Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-16486 |
|
Cross-Site Scripting (XSS) in CVE-2026-16486 (CVE-2026-16486)
cross-site scripting in CVE-2026-16486 (CVE-2026-16486). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16485 |
|
Cross-Site Scripting (XSS) in CVE-2026-16485 (CVE-2026-16485)
cross-site scripting in CVE-2026-16485 (CVE-2026-16485). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16484 |
|
Vulnerability in sqli (CVE-2026-16484)
vulnerability in sqli (CVE-2026-16484). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63092 |
|
Vulnerability in CVE-2026-63092 (CVE-2026-63092)
vulnerability in CVE-2026-63092 (CVE-2026-63092). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63358 |
|
Vulnerability in filegator (CVE-2026-63358)
vulnerability in filegator (CVE-2026-63358). Confidential information can be exposed externally.
|
| CVE-2026-47685 |
|
Cross-Site Scripting (XSS) in fogproject (CVE-2026-47685)
cross-site scripting in fogproject (CVE-2026-47685). Confidential information can be exposed externally.
|
| CVE-2026-47687 |
|
Cross-Site Scripting (XSS) in fogproject (CVE-2026-47687)
cross-site scripting in fogproject (CVE-2026-47687). Confidential information can be exposed externally. Exploitable via ``fogpage.class.php``.
|
| CVE-2026-47689 |
|
Cross-Site Scripting (XSS) in fogproject (CVE-2026-47689)
cross-site scripting in fogproject (CVE-2026-47689). Risk of unauthorized operations or information disclosure. Exploitable via ``fogpage.class.php``.
|
| CVE-2026-65049 |
|
Authorization Flaw in wordpress (CVE-2026-65049)
vulnerability in wordpress (CVE-2026-65049). Data can be tampered with by attackers.
|
| CVE-2026-16447 |
|
Vulnerability in CVE-2026-16447 (CVE-2026-16447)
vulnerability in CVE-2026-16447 (CVE-2026-16447). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65008 |
|
Code Injection in CVE-2026-65008 (CVE-2026-65008)
code injection in CVE-2026-65008 (CVE-2026-65008). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.0.7` or later.
|
| CVE-2026-16334 |
|
Vulnerability in sqli (CVE-2026-16334)
vulnerability in sqli (CVE-2026-16334). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16332 |
|
Vulnerability in CVE-2026-16332 (CVE-2026-16332)
vulnerability in CVE-2026-16332 (CVE-2026-16332). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16329 |
|
Vulnerability in CVE-2026-16329 (CVE-2026-16329)
vulnerability in CVE-2026-16329 (CVE-2026-16329). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16331 |
|
Vulnerability in CVE-2026-16331 (CVE-2026-16331)
vulnerability in CVE-2026-16331 (CVE-2026-16331). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16330 |
|
Vulnerability in CVE-2026-16330 (CVE-2026-16330)
vulnerability in CVE-2026-16330 (CVE-2026-16330). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16327 |
|
Vulnerability in CVE-2026-16327 (CVE-2026-16327)
vulnerability in CVE-2026-16327 (CVE-2026-16327). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64625 |
|
OS Command Injection in c (CVE-2026-64625)
OS command injection in c (CVE-2026-64625). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53595 |
|
Vulnerability in laravel (CVE-2026-53595)
vulnerability in laravel (CVE-2026-53595). Confidential information can be exposed externally. Exploitable via `POST /user-setup/{hash}/{invite_sent_at}`.
|
| CVE-2026-53594 |
|
Path Traversal in laravel (CVE-2026-53594)
path traversal in laravel (CVE-2026-53594). Confidential information can be exposed externally.
|
| CVE-2026-53596 |
|
Vulnerability in laravel (CVE-2026-53596)
vulnerability in laravel (CVE-2026-53596). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53592 |
|
Vulnerability in laravel (CVE-2026-53592)
vulnerability in laravel (CVE-2026-53592). Risk of unauthorized operations or information disclosure. Exploitable via ``getQueryParam``.
|
| CVE-2026-53591 |
|
Authentication Bypass in laravel (CVE-2026-53591)
authentication bypass in laravel (CVE-2026-53591). Data can be tampered with by attackers. Exploitable via ``last_reply_from``.
