Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-18481 |
|
Cross-Site Scripting (XSS) in Amazon aws (CVE-2026-18481)
cross-site scripting in Amazon aws (CVE-2026-18481). Confidential information can be exposed externally.
|
| CVE-2026-34497 |
|
Vulnerability in johnsoncontrols (CVE-2026-34497)
vulnerability in johnsoncontrols (CVE-2026-34497). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34495 |
|
Cross-Site Scripting (XSS) in johnsoncontrols (CVE-2026-34495)
cross-site scripting in johnsoncontrols (CVE-2026-34495). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59232 |
|
Cross-Site Scripting (XSS) in CVE-2026-59232 (CVE-2026-59232)
cross-site scripting in CVE-2026-59232 (CVE-2026-59232). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46594 |
|
Cross-Site Scripting (XSS) in CVE-2026-46594 (CVE-2026-46594)
cross-site scripting in CVE-2026-46594 (CVE-2026-46594). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14922 |
|
Cross-Site Scripting (XSS) in CVE-2026-14922 (CVE-2026-14922)
cross-site scripting in CVE-2026-14922 (CVE-2026-14922). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14845 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14845)
cross-site scripting in wordpress (CVE-2026-14845). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13393 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13393)
cross-site scripting in wordpress (CVE-2026-13393). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13609 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13609)
cross-site scripting in wordpress (CVE-2026-13609). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56672 |
|
Cross-Site Scripting (XSS) in CVE-2026-56672 (CVE-2026-56672)
cross-site scripting in CVE-2026-56672 (CVE-2026-56672). Confidential information can be exposed externally. Exploitable via `GET /userdata/{file}`.
|
| CVE-2026-56670 |
|
Cross-Site Scripting (XSS) in CVE-2026-56670 (CVE-2026-56670)
cross-site scripting in CVE-2026-56670 (CVE-2026-56670). Confidential information can be exposed externally.
|
| CVE-2026-66421 |
|
Cross-Site Scripting (XSS) in CVE-2026-66421 (CVE-2026-66421)
cross-site scripting in CVE-2026-66421 (CVE-2026-66421). Confidential information can be exposed externally.
|
| CVE-2026-66418 |
|
Cross-Site Scripting (XSS) in CVE-2026-66418 (CVE-2026-66418)
cross-site scripting in CVE-2026-66418 (CVE-2026-66418). Confidential information can be exposed externally.
|
| CVE-2025-65342 |
|
Cross-Site Scripting (XSS) in CVE-2025-65342 (CVE-2025-65342)
cross-site scripting in CVE-2025-65342 (CVE-2025-65342). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-65341 |
|
Ecommerce Fruits Bazar 1.0 is vulnerable to Cross Site Scripting (XSS) in admin/edit_product.php.
Ecommerce Fruits Bazar 1.0 is vulnerable to Cross Site Scripting (XSS) in admin/edit_product.php.
|
| CVE-2025-51684 |
|
Cross-Site Scripting (XSS) in CVE-2025-51684 (CVE-2025-51684)
cross-site scripting in CVE-2025-51684 (CVE-2025-51684). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-0152 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2025-0152)
cross-site scripting in ibm (CVE-2025-0152). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48910 |
|
Vulnerability in apache (CVE-2026-48910)
vulnerability in apache (CVE-2026-48910). Confidential information can be exposed externally.
|
| CVE-2026-11707 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-11707)
cross-site scripting in ibm (CVE-2026-11707). Confidential information can be exposed externally.
|
| CVE-2025-36298 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2025-36298)
cross-site scripting in ibm (CVE-2025-36298). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-36431 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2025-36431)
cross-site scripting in ibm (CVE-2025-36431). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11383 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-11383)
cross-site scripting in ibm (CVE-2026-11383). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18360 |
|
Cross-Site Scripting (XSS) in CVE-2026-18360 (CVE-2026-18360)
cross-site scripting in CVE-2026-18360 (CVE-2026-18360). Confidential information can be exposed externally.
