Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2026-10237	Vulnerability in sqli (CVE-2026-10237) vulnerability in sqli (CVE-2026-10237). Risk of unauthorized operations or information disclosure.	Medium	SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10242	Vulnerability in sqli (CVE-2026-10242) vulnerability in sqli (CVE-2026-10242). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10517	SSRF (Server-Side Request Forgery) in github.com/quay/claircore (CVE-2026-10517) SSRF in github.com/quay/claircore (CVE-2026-10517). Risk of unauthorized operations or information disclosure.	Medium	C Server-Side Request Forgery Cwe 918	3 months ago
CVE-2026-10235	Vulnerability in sqli (CVE-2026-10235) vulnerability in sqli (CVE-2026-10235). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10234	Cross-Site Scripting (XSS) in CVE-2026-10234 (CVE-2026-10234) cross-site scripting in CVE-2026-10234 (CVE-2026-10234). Risk of unauthorized operations or information disclosure.	Low	Cross-Site Scripting Cwe 79 Cwe 94	3 months ago
CVE-2026-10228	Cross-Site Scripting (XSS) in CVE-2026-10228 (CVE-2026-10228) cross-site scripting in CVE-2026-10228 (CVE-2026-10228). Risk of unauthorized operations or information disclosure.	Low	PHP Cross-Site Scripting Cwe 79 Cwe 94	3 months ago
CVE-2026-10227	Vulnerability in sqli (CVE-2026-10227) vulnerability in sqli (CVE-2026-10227). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10225	Vulnerability in sqli (CVE-2026-10225) vulnerability in sqli (CVE-2026-10225). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10226	Vulnerability in sqli (CVE-2026-10226) vulnerability in sqli (CVE-2026-10226). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-48209	Cross-Site Scripting (XSS) in c (CVE-2026-48209) cross-site scripting in c (CVE-2026-48209). Data can be tampered with by attackers.	High	JavaScript C Cross-Site Scripting Cwe 79 +2	3 months ago
CVE-2026-48208	Vulnerability in dos (CVE-2026-48208) vulnerability in dos (CVE-2026-48208). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Denial of Service Cwe 400 Cwe 791 +1	3 months ago
CVE-2026-20456	Out-of-Bounds Write in dos (CVE-2026-20456) out-of-bounds write in dos (CVE-2026-20456). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 787 Mediatek Mt7902 Firmware +11	3 months ago
CVE-2026-48188	Vulnerability in sqli (CVE-2026-48188) vulnerability in sqli (CVE-2026-48188). Confidential information can be exposed externally.	Critical	SQL Injection Authentication Bypass Cwe 20 Otrs	3 months ago
CVE-2026-10209	Vulnerability in sqli (CVE-2026-10209) vulnerability in sqli (CVE-2026-10209). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10213	Path Traversal in path-traversal (CVE-2026-10213) path traversal in path-traversal (CVE-2026-10213). Risk of unauthorized operations or information disclosure.	Medium	Path Traversal Cwe 22	3 months ago
CVE-2026-10208	Vulnerability in sqli (CVE-2026-10208) vulnerability in sqli (CVE-2026-10208). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10202	Vulnerability in sqli (CVE-2026-10202) vulnerability in sqli (CVE-2026-10202). Risk of unauthorized operations or information disclosure.	Medium	Java SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10204	Vulnerability in sqli (CVE-2026-10204) vulnerability in sqli (CVE-2026-10204). Risk of unauthorized operations or information disclosure.	Medium	Java SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10203	Vulnerability in sqli (CVE-2026-10203) vulnerability in sqli (CVE-2026-10203). Risk of unauthorized operations or information disclosure.	Medium	Java SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2024-21182 KEV	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)... Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...	High	Oracle Weblogic Remote Code Execution Cwe 94 C +2	3 months ago
CVE-2026-10193	Vulnerability in sqli (CVE-2026-10193) vulnerability in sqli (CVE-2026-10193). Risk of unauthorized operations or information disclosure.	Medium	Java SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10192	A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function... A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function...	High	Cwe 119 Cwe 121 Tenda Buffer Overflow	3 months ago
CVE-2026-10190	Vulnerability in dos (CVE-2026-10190) vulnerability in dos (CVE-2026-10190). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 404	3 months ago
