Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-94 Clear
ID Title
CVE-2026-54662 Vulnerability in swagger-typescript-api (CVE-2026-54662)
vulnerability in swagger-typescript-api (CVE-2026-54662). Successful exploitation can lead to full system takeover. Exploitable via ``HttpClient``. Mitigation: upgrade to `13.12.2` or later.
CVE-2026-14900 Code Injection in wordpress (CVE-2026-14900)
code injection in wordpress (CVE-2026-14900). Successful exploitation can lead to full system takeover.
CVE-2026-13423 Code Injection in wordpress (CVE-2026-13423)
code injection in wordpress (CVE-2026-13423). Successful exploitation can lead to full system takeover.
CVE-2026-54654 Code Injection in datamodel-code-generator (CVE-2026-54654)
code injection in datamodel-code-generator (CVE-2026-54654). Successful exploitation can lead to full system takeover. Exploitable via ``comment``. Mitigation: upgrade to `0.60.2` or later.
CVE-2026-54653 Code Injection in datamodel-code-generator (CVE-2026-54653)
code injection in datamodel-code-generator (CVE-2026-54653). Successful exploitation can lead to full system takeover. Exploitable via ``import``. Mitigation: upgrade to `0.60.2` or later.
CVE-2026-54656 Code Injection in datamodel-code-generator (CVE-2026-54656)
code injection in datamodel-code-generator (CVE-2026-54656). Successful exploitation can lead to full system takeover. Exploitable via ``validators``. Mitigation: upgrade to `0.60.2` or later.
CVE-2026-55415 Code Injection in datamodel-code-generator (CVE-2026-55415)
code injection in datamodel-code-generator (CVE-2026-55415). Successful exploitation can lead to full system takeover. Exploitable via ``customTypePath``. Mitigation: upgrade to `0.63.0` or later.
CVE-2026-54621 Code Injection in datamodel-code-generator (CVE-2026-54621)
code injection in datamodel-code-generator (CVE-2026-54621). Successful exploitation can lead to full system takeover. Exploitable via ``import``. Mitigation: upgrade to `0.60.1` or later.
CVE-2026-54655 Code Injection in datamodel-code-generator (CVE-2026-54655)
code injection in datamodel-code-generator (CVE-2026-54655). Successful exploitation can lead to full system takeover. Exploitable via ``_get_python_type_override``. Mitigation: upgrade to `0.60.2` or later.
CVE-2026-66745 Code Injection in CVE-2026-66745 (CVE-2026-66745)
code injection in CVE-2026-66745 (CVE-2026-66745). Successful exploitation can lead to full system takeover.
CVE-2026-66748 Code Injection in CVE-2026-66748 (CVE-2026-66748)
code injection in CVE-2026-66748 (CVE-2026-66748). Successful exploitation can lead to full system takeover.
CVE-2026-65880 Code Injection in CVE-2026-65880 (CVE-2026-65880)
code injection in CVE-2026-65880 (CVE-2026-65880). Risk of unauthorized operations or information disclosure.
CVE-2026-56747 Code Injection in cribl (CVE-2026-56747)
code injection in cribl (CVE-2026-56747). Successful exploitation can lead to full system takeover.
CVE-2026-14289 Code Injection in wordpress (CVE-2026-14289)
code injection in wordpress (CVE-2026-14289). Successful exploitation can lead to full system takeover.
CVE-2026-63720 Code Injection in CVE-2026-63720 (CVE-2026-63720)
code injection in CVE-2026-63720 (CVE-2026-63720). Successful exploitation can lead to full system takeover.
CVE-2026-73505 Code Injection in github.com/jandedobbeleer/oh-my-posh (CVE-2026-73505)
code injection in github.com/jandedobbeleer/oh-my-posh (CVE-2026-73505). Successful exploitation can lead to full system takeover. Exploitable via ``cmd``. Mitigation: upgrade to `29.35.1` or later.
CVE-2026-73649 Code Injection in velocityjs (CVE-2026-73649)
code injection in velocityjs (CVE-2026-73649). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.7` or later.
CVE-2026-65693 Code Injection in CVE-2026-65693 (CVE-2026-65693)
code injection in CVE-2026-65693 (CVE-2026-65693). Successful exploitation can lead to full system takeover.
CVE-2026-16800 Code Injection in devolutions (CVE-2026-16800)
code injection in devolutions (CVE-2026-16800). Successful exploitation can lead to full system takeover.
CVE-2026-16801 Code Injection in devolutions (CVE-2026-16801)
code injection in devolutions (CVE-2026-16801). Successful exploitation can lead to full system takeover.
CVE-2025-71389 Code Injection in react (CVE-2025-71389)
code injection in react (CVE-2025-71389). Successful exploitation can lead to full system takeover.
CVE-2026-60122 Code Injection in CVE-2026-60122 (CVE-2026-60122)
code injection in CVE-2026-60122 (CVE-2026-60122). Successful exploitation can lead to full system takeover.
CVE-2026-65907 In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible
In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible
CVE-2026-65906 Code Injection in jetbrains (CVE-2026-65906)
code injection in jetbrains (CVE-2026-65906). Successful exploitation can lead to full system takeover.
CVE-2026-64815 Code Injection in jetbrains (CVE-2026-64815)
code injection in jetbrains (CVE-2026-64815). Successful exploitation can lead to full system takeover.
CVE-2026-64802 Code Injection in jetbrains (CVE-2026-64802)
code injection in jetbrains (CVE-2026-64802). Successful exploitation can lead to full system takeover.
CVE-2026-64803 Code Injection in jetbrains (CVE-2026-64803)
code injection in jetbrains (CVE-2026-64803). Successful exploitation can lead to full system takeover.
CVE-2026-59543 Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions.
Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions.
CVE-2026-15011 Code Injection in wordpress (CVE-2026-15011)
code injection in wordpress (CVE-2026-15011). Successful exploitation can lead to full system takeover.
CVE-2026-16606 Code Injection in CVE-2026-16606 (CVE-2026-16606)
code injection in CVE-2026-16606 (CVE-2026-16606). Successful exploitation can lead to full system takeover.
CVE-2025-13146 Code Injection in wordpress (CVE-2025-13146)
code injection in wordpress (CVE-2025-13146). Risk of unauthorized operations or information disclosure.
CVE-2026-16485 Cross-Site Scripting (XSS) in CVE-2026-16485 (CVE-2026-16485)
cross-site scripting in CVE-2026-16485 (CVE-2026-16485). Risk of unauthorized operations or information disclosure.
CVE-2026-16486 Cross-Site Scripting (XSS) in CVE-2026-16486 (CVE-2026-16486)
cross-site scripting in CVE-2026-16486 (CVE-2026-16486). Risk of unauthorized operations or information disclosure.
CVE-2026-8984 Code Injection in autel (CVE-2026-8984)
code injection in autel (CVE-2026-8984). Successful exploitation can lead to full system takeover.
CVE-2026-73651 Code Injection in typeorm (CVE-2026-73651)
code injection in typeorm (CVE-2026-73651). Confidential information can be exposed externally. Exploitable via ``MigrationGenerateCommand.ts``. Mitigation: upgrade to `1.1.0` or later.
CVE-2026-21575 Code Injection in atlassian (CVE-2026-21575)
code injection in atlassian (CVE-2026-21575). Successful exploitation can lead to full system takeover.
CVE-2026-65008 Code Injection in CVE-2026-65008 (CVE-2026-65008)
code injection in CVE-2026-65008 (CVE-2026-65008). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.0.7` or later.
CVE-2026-52656 Code Injection in CVE-2026-52656 (CVE-2026-52656)
code injection in CVE-2026-52656 (CVE-2026-52656). Successful exploitation can lead to full system takeover.
CVE-2026-51385 Code Injection in CVE-2026-51385 (CVE-2026-51385)
code injection in CVE-2026-51385 (CVE-2026-51385). Confidential information can be exposed externally.
CVE-2026-60026 Code Injection in CVE-2026-60026 (CVE-2026-60026)
code injection in CVE-2026-60026 (CVE-2026-60026). Risk of unauthorized operations or information disclosure.
CVE-2026-44359 Code Injection in CVE-2026-44359 (CVE-2026-44359)
code injection in CVE-2026-44359 (CVE-2026-44359). Confidential information can be exposed externally.
CVE-2026-16229 Cross-Site Scripting (XSS) in CVE-2026-16229 (CVE-2026-16229)
cross-site scripting in CVE-2026-16229 (CVE-2026-16229). Risk of unauthorized operations or information disclosure.
CVE-2026-16220 Cross-Site Scripting (XSS) in CVE-2026-16220 (CVE-2026-16220)
cross-site scripting in CVE-2026-16220 (CVE-2026-16220). Risk of unauthorized operations or information disclosure.
CVE-2026-16204 Vulnerability in c (CVE-2026-16204)
vulnerability in c (CVE-2026-16204). Risk of unauthorized operations or information disclosure.
CVE-2026-16205 Cross-Site Scripting (XSS) in CVE-2026-16205 (CVE-2026-16205)
cross-site scripting in CVE-2026-16205 (CVE-2026-16205). Risk of unauthorized operations or information disclosure.
CVE-2026-16203 Cross-Site Scripting (XSS) in CVE-2026-16203 (CVE-2026-16203)
cross-site scripting in CVE-2026-16203 (CVE-2026-16203). Risk of unauthorized operations or information disclosure.
CVE-2026-16202 Cross-Site Scripting (XSS) in CVE-2026-16202 (CVE-2026-16202)
cross-site scripting in CVE-2026-16202 (CVE-2026-16202). Risk of unauthorized operations or information disclosure.
CVE-2026-16156 Cross-Site Scripting (XSS) in CVE-2026-16156 (CVE-2026-16156)
cross-site scripting in CVE-2026-16156 (CVE-2026-16156). Risk of unauthorized operations or information disclosure.
CVE-2026-16155 Cross-Site Scripting (XSS) in CVE-2026-16155 (CVE-2026-16155)
cross-site scripting in CVE-2026-16155 (CVE-2026-16155). Risk of unauthorized operations or information disclosure.
CVE-2026-16151 Code Injection in CVE-2026-16151 (CVE-2026-16151)
code injection in CVE-2026-16151 (CVE-2026-16151). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →