Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: javascript Clear
ID Title
CVE-2026-69149 Cross-Site Scripting (XSS) in @angular/platform-server (CVE-2026-69149)
cross-site scripting in @angular/platform-server (CVE-2026-69149). Risk of unauthorized operations or information disclosure. Exploitable via ``domino``.
CVE-2026-68945 Vulnerability in @angular/common (CVE-2026-68945)
vulnerability in @angular/common (CVE-2026-68945). Risk of unauthorized operations or information disclosure. Exploitable via ``HttpTransferCache``.
CVE-2026-69096 OS Command Injection in CVE-2026-69096 (CVE-2026-69096)
OS command injection in CVE-2026-69096 (CVE-2026-69096). Successful exploitation can lead to full system takeover.
CVE-2026-69092 Cross-Site Scripting (XSS) in CVE-2026-69092 (CVE-2026-69092)
cross-site scripting in CVE-2026-69092 (CVE-2026-69092). Risk of unauthorized operations or information disclosure.
CVE-2026-69075 Cross-Site Scripting (XSS) in vue (CVE-2026-69075)
cross-site scripting in vue (CVE-2026-69075). Risk of unauthorized operations or information disclosure.
CVE-2026-15931 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15931)
cross-site scripting in wordpress (CVE-2026-15931). Risk of unauthorized operations or information disclosure.
CVE-2026-67356 Privilege Escalation in CVE-2026-67356 (CVE-2026-67356)
vulnerability in CVE-2026-67356 (CVE-2026-67356). Successful exploitation can lead to full system takeover.
CVE-2026-68578 Vulnerability in CVE-2026-68578 (CVE-2026-68578)
vulnerability in CVE-2026-68578 (CVE-2026-68578). Successful exploitation can lead to full system takeover.
CVE-2026-15385 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15385)
cross-site scripting in wordpress (CVE-2026-15385). Risk of unauthorized operations or information disclosure.
CVE-2026-16273 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16273)
cross-site scripting in wordpress (CVE-2026-16273). Risk of unauthorized operations or information disclosure.
CVE-2026-16063 Cross-Site Scripting (XSS) in wordpress (CVE-2026-16063)
cross-site scripting in wordpress (CVE-2026-16063). Risk of unauthorized operations or information disclosure.
CVE-2026-14817 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14817)
cross-site scripting in wordpress (CVE-2026-14817). Successful exploitation can lead to full system takeover.
CVE-2026-14841 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14841)
cross-site scripting in wordpress (CVE-2026-14841). Risk of unauthorized operations or information disclosure.
CVE-2026-8457 Vulnerability in wordpress (CVE-2026-8457)
vulnerability in wordpress (CVE-2026-8457). Successful exploitation can lead to full system takeover.
CVE-2026-67341 Authorization Flaw in CVE-2026-67341 (CVE-2026-67341)
vulnerability in CVE-2026-67341 (CVE-2026-67341). Successful exploitation can lead to full system takeover.
CVE-2026-67352 Cross-Site Scripting (XSS) in CVE-2026-67352 (CVE-2026-67352)
cross-site scripting in CVE-2026-67352 (CVE-2026-67352). Confidential information can be exposed externally.
CVE-2026-67340 Code Injection in CVE-2026-67340 (CVE-2026-67340)
code injection in CVE-2026-67340 (CVE-2026-67340). Successful exploitation can lead to full system takeover.
CVE-2026-67338 Vulnerability in CVE-2026-67338 (CVE-2026-67338)
vulnerability in CVE-2026-67338 (CVE-2026-67338). Risk of unauthorized operations or information disclosure.
CVE-2026-67333 Cross-Site Scripting (XSS) in CVE-2026-67333 (CVE-2026-67333)
cross-site scripting in CVE-2026-67333 (CVE-2026-67333). Risk of unauthorized operations or information disclosure.
CVE-2026-67320 Information Disclosure in CVE-2026-67320 (CVE-2026-67320)
vulnerability in CVE-2026-67320 (CVE-2026-67320). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `0.33.0` or later.
CVE-2026-67321 Vulnerability in dos (CVE-2026-67321)
vulnerability in dos (CVE-2026-67321). Risk of unauthorized operations or information disclosure.
CVE-2026-67319 Vulnerability in CVE-2026-67319 (CVE-2026-67319)
vulnerability in CVE-2026-67319 (CVE-2026-67319). Risk of unauthorized operations or information disclosure.
CVE-2026-67313 Vulnerability in CVE-2026-67313 (CVE-2026-67313)
vulnerability in CVE-2026-67313 (CVE-2026-67313). Risk of unauthorized operations or information disclosure.
CVE-2026-67314 Vulnerability in axios (CVE-2026-67314)
vulnerability in axios (CVE-2026-67314). Risk of unauthorized operations or information disclosure. Exploitable via ``auth``. Mitigation: upgrade to `1.15.2` or later.
CVE-2026-67315 Vulnerability in c (CVE-2026-67315)
vulnerability in c (CVE-2026-67315). Risk of unauthorized operations or information disclosure.
