Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: web-servers Clear

ID	Title	Severity	Tags	Detected
CVE-2026-54763	Vulnerability in traefik (CVE-2026-54763) vulnerability in traefik (CVE-2026-54763). Confidential information can be exposed externally.	Critical	Cwe 178 Cwe 290 Cwe 345 Traefik	1 day ago
CVE-2026-5524	Unrestricted File Upload in wordpress (CVE-2026-5524) vulnerability in wordpress (CVE-2026-5524). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress nginx Remote Code Execution +1	6 days ago
CVE-2026-55276	Vulnerability in apache (CVE-2026-55276) vulnerability in apache (CVE-2026-55276). Confidential information can be exposed externally.	Critical	Apache Tomcat Cwe 670	1 week ago
CVE-2026-53434	Vulnerability in apache (CVE-2026-53434) vulnerability in apache (CVE-2026-53434). Confidential information can be exposed externally.	Critical	Apache Tomcat Cwe 390	1 week ago
CVE-2026-53622	Vulnerability in Traefik (CVE-2026-53622) vulnerability in Traefik (CVE-2026-53622). Confidential information can be exposed externally. Exploitable via ``Host``. Mitigation: upgrade to `3.7.3` or later.	Critical	Cwe 288 Traefik Cwe 289	3 weeks ago
CVE-2026-48491	Vulnerability in Traefik (CVE-2026-48491) vulnerability in Traefik (CVE-2026-48491). Confidential information can be exposed externally. Exploitable via ``SNICheck``. Mitigation: upgrade to `3.7.3` or later.	Critical	Cwe 288 Traefik Cwe 807	3 weeks ago
CVE-2026-48020	Vulnerability in github.com/traefik/traefik/v2 (CVE-2026-48020) vulnerability in github.com/traefik/traefik/v2 (CVE-2026-48020). Confidential information can be exposed externally. Exploitable via `GET /admin`. Mitigation: upgrade to `2.11.48` or later.	Critical	Cwe 288 Traefik Cwe 22	3 weeks ago
CVE-2026-45558	Vulnerability in c (CVE-2026-45558) vulnerability in c (CVE-2026-45558). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/service/haproxy/`.	Critical	C nginx Apache Remote Code Execution +4	4 weeks ago
CVE-2026-45556	Vulnerability in nginx (CVE-2026-45556) vulnerability in nginx (CVE-2026-45556). Successful exploitation can lead to full system takeover. Exploitable via `POST /waf/`.	Critical	nginx Apache Remote Code Execution Cwe 20 +3	4 weeks ago
CVE-2026-45550	Vulnerability in nginx (CVE-2026-45550) vulnerability in nginx (CVE-2026-45550). Data can be tampered with by attackers. Exploitable via `PUT /smon/check`.	Critical	nginx Apache Cwe 639 Cwe 862 +1	4 weeks ago
CVE-2026-45552	Vulnerability in nginx (CVE-2026-45552) vulnerability in nginx (CVE-2026-45552). Successful exploitation can lead to full system takeover.	Critical	nginx Apache Cwe 639 Cwe 862 +1	4 weeks ago
CVE-2026-44774	Vulnerability in github.com/traefik/traefik/v3 (CVE-2026-44774) vulnerability in github.com/traefik/traefik/v3 (CVE-2026-44774). Successful exploitation can lead to full system takeover. Exploitable via `PUT /api/providers/rest`. Mitigation: upgrade to `3.6.17` or later.	Critical	Cwe 284 Traefik Cwe 15	1 month ago
CVE-2026-43515	Vulnerability in tomcat (CVE-2026-43515) vulnerability in tomcat (CVE-2026-43515). Confidential information can be exposed externally. Mitigation: upgrade to `10.1.55, 11.0.22, 9.0.118` or later.	Critical	Apache Tomcat Cwe 285	1 month ago
CVE-2026-41293	Vulnerability in tomcat (CVE-2026-41293) vulnerability in tomcat (CVE-2026-41293). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.1.55, 11.0.22, 9.0.118` or later.	Critical	Apache Tomcat Cwe 20	1 month ago
CVE-2026-43512	Authentication Bypass in tomcat (CVE-2026-43512) authentication bypass in tomcat (CVE-2026-43512). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.1.55, 11.0.22, 9.0.118` or later.	Critical	Apache Tomcat Authentication Bypass Cwe 592	1 month ago
CVE-2026-39858	Vulnerability in traefik (CVE-2026-39858) vulnerability in traefik (CVE-2026-39858). Confidential information can be exposed externally.	Critical	Authentication Bypass Cwe 290 Cwe 306 Cwe 289 +1	2 months ago
CVE-2026-35051	Vulnerability in traefik (CVE-2026-35051) vulnerability in traefik (CVE-2026-35051). Confidential information can be exposed externally.	Critical	Authentication Bypass Cwe 345 Cwe 501 Traefik	2 months ago
CVE-2026-40575	Vulnerability in nginx (CVE-2026-40575) vulnerability in nginx (CVE-2026-40575). Confidential information can be exposed externally. Mitigation: upgrade to `7.15.2` or later.	Critical	nginx Cwe 290 Oauth2 Proxy Project Oauth2 Proxy	2 months ago
CVE-2016-20026	Vulnerability in apache (CVE-2016-20026) vulnerability in apache (CVE-2016-20026). Successful exploitation can lead to full system takeover.	Critical	Apache Tomcat Cwe 798	3 months ago
CVE-2026-23941	Vulnerability in nginx (CVE-2026-23941) vulnerability in nginx (CVE-2026-23941). Confidential information can be exposed externally.	Critical	nginx Apache Cwe 444 Erlang +2	3 months ago
CVE-2025-55754	Vulnerability in org.apache.tomcat:tomcat (CVE-2025-55754) vulnerability in org.apache.tomcat:tomcat (CVE-2025-55754). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.0.109, 10.1.45, 11.0.11` or later.	Critical	Apache Tomcat Cwe 150	8 months ago
CVE-2016-5018	Vulnerability in apache (CVE-2016-5018) vulnerability in apache (CVE-2016-5018). Confidential information can be exposed externally.	Critical	Apache Tomcat Netapp Oncommand Insight +17	8 years ago
CVE-2015-1778	Authentication Bypass in org.opendaylight.odlparent:opendaylight-karaf-resources (CVE-2015-1778) authentication bypass in org.opendaylight.odlparent:opendaylight-karaf-resources (CVE-2015-1778). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.2.3-Helium-SR3` or later.	Critical	Tomcat Cwe 287 Opendaylight	9 years ago
CVE-2017-5648	Vulnerability in apache (CVE-2017-5648) vulnerability in apache (CVE-2017-5648). Confidential information can be exposed externally.	Critical	Apache Tomcat Cwe 668	9 years ago
CVE-2017-5651	Vulnerability in apache (CVE-2017-5651) vulnