Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2026-38808	SQL Injection in sqli (CVE-2026-38808) SQL injection in sqli (CVE-2026-38808). Risk of unauthorized operations or information disclosure.	Medium	Java SQL Injection Cwe 89	1 month ago
CVE-2026-48147	Vulnerability in @budibase/backend-core (CVE-2026-48147) vulnerability in @budibase/backend-core (CVE-2026-48147). Data can be tampered with by attackers. Exploitable via `POST /api/global/users/invite`. Mitigation: upgrade to `3.35.4` or later.	Medium	Cross-Site Request Forgery Cwe 185 Cwe 352	1 month ago
CVE-2026-48150	Vulnerability in @budibase/server (CVE-2026-48150) vulnerability in @budibase/server (CVE-2026-48150). Confidential information can be exposed externally. Exploitable via `GET /api/global/self/api_key`. Mitigation: upgrade to `3.39.0` or later.	Critical	Privilege Escalation Cwe 915	1 month ago
CVE-2026-48149	Cross-Site Scripting (XSS) in CVE-2026-48149 (CVE-2026-48149) cross-site scripting in CVE-2026-48149 (CVE-2026-48149). Confidential information can be exposed externally. Mitigation: upgrade to `3.39.0` or later.	High	Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-48146	SSRF (Server-Side Request Forgery) in @budibase/server (CVE-2026-48146) SSRF in @budibase/server (CVE-2026-48146). Confidential information can be exposed externally. Exploitable via ``fetchWithBlacklist``. Mitigation: upgrade to `3.39.0` or later.	High	Server-Side Request Forgery Cwe 918	1 month ago
CVE-2026-44378	Vulnerability in c (CVE-2026-44378) vulnerability in c (CVE-2026-44378). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.12.0` or later.	High	C Denial of Service Cwe 407 Botan Project +1	1 month ago
CVE-2026-45357	Vulnerability in liquidjs (CVE-2026-45357) vulnerability in liquidjs (CVE-2026-45357). Risk of unauthorized operations or information disclosure. Exploitable via ``date``.	High	JavaScript Denial of Service Cwe 400	1 month ago
CVE-2026-42083	Free5GC PCF: Missing authentication middleware in Npcf_SMPolicyControl allows access to SM policy handlers and disclosure of subscriber SUPI Free5GC PCF: Missing authentication middleware in Npcf_SMPolicyControl allows access to SM policy handlers and disclosure of subscriber SUPI	High	Cwe 862 Authentication Bypass Go 5G +1	1 month ago
CVE-2026-38931	Cross-Site Scripting (XSS) in CVE-2026-38931 (CVE-2026-38931) cross-site scripting in CVE-2026-38931 (CVE-2026-38931). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-38930	SQL Injection in CVE-2026-38930 (CVE-2026-38930) SQL injection in CVE-2026-38930 (CVE-2026-38930). Risk of unauthorized operations or information disclosure.	Medium	PHP Authentication Bypass Cwe 89	1 month ago
CVE-2025-68712	Vulnerability in c (CVE-2025-68712) vulnerability in c (CVE-2025-68712). Confidential information can be exposed externally.	Medium	C Privilege Escalation Cwe 285 Cwe 287	1 month ago
CVE-2026-45890	Vulnerability in dos (CVE-2026-45890) vulnerability in dos (CVE-2026-45890). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Linux Linux Kernel	1 month ago
CVE-2026-45855	Vulnerability in dos (CVE-2026-45855) vulnerability in dos (CVE-2026-45855). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Linux Linux Kernel	1 month ago
CVE-2026-3676	Vulnerability in dos (CVE-2026-3676) vulnerability in dos (CVE-2026-3676). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 1284 Ibm Cloud Application Performance Managemen	1 month ago
CVE-2026-35087	Vulnerability in CVE-2026-35087 (CVE-2026-35087) vulnerability in CVE-2026-35087 (CVE-2026-35087). Risk of unauthorized operations or information disclosure.		Authentication Bypass Cwe 288	1 month ago
CVE-2026-36540	Command Injection in CVE-2026-36540 (CVE-2026-36540) command injection in CVE-2026-36540 (CVE-2026-36540). Risk of unauthorized operations or information disclosure.	High	Remote Code Execution Cwe 77	1 month ago
CVE-2025-3633	Cross-Site Scripting (XSS) in ibm (CVE-2025-3633) cross-site scripting in ibm (CVE-2025-3633). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Ibm +2	1 month ago
CVE-2026-1718	Vulnerability in dos (CVE-2026-1718) vulnerability in dos (CVE-2026-1718). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770 Ibm Db2 +3	1 month ago
CVE-2026-9674	Cross-Site Request Forgery (CSRF) in org.jenkins-ci.plugins:jenkins-multijob-plugin (CVE-2026-9674) vulnerability in org.jenkins-ci.plugins:jenkins-multijob-plugin (CVE-2026-9674). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `669.v9d96a` or later.	Medium	Cross-Site Request Forgery Cwe 352 Jenkins Multijob	1 month ago
CVE-2026-49102	Cross-Site Scripting (XSS) in CVE-2026-49102 (CVE-2026-49102) cross-site scripting in CVE-2026-49102 (CVE-2026-49102). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-49046	SQL Injection in sqli (CVE-2026-49046) SQL injection in sqli (CVE-2026-49046). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	1 month ago
CVE-2026-48925	Cross-Site Request Forgery (CSRF) in org.jenkins-ci.plugins:github-integration-parent (CVE-2026-48925) vulnerability in org.jenkins-ci.plugins:github-integration-parent (CVE-2026-48925). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.7.4` or later.	Medium	Cross-Site Request Forgery Cwe 352 Kostyasha Github Integration	1 month ago
