Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-63231 |
|
SQL Injection in sqli (CVE-2026-63231)
SQL injection in sqli (CVE-2026-63231). Confidential information can be exposed externally.
|
| CVE-2026-14300 |
|
Authentication Bypass in wordpress (CVE-2026-14300)
authentication bypass in wordpress (CVE-2026-14300). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14234 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14234)
cross-site scripting in wordpress (CVE-2026-14234). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13690 |
|
Authentication Bypass in wordpress (CVE-2026-13690)
authentication bypass in wordpress (CVE-2026-13690). Confidential information can be exposed externally.
|
| CVE-2026-11974 |
|
Path Traversal in wordpress (CVE-2026-11974)
path traversal in wordpress (CVE-2026-11974). Confidential information can be exposed externally.
|
| CVE-2026-12476 |
|
Unrestricted File Upload in wordpress (CVE-2026-12476)
vulnerability in wordpress (CVE-2026-12476). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12144 |
|
Privilege Escalation in wordpress (CVE-2026-12144)
vulnerability in wordpress (CVE-2026-12144). Successful exploitation can lead to full system takeover. Exploitable via ``user_role_set``.
|
| CVE-2026-54650 |
|
Path Traversal in github.com/bablilayoub/openhole (CVE-2026-54650)
path traversal in github.com/bablilayoub/openhole (CVE-2026-54650). Confidential information can be exposed externally. Exploitable via ``r.URL.Path``. Mitigation: upgrade to `0.1.2` or later.
|
| CVE-2026-54638 |
|
Vulnerability in github.com/gotd/td (CVE-2026-54638)
vulnerability in github.com/gotd/td (CVE-2026-54638). Risk of unauthorized operations or information disclosure. Exploitable via ``dataLen``. Mitigation: upgrade to `0.145.1` or later.
|
| CVE-2026-54719 |
|
Vulnerability in github.com/patrickhener/goshs (CVE-2026-54719)
vulnerability in github.com/patrickhener/goshs (CVE-2026-54719). Confidential information can be exposed externally. Exploitable via `GET /protected/secret.txt`. Mitigation: upgrade to `2.1.1` or later.
|
| CVE-2026-54654 |
|
Code Injection in datamodel-code-generator (CVE-2026-54654)
code injection in datamodel-code-generator (CVE-2026-54654). Successful exploitation can lead to full system takeover. Exploitable via ``comment``. Mitigation: upgrade to `0.60.2` or later.
|
| CVE-2026-55389 |
|
Path Traversal in datamodel-code-generator (CVE-2026-55389)
path traversal in datamodel-code-generator (CVE-2026-55389). Confidential information can be exposed externally. Exploitable via ``_get_ref_body``. Mitigation: upgrade to `0.62.0` or later.
|
| CVE-2026-54653 |
|
Code Injection in datamodel-code-generator (CVE-2026-54653)
code injection in datamodel-code-generator (CVE-2026-54653). Successful exploitation can lead to full system takeover. Exploitable via ``import``. Mitigation: upgrade to `0.60.2` or later.
|
| CVE-2026-55391 |
|
Vulnerability in datamodel-code-generator (CVE-2026-55391)
vulnerability in datamodel-code-generator (CVE-2026-55391). Confidential information can be exposed externally. Exploitable via ``httpx``. Mitigation: upgrade to `0.63.0` or later.
|
| CVE-2026-54656 |
|
Code Injection in datamodel-code-generator (CVE-2026-54656)
code injection in datamodel-code-generator (CVE-2026-54656). Successful exploitation can lead to full system takeover. Exploitable via ``validators``. Mitigation: upgrade to `0.60.2` or later.
|
| CVE-2026-54690 |
|
SSRF (Server-Side Request Forgery) in datamodel-code-generator (CVE-2026-54690)
SSRF in datamodel-code-generator (CVE-2026-54690). Confidential information can be exposed externally. Exploitable via ``None``. Mitigation: upgrade to `0.61.0` or later.
|
| CVE-2026-55415 |
|
Code Injection in datamodel-code-generator (CVE-2026-55415)
code injection in datamodel-code-generator (CVE-2026-55415). Successful exploitation can lead to full system takeover. Exploitable via ``customTypePath``. Mitigation: upgrade to `0.63.0` or later.
|
| CVE-2026-54621 |
|
Code Injection in datamodel-code-generator (CVE-2026-54621)
code injection in datamodel-code-generator (CVE-2026-54621). Successful exploitation can lead to full system takeover. Exploitable via ``import``. Mitigation: upgrade to `0.60.1` or later.
|
| CVE-2026-54655 |
|
Code Injection in datamodel-code-generator (CVE-2026-54655)
code injection in datamodel-code-generator (CVE-2026-54655). Successful exploitation can lead to full system takeover. Exploitable via ``_get_python_type_override``. Mitigation: upgrade to `0.60.2` or later.
|
| CVE-2026-15057 |
|
Out-of-Bounds Write in dos (CVE-2026-15057)
out-of-bounds write in dos (CVE-2026-15057). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15280 |
|
Path Traversal in ibm (CVE-2026-15280)
path traversal in ibm (CVE-2026-15280). Confidential information can be exposed externally.
|
| CVE-2026-14996 |
|
Vulnerability in ibm (CVE-2026-14996)
vulnerability in ibm (CVE-2026-14996). Confidential information can be exposed externally.
|
| CVE-2026-15325 |
|
Vulnerability in ibm (CVE-2026-15325)
vulnerability in ibm (CVE-2026-15325). Confidential information can be exposed externally.
|
| CVE-2026-15064 |
|
Vulnerability in ibm (CVE-2026-15064)
vulnerability in ibm (CVE-2026-15064). Confidential information can be exposed externally.
|
| CVE-2026-14981 |
|
Vulnerability in dos (CVE-2026-14981)
vulnerability in dos (CVE-2026-14981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15328 |
|
Vulnerability in ibm (CVE-2026-15328)
vulnerability in ibm (CVE-2026-15328). Confidential information can be exposed externally.
|
| CVE-2026-14974 |
|
Unsafe Deserialization in deserialization (CVE-2026-14974)
vulnerability in deserialization (CVE-2026-14974). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14976 |
|
Vulnerability in ibm (CVE-2026-14976)
vulnerability in ibm (CVE-2026-14976). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14893 |
|
Vulnerability in CVE-2026-14893 (CVE-2026-14893)
vulnerability in CVE-2026-14893 (CVE-2026-14893). Data can be tampered with by attackers.
|
| CVE-2026-14528 |
|
Vulnerability in ibm (CVE-2026-14528)
vulnerability in ibm (CVE-2026-14528). Confidential information can be exposed externally.
|
| CVE-2026-13463 |
|
Vulnerability in ibm (CVE-2026-13463)
vulnerability in ibm (CVE-2026-13463). Confidential information can be exposed externally.
|
| CVE-2026-13442 |
|
Vulnerability in langflow (CVE-2026-13442)
vulnerability in langflow (CVE-2026-13442). Confidential information can be exposed externally.
|
| CVE-2026-54691 |
|
SSRF (Server-Side Request Forgery) in datamodel-code-generator (CVE-2026-54691)
SSRF in datamodel-code-generator (CVE-2026-54691). Confidential information can be exposed externally. Exploitable via ``http.get_body``. Mitigation: upgrade to `0.61.0` or later.
|
| CVE-2026-55390 |
|
Path Traversal in datamodel-code-generator (CVE-2026-55390)
path traversal in datamodel-code-generator (CVE-2026-55390). Confidential information can be exposed externally. Exploitable via ``schemaLocation``. Mitigation: upgrade to `0.62.0` or later.
|
| CVE-2026-57510 |
|
Vulnerability in CVE-2026-57510 (CVE-2026-57510)
vulnerability in CVE-2026-57510 (CVE-2026-57510). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16192 |
|
Vulnerability in dos (CVE-2026-16192)
vulnerability in dos (CVE-2026-16192). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16184 |
|
Vulnerability in ibm (CVE-2026-16184)
vulnerability in ibm (CVE-2026-16184). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7769 |
|
SQL Injection in sqli (CVE-2026-7769)
SQL injection in sqli (CVE-2026-7769). Confidential information can be exposed externally.
|
| CVE-2026-66745 |
|
Code Injection in CVE-2026-66745 (CVE-2026-66745)
code injection in CVE-2026-66745 (CVE-2026-66745). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50737 |
|
Vulnerability in enterprisedb (CVE-2026-50737)
vulnerability in enterprisedb (CVE-2026-50737). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50736 |
|
SQL Injection in enterprisedb (CVE-2026-50736)
SQL injection in enterprisedb (CVE-2026-50736). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48396 |
|
Authorization Flaw in adobe (CVE-2026-48396)
vulnerability in adobe (CVE-2026-48396). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48395 |
|
Vulnerability in adobe (CVE-2026-48395)
vulnerability in adobe (CVE-2026-48395). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48394 |
|
Out-of-Bounds Write in adobe (CVE-2026-48394)
out-of-bounds write in adobe (CVE-2026-48394). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48393 |
|
Out-of-Bounds Write in adobe (CVE-2026-48393)
out-of-bounds write in adobe (CVE-2026-48393). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48392 |
|
Out-of-Bounds Write in adobe (CVE-2026-48392)
out-of-bounds write in adobe (CVE-2026-48392). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48391 |
|
Vulnerability in adobe (CVE-2026-48391)
vulnerability in adobe (CVE-2026-48391). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48390 |
|
Authorization Flaw in privilege-escalation (CVE-2026-48390)
vulnerability in privilege-escalation (CVE-2026-48390). Confidential information can be exposed externally.
|
| CVE-2026-48374 |
|
Path Traversal in path-traversal (CVE-2026-48374)
path traversal in path-traversal (CVE-2026-48374). Successful exploitation can lead to full system takeover.
|
| CVE-2026-18107 |
|
Privilege Escalation in privilege-escalation (CVE-2026-18107)
vulnerability in privilege-escalation (CVE-2026-18107). Successful exploitation can lead to full system takeover.
|