Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2026-25204	Unsafe Deserialization in dos (CVE-2026-25204) vulnerability in dos (CVE-2026-25204). Risk of unauthorized operations or information disclosure.	Medium	Java Denial of Service Insecure Deserialization Cwe 502 +3	3 months ago
CVE-2023-21529 KEV	[KEV] Unsafe Deserialization in Microsoft exchange-server (CVE-2023-21529) vulnerability in Microsoft exchange-server (CVE-2023-21529). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Exchange Server Cwe 502 Remote Code Execution +6	3 months ago
CVE-2026-21643 KEV	[KEV] SQL Injection in Fortinet forticlient-ems (CVE-2026-21643) SQL injection in Fortinet forticlient-ems (CVE-2026-21643). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Fortinet Forticlient Ems Cwe 89 Remote Code Execution +12	3 months ago
CVE-2012-1854 KEV	[KEV] Vulnerability in Microsoft visual-basic-for-applications-vba (CVE-2012-1854) vulnerability in Microsoft visual-basic-for-applications-vba (CVE-2012-1854). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Visual Basic For Applications Vba Cwe 426 Vba +7	3 months ago
CVE-2023-36424 KEV	[KEV] Out-of-Bounds Read in Microsoft windows (CVE-2023-36424) vulnerability in Microsoft windows (CVE-2023-36424). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 125 Buffer Overflow +5	3 months ago
CVE-2020-9715 KEV	[KEV] Use-After-Free in Adobe acrobat (CVE-2020-9715) vulnerability in Adobe acrobat (CVE-2020-9715). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Adobe Acrobat Cwe 416 Remote Code Execution +7	3 months ago
CVE-2026-34621 KEV	[KEV] Vulnerability in Adobe acrobat-and-reader (CVE-2026-34621) vulnerability in Adobe acrobat-and-reader (CVE-2026-34621). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Adobe Acrobat And Reader Cwe 1321 Remote Code Execution +13	3 months ago
CVE-2025-60710 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2025-60710) vulnerability in Microsoft windows (CVE-2025-60710). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 59 Privilege Escalation	3 months ago
CVE-2026-40393	Out-of-Bounds Write in mesa3d (CVE-2026-40393) out-of-bounds write in mesa3d (CVE-2026-40393). Successful exploitation can lead to full system takeover.	High	Cwe 787 Mesa3D Mesa	3 months ago
CVE-2019-25695	Out-of-Bounds Write in CVE-2019-25695 (CVE-2019-25695) out-of-bounds write in CVE-2019-25695 (CVE-2019-25695). Successful exploitation can lead to full system takeover.	High	Cwe 787	3 months ago
CVE-2026-31413	Out-of-Bounds Read in linux (CVE-2026-31413) vulnerability in linux (CVE-2026-31413). Successful exploitation can lead to full system takeover.	High	Cwe 125 Linux Linux Kernel	3 months ago
CVE-2026-31845	Cross-Site Scripting (XSS) in CVE-2026-31845 (CVE-2026-31845) cross-site scripting in CVE-2026-31845 (CVE-2026-31845). Confidential information can be exposed externally.	Critical	PHP JavaScript Cross-Site Scripting Cwe 79	3 months ago
CVE-2026-32146	Improper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification Improper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification	High	Cwe 22 Lpil Gleam Remote Code Execution +1	3 months ago
CVE-2026-4153	Vulnerability in gimp (CVE-2026-4153) vulnerability in gimp (CVE-2026-4153). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 122 Cwe 787 Cwe 120 +1	3 months ago
CVE-2026-4154	Vulnerability in gimp (CVE-2026-4154) vulnerability in gimp (CVE-2026-4154). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 190 Gimp	3 months ago
CVE-2026-4150	Vulnerability in gimp (CVE-2026-4150) vulnerability in gimp (CVE-2026-4150). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 190 Gimp	3 months ago
CVE-2026-4151	Vulnerability in gimp (CVE-2026-4151) vulnerability in gimp (CVE-2026-4151). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 190 Gimp	3 months ago
CVE-2026-4152	Vulnerability in gimp (CVE-2026-4152) vulnerability in gimp (CVE-2026-4152). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 122 Cwe 787 Cwe 131 +1	3 months ago
CVE-2026-33118	Vulnerability in microsoft (CVE-2026-33118) vulnerability in microsoft (CVE-2026-33118). Risk of unauthorized operations or information disclosure.	Medium	Cwe 451 Microsoft Edge Chromium	3 months ago
CVE-2026-5724	Vulnerability in CVE-2026-5724 (CVE-2026-5724) vulnerability in CVE-2026-5724 (CVE-2026-5724). Risk of unauthorized operations or information disclosure.		Cwe 306	3 months ago
CVE-2026-40194	Vulnerability in phpseclib/phpseclib (CVE-2026-40194) vulnerability in phpseclib/phpseclib (CVE-2026-40194). Risk of unauthorized operations or information disclosure. Exploitable via ``e819a163c``. Mitigation: upgrade to `1.0.28` or later.	Low	PHP Cwe 208 Phpseclib Composer +3	3 months ago
CVE-2026-40190	Vulnerability in langchain (CVE-2026-40190) vulnerability in langchain (CVE-2026-40190). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.5.18` or later.	Medium	JavaScript Cwe 1321 LangChain Langsmith	3 months ago
CVE-2026-40175	Vulnerability in axios (CVE-2026-40175) vulnerability in axios (CVE-2026-40175). Risk of unauthorized operations or information disclosure. Exploitable via `GET /pings`. Mitigation: upgrade to `0.31.0` or later.	Medium	JavaScript Remote Code Execution Cwe 113 Cwe 444 +3	3 months ago
CVE-2026-39922	SSRF (Server-Side Request Forgery) in geonode (CVE-2026-39922) SSRF in geonode (CVE-2026-39922). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.0.2` or later.	Medium	Cwe 918 Geosolutionsgroup Geonode	3 months ago
CVE-2026-39921	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-39921) SSRF in ssrf (CVE-2026-39921). Risk of unauthorized operations or information disclosure.	Medium	Server-Side Request Forgery Cwe 918 Geosolutionsgroup Geonode	3 months ago
CVE-2026-1502	CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.		Cwe 93	3 months ago
CVE-2026-34481	Vulnerability in apache (CVE-2026-34481) vulnerability in apache (CVE-2026-34481). Data can be tampered with by attackers.	High	Apache Cwe 116 Log4J	3 months ago
CVE-2026-6068	Use-After-Free in nasm (CVE-2026-6068) vulnerability in nasm (CVE-2026-6068). Successful exploitation can lead to full system takeover.	Critical	Cwe 416 Nasm Netwide Assembler Remote Code Execution	3 months ago
CVE-2026-5777	Vulnerability in CVE-2026-5777 (CVE-2026-5777) vulnerability in CVE-2026-5777 (CVE-2026-5777). Risk of unauthorized operations or information disclosure.		Cwe 306	3 months ago
CVE-2026-39304	Vulnerability in apache (CVE-2026-39304) vulnerability in apache (CVE-2026-39304). Risk of unauthorized operations or information disclosure.	High	Apache Denial of Service Cwe 400 Cwe 770 +2	3 months ago
CVE-2026-31412	Vulnerability in linux (CVE-2026-31412) vulnerability in linux (CVE-2026-31412). Risk of unauthorized operations or information disclosure.	Medium	Cwe 190 Linux Linux Kernel	3 months ago
CVE-2026-6057	Path Traversal in path-traversal (CVE-2026-6057) path traversal in path-traversal (CVE-2026-6057). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Path Traversal Cwe 22	3 months ago
CVE-2021-47960	Vulnerability in synology (CVE-2021-47960) vulnerability in synology (CVE-2021-47960). Confidential information can be exposed externally.	Medium	Cwe 552 Synology Ssl Vpn Client	3 months ago
CVE-2026-5525	Vulnerability in notepad-plus-plus (CVE-2026-5525) vulnerability in notepad-plus-plus (CVE-2026-5525). Confidential information can be exposed externally.	Medium	Cwe 121 Notepad Plus Plus Notepad	3 months ago
CVE-2026-28704	Vulnerability in jpcert (CVE-2026-28704) vulnerability in jpcert (CVE-2026-28704). Successful exploitation can lead to full system takeover.	High	Cwe 427 Jpcert Emocheck	3 months ago
CVE-2026-4482	Vulnerability in rapid7 (CVE-2026-4482) vulnerability in rapid7 (CVE-2026-4482). Confidential information can be exposed externally.	Medium	Cwe 732 Rapid7 Insight Agent Microsoft +1	3 months ago
CVE-2026-33551	Authorization Flaw in keystone (CVE-2026-33551) vulnerability in keystone (CVE-2026-33551). Confidential information can be exposed externally. Mitigation: upgrade to `26.1.1` or later.	Low	Cwe 863 Openstack Keystone	3 months ago
CVE-2026-5263	Vulnerability in c (CVE-2026-5263) vulnerability in c (CVE-2026-5263). Confidential information can be exposed externally.	Medium	C Cwe 295 Wolfssl	3 months ago
CVE-2026-21915	Vulnerability in juniper (CVE-2026-21915) vulnerability in juniper (CVE-2026-21915). Successful exploitation can lead to full system takeover.	Medium	Cwe 183 Cwe 78 Juniper Virtual Lightweight Collector	3 months ago
CVE-2026-39848	Vulnerability in csrf (CVE-2026-39848) vulnerability in csrf (CVE-2026-39848). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.0` or later.	Medium	PHP Cross-Site Request Forgery Cwe 306 Cwe 352 +2	3 months ago
CVE-2026-33788	Vulnerability in juniper (CVE-2026-33788) vulnerability in juniper (CVE-2026-33788). Successful exploitation can lead to full system takeover.	High	Cwe 306 Juniper Junos Jnp10K Lc1201 +4	3 months ago
CVE-2026-33784	Vulnerability in juniper (CVE-2026-33784) vulnerability in juniper (CVE-2026-33784). Successful exploitation can lead to full system takeover.	Critical	Cwe 1393 Juniper Virtual Lightweight Collector	3 months ago
CVE-2026-33771	Vulnerability in juniper (CVE-2026-33771) vulnerability in juniper (CVE-2026-33771). Confidential information can be exposed externally.	High	Cwe 521 Juniper Ctop Os Ctp Operating System	3 months ago
CVE-2026-33774	Vulnerability in juniper (CVE-2026-33774) vulnerability in juniper (CVE-2026-33774). Risk of unauthorized operations or information disclosure.	Medium	Cwe 754 Juniper Junos Lc4800 +3	3 months ago
CVE-2026-21904	Cross-Site Scripting (XSS) in juniper (CVE-2026-21904) cross-site scripting in juniper (CVE-2026-21904). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Juniper Junos Space	3 months ago
CVE-2026-5194	Vulnerability in wolfssl (CVE-2026-5194) vulnerability in wolfssl (CVE-2026-5194). Confidential information can be exposed externally.	Critical	Cwe 295 Wolfssl	3 months ago
CVE-2026-40089	SSRF (Server-Side Request Forgery) in c (CVE-2026-40089) SSRF in c (CVE-2026-40089). Confidential information can be exposed externally.	Critical	C Server-Side Request Forgery Cwe 918 Sonicverse +1	3 months ago
CVE-2026-34734	Use-After-Free in hdfgroup (CVE-2026-34734) vulnerability in hdfgroup (CVE-2026-34734). Successful exploitation can lead to full system takeover.	High	Cwe 416 Cwe 825 Hdfgroup Hdf5	3 months ago
CVE-2026-34486	Vulnerability in tomcat (CVE-2026-34486) vulnerability in tomcat (CVE-2026-34486). Confidential information can be exposed externally. Mitigation: upgrade to `9.0.117, 10.1.54, 11.0.21` or later.	High	Apache Tomcat Cwe 311 Cwe 807	3 months ago
CVE-2026-29146	Vulnerability in apache (CVE-2026-29146) vulnerability in apache (CVE-2026-29146). Confidential information can be exposed externally.	High	Apache Tomcat Cwe 209 Cwe 642 +1	3 months ago

Vulnerabilities

🍪 About cookies