Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: vendors Clear

ID	Title	Severity	Tags	Detected
CVE-2026-53460	Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-53460) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-53460). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.14.0` or later.	High	Cwe 770 Imagemagick	4 weeks ago
CVE-2026-53461	Out-of-Bounds Write in Magick.NET-Q16-AnyCPU (CVE-2026-53461) out-of-bounds write in Magick.NET-Q16-AnyCPU (CVE-2026-53461). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.14.0` or later.	High	Cwe 787 Imagemagick	4 weeks ago
CVE-2026-49218	Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-49218) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-49218). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.14.0` or later.	High	Cwe 20 Imagemagick Cwe 1284	4 weeks ago
CVE-2026-50223	Code Injection in apache (CVE-2026-50223) code injection in apache (CVE-2026-50223). Successful exploitation can lead to full system takeover.	High	Apache Remote Code Execution Cwe 94 Ofbiz	4 weeks ago
CVE-2026-47342	Vulnerability in apache (CVE-2026-47342) vulnerability in apache (CVE-2026-47342). Successful exploitation can lead to full system takeover.	High	Apache Privilege Escalation Cwe 285 Ofbiz	4 weeks ago
CVE-2022-26758	Vulnerability in apple (CVE-2022-26758) vulnerability in apple (CVE-2022-26758). Confidential information can be exposed externally.	High	Cwe 362 Apple macOS	4 weeks ago
CVE-2026-1220	Vulnerability in google (CVE-2026-1220) vulnerability in google (CVE-2026-1220). Successful exploitation can lead to full system takeover.	High	Cwe 362 Google Chrome Apple +5	4 weeks ago
CVE-2026-49759	Vulnerability in c (CVE-2026-49759) vulnerability in c (CVE-2026-49759). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 121 Erlang +3	4 weeks ago
CVE-2026-45569	Path Traversal in c (CVE-2026-45569) path traversal in c (CVE-2026-45569). Confidential information can be exposed externally.	High	C nginx Apache Cwe 22 +1	4 weeks ago
CVE-2026-45565	Vulnerability in nginx (CVE-2026-45565) vulnerability in nginx (CVE-2026-45565). Confidential information can be exposed externally.	High	nginx Apache Cwe 20 Cwe 22 +1	4 weeks ago
CVE-2026-45567	Authentication Bypass in nginx (CVE-2026-45567) authentication bypass in nginx (CVE-2026-45567). Risk of unauthorized operations or information disclosure.	High	nginx Apache Authentication Bypass Cwe 287 +2	4 weeks ago
CVE-2026-25700	Vulnerability in apache (CVE-2026-25700) vulnerability in apache (CVE-2026-25700). Successful exploitation can lead to full system takeover.	High	Apache Cwe 1259 Answer	4 weeks ago
CVE-2026-45564	OS Command Injection in c (CVE-2026-45564) OS command injection in c (CVE-2026-45564). Successful exploitation can lead to full system takeover. Exploitable via `POST /config/versions/`.	High	C nginx Apache Cwe 78	4 weeks ago
CVE-2026-45549	Vulnerability in nginx (CVE-2026-45549) vulnerability in nginx (CVE-2026-45549). Risk of unauthorized operations or information disclosure.	High	nginx Apache Cwe 862 Cwe 863	4 weeks ago
CVE-2026-53435	Unsafe Deserialization in jenkins (CVE-2026-53435) vulnerability in jenkins (CVE-2026-53435). Successful exploitation can lead to full system takeover. Exploitable via ``config.xml``. Mitigation: upgrade to `2.555.3, 2.568.0` or later.	High	Cwe 502 Jenkins	4 weeks ago
CVE-2026-3018	SQL Injection in wordpress (CVE-2026-3018) SQL injection in wordpress (CVE-2026-3018). Confidential information can be exposed externally.	High	WordPress SQL Injection Cwe 89	4 weeks ago
CVE-2026-8071	Cross-Site Scripting (XSS) in wordpress (CVE-2026-8071) cross-site scripting in wordpress (CVE-2026-8071). Successful exploitation can lead to full system takeover.	High	WordPress Cwe 79	4 weeks ago
CVE-2026-3326	SQL Injection in wordpress (CVE-2026-3326) SQL injection in wordpress (CVE-2026-3326). Confidential information can be exposed externally.	High	WordPress SQL Injection Cwe 89	4 weeks ago
CVE-2026-26239	Vulnerability in qnap (CVE-2026-26239) vulnerability in qnap (CVE-2026-26239). Data can be tampered with by attackers.	High	Cwe 121 Qnap File Station	4 weeks ago
CVE-2026-26237	Vulnerability in qnap (CVE-2026-26237) vulnerability in qnap (CVE-2026-26237). Confidential information can be exposed externally.	High	Cwe 359 Cwe 862 Qnap Qumagie	4 weeks ago
CVE-2026-24719	OS Command Injection in qnap (CVE-2026-24719) OS command injection in qnap (CVE-2026-24719). Successful exploitation can lead to full system takeover.	High	Cwe 78 Qnap Qts Quts Hero	4 weeks ago
CVE-2026-24724	Authorization Flaw in qnap (CVE-2026-24724) vulnerability in qnap (CVE-2026-24724). Confidential information can be exposed externally.	High	Cwe 863 Qnap File Station	4 weeks ago
CVE-2026-24716	Vulnerability in dos (CVE-2026-24716) vulnerability in dos (CVE-2026-24716). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 476 Qnap Qts +1	4 weeks ago
CVE-2025-66281	Vulnerability in dos (CVE-2025-66281) vulnerability in dos (CVE-2025-66281). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 476 Qnap Qts +1	4 weeks ago
CVE-2026-22893	OS Command Injection in qnap (CVE-2026-22893) OS command injection in qnap (CVE-2026-22893). Successful exploitation can lead to full system takeover.	High	Cwe 78 Qnap Qts Quts Hero	4 weeks ago
CVE-2025-66273	OS Command Injection in qnap (CVE-2025-66273) OS command injection in qnap (CVE-2025-66273). Successful exploitation can lead to full system takeover.	High	Cwe 78 Qnap Qts Quts Hero	4 weeks ago
CVE-2025-66279	OS Command Injection in qnap (CVE-2025-66279) OS command injection in qnap (CVE-2025-66279). Successful exploitation can lead to full system takeover.	High	Cwe 78 Qnap Qts Quts Hero	4 weeks ago
CVE-2025-66280	Vulnerability in qnap (CVE-2025-66280) vulnerability in qnap (CVE-2025-66280). Successful exploitation can lead to full system takeover.	High	Cwe 121 Cwe 190 Qnap Qts +1	4 weeks ago
CVE-2025-62850	Vulnerability in dos (CVE-2025-62850) vulnerability in dos (CVE-2025-62850). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 476 Qnap Quts Hero	4 weeks ago
CVE-2026-41731	Unsafe Deserialization in org.springframework.kafka:spring-kafka (CVE-2026-41731) vulnerability in org.springframework.kafka:spring-kafka (CVE-2026-41731). Successful exploitation can lead to full system takeover.	High	Apache Insecure Deserialization Cwe 502 Vmware +1	4 weeks ago
CVE-2026-41732	Unsafe Deserialization in apache (CVE-2026-41732) vulnerability in apache (CVE-2026-41732). Successful exploitation can lead to full system takeover.	High	Apache Cwe 502 Vmware Spring For Apache Pulsar	4 weeks ago
CVE-2026-41728	Vulnerability in vmware (CVE-2026-41728) vulnerability in vmware (CVE-2026-41728). Data can be tampered with by attackers.	High	Cwe 284 Vmware Spring Data Rest	4 weeks ago
CVE-2026-41729	Vulnerability in vmware (CVE-2026-41729) vulnerability in vmware (CVE-2026-41729). Confidential information can be exposed externally.	High	Cwe 917 Vmware Spring Data Rest	4 weeks ago
