Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2026-75077	Cross-Site Scripting (XSS) in c (CVE-2026-75077) cross-site scripting in c (CVE-2026-75077). Risk of unauthorized operations or information disclosure.	Medium	PHP C Cross-Site Scripting Cwe 79 +1	1 week ago
CVE-2026-67918	Path Traversal in path-traversal (CVE-2026-67918) path traversal in path-traversal (CVE-2026-67918). Confidential information can be exposed externally.	High	Path Traversal Cwe 22	1 week ago
CVE-2026-67854	SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code	Critical	SQL Injection Cwe 89	1 week ago
CVE-2026-75531	Cross-Site Scripting (XSS) in CVE-2026-75531 (CVE-2026-75531) cross-site scripting in CVE-2026-75531 (CVE-2026-75531). Risk of unauthorized operations or information disclosure.		JavaScript Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-75529	Cross-Site Scripting (XSS) in flask (CVE-2026-75529) cross-site scripting in flask (CVE-2026-75529). Risk of unauthorized operations or information disclosure.		Flask Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-75482	Path Traversal in path-traversal (CVE-2026-75482) path traversal in path-traversal (CVE-2026-75482). Confidential information can be exposed externally.	High	Path Traversal Cwe 22	1 week ago
CVE-2026-75479	Vulnerability in CVE-2026-75479 (CVE-2026-75479) vulnerability in CVE-2026-75479 (CVE-2026-75479). Confidential information can be exposed externally.	High	Authentication Bypass Cwe 306	1 week ago
CVE-2026-66795	Vulnerability in privilege-escalation (CVE-2026-66795) vulnerability in privilege-escalation (CVE-2026-66795). Successful exploitation can lead to full system takeover.	Critical	Privilege Escalation Cwe 295	1 week ago
CVE-2026-67917	SQL Injection in sqli (CVE-2026-67917) SQL injection in sqli (CVE-2026-67917). Successful exploitation can lead to full system takeover. Exploitable via ``db.sql``.	Critical	SQL Injection Cwe 89	1 week ago
CVE-2026-67925	Cross-Site Scripting (XSS) in CVE-2026-67925 (CVE-2026-67925) cross-site scripting in CVE-2026-67925 (CVE-2026-67925). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-65640	Unrestricted File Upload in wordpress (CVE-2026-65640) vulnerability in wordpress (CVE-2026-65640). Successful exploitation can lead to full system takeover. Exploitable via ``upload_files``.	High	WordPress Remote Code Execution Cwe 434	1 week ago
CVE-2026-65974	Vulnerability in CVE-2026-65974 (CVE-2026-65974) vulnerability in CVE-2026-65974 (CVE-2026-65974). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 1336	1 week ago
CVE-2026-40506	Path Traversal in path-traversal (CVE-2026-40506) path traversal in path-traversal (CVE-2026-40506). Data can be tampered with by attackers.	Medium	PHP Path Traversal Cwe 22	1 week ago
CVE-2026-75014	Vulnerability in sqli (CVE-2026-75014) vulnerability in sqli (CVE-2026-75014). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	1 week ago
CVE-2026-74234	Vulnerability in CVE-2026-74234 (CVE-2026-74234) vulnerability in CVE-2026-74234 (CVE-2026-74234). Confidential information can be exposed externally.	High	JavaScript Cross-Site Scripting Cwe 95	1 week ago
CVE-2026-71553	Vulnerability in dos (CVE-2026-71553) vulnerability in dos (CVE-2026-71553). Risk of unauthorized operations or information disclosure. Exploitable via `PATCH /api/v1/article/`.		JavaScript Denial of Service Cwe 1321	1 week ago
CVE-2026-68005	Vulnerability in dos (CVE-2026-68005) vulnerability in dos (CVE-2026-68005). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400	1 week ago
CVE-2026-50775	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-50775) SSRF in ssrf (CVE-2026-50775). Successful exploitation can lead to full system takeover.	Critical	Server-Side Request Forgery Cwe 918	1 week ago
CVE-2026-50776	Path Traversal in path-traversal (CVE-2026-50776) path traversal in path-traversal (CVE-2026-50776). Confidential information can be exposed externally.	High	Path Traversal Cwe 22	1 week ago
CVE-2026-17639	Vulnerability in dos (CVE-2026-17639) vulnerability in dos (CVE-2026-17639). Risk of unauthorized operations or information disclosure.		Denial of Service Cwe 400	1 week ago
CVE-2026-74253	Code Injection in CVE-2026-74253 (CVE-2026-74253) code injection in CVE-2026-74253 (CVE-2026-74253). Risk of unauthorized operations or information disclosure.		Remote Code Execution Cwe 94	1 week ago
CVE-2026-74254	SQL Injection in sqli (CVE-2026-74254) SQL injection in sqli (CVE-2026-74254). Risk of unauthorized operations or information disclosure.		SQL Injection Cwe 89	1 week ago
CVE-2026-51346	SQL Injection in sqli (CVE-2026-51346) SQL injection in sqli (CVE-2026-51346). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89	1 week ago
CVE-2026-50769	SQL Injection in sqli (CVE-2026-50769) SQL injection in sqli (CVE-2026-50769). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89	1 week ago
CVE-2026-50771	Cross-Site Scripting (XSS) in CVE-2026-50771 (CVE-2026-50771) cross-site scripting in CVE-2026-50771 (CVE-2026-50771). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-73522	Vulnerability in dos (CVE-2026-73522) vulnerability in dos (CVE-2026-73522). Data can be tampered with by attackers.	High	Denial of Service Cwe 121	1 week ago
CVE-2026-75054	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-75054) SSRF in ssrf (CVE-2026-75054). Confidential information can be exposed externally.	Medium	Server-Side Request Forgery Cwe 918	1 week ago
CVE-2026-75053	In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint	Medium	Server-Side Request Forgery Cwe 918	1 week ago
CVE-2026-75056	In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible	High	Remote Code Execution Cwe 78	1 week ago
CVE-2026-75050	Vulnerability in dos (CVE-2026-75050) vulnerability in dos (CVE-2026-75050). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770	1 week ago
CVE-2026-75047	Vulnerability in dos (CVE-2026-75047) vulnerability in dos (CVE-2026-75047). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 409	1 week ago
CVE-2026-75048	Cross-Site Scripting (XSS) in CVE-2026-75048 (CVE-2026-75048) cross-site scripting in CVE-2026-75048 (CVE-2026-75048). Confidential information can be exposed externally.	High	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-68762	In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible	Medium	Denial of Service Cwe 835	1 week ago
CVE-2026-33437	Cross-Site Scripting (XSS) in CVE-2026-33437 (CVE-2026-33437) cross-site scripting in CVE-2026-33437 (CVE-2026-33437). Confidential information can be exposed externally.	High	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-55090	Cross-Site Scripting (XSS) in ep_etherpad-lite (CVE-2026-55090) cross-site scripting in ep_etherpad-lite (CVE-2026-55090). Risk of unauthorized operations or information disclosure. Exploitable via ``getHTMLFromAtext``. Mitigation: upgrade to `3.3.0` or later.		Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-9771	Vulnerability in c (CVE-2026-9771) vulnerability in c (CVE-2026-9771). Successful exploitation can lead to full system takeover.	High	C Privilege Escalation Cwe 822 Cwe 862	1 week ago
CVE-2026-12629	Vulnerability in c (CVE-2026-12629) vulnerability in c (CVE-2026-12629). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 835	1 week ago
CVE-2026-12519	Out-of-Bounds Write in c (CVE-2026-12519) out-of-bounds write in c (CVE-2026-12519). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 787	1 week ago
CVE-2025-27770	Vulnerability in CVE-2025-27770 (CVE-2025-27770) vulnerability in CVE-2025-27770 (CVE-2025-27770). Risk of unauthorized operations or information disclosure. Exploitable via ``checks``.		Remote Code Execution Cwe 74	1 week ago
CVE-2025-27771	Vulnerability in CVE-2025-27771 (CVE-2025-27771) vulnerability in CVE-2025-27771 (CVE-2025-27771). Risk of unauthorized operations or information disclosure. Exploitable via ``checks``.		Remote Code Execution Cwe 74	1 week ago
CVE-2025-27772	Vulnerability in CVE-2025-27772 (CVE-2025-27772) vulnerability in CVE-2025-27772 (CVE-2025-27772). Risk of unauthorized operations or information disclosure. Exploitable via ``checks``.		Remote Code Execution Cwe 74	1 week ago
CVE-2026-59909	Vulnerability in path-traversal (CVE-2026-59909) vulnerability in path-traversal (CVE-2026-59909). Data can be tampered with by attackers.	High	Path Traversal Cwe 35 Dell Objectscale	1 week ago
CVE-2026-56089	Vulnerability in path-traversal (CVE-2026-56089) vulnerability in path-traversal (CVE-2026-56089). Risk of unauthorized operations or information disclosure.	Low	Path Traversal Cwe 35 Dell Objectscale	1 week ago
CVE-2026-75006	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-75006) SSRF in ssrf (CVE-2026-75006). Risk of unauthorized operations or information disclosure.	Medium	Server-Side Request Forgery Cwe 918	1 week ago
CVE-2026-15218	Vulnerability in CVE-2026-15218 (CVE-2026-15218) vulnerability in CVE-2026-15218 (CVE-2026-15218). Confidential information can be exposed externally.	High	Remote Code Execution Cwe 266	1 week ago
CVE-2026-16139	Vulnerability in CVE-2026-16139 (CVE-2026-16139) vulnerability in CVE-2026-16139 (CVE-2026-16139). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 20 Cwe 22 Cwe 73	1 week ago
CVE-2026-16137	Path Traversal in path-traversal (CVE-2026-16137) path traversal in path-traversal (CVE-2026-16137). Successful exploitation can lead to full system takeover.	High	Path Traversal Cwe 22 Cwe 73 Cwe 434	1 week ago
CVE-2026-74999	Cross-Site Scripting (XSS) in CVE-2026-74999 (CVE-2026-74999) cross-site scripting in CVE-2026-74999 (CVE-2026-74999). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-16138	Unsafe Deserialization in deserialization (CVE-2026-16138) vulnerability in deserialization (CVE-2026-16138). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 502	1 week ago
CVE-2026-75007	Command Injection in privilege-escalation (CVE-2026-75007) command injection in privilege-escalation (CVE-2026-75007). Risk of unauthorized operations or information disclosure.	Medium	Privilege Escalation Cwe 77	1 week ago

Vulnerabilities

🍪 About cookies