Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-69149 |
|
Cross-Site Scripting (XSS) in @angular/platform-server (CVE-2026-69149)
cross-site scripting in @angular/platform-server (CVE-2026-69149). Risk of unauthorized operations or information disclosure. Exploitable via ``domino``.
|
| CVE-2026-68945 |
|
Vulnerability in @angular/common (CVE-2026-68945)
vulnerability in @angular/common (CVE-2026-68945). Risk of unauthorized operations or information disclosure. Exploitable via ``HttpTransferCache``.
|
| CVE-2026-69096 |
|
OS Command Injection in CVE-2026-69096 (CVE-2026-69096)
OS command injection in CVE-2026-69096 (CVE-2026-69096). Successful exploitation can lead to full system takeover.
|
| CVE-2026-69092 |
|
Cross-Site Scripting (XSS) in CVE-2026-69092 (CVE-2026-69092)
cross-site scripting in CVE-2026-69092 (CVE-2026-69092). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-69075 |
|
Cross-Site Scripting (XSS) in vue (CVE-2026-69075)
cross-site scripting in vue (CVE-2026-69075). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15931 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15931)
cross-site scripting in wordpress (CVE-2026-15931). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67356 |
|
Privilege Escalation in CVE-2026-67356 (CVE-2026-67356)
vulnerability in CVE-2026-67356 (CVE-2026-67356). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68578 |
|
Vulnerability in CVE-2026-68578 (CVE-2026-68578)
vulnerability in CVE-2026-68578 (CVE-2026-68578). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15385 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15385)
cross-site scripting in wordpress (CVE-2026-15385). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16273 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16273)
cross-site scripting in wordpress (CVE-2026-16273). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16063 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16063)
cross-site scripting in wordpress (CVE-2026-16063). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14817 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14817)
cross-site scripting in wordpress (CVE-2026-14817). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14841 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14841)
cross-site scripting in wordpress (CVE-2026-14841). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8457 |
|
Vulnerability in wordpress (CVE-2026-8457)
vulnerability in wordpress (CVE-2026-8457). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67341 |
|
Authorization Flaw in CVE-2026-67341 (CVE-2026-67341)
vulnerability in CVE-2026-67341 (CVE-2026-67341). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67352 |
|
Cross-Site Scripting (XSS) in CVE-2026-67352 (CVE-2026-67352)
cross-site scripting in CVE-2026-67352 (CVE-2026-67352). Confidential information can be exposed externally.
|
| CVE-2026-67340 |
|
Code Injection in CVE-2026-67340 (CVE-2026-67340)
code injection in CVE-2026-67340 (CVE-2026-67340). Successful exploitation can lead to full system takeover.
|
| CVE-2026-67338 |
|
Vulnerability in CVE-2026-67338 (CVE-2026-67338)
vulnerability in CVE-2026-67338 (CVE-2026-67338). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67333 |
|
Cross-Site Scripting (XSS) in CVE-2026-67333 (CVE-2026-67333)
cross-site scripting in CVE-2026-67333 (CVE-2026-67333). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67320 |
|
Information Disclosure in CVE-2026-67320 (CVE-2026-67320)
vulnerability in CVE-2026-67320 (CVE-2026-67320). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `0.33.0` or later.
|
| CVE-2026-67321 |
|
Vulnerability in dos (CVE-2026-67321)
vulnerability in dos (CVE-2026-67321). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67319 |
|
Vulnerability in CVE-2026-67319 (CVE-2026-67319)
vulnerability in CVE-2026-67319 (CVE-2026-67319). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67313 |
|
Vulnerability in CVE-2026-67313 (CVE-2026-67313)
vulnerability in CVE-2026-67313 (CVE-2026-67313). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67314 |
|
Vulnerability in axios (CVE-2026-67314)
vulnerability in axios (CVE-2026-67314). Risk of unauthorized operations or information disclosure. Exploitable via ``auth``. Mitigation: upgrade to `1.15.2` or later.
|
| CVE-2026-67315 |
|
Vulnerability in c (CVE-2026-67315)
vulnerability in c (CVE-2026-67315). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67312 |
|
Vulnerability in dos (CVE-2026-67312)
vulnerability in dos (CVE-2026-67312). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67316 |
|
Vulnerability in CVE-2026-67316 (CVE-2026-67316)
vulnerability in CVE-2026-67316 (CVE-2026-67316). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67318 |
|
Vulnerability in CVE-2026-67318 (CVE-2026-67318)
vulnerability in CVE-2026-67318 (CVE-2026-67318). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71404 |
|
Cross-Site Scripting (XSS) in CVE-2025-71404 (CVE-2025-71404)
cross-site scripting in CVE-2025-71404 (CVE-2025-71404). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18059 |
|
Information Disclosure in wordpress (CVE-2026-18059)
vulnerability in wordpress (CVE-2026-18059). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17580 |
|
Vulnerability in wordpress (CVE-2026-17580)
vulnerability in wordpress (CVE-2026-17580). Confidential information can be exposed externally.
|
| CVE-2026-15964 |
|
Vulnerability in wordpress (CVE-2026-15964)
vulnerability in wordpress (CVE-2026-15964). Successful exploitation can lead to full system takeover. Exploitable via ``wp_ajax_nopriv_ssoprocess_ajax``.
|
| CVE-2026-2916 |
|
Information Disclosure in wordpress (CVE-2026-2916)
vulnerability in wordpress (CVE-2026-2916). Risk of unauthorized operations or information disclosure. Exploitable via ``JkitDashboardOption``.
|
| CVE-2026-15262 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15262)
cross-site scripting in wordpress (CVE-2026-15262). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15234 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15234)
cross-site scripting in wordpress (CVE-2026-15234). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14292 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14292)
cross-site scripting in wordpress (CVE-2026-14292). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10827 |
|
Vulnerability in wordpress (CVE-2026-10827)
vulnerability in wordpress (CVE-2026-10827). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12696 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12696)
cross-site scripting in wordpress (CVE-2026-12696). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-15669 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2025-15669)
cross-site scripting in wordpress (CVE-2025-15669). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52232 |
|
Cross-Site Scripting (XSS) in CVE-2026-52232 (CVE-2026-52232)
cross-site scripting in CVE-2026-52232 (CVE-2026-52232). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62324 |
|
Cross-Site Scripting (XSS) in jodit (CVE-2026-62324)
cross-site scripting in jodit (CVE-2026-62324). Risk of unauthorized operations or information disclosure. Exploitable via ``sanitizeHTMLElement``. Mitigation: upgrade to `4.12.31` or later.
|
| CVE-2026-55100 |
|
Vulnerability in hashi-vault-js (CVE-2026-55100)
vulnerability in hashi-vault-js (CVE-2026-55100). Risk of unauthorized operations or information disclosure. Exploitable via ``encodeURIComponent``. Mitigation: upgrade to `0.5.2` or later.
|
| CVE-2026-54729 |
|
SSRF (Server-Side Request Forgery) in dssrf (CVE-2026-54729)
SSRF in dssrf (CVE-2026-54729). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.5` or later.
|
| CVE-2026-59232 |
|
Cross-Site Scripting (XSS) in CVE-2026-59232 (CVE-2026-59232)
cross-site scripting in CVE-2026-59232 (CVE-2026-59232). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46594 |
|
Cross-Site Scripting (XSS) in CVE-2026-46594 (CVE-2026-46594)
cross-site scripting in CVE-2026-46594 (CVE-2026-46594). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14931 |
|
Information Disclosure in wordpress (CVE-2026-14931)
vulnerability in wordpress (CVE-2026-14931). Confidential information can be exposed externally.
|
| CVE-2026-15209 |
|
Vulnerability in wordpress (CVE-2026-15209)
vulnerability in wordpress (CVE-2026-15209). Confidential information can be exposed externally.
|
| CVE-2026-14928 |
|
Information Disclosure in wordpress (CVE-2026-14928)
vulnerability in wordpress (CVE-2026-14928). Confidential information can be exposed externally.
|
| CVE-2026-14929 |
|
Authorization Flaw in wordpress (CVE-2026-14929)
vulnerability in wordpress (CVE-2026-14929). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14930 |
|
Vulnerability in wordpress (CVE-2026-14930)
vulnerability in wordpress (CVE-2026-14930). Confidential information can be exposed externally.
|