Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: languages Clear

ID	Title	Severity	Tags	Detected
CVE-2026-13485	Vulnerability in sqli (CVE-2026-13485) vulnerability in sqli (CVE-2026-13485). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	2 months ago
CVE-2026-10646	Use-After-Free in c (CVE-2026-10646) vulnerability in c (CVE-2026-10646). Data can be tampered with by attackers.	High	C Denial of Service Cwe 416 Zephyrproject +1	2 months ago
CVE-2026-10644	Out-of-Bounds Write in c (CVE-2026-10644) out-of-bounds write in c (CVE-2026-10644). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 787 Zephyrproject +1	2 months ago
CVE-2026-10593	Vulnerability in c (CVE-2026-10593) vulnerability in c (CVE-2026-10593). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 476 Zephyrproject +1	2 months ago
CVE-2026-58055	Vulnerability in c (CVE-2026-58055) vulnerability in c (CVE-2026-58055). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 444 Nghttp2	2 months ago
CVE-2026-58054	MyBB 1.8.40 does not restrict which usergroup a limited Admin Control Panel user may assign when... MyBB 1.8.40 does not restrict which usergroup a limited Admin Control Panel user may assign when...	High	Cwe 269 Mybb PHP Privilege Escalation	2 months ago
CVE-2026-58049	FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes... FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes...	High	C Cwe 787 Ffmpeg Remote Code Execution	2 months ago
CVE-2026-8095	Vulnerability in wordpress (CVE-2026-8095) vulnerability in wordpress (CVE-2026-8095). Data can be tampered with by attackers.	High	PHP WordPress Cwe 73	2 months ago
CVE-2026-10643	Out-of-Bounds Write in c (CVE-2026-10643) out-of-bounds write in c (CVE-2026-10643). Data can be tampered with by attackers.	High	C Cwe 787 Zephyrproject Zephyr	2 months ago
CVE-2026-12432	Vulnerability in wordpress (CVE-2026-12432) vulnerability in wordpress (CVE-2026-12432). Risk of unauthorized operations or information disclosure.	Medium	JavaScript WordPress Cwe 862	2 months ago
CVE-2023-37524	Vulnerability in csharp (CVE-2023-37524) vulnerability in csharp (CVE-2023-37524). Successful exploitation can lead to full system takeover.	High	C# Cwe 1104 Hcltech Traveler For Microsoft Outlook	2 months ago
CVE-2026-36478	Vulnerability in csharp (CVE-2026-36478) vulnerability in csharp (CVE-2026-36478). Risk of unauthorized operations or information disclosure.	High	C# Denial of Service Cwe 400	2 months ago
CVE-2026-54244	Authorization Flaw in statamic/cms (CVE-2026-54244) vulnerability in statamic/cms (CVE-2026-54244). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.74.0` or later.	Low	PHP Laravel Cwe 863	2 months ago
CVE-2026-54243	Vulnerability in statamic/cms (CVE-2026-54243) vulnerability in statamic/cms (CVE-2026-54243). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.73.24` or later.	Medium	PHP Laravel Cwe 1236	2 months ago
CVE-2026-54242	Vulnerability in statamic/cms (CVE-2026-54242) vulnerability in statamic/cms (CVE-2026-54242). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.73.24` or later.	Medium	PHP Laravel Cwe 367 Cwe 918	2 months ago
CVE-2026-50015	Path Traversal in pnpm (CVE-2026-50015) path traversal in pnpm (CVE-2026-50015). Data can be tampered with by attackers. Exploitable via ``patchedDependencies``. Mitigation: upgrade to `11.4.0` or later.	High	C Cwe 22 Pnpm	2 months ago
CVE-2026-50029	Vulnerability in js-toml (CVE-2026-50029) vulnerability in js-toml (CVE-2026-50029). Risk of unauthorized operations or information disclosure. Exploitable via ``false``. Mitigation: upgrade to `1.1.2` or later.	Medium	JavaScript Cwe 697	2 months ago
CVE-2026-49869	OS Command Injection in kestra (CVE-2026-49869) OS command injection in kestra (CVE-2026-49869). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.0.45` or later.	Critical	Python Remote Code Execution Cwe 78 Cwe 184 +3	2 months ago
CVE-2026-53306	Vulnerability in c (CVE-2026-53306) vulnerability in c (CVE-2026-53306). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 193 Linux Linux Kernel	2 months ago
CVE-2026-53314	Vulnerability in c (CVE-2026-53314) vulnerability in c (CVE-2026-53314). Risk of unauthorized operations or information disclosure.	Medium	C Linux Linux Kernel	2 months ago
CVE-2026-53311	Vulnerability in c (CVE-2026-53311) vulnerability in c (CVE-2026-53311). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 908 Linux Linux Kernel	2 months ago
CVE-2026-53313	Vulnerability in c (CVE-2026-53313) vulnerability in c (CVE-2026-53313). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 476 Linux Linux Kernel	2 months ago
CVE-2026-53289	Vulnerability in c (CVE-2026-53289) vulnerability in c (CVE-2026-53289). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 476 Linux Linux Kernel	2 months ago
CVE-2026-53292	Vulnerability in c (CVE-2026-53292) vulnerability in c (CVE-2026-53292). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 617 Linux Linux Kernel	2 months ago
CVE-2026-53284	Vulnerability in c (CVE-2026-53284) vulnerability in c (CVE-2026-53284). Risk of unauthorized operations or information disclosure.	High	C Cwe 476 Linux Linux Kernel	2 months ago
CVE-2026-29509	Path Traversal in path-traversal (CVE-2026-29509) path traversal in path-traversal (CVE-2026-29509). Risk of unauthorized operations or information disclosure.	Medium	Python Path Traversal Cwe 22	2 months ago
CVE-2026-48778	OS Command Injection in cpp (CVE-2026-48778) OS command injection in cpp (CVE-2026-48778). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.9.6.1` or later.	High	C++ Cwe 78 Notepad Plus Plus Notepad	2 months ago
CVE-2026-48800	OS Command Injection in cpp (CVE-2026-48800) OS command injection in cpp (CVE-2026-48800). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.9.6.1` or later.	High	C++ Cwe 78 Notepad Plus Plus Notepad	2 months ago
CVE-2026-52884	Vulnerability in cpp (CVE-2026-52884) vulnerability in cpp (CVE-2026-52884). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.9.6.2` or later.	High	C++ Path Traversal Cwe 42 Notepad Plus Plus +1	2 months ago
CVE-2026-52885	Vulnerability in cpp (CVE-2026-52885) vulnerability in cpp (CVE-2026-52885). Data can be tampered with by attackers. Mitigation: upgrade to `8.9.6.4` or later.	Medium	C++ Cwe 367 Notepad Plus Plus Notepad	2 months ago
CVE-2026-48813	Vulnerability in flawfinder (CVE-2026-48813) vulnerability in flawfinder (CVE-2026-48813). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.20` or later.		C Cwe 74	2 months ago
CVE-2026-48804	Vulnerability in python-socketio (CVE-2026-48804) vulnerability in python-socketio (CVE-2026-48804). Risk of unauthorized operations or information disclosure. Exploitable via ``EVENT``. Mitigation: upgrade to `5.16.2` or later.	High	Python Cwe 770	2 months ago
CVE-2026-48802	Vulnerability in python-engineio (CVE-2026-48802) vulnerability in python-engineio (CVE-2026-48802). Risk of unauthorized operations or information disclosure. Exploitable via ``connect``. Mitigation: upgrade to `4.13.2` or later.	High	Python Denial of Service Cwe 770	2 months ago
CVE-2026-48809	Vulnerability in python-engineio (CVE-2026-48809) vulnerability in python-engineio (CVE-2026-48809). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.13.2` or later.	High	Python Cwe 770	2 months ago
CVE-2026-48801	Vulnerability in linkify-it (CVE-2026-48801) vulnerability in linkify-it (CVE-2026-48801). Risk of unauthorized operations or information disclosure. Exploitable via ``LinkifyIt.prototype.match``. Mitigation: upgrade to `5.0.1` or later.	High	JavaScript Denial of Service Cwe 1333 Markdown It +1	2 months ago
CVE-2026-55188	Information Disclosure in CVE-2026-55188 (CVE-2026-55188) vulnerability in CVE-2026-55188 (CVE-2026-55188). Confidential information can be exposed externally. Mitigation: upgrade to `1.0.0-beta.9` or later.	High	Rust Cwe 200 Cwe 522 Cwe 862 +1	2 months ago
CVE-2026-55189	Vulnerability in CVE-2026-55189 (CVE-2026-55189) vulnerability in CVE-2026-55189 (CVE-2026-55189). Confidential information can be exposed externally. Mitigation: upgrade to `1.0.0-beta.9` or later.	High	Rust Cwe 862 Cwe 863	2 months ago
CVE-2026-55838	Vulnerability in CVE-2026-55838 (CVE-2026-55838) vulnerability in CVE-2026-55838 (CVE-2026-55838). Risk of unauthorized operations or information disclosure.	Medium	Rust Cwe 862	2 months ago
CVE-2026-52781	Cross-Site Scripting (XSS) in CVE-2026-52781 (CVE-2026-52781) cross-site scripting in CVE-2026-52781 (CVE-2026-52781). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `17.3.3` or later.	Medium	JavaScript Cwe 79	2 months ago
CVE-2026-52783	Vulnerability in rails (CVE-2026-52783) vulnerability in rails (CVE-2026-52783). Confidential information can be exposed externally. Mitigation: upgrade to `17.3.3` or later.	High	Ruby Ruby on Rails Cwe 313	2 months ago
CVE-2026-49991	Path Traversal in path-traversal (CVE-2026-49991) path traversal in path-traversal (CVE-2026-49991). Data can be tampered with by attackers.	High	Rust Path Traversal Cwe 22 Cwe 862	2 months ago
CVE-2026-46386	Unsafe Deserialization in rails (CVE-2026-46386) vulnerability in rails (CVE-2026-46386). Successful exploitation can lead to full system takeover.	Critical	Ruby Ruby on Rails Insecure Deserialization Cwe 502 +3	2 months ago
CVE-2026-48758	Vulnerability in @sigstore/core (CVE-2026-48758) vulnerability in @sigstore/core (CVE-2026-48758). Risk of unauthorized operations or information disclosure. Exploitable via ``preAuthEncoding``. Mitigation: upgrade to `3.2.1` or later.	Medium	JavaScript Cwe 347	2 months ago
CVE-2026-57518	Vulnerability in privilege-escalation (CVE-2026-57518) vulnerability in privilege-escalation (CVE-2026-57518). Successful exploitation can lead to full system takeover.	High	PHP Remote Code Execution Privilege Escalation Cwe 862	2 months ago
CVE-2026-48497	Vulnerability in envoy (CVE-2026-48497) vulnerability in envoy (CVE-2026-48497). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35.11` or later.	Medium	C Cwe 480 Envoyproxy Envoy	2 months ago
CVE-2026-47778	Vulnerability in envoy (CVE-2026-47778) vulnerability in envoy (CVE-2026-47778). Confidential information can be exposed externally. Mitigation: upgrade to `1.35.11` or later.	Medium	C Cwe 158 Envoyproxy Envoy	2 months ago
CVE-2026-57652	Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions. Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions.	Medium	JavaScript Cwe 639	2 months ago
CVE-2026-57527	Unsafe Deserialization in deserialization (CVE-2026-57527) vulnerability in deserialization (CVE-2026-57527). Successful exploitation can lead to full system takeover.	High	Java Insecure Deserialization Cwe 502	2 months ago
CVE-2026-56057	Subscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions. Subscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions.	Critical	PHP Cwe 502	2 months ago
CVE-2026-56031	Unauthenticated PHP Object Injection in Uncanny Automator <= 7.3.1.2 versions. Unauthenticated PHP Object Injection in Uncanny Automator <= 7.3.1.2 versions.	High	PHP Cwe 502	2 months ago

Vulnerabilities

🍪 About cookies