Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: languages Clear

ID	Title	Severity	Tags	Detected
CVE-2026-78244	Vulnerability in sqli (CVE-2026-78244) vulnerability in sqli (CVE-2026-78244). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	5 days ago
CVE-2026-78337	Unrestricted File Upload in CVE-2026-78337 (CVE-2026-78337) vulnerability in CVE-2026-78337 (CVE-2026-78337). Risk of unauthorized operations or information disclosure.		JavaScript Cwe 434	5 days ago
CVE-2026-76172	Vulnerability in CVE-2026-76172 (CVE-2026-76172) vulnerability in CVE-2026-76172 (CVE-2026-76172). Data can be tampered with by attackers. Mitigation: upgrade to `2.4.5` or later.	High	JavaScript Cwe 177	5 days ago
CVE-2026-75931	Vulnerability in CVE-2026-75931 (CVE-2026-75931) vulnerability in CVE-2026-75931 (CVE-2026-75931). Data can be tampered with by attackers. Mitigation: upgrade to `2.4.5` or later.	High	JavaScript Cwe 436	5 days ago
CVE-2026-75975	Vulnerability in CVE-2026-75975 (CVE-2026-75975) vulnerability in CVE-2026-75975 (CVE-2026-75975). Data can be tampered with by attackers. Mitigation: upgrade to `2.4.5` or later.	High	JavaScript Cwe 20 Cwe 918	5 days ago
CVE-2026-75899	Vulnerability in CVE-2026-75899 (CVE-2026-75899) vulnerability in CVE-2026-75899 (CVE-2026-75899). Data can be tampered with by attackers. Mitigation: upgrade to `2.4.5` or later.	High	JavaScript Cwe 174 Cwe 918	5 days ago
CVE-2026-78202	Vulnerability in CVE-2026-78202 (CVE-2026-78202) vulnerability in CVE-2026-78202 (CVE-2026-78202). Risk of unauthorized operations or information disclosure.	High	PHP Cwe 284 Cwe 434	5 days ago
CVE-2026-78197	Vulnerability in sqli (CVE-2026-78197) vulnerability in sqli (CVE-2026-78197). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	5 days ago
CVE-2026-78201	Vulnerability in sqli (CVE-2026-78201) vulnerability in sqli (CVE-2026-78201). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	5 days ago
CVE-2026-78198	Vulnerability in sqli (CVE-2026-78198) vulnerability in sqli (CVE-2026-78198). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	5 days ago
CVE-2026-78199	Vulnerability in sqli (CVE-2026-78199) vulnerability in sqli (CVE-2026-78199). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	5 days ago
CVE-2026-78200	Vulnerability in sqli (CVE-2026-78200) vulnerability in sqli (CVE-2026-78200). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	5 days ago
CVE-2026-78186	Vulnerability in c (CVE-2026-78186) vulnerability in c (CVE-2026-78186). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 617	5 days ago
CVE-2026-78185	Vulnerability in sqli (CVE-2026-78185) vulnerability in sqli (CVE-2026-78185). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	5 days ago
CVE-2026-78213	Cross-Site Scripting (XSS) in CVE-2026-78213 (CVE-2026-78213) cross-site scripting in CVE-2026-78213 (CVE-2026-78213). Confidential information can be exposed externally.	High	JavaScript Cross-Site Scripting Cwe 79	5 days ago
CVE-2026-78179	Code Injection in CVE-2026-78179 (CVE-2026-78179) code injection in CVE-2026-78179 (CVE-2026-78179). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cwe 94 Cwe 1321	5 days ago
CVE-2026-78178	Code Injection in CVE-2026-78178 (CVE-2026-78178) code injection in CVE-2026-78178 (CVE-2026-78178). Risk of unauthorized operations or information disclosure.	High	JavaScript Cwe 94 Cwe 1321	6 days ago
CVE-2026-78171	Vulnerability in sqli (CVE-2026-78171) vulnerability in sqli (CVE-2026-78171). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	6 days ago
CVE-2026-78166	Vulnerability in CVE-2026-78166 (CVE-2026-78166) vulnerability in CVE-2026-78166 (CVE-2026-78166). Risk of unauthorized operations or information disclosure.	Medium	Java Cwe 74 Cwe 94	6 days ago
CVE-2026-78208	exceljs-hardened before 5.0.0 contains a path traversal vulnerability in the Workbook.addImage()... exceljs-hardened before 5.0.0 contains a path traversal vulnerability in the Workbook.addImage()...	High	JavaScript Path Traversal Cwe 73	6 days ago
CVE-2026-78209	exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at... exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at...	High	Cwe 1236 JavaScript Remote Code Execution	6 days ago
CVE-2026-78207	Vulnerability in c (CVE-2026-78207) vulnerability in c (CVE-2026-78207). Confidential information can be exposed externally.	Critical	C Cwe 1321	6 days ago
CVE-2026-78161	A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function... A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function...	High	C Cwe 119 Cwe 787 Buffer Overflow	6 days ago
CVE-2026-78206	exceljs-hardened before 5.0.0 decompresses all entries from supplied xlsx archives into memory... exceljs-hardened before 5.0.0 decompresses all entries from supplied xlsx archives into memory...	High	Denial of Service Cwe 409 JavaScript	6 days ago
CVE-2026-78160	Vulnerability in CVE-2026-78160 (CVE-2026-78160) vulnerability in CVE-2026-78160 (CVE-2026-78160). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 285 Cwe 639	6 days ago
CVE-2026-78157	A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrf_rx_aar_cb of the... A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrf_rx_aar_cb of the...	High	C Cwe 119 Cwe 125 Remote Code Execution	6 days ago
CVE-2026-78148	Vulnerability in cpp (CVE-2026-78148) vulnerability in cpp (CVE-2026-78148). Risk of unauthorized operations or information disclosure.	Medium	C++ Cwe 404 Cwe 476	6 days ago
CVE-2026-78147	Vulnerability in cpp (CVE-2026-78147) vulnerability in cpp (CVE-2026-78147). Risk of unauthorized operations or information disclosure.	High	C++ Insecure Deserialization Cwe 20 Cwe 502	6 days ago
CVE-2026-78156	Buffer Overflow in c (CVE-2026-78156) vulnerability in c (CVE-2026-78156). Risk of unauthorized operations or information disclosure.	High	C Cwe 119 Cwe 122	6 days ago
CVE-2026-78144	Vulnerability in CVE-2026-78144 (CVE-2026-78144) vulnerability in CVE-2026-78144 (CVE-2026-78144). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 285 Cwe 639	6 days ago
CVE-2026-78143	Vulnerability in sqli (CVE-2026-78143) vulnerability in sqli (CVE-2026-78143). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	6 days ago
CVE-2026-21962 KEV	[KEV] Vulnerability in Oracle c (CVE-2026-21962) vulnerability in Oracle c (CVE-2026-21962). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.	Critical	C Apache Cwe 284 Oracle +2	6 days ago
CVE-2026-78142	Vulnerability in CVE-2026-78142 (CVE-2026-78142) vulnerability in CVE-2026-78142 (CVE-2026-78142). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 285 Cwe 639	6 days ago
CVE-2026-78140	Vulnerability in CVE-2026-78140 (CVE-2026-78140) vulnerability in CVE-2026-78140 (CVE-2026-78140). Risk of unauthorized operations or information disclosure.	Medium	Java Cwe 791 Cwe 1336	6 days ago
CVE-2026-78183	Out-of-Bounds Write in c (CVE-2026-78183) out-of-bounds write in c (CVE-2026-78183). Successful exploitation can lead to full system takeover.	Critical	C Cwe 787	6 days ago
CVE-2026-9769	Uncontrolled recursion DoS in JustHTML() via deeply nested HTML Uncontrolled recursion DoS in JustHTML() via deeply nested HTML	High	Denial of Service Cwe 674 Python	6 days ago
CVE-2026-4671	justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector... justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector...	High	Cwe 400 Denial Of Service JavaScript	6 days ago
CVE-2026-5388	Vulnerability in CVE-2026-5388 (CVE-2026-5388) vulnerability in CVE-2026-5388 (CVE-2026-5388). Successful exploitation can lead to full system takeover.	Critical	JavaScript Cwe 20	6 days ago
CVE-2026-78112	Vulnerability in sqli (CVE-2026-78112) vulnerability in sqli (CVE-2026-78112). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	6 days ago
CVE-2026-78115	Vulnerability in CVE-2026-78115 (CVE-2026-78115) vulnerability in CVE-2026-78115 (CVE-2026-78115). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 266 Cwe 285	6 days ago
CVE-2026-78060	Cross-Site Scripting (XSS) in CVE-2026-78060 (CVE-2026-78060) cross-site scripting in CVE-2026-78060 (CVE-2026-78060). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Cwe 94	6 days ago
CVE-2026-78059	Cross-Site Scripting (XSS) in CVE-2026-78059 (CVE-2026-78059) cross-site scripting in CVE-2026-78059 (CVE-2026-78059). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Cwe 94	6 days ago
CVE-2026-78055	Cross-Site Scripting (XSS) in CVE-2026-78055 (CVE-2026-78055) cross-site scripting in CVE-2026-78055 (CVE-2026-78055). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Cwe 94	1 week ago
CVE-2026-78136	chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in... chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in...	High	Cwe 95 Python Remote Code Execution	1 week ago
CVE-2026-78054	Cross-Site Scripting (XSS) in CVE-2026-78054 (CVE-2026-78054) cross-site scripting in CVE-2026-78054 (CVE-2026-78054). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Cwe 94	1 week ago
CVE-2026-0551	Unsafe Deserialization in wordpress (CVE-2026-0551) vulnerability in wordpress (CVE-2026-0551). Successful exploitation can lead to full system takeover.	High	PHP WordPress Insecure Deserialization Cwe 502	1 week ago
CVE-2026-78049	Buffer Overflow in c (CVE-2026-78049) vulnerability in c (CVE-2026-78049). Risk of unauthorized operations or information disclosure.	Low	C Cwe 119 Cwe 125	1 week ago
CVE-2026-12999	Vulnerability in c (CVE-2026-12999) vulnerability in c (CVE-2026-12999). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 401	1 week ago
CVE-2026-74729	Vulnerability in c (CVE-2026-74729) vulnerability in c (CVE-2026-74729). Risk of unauthorized operations or information disclosure.		C	1 week ago
CVE-2026-74726	Vulnerability in c (CVE-2026-74726) vulnerability in c (CVE-2026-74726). Confidential information can be exposed externally.	High	C	1 week ago

Vulnerabilities

🍪 About cookies