CVE-2026-49044	Cross-Site Scripting (XSS) in CVE-2026-49044 (CVE-2026-49044) cross-site scripting in CVE-2026-49044 (CVE-2026-49044). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-48927	Cross-Site Scripting (XSS) in org.jenkins-ci.plugins:buildgraph-view (CVE-2026-48927) cross-site scripting in org.jenkins-ci.plugins:buildgraph-view (CVE-2026-48927). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Jenkins Buildgraph View	1 month ago
CVE-2026-48922	Path Traversal in org.jenkins-ci.plugins:credentials-binding (CVE-2026-48922) path traversal in org.jenkins-ci.plugins:credentials-binding (CVE-2026-48922). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `725.ve52b` or later.	High	Remote Code Execution Cwe 20 Jenkins Credentials Binding	1 month ago
CVE-2026-47118	Path Traversal in path-traversal (CVE-2026-47118) path traversal in path-traversal (CVE-2026-47118). Confidential information can be exposed externally.	Medium	Path Traversal Cwe 22	1 month ago
CVE-2026-48544	Path Traversal in taipy (CVE-2026-48544) path traversal in taipy (CVE-2026-48544). Confidential information can be exposed externally.	High	Flask Path Traversal Cwe 22	1 month ago
CVE-2026-47119	Cross-Site Scripting (XSS) in CVE-2026-47119 (CVE-2026-47119) cross-site scripting in CVE-2026-47119 (CVE-2026-47119). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-30498	Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-30498) vulnerability in csrf (CVE-2026-30498). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Request Forgery Cwe 352	1 month ago
CVE-2026-9704	Vulnerability in org.keycloak:keycloak-server-spi-private (CVE-2026-9704) vulnerability in org.keycloak:keycloak-server-spi-private (CVE-2026-9704). Confidential information can be exposed externally. Mitigation: upgrade to `26.6.3` or later.	Medium	Privilege Escalation Cwe 1284 Redhat Build Of Keycloak	1 month ago
CVE-2026-8180	Vulnerability in dos (CVE-2026-8180) vulnerability in dos (CVE-2026-8180). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 476 Ibm Aspera High Speed Transfer Endpoint +1	1 month ago
CVE-2026-7254	Vulnerability in dos (CVE-2026-7254) vulnerability in dos (CVE-2026-7254). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 1284 Ibm Openbmc	1 month ago
CVE-2026-7528	Vulnerability in dos (CVE-2026-7528) vulnerability in dos (CVE-2026-7528). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Langflow	1 month ago
CVE-2026-7876	IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19	Critical	Cwe 287 Ibm Aspera High Speed Transfer Server For Cloud Pak For Integration Authentication Bypass	1 month ago
CVE-2026-8175	Vulnerability in dos (CVE-2026-8175) vulnerability in dos (CVE-2026-8175). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Authentication Bypass Denial of Service Cwe 122 +3	1 month ago
CVE-2026-7524	Path Traversal in langflow (CVE-2026-7524) path traversal in langflow (CVE-2026-7524). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 22 Langflow	1 month ago
CVE-2026-6051	Vulnerability in dos (CVE-2026-6051) vulnerability in dos (CVE-2026-6051). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 400 Ibm Db2 +6	1 month ago
CVE-2026-6053	Vulnerability in dos (CVE-2026-6053) vulnerability in dos (CVE-2026-6053). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 770 Ibm Db2 +6	1 month ago
CVE-2026-4410	Vulnerability in c (CVE-2026-4410) vulnerability in c (CVE-2026-4410). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 400 Ibm +1	1 month ago
CVE-2026-47104	Out-of-Bounds Read in c (CVE-2026-47104) vulnerability in c (CVE-2026-47104). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 125 Libusb	1 month ago
CVE-2026-42791	Vulnerability in erlang (CVE-2026-42791) vulnerability in erlang (CVE-2026-42791). Risk of unauthorized operations or information disclosure.	Low	Authentication Bypass Cwe 295 Cwe 672 Erlang +1	1 month ago
CVE-2026-42761	SQL Injection in sqli (CVE-2026-42761) SQL injection in sqli (CVE-2026-42761). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89	1 month ago
CVE-2026-42756	Path Traversal in path-traversal (CVE-2026-42756) path traversal in path-traversal (CVE-2026-42756). Successful exploitation can lead to full system takeover.	Critical	Path Traversal Cwe 22	1 month ago
CVE-2026-42757	Path Traversal in path-traversal (CVE-2026-42757) path traversal in path-traversal (CVE-2026-42757). Successful exploitation can lead to full system takeover.	Critical	Path Traversal Cwe 22	1 month ago
CVE-2026-42758	Vulnerability in privilege-escalation (CVE-2026-42758) vulnerability in privilege-escalation (CVE-2026-42758). Successful exploitation can lead to full system takeover.	Critical	Privilege Escalation Cwe 266	1 month ago
CVE-2026-42760	Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and... Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and...	High	WordPress Authentication Bypass Cwe 288	1 month ago
CVE-2026-42762	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...	High	Cross-Site Scripting Cwe 79 WordPress PHP	1 month ago
CVE-2026-42759	Cross-Site Scripting (XSS) in CVE-2026-42759 (CVE-2026-42759) cross-site scripting in CVE-2026-42759 (CVE-2026-42759). Risk of unauthorized operations or information disclosure.	High	Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-42747	SQL Injection in sqli (CVE-2026-42747) SQL injection in sqli (CVE-2026-42747). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89	1 month ago
CVE-2026-42755	SQL Injection in sqli (CVE-2026-42755) SQL injection in sqli (CVE-2026-42755). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89	1 month ago

Vulnerabilities

🍪 About cookies