Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: products Clear

ID	Title	Severity	Tags	Detected
CVE-2026-28849	Vulnerability in apple (CVE-2026-28849) vulnerability in apple (CVE-2026-28849). Data can be tampered with by attackers.	Medium	Cwe 290 Cwe 693 Apple macOS	1 month ago
CVE-2026-39877	Buffer Overflow in apple (CVE-2026-39877) vulnerability in apple (CVE-2026-39877). Successful exploitation can lead to full system takeover.	High	Cwe 119 Apple macOS	1 month ago
CVE-2026-28912	Vulnerability in apple (CVE-2026-28912) vulnerability in apple (CVE-2026-28912). Successful exploitation can lead to full system takeover.	High	Cwe 693 Apple macOS	1 month ago
CVE-2026-28900	Vulnerability in apple (CVE-2026-28900) vulnerability in apple (CVE-2026-28900). Data can be tampered with by attackers.	Medium	Cwe 290 Cwe 693 Apple macOS	1 month ago
CVE-2026-28896	Buffer Overflow in apple (CVE-2026-28896) vulnerability in apple (CVE-2026-28896). Confidential information can be exposed externally.	High	Cwe 119 Apple macOS	1 month ago
CVE-2026-28928	Use-After-Free in apple (CVE-2026-28928) vulnerability in apple (CVE-2026-28928). Successful exploitation can lead to full system takeover.	Critical	Cwe 416 Apple Ipados Iphone Os +3	1 month ago
CVE-2026-28982	Vulnerability in apple (CVE-2026-28982) vulnerability in apple (CVE-2026-28982). Successful exploitation can lead to full system takeover.	Critical	Cwe 362 Apple macOS	1 month ago
CVE-2026-28911	Buffer Overflow in apple (CVE-2026-28911) vulnerability in apple (CVE-2026-28911). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Apple macOS	1 month ago
CVE-2026-28931	Vulnerability in apple (CVE-2026-28931) vulnerability in apple (CVE-2026-28931). Successful exploitation can lead to full system takeover.	High	Cwe 120 Apple Ipados Iphone Os +3	1 month ago
CVE-2026-43665	Vulnerability in apple (CVE-2026-43665) vulnerability in apple (CVE-2026-43665). Confidential information can be exposed externally.	Medium	Cwe 862 Apple macOS	1 month ago
CVE-2026-66390	Cross-Site Scripting (XSS) in apache (CVE-2026-66390) cross-site scripting in apache (CVE-2026-66390). Risk of unauthorized operations or information disclosure.	Medium	Apache Cross-Site Scripting Cwe 79 Wicket	1 month ago
CVE-2026-66391	Vulnerability in apache (CVE-2026-66391) vulnerability in apache (CVE-2026-66391). Risk of unauthorized operations or information disclosure.	Medium	Apache Cwe 330 Cwe 693 Wicket	1 month ago
CVE-2026-66398	Vulnerability in CVE-2026-66398 (CVE-2026-66398) vulnerability in CVE-2026-66398 (CVE-2026-66398). Risk of unauthorized operations or information disclosure.		PHP Remote Code Execution Cwe 494	1 month ago
CVE-2026-66397	Path Traversal in path-traversal (CVE-2026-66397) path traversal in path-traversal (CVE-2026-66397). Risk of unauthorized operations or information disclosure.		PHP Path Traversal Cwe 22	1 month ago
CVE-2026-63077 KEV	[KEV] Unsafe Deserialization in Jetbrains teamcity (CVE-2026-63077) vulnerability in Jetbrains teamcity (CVE-2026-63077). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Remote Code Execution Cwe 502 Jetbrains Teamcity	1 month ago
CVE-2025-50455	SQL Injection in sqli (CVE-2025-50455) SQL injection in sqli (CVE-2025-50455). Confidential information can be exposed externally.	Critical	PHP Remote Code Execution SQL Injection Cwe 89	1 month ago
CVE-2026-59251	Vulnerability in c (CVE-2026-59251) vulnerability in c (CVE-2026-59251). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 770 Erlang +2	1 month ago
CVE-2026-58227	Vulnerability in erlang (CVE-2026-58227) vulnerability in erlang (CVE-2026-58227). Risk of unauthorized operations or information disclosure.	High	Cwe 674 Erlang Erlangotp Erlangssl	1 month ago
CVE-2026-55953	Vulnerability in erlang (CVE-2026-55953) vulnerability in erlang (CVE-2026-55953). Confidential information can be exposed externally.	High	Cwe 757 Erlang Erlangotp Erlangssl	1 month ago
CVE-2026-55737	Vulnerability in c (CVE-2026-55737) vulnerability in c (CVE-2026-55737). Risk of unauthorized operations or information disclosure.	High	C Cwe 195 Cwe 787 Erlang +2	1 month ago
CVE-2026-54890	Vulnerability in c (CVE-2026-54890) vulnerability in c (CVE-2026-54890). Risk of unauthorized operations or information disclosure.	High	C Cwe 191 Cwe 789 Cwe 1284 +3	1 month ago
CVE-2026-42792	Vulnerability in c (CVE-2026-42792) vulnerability in c (CVE-2026-42792). Risk of unauthorized operations or information disclosure.	High	C Cwe 755 Cwe 770 Erlang +2	1 month ago
CVE-2026-61511	Vulnerability in CVE-2026-61511 (CVE-2026-61511) vulnerability in CVE-2026-61511 (CVE-2026-61511). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 95	1 month ago
CVE-2026-58389	Vulnerability in apache (CVE-2026-58389) vulnerability in apache (CVE-2026-58389). Risk of unauthorized operations or information disclosure.	High	Rust Apache Cwe 770 Thrift	1 month ago
CVE-2026-66053	Vulnerability in apache (CVE-2026-66053) vulnerability in apache (CVE-2026-66053). Confidential information can be exposed externally.	Medium	Python Apache Cwe 297 Thrift	1 month ago
