Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
Filtering: Group: languages Clear
ID Title
CVE-2026-34221 Vulnerability in mikro-orm (CVE-2026-34221)
vulnerability in mikro-orm (CVE-2026-34221). Data can be tampered with by attackers.
CVE-2026-34231 Cross-Site Scripting (XSS) in slippers (CVE-2026-34231)
cross-site scripting in slippers (CVE-2026-34231). Risk of unauthorized operations or information disclosure. Exploitable via ``slippers``. Mitigation: upgrade to `0.6.3` or later.
CVE-2026-34235 Out-of-Bounds Read in c (CVE-2026-34235)
vulnerability in c (CVE-2026-34235). Confidential information can be exposed externally.
CVE-2026-34219 Vulnerability in protocol (CVE-2026-34219)
vulnerability in protocol (CVE-2026-34219). Risk of unauthorized operations or information disclosure.
CVE-2026-0596 OS Command Injection in mlflow (CVE-2026-0596)
OS command injection in mlflow (CVE-2026-0596). Successful exploitation can lead to full system takeover. Exploitable via ``model_uri``. Mitigation: upgrade to `3.9.0` or later.
CVE-2026-34532 Authorization Flaw in parseplatform (CVE-2026-34532)
vulnerability in parseplatform (CVE-2026-34532). Confidential information can be exposed externally.
CVE-2026-34373 Vulnerability in parseplatform (CVE-2026-34373)
vulnerability in parseplatform (CVE-2026-34373). Successful exploitation can lead to full system takeover.
CVE-2026-34377 Vulnerability in zfnd (CVE-2026-34377)
vulnerability in zfnd (CVE-2026-34377). Data can be tampered with by attackers.
CVE-2026-34504 SSRF (Server-Side Request Forgery) in c (CVE-2026-34504)
SSRF in c (CVE-2026-34504). Risk of unauthorized operations or information disclosure.
CVE-2026-34224 Vulnerability in parseplatform (CVE-2026-34224)
vulnerability in parseplatform (CVE-2026-34224). Data can be tampered with by attackers.
CVE-2026-34363 Vulnerability in parseplatform (CVE-2026-34363)
vulnerability in parseplatform (CVE-2026-34363). Confidential information can be exposed externally.
CVE-2026-34172 Vulnerability in giskard-agents (CVE-2026-34172)
vulnerability in giskard-agents (CVE-2026-34172). Successful exploitation can lead to full system takeover. Exploitable via ``Environment``. Mitigation: upgrade to `1.0.2b1` or later.
CVE-2026-34202 Code Injection in deserialization (CVE-2026-34202)
code injection in deserialization (CVE-2026-34202). Risk of unauthorized operations or information disclosure.
CVE-2026-33276 Cross-Site Scripting (XSS) in checkmk (CVE-2026-33276)
cross-site scripting in checkmk (CVE-2026-33276). Risk of unauthorized operations or information disclosure.
CVE-2026-20915 Cross-Site Scripting (XSS) in checkmk (CVE-2026-20915)
cross-site scripting in checkmk (CVE-2026-20915). Risk of unauthorized operations or information disclosure.
CVE-2026-34156 Vulnerability in nocobase (CVE-2026-34156)
vulnerability in nocobase (CVE-2026-34156). Successful exploitation can lead to full system takeover.
CVE-2026-3308 Vulnerability in c (CVE-2026-3308)
vulnerability in c (CVE-2026-3308). Successful exploitation can lead to full system takeover.
CVE-2026-5198 Vulnerability in sqli (CVE-2026-5198)
vulnerability in sqli (CVE-2026-5198). Risk of unauthorized operations or information disclosure.
CVE-2026-32920 Vulnerability in c (CVE-2026-32920)
vulnerability in c (CVE-2026-32920). Successful exploitation can lead to full system takeover.
CVE-2026-34060 Code Injection in shopify (CVE-2026-34060)
code injection in shopify (CVE-2026-34060). Successful exploitation can lead to full system takeover.
CVE-2026-33984 Vulnerability in c (CVE-2026-33984)
vulnerability in c (CVE-2026-33984). Successful exploitation can lead to full system takeover.
CVE-2026-33986 Vulnerability in c (CVE-2026-33986)
vulnerability in c (CVE-2026-33986). Successful exploitation can lead to full system takeover.
CVE-2026-21710 Vulnerability in node (CVE-2026-21710)
vulnerability in node (CVE-2026-21710). Risk of unauthorized operations or information disclosure. Exploitable via ``TypeError``. Mitigation: upgrade to `20.20.2, 22.22.2, 24.14.1, 25.8.2` or later.
CVE-2026-21717 Vulnerability in nodejs (CVE-2026-21717)
vulnerability in nodejs (CVE-2026-21717). Risk of unauthorized operations or information disclosure.
CVE-2026-21713 Vulnerability in nodejs (CVE-2026-21713)
vulnerability in nodejs (CVE-2026-21713). Confidential information can be exposed externally.
CVE-2026-21711 Vulnerability in nodejs (CVE-2026-21711)
vulnerability in nodejs (CVE-2026-21711). Risk of unauthorized operations or information disclosure.
CVE-2026-21714 Vulnerability in nodejs (CVE-2026-21714)
vulnerability in nodejs (CVE-2026-21714). Risk of unauthorized operations or information disclosure.
CVE-2026-21715 Vulnerability in nodejs (CVE-2026-21715)
vulnerability in nodejs (CVE-2026-21715). Risk of unauthorized operations or information disclosure.
CVE-2026-4046 Vulnerability in c (CVE-2026-4046)
vulnerability in c (CVE-2026-4046). Risk of unauthorized operations or information disclosure.
CVE-2026-34237 Vulnerability in io.modelcontextprotocol.sdk:mcp-core (CVE-2026-34237)
vulnerability in io.modelcontextprotocol.sdk:mcp-core (CVE-2026-34237). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.18.3` or later.
CVE-2026-21712 Vulnerability in nodejs (CVE-2026-21712)
vulnerability in nodejs (CVE-2026-21712). Risk of unauthorized operations or information disclosure.
CVE-2026-73427 Cross-Site Scripting (XSS) in trix (CVE-2026-73427)
cross-site scripting in trix (CVE-2026-73427). Risk of unauthorized operations or information disclosure. Exploitable via ``StringPiece.fromJSON``. Mitigation: upgrade to `2.1.18` or later.
CVE-2026-34226 Vulnerability in capricorn86 (CVE-2026-34226)
vulnerability in capricorn86 (CVE-2026-34226). Confidential information can be exposed externally. Exploitable via ``window.location``.
CVE-2026-33940 Code Injection in handlebarsjs (CVE-2026-33940)
code injection in handlebarsjs (CVE-2026-33940). Successful exploitation can lead to full system takeover. Exploitable via ``undefined``.
CVE-2026-33941 Cross-Site Scripting (XSS) in handlebarsjs (CVE-2026-33941)
cross-site scripting in handlebarsjs (CVE-2026-33941). Successful exploitation can lead to full system takeover.
CVE-2026-33943 Code Injection in capricorn86 (CVE-2026-33943)
code injection in capricorn86 (CVE-2026-33943). Successful exploitation can lead to full system takeover. Exploitable via ``ECMAScriptModuleCompiler``.
CVE-2026-33939 Vulnerability in dos (CVE-2026-33939)
vulnerability in dos (CVE-2026-33939). Risk of unauthorized operations or information disclosure. Exploitable via ``undefined``.
CVE-2026-33937 Code Injection in handlebarsjs (CVE-2026-33937)
code injection in handlebarsjs (CVE-2026-33937). Successful exploitation can lead to full system takeover. Exploitable via ``value``.
CVE-2026-33938 Code Injection in handlebarsjs (CVE-2026-33938)
code injection in handlebarsjs (CVE-2026-33938). Successful exploitation can lead to full system takeover.
CVE-2026-33895 Vulnerability in digitalbazaar (CVE-2026-33895)
vulnerability in digitalbazaar (CVE-2026-33895). Data can be tampered with by attackers. Exploitable via ``crypto.verify``.
CVE-2026-33896 Vulnerability in digitalbazaar (CVE-2026-33896)
vulnerability in digitalbazaar (CVE-2026-33896). Confidential information can be exposed externally. Exploitable via ``basicConstraints``.
CVE-2026-33891 Vulnerability in dos (CVE-2026-33891)
vulnerability in dos (CVE-2026-33891). Risk of unauthorized operations or information disclosure.
CVE-2026-33894 Vulnerability in digitalbazaar (CVE-2026-33894)
vulnerability in digitalbazaar (CVE-2026-33894). Data can be tampered with by attackers.
CVE-2026-65914 Cross-Site Scripting (XSS) in dompurify (CVE-2026-65914)
cross-site scripting in dompurify (CVE-2026-65914). Risk of unauthorized operations or information disclosure. Exploitable via `POST /sanitize`. Mitigation: upgrade to `3.3.2` or later.
CVE-2026-30567 Cross-Site Scripting (XSS) in ahsanriaz26gmailcom (CVE-2026-30567)
cross-site scripting in ahsanriaz26gmailcom (CVE-2026-30567). Risk of unauthorized operations or information disclosure.
CVE-2026-5010 Cross-Site Scripting (XSS) in CVE-2026-5010 (CVE-2026-5010)
cross-site scripting in CVE-2026-5010 (CVE-2026-5010). Risk of unauthorized operations or information disclosure.
CVE-2026-33728 Unsafe Deserialization in com.datadoghq:dd-java-agent (CVE-2026-33728)
vulnerability in com.datadoghq:dd-java-agent (CVE-2026-33728). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.60.3` or later.
CVE-2026-33701 Unsafe Deserialization in io.opentelemetry.javaagent:opentelemetry-javaagent (CVE-2026-33701)
vulnerability in io.opentelemetry.javaagent:opentelemetry-javaagent (CVE-2026-33701). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.26.1` or later.
CVE-2026-4926 Vulnerability in c (CVE-2026-4926)
vulnerability in c (CVE-2026-4926). Risk of unauthorized operations or information disclosure.
CVE-2026-30463 SQL Injection in sqli (CVE-2026-30463)
SQL injection in sqli (CVE-2026-30463). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →