Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2026-56038	Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions. Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions.	High	Privilege Escalation Cwe 862	1 week ago
CVE-2026-56047	Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.3 versions. Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.3 versions.	High	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-56041	Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions. Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions.	High	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-56043	Unauthenticated Cross Site Scripting (XSS) in Customer Reviews for WooCommerce <= 5.110.1 versions. Unauthenticated Cross Site Scripting (XSS) in Customer Reviews for WooCommerce <= 5.110.1 versions.	High	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-56040	Unauthenticated Cross Site Scripting (XSS) in Gutenverse Form <= 2.4.7 versions. Unauthenticated Cross Site Scripting (XSS) in Gutenverse Form <= 2.4.7 versions.	High	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-56039	Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions. Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions.	High	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-56044	Unauthenticated Cross Site Scripting (XSS) in Blog2Social <= 8.9.2 versions. Unauthenticated Cross Site Scripting (XSS) in Blog2Social <= 8.9.2 versions.	High	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-56045	Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions. Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions.	High	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-56064	Subscriber SQL Injection in Tourfic <= 2.22.5 versions. Subscriber SQL Injection in Tourfic <= 2.22.5 versions.	High	SQL Injection Cwe 89	1 week ago
CVE-2026-56011	Unauthenticated Cross Site Scripting (XSS) in MapPress Maps for WordPress <= 2.97.3 versions. Unauthenticated Cross Site Scripting (XSS) in MapPress Maps for WordPress <= 2.97.3 versions.	High	WordPress Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-30041	Vulnerability in dos (CVE-2026-30041) vulnerability in dos (CVE-2026-30041). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400	1 week ago
CVE-2026-56008	Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions. Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions.	High	Privilege Escalation Cwe 266	1 week ago
CVE-2026-56010	Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions. Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.	High	Privilege Escalation Cwe 266	1 week ago
CVE-2025-68052	Unauthenticated Cross Site Request Forgery (CSRF) in Eagle Booking <= 1.3.4.3 versions. Unauthenticated Cross Site Request Forgery (CSRF) in Eagle Booking <= 1.3.4.3 versions.	High	Cross-Site Request Forgery Cwe 352	1 week ago
CVE-2026-57877	Vulnerability in dos (CVE-2026-57877) vulnerability in dos (CVE-2026-57877). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 134	1 week ago
CVE-2026-57872	Path Traversal in path-traversal (CVE-2026-57872) path traversal in path-traversal (CVE-2026-57872). Confidential information can be exposed externally.	High	Path Traversal Cwe 22	1 week ago
CVE-2026-57876	Out-of-Bounds Write in dos (CVE-2026-57876) out-of-bounds write in dos (CVE-2026-57876). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 787	1 week ago
CVE-2026-57875	Vulnerability in dos (CVE-2026-57875) vulnerability in dos (CVE-2026-57875). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 476	1 week ago
CVE-2026-57874	Vulnerability in dos (CVE-2026-57874) vulnerability in dos (CVE-2026-57874). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 120	1 week ago
CVE-2026-57873	Vulnerability in dos (CVE-2026-57873) vulnerability in dos (CVE-2026-57873). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 476	1 week ago
CVE-2026-10835	Vulnerability in wordpress (CVE-2026-10835) vulnerability in wordpress (CVE-2026-10835). Confidential information can be exposed externally.	High	WordPress SQL Injection	1 week ago
CVE-2026-12975	XXE (XML External Entity) in ssrf (CVE-2026-12975) vulnerability in ssrf (CVE-2026-12975). Risk of unauthorized operations or information disclosure.	High	Server-Side Request Forgery Denial of Service Cwe 611 Redhat +1	1 week ago
CVE-2026-11800	Vulnerability in privilege-escalation (CVE-2026-11800) vulnerability in privilege-escalation (CVE-2026-11800). Confidential information can be exposed externally.	High	Privilege Escalation Cwe 347 Redhat Build Of Keycloak	1 week ago
CVE-2025-71324	Vulnerability in path-traversal (CVE-2025-71324) vulnerability in path-traversal (CVE-2025-71324). Confidential information can be exposed externally.	High	Path Traversal Cwe 73 Flowiseai Flowise	1 week ago
CVE-2026-40083	SQL Injection in sqli (CVE-2026-40083) SQL injection in sqli (CVE-2026-40083). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Cacti	1 week ago
CVE-2026-38637	Vulnerability in dos (CVE-2026-38637) vulnerability in dos (CVE-2026-38637). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400	1 week ago
CVE-2026-37149	SQL Injection in sqli (CVE-2026-37149) SQL injection in sqli (CVE-2026-37149). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89	1 week ago
CVE-2026-57520	Vulnerability in privilege-escalation (CVE-2026-57520) vulnerability in privilege-escalation (CVE-2026-57520). Data can be tampered with by attackers.	High	Privilege Escalation Cwe 862 Bitwarden Server	1 week ago
CVE-2026-38640	Vulnerability in dos (CVE-2026-38640) vulnerability in dos (CVE-2026-38640). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400	1 week ago
CVE-2026-12340	Out-of-Bounds Read in dos (CVE-2026-12340) vulnerability in dos (CVE-2026-12340). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 125 Wolfssl	1 week ago
CVE-2026-55958	Vulnerability in dos (CVE-2026-55958) vulnerability in dos (CVE-2026-55958). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 393 Cwe 787 Wolfssl	1 week ago
CVE-2026-56790	Vulnerability in c (CVE-2026-56790) vulnerability in c (CVE-2026-56790). Data can be tampered with by attackers.	High	C Denial of Service Cwe 193	1 week ago
CVE-2025-60464	Use-After-Free in c (CVE-2025-60464) vulnerability in c (CVE-2025-60464). Successful exploitation can lead to full system takeover.	High	C Denial of Service Cwe 416 Gpac	1 week ago
CVE-2026-56766	Vulnerability in CVE-2026-56766 (CVE-2026-56766) vulnerability in CVE-2026-56766 (CVE-2026-56766). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 121	1 week ago
CVE-2026-9086	Cross-Site Scripting (XSS) in redhat (CVE-2026-9086) cross-site scripting in redhat (CVE-2026-9086). Confidential information can be exposed externally.	High	JavaScript Cross-Site Scripting Cwe 79 Redhat +1	1 week ago
CVE-2026-45233	Path Traversal in path-traversal (CVE-2026-45233) path traversal in path-traversal (CVE-2026-45233). Data can be tampered with by attackers.	High	PHP Path Traversal Cwe 22	1 week ago
CVE-2026-55412	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-55412) SSRF in ssrf (CVE-2026-55412). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.20.178-lts` or later.	High	Server-Side Request Forgery Cwe 918	1 week ago
CVE-2026-54033	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-54033) SSRF in ssrf (CVE-2026-54033). Confidential information can be exposed externally. Mitigation: upgrade to `0.8.4-rc1` or later.	High	Server-Side Request Forgery Cwe 918 Librechat	1 week ago
CVE-2026-13351	Vulnerability in dos (CVE-2026-13351) vulnerability in dos (CVE-2026-13351). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 772 Zephyrproject Zephyr	1 week ago
CVE-2026-56071	Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions. Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions.	High	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-56051	Unauthenticated Cross Site Scripting (XSS) in TablePress <= 3.3.1 versions. Unauthenticated Cross Site Scripting (XSS) in TablePress <= 3.3.1 versions.	High	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-56049	Contributor Remote Code Execution (RCE) in Post Snippets <= 4.0.19 versions. Contributor Remote Code Execution (RCE) in Post Snippets <= 4.0.19 versions.	High	Remote Code Execution Cwe 94	1 week ago
CVE-2026-56122	Path Traversal in path-traversal (CVE-2026-56122) path traversal in path-traversal (CVE-2026-56122). Confidential information can be exposed externally.	High	Path Traversal Cwe 22	1 week ago
CVE-2026-56005	Subscriber Cross Site Scripting (XSS) in WP Activity Log <= 5.6.3.1 versions. Subscriber Cross Site Scripting (XSS) in WP Activity Log <= 5.6.3.1 versions.	High	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-56006	Unauthenticated Cross Site Scripting (XSS) in H5P <= 1.17.6 versions. Unauthenticated Cross Site Scripting (XSS) in H5P <= 1.17.6 versions.	High	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-56014	Unauthenticated Cross Site Scripting (XSS) in Master Slider <= 3.11.2 versions. Unauthenticated Cross Site Scripting (XSS) in Master Slider <= 3.11.2 versions.	High	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-54838	Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions. Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions.	High	SQL Injection Cwe 89	1 week ago
CVE-2026-54829	SQL Injection in sqli (CVE-2026-54829) SQL injection in sqli (CVE-2026-54829). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	1 week ago
CVE-2026-56042	Customer Cross Site Scripting (XSS) in Advanced Order Export For WooCommerce <= 4.0.9 versions. Customer Cross Site Scripting (XSS) in Advanced Order Export For WooCommerce <= 4.0.9 versions.	High	Cross-Site Scripting Cwe 79	1 week ago
CVE-2026-49506	Path Traversal in path-traversal (CVE-2026-49506) path traversal in path-traversal (CVE-2026-49506). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Path Traversal Cwe 22 Dell +1	1 week ago

Vulnerabilities

🍪 About cookies