Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-63978 |
|
Vulnerability in CVE-2026-63978 (CVE-2026-63978)
vulnerability in CVE-2026-63978 (CVE-2026-63978). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63939 |
|
Vulnerability in CVE-2026-63939 (CVE-2026-63939)
vulnerability in CVE-2026-63939 (CVE-2026-63939). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63938 |
|
Vulnerability in CVE-2026-63938 (CVE-2026-63938)
vulnerability in CVE-2026-63938 (CVE-2026-63938). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63940 |
|
Vulnerability in CVE-2026-63940 (CVE-2026-63940)
vulnerability in CVE-2026-63940 (CVE-2026-63940). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63922 |
|
Vulnerability in CVE-2026-63922 (CVE-2026-63922)
vulnerability in CVE-2026-63922 (CVE-2026-63922). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63924 |
|
Vulnerability in CVE-2026-63924 (CVE-2026-63924)
vulnerability in CVE-2026-63924 (CVE-2026-63924). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63912 |
|
Vulnerability in CVE-2026-63912 (CVE-2026-63912)
vulnerability in CVE-2026-63912 (CVE-2026-63912). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63888 |
|
Vulnerability in CVE-2026-63888 (CVE-2026-63888)
vulnerability in CVE-2026-63888 (CVE-2026-63888). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63886 |
|
Vulnerability in CVE-2026-63886 (CVE-2026-63886)
vulnerability in CVE-2026-63886 (CVE-2026-63886). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63887 |
|
Vulnerability in CVE-2026-63887 (CVE-2026-63887)
vulnerability in CVE-2026-63887 (CVE-2026-63887). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63857 |
|
Vulnerability in CVE-2026-63857 (CVE-2026-63857)
vulnerability in CVE-2026-63857 (CVE-2026-63857). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63825 |
|
Vulnerability in CVE-2026-63825 (CVE-2026-63825)
vulnerability in CVE-2026-63825 (CVE-2026-63825). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63830 |
|
Vulnerability in CVE-2026-63830 (CVE-2026-63830)
vulnerability in CVE-2026-63830 (CVE-2026-63830). Confidential information can be exposed externally.
|
| CVE-2026-63795 |
|
Use-After-Free in linux (CVE-2026-63795)
vulnerability in linux (CVE-2026-63795). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63808 |
|
Vulnerability in CVE-2026-63808 (CVE-2026-63808)
vulnerability in CVE-2026-63808 (CVE-2026-63808). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63800 |
|
Use-After-Free in linux (CVE-2026-63800)
vulnerability in linux (CVE-2026-63800). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53399 |
|
Vulnerability in linux (CVE-2026-53399)
vulnerability in linux (CVE-2026-53399). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53398 |
|
Vulnerability in linux (CVE-2026-53398)
vulnerability in linux (CVE-2026-53398). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53384 |
|
Use-After-Free in linux (CVE-2026-53384)
vulnerability in linux (CVE-2026-53384). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15899 |
|
Use-After-Free in Google chrome (CVE-2026-15899)
vulnerability in Google chrome (CVE-2026-15899). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16117 |
|
Vulnerability in fastify (CVE-2026-16117)
vulnerability in fastify (CVE-2026-16117). Confidential information can be exposed externally.
|
| CVE-2026-47865 |
|
Authentication Bypass in broadcom (CVE-2026-47865)
authentication bypass in broadcom (CVE-2026-47865). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `31.2.2-2p3` or later.
|
| CVE-2026-52348 |
|
cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() method of CrudOption.java.
cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() method of CrudOption.java.
|
| CVE-2026-13446 |
|
Vulnerability in langflow (CVE-2026-13446)
vulnerability in langflow (CVE-2026-13446). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8859 |
|
Path Traversal in path-traversal (CVE-2026-8859)
path traversal in path-traversal (CVE-2026-8859). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8635 |
|
Code Injection in c (CVE-2026-8635)
code injection in c (CVE-2026-8635). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8505 |
|
Vulnerability in langflow (CVE-2026-8505)
vulnerability in langflow (CVE-2026-8505). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8481 |
|
Code Injection in c (CVE-2026-8481)
code injection in c (CVE-2026-8481). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/validate/code`.
|
| CVE-2026-8476 |
|
Unsafe Deserialization in langflow (CVE-2026-8476)
vulnerability in langflow (CVE-2026-8476). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63030 KEV |
|
WordPress Core — WordPress Core Interpretation Conflict Vulnerability
WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.
|
| CVE-2026-52199 |
|
Command Injection in CVE-2026-52199 (CVE-2026-52199)
command injection in CVE-2026-52199 (CVE-2026-52199). Confidential information can be exposed externally.
|
| CVE-2026-42168 |
|
OS Command Injection in django (CVE-2026-42168)
OS command injection in django (CVE-2026-42168). Confidential information can be exposed externally.
|
| CVE-2026-36669 |
|
Unrestricted File Upload in CVE-2026-36669 (CVE-2026-36669)
vulnerability in CVE-2026-36669 (CVE-2026-36669). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15091 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-15091)
cross-site scripting in ibm (CVE-2026-15091). Confidential information can be exposed externally.
|
| CVE-2025-51677 |
|
Vulnerability in CVE-2025-51677 (CVE-2025-51677)
vulnerability in CVE-2025-51677 (CVE-2025-51677). Data can be tampered with by attackers.
|
| CVE-2026-9135 |
|
Code Injection in langflow (CVE-2026-9135)
code injection in langflow (CVE-2026-9135). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9103 |
|
Vulnerability in langflow (CVE-2026-9103)
vulnerability in langflow (CVE-2026-9103). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9198 KEV |
|
[KEV] Code Injection in Ibm langflow (CVE-2026-9198)
code injection in Ibm langflow (CVE-2026-9198). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-9202 |
|
Vulnerability in langflow (CVE-2026-9202)
vulnerability in langflow (CVE-2026-9202). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8297 |
|
SQL Injection in sqli (CVE-2026-8297)
SQL injection in sqli (CVE-2026-8297). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12694 |
|
Vulnerability in CVE-2026-12694 (CVE-2026-12694)
vulnerability in CVE-2026-12694 (CVE-2026-12694). Data can be tampered with by attackers.
|
| CVE-2026-12692 |
|
Vulnerability in CVE-2026-12692 (CVE-2026-12692)
vulnerability in CVE-2026-12692 (CVE-2026-12692). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12693 |
|
Vulnerability in CVE-2026-12693 (CVE-2026-12693)
vulnerability in CVE-2026-12693 (CVE-2026-12693). Confidential information can be exposed externally.
|
| CVE-2026-60024 |
|
Vulnerability in CVE-2026-60024 (CVE-2026-60024)
vulnerability in CVE-2026-60024 (CVE-2026-60024). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51080 |
|
XXE (XML External Entity) in proxmox (CVE-2026-51080)
vulnerability in proxmox (CVE-2026-51080). Successful exploitation can lead to full system takeover.
|
| CVE-2024-23564 |
|
Vulnerability in CVE-2024-23564 (CVE-2024-23564)
vulnerability in CVE-2024-23564 (CVE-2024-23564). Confidential information can be exposed externally.
|
| CVE-2026-9810 |
|
Privilege Escalation in wordpress (CVE-2026-9810)
vulnerability in wordpress (CVE-2026-9810). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15982 |
|
Privilege Escalation in wordpress (CVE-2026-15982)
vulnerability in wordpress (CVE-2026-15982). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62241 |
|
Vulnerability in mohibshaikh (CVE-2026-62241)
vulnerability in mohibshaikh (CVE-2026-62241). Confidential information can be exposed externally. Exploitable via `GET /api/v1/scans`.
|
| CVE-2026-14956 |
|
Privilege Escalation in wordpress (CVE-2026-14956)
vulnerability in wordpress (CVE-2026-14956). Successful exploitation can lead to full system takeover.
|