Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Tag: cwe-248 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-55484	Vulnerability in github.com/guno1928/alos-http (CVE-2026-55484) vulnerability in github.com/guno1928/alos-http (CVE-2026-55484). Risk of unauthorized operations or information disclosure. Exploitable via ``sanitizeRequestPath``. Mitigation: upgrade to `0.0.0-20260617230736-314b6783e196` or later.	High	Cwe 248 Cwe 754	1 day ago
CVE-2026-54553	Information Disclosure in starlette-admin (CVE-2026-54553) vulnerability in starlette-admin (CVE-2026-54553). Risk of unauthorized operations or information disclosure. Exploitable via ``metadata``. Mitigation: upgrade to `0.16.1` or later.	Medium	Python Denial of Service Cwe 200 Cwe 248 +1	3 days ago
CVE-2026-18675	Vulnerability in CVE-2026-18675 (CVE-2026-18675) vulnerability in CVE-2026-18675 (CVE-2026-18675). Risk of unauthorized operations or information disclosure.		Cwe 248 Cwe 704	2 weeks ago
CVE-2026-73088	Vulnerability in CVE-2026-73088 (CVE-2026-73088) vulnerability in CVE-2026-73088 (CVE-2026-73088). Risk of unauthorized operations or information disclosure.	High	JavaScript Cwe 248 Cwe 1321	2 weeks ago
CVE-2026-52856	Vulnerability in github.com/pterodactyl/wings (CVE-2026-52856) vulnerability in github.com/pterodactyl/wings (CVE-2026-52856). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.13.0` or later.	High	Cwe 129 Cwe 248 Cwe 617 Cwe 755	4 weeks ago
CVE-2026-65834	Vulnerability in github.com/projectcapsule/capsule (CVE-2026-65834) vulnerability in github.com/projectcapsule/capsule (CVE-2026-65834). Risk of unauthorized operations or information disclosure. Exploitable via ``ForbiddenAnnotations.Regex``. Mitigation: upgrade to `0.13.8` or later.	Medium	Cwe 20 Cwe 248	4 weeks ago
CVE-2026-13697	Information Disclosure in undici (CVE-2026-13697) vulnerability in undici (CVE-2026-13697). Confidential information can be exposed externally. Exploitable via ``private``. Mitigation: upgrade to `8.9.0` or later.	High	Cwe 200 Cwe 248 Cwe 525 Nodejs +1	1 month ago
CVE-2026-47219	Vulnerability in find-my-way (CVE-2026-47219) vulnerability in find-my-way (CVE-2026-47219). Risk of unauthorized operations or information disclosure. Exploitable via ``req.method``. Mitigation: upgrade to `9.7.0` or later.	High	Denial of Service Cwe 20 Cwe 248	1 month ago
CVE-2026-73418	Vulnerability in @auth/core (CVE-2026-73418) vulnerability in @auth/core (CVE-2026-73418). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `0.41.3` or later.	High	JavaScript Denial of Service Cwe 20 Cwe 248	1 month ago
CVE-2026-62994	Vulnerability in corednsio (CVE-2026-62994) vulnerability in corednsio (CVE-2026-62994). Risk of unauthorized operations or information disclosure.	Low	Cwe 248 Cwe 755 Corednsio Coredns	1 month ago
CVE-2026-50328	Vulnerability in microsoft (CVE-2026-50328) vulnerability in microsoft (CVE-2026-50328). Risk of unauthorized operations or information disclosure.	High	Cwe 20 Cwe 248 Microsoft Windows 10 1607 +6	1 month ago
CVE-2026-59162	Vulnerability in excelize (CVE-2026-59162) vulnerability in excelize (CVE-2026-59162). Risk of unauthorized operations or information disclosure.	High	Cwe 248 Cwe 755 Excelize	1 month ago
CVE-2026-55780	Vulnerability in cpp (CVE-2026-55780) vulnerability in cpp (CVE-2026-55780). Risk of unauthorized operations or information disclosure.		C++ C# Cwe 248 Cwe 400	1 month ago
CVE-2026-53530	Vulnerability in ratex-parser (CVE-2026-53530) vulnerability in ratex-parser (CVE-2026-53530). Risk of unauthorized operations or information disclosure. Exploitable via ``parse_symbol_inner``. Mitigation: upgrade to `0.1.11` or later.		Rust Denial of Service Cwe 248 Cwe 400 +1	1 month ago
CVE-2026-14631	Vulnerability in webpack-dev-server (CVE-2026-14631) vulnerability in webpack-dev-server (CVE-2026-14631). Risk of unauthorized operations or information disclosure. Exploitable via ``Host``. Mitigation: upgrade to `5.2.6` or later.	Medium	JavaScript Cwe 20 Cwe 248 Webpackjs +1	1 month ago
CVE-2026-54908	Out-of-Bounds Read in github.com/pion/dtls/v3 (CVE-2026-54908) vulnerability in github.com/pion/dtls/v3 (CVE-2026-54908). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.4` or later.		Denial of Service Cwe 125 Cwe 248	1 month ago
