Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: languages Tag: cwe-674 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-59927	Vulnerability in CVE-2026-59927 (CVE-2026-59927) vulnerability in CVE-2026-59927 (CVE-2026-59927). Risk of unauthorized operations or information disclosure.	Medium	Python Cwe 674 Cwe 755	6 hours ago
CVE-2026-14803	Vulnerability in c (CVE-2026-14803) vulnerability in c (CVE-2026-14803). Risk of unauthorized operations or information disclosure. Exploitable via ``_decode_value``.	Medium	C Denial of Service Cwe 674	2 days ago
CVE-2026-49451	Vulnerability in Microsoft.OpenAPI (CVE-2026-49451) vulnerability in Microsoft.OpenAPI (CVE-2026-49451). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.7.5` or later.	High	C# Cwe 674	1 week ago
CVE-2026-54888	Vulnerability in c (CVE-2026-54888) vulnerability in c (CVE-2026-54888). Risk of unauthorized operations or information disclosure.		Rust C Denial of Service Cwe 674	1 week ago
CVE-2026-47770	Vulnerability in c (CVE-2026-47770) vulnerability in c (CVE-2026-47770). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.2` or later.	Medium	C Denial of Service Cwe 674 Jqlang +1	1 week ago
CVE-2025-71382	Vulnerability in c (CVE-2025-71382) vulnerability in c (CVE-2025-71382). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 674 Artifex +1	2 weeks ago
CVE-2026-48513	Vulnerability in MessagePack (CVE-2026-48513) vulnerability in MessagePack (CVE-2026-48513). Risk of unauthorized operations or information disclosure. Exploitable via ``DynamicUnionResolver``. Mitigation: upgrade to `3.1.7` or later.	High	C C# Insecure Deserialization Cwe 674 +1	2 weeks ago
CVE-2026-48512	Vulnerability in MessagePack (CVE-2026-48512) vulnerability in MessagePack (CVE-2026-48512). Risk of unauthorized operations or information disclosure. Exploitable via ``MessagePackSerializer.ConvertFromJson``. Mitigation: upgrade to `3.1.7` or later.	High	C C# Insecure Deserialization Cwe 674 +1	2 weeks ago
CVE-2026-48506	Vulnerability in MessagePack (CVE-2026-48506) vulnerability in MessagePack (CVE-2026-48506). Risk of unauthorized operations or information disclosure. Exploitable via ``StackOverflowException``. Mitigation: upgrade to `3.1.7` or later.	High	C C# Cwe 674 Messagepack	2 weeks ago
CVE-2026-48502	Out-of-Bounds Read in MessagePack (CVE-2026-48502) vulnerability in MessagePack (CVE-2026-48502). Risk of unauthorized operations or information disclosure. Exploitable via ``tokenSize``. Mitigation: upgrade to `3.1.7` or later.	High	C C# Cwe 125 Cwe 190 +8	2 weeks ago
CVE-2026-54297	Vulnerability in faraday (CVE-2026-54297) vulnerability in faraday (CVE-2026-54297). Risk of unauthorized operations or information disclosure. Exploitable via ``Hash``. Mitigation: upgrade to `1.10.6` or later.	High	Ruby Denial of Service Cwe 674 Faraday Project +2	2 weeks ago
CVE-2026-48712	Vulnerability in protobufjs (CVE-2026-48712) vulnerability in protobufjs (CVE-2026-48712). Risk of unauthorized operations or information disclosure. Exploitable via ``google.protobuf.Any``. Mitigation: upgrade to `8.4.1` or later.	High	JavaScript Cwe 674 Protobufjs Project Protobufjs	3 weeks ago
CVE-2026-54269	Vulnerability in protobufjs (CVE-2026-54269) vulnerability in protobufjs (CVE-2026-54269). Risk of unauthorized operations or information disclosure. Exploitable via ``hasOwnProperty``. Mitigation: upgrade to `8.6.0` or later.	Medium	JavaScript Cwe 674 Cwe 754 Protobufjs Project +2	3 weeks ago
CVE-2026-9358	Vulnerability in dos (CVE-2026-9358) vulnerability in dos (CVE-2026-9358). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Denial of Service Cwe 404 Cwe 674	1 month ago
CVE-2026-4224	Vulnerability in libpython (CVE-2026-4224) vulnerability in libpython (CVE-2026-4224). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.13.13, 3.14.4` or later.	High	C Cwe 674 Python	1 month ago
CVE-2026-6811	Vulnerability in CVE-2026-6811 (CVE-2026-6811) vulnerability in CVE-2026-6811 (CVE-2026-6811). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 674	1 month ago
CVE-2026-41935	Vulnerability in dos (CVE-2026-41935) vulnerability in dos (CVE-2026-41935). Risk of unauthorized operations or information disclosure.	High	PHP Denial of Service Cwe 209 Cwe 674	1 month ago
CVE-2026-45740	Vulnerability in protobufjs (CVE-2026-45740) vulnerability in protobufjs (CVE-2026-45740). Risk of unauthorized operations or information disclosure. Exploitable via ``nested``. Mitigation: upgrade to `8.2.0` or later.	Medium	JavaScript Cwe 674 Protobufjs Project Protobufjs	1 month ago
CVE-2026-44289	Vulnerability in protobufjs (CVE-2026-44289) vulnerability in protobufjs (CVE-2026-44289). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.2` or later.	High	JavaScript Cwe 674 Protobufjs Project Protobufjs +1	1 month ago
CVE-2026-40612	Vulnerability in c (CVE-2026-40612) vulnerability in c (CVE-2026-40612). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 674 Jqlang Jq	1 month ago
CVE-2026-41311	Vulnerability in liquidjs (CVE-2026-41311) vulnerability in liquidjs (CVE-2026-41311). Risk of unauthorized operations or information disclosure. Exploitable via ``getBlockRender``. Mitigation: upgrade to `10.25.7` or later.	High	JavaScript Denial of Service Cwe 674 Liquidjs	1 month ago
CVE-2026-44844	Vulnerability in eml_parser (CVE-2026-44844) vulnerability in eml_parser (CVE-2026-44844). Risk of unauthorized operations or information disclosure. Exploitable via ``RecursionError``. Mitigation: upgrade to `3.0.1` or later.		Python Cwe 674	2 months ago
CVE-2026-46689	Vulnerability in scim_proto (CVE-2026-46689) vulnerability in scim_proto (CVE-2026-46689). Risk of unauthorized operations or information disclosure. Exploitable via ``GET``. Mitigation: upgrade to `1.9.3` or later.		Rust Cwe 248 Cwe 400 Cwe 674	2 months ago
CVE-2026-43080	Vulnerability in c (CVE-2026-43080) vulnerability in c (CVE-2026-43080). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 674 Linux Linux Kernel	2 months ago
CVE-2026-42039	Vulnerability in axios (CVE-2026-42039) vulnerability in axios (CVE-2026-42039). Risk of unauthorized operations or information disclosure. Exploitable via `POST /forward`. Mitigation: upgrade to `0.31.1` or later.	High	JavaScript Cwe 674 Cwe 770 Axios	2 months ago
CVE-2026-41673	Vulnerability in @xmldom/xmldom (CVE-2026-41673) vulnerability in @xmldom/xmldom (CVE-2026-41673). Risk of unauthorized operations or information disclosure. Exploitable via ``node.textContent``. Mitigation: upgrade to `0.9.10` or later.	High	JavaScript Cwe 674 Cwe 776	2 months ago
CVE-2026-32141	Vulnerability in webreflection (CVE-2026-32141) vulnerability in webreflection (CVE-2026-32141). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.0` or later.	High	JavaScript Cwe 674 Cwe 770 Webreflection +1	3 months ago
CVE-2026-3520	Vulnerability in dos (CVE-2026-3520) vulnerability in dos (CVE-2026-3520). Risk of unauthorized operations or information disclosure.	High	JavaScript Denial of Service Cwe 674 Cwe 770 +2	4 months ago
CVE-2026-0994	Vulnerability in protobuf (CVE-2026-0994) vulnerability in protobuf (CVE-2026-0994). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.29.6` or later.	High	Python Denial of Service Cwe 674 Google +1	5 months ago
CVE-2024-35886	Vulnerability in c (CVE-2024-35886) vulnerability in c (CVE-2024-35886). Successful exploitation can lead to full system takeover.	High	C Cwe 674 Cwe 787 Linux +3	2 years ago
CVE-2017-10910	Vulnerability in mqttjs-project (CVE-2017-10910) vulnerability in mqttjs-project (CVE-2017-10910). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cwe 674 Mqttjs Project Mqttjs	8 years ago
CVE-2017-16419	Vulnerability in adobe (CVE-2017-16419) vulnerability in adobe (CVE-2017-16419). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cwe 674 Adobe Acrobat +3	8 years ago
CVE-2017-14861	Vulnerability in cpp (CVE-2017-14861) vulnerability in cpp (CVE-2017-14861). Risk of unauthorized operations or information disclosure.	Medium	C++ Denial of Service Cwe 190 Cwe 674 +1	8 years ago
CVE-2017-12964	Vulnerability in cpp (CVE-2017-12964) vulnerability in cpp (CVE-2017-12964). Risk of unauthorized operations or information disclosure.	High	C++ Denial of Service Cwe 674 Libsass	8 years ago
CVE-2017-11556	Vulnerability in cpp (CVE-2017-11556) vulnerability in cpp (CVE-2017-11556). Risk of unauthorized operations or information disclosure.	High	C++ Denial of Service Cwe 674 Libsass	8 years ago
CVE-2017-11164	Vulnerability in c (CVE-2017-11164) vulnerability in c (CVE-2017-11164). Risk of unauthorized operations or information disclosure.	High	C Cwe 674 Pcre	8 years ago
CVE-2017-9766	Vulnerability in c (CVE-2017-9766) vulnerability in c (CVE-2017-9766). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 674 Wireshark +2	9 years ago
CVE-2017-9729	Vulnerability in c (CVE-2017-9729) vulnerability in c (CVE-2017-9729). Risk of unauthorized operations or information disclosure.	High	C Cwe 674 Uclibc	9 years ago
CVE-2017-9617	Vulnerability in c (CVE-2017-9617) vulnerability in c (CVE-2017-9617). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 674 Wireshark	9 years ago
CVE-2017-9616	Vulnerability in c (CVE-2017-9616) vulnerability in c (CVE-2017-9616). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 674 Wireshark	9 years ago
CVE-2017-9438	Vulnerability in c (CVE-2017-9438) vulnerability in c (CVE-2017-9438). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 674 Virustotal +1	9 years ago
CVE-2017-9304	Vulnerability in c (CVE-2017-9304) vulnerability in c (CVE-2017-9304). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 674 Virustotal +1	9 years ago
CVE-2017-5839	Vulnerability in c (CVE-2017-5839) vulnerability in c (CVE-2017-5839). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 674 Gstreamer	9 years ago

Vulnerabilities

🍪 About cookies