CVE-2026-10189	A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the... A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the...	High	Cwe 119 Cwe 121 Tenda Buffer Overflow	3 months ago
CVE-2026-10191	A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function... A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function...	High	Cwe 119 Cwe 121 Buffer Overflow Network +1	3 months ago
CVE-2026-10186	Vulnerability in sqli (CVE-2026-10186) vulnerability in sqli (CVE-2026-10186). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10184	Vulnerability in sqli (CVE-2026-10184) vulnerability in sqli (CVE-2026-10184). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10185	Vulnerability in sqli (CVE-2026-10185) vulnerability in sqli (CVE-2026-10185). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-49489	SQL Injection in sqli (CVE-2026-49489) SQL injection in sqli (CVE-2026-49489). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89	3 months ago
CVE-2026-49490	SQL Injection in sqli (CVE-2026-49490) SQL injection in sqli (CVE-2026-49490). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	3 months ago
CVE-2026-10178	Vulnerability in sqli (CVE-2026-10178) vulnerability in sqli (CVE-2026-10178). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10176	Vulnerability in sqli (CVE-2026-10176) vulnerability in sqli (CVE-2026-10176). Risk of unauthorized operations or information disclosure.	Medium	SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10173	Cross-Site Scripting (XSS) in vue (CVE-2026-10173) cross-site scripting in vue (CVE-2026-10173). Risk of unauthorized operations or information disclosure.	Medium	Vue.js Cross-Site Scripting Cwe 79 Cwe 94	3 months ago
CVE-2026-10171	Vulnerability in sqli (CVE-2026-10171) vulnerability in sqli (CVE-2026-10171). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10170	Vulnerability in sqli (CVE-2026-10170) vulnerability in sqli (CVE-2026-10170). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10155	Vulnerability in sqli (CVE-2026-10155) vulnerability in sqli (CVE-2026-10155). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10153	Cross-Site Scripting (XSS) in CVE-2026-10153 (CVE-2026-10153) cross-site scripting in CVE-2026-10153 (CVE-2026-10153). Risk of unauthorized operations or information disclosure.	Medium	Java Cross-Site Scripting Cwe 79 Cwe 94	3 months ago
CVE-2026-8594	Vulnerability in dos (CVE-2026-8594) vulnerability in dos (CVE-2026-8594). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 405 Cwe 407	3 months ago
CVE-2018-25423	Vulnerability in dos (CVE-2018-25423) vulnerability in dos (CVE-2018-25423). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 120	3 months ago
CVE-2018-25426	Vulnerability in dos (CVE-2018-25426) vulnerability in dos (CVE-2018-25426). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 120 Winmtr	3 months ago
CVE-2018-25420	SQL Injection in sqli (CVE-2018-25420) SQL injection in sqli (CVE-2018-25420). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89	3 months ago
CVE-2018-25422	SQL Injection in sqli (CVE-2018-25422) SQL injection in sqli (CVE-2018-25422). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89	3 months ago
CVE-2018-25424	SQL Injection in sqli (CVE-2018-25424) SQL injection in sqli (CVE-2018-25424). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89	3 months ago
CVE-2018-25425	SQL Injection in c (CVE-2018-25425) SQL injection in c (CVE-2018-25425). Confidential information can be exposed externally.	High	PHP C SQL Injection Cwe 89	3 months ago
CVE-2018-25421	Path Traversal in path-traversal (CVE-2018-25421) path traversal in path-traversal (CVE-2018-25421). Confidential information can be exposed externally.	Medium	PHP Path Traversal Cwe 22	3 months ago
CVE-2018-25413	SQL Injection in sqli (CVE-2018-25413) SQL injection in sqli (CVE-2018-25413). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89	3 months ago
CVE-2018-25414	SQL Injection in sqli (CVE-2018-25414) SQL injection in sqli (CVE-2018-25414). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89	3 months ago
CVE-2018-25415	SQL Injection in sqli (CVE-2018-25415) SQL injection in sqli (CVE-2018-25415). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89	3 months ago
CVE-2018-25416	SQL Injection in sqli (CVE-2018-25416) SQL injection in sqli (CVE-2018-25416). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89	3 months ago
CVE-2018-25417	SQL Injection in sqli (CVE-2018-25417) SQL injection in sqli (CVE-2018-25417). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89	3 months ago

Vulnerabilities

🍪 About cookies