Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: vendors Tag: cwe-116 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-49091	Vulnerability in elastic (CVE-2026-49091) vulnerability in elastic (CVE-2026-49091). Successful exploitation can lead to full system takeover.	High	Cwe 116 Elastic Kibana	6 days ago
CVE-2026-56379	Vulnerability in imagemagick (CVE-2026-56379) vulnerability in imagemagick (CVE-2026-56379). Successful exploitation can lead to full system takeover.	High	Cwe 116 Imagemagick Cwe 78	2 weeks ago
CVE-2026-44913	Vulnerability in apache (CVE-2026-44913) vulnerability in apache (CVE-2026-44913). Successful exploitation can lead to full system takeover.	High	Apache Cwe 116 Nifi	2 weeks ago
CVE-2026-54133	Vulnerability in jmespath (CVE-2026-54133) vulnerability in jmespath (CVE-2026-54133). Successful exploitation can lead to full system takeover. Exploitable via ``JP_PHP_COMPILE``. Mitigation: upgrade to `2.9.1` or later.	Critical	PHP Cwe 20 Cwe 94 Cwe 116 +1	3 weeks ago
CVE-2026-28898	Vulnerability in github.com/apple/swift-nio-http2 (CVE-2026-28898) vulnerability in github.com/apple/swift-nio-http2 (CVE-2026-28898). Risk of unauthorized operations or information disclosure. Exploitable via ``HTTP2FramePayloadToHTTP1ServerCodec``. Mitigation: upgrade to `1.44.1` or later.	Medium	Cwe 116 Apple Swiftnio Http2	3 weeks ago
CVE-2026-20245 KEV	[KEV] Vulnerability in Cisco catalyst-sd-wan-manager (CVE-2026-20245) vulnerability in Cisco catalyst-sd-wan-manager (CVE-2026-20245). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Cwe 116 Cisco Catalyst Sd Wan Manager Sd Wan Vsmart Controller	1 month ago
CVE-2026-34246	Vulnerability in privilege-escalation (CVE-2026-34246) vulnerability in privilege-escalation (CVE-2026-34246). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Privilege Escalation Cwe 80 +1	1 month ago
CVE-2026-46496	Vulnerability in @haxtheweb/haxcms-nodejs (CVE-2026-46496) vulnerability in @haxtheweb/haxcms-nodejs (CVE-2026-46496). Risk of unauthorized operations or information disclosure. Exploitable via ``source``. Mitigation: upgrade to `26.0.0` or later.		PHP JavaScript Cross-Site Scripting Cwe 79 +1	1 month ago
CVE-2026-28907	Vulnerability in apple (CVE-2026-28907) vulnerability in apple (CVE-2026-28907). Confidential information can be exposed externally.	High	Cwe 20 Cwe 116 Apple Ipados +5	1 month ago
CVE-2026-20136	Vulnerability in Cisco identity-services-engine (CVE-2026-20136) vulnerability in Cisco identity-services-engine (CVE-2026-20136). Confidential information can be exposed externally.	Medium	Cisco Network Cwe 116 Identity Services Engine +1	1 month ago
CVE-2026-42810	Vulnerability in org.apache.polaris:polaris-core (CVE-2026-42810) vulnerability in org.apache.polaris:polaris-core (CVE-2026-42810). Successful exploitation can lead to full system takeover. Exploitable via ``TABLE_CREATE``. Mitigation: upgrade to `1.4.1` or later.	Critical	Apache Cwe 20 Cwe 116 Polaris	2 months ago
CVE-2026-6058	Vulnerability in c (CVE-2026-6058) vulnerability in c (CVE-2026-6058). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 116 Zyxel +2	2 months ago
CVE-2024-38475 KEV	[KEV] Vulnerability in Apache http-server (CVE-2024-38475) vulnerability in Apache http-server (CVE-2024-38475). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apache Http Server Cwe 116	1 year ago
CVE-2023-48655	Vulnerability in misp-project (CVE-2023-48655) vulnerability in misp-project (CVE-2023-48655). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 116 Misp Project Misp	2 years ago
CVE-2022-42948 KEV	[KEV] Cross-Site Scripting (XSS) in Fortra cobalt-strike (CVE-2022-42948) cross-site scripting in Fortra cobalt-strike (CVE-2022-42948). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Fortra Cobalt Strike Cwe 79 Cwe 116	3 years ago
CVE-2022-24682 KEV	[KEV] Cross-Site Scripting (XSS) in Synacor zimbra-collaborate-suite-zcs (CVE-2022-24682) cross-site scripting in Synacor zimbra-collaborate-suite-zcs (CVE-2022-24682). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Synacor Zimbra Collaborate Suite Zcs Cwe 79 Cwe 116	4 years ago
CVE-2019-6109	Vulnerability in c (CVE-2019-6109) vulnerability in c (CVE-2019-6109). Confidential information can be exposed externally.	Medium	C Cwe 116 OpenBSD Openssh +34	7 years ago
CVE-2017-12340	Vulnerability in cisco (CVE-2017-12340) vulnerability in cisco (CVE-2017-12340). Risk of unauthorized operations or information disclosure.	Medium	Python Cwe 284 Cwe 116 Cisco +1	8 years ago
CVE-2017-12064	Vulnerability in open-emr (CVE-2017-12064) vulnerability in open-emr (CVE-2017-12064). Data can be tampered with by attackers.	High	PHP Cwe 116 Open Emr Openemr	8 years ago
CVE-2017-8303	Vulnerability in accellion (CVE-2017-8303) vulnerability in accellion (CVE-2017-8303). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 116 Accellion File Transfer Appliance	9 years ago
CVE-2014-9938	Vulnerability in git-scm (CVE-2014-9938) vulnerability in git-scm (CVE-2014-9938). Successful exploitation can lead to full system takeover.	High	Cwe 116 Git Scm Git	9 years ago

Vulnerabilities

🍪 About cookies