Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: products Clear

ID	Title	Severity	Tags	Detected
CVE-2026-7664	Authentication Bypass in langflow (CVE-2026-7664) authentication bypass in langflow (CVE-2026-7664). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Langflow	2 months ago
CVE-2026-10845	Authentication Bypass in ibm (CVE-2026-10845) authentication bypass in ibm (CVE-2026-10845). Risk of unauthorized operations or information disclosure.	High	Cwe 287 Ibm Websphere Application Server Aix +6	2 months ago
CVE-2026-9029	The geomap panel's XYZ tile layer has a sanitize-then-interpolate ordering bug.... The geomap panel's XYZ tile layer has a sanitize-then-interpolate ordering bug....	High	Cross-Site Scripting Grafana Cwe 79	2 months ago
CVE-2026-56425	Vulnerability in csrf (CVE-2026-56425) vulnerability in csrf (CVE-2026-56425). Successful exploitation can lead to full system takeover. Exploitable via `Referer header`.	High	PHP Cross-Site Request Forgery Cwe 384 Misp Project +1	2 months ago
CVE-2026-56446	Code Injection in misp-project (CVE-2026-56446) code injection in misp-project (CVE-2026-56446). Successful exploitation can lead to full system takeover.	High	PHP Remote Code Execution Cwe 94 Misp Project +1	2 months ago
CVE-2026-54100	A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container... A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container...	High	Cwe 295 Openshift Windows SSH +3	2 months ago
CVE-2026-54099	A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container... A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container...	High	Cwe 269 Openshift Windows Privilege Escalation +3	2 months ago
CVE-2026-42129	The Loki datasource plugin's callResource handler contains a path traversal vulnerability. An... The Loki datasource plugin's callResource handler contains a path traversal vulnerability. An...	High	Path Traversal Cwe 22 Grafana Loki Datasource	2 months ago
CVE-2026-28381	Vulnerability in grafana (CVE-2026-28381) vulnerability in grafana (CVE-2026-28381). Confidential information can be exposed externally.	Critical	Cwe 284 Grafana Snowflake	2 months ago
CVE-2026-10561	Code Injection in langflow (CVE-2026-10561) code injection in langflow (CVE-2026-10561). Successful exploitation can lead to full system takeover.	Critical	Python Authentication Bypass Cwe 94 Langflow	2 months ago
CVE-2026-10601	Path Traversal in path-traversal (CVE-2026-10601) path traversal in path-traversal (CVE-2026-10601). Risk of unauthorized operations or information disclosure.	Medium	Path Traversal Cwe 22 Grafana	2 months ago
CVE-2025-62198	Vulnerability in apache (CVE-2025-62198) vulnerability in apache (CVE-2025-62198). Risk of unauthorized operations or information disclosure.	Medium	Apache Cross-Site Scripting Cwe 80 Atlas	2 months ago
CVE-2026-54665	Vulnerability in nifi (CVE-2026-54665) vulnerability in nifi (CVE-2026-54665). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `2.10.0` or later.	Medium	Apache Cwe 346 Nifi	2 months ago
CVE-2026-44911	Authorization Flaw in nifi (CVE-2026-44911) vulnerability in nifi (CVE-2026-44911). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.10.0` or later.	Medium	Apache Cwe 863 Nifi	2 months ago
CVE-2026-44914	Vulnerability in nifi (CVE-2026-44914) vulnerability in nifi (CVE-2026-44914). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.10.0` or later.	High	Apache Cwe 862 Nifi	2 months ago
CVE-2026-44913	Vulnerability in nifi (CVE-2026-44913) vulnerability in nifi (CVE-2026-44913). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.10.0` or later.	High	Apache Cwe 116 Nifi	2 months ago
CVE-2025-66336	SQL Injection in apache (CVE-2025-66336) SQL injection in apache (CVE-2025-66336). Confidential information can be exposed externally.	High	Apache SQL Injection Cwe 89 Doris Mcp Server	2 months ago
CVE-2026-12822	Vulnerability in langflow (CVE-2026-12822) vulnerability in langflow (CVE-2026-12822). Risk of unauthorized operations or information disclosure.	Medium	Cwe 74 Cwe 94 Langflow	2 months ago
CVE-2026-56382	Code Injection in craftcms/cms (CVE-2026-56382) code injection in craftcms/cms (CVE-2026-56382). Successful exploitation can lead to full system takeover. Exploitable via `POST /admin/actions/fields/render-card-preview`. Mitigation: upgrade to `5.9.14` or later.	High	PHP Remote Code Execution Cwe 94	2 months ago
CVE-2026-56367	Out-of-Bounds Read in c (CVE-2026-56367) vulnerability in c (CVE-2026-56367). Risk of unauthorized operations or information disclosure.	Low	C Cwe 125 Imagemagick	2 months ago
CVE-2026-56378	Out-of-Bounds Read in Magick.NET-Q16-AnyCPU (CVE-2026-56378) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-56378). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.10.3` or later.	Low	Denial of Service Cwe 125 Imagemagick	2 months ago
CVE-2026-12799	Vulnerability in litellm (CVE-2026-12799) vulnerability in litellm (CVE-2026-12799). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 285 LiteLLM	2 months ago
CVE-2026-12798	SSRF (Server-Side Request Forgery) in litellm (CVE-2026-12798) SSRF in litellm (CVE-2026-12798). Risk of unauthorized operations or information disclosure.	Medium	Cwe 918 LiteLLM	2 months ago
CVE-2026-12797	Vulnerability in litellm (CVE-2026-12797) vulnerability in litellm (CVE-2026-12797). Risk of unauthorized operations or information disclosure.	Medium	Cwe 285 Cwe 863 LiteLLM	2 months ago
CVE-2026-12796	Vulnerability in litellm (CVE-2026-12796) vulnerability in litellm (CVE-2026-12796). Risk of unauthorized operations or information disclosure.	Medium	Cwe 613 LiteLLM	2 months ago
CVE-2026-12795	Authentication Bypass in litellm (CVE-2026-12795) authentication bypass in litellm (CVE-2026-12795). Risk of unauthorized operations or information disclosure.	High	Cwe 287 Cwe 306 LiteLLM	2 months ago
CVE-2026-12789	Vulnerability in sqli (CVE-2026-12789) vulnerability in sqli (CVE-2026-12789). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	2 months ago
CVE-2026-12775	Vulnerability in sqli (CVE-2026-12775) vulnerability in sqli (CVE-2026-12775). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	2 months ago
CVE-2026-12776	Vulnerability in sqli (CVE-2026-12776) vulnerability in sqli (CVE-2026-12776). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	2 months ago
CVE-2026-12774	SSRF (Server-Side Request Forgery) in litellm (CVE-2026-12774) SSRF in litellm (CVE-2026-12774). Risk of unauthorized operations or information disclosure.	Medium	Cwe 918 LiteLLM	2 months ago
CVE-2026-12773	A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function... A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function...	High	Cwe 287 LiteLLM Improper Auth Cwe 303	2 months ago
CVE-2026-12771	Vulnerability in litellm (CVE-2026-12771) vulnerability in litellm (CVE-2026-12771). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 285 LiteLLM	2 months ago
CVE-2026-12772	Vulnerability in litellm (CVE-2026-12772) vulnerability in litellm (CVE-2026-12772). Risk of unauthorized operations or information disclosure.	Medium	Cwe 613 LiteLLM	2 months ago
CVE-2026-12770	Vulnerability in litellm (CVE-2026-12770) vulnerability in litellm (CVE-2026-12770). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 285 LiteLLM	2 months ago
CVE-2026-56346	Vulnerability in wwbn/avideo (CVE-2026-56346) vulnerability in wwbn/avideo (CVE-2026-56346). Risk of unauthorized operations or information disclosure.	Medium	PHP Authentication Bypass Cwe 306	2 months ago
CVE-2026-56341	Information Disclosure in wwbn/avideo (CVE-2026-56341) vulnerability in wwbn/avideo (CVE-2026-56341). Confidential information can be exposed externally. Exploitable via ``index.php``.	High	PHP C# Cwe 862	2 months ago
CVE-2026-56342	SSRF (Server-Side Request Forgery) in CVE-2026-56342 (CVE-2026-56342) SSRF in CVE-2026-56342 (CVE-2026-56342). Confidential information can be exposed externally.	Medium	PHP Cwe 918	2 months ago
CVE-2026-56345	Vulnerability in WWBN/AVideo (CVE-2026-56345) vulnerability in WWBN/AVideo (CVE-2026-56345). Successful exploitation can lead to full system takeover. Exploitable via ``name``.	High	PHP Cwe 287	2 months ago
CVE-2022-50972	Code Injection in CVE-2022-50972 (CVE-2022-50972) code injection in CVE-2022-50972 (CVE-2022-50972). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 94	2 months ago
CVE-2019-25763	Vulnerability in wordpress (CVE-2019-25763) vulnerability in wordpress (CVE-2019-25763). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Authentication Bypass Cwe 288	2 months ago
CVE-2026-48939 KEV	[KEV] Unrestricted File Upload in Icagenda joomlic (CVE-2026-48939) vulnerability in Icagenda joomlic (CVE-2026-48939). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	PHP Cwe 284 Cwe 434 Joomlic +1	2 months ago
CVE-2026-48908 KEV	[KEV] Unrestricted File Upload in Joomshaper ollyo (CVE-2026-48908) vulnerability in Joomshaper ollyo (CVE-2026-48908). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	PHP Cwe 284 Cwe 434 Ollyo +1	2 months ago
CVE-2026-12119	Vulnerability in wordpress (CVE-2026-12119) vulnerability in wordpress (CVE-2026-12119). Data can be tampered with by attackers.	Medium	PHP WordPress Cwe 862	2 months ago
CVE-2026-11911	Path Traversal in wordpress (CVE-2026-11911) path traversal in wordpress (CVE-2026-11911). Confidential information can be exposed externally.	High	PHP WordPress Remote Code Execution Cwe 22	2 months ago
CVE-2026-9843	Path Traversal in wordpress (CVE-2026-9843) path traversal in wordpress (CVE-2026-9843). Data can be tampered with by attackers.	High	PHP WordPress Remote Code Execution Cwe 22	2 months ago
CVE-2026-27878	Vulnerability in github.com/grafana/tempo (CVE-2026-27878) vulnerability in github.com/grafana/tempo (CVE-2026-27878). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.1-0.20260303204923-b13f74291d48` or later.	Medium	Denial of Service Cwe 400 Grafana Tempo	2 months ago
CVE-2023-54357	Vulnerability in artio (CVE-2023-54357) vulnerability in artio (CVE-2023-54357). Confidential information can be exposed externally.	High	PHP Cwe 203 Artio Book It	2 months ago
CVE-2026-55447	Information Disclosure in langflow (CVE-2026-55447) vulnerability in langflow (CVE-2026-55447). Successful exploitation can lead to full system takeover. Exploitable via ``BaseFileComponent``. Mitigation: upgrade to `1.9.2` or later.	Critical	Cwe 61 Cwe 200 Langflow	2 months ago
CVE-2026-55446	Vulnerability in langflow (CVE-2026-55446) vulnerability in langflow (CVE-2026-55446). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/files/upload/test`. Mitigation: upgrade to `1.0.19` or later.	High	Cwe 400 Langflow	2 months ago
CVE-2026-55423	Vulnerability in langflow (CVE-2026-55423) vulnerability in langflow (CVE-2026-55423). Confidential information can be exposed externally. Exploitable via ``access_token_lf``. Mitigation: upgrade to `1.7.1` or later.	Medium	Cwe 613 Langflow	2 months ago

Vulnerabilities

🍪 About cookies