|
| CVE-2026-53593 |
|
Unrestricted File Upload in laravel (CVE-2026-53593)
vulnerability in laravel (CVE-2026-53593). Successful exploitation can lead to full system takeover. Exploitable via `POST /uploads/upload`.
|
| CVE-2026-60026 |
|
Code Injection in CVE-2026-60026 (CVE-2026-60026)
code injection in CVE-2026-60026 (CVE-2026-60026). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48812 |
|
Authentication Bypass in laravel (CVE-2026-48812)
authentication bypass in laravel (CVE-2026-48812). Confidential information can be exposed externally. Exploitable via ``token_type``.
|
| CVE-2026-45295 |
|
Vulnerability in laravel (CVE-2026-45295)
vulnerability in laravel (CVE-2026-45295). Risk of unauthorized operations or information disclosure. Exploitable via `GET /thread/read/{conversation_id}/{thread_id}`.
|
| CVE-2026-34239 |
|
Vulnerability in CVE-2026-34239 (CVE-2026-34239)
vulnerability in CVE-2026-34239 (CVE-2026-34239). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50743 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-50743)
vulnerability in csrf (CVE-2026-50743). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35048 |
|
Vulnerability in CVE-2026-35048 (CVE-2026-35048)
vulnerability in CVE-2026-35048 (CVE-2026-35048). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51027 |
|
Information Disclosure in CVE-2026-51027 (CVE-2026-51027)
vulnerability in CVE-2026-51027 (CVE-2026-51027). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57311 |
|
Unrestricted File Upload in CVE-2026-57311 (CVE-2026-57311)
vulnerability in CVE-2026-57311 (CVE-2026-57311). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16244 |
|
Vulnerability in sqli (CVE-2026-16244)
vulnerability in sqli (CVE-2026-16244). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16229 |
|
Cross-Site Scripting (XSS) in CVE-2026-16229 (CVE-2026-16229)
cross-site scripting in CVE-2026-16229 (CVE-2026-16229). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16228 |
|
Vulnerability in sqli (CVE-2026-16228)
vulnerability in sqli (CVE-2026-16228). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16227 |
|
Vulnerability in sqli (CVE-2026-16227)
vulnerability in sqli (CVE-2026-16227). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16226 |
|
Vulnerability in CVE-2026-16226 (CVE-2026-16226)
vulnerability in CVE-2026-16226 (CVE-2026-16226). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16220 |
|
Cross-Site Scripting (XSS) in CVE-2026-16220 (CVE-2026-16220)
cross-site scripting in CVE-2026-16220 (CVE-2026-16220). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16219 |
|
Path Traversal in path-traversal (CVE-2026-16219)
path traversal in path-traversal (CVE-2026-16219). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16205 |
|
Cross-Site Scripting (XSS) in CVE-2026-16205 (CVE-2026-16205)
cross-site scripting in CVE-2026-16205 (CVE-2026-16205). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16203 |
|
Cross-Site Scripting (XSS) in CVE-2026-16203 (CVE-2026-16203)
cross-site scripting in CVE-2026-16203 (CVE-2026-16203). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16202 |
|
Cross-Site Scripting (XSS) in CVE-2026-16202 (CVE-2026-16202)
cross-site scripting in CVE-2026-16202 (CVE-2026-16202). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16156 |
|
Cross-Site Scripting (XSS) in CVE-2026-16156 (CVE-2026-16156)
cross-site scripting in CVE-2026-16156 (CVE-2026-16156). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57857 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-57857)
cross-site scripting in wordpress (CVE-2026-57857). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16155 |
|
Cross-Site Scripting (XSS) in CVE-2026-16155 (CVE-2026-16155)
cross-site scripting in CVE-2026-16155 (CVE-2026-16155). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16154 |
|
Vulnerability in sqli (CVE-2026-16154)
vulnerability in sqli (CVE-2026-16154). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16152 |
|
Vulnerability in sqli (CVE-2026-16152)
vulnerability in sqli (CVE-2026-16152). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16131 |
|
Vulnerability in sqli (CVE-2026-16131)
vulnerability in sqli (CVE-2026-16131). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63030 KEV |
|
WordPress Core — WordPress Core Interpretation Conflict Vulnerability
WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.
|
| CVE-2026-36669 |
|
Unrestricted File Upload in CVE-2026-36669 (CVE-2026-36669)
vulnerability in CVE-2026-36669 (CVE-2026-36669). Successful exploitation can lead to full system takeover.
|