Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2026-43633	Unsafe Deserialization in deserialization (CVE-2026-43633) vulnerability in deserialization (CVE-2026-43633). Successful exploitation can lead to full system takeover.	Critical	PHP JavaScript Insecure Deserialization Cwe 502	1 month ago
CVE-2026-42099	Vulnerability in sparxsystems (CVE-2026-42099) vulnerability in sparxsystems (CVE-2026-42099). Successful exploitation can lead to full system takeover.	High	PHP Remote Code Execution Cwe 362 Sparxsystems +1	1 month ago
CVE-2025-40903	Cross-Site Scripting (XSS) in nozominetworks (CVE-2025-40903) cross-site scripting in nozominetworks (CVE-2025-40903). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Nozominetworks Cmc +1	1 month ago
CVE-2025-40904	Cross-Site Scripting (XSS) in nozominetworks (CVE-2025-40904) cross-site scripting in nozominetworks (CVE-2025-40904). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Nozominetworks Cmc +1	1 month ago
CVE-2025-40900	Vulnerability in angular (CVE-2025-40900) vulnerability in angular (CVE-2025-40900). Risk of unauthorized operations or information disclosure.	Medium	Angular Cross-Site Scripting Cwe 1336 Nozominetworks +2	1 month ago
CVE-2025-40901	Cross-Site Scripting (XSS) in nozominetworks (CVE-2025-40901) cross-site scripting in nozominetworks (CVE-2025-40901). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Nozominetworks Cmc +1	1 month ago
CVE-2025-40902	Cross-Site Scripting (XSS) in nozominetworks (CVE-2025-40902) cross-site scripting in nozominetworks (CVE-2025-40902). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Nozominetworks Cmc +1	1 month ago
CVE-2026-8912	SQL Injection in wordpress (CVE-2026-8912) SQL injection in wordpress (CVE-2026-8912). Confidential information can be exposed externally.	High	PHP WordPress SQL Injection Cwe 89	1 month ago
CVE-2026-4883	Unrestricted File Upload in wordpress (CVE-2026-4883) vulnerability in wordpress (CVE-2026-4883). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Remote Code Execution Cwe 434	1 month ago
CVE-2026-7307	Vulnerability in org.keycloak:keycloak-saml-core (CVE-2026-7307) vulnerability in org.keycloak:keycloak-saml-core (CVE-2026-7307). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.6.2` or later.	High	C Denial of Service Cwe 1286 Redhat +1	1 month ago
CVE-2026-7507	Vulnerability in org.keycloak:keycloak-services (CVE-2026-7507) vulnerability in org.keycloak:keycloak-services (CVE-2026-7507). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `26.6.2` or later.	High	Cross-Site Request Forgery Cwe 290 Redhat Build Of Keycloak	1 month ago
CVE-2026-43492	Vulnerability in dos (CVE-2026-43492) vulnerability in dos (CVE-2026-43492). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 190 Linux Linux Kernel	1 month ago
CVE-2026-46725	Unsafe Deserialization in mmc/ceselector (CVE-2026-46725) vulnerability in mmc/ceselector (CVE-2026-46725). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.3` or later.		PHP Remote Code Execution Cwe 502	1 month ago
CVE-2026-8727	Unsafe Deserialization in tomasnorre/crawler (CVE-2026-8727) vulnerability in tomasnorre/crawler (CVE-2026-8727). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.13` or later.		PHP Remote Code Execution Cwe 502	1 month ago
CVE-2026-46724	Path Traversal in tpwd/ke_search (CVE-2026-46724) path traversal in tpwd/ke_search (CVE-2026-46724). Risk of unauthorized operations or information disclosure. Exploitable via ``ke_search``. Mitigation: upgrade to `4.6.7` or later.		Path Traversal Cwe 22	1 month ago
CVE-2026-8827	SQL Injection in friendsoftypo3/tt-address (CVE-2026-8827) SQL injection in friendsoftypo3/tt-address (CVE-2026-8827). Risk of unauthorized operations or information disclosure. Exploitable via ``tt_address``. Mitigation: upgrade to `8.1.2` or later.		SQL Injection Cwe 89	1 month ago
CVE-2026-45434	Authentication Bypass in apache (CVE-2026-45434) authentication bypass in apache (CVE-2026-45434). Successful exploitation can lead to full system takeover.	Critical	Apache Remote Code Execution Cwe 287 Ofbiz	1 month ago
CVE-2026-31910	SSRF (Server-Side Request Forgery) in apache (CVE-2026-31910) SSRF in apache (CVE-2026-31910). Confidential information can be exposed externally.	High	Apache Server-Side Request Forgery Cwe 918 Ofbiz	1 month ago
CVE-2026-31379	Path Traversal in apache (CVE-2026-31379) path traversal in apache (CVE-2026-31379). Risk of unauthorized operations or information disclosure.	Medium	Apache Cross-Site Scripting Path Traversal Cwe 22 +3	1 month ago
CVE-2026-31906	Cross-Site Scripting (XSS) in apache (CVE-2026-31906) cross-site scripting in apache (CVE-2026-31906). Risk of unauthorized operations or information disclosure.	Medium	Apache Cross-Site Scripting Cwe 79 Ofbiz	1 month ago
CVE-2026-29220	Path Traversal in apache (CVE-2026-29220) path traversal in apache (CVE-2026-29220). Risk of unauthorized operations or information disclosure.	Medium	Apache Path Traversal Cwe 22 Ofbiz	1 month ago
CVE-2026-29226	SSRF (Server-Side Request Forgery) in apache (CVE-2026-29226) SSRF in apache (CVE-2026-29226). Risk of unauthorized operations or information disclosure.	High	Apache Server-Side Request Forgery Cwe 918 Ofbiz	1 month ago
CVE-2026-4885	Unrestricted File Upload in wordpress (CVE-2026-4885) vulnerability in wordpress (CVE-2026-4885). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Remote Code Execution Cwe 434	1 month ago
CVE-2026-8813	Vulnerability in exifreader (CVE-2026-8813) vulnerability in exifreader (CVE-2026-8813). Risk of unauthorized operations or information disclosure. Exploitable via ``multiLocalizedUnicodeType``. Mitigation: upgrade to `4.39.0` or later.	High	Denial of Service Cwe 1284	1 month ago
CVE-2026-47307	Vulnerability in dos (CVE-2026-47307) vulnerability in dos (CVE-2026-47307). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 476 Samsung Walrus	1 month ago
CVE-2026-33565	in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.	Low	Denial of Service Cwe 364	1 month ago
CVE-2026-28751	in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.	Low	Denial of Service Cwe 20	1 month ago
CVE-2026-27781	in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.	Low	Denial of Service Cwe 190	1 month ago
CVE-2026-25781	in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered. in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered.	High	Denial of Service Cwe 787 Openharmony	1 month ago
CVE-2026-25110	in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.	Low	Denial of Service Cwe 476	1 month ago
CVE-2026-27648	in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre... in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre...	High	Cwe 787 Remote Code Execution	1 month ago
CVE-2026-24792	in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre... in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre...	High	Cwe 364 Openharmony Remote Code Execution	1 month ago
CVE-2026-22069	A local privilege escalation vulnerability exists in O+ Connect because it fails to validate the... A local privilege escalation vulnerability exists in O+ Connect because it fails to validate the...	High	Privilege Escalation Cwe 266	1 month ago
CVE-2026-33234	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-33234) SSRF in ssrf (CVE-2026-33234). Risk of unauthorized operations or information disclosure.	Medium	Python Server-Side Request Forgery Cwe 918	1 month ago
CVE-2026-33232	Vulnerability in dos (CVE-2026-33232) vulnerability in dos (CVE-2026-33232). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cwe 459 Cwe 770	1 month ago
CVE-2026-33233	Code Injection in deserialization (CVE-2026-33233) code injection in deserialization (CVE-2026-33233). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 94 Cwe 345 Cwe 502	1 month ago
