Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2026-30950	AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.6.36 through 0.6.50 are vulnerable to Authenticated Session Hijack... AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.6.36 through 0.6.50 are vulnerable to Authenticated Session Hijacking via IDOR. If an authenticated attacker can determine the session_id of another user's session, t...	High	Cwe 862 Authentication Bypass IDOR	1 month ago
CVE-2026-27891	FacturaScripts is an open source accounting and invoicing software. Versions 2026 and below contain a critical vulnerability in the Plugins::add() function. The system fails to properly validate the f... FacturaScripts is an open source accounting and invoicing software. Versions 2026 and below contain a critical vulnerability in the Plugins::add() function. The system fails to properly validate the file paths within uploaded ZIP archives. This allows an attacker to perform a Zip Slip attack, leadin...	High	PHP Remote Code Execution Path Traversal Cwe 20 +2	1 month ago
CVE-2026-27964	Cross-Site Scripting (XSS) in facturascripts/facturascripts (CVE-2026-27964) cross-site scripting in facturascripts/facturascripts (CVE-2026-27964). Risk of unauthorized operations or information disclosure.	Low	Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-27892	Information Disclosure in facturascripts/facturascripts (CVE-2026-27892) vulnerability in facturascripts/facturascripts (CVE-2026-27892). Confidential information can be exposed externally. Exploitable via ``exiftool``.	Medium	Cwe 200 Cwe 212	1 month ago
CVE-2026-27737	Cross-Site Scripting (XSS) in CVE-2026-27737 (CVE-2026-27737) cross-site scripting in CVE-2026-27737 (CVE-2026-27737). Data can be tampered with by attackers.	Medium	Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-8851	SQL Injection in sqli (CVE-2026-8851) SQL injection in sqli (CVE-2026-8851). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	1 month ago
CVE-2026-47092	Vulnerability in jarrodwatts (CVE-2026-47092) vulnerability in jarrodwatts (CVE-2026-47092). Successful exploitation can lead to full system takeover.	High	Cwe 427 Jarrodwatts Claude Hud	1 month ago
CVE-2026-45244	Vulnerability in @steipete/summarize (CVE-2026-45244) vulnerability in @steipete/summarize (CVE-2026-45244). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.15.0` or later.	Medium	Cwe 862 Steipete Summarize	1 month ago
CVE-2026-21789	Authorization Flaw in CVE-2026-21789 (CVE-2026-21789) vulnerability in CVE-2026-21789 (CVE-2026-21789). Risk of unauthorized operations or information disclosure.	Medium	Cwe 863	1 month ago
CVE-2026-45245	SSRF (Server-Side Request Forgery) in @steipete/summarize (CVE-2026-45245) SSRF in @steipete/summarize (CVE-2026-45245). Confidential information can be exposed externally. Mitigation: upgrade to `0.15.1` or later.	High	Cwe 918 Cwe 940 Steipete Summarize	1 month ago
CVE-2026-47091	Path Traversal in path-traversal (CVE-2026-47091) path traversal in path-traversal (CVE-2026-47091). Risk of unauthorized operations or information disclosure.	Low	Path Traversal Cwe 22 Jarrodwatts Claude Hud	1 month ago
CVE-2026-45246	Vulnerability in steipete (CVE-2026-45246) vulnerability in steipete (CVE-2026-45246). Confidential information can be exposed externally.	Medium	Cwe 732 Steipete Summarize	1 month ago
CVE-2026-27130	OS Command Injection in CVE-2026-27130 (CVE-2026-27130) OS command injection in CVE-2026-27130 (CVE-2026-27130). Successful exploitation can lead to full system takeover.	Critical	Cwe 78	1 month ago
CVE-2026-26978	Unsafe Deserialization in CVE-2026-26978 (CVE-2026-26978) vulnerability in CVE-2026-26978 (CVE-2026-26978). Risk of unauthorized operations or information disclosure.		Remote Code Execution Cwe 502	1 month ago
CVE-2026-8838	Code Injection in Amazon redshift-connector (CVE-2026-8838) code injection in Amazon redshift-connector (CVE-2026-8838). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.14` or later.	Critical	AWS Amazon Cloud Python +2	1 month ago
CVE-2026-46559	Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-46559) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-46559). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.13.1` or later.	Medium	Cwe 193 Cwe 787 Imagemagick	1 month ago
CVE-2026-46523	ImageMagick: Use-After-Free in MSL decoder. ImageMagick: Use-After-Free in MSL decoder.	Medium	Cwe 416 Imagemagick Cwe 825	1 month ago
CVE-2026-46522	Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-46522) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-46522). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.13.1` or later.	High	Cwe 400 Cwe 835 Imagemagick	1 month ago
CVE-2026-46521	Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-46521) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-46521). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.13.1` or later.	Medium	Cwe 131 Cwe 252 Cwe 787 Cwe 835 +1	1 month ago
CVE-2026-46520	ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions	High	Cwe 122 Cwe 787 Imagemagick	1 month ago
CVE-2026-45664	Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-45664) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-45664). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.13.1` or later.	Medium	Cwe 400 Cwe 407 Cwe 674 Imagemagick +1	1 month ago
CVE-2026-45624	Out-of-Bounds Read in Magick.NET-Q16-AnyCPU (CVE-2026-45624) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-45624). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.13.1` or later.	Medium	Cwe 125 Cwe 129 Imagemagick	1 month ago
CVE-2026-45554	Vulnerability in nicegui (CVE-2026-45554) vulnerability in nicegui (CVE-2026-45554). Risk of unauthorized operations or information disclosure. Exploitable via ``RuntimeError``. Mitigation: upgrade to `3.12.0` or later.	Medium	Python Cwe 248 Cwe 770	1 month ago
CVE-2026-45553	Information Disclosure in nicegui (CVE-2026-45553) vulnerability in nicegui (CVE-2026-45553). Confidential information can be exposed externally. Exploitable via ``include``. Mitigation: upgrade to `3.12.0` or later.	High	Python Cwe 200	1 month ago
CVE-2026-45686	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45686) vulnerability in go.opentelemetry.io/obi (CVE-2026-45686). Risk of unauthorized operations or information disclosure. Exploitable via ``set``. Mitigation: upgrade to `0.9.0` or later.	High	Denial of Service Cwe 190 Opentelemetry Ebpf Instrumentation	1 month ago
CVE-2026-45685	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45685) vulnerability in go.opentelemetry.io/obi (CVE-2026-45685). Risk of unauthorized operations or information disclosure. Exploitable via ``parseOpMessage``. Mitigation: upgrade to `0.9.0` or later.	High	Denial of Service Cwe 20 Cwe 248 Cwe 704 +2	1 month ago
CVE-2026-45684	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45684) vulnerability in go.opentelemetry.io/obi (CVE-2026-45684). Risk of unauthorized operations or information disclosure. Exploitable via ``writev``. Mitigation: upgrade to `0.9.0` or later.	Medium	Cwe 126 Cwe 787 Opentelemetry Ebpf Instrumentation	1 month ago
CVE-2026-45682	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45682) vulnerability in go.opentelemetry.io/obi (CVE-2026-45682). Risk of unauthorized operations or information disclosure. Exploitable via ``CappedConcurrentHashMap``. Mitigation: upgrade to `0.9.0` or later.	Medium	Java Cwe 401 Cwe 770 Opentelemetry +1	1 month ago
CVE-2026-45683	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45683) vulnerability in go.opentelemetry.io/obi (CVE-2026-45683). Risk of unauthorized operations or information disclosure. Exploitable via ``bpf_probe_read``. Mitigation: upgrade to `0.9.0` or later.	Low	Java Cwe 127 Cwe 200 Opentelemetry +1	1 month ago
CVE-2026-45681	Out-of-Bounds Read in go.opentelemetry.io/obi (CVE-2026-45681) vulnerability in go.opentelemetry.io/obi (CVE-2026-45681). Confidential information can be exposed externally. Exploitable via ``k_kprobes_http2_buf_size``. Mitigation: upgrade to `0.9.0` or later.	Medium	Cwe 125 Cwe 130 Opentelemetry Ebpf Instrumentation	1 month ago
CVE-2026-45680	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45680) vulnerability in go.opentelemetry.io/obi (CVE-2026-45680). Risk of unauthorized operations or information disclosure. Exploitable via ``probeMetrics``. Mitigation: upgrade to `0.9.0` or later.	Medium	Cwe 400 Cwe 834 Opentelemetry Ebpf Instrumentation	1 month ago
CVE-2026-45242	Vulnerability in @steipete/summarize (CVE-2026-45242) vulnerability in @steipete/summarize (CVE-2026-45242). Data can be tampered with by attackers. Mitigation: upgrade to `0.15.0` or later.	High	Path Traversal Cwe 862 Steipete Summarize	1 month ago
CVE-2026-45243	Vulnerability in @steipete/summarize (CVE-2026-45243) vulnerability in @steipete/summarize (CVE-2026-45243). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.15.0` or later.	Medium	Cwe 862 Steipete Summarize	1 month ago
CVE-2026-8836	Buffer Overflow in c (CVE-2026-8836) vulnerability in c (CVE-2026-8836). Successful exploitation can lead to full system takeover.	Critical	C Cwe 119 Cwe 121	1 month ago
CVE-2026-45231	Cross-Site Scripting (XSS) in CVE-2026-45231 (CVE-2026-45231) cross-site scripting in CVE-2026-45231 (CVE-2026-45231). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-45731	Path Traversal in WWBN/AVideo (CVE-2026-45731) path traversal in WWBN/AVideo (CVE-2026-45731). Confidential information can be exposed externally. Exploitable via `POST /view/update.php`.	Medium	PHP Cwe 22 Wwbn Avideo	1 month ago
CVE-2026-45492	Vulnerability in microsoft (CVE-2026-45492) vulnerability in microsoft (CVE-2026-45492). Risk of unauthorized operations or information disclosure.	Medium	Cwe 20 Microsoft Edge Chromium	1 month ago
CVE-2026-45495	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 20 Cwe 94 Cwe 119 +3	1 month ago
CVE-2026-45494	Microsoft Edge (Chromium-based) Spoofing Vulnerability Microsoft Edge (Chromium-based) Spoofing Vulnerability	Medium	Cwe 79 Microsoft Edge Chromium	1 month ago
CVE-2026-29964	Cross-Site Scripting (XSS) in hsclabs (CVE-2026-29964) cross-site scripting in hsclabs (CVE-2026-29964). Risk of unauthorized operations or information disclosure.	Medium	PHP JavaScript Cross-Site Scripting Cwe 79 +2	1 month ago
CVE-2026-29965	Cross-Site Scripting (XSS) in hsclabs (CVE-2026-29965) cross-site scripting in hsclabs (CVE-2026-29965). Risk of unauthorized operations or information disclosure.	Medium	PHP JavaScript Cross-Site Scripting Cwe 79 +2	1 month ago
CVE-2026-32849	Vulnerability in c (CVE-2026-32849) vulnerability in c (CVE-2026-32849). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 190 Cwe 476	1 month ago
CVE-2026-32848	Vulnerability in CVE-2026-32848 (CVE-2026-32848) vulnerability in CVE-2026-32848 (CVE-2026-32848). Risk of unauthorized operations or information disclosure.	Medium	Cwe 362 Cwe 415	1 month ago
CVE-2026-29962	Vulnerability in path-traversal (CVE-2026-29962) vulnerability in path-traversal (CVE-2026-29962). Confidential information can be exposed externally.	High	PHP Path Traversal Cwe 73 Hsclabs +1	1 month ago
CVE-2026-29963	Path Traversal in path-traversal (CVE-2026-29963) path traversal in path-traversal (CVE-2026-29963). Confidential information can be exposed externally.	High	PHP Path Traversal Cwe 22 Hsclabs +1	1 month ago
CVE-2026-45230	Path Traversal in path-traversal (CVE-2026-45230) path traversal in path-traversal (CVE-2026-45230). Data can be tampered with by attackers. Exploitable via `POST /api/delete-file`.	Critical	JavaScript Path Traversal Denial of Service Cwe 22	1 month ago
CVE-2026-42822	Authentication Bypass in microsoft (CVE-2026-42822) authentication bypass in microsoft (CVE-2026-42822). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Microsoft Azure Local Azure Resource Manager	1 month ago
CVE-2023-24215	Vulnerability in CVE-2023-24215 (CVE-2023-24215) vulnerability in CVE-2023-24215 (CVE-2023-24215). Confidential information can be exposed externally.	Critical	Cwe 284	1 month ago
CVE-2026-45678	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45678) vulnerability in go.opentelemetry.io/obi (CVE-2026-45678). Risk of unauthorized operations or information disclosure. Exploitable via ``BIND``. Mitigation: upgrade to `0.9.0` or later.	High	Cwe 20 Cwe 754 Opentelemetry Ebpf Instrumentation	1 month ago
CVE-2026-45679	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45679) vulnerability in go.opentelemetry.io/obi (CVE-2026-45679). Risk of unauthorized operations or information disclosure. Exploitable via ``getRedisError``. Mitigation: upgrade to `0.9.0` or later.	Medium	Cwe 117 Cwe 532 Opentelemetry Ebpf Instrumentation	1 month ago

Vulnerabilities

🍪 About cookies