Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2026-59553	Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions. Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions.	High	Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-59556	Cross-Site Scripting (XSS) in CVE-2026-59556 (CVE-2026-59556) cross-site scripting in CVE-2026-59556 (CVE-2026-59556). Risk of unauthorized operations or information disclosure.	High	Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-59558	Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions. Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions.	High	Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-59552	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-59552) SSRF in ssrf (CVE-2026-59552). Risk of unauthorized operations or information disclosure.	High	Server-Side Request Forgery Cwe 918	1 month ago
CVE-2026-59551	Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.	High	WordPress SQL Injection Cwe 89	1 month ago
CVE-2026-59537	SQL Injection in sqli (CVE-2026-59537) SQL injection in sqli (CVE-2026-59537). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	1 month ago
CVE-2026-17523	Vulnerability in privilege-escalation (CVE-2026-17523) vulnerability in privilege-escalation (CVE-2026-17523). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 825 C	1 month ago
CVE-2026-13726	Cross-Site Scripting (XSS) in wordpress (CVE-2026-13726) cross-site scripting in wordpress (CVE-2026-13726). Risk of unauthorized operations or information disclosure.	High	WordPress Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-17496	Cross-Site Scripting (XSS) in notegen (CVE-2026-17496) cross-site scripting in notegen (CVE-2026-17496). Confidential information can be exposed externally.	High	JavaScript Cross-Site Scripting Cwe 79 Notegen	1 month ago
CVE-2026-17497	OS Command Injection in notegen (CVE-2026-17497) OS command injection in notegen (CVE-2026-17497). Successful exploitation can lead to full system takeover.	High	JavaScript Python Remote Code Execution Cross-Site Scripting +4	1 month ago
CVE-2026-63720	Code Injection in CVE-2026-63720 (CVE-2026-63720) code injection in CVE-2026-63720 (CVE-2026-63720). Successful exploitation can lead to full system takeover.	High	Python Remote Code Execution Cwe 94	1 month ago
CVE-2026-15962	Unsafe Deserialization in wordpress (CVE-2026-15962) vulnerability in wordpress (CVE-2026-15962). Successful exploitation can lead to full system takeover.	High	PHP WordPress Insecure Deserialization Cwe 502	1 month ago
CVE-2026-64400	Vulnerability in path-traversal (CVE-2026-64400) vulnerability in path-traversal (CVE-2026-64400). Risk of unauthorized operations or information disclosure.	High	Path Traversal	1 month ago
CVE-2026-10818	Unrestricted File Upload in wordpress (CVE-2026-10818) vulnerability in wordpress (CVE-2026-10818). Successful exploitation can lead to full system takeover.	High	WordPress Remote Code Execution Cwe 434	1 month ago
CVE-2026-66374	Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the... Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the...	High	Remote Code Execution Cwe 1284 DNS Heap Overflow	1 month ago
CVE-2026-66373	Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,... Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,...	High	Remote Code Execution Cwe 415 Redis	1 month ago
CVE-2026-73493	Vulnerability in org.http4s:http4s-blaze-server_2.13 (CVE-2026-73493) vulnerability in org.http4s:http4s-blaze-server_2.13 (CVE-2026-73493). Risk of unauthorized operations or information disclosure. Exploitable via ``OutOfMemoryError``. Mitigation: upgrade to `1.0.0-M42` or later.	High	Denial of Service Cwe 770	1 month ago
CVE-2026-66040	FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability... FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability...	High	Cwe 122 Ffmpeg Remote Code Execution	1 month ago
CVE-2026-66036	FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability... FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability...	High	Cwe 122 Ffmpeg Remote Code Execution	1 month ago
CVE-2026-73507	Vulnerability in io.netty:netty-codec-xml (CVE-2026-73507) vulnerability in io.netty:netty-codec-xml (CVE-2026-73507). Risk of unauthorized operations or information disclosure. Exploitable via ``maxFrameLength``. Mitigation: upgrade to `4.1.136.Final` or later.	High	Denial of Service Cwe 400	1 month ago
CVE-2026-9765	Vulnerability in privilege-escalation (CVE-2026-9765) vulnerability in privilege-escalation (CVE-2026-9765). Data can be tampered with by attackers.	High	Privilege Escalation Cwe 284	1 month ago
CVE-2026-66144	Vulnerability in dos (CVE-2026-66144) vulnerability in dos (CVE-2026-66144). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Apache Neethi	1 month ago
CVE-2026-66142	Vulnerability in apache (CVE-2026-66142) vulnerability in apache (CVE-2026-66142). Risk of unauthorized operations or information disclosure.	High	Apache Denial of Service Cwe 400 Neethi	1 month ago
CVE-2026-66143	Vulnerability in apache (CVE-2026-66143) vulnerability in apache (CVE-2026-66143). Risk of unauthorized operations or information disclosure.	High	Apache Denial of Service Cwe 400 Neethi	1 month ago
CVE-2026-15401	Cross-Site Scripting (XSS) in wordpress (CVE-2026-15401) cross-site scripting in wordpress (CVE-2026-15401). Risk of unauthorized operations or information disclosure.	High	WordPress Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-49744	Vulnerability in privilege-escalation (CVE-2026-49744) vulnerability in privilege-escalation (CVE-2026-49744). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 823 Imaginationtech Ddk +4	1 month ago
CVE-2026-16870	Vulnerability in CVE-2026-16870 (CVE-2026-16870) vulnerability in CVE-2026-16870 (CVE-2026-16870). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 121 Cwe 787 Cwe 918 +1	1 month ago
CVE-2026-66141	Vulnerability in privilege-escalation (CVE-2026-66141) vulnerability in privilege-escalation (CVE-2026-66141). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 829 Exim	1 month ago
CVE-2026-66140	Vulnerability in path-traversal (CVE-2026-66140) vulnerability in path-traversal (CVE-2026-66140). Successful exploitation can lead to full system takeover.	High	Path Traversal Cwe 24 Exim	1 month ago
CVE-2026-12736	Privilege Escalation in wordpress (CVE-2026-12736) vulnerability in wordpress (CVE-2026-12736). Successful exploitation can lead to full system takeover. Exploitable via `POST /wp-json/wpify-woo/v1/option`.	High	WordPress Privilege Escalation Cwe 269	1 month ago
CVE-2026-56167	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-56167) SSRF in ssrf (CVE-2026-56167). Confidential information can be exposed externally.	High	Server-Side Request Forgery Cwe 918 Microsoft Azure Ai Search	1 month ago
CVE-2026-65694	Path Traversal in path-traversal (CVE-2026-65694) path traversal in path-traversal (CVE-2026-65694). Confidential information can be exposed externally.	High	Path Traversal Cwe 22	1 month ago
CVE-2026-63313	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-63313) SSRF in ssrf (CVE-2026-63313). Confidential information can be exposed externally.	High	Server-Side Request Forgery Cwe 918	1 month ago
CVE-2026-16765	Vulnerability in sqli (CVE-2026-16765) vulnerability in sqli (CVE-2026-16765). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	1 month ago
CVE-2024-58355	Vulnerability in react (CVE-2024-58355) vulnerability in react (CVE-2024-58355). Confidential information can be exposed externally. Mitigation: upgrade to `4.7.16` or later.	High	JavaScript React Cross-Site Scripting Cwe 80	1 month ago
CVE-2024-58353	Vulnerability in react (CVE-2024-58353) vulnerability in react (CVE-2024-58353). Confidential information can be exposed externally.	High	JavaScript React Cross-Site Scripting Cwe 80	1 month ago
CVE-2026-49035	Vulnerability in dos (CVE-2026-49035) vulnerability in dos (CVE-2026-49035). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Denial of Service Cwe 122	1 month ago
CVE-2026-15968	Cross-Site Scripting (XSS) in progress (CVE-2026-15968) cross-site scripting in progress (CVE-2026-15968). Successful exploitation can lead to full system takeover.	High	Cross-Site Scripting Cwe 79 Progress Moveit Transfer	1 month ago
CVE-2026-16002	Out-of-Bounds Read in dos (CVE-2026-16002) vulnerability in dos (CVE-2026-16002). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 125	1 month ago
CVE-2026-47219	Vulnerability in find-my-way (CVE-2026-47219) vulnerability in find-my-way (CVE-2026-47219). Risk of unauthorized operations or information disclosure. Exploitable via ``req.method``. Mitigation: upgrade to `9.7.0` or later.	High	Denial of Service Cwe 20 Cwe 248	1 month ago
CVE-2026-16756	Vulnerability in Amazon aws-smithy-http-server (CVE-2026-16756) vulnerability in Amazon aws-smithy-http-server (CVE-2026-16756). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.66.5` or later.	High	AWS Amazon Cloud Denial of Service +1	1 month ago
CVE-2026-63765	Vulnerability in CVE-2026-63765 (CVE-2026-63765) vulnerability in CVE-2026-63765 (CVE-2026-63765). Data can be tampered with by attackers.	High	Authentication Bypass Cwe 306	1 month ago
CVE-2026-65918	Out-of-Bounds Read in dos (CVE-2026-65918) vulnerability in dos (CVE-2026-65918). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 125 Linuxfoundation Torchvision	1 month ago
CVE-2026-65702	Path Traversal in path-traversal (CVE-2026-65702) path traversal in path-traversal (CVE-2026-65702). Data can be tampered with by attackers.	High	Path Traversal Cwe 22	1 month ago
CVE-2026-44909	Vulnerability in dos (CVE-2026-44909) vulnerability in dos (CVE-2026-44909). Risk of unauthorized operations or information disclosure.	High	Denial of Service	1 month ago
CVE-2026-65690	Path Traversal in path-traversal (CVE-2026-65690) path traversal in path-traversal (CVE-2026-65690). Successful exploitation can lead to full system takeover.	High	Path Traversal Cwe 22 Syncfusion Standalone Report Designer	1 month ago
CVE-2026-45623	Path Traversal in postcss (CVE-2026-45623) path traversal in postcss (CVE-2026-45623). Confidential information can be exposed externally. Exploitable via ``PreviousMap``. Mitigation: upgrade to `8.5.12` or later.	High	Denial of Service Cwe 22 Cwe 200 Postcss	1 month ago
CVE-2026-59933	Vulnerability in phpoffice/phpspreadsheet (CVE-2026-59933) vulnerability in phpoffice/phpspreadsheet (CVE-2026-59933). Risk of unauthorized operations or information disclosure. Exploitable via ``bigBlockChain``. Mitigation: upgrade to `1.30.6` or later.	High	PHP Denial of Service Cwe 400 Cwe 835	1 month ago
CVE-2026-59932	Vulnerability in phpoffice/phpspreadsheet (CVE-2026-59932) vulnerability in phpoffice/phpspreadsheet (CVE-2026-59932). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.30.6` or later.	High	PHP Denial of Service Cwe 400 Cwe 409	1 month ago
CVE-2026-59931	SSRF (Server-Side Request Forgery) in phpoffice/phpspreadsheet (CVE-2026-59931) SSRF in phpoffice/phpspreadsheet (CVE-2026-59931). Confidential information can be exposed externally. Exploitable via ``example.com``. Mitigation: upgrade to `1.30.6` or later.	High	PHP Server-Side Request Forgery Cwe 918	1 month ago

Vulnerabilities

🍪 About cookies