CVE-2026-58023	Out-of-Bounds Read in apache (CVE-2026-58023) vulnerability in apache (CVE-2026-58023). Confidential information can be exposed externally.	Critical	Apache Cwe 125 Thrift	1 month ago
CVE-2026-55971	Vulnerability in c (CVE-2026-55971) vulnerability in c (CVE-2026-55971). Successful exploitation can lead to full system takeover.	Critical	C Apache Cwe 122 Thrift	1 month ago
CVE-2026-58662	Out-of-Bounds Read in c (CVE-2026-58662) vulnerability in c (CVE-2026-58662). Confidential information can be exposed externally.	Critical	C Apache Cwe 125 Cwe 1284 +1	1 month ago
CVE-2026-55969	Vulnerability in c (CVE-2026-55969) vulnerability in c (CVE-2026-55969). Risk of unauthorized operations or information disclosure.	High	C Apache Cwe 190 Thrift	1 month ago
CVE-2026-48586	Vulnerability in c (CVE-2026-48586) vulnerability in c (CVE-2026-48586). Risk of unauthorized operations or information disclosure.	High	Python Java C Apache +2	1 month ago
CVE-2026-41608	Vulnerability in apache (CVE-2026-41608) vulnerability in apache (CVE-2026-41608). Risk of unauthorized operations or information disclosure.	High	Python Apache Cwe 409 Thrift	1 month ago
CVE-2026-55970	Vulnerability in c (CVE-2026-55970) vulnerability in c (CVE-2026-55970). Risk of unauthorized operations or information disclosure.	Medium	C Apache Cwe 126 Thrift	1 month ago
CVE-2026-49158	Vulnerability in apache (CVE-2026-49158) vulnerability in apache (CVE-2026-49158). Risk of unauthorized operations or information disclosure.	High	Ruby Apache Cwe 409 Thrift	1 month ago
CVE-2026-55968	Vulnerability in apache (CVE-2026-55968) vulnerability in apache (CVE-2026-55968). Risk of unauthorized operations or information disclosure.	High	JavaScript Apache Cwe 407 Cwe 770 +1	1 month ago
CVE-2026-48145	Vulnerability in c (CVE-2026-48145) vulnerability in c (CVE-2026-48145). Confidential information can be exposed externally.	High	C Apache Cwe 297 Thrift	1 month ago
CVE-2026-48144	Vulnerability in apache (CVE-2026-48144) vulnerability in apache (CVE-2026-48144). Confidential information can be exposed externally.	Critical	Apache Cwe 297 Thrift	1 month ago
CVE-2026-45112	Vulnerability in apache (CVE-2026-45112) vulnerability in apache (CVE-2026-45112). Risk of unauthorized operations or information disclosure.	High	Java Apache Cwe 770 Thrift	1 month ago
CVE-2026-43871	Vulnerability in apache (CVE-2026-43871) vulnerability in apache (CVE-2026-43871). Risk of unauthorized operations or information disclosure.	High	PHP Python Java Apache +2	1 month ago
CVE-2026-13714	Unrestricted File Upload in wordpress (CVE-2026-13714) vulnerability in wordpress (CVE-2026-13714). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Remote Code Execution Cwe 434	1 month ago
CVE-2025-68686 KEV	[KEV] Information Disclosure in Fortinet fortios (CVE-2025-68686) vulnerability in Fortinet fortios (CVE-2025-68686). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.	Medium	Cwe 200 Fortinet Fortios	1 month ago
CVE-2026-15962	Unsafe Deserialization in wordpress (CVE-2026-15962) vulnerability in wordpress (CVE-2026-15962). Successful exploitation can lead to full system takeover.	High	PHP WordPress Insecure Deserialization Cwe 502	1 month ago
CVE-2026-66011	Vulnerability in imagemagick (CVE-2026-66011) vulnerability in imagemagick (CVE-2026-66011). Risk of unauthorized operations or information disclosure.	Low	Cwe 401 Imagemagick	1 month ago
CVE-2026-65707	SQL Injection in sqli (CVE-2026-65707) SQL injection in sqli (CVE-2026-65707). Confidential information can be exposed externally.	Medium	PHP SQL Injection Cwe 89	1 month ago
CVE-2026-73649	Code Injection in velocityjs (CVE-2026-73649) code injection in velocityjs (CVE-2026-73649). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.7` or later.	Critical	JavaScript Apache Cwe 94	1 month ago
CVE-2026-62946	Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-62946) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-62946). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.15.0` or later.	Medium	Cwe 190 Imagemagick	1 month ago
CVE-2026-62363	ImageMagick: Heap Buffer Over-Write in fx operation ImageMagick: Heap Buffer Over-Write in fx operation	Medium	Cwe 787 Imagemagick	1 month ago
CVE-2026-62343	Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-62343) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-62343). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.15.0` or later.	Medium	Cwe 190 Imagemagick	1 month ago
CVE-2026-49326	Vulnerability in apache (CVE-2026-49326) vulnerability in apache (CVE-2026-49326). Confidential information can be exposed externally.	Medium	Apache Cwe 862 Hbase	1 month ago
CVE-2026-45811	Vulnerability in apache (CVE-2026-45811) vulnerability in apache (CVE-2026-45811). Successful exploitation can lead to full system takeover.	High	Apache Cwe 120 Nimble	1 month ago
CVE-2026-66143	Vulnerability in apache (CVE-2026-66143) vulnerability in apache (CVE-2026-66143). Risk of unauthorized operations or information disclosure.	High	Apache Denial of Service Cwe 400 Neethi	1 month ago

Vulnerabilities

🍪 About cookies