CVE-2026-54775	Vulnerability in CoreWCF.Kafka (CVE-2026-54775) vulnerability in CoreWCF.Kafka (CVE-2026-54775). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.9.1` or later.	Medium	C# Denial of Service Cwe 248 Cwe 754 +1	2 months ago
CVE-2026-34986	Vulnerability in github.com/go-jose/go-jose/v3 (CVE-2026-34986) vulnerability in github.com/go-jose/go-jose/v3 (CVE-2026-34986). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.5` or later.	High	JavaScript Denial of Service Cwe 248 Cwe 131 +2	3 months ago
CVE-2026-45554	Vulnerability in nicegui (CVE-2026-45554) vulnerability in nicegui (CVE-2026-45554). Risk of unauthorized operations or information disclosure. Exploitable via ``RuntimeError``. Mitigation: upgrade to `3.12.0` or later.	Medium	Python Cwe 248 Cwe 770	3 months ago
CVE-2026-45685	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45685) vulnerability in go.opentelemetry.io/obi (CVE-2026-45685). Risk of unauthorized operations or information disclosure. Exploitable via ``parseOpMessage``. Mitigation: upgrade to `0.9.0` or later.	High	Denial of Service Cwe 20 Cwe 248 Cwe 704 +2	3 months ago
CVE-2026-45676	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45676) vulnerability in go.opentelemetry.io/obi (CVE-2026-45676). Risk of unauthorized operations or information disclosure. Exploitable via ``GetCStringUnsafe``. Mitigation: upgrade to `0.9.0` or later.	Medium	Cwe 20 Cwe 248 Opentelemetry Ebpf Instrumentation	3 months ago
CVE-2026-42545	Vulnerability in granian (CVE-2026-42545) vulnerability in granian (CVE-2026-42545). Risk of unauthorized operations or information disclosure. Exploitable via ``Location``. Mitigation: upgrade to `2.7.4` or later.	Medium	Python Rust Cwe 248 Cwe 755	3 months ago
CVE-2026-42544	Vulnerability in granian (CVE-2026-42544) vulnerability in granian (CVE-2026-42544). Risk of unauthorized operations or information disclosure. Exploitable via ``Err``. Mitigation: upgrade to `2.7.4` or later.	High	Python Rust Cwe 20 Cwe 248 +1	3 months ago
CVE-2026-42268	Vulnerability in modsecurity (CVE-2026-42268) vulnerability in modsecurity (CVE-2026-42268). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.15` or later.	High	nginx Apache Cwe 191 Cwe 248 +2	3 months ago
CVE-2026-8161	Vulnerability in multiparty (CVE-2026-8161) vulnerability in multiparty (CVE-2026-8161). Risk of unauthorized operations or information disclosure. Exploitable via ``Object.prototype``. Mitigation: upgrade to `4.3.0` or later.	High	Denial of Service Cwe 248 Cwe 1321 Pillarjs +1	3 months ago
CVE-2026-46689	Vulnerability in scim_proto (CVE-2026-46689) vulnerability in scim_proto (CVE-2026-46689). Risk of unauthorized operations or information disclosure. Exploitable via ``GET``. Mitigation: upgrade to `1.9.3` or later.		Rust Cwe 248 Cwe 400 Cwe 674	3 months ago
CVE-2026-33939	Vulnerability in dos (CVE-2026-33939) vulnerability in dos (CVE-2026-33939). Risk of unauthorized operations or information disclosure. Exploitable via ``undefined``.	High	JavaScript Denial of Service Cwe 754 Cwe 248 +2	5 months ago
CVE-2025-59465	Vulnerability in node (CVE-2025-59465) vulnerability in node (CVE-2025-59465). Risk of unauthorized operations or information disclosure. Exploitable via ``HPACK``. Mitigation: upgrade to `20.20.0, 22.22.0, 24.13.0, 25.3.0` or later.	High	JavaScript Denial of Service Cwe 400 Cwe 248 +1	7 months ago
CVE-2019-6829	Vulnerability in dos (CVE-2019-6829) vulnerability in dos (CVE-2019-6829). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 248 Cwe 755 Schneider Electric +4	4 years ago
CVE-2018-7852	Vulnerability in c (CVE-2018-7852) vulnerability in c (CVE-2018-7852). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 755 Cwe 248 +9	4 years ago
CVE-2019-6575	Vulnerability in dos (CVE-2019-6575) vulnerability in dos (CVE-2019-6575). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 248 Cwe 755 Siemens +43	7 years ago
CVE-2016-10363	Vulnerability in dos (CVE-2016-10363) vulnerability in dos (CVE-2016-10363). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 248 Cwe 404 Elastic +1	9 years ago

Vulnerabilities

🍪 About cookies