CVE-2026-32323	Privilege Escalation in privilege-escalation (CVE-2026-32323) vulnerability in privilege-escalation (CVE-2026-32323). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 269 Cwe 345 Cwe 427 +2	1 month ago
CVE-2026-30950	AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.6.36 through 0.6.50 are vulnerable to Authenticated Session Hijack... AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.6.36 through 0.6.50 are vulnerable to Authenticated Session Hijacking via IDOR. If an authenticated attacker can determine the session_id of another user's session, t...	High	Cwe 862 Authentication Bypass IDOR	1 month ago
CVE-2026-27964	Cross-Site Scripting (XSS) in facturascripts/facturascripts (CVE-2026-27964) cross-site scripting in facturascripts/facturascripts (CVE-2026-27964). Risk of unauthorized operations or information disclosure.	Low	Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-27891	FacturaScripts is an open source accounting and invoicing software. Versions 2026 and below contain a critical vulnerability in the Plugins::add() function. The system fails to properly validate the f... FacturaScripts is an open source accounting and invoicing software. Versions 2026 and below contain a critical vulnerability in the Plugins::add() function. The system fails to properly validate the file paths within uploaded ZIP archives. This allows an attacker to perform a Zip Slip attack, leadin...	High	PHP Remote Code Execution Path Traversal Cwe 20 +2	1 month ago
CVE-2026-27737	Cross-Site Scripting (XSS) in CVE-2026-27737 (CVE-2026-27737) cross-site scripting in CVE-2026-27737 (CVE-2026-27737). Data can be tampered with by attackers.	Medium	Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-8851	SQL Injection in sqli (CVE-2026-8851) SQL injection in sqli (CVE-2026-8851). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	1 month ago
CVE-2026-47091	Path Traversal in path-traversal (CVE-2026-47091) path traversal in path-traversal (CVE-2026-47091). Risk of unauthorized operations or information disclosure.	Low	Path Traversal Cwe 22 Jarrodwatts Claude Hud	1 month ago
CVE-2026-26978	Unsafe Deserialization in CVE-2026-26978 (CVE-2026-26978) vulnerability in CVE-2026-26978 (CVE-2026-26978). Risk of unauthorized operations or information disclosure.		Remote Code Execution Cwe 502	1 month ago
CVE-2026-45686	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45686) vulnerability in go.opentelemetry.io/obi (CVE-2026-45686). Risk of unauthorized operations or information disclosure. Exploitable via ``set``. Mitigation: upgrade to `0.9.0` or later.	High	Denial of Service Cwe 190 Opentelemetry Ebpf Instrumentation	1 month ago
CVE-2026-45685	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45685) vulnerability in go.opentelemetry.io/obi (CVE-2026-45685). Risk of unauthorized operations or information disclosure. Exploitable via ``parseOpMessage``. Mitigation: upgrade to `0.9.0` or later.	High	Denial of Service Cwe 20 Cwe 248 Cwe 704 +2	1 month ago
CVE-2026-45242	Vulnerability in @steipete/summarize (CVE-2026-45242) vulnerability in @steipete/summarize (CVE-2026-45242). Data can be tampered with by attackers. Mitigation: upgrade to `0.15.0` or later.	High	Path Traversal Cwe 862 Steipete Summarize	1 month ago
CVE-2026-45231	Cross-Site Scripting (XSS) in CVE-2026-45231 (CVE-2026-45231) cross-site scripting in CVE-2026-45231 (CVE-2026-45231). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-45495	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 20 Cwe 94 Cwe 119 +3	1 month ago
CVE-2026-29964	Cross-Site Scripting (XSS) in hsclabs (CVE-2026-29964) cross-site scripting in hsclabs (CVE-2026-29964). Risk of unauthorized operations or information disclosure.	Medium	PHP JavaScript Cross-Site Scripting Cwe 79 +2	1 month ago

Vulnerabilities

🍪 About cookies