Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Tag: cwe-1287 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-80051	Vulnerability in CVE-2026-80051 (CVE-2026-80051) vulnerability in CVE-2026-80051 (CVE-2026-80051). Risk of unauthorized operations or information disclosure.		Cwe 1287	4 days ago
CVE-2026-17113	Vulnerability in CVE-2026-17113 (CVE-2026-17113) vulnerability in CVE-2026-17113 (CVE-2026-17113). Risk of unauthorized operations or information disclosure. Exploitable via ``mergeEnvs``.	Medium	Cwe 1287	5 days ago
CVE-2026-5304	Vulnerability in privilege-escalation (CVE-2026-5304) vulnerability in privilege-escalation (CVE-2026-5304). Confidential information can be exposed externally.	Medium	Privilege Escalation Cwe 1287	2 weeks ago
CVE-2026-18830	Vulnerability in Amazon aws (CVE-2026-18830) vulnerability in Amazon aws (CVE-2026-18830). Confidential information can be exposed externally.	High	AWS Amazon Cloud Cwe 1287	3 weeks ago
CVE-2026-9390	Vulnerability in xml (CVE-2026-9390) vulnerability in xml (CVE-2026-9390). Confidential information can be exposed externally.	Critical	Cwe 643 Cwe 1287 Xml	3 weeks ago
CVE-2026-20498	Vulnerability in mediatek (CVE-2026-20498) vulnerability in mediatek (CVE-2026-20498). Confidential information can be exposed externally.	Medium	Cwe 1287 Mediatek Mt6991 Firmware Mt6991 +18	3 weeks ago
CVE-2026-4773	Vulnerability in CVE-2026-4773 (CVE-2026-4773) vulnerability in CVE-2026-4773 (CVE-2026-4773). Confidential information can be exposed externally.	High	Authentication Bypass Cwe 1287	1 month ago
CVE-2026-50524	Vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50524) vulnerability in Microsoft.NetCore.App.Runtime.linux-arm (CVE-2026-50524). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.29` or later.	High	C# Cwe 1287 Microsoft Net +7	1 month ago
CVE-2026-55124	Vulnerability in microsoft (CVE-2026-55124) vulnerability in microsoft (CVE-2026-55124). Confidential information can be exposed externally.	Medium	Cwe 20 Cwe 1287 Microsoft 365 Apps +7	1 month ago
CVE-2026-44935	Authorization Flaw in github.com/rancher/fleet (CVE-2026-44935) vulnerability in github.com/rancher/fleet (CVE-2026-44935). Successful exploitation can lead to full system takeover. Exploitable via ``HelmOp``. Mitigation: upgrade to `0.12.15` or later.	Critical	Cwe 1287 SUSE Rancher Fleet	1 month ago
CVE-2026-54235	Vulnerability in vllm (CVE-2026-54235) vulnerability in vllm (CVE-2026-54235). Risk of unauthorized operations or information disclosure. Exploitable via ``False``. Mitigation: upgrade to `0.24.0` or later.	Medium	Python Cwe 1287 vLLM	2 months ago
CVE-2026-10825	Vulnerability in CVE-2026-10825 (CVE-2026-10825) vulnerability in CVE-2026-10825 (CVE-2026-10825). Risk of unauthorized operations or information disclosure.		Cwe 1287	2 months ago
CVE-2026-9753	Vulnerability in mongodb (CVE-2026-9753) vulnerability in mongodb (CVE-2026-9753). Confidential information can be exposed externally. Mitigation: upgrade to `7.0.35, 8.0.24, 8.2.10, 8.3.3` or later.	High	Cwe 1287 Cwe 787 MongoDB	2 months ago
CVE-2026-9742	Vulnerability in mongodb (CVE-2026-9742) vulnerability in mongodb (CVE-2026-9742). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.2.10, 8.3.3` or later.	High	Cwe 1287 MongoDB	2 months ago
CVE-2026-44249	Vulnerability in io.netty:netty-handler (CVE-2026-44249) vulnerability in io.netty:netty-handler (CVE-2026-44249). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.135.Final` or later.	High	Cwe 284 Cwe 697 Netty Cwe 1287	2 months ago
CVE-2026-11460	Vulnerability in CVE-2026-11460 (CVE-2026-11460) vulnerability in CVE-2026-11460 (CVE-2026-11460). Risk of unauthorized operations or information disclosure.	High	Cwe 20 Cwe 1287	2 months ago
CVE-2024-6858	Vulnerability in CVE-2024-6858 (CVE-2024-6858) vulnerability in CVE-2024-6858 (CVE-2024-6858). Data can be tampered with by attackers.	Medium	Cwe 1287	2 months ago
CVE-2026-49941	Vulnerability in dos (CVE-2026-49941) vulnerability in dos (CVE-2026-49941). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 674 Cwe 1287 Rrwo +1	2 months ago
CVE-2026-47675	Vulnerability in hono (CVE-2026-47675) vulnerability in hono (CVE-2026-47675). Risk of unauthorized operations or information disclosure. Exploitable via ``domain``. Mitigation: upgrade to `4.12.21` or later.	Medium	JavaScript Cwe 113 Cwe 1287 Hono	3 months ago
CVE-2026-45069	Vulnerability in symfony/security-http (CVE-2026-45069) vulnerability in symfony/security-http (CVE-2026-45069). Confidential information can be exposed externally. Exploitable via ``OidcTokenHandler``. Mitigation: upgrade to `8.0.12` or later.	Critical	PHP Symfony Cwe 345 Cwe 1287 +1	3 months ago
CVE-2026-40851	Vulnerability in CVE-2026-40851 (CVE-2026-40851) vulnerability in CVE-2026-40851 (CVE-2026-40851). Successful exploitation can lead to full system takeover.	High	Cwe 1287	3 months ago
CVE-2026-9521	Vulnerability in CVE-2026-9521 (CVE-2026-9521) vulnerability in CVE-2026-9521 (CVE-2026-9521). Risk of unauthorized operations or information disclosure.	High	Cwe 20 Cwe 1287	3 months ago
CVE-2026-4646	Vulnerability in github.com/mattermost/mattermost-server (CVE-2026-4646) vulnerability in github.com/mattermost/mattermost-server (CVE-2026-4646). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.11.15` or later.	Medium	Cwe 1287 Mattermost Mattermost Server	3 months ago
CVE-2026-7887	Vulnerability in concrete5/concrete5 (CVE-2026-7887) vulnerability in concrete5/concrete5 (CVE-2026-7887). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.	Medium	Cwe 1287 Concretecms Concrete Cms	3 months ago
CVE-2026-5946	Vulnerability in isc (CVE-2026-5946) vulnerability in isc (CVE-2026-5946). Risk of unauthorized operations or information disclosure. Exploitable via ``named``.	High	Cwe 20 Cwe 125 Cwe 617 Cwe 754 +4	3 months ago
CVE-2026-0802	Vulnerability in privilege-escalation (CVE-2026-0802) vulnerability in privilege-escalation (CVE-2026-0802). Confidential information can be exposed externally.	Medium	Privilege Escalation Cwe 1287 Axis Axis Os	3 months ago
CVE-2026-20074	Vulnerability in Cisco dos (CVE-2026-20074) vulnerability in Cisco dos (CVE-2026-20074). Risk of unauthorized operations or information disclosure.	High	Cisco Network Denial of Service Cwe 1287 +1	3 months ago
CVE-2026-21932	Vulnerability in java (CVE-2026-21932) vulnerability in java (CVE-2026-21932). Data can be tampered with by attackers. Mitigation: upgrade to `1.8.0, 8.0.481, 11.0.30, 17.0.18, 21.0.10, 25.0.2` or later.	High	Bitnami Java C Java Min +6	3 months ago
CVE-2026-33806	Vulnerability in fastify (CVE-2026-33806) vulnerability in fastify (CVE-2026-33806). Data can be tampered with by attackers.	High	Cwe 1287 Cwe 1289 Fastify	4 months ago
CVE-2026-4598	Vulnerability in jsrsasign (CVE-2026-4598) vulnerability in jsrsasign (CVE-2026-4598). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.1.1` or later.	High	JavaScript Cwe 835 Kjur Jsrsasign +1	5 months ago
CVE-2026-2092	Vulnerability in org.keycloak:keycloak-services (CVE-2026-2092) vulnerability in org.keycloak:keycloak-services (CVE-2026-2092). Confidential information can be exposed externally. Mitigation: upgrade to `26.4.10` or later.	High	Cwe 1287 Redhat Build Of Keycloak	5 months ago
CVE-2026-2004	Vulnerability in postgresql (CVE-2026-2004) vulnerability in postgresql (CVE-2026-2004). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `14.21.0, 15.16.0, 16.12.0, 17.8.0, 18.2.0` or later.	High	Cwe 1287 PostgreSQL	6 months ago
CVE-2026-25639	Vulnerability in axios (CVE-2026-25639) vulnerability in axios (CVE-2026-25639). Risk of unauthorized operations or information disclosure. Exploitable via ``mergeConfig``. Mitigation: upgrade to `0.30.3` or later.	High	npm Axios JavaScript Denial of Service +3	6 months ago
CVE-2025-40910	Vulnerability in CVE-2025-40910 (CVE-2025-40910) vulnerability in CVE-2025-40910 (CVE-2025-40910). Risk of unauthorized operations or information disclosure.	Medium	Cwe 1287	1 year ago
CVE-2024-20494	Vulnerability in dos (CVE-2024-20494) vulnerability in dos (CVE-2024-20494). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 1287 Cisco Adaptive Security Appliance Software +1	1 year ago
CVE-2024-20408	Vulnerability in dos (CVE-2024-20408) vulnerability in dos (CVE-2024-20408). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 1287 Cisco Adaptive Security Appliance Software +1	1 year ago
CVE-2024-4879 KEV	[KEV] Vulnerability in Servicenow utah (CVE-2024-4879) vulnerability in Servicenow utah (CVE-2024-4879). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Servicenow Utah Vancouver And Washington Dc Now Platform +1	2 years ago

Vulnerabilities

🍪 About cookies