Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2026-78197	Vulnerability in sqli (CVE-2026-78197) vulnerability in sqli (CVE-2026-78197). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	6 days ago
CVE-2026-78196	Path Traversal in path-traversal (CVE-2026-78196) path traversal in path-traversal (CVE-2026-78196). Risk of unauthorized operations or information disclosure.	Medium	Path Traversal Cwe 22	6 days ago
CVE-2026-78213	Cross-Site Scripting (XSS) in CVE-2026-78213 (CVE-2026-78213) cross-site scripting in CVE-2026-78213 (CVE-2026-78213). Confidential information can be exposed externally.	High	JavaScript Cross-Site Scripting Cwe 79	6 days ago
CVE-2026-78185	Vulnerability in sqli (CVE-2026-78185) vulnerability in sqli (CVE-2026-78185). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	6 days ago
CVE-2026-78182	Vulnerability in sqli (CVE-2026-78182) vulnerability in sqli (CVE-2026-78182). Risk of unauthorized operations or information disclosure.	High	SQL Injection Cwe 74 Cwe 89	6 days ago
CVE-2026-78212	Vulnerability in path-traversal (CVE-2026-78212) vulnerability in path-traversal (CVE-2026-78212). Confidential information can be exposed externally.	High	Path Traversal Cwe 23	6 days ago
CVE-2026-19852	Unrestricted File Upload in CVE-2026-19852 (CVE-2026-19852) vulnerability in CVE-2026-19852 (CVE-2026-19852). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 434	6 days ago
CVE-2026-78171	Vulnerability in sqli (CVE-2026-78171) vulnerability in sqli (CVE-2026-78171). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	6 days ago
CVE-2026-78170	A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of... A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of...	High	Cwe 119 Cwe 120 Buffer Overflow	6 days ago
CVE-2026-78209	exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at... exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at...	High	Cwe 1236 JavaScript Remote Code Execution	6 days ago
CVE-2026-78208	exceljs-hardened before 5.0.0 contains a path traversal vulnerability in the Workbook.addImage()... exceljs-hardened before 5.0.0 contains a path traversal vulnerability in the Workbook.addImage()...	High	JavaScript Path Traversal Cwe 73	6 days ago
CVE-2026-78161	A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function... A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function...	High	C Cwe 119 Cwe 787 Buffer Overflow	6 days ago
CVE-2026-78206	exceljs-hardened before 5.0.0 decompresses all entries from supplied xlsx archives into memory... exceljs-hardened before 5.0.0 decompresses all entries from supplied xlsx archives into memory...	High	Denial of Service Cwe 409 JavaScript	6 days ago
CVE-2026-78157	A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrf_rx_aar_cb of the... A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrf_rx_aar_cb of the...	High	C Cwe 119 Cwe 125 Remote Code Execution	6 days ago
CVE-2026-78147	Vulnerability in cpp (CVE-2026-78147) vulnerability in cpp (CVE-2026-78147). Risk of unauthorized operations or information disclosure.	High	C++ Insecure Deserialization Cwe 20 Cwe 502	6 days ago
CVE-2026-78143	Vulnerability in sqli (CVE-2026-78143) vulnerability in sqli (CVE-2026-78143). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	6 days ago
CVE-2026-8630	Cross-Site Scripting (XSS) in CVE-2026-8630 (CVE-2026-8630) cross-site scripting in CVE-2026-8630 (CVE-2026-8630). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79	6 days ago
CVE-2026-9769	Uncontrolled recursion DoS in JustHTML() via deeply nested HTML Uncontrolled recursion DoS in JustHTML() via deeply nested HTML	High	Denial of Service Cwe 674 Python	6 days ago
CVE-2026-8445	Cross-Site Scripting (XSS) in CVE-2026-8445 (CVE-2026-8445) cross-site scripting in CVE-2026-8445 (CVE-2026-8445). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.12.0` or later.	Critical	Cross-Site Scripting Cwe 79	6 days ago
CVE-2026-7808	Vulnerability in CVE-2026-7808 (CVE-2026-7808) vulnerability in CVE-2026-7808 (CVE-2026-7808). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.16.0` or later.	Critical	Cross-Site Scripting Cwe 20	6 days ago
CVE-2026-77088	Cross-Site Scripting (XSS) in CVE-2026-77088 (CVE-2026-77088) cross-site scripting in CVE-2026-77088 (CVE-2026-77088). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79	6 days ago
CVE-2026-74793	Cross-Site Scripting (XSS) in CVE-2026-74793 (CVE-2026-74793) cross-site scripting in CVE-2026-74793 (CVE-2026-74793). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79	6 days ago
CVE-2026-6827	Cross-Site Scripting (XSS) in CVE-2026-6827 (CVE-2026-6827) cross-site scripting in CVE-2026-6827 (CVE-2026-6827). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79	6 days ago
CVE-2026-5751	Cross-Site Scripting (XSS) in CVE-2026-5751 (CVE-2026-5751) cross-site scripting in CVE-2026-5751 (CVE-2026-5751). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.14.0` or later.	Medium	Cross-Site Scripting Cwe 79	6 days ago
CVE-2026-5389	Vulnerability in CVE-2026-5389 (CVE-2026-5389) vulnerability in CVE-2026-5389 (CVE-2026-5389). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 80	6 days ago