CVE-2026-67312 Vulnerability in dos (CVE-2026-67312)
vulnerability in dos (CVE-2026-67312). Risk of unauthorized operations or information disclosure.
CVE-2026-67316 Vulnerability in CVE-2026-67316 (CVE-2026-67316)
vulnerability in CVE-2026-67316 (CVE-2026-67316). Risk of unauthorized operations or information disclosure.
CVE-2026-67318 Vulnerability in CVE-2026-67318 (CVE-2026-67318)
vulnerability in CVE-2026-67318 (CVE-2026-67318). Risk of unauthorized operations or information disclosure.
CVE-2025-71404 Cross-Site Scripting (XSS) in CVE-2025-71404 (CVE-2025-71404)
cross-site scripting in CVE-2025-71404 (CVE-2025-71404). Risk of unauthorized operations or information disclosure.
CVE-2026-18059 Information Disclosure in wordpress (CVE-2026-18059)
vulnerability in wordpress (CVE-2026-18059). Risk of unauthorized operations or information disclosure.
CVE-2026-17580 Vulnerability in wordpress (CVE-2026-17580)
vulnerability in wordpress (CVE-2026-17580). Confidential information can be exposed externally.
CVE-2026-15964 Vulnerability in wordpress (CVE-2026-15964)
vulnerability in wordpress (CVE-2026-15964). Successful exploitation can lead to full system takeover. Exploitable via ``wp_ajax_nopriv_ssoprocess_ajax``.
CVE-2026-2916 Information Disclosure in wordpress (CVE-2026-2916)
vulnerability in wordpress (CVE-2026-2916). Risk of unauthorized operations or information disclosure. Exploitable via ``JkitDashboardOption``.
CVE-2026-15262 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15262)
cross-site scripting in wordpress (CVE-2026-15262). Risk of unauthorized operations or information disclosure.
CVE-2026-15234 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15234)
cross-site scripting in wordpress (CVE-2026-15234). Risk of unauthorized operations or information disclosure.
CVE-2026-14292 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14292)
cross-site scripting in wordpress (CVE-2026-14292). Risk of unauthorized operations or information disclosure.
CVE-2026-10827 Vulnerability in wordpress (CVE-2026-10827)
vulnerability in wordpress (CVE-2026-10827). Risk of unauthorized operations or information disclosure.
CVE-2026-12696 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12696)
cross-site scripting in wordpress (CVE-2026-12696). Risk of unauthorized operations or information disclosure.
CVE-2025-15669 Cross-Site Scripting (XSS) in wordpress (CVE-2025-15669)
cross-site scripting in wordpress (CVE-2025-15669). Risk of unauthorized operations or information disclosure.
CVE-2026-52232 Cross-Site Scripting (XSS) in CVE-2026-52232 (CVE-2026-52232)
cross-site scripting in CVE-2026-52232 (CVE-2026-52232). Risk of unauthorized operations or information disclosure.
CVE-2026-62324 Cross-Site Scripting (XSS) in jodit (CVE-2026-62324)
cross-site scripting in jodit (CVE-2026-62324). Risk of unauthorized operations or information disclosure. Exploitable via ``sanitizeHTMLElement``. Mitigation: upgrade to `4.12.31` or later.
CVE-2026-55100 Vulnerability in hashi-vault-js (CVE-2026-55100)
vulnerability in hashi-vault-js (CVE-2026-55100). Risk of unauthorized operations or information disclosure. Exploitable via ``encodeURIComponent``. Mitigation: upgrade to `0.5.2` or later.
CVE-2026-54729 SSRF (Server-Side Request Forgery) in dssrf (CVE-2026-54729)
SSRF in dssrf (CVE-2026-54729). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.5` or later.
CVE-2026-59232 Cross-Site Scripting (XSS) in CVE-2026-59232 (CVE-2026-59232)
cross-site scripting in CVE-2026-59232 (CVE-2026-59232). Risk of unauthorized operations or information disclosure.
CVE-2026-46594 Cross-Site Scripting (XSS) in CVE-2026-46594 (CVE-2026-46594)
cross-site scripting in CVE-2026-46594 (CVE-2026-46594). Risk of unauthorized operations or information disclosure.
CVE-2026-14931 Information Disclosure in wordpress (CVE-2026-14931)
vulnerability in wordpress (CVE-2026-14931). Confidential information can be exposed externally.
CVE-2026-15209 Vulnerability in wordpress (CVE-2026-15209)
vulnerability in wordpress (CVE-2026-15209). Confidential information can be exposed externally.
CVE-2026-14928 Information Disclosure in wordpress (CVE-2026-14928)
vulnerability in wordpress (CVE-2026-14928). Confidential information can be exposed externally.
CVE-2026-14929 Authorization Flaw in wordpress (CVE-2026-14929)
vulnerability in wordpress (CVE-2026-14929). Risk of unauthorized operations or information disclosure.
CVE-2026-14930 Vulnerability in wordpress (CVE-2026-14930)
vulnerability in wordpress (CVE-2026-14930). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →