Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Category: network Clear

ID	Title	Severity	Tags	Detected
CVE-2026-50722	Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not correctly... Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not correctly...	High	Remote Code Execution Denial of Service Cwe 347 Cwe 617 +1	6 days ago
CVE-2026-50721	Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), did not correctly verify... Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), did not correctly verify...	High	Remote Code Execution Denial of Service Cwe 347 Cwe 617 +3	6 days ago
CVE-2026-12413	An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart.... An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart....	High	Remote Code Execution Denial of Service Cwe 193 Cwe 617 +1	6 days ago
CVE-2026-57278	GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)... GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)...	High	Cwe 120 WebSocket Buffer Overflow	6 days ago
CVE-2026-57274	GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)... GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)...	High	Cwe 120 Buffer Overflow WebSocket Geovision +1	6 days ago
CVE-2026-57272	GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)... GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)...	High	Cwe 129 WebSocket Remote Code Execution Index Out Of Bounds	6 days ago
CVE-2026-13539	A vulnerability was identified in Wavlink WL-NU516U1-A M16U1_V240425. The impacted element is the... A vulnerability was identified in Wavlink WL-NU516U1-A M16U1_V240425. The impacted element is the...	High	Cwe 119 Cwe 121 Buffer Overflow	1 week ago
CVE-2026-13518	A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function... A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function...	High	Cwe 119 Cwe 121 Tenda Buffer Overflow +1	1 week ago
CVE-2026-58050	libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey... libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey...	High	Cwe 190 SSH Integer Overflow Libssh2	1 week ago
CVE-2026-54100	A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container... A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container...	High	Cwe 295 Openshift Windows SSH +3	2 weeks ago
CVE-2026-52720	Vulnerability in CVE-2026-52720 (CVE-2026-52720) vulnerability in CVE-2026-52720 (CVE-2026-52720). Successful exploitation can lead to full system takeover.	High	Cwe 122 Remote Code Execution Buffer Overflow	3 weeks ago
CVE-2026-11503	A security vulnerability has been detected in Tenda CX12L 16.03.53.12. The affected element is... A security vulnerability has been detected in Tenda CX12L 16.03.53.12. The affected element is...	High	Cwe 119 Cwe 121 Tenda Wifi +1	1 month ago
CVE-2026-10192	A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function... A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function...	High	Cwe 119 Cwe 121 Tenda Buffer Overflow	1 month ago
CVE-2026-10189	A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the... A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the...	High	Cwe 119 Cwe 121 Tenda Buffer Overflow	1 month ago
CVE-2026-10191	A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function... A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function...	High	Cwe 119 Cwe 121 Buffer Overflow Network +1	1 month ago
CVE-2026-44421	FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sending crafted RDPGFX PDUs.... FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sending crafted RDPGFX PDUs. The bug is in gdi_CacheToSurface: it validates a destination rectangle that is clamped to UINT16_MAX...	High	Cwe 122 Freerdp Remote Code Execution Heap Buffer Overflow +1	1 month ago
CVE-2026-44420	FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP client can trigger a heap-buffer-overflow write in FreeRDP's server-side clipboard (cliprdr) channel b... FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP client can trigger a heap-buffer-overflow write in FreeRDP's server-side clipboard (cliprdr) channel by sending a CB_CLIP_CAPS PDU with a too-small capabilitySetLength. This can crash the server process...	High	Denial of Service Cwe 122 Buffer Overflow Freerdp +1	1 month ago
CVE-2026-42083	Free5GC PCF: Missing authentication middleware in Npcf_SMPolicyControl allows access to SM policy handlers and disclosure of subscriber SUPI Free5GC PCF: Missing authentication middleware in Npcf_SMPolicyControl allows access to SM policy handlers and disclosure of subscriber SUPI	High	Cwe 862 Authentication Bypass Go 5G +1	1 month ago
CVE-2026-3012	A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate... A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate...	High	Samba Network Encryption Certificate +5	1 month ago
CVE-2026-44905	Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verification pipeline of Vanetza.... Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verification pipeline of Vanetza. When processing incoming V2X messages, the ASN.1 decoder accepts the structure as syntactically val...	High	C C++ Cwe 248 Denial of Service +1	1 month ago
CVE-2026-43988	Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When pro... Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When processing malformed network packets containing corrupted ASN.1/OER structures (e.g., invalid length fi...	High	C C++ Cwe 248 Denial of Service	1 month ago
CVE-2026-6973 KEV	[KEV] Vulnerability in Ivanti endpoint-manager-mobile-epmm (CVE-2026-6973) vulnerability in Ivanti endpoint-manager-mobile-epmm (CVE-2026-6973). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Ivanti Endpoint Manager Mobile Epmm Cwe 20 Remote Code Execution +9	2 months ago
CVE-2026-33846	A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of... A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of...	High	Cwe 130 Gnutls Heap Buffer Overflow Dtls	2 months ago
CVE-2026-31780	In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8... In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8...	High	Cwe 787 Linux Linux Kernel Buffer Overflow	2 months ago
CVE-2026-33845	A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero... A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero...	High	Denial of Service Cwe 191 Gnu Gnutls +4	2 months ago
CVE-2024-1708 KEV	[KEV] Path Traversal in Connectwise screenconnect (CVE-2024-1708) path traversal in Connectwise screenconnect (CVE-2024-1708). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Connectwise Screenconnect Cwe 22 Remote Code Execution +7	2 months ago
CVE-2025-29635 KEV	[KEV] Command Injection in D-link dir-823x (CVE-2025-29635) command injection in D-link dir-823x (CVE-2025-29635). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	D Link Dir 823X Cwe 77 Command Injection +8	2 months ago
CVE-2024-7399 KEV	[KEV] Path Traversal in Samsung magicinfo-9-server (CVE-2024-7399) path traversal in Samsung magicinfo-9-server (CVE-2024-7399). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Samsung Magicinfo 9 Server Cwe 22 Cwe 434 +9	2 months ago
CVE-2026-39987 KEV	[KEV] Vulnerability in Marimo remote-attack (CVE-2026-39987) vulnerability in Marimo remote-attack (CVE-2026-39987). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Marimo Cwe 306 Remote Code Execution Remote Attack +6	2 months ago
CVE-2026-20122 KEV	[KEV] Vulnerability in Cisco catalyst-sd-wan-manger (CVE-2026-20122) vulnerability in Cisco catalyst-sd-wan-manger (CVE-2026-20122). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco Catalyst Sd Wan Manger Cwe 648 Api +7	2 months ago
CVE-2026-20133 KEV	[KEV] Information Disclosure in Cisco catalyst-sd-wan-manager (CVE-2026-20133) vulnerability in Cisco catalyst-sd-wan-manager (CVE-2026-20133). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco Catalyst Sd Wan Manager Cwe 200 Credential Leak +6	2 months ago
CVE-2023-27351 KEV	[KEV] Authentication Bypass in Papercut ngmf (CVE-2023-27351) authentication bypass in Papercut ngmf (CVE-2023-27351). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Papercut Ngmf Cwe 287 Authentication Bypass +11	2 months ago
CVE-2026-20128 KEV	[KEV] Vulnerability in Cisco catalyst-sd-wan-manager (CVE-2026-20128) vulnerability in Cisco catalyst-sd-wan-manager (CVE-2026-20128). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco Catalyst Sd Wan Manager Cwe 257 Authentication Bypass	2 months ago
CVE-2025-32975 KEV	[KEV] Authentication Bypass in Quest kace-systems-management-appliance-sma (CVE-2025-32975) authentication bypass in Quest kace-systems-management-appliance-sma (CVE-2025-32975). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Quest Kace Systems Management Appliance Sma Cwe 287 Authentication Bypass	2 months ago
CVE-2026-40170	ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buf... ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog is enabled, a remote peer can send sufficiently large transpo...	High	C Cwe 121 Nghttp2 Ngtcp2 +4	2 months ago
CVE-2026-41035	In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort... In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort...	High	Cwe 130 Samba Rsync Use After Free +2	2 months ago
CVE-2026-34197 KEV	[KEV] Vulnerability in Apache activemq (CVE-2026-34197) vulnerability in Apache activemq (CVE-2026-34197). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apache Activemq Cwe 20 Cwe 94 +11	2 months ago
CVE-2026-21643 KEV	[KEV] SQL Injection in Fortinet forticlient-ems (CVE-2026-21643) SQL injection in Fortinet forticlient-ems (CVE-2026-21643). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Fortinet Forticlient Ems Cwe 89 Remote Code Execution +12	2 months ago
CVE-2023-21529 KEV	[KEV] Unsafe Deserialization in Microsoft exchange-server (CVE-2023-21529) vulnerability in Microsoft exchange-server (CVE-2023-21529). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Exchange Server Cwe 502 Remote Code Execution +6	2 months ago
CVE-2026-3055 KEV	[KEV] Out-of-Bounds Read in Citrix netscaler (CVE-2026-3055) vulnerability in Citrix netscaler (CVE-2026-3055). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Citrix Netscaler Cwe 125 SAML +1	3 months ago
CVE-2025-53521 KEV	[KEV] Vulnerability in F5 big-ip (CVE-2025-53521) vulnerability in F5 big-ip (CVE-2025-53521). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	F5 Big Ip Cwe 121 Buffer Overflow +1	3 months ago
CVE-2022-20773	A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance... A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance...	High	Cwe 321 Cwe 798 Cisco Umbrella Virtual Appliance +3	4 years ago
CVE-2021-25667	A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE S... A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC...	High	Remote Code Execution Cwe 121 Cwe 787 Siemens +32	5 years ago
CVE-2021-22703	Vulnerability in schneider-electric (CVE-2021-22703) vulnerability in schneider-electric (CVE-2021-22703). Confidential information can be exposed externally.	High	Cwe 319 Schneider Electric Powerlogic Ion7400 Firmware Powerlogic Ion7400 +20	5 years ago
CVE-2021-22702	Vulnerability in schneider-electric (CVE-2021-22702) vulnerability in schneider-electric (CVE-2021-22702). Confidential information can be exposed externally.	High	Cwe 319 Schneider Electric Powerlogic Ion7400 Firmware Powerlogic Ion7400 +24	5 years ago
CVE-2020-7563	Out-of-Bounds Write in schneider-electric (CVE-2020-7563) out-of-bounds write in schneider-electric (CVE-2020-7563). Successful exploitation can lead to full system takeover.	High	Cwe 787 Schneider Electric Modicon Tsxety4103 Firmware Modicon Tsxety4103 +41	5 years ago
CVE-2020-7562	Out-of-Bounds Read in schneider-electric (CVE-2020-7562) vulnerability in schneider-electric (CVE-2020-7562). Confidential information can be exposed externally.	High	Cwe 125 Schneider Electric Modicon Tsxety4103 Firmware Modicon Tsxety4103 +39	5 years ago
CVE-2016-10401	ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account password is known (or a non-root default account exists w... ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account password is known (or a non-root default account exists within an ISP's deployment of these devices).	High	Cwe 255 Zyxel Pk5001Z Firmware Pk5001Z +1	8 years ago
CVE-2017-2273	Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to hijack the authentication of administrators... Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.	High	Cross-Site Request Forgery Cwe 352 Buffalo Wmr 433 Firmware +3	8 years ago
CVE-2015-6564	Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in... Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in...	High	C Cwe 264 Cwe 416 OpenBSD +2	10 years ago

Vulnerabilities

🍪 About cookies