Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-63231 SQL Injection in sqli (CVE-2026-63231)
SQL injection in sqli (CVE-2026-63231). Confidential information can be exposed externally.
CVE-2026-14300 Authentication Bypass in wordpress (CVE-2026-14300)
authentication bypass in wordpress (CVE-2026-14300). Successful exploitation can lead to full system takeover.
CVE-2026-14234 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14234)
cross-site scripting in wordpress (CVE-2026-14234). Risk of unauthorized operations or information disclosure.
CVE-2026-13690 Authentication Bypass in wordpress (CVE-2026-13690)
authentication bypass in wordpress (CVE-2026-13690). Confidential information can be exposed externally.
CVE-2026-11974 Path Traversal in wordpress (CVE-2026-11974)
path traversal in wordpress (CVE-2026-11974). Confidential information can be exposed externally.
CVE-2026-12476 Unrestricted File Upload in wordpress (CVE-2026-12476)
vulnerability in wordpress (CVE-2026-12476). Successful exploitation can lead to full system takeover.
CVE-2026-12144 Privilege Escalation in wordpress (CVE-2026-12144)
vulnerability in wordpress (CVE-2026-12144). Successful exploitation can lead to full system takeover. Exploitable via ``user_role_set``.
CVE-2026-54650 Path Traversal in github.com/bablilayoub/openhole (CVE-2026-54650)
path traversal in github.com/bablilayoub/openhole (CVE-2026-54650). Confidential information can be exposed externally. Exploitable via ``r.URL.Path``. Mitigation: upgrade to `0.1.2` or later.
CVE-2026-54638 Vulnerability in github.com/gotd/td (CVE-2026-54638)
vulnerability in github.com/gotd/td (CVE-2026-54638). Risk of unauthorized operations or information disclosure. Exploitable via ``dataLen``. Mitigation: upgrade to `0.145.1` or later.
CVE-2026-54719 Vulnerability in github.com/patrickhener/goshs (CVE-2026-54719)
vulnerability in github.com/patrickhener/goshs (CVE-2026-54719). Confidential information can be exposed externally. Exploitable via `GET /protected/secret.txt`. Mitigation: upgrade to `2.1.1` or later.
CVE-2026-54654 Code Injection in datamodel-code-generator (CVE-2026-54654)
code injection in datamodel-code-generator (CVE-2026-54654). Successful exploitation can lead to full system takeover. Exploitable via ``comment``. Mitigation: upgrade to `0.60.2` or later.
CVE-2026-55389 Path Traversal in datamodel-code-generator (CVE-2026-55389)
path traversal in datamodel-code-generator (CVE-2026-55389). Confidential information can be exposed externally. Exploitable via ``_get_ref_body``. Mitigation: upgrade to `0.62.0` or later.
CVE-2026-54653 Code Injection in datamodel-code-generator (CVE-2026-54653)
code injection in datamodel-code-generator (CVE-2026-54653). Successful exploitation can lead to full system takeover. Exploitable via ``import``. Mitigation: upgrade to `0.60.2` or later.
CVE-2026-55391 Vulnerability in datamodel-code-generator (CVE-2026-55391)
vulnerability in datamodel-code-generator (CVE-2026-55391). Confidential information can be exposed externally. Exploitable via ``httpx``. Mitigation: upgrade to `0.63.0` or later.
CVE-2026-54656 Code Injection in datamodel-code-generator (CVE-2026-54656)
code injection in datamodel-code-generator (CVE-2026-54656). Successful exploitation can lead to full system takeover. Exploitable via ``validators``. Mitigation: upgrade to `0.60.2` or later.
CVE-2026-54690 SSRF (Server-Side Request Forgery) in datamodel-code-generator (CVE-2026-54690)
SSRF in datamodel-code-generator (CVE-2026-54690). Confidential information can be exposed externally. Exploitable via ``None``. Mitigation: upgrade to `0.61.0` or later.
CVE-2026-55415 Code Injection in datamodel-code-generator (CVE-2026-55415)
code injection in datamodel-code-generator (CVE-2026-55415). Successful exploitation can lead to full system takeover. Exploitable via ``customTypePath``. Mitigation: upgrade to `0.63.0` or later.
CVE-2026-54621 Code Injection in datamodel-code-generator (CVE-2026-54621)
code injection in datamodel-code-generator (CVE-2026-54621). Successful exploitation can lead to full system takeover. Exploitable via ``import``. Mitigation: upgrade to `0.60.1` or later.
CVE-2026-54655 Code Injection in datamodel-code-generator (CVE-2026-54655)
code injection in datamodel-code-generator (CVE-2026-54655). Successful exploitation can lead to full system takeover. Exploitable via ``_get_python_type_override``. Mitigation: upgrade to `0.60.2` or later.
CVE-2026-15057 Out-of-Bounds Write in dos (CVE-2026-15057)
out-of-bounds write in dos (CVE-2026-15057). Risk of unauthorized operations or information disclosure.
CVE-2026-15280 Path Traversal in ibm (CVE-2026-15280)
path traversal in ibm (CVE-2026-15280). Confidential information can be exposed externally.
CVE-2026-14996 Vulnerability in ibm (CVE-2026-14996)
vulnerability in ibm (CVE-2026-14996). Confidential information can be exposed externally.
CVE-2026-15325 Vulnerability in ibm (CVE-2026-15325)
vulnerability in ibm (CVE-2026-15325). Confidential information can be exposed externally.
CVE-2026-15064 Vulnerability in ibm (CVE-2026-15064)
vulnerability in ibm (CVE-2026-15064). Confidential information can be exposed externally.
CVE-2026-14981 Vulnerability in dos (CVE-2026-14981)
vulnerability in dos (CVE-2026-14981). Risk of unauthorized operations or information disclosure.
CVE-2026-15328 Vulnerability in ibm (CVE-2026-15328)
vulnerability in ibm (CVE-2026-15328). Confidential information can be exposed externally.
CVE-2026-14974 Unsafe Deserialization in deserialization (CVE-2026-14974)
vulnerability in deserialization (CVE-2026-14974). Successful exploitation can lead to full system takeover.
CVE-2026-14976 Vulnerability in ibm (CVE-2026-14976)
vulnerability in ibm (CVE-2026-14976). Successful exploitation can lead to full system takeover.
CVE-2026-14893 Vulnerability in CVE-2026-14893 (CVE-2026-14893)
vulnerability in CVE-2026-14893 (CVE-2026-14893). Data can be tampered with by attackers.
CVE-2026-14528 Vulnerability in ibm (CVE-2026-14528)
vulnerability in ibm (CVE-2026-14528). Confidential information can be exposed externally.
CVE-2026-13463 Vulnerability in ibm (CVE-2026-13463)
vulnerability in ibm (CVE-2026-13463). Confidential information can be exposed externally.
CVE-2026-13442 Vulnerability in langflow (CVE-2026-13442)
vulnerability in langflow (CVE-2026-13442). Confidential information can be exposed externally.
CVE-2026-54691 SSRF (Server-Side Request Forgery) in datamodel-code-generator (CVE-2026-54691)
SSRF in datamodel-code-generator (CVE-2026-54691). Confidential information can be exposed externally. Exploitable via ``http.get_body``. Mitigation: upgrade to `0.61.0` or later.
CVE-2026-55390 Path Traversal in datamodel-code-generator (CVE-2026-55390)
path traversal in datamodel-code-generator (CVE-2026-55390). Confidential information can be exposed externally. Exploitable via ``schemaLocation``. Mitigation: upgrade to `0.62.0` or later.
CVE-2026-57510 Vulnerability in CVE-2026-57510 (CVE-2026-57510)
vulnerability in CVE-2026-57510 (CVE-2026-57510). Successful exploitation can lead to full system takeover.
CVE-2026-16192 Vulnerability in dos (CVE-2026-16192)
vulnerability in dos (CVE-2026-16192). Risk of unauthorized operations or information disclosure.
CVE-2026-16184 Vulnerability in ibm (CVE-2026-16184)
vulnerability in ibm (CVE-2026-16184). Risk of unauthorized operations or information disclosure.
CVE-2026-7769 SQL Injection in sqli (CVE-2026-7769)
SQL injection in sqli (CVE-2026-7769). Confidential information can be exposed externally.
CVE-2026-66745 Code Injection in CVE-2026-66745 (CVE-2026-66745)
code injection in CVE-2026-66745 (CVE-2026-66745). Successful exploitation can lead to full system takeover.
CVE-2026-50737 Vulnerability in enterprisedb (CVE-2026-50737)
vulnerability in enterprisedb (CVE-2026-50737). Successful exploitation can lead to full system takeover.
CVE-2026-50736 SQL Injection in enterprisedb (CVE-2026-50736)
SQL injection in enterprisedb (CVE-2026-50736). Successful exploitation can lead to full system takeover.
CVE-2026-48396 Authorization Flaw in adobe (CVE-2026-48396)
vulnerability in adobe (CVE-2026-48396). Successful exploitation can lead to full system takeover.
CVE-2026-48395 Vulnerability in adobe (CVE-2026-48395)
vulnerability in adobe (CVE-2026-48395). Successful exploitation can lead to full system takeover.
CVE-2026-48394 Out-of-Bounds Write in adobe (CVE-2026-48394)
out-of-bounds write in adobe (CVE-2026-48394). Successful exploitation can lead to full system takeover.
CVE-2026-48393 Out-of-Bounds Write in adobe (CVE-2026-48393)
out-of-bounds write in adobe (CVE-2026-48393). Successful exploitation can lead to full system takeover.
CVE-2026-48392 Out-of-Bounds Write in adobe (CVE-2026-48392)
out-of-bounds write in adobe (CVE-2026-48392). Successful exploitation can lead to full system takeover.
CVE-2026-48391 Vulnerability in adobe (CVE-2026-48391)
vulnerability in adobe (CVE-2026-48391). Successful exploitation can lead to full system takeover.
CVE-2026-48390 Authorization Flaw in privilege-escalation (CVE-2026-48390)
vulnerability in privilege-escalation (CVE-2026-48390). Confidential information can be exposed externally.
CVE-2026-48374 Path Traversal in path-traversal (CVE-2026-48374)
path traversal in path-traversal (CVE-2026-48374). Successful exploitation can lead to full system takeover.
CVE-2026-18107 Privilege Escalation in privilege-escalation (CVE-2026-18107)
vulnerability in privilege-escalation (CVE-2026-18107). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →