Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: databases Clear

ID	Title	Severity	Tags	Detected
CVE-2026-47835	Vulnerability in CVE-2026-47835 (CVE-2026-47835) vulnerability in CVE-2026-47835 (CVE-2026-47835). Confidential information can be exposed externally.	High	Cwe 943 Spring Elasticsearch Opensearch +4	3 weeks ago
CVE-2026-48165	OS Command Injection in mariadb (CVE-2026-48165) OS command injection in mariadb (CVE-2026-48165). Successful exploitation can lead to full system takeover.	High	Cwe 78 MariaDB	3 weeks ago
CVE-2026-48163	OS Command Injection in mariadb (CVE-2026-48163) OS command injection in mariadb (CVE-2026-48163). Successful exploitation can lead to full system takeover.	High	Cwe 78 MariaDB	3 weeks ago
CVE-2026-44168	OS Command Injection in mariadb (CVE-2026-44168) OS command injection in mariadb (CVE-2026-44168). Successful exploitation can lead to full system takeover.	High	Cwe 78 MariaDB	3 weeks ago
CVE-2026-11933	A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when... A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when...	High	JavaScript Denial of Service Cwe 787 MongoDB +2	3 weeks ago
CVE-2026-9753	Vulnerability in mongodb (CVE-2026-9753) vulnerability in mongodb (CVE-2026-9753). Confidential information can be exposed externally.	High	Cwe 1287 Cwe 787 MongoDB	4 weeks ago
CVE-2026-9740	Vulnerability in mongodb (CVE-2026-9740) vulnerability in mongodb (CVE-2026-9740). Risk of unauthorized operations or information disclosure.	High	Cwe 674 MongoDB	4 weeks ago
CVE-2026-9742	Vulnerability in mongodb (CVE-2026-9742) vulnerability in mongodb (CVE-2026-9742). Risk of unauthorized operations or information disclosure.	High	Cwe 1287 MongoDB	4 weeks ago
CVE-2026-11824	SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate	High	Cwe 122 SQLite Buffer Overflow	4 weeks ago
CVE-2026-11822	SQLite before 3.53.2 Memory Corruption in FTS5 Extension SQLite before 3.53.2 Memory Corruption in FTS5 Extension	High	Cwe 122 SQLite Buffer Overflow	4 weeks ago
CVE-2026-11400	CVE-2026-11400 and CVE-2026-11401 Bulletin ID: 2026-039-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 06/025/2026 12:15 PM PDT Description: Amazon Aurora PostgreSQL a fully managed relational database engine that's compatible with PostgreSQL. We identified CVE-2026-11400(JDBC) and CVE-2026-11401(Go), an issue in AWS Wrappers for Amazon Aurora PostgreSQL will allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users. Impacted versions: - AWS Advanced JDBC Wrapper >=3.0.0 and < 4.0.1 - AWS Advanced Go Wrapper release 2026-04-06 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.	High	AWS Amazon Cloud Cwe 426 +4	1 month ago
CVE-2026-47783	Vulnerability in memcached (CVE-2026-47783) vulnerability in memcached (CVE-2026-47783). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.6.42` or later.	High	Cwe 208 Memcached	1 month ago
CVE-2026-47784	Vulnerability in memcached (CVE-2026-47784) vulnerability in memcached (CVE-2026-47784). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.6.42` or later.	High	Cwe 208 Memcached	1 month ago
CVE-2026-6473	Vulnerability in postgresql (CVE-2026-6473) vulnerability in postgresql (CVE-2026-6473). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `14.23.0, 15.18.0, 16.14.0, 17.10.0, 18.4.0` or later.	High	Cwe 190 PostgreSQL	1 month ago
CVE-2026-6479	Vulnerability in postgresql (CVE-2026-6479) vulnerability in postgresql (CVE-2026-6479). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.23.0, 15.18.0, 16.14.0, 17.10.0, 18.4.0` or later.	High	Denial of Service Cwe 674 PostgreSQL	1 month ago
CVE-2026-6475	Vulnerability in postgresql (CVE-2026-6475) vulnerability in postgresql (CVE-2026-6475). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `14.23.0, 15.18.0, 16.14.0, 17.10.0, 18.4.0` or later.	High	Cwe 61 PostgreSQL	1 month ago
CVE-2026-6477	Vulnerability in postgresql (CVE-2026-6477) vulnerability in postgresql (CVE-2026-6477). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `14.23.0, 15.18.0, 16.14.0, 17.10.0, 18.4.0` or later.	High	Cwe 242 PostgreSQL Cwe 120	1 month ago
CVE-2026-6476	SQL Injection in postgresql (CVE-2026-6476) SQL injection in postgresql (CVE-2026-6476). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `17.10.0, 18.4.0` or later.	High	SQL Injection Cwe 89 PostgreSQL	1 month ago
CVE-2026-6637	SQL Injection in postgresql (CVE-2026-6637) SQL injection in postgresql (CVE-2026-6637). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `14.23.0, 15.18.0, 16.14.0, 17.10.0, 18.4.0` or later.	High	SQL Injection Cwe 89 Cwe 121 PostgreSQL	1 month ago
CVE-2026-46446	SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored,... SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored,...	High	SQL Injection Cwe 89 MariaDB PostgreSQL	1 month ago
CVE-2026-46445	SOGo before 5.12.7, when PostgreSQL is used, allows SQL injection. SOGo before 5.12.7, when PostgreSQL is used, allows SQL injection.	High	SQL Injection Cwe 89 PostgreSQL	1 month ago
CVE-2026-8336	Use-After-Free in mongodb (CVE-2026-8336) vulnerability in mongodb (CVE-2026-8336). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.2.9, 8.3.2` or later.	High	JavaScript Cwe 416 MongoDB	1 month ago
CVE-2026-8053	Out-of-Bounds Write in mongodb (CVE-2026-8053) out-of-bounds write in mongodb (CVE-2026-8053). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.0.33, 6.0.28, 7.0.34, 8.0.23, 8.2.9, 8.3.2` or later.	High	Cwe 787 MongoDB	1 month ago
CVE-2026-6691	Vulnerability in c (CVE-2026-6691) vulnerability in c (CVE-2026-6691). Successful exploitation can lead to full system takeover.	High	C Cwe 120 Cwe 787 MongoDB +1	2 months ago
CVE-2026-25243	Vulnerability in redis (CVE-2026-25243) vulnerability in redis (CVE-2026-25243). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 122 Redis	2 months ago
CVE-2026-23631	Use-After-Free in redis (CVE-2026-23631) vulnerability in redis (CVE-2026-23631). Data can be tampered with by attackers.	High	Remote Code Execution Cwe 416 Redis	2 months ago
CVE-2026-23479	Use-After-Free in redis (CVE-2026-23479) vulnerability in redis (CVE-2026-23479). Successful exploitation can lead to full system takeover. Exploitable via ``processCommandAndResetClient``.	High	Remote Code Execution Cwe 416 Redis	2 months ago
CVE-2026-42198	Vulnerability in dos (CVE-2026-42198) vulnerability in dos (CVE-2026-42198). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770 PostgreSQL Postgresql Jdbc Driver	2 months ago
CVE-2026-2006	Vulnerability in postgresql (CVE-2026-2006) vulnerability in postgresql (CVE-2026-2006). Successful exploitation can lead to full system takeover.	High	Cwe 129 Cwe 1285 PostgreSQL	4 months ago
CVE-2026-2004	Vulnerability in postgresql (CVE-2026-2004) vulnerability in postgresql (CVE-2026-2004). Successful exploitation can lead to full system takeover.	High	Cwe 1287 PostgreSQL	4 months ago
CVE-2026-2005	Vulnerability in postgresql (CVE-2026-2005) vulnerability in postgresql (CVE-2026-2005). Successful exploitation can lead to full system takeover.	High	Cwe 122 Cwe 120 PostgreSQL	4 months ago
CVE-2026-2007	Vulnerability in privilege-escalation (CVE-2026-2007) vulnerability in privilege-escalation (CVE-2026-2007). Risk of unauthorized operations or information disclosure.	High	Privilege Escalation Cwe 122 Cwe 120 PostgreSQL	4 months ago
CVE-2025-14847 KEV	[KEV] Vulnerability in mongodb (CVE-2025-14847) vulnerability in mongodb (CVE-2025-14847). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	MongoDB Mongodb And Mongodb Server Cwe 130	6 months ago
CVE-2025-6965	Vulnerability in SQLitePCLRaw.lib.e_sqlite3 (CVE-2025-6965) vulnerability in SQLitePCLRaw.lib.e_sqlite3 (CVE-2025-6965). Data can be tampered with by attackers.	High	Cwe 197 SQLite Apple Ipados +8	11 months ago
CVE-2022-0543 KEV	[KEV] Vulnerability in redis (CVE-2022-0543) vulnerability in redis (CVE-2022-0543). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Redis Debian Specific Redis Servers Cwe 862	4 years ago
CVE-2014-3120 KEV	[KEV] Vulnerability in elastic (CVE-2014-3120) vulnerability in elastic (CVE-2014-3120). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Elastic Elasticsearch Cwe 284	4 years ago
CVE-2015-1427 KEV	[KEV] Vulnerability in elastic (CVE-2015-1427) vulnerability in elastic (CVE-2015-1427). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Elastic Elasticsearch Cwe 284	4 years ago
CVE-2022-0778	Vulnerability in dos (CVE-2022-0778) vulnerability in dos (CVE-2022-0778). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 835 Openssl Debian +17	4 years ago
CVE-2019-10758 KEV	[KEV] Vulnerability in Mongodb mongo-express (CVE-2019-10758) vulnerability in Mongodb mongo-express (CVE-2019-10758). Risk of unauthorized operations or information disclosure. Exploitable via ``toBSON``. Listed in CISA KEV — actively exploited.	High	MongoDB Mongo Express	4 years ago
CVE-2020-21468	Vulnerability in dos (CVE-2020-21468) vulnerability in dos (CVE-2020-21468). Risk of unauthorized operations or information disclosure.	High	Denial of Service Redislabs Redis	4 years ago
CVE-2017-11480	Vulnerability in dos (CVE-2017-11480) vulnerability in dos (CVE-2017-11480). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 404 Elasticsearch Packetbeat	8 years ago
CVE-2017-15098	Information Disclosure in postgresql (CVE-2017-15098) vulnerability in postgresql (CVE-2017-15098). Confidential information can be exposed externally.	High	Cwe 200 PostgreSQL Debian Debian Linux	8 years ago
CVE-2017-15945	Vulnerability in mariadb (CVE-2017-15945) vulnerability in mariadb (CVE-2017-15945). Successful exploitation can lead to full system takeover.	High	Cwe 732 MariaDB MySQL Gentoo +1	8 years ago
CVE-2016-10517	Vulnerability in c (CVE-2016-10517) vulnerability in c (CVE-2016-10517). Confidential information can be exposed externally.	High	C Cwe 254 Redislabs Redis	8 years ago
CVE-2017-10155	Vulnerability in c (CVE-2017-10155) vulnerability in c (CVE-2017-10155). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Oracle MySQL	8 years ago
CVE-2017-15286	Vulnerability in c (CVE-2017-15286) vulnerability in c (CVE-2017-15286). Risk of unauthorized operations or information disclosure.	High	C Cwe 476 SQLite	8 years ago
CVE-2017-14730	Vulnerability in elasticsearch (CVE-2017-14730) vulnerability in elasticsearch (CVE-2017-14730). Successful exploitation can lead to full system takeover.	High	Cwe 732 Elasticsearch Logstash Gentoo +1	8 years ago
CVE-2017-14227	Out-of-Bounds Read in c (CVE-2017-14227) vulnerability in c (CVE-2017-14227). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 125 MongoDB	8 years ago
CVE-2017-7547	Vulnerability in postgresql (CVE-2017-7547) vulnerability in postgresql (CVE-2017-7547). Successful exploitation can lead to full system takeover.	High	Cwe 522 PostgreSQL	8 years ago
CVE-2017-7548	Vulnerability in dos (CVE-2017-7548) vulnerability in dos (CVE-2017-7548). Data can be tampered with by attackers.	High	Denial of Service Cwe 862 PostgreSQL Debian +1	8 years ago

Vulnerabilities

🍪 About cookies