CVE-2026-78112	Vulnerability in sqli (CVE-2026-78112) vulnerability in sqli (CVE-2026-78112). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	6 days ago
CVE-2026-78155	Vulnerability in privilege-escalation (CVE-2026-78155) vulnerability in privilege-escalation (CVE-2026-78155). Successful exploitation can lead to full system takeover.	Critical	Privilege Escalation Cwe 426	6 days ago
CVE-2026-10053	Path Traversal in path-traversal (CVE-2026-10053) path traversal in path-traversal (CVE-2026-10053). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Path Traversal Cwe 22	6 days ago
CVE-2026-78060	Cross-Site Scripting (XSS) in CVE-2026-78060 (CVE-2026-78060) cross-site scripting in CVE-2026-78060 (CVE-2026-78060). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Cwe 94	1 week ago
CVE-2026-78059	Cross-Site Scripting (XSS) in CVE-2026-78059 (CVE-2026-78059) cross-site scripting in CVE-2026-78059 (CVE-2026-78059). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Cwe 94	1 week ago
CVE-2026-78057	Vulnerability in sqli (CVE-2026-78057) vulnerability in sqli (CVE-2026-78057). Risk of unauthorized operations or information disclosure.	Medium	SQL Injection Cwe 74 Cwe 89	1 week ago
CVE-2026-78056	Vulnerability in sqli (CVE-2026-78056) vulnerability in sqli (CVE-2026-78056). Risk of unauthorized operations or information disclosure.	Medium	SQL Injection Cwe 74 Cwe 89	1 week ago
CVE-2026-78055	Cross-Site Scripting (XSS) in CVE-2026-78055 (CVE-2026-78055) cross-site scripting in CVE-2026-78055 (CVE-2026-78055). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Cwe 94	1 week ago
CVE-2026-78136	chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in... chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in...	High	Cwe 95 Python Remote Code Execution	1 week ago
CVE-2026-78054	Cross-Site Scripting (XSS) in CVE-2026-78054 (CVE-2026-78054) cross-site scripting in CVE-2026-78054 (CVE-2026-78054). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Cwe 94	1 week ago
CVE-2026-18027	Path Traversal in wordpress (CVE-2026-18027) path traversal in wordpress (CVE-2026-18027). Confidential information can be exposed externally.	Medium	WordPress Path Traversal Cwe 22	1 week ago
CVE-2026-0551	Unsafe Deserialization in wordpress (CVE-2026-0551) vulnerability in wordpress (CVE-2026-0551). Successful exploitation can lead to full system takeover.	High	PHP WordPress Insecure Deserialization Cwe 502	1 week ago
CVE-2026-12999	Vulnerability in c (CVE-2026-12999) vulnerability in c (CVE-2026-12999). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 401	1 week ago
CVE-2026-4703	Unsafe Deserialization in wordpress (CVE-2026-4703) vulnerability in wordpress (CVE-2026-4703). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Insecure Deserialization Cwe 502	1 week ago
CVE-2026-77027	Cross-Site Scripting (XSS) in CVE-2026-77027 (CVE-2026-77027) cross-site scripting in CVE-2026-77027 (CVE-2026-77027). Risk of unauthorized operations or information disclosure.		Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-76604	Code Injection in CVE-2026-76604 (CVE-2026-76604) code injection in CVE-2026-76604 (CVE-2026-76604). Risk of unauthorized operations or information disclosure.		PHP Remote Code Execution Cwe 94	1 week ago
CVE-2026-76605	Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.3 - ???. Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.3 - ???.		Remote Code Execution Cwe 94	1 week ago
CVE-2026-76606	Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.3 - ???. Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.3 - ???.		Path Traversal Cwe 22	1 week ago
CVE-2026-76602	SQL Injection in sqli (CVE-2026-76602) SQL injection in sqli (CVE-2026-76602). Risk of unauthorized operations or information disclosure.		SQL Injection Cwe 89	1 week ago
CVE-2026-76571	SQL Injection in sqli (CVE-2026-76571) SQL injection in sqli (CVE-2026-76571). Risk of unauthorized operations or information disclosure.		SQL Injection Cwe 89	1 week ago
CVE-2026-63311	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-63311) SSRF in ssrf (CVE-2026-63311). Risk of unauthorized operations or information disclosure.	Medium	Server-Side Request Forgery Cwe 918 Nltk	1 week ago
CVE-2026-62385	Vulnerability in path-traversal (CVE-2026-62385) vulnerability in path-traversal (CVE-2026-62385). Confidential information can be exposed externally.	Medium	Path Traversal Cwe 73	1 week ago
CVE-2026-62388	Vulnerability in path-traversal (CVE-2026-62388) vulnerability in path-traversal (CVE-2026-62388). Confidential information can be exposed externally.	High	Path Traversal Insecure Deserialization Cwe 1188 Nltk	1 week ago
CVE-2026-66393	Vulnerability in dos (CVE-2026-66393) vulnerability in dos (CVE-2026-66393). Risk of unauthorized operations or information disclosure.	High	Python Denial of Service Cwe 674 Nltk	1 week ago
CVE-2026-4561	Cross-Site Scripting (XSS) in wordpress (CVE-2026-4561) cross-site scripting in wordpress (CVE-2026-4561). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cross-Site Scripting Cwe 79	1 week ago

Vulnerabilities

🍪 About cookies