Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Tag: cwe-35 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-49779	Customer Path Traversal in Tax Exempt for WooCommerce <= 1.9.3 versions. Customer Path Traversal in Tax Exempt for WooCommerce <= 1.9.3 versions.	Medium	Path Traversal Cwe 35	6 days ago
CVE-2026-52707	Unauthenticated Local File Inclusion in Kastell <= 2.0 versions. Unauthenticated Local File Inclusion in Kastell <= 2.0 versions.	High	Cwe 35	3 weeks ago
CVE-2026-52703	Unauthenticated Path Traversal in FastDup <= 2.7.2 versions. Unauthenticated Path Traversal in FastDup <= 2.7.2 versions.	Critical	Path Traversal Cwe 35	3 weeks ago
CVE-2026-49112	Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions. Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions.	High	Path Traversal Cwe 35	3 weeks ago
CVE-2026-42661	Custom role Path Traversal in WP Customer Area <= 8.3.4 versions. Custom role Path Traversal in WP Customer Area <= 8.3.4 versions.	High	Path Traversal Cwe 35	3 weeks ago
CVE-2026-40128	Vulnerability in path-traversal (CVE-2026-40128) vulnerability in path-traversal (CVE-2026-40128). Successful exploitation can lead to full system takeover.	Critical	Java Path Traversal Cwe 35	4 weeks ago
CVE-2026-24315	Vulnerability in CVE-2026-24315 (CVE-2026-24315) vulnerability in CVE-2026-24315 (CVE-2026-24315). Risk of unauthorized operations or information disclosure.	Medium	Cwe 35	4 weeks ago
CVE-2026-45661	Path Traversal in path-traversal (CVE-2026-45661) path traversal in path-traversal (CVE-2026-45661). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Path Traversal Cwe 22 Cwe 35	1 month ago
CVE-2026-44933	Vulnerability in CVE-2026-44933 (CVE-2026-44933) vulnerability in CVE-2026-44933 (CVE-2026-44933). Successful exploitation can lead to full system takeover. Exploitable via ``PluginScript``.	High	Cwe 35	1 month ago
CVE-2026-45495	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 20 Cwe 94 Cwe 119 +3	1 month ago
CVE-2026-7302	Vulnerability in sglang (CVE-2026-7302) vulnerability in sglang (CVE-2026-7302). Data can be tampered with by attackers.	Critical	Path Traversal Cwe 35 Lmsys Sglang	1 month ago
CVE-2026-42930	Vulnerability in f5 (CVE-2026-42930) vulnerability in f5 (CVE-2026-42930). Confidential information can be exposed externally.	High	Cwe 35 F5 Big Ip Access Policy Manager Big Ip Advanced Firewall Manager +19	1 month ago
CVE-2026-24464	Vulnerability in path-traversal (CVE-2026-24464) vulnerability in path-traversal (CVE-2026-24464). Data can be tampered with by attackers.	Medium	Path Traversal Cwe 35 F5 Big Ip Access Policy Manager +20	1 month ago
CVE-2026-25705	Vulnerability in github.com/rancher/rancher (CVE-2026-25705) vulnerability in github.com/rancher/rancher (CVE-2026-25705). Successful exploitation can lead to full system takeover. Exploitable via ``compressedEndpoint``. Mitigation: upgrade to `2.11.13` or later.	High	Path Traversal Cwe 35	1 month ago
CVE-2026-0804	Vulnerability in path-traversal (CVE-2026-0804) vulnerability in path-traversal (CVE-2026-0804). Successful exploitation can lead to full system takeover.	Medium	Path Traversal Privilege Escalation Cwe 35 Axis +1	1 month ago
CVE-2026-20034	Vulnerability in Cisco unity-connection (CVE-2026-20034) vulnerability in Cisco unity-connection (CVE-2026-20034). Successful exploitation can lead to full system takeover.	High	Cisco Network Cwe 35 Unity Connection	1 month ago
CVE-2026-6074	Vulnerability in cisa (CVE-2026-6074) vulnerability in cisa (CVE-2026-6074). Successful exploitation can lead to full system takeover.	Critical	Cisa Ics Industrial Ot +4	1 month ago
CVE-2026-42274	Vulnerability in github.com/dadrus/heimdall (CVE-2026-42274) vulnerability in github.com/dadrus/heimdall (CVE-2026-42274). Risk of unauthorized operations or information disclosure. Exploitable via ``allow_encoded_slashes``. Mitigation: upgrade to `0.17.14` or later.		Cwe 35 Cwe 436	2 months ago
CVE-2025-68428	Vulnerability in path-traversal (CVE-2025-68428) vulnerability in path-traversal (CVE-2025-68428). Confidential information can be exposed externally. Exploitable via ``addImage``.	High	JavaScript Path Traversal Cwe 35 Cwe 73 +3	6 months ago
CVE-2025-8088 KEV	[KEV] Vulnerability in Rarlab winrar (CVE-2025-8088) vulnerability in Rarlab winrar (CVE-2025-8088). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Rarlab Winrar Cwe 35	10 months ago
CVE-2024-54216	Vulnerability in path-traversal (CVE-2024-54216) vulnerability in path-traversal (CVE-2024-54216). Confidential information can be exposed externally.	High	Path Traversal Cwe 35 Reputeinfosystems Arforms	1 year ago
CVE-2024-39171	Path Traversal in phpvibe (CVE-2024-39171) path traversal in phpvibe (CVE-2024-39171). Successful exploitation can lead to full system takeover.	Critical	Cwe 22 Cwe 35 Phpvibe	1 year ago
CVE-2022-3693	Path Traversal in path-traversal (CVE-2022-3693) path traversal in path-traversal (CVE-2022-3693). Confidential information can be exposed externally.	High	Path Traversal Cwe 35 Cwe 22 Fileorbis	3 years ago
CVE-2022-2265	Path Traversal in path-traversal (CVE-2022-2265) path traversal in path-traversal (CVE-2022-2265). Confidential information can be exposed externally.	High	Path Traversal Cwe 35 Cwe 22 Identity And Directory Management System Project +1	3 years ago

Vulnerabilities

🍪 About cookies