|
| CVE-2026-18361 |
|
Cross-Site Scripting (XSS) in CVE-2026-18361 (CVE-2026-18361)
cross-site scripting in CVE-2026-18361 (CVE-2026-18361). Confidential information can be exposed externally.
|
| CVE-2026-16969 |
|
Cross-Site Scripting (XSS) in CVE-2026-16969 (CVE-2026-16969)
cross-site scripting in CVE-2026-16969 (CVE-2026-16969). Confidential information can be exposed externally.
|
| CVE-2026-11881 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-11881)
cross-site scripting in wordpress (CVE-2026-11881). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14239 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14239)
cross-site scripting in wordpress (CVE-2026-14239). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13330 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13330)
cross-site scripting in wordpress (CVE-2026-13330). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13344 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13344)
cross-site scripting in wordpress (CVE-2026-13344). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-65337 |
|
Cross-Site Scripting (XSS) in CVE-2025-65337 (CVE-2025-65337)
cross-site scripting in CVE-2025-65337 (CVE-2025-65337). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66490 |
|
Cross-Site Scripting (XSS) in balbooa (CVE-2026-66490)
cross-site scripting in balbooa (CVE-2026-66490). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65946 |
|
Joomla Extension - rolandd.com - XSS vectors in AJAX endpoint handlers RO CSVI < 9.11.0
Joomla Extension - rolandd.com - XSS vectors in AJAX endpoint handlers RO CSVI < 9.11.0
|
| CVE-2026-8791 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-8791)
cross-site scripting in wordpress (CVE-2026-8791). Risk of unauthorized operations or information disclosure. Exploitable via ``bookingWebsiteUrl``.
|
| CVE-2026-7436 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-7436)
cross-site scripting in wordpress (CVE-2026-7436). Risk of unauthorized operations or information disclosure. Exploitable via ``wpcbm_best_seller``.
|
| CVE-2026-16655 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16655)
cross-site scripting in wordpress (CVE-2026-16655). Risk of unauthorized operations or information disclosure. Exploitable via ``password``.
|
| CVE-2026-16597 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-16597)
cross-site scripting in wordpress (CVE-2026-16597). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13425 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-13425)
cross-site scripting in wordpress (CVE-2026-13425). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18197 |
|
Cross-Site Scripting (XSS) in ylefebvre (CVE-2026-18197)
cross-site scripting in ylefebvre (CVE-2026-18197). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14234 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-14234)
cross-site scripting in wordpress (CVE-2026-14234). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12939 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12939)
cross-site scripting in wordpress (CVE-2026-12939). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17162 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-17162)
cross-site scripting in wordpress (CVE-2026-17162). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15735 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15735)
cross-site scripting in wordpress (CVE-2026-15735). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17161 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-17161)
cross-site scripting in wordpress (CVE-2026-17161). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12938 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-12938)
cross-site scripting in wordpress (CVE-2026-12938). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14515 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-14515)
cross-site scripting in ibm (CVE-2026-14515). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18084 |
|
Cross-Site Scripting (XSS) in blackberry (CVE-2026-18084)
cross-site scripting in blackberry (CVE-2026-18084). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7775 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-7775)
cross-site scripting in ibm (CVE-2026-7775). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67174 |
|
Cross-Site Scripting (XSS) in CVE-2026-67174 (CVE-2026-67174)
cross-site scripting in CVE-2026-67174 (CVE-2026-67174). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66919 |
|
Cross-Site Scripting (XSS) in CVE-2026-66919 (CVE-2026-66919)
cross-site scripting in CVE-2026-66919 (CVE-2026-66919). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65882 |
|
Cross-Site Scripting (XSS) in CVE-2026-65882 (CVE-2026-65882)
cross-site scripting in CVE-2026-65882 (CVE-2026-65882). Risk of unauthorized operations or information disclosure.
|