CVE-2026-41716	Vulnerability in broadcom (CVE-2026-41716) vulnerability in broadcom (CVE-2026-41716). Risk of unauthorized operations or information disclosure.	High	Cwe 770 Broadcom Spring Data Commons	4 weeks ago
CVE-2026-41003	Cross-Site Scripting (XSS) in vmware (CVE-2026-41003) cross-site scripting in vmware (CVE-2026-41003). Confidential information can be exposed externally.	High	Cwe 79 Vmware Spring Security	4 weeks ago
CVE-2026-9753	Vulnerability in mongodb (CVE-2026-9753) vulnerability in mongodb (CVE-2026-9753). Confidential information can be exposed externally.	High	Cwe 1287 Cwe 787 MongoDB	4 weeks ago
CVE-2026-40993	Unsafe Deserialization in vmware (CVE-2026-40993) vulnerability in vmware (CVE-2026-40993). Data can be tampered with by attackers.	High	Cwe 502 Vmware Spring Security	4 weeks ago
CVE-2026-40988	Vulnerability in dos (CVE-2026-40988) vulnerability in dos (CVE-2026-40988). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Vmware Spring Security	4 weeks ago
CVE-2026-41717	Vulnerability in vmware (CVE-2026-41717) vulnerability in vmware (CVE-2026-41717). Successful exploitation can lead to full system takeover.	High	Cwe 917 Vmware Spring Data Mongodb	4 weeks ago
CVE-2026-9742	Vulnerability in mongodb (CVE-2026-9742) vulnerability in mongodb (CVE-2026-9742). Risk of unauthorized operations or information disclosure.	High	Cwe 1287 MongoDB	4 weeks ago
CVE-2026-9740	Vulnerability in mongodb (CVE-2026-9740) vulnerability in mongodb (CVE-2026-9740). Risk of unauthorized operations or information disclosure.	High	Cwe 674 MongoDB	4 weeks ago
CVE-2026-41695	Vulnerability in dos (CVE-2026-41695) vulnerability in dos (CVE-2026-41695). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Broadcom Spring Data Commons	4 weeks ago
CVE-2026-34711	Vulnerability in adobe (CVE-2026-34711) vulnerability in adobe (CVE-2026-34711). Risk of unauthorized operations or information disclosure.	High	Cwe 190 Adobe C2Pa C2Pa Web +9	4 weeks ago
CVE-2026-34713	Vulnerability in adobe (CVE-2026-34713) vulnerability in adobe (CVE-2026-34713). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Adobe C2Pa C2Pa Web	4 weeks ago
CVE-2026-34712	Vulnerability in adobe (CVE-2026-34712) vulnerability in adobe (CVE-2026-34712). Risk of unauthorized operations or information disclosure.	High	Cwe 20 Adobe C2Pa C2Pa Web	4 weeks ago
CVE-2026-47937	Vulnerability in adobe (CVE-2026-47937) vulnerability in adobe (CVE-2026-47937). Successful exploitation can lead to full system takeover.	High	Cwe 427 Adobe Acrobat Dc Acrobat Reader Dc +5	4 weeks ago
CVE-2026-47929	Authorization Flaw in adobe (CVE-2026-47929) vulnerability in adobe (CVE-2026-47929). Successful exploitation can lead to full system takeover.	High	Cwe 863 Adobe Coldfusion	4 weeks ago
CVE-2026-47959	Vulnerability in adobe (CVE-2026-47959) vulnerability in adobe (CVE-2026-47959). Successful exploitation can lead to full system takeover.	High	Cwe 121 Adobe Acrobat Acrobat Reader +4	4 weeks ago
CVE-2026-47930	Vulnerability in adobe (CVE-2026-47930) vulnerability in adobe (CVE-2026-47930). Confidential information can be exposed externally.	High	Cwe 20 Adobe Coldfusion	4 weeks ago
CVE-2026-48292	Vulnerability in adobe (CVE-2026-48292) vulnerability in adobe (CVE-2026-48292). Successful exploitation can lead to full system takeover.	High	Cwe 122 Adobe Format Plugins	4 weeks ago

Vulnerabilities

🍪 About cookies