Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-54662 |
|
Vulnerability in swagger-typescript-api (CVE-2026-54662)
vulnerability in swagger-typescript-api (CVE-2026-54662). Successful exploitation can lead to full system takeover. Exploitable via ``HttpClient``. Mitigation: upgrade to `13.12.2` or later.
|
| CVE-2026-14900 |
|
Code Injection in wordpress (CVE-2026-14900)
code injection in wordpress (CVE-2026-14900). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13423 |
|
Code Injection in wordpress (CVE-2026-13423)
code injection in wordpress (CVE-2026-13423). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54654 |
|
Code Injection in datamodel-code-generator (CVE-2026-54654)
code injection in datamodel-code-generator (CVE-2026-54654). Successful exploitation can lead to full system takeover. Exploitable via ``comment``. Mitigation: upgrade to `0.60.2` or later.
|
| CVE-2026-54653 |
|
Code Injection in datamodel-code-generator (CVE-2026-54653)
code injection in datamodel-code-generator (CVE-2026-54653). Successful exploitation can lead to full system takeover. Exploitable via ``import``. Mitigation: upgrade to `0.60.2` or later.
|
| CVE-2026-54656 |
|
Code Injection in datamodel-code-generator (CVE-2026-54656)
code injection in datamodel-code-generator (CVE-2026-54656). Successful exploitation can lead to full system takeover. Exploitable via ``validators``. Mitigation: upgrade to `0.60.2` or later.
|
| CVE-2026-55415 |
|
Code Injection in datamodel-code-generator (CVE-2026-55415)
code injection in datamodel-code-generator (CVE-2026-55415). Successful exploitation can lead to full system takeover. Exploitable via ``customTypePath``. Mitigation: upgrade to `0.63.0` or later.
|
| CVE-2026-54621 |
|
Code Injection in datamodel-code-generator (CVE-2026-54621)
code injection in datamodel-code-generator (CVE-2026-54621). Successful exploitation can lead to full system takeover. Exploitable via ``import``. Mitigation: upgrade to `0.60.1` or later.
|
| CVE-2026-54655 |
|
Code Injection in datamodel-code-generator (CVE-2026-54655)
code injection in datamodel-code-generator (CVE-2026-54655). Successful exploitation can lead to full system takeover. Exploitable via ``_get_python_type_override``. Mitigation: upgrade to `0.60.2` or later.
|
| CVE-2026-66745 |
|
Code Injection in CVE-2026-66745 (CVE-2026-66745)
code injection in CVE-2026-66745 (CVE-2026-66745). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66748 |
|
Code Injection in CVE-2026-66748 (CVE-2026-66748)
code injection in CVE-2026-66748 (CVE-2026-66748). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65880 |
|
Code Injection in CVE-2026-65880 (CVE-2026-65880)
code injection in CVE-2026-65880 (CVE-2026-65880). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56747 |
|
Code Injection in cribl (CVE-2026-56747)
code injection in cribl (CVE-2026-56747). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14289 |
|
Code Injection in wordpress (CVE-2026-14289)
code injection in wordpress (CVE-2026-14289). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63720 |
|
Code Injection in CVE-2026-63720 (CVE-2026-63720)
code injection in CVE-2026-63720 (CVE-2026-63720). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73505 |
|
Code Injection in github.com/jandedobbeleer/oh-my-posh (CVE-2026-73505)
code injection in github.com/jandedobbeleer/oh-my-posh (CVE-2026-73505). Successful exploitation can lead to full system takeover. Exploitable via ``cmd``. Mitigation: upgrade to `29.35.1` or later.
|
| CVE-2026-73649 |
|
Code Injection in velocityjs (CVE-2026-73649)
code injection in velocityjs (CVE-2026-73649). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.7` or later.
|
| CVE-2026-65693 |
|
Code Injection in CVE-2026-65693 (CVE-2026-65693)
code injection in CVE-2026-65693 (CVE-2026-65693). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16800 |
|
Code Injection in devolutions (CVE-2026-16800)
code injection in devolutions (CVE-2026-16800). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16801 |
|
Code Injection in devolutions (CVE-2026-16801)
code injection in devolutions (CVE-2026-16801). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71389 |
|
Code Injection in react (CVE-2025-71389)
code injection in react (CVE-2025-71389). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60122 |
|
Code Injection in CVE-2026-60122 (CVE-2026-60122)
code injection in CVE-2026-60122 (CVE-2026-60122). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65907 |
|
In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible
In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible
|
| CVE-2026-65906 |
|
Code Injection in jetbrains (CVE-2026-65906)
code injection in jetbrains (CVE-2026-65906). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64815 |
|
Code Injection in jetbrains (CVE-2026-64815)
code injection in jetbrains (CVE-2026-64815). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64802 |
|
Code Injection in jetbrains (CVE-2026-64802)
code injection in jetbrains (CVE-2026-64802). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64803 |
|
Code Injection in jetbrains (CVE-2026-64803)
code injection in jetbrains (CVE-2026-64803). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59543 |
|
Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions.
Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions.
|
| CVE-2026-15011 |
|
Code Injection in wordpress (CVE-2026-15011)
code injection in wordpress (CVE-2026-15011). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16606 |
|
Code Injection in CVE-2026-16606 (CVE-2026-16606)
code injection in CVE-2026-16606 (CVE-2026-16606). Successful exploitation can lead to full system takeover.
|
| CVE-2025-13146 |
|
Code Injection in wordpress (CVE-2025-13146)
code injection in wordpress (CVE-2025-13146). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16485 |
|
Cross-Site Scripting (XSS) in CVE-2026-16485 (CVE-2026-16485)
cross-site scripting in CVE-2026-16485 (CVE-2026-16485). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16486 |
|
Cross-Site Scripting (XSS) in CVE-2026-16486 (CVE-2026-16486)
cross-site scripting in CVE-2026-16486 (CVE-2026-16486). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8984 |
|
Code Injection in autel (CVE-2026-8984)
code injection in autel (CVE-2026-8984). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73651 |
|
Code Injection in typeorm (CVE-2026-73651)
code injection in typeorm (CVE-2026-73651). Confidential information can be exposed externally. Exploitable via ``MigrationGenerateCommand.ts``. Mitigation: upgrade to `1.1.0` or later.
|
| CVE-2026-21575 |
|
Code Injection in atlassian (CVE-2026-21575)
code injection in atlassian (CVE-2026-21575). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65008 |
|
Code Injection in CVE-2026-65008 (CVE-2026-65008)
code injection in CVE-2026-65008 (CVE-2026-65008). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.0.7` or later.
|
| CVE-2026-52656 |
|
Code Injection in CVE-2026-52656 (CVE-2026-52656)
code injection in CVE-2026-52656 (CVE-2026-52656). Successful exploitation can lead to full system takeover.
|
| CVE-2026-51385 |
|
Code Injection in CVE-2026-51385 (CVE-2026-51385)
code injection in CVE-2026-51385 (CVE-2026-51385). Confidential information can be exposed externally.
|
| CVE-2026-60026 |
|
Code Injection in CVE-2026-60026 (CVE-2026-60026)
code injection in CVE-2026-60026 (CVE-2026-60026). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44359 |
|
Code Injection in CVE-2026-44359 (CVE-2026-44359)
code injection in CVE-2026-44359 (CVE-2026-44359). Confidential information can be exposed externally.
|
| CVE-2026-16229 |
|
Cross-Site Scripting (XSS) in CVE-2026-16229 (CVE-2026-16229)
cross-site scripting in CVE-2026-16229 (CVE-2026-16229). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16220 |
|
Cross-Site Scripting (XSS) in CVE-2026-16220 (CVE-2026-16220)
cross-site scripting in CVE-2026-16220 (CVE-2026-16220). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16204 |
|
Vulnerability in c (CVE-2026-16204)
vulnerability in c (CVE-2026-16204). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16205 |
|
Cross-Site Scripting (XSS) in CVE-2026-16205 (CVE-2026-16205)
cross-site scripting in CVE-2026-16205 (CVE-2026-16205). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16203 |
|
Cross-Site Scripting (XSS) in CVE-2026-16203 (CVE-2026-16203)
cross-site scripting in CVE-2026-16203 (CVE-2026-16203). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16202 |
|
Cross-Site Scripting (XSS) in CVE-2026-16202 (CVE-2026-16202)
cross-site scripting in CVE-2026-16202 (CVE-2026-16202). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16156 |
|
Cross-Site Scripting (XSS) in CVE-2026-16156 (CVE-2026-16156)
cross-site scripting in CVE-2026-16156 (CVE-2026-16156). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16155 |
|
Cross-Site Scripting (XSS) in CVE-2026-16155 (CVE-2026-16155)
cross-site scripting in CVE-2026-16155 (CVE-2026-16155). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16151 |
|
Code Injection in CVE-2026-16151 (CVE-2026-16151)
code injection in CVE-2026-16151 (CVE-2026-16151). Risk of unauthorized operations or information disclosure.
|