE-2026-13690)
authentication bypass in wordpress (CVE-2026-13690). Confidential information can be exposed externally.
|
| CVE-2026-13605 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13605)
cross-site scripting in wordpress (CVE-2026-13605). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13423 |
|
Code Injection in wordpress (CVE-2026-13423)
code injection in wordpress (CVE-2026-13423). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11974 |
|
Path Traversal in wordpress (CVE-2026-11974)
path traversal in wordpress (CVE-2026-11974). Confidential information can be exposed externally.
|
| CVE-2026-11351 |
|
Information Disclosure in wordpress (CVE-2026-11351)
vulnerability in wordpress (CVE-2026-11351). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18072 |
|
Vulnerability in wordpress (CVE-2026-18072)
vulnerability in wordpress (CVE-2026-18072). Successful exploitation can lead to full system takeover. Exploitable via ``init``.
|
| CVE-2026-5626 |
|
Vulnerability in wordpress (CVE-2026-5626)
vulnerability in wordpress (CVE-2026-5626). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15344 |
|
SQL Injection in wordpress (CVE-2026-15344)
SQL injection in wordpress (CVE-2026-15344). Confidential information can be exposed externally.
|
| CVE-2026-12476 |
|
Unrestricted File Upload in wordpress (CVE-2026-12476)
vulnerability in wordpress (CVE-2026-12476). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3949 |
|
Vulnerability in jvn (CVE-2026-3949)
vulnerability in jvn (CVE-2026-3949). Risk of unauthorized operations or information disclosure. Exploitable via ``b97c8b5``.
|
| CVE-2026-17166 |
|
Vulnerability in wordpress (CVE-2026-17166)
vulnerability in wordpress (CVE-2026-17166). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17162 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-17162)
cross-site scripting in wordpress (CVE-2026-17162). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17161 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-17161)
cross-site scripting in wordpress (CVE-2026-17161). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15735 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15735)
cross-site scripting in wordpress (CVE-2026-15735). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12939 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12939)
cross-site scripting in wordpress (CVE-2026-12939). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12938 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12938)
cross-site scripting in wordpress (CVE-2026-12938). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12144 |
|
Privilege Escalation in wordpress (CVE-2026-12144)
vulnerability in wordpress (CVE-2026-12144). Successful exploitation can lead to full system takeover. Exploitable via ``user_role_set``.
|
| CVE-2026-66064 |
|
Vulnerability in github.com/patrickhener/goshs/v2 (CVE-2026-66064)
vulnerability in github.com/patrickhener/goshs/v2 (CVE-2026-66064). Risk of unauthorized operations or information disclosure. Exploitable via `GET /blocked/secret.txt`. Mitigation: upgrade to `2.1.5-0.20260727065949-f3ef599e4091` or later.
|
| CVE-2026-54659 |
|
Path Traversal in pagy (CVE-2026-54659)
path traversal in pagy (CVE-2026-54659). Risk of unauthorized operations or information disclosure. Exploitable via ``nil``. Mitigation: upgrade to `43.5.6` or later.
|
| GHSA-6xx4-9wp6-65p7 |
|
Vulnerability in skilo (GHSA-6xx4-9wp6-65p7)
vulnerability in skilo (GHSA-6xx4-9wp6-65p7). Risk of unauthorized operations or information disclosure. Exploitable via ``copy_dir_all``. Mitigation: upgrade to `0.11.1` or later.
|
| CVE-2026-54650 |
|
Path Traversal in github.com/bablilayoub/openhole (CVE-2026-54650)
path traversal in github.com/bablilayoub/openhole (CVE-2026-54650). Confidential information can be exposed externally. Exploitable via ``r.URL.Path``. Mitigation: upgrade to `0.1.2` or later.
|
| CVE-2026-54658 |
|
SQL Injection in @hypequery/clickhouse (CVE-2026-54658)
SQL injection in @hypequery/clickhouse (CVE-2026-54658). Successful exploitation can lead to full system takeover. Exploitable via ``String``. Mitigation: upgrade to `2.0.2` or later.
|
| CVE-2026-54638 |
|
Vulnerability in github.com/gotd/td (CVE-2026-54638)
vulnerability in github.com/gotd/td (CVE-2026-54638). Risk of unauthorized operations or information disclosure. Exploitable via ``dataLen``. Mitigation: upgrade to `0.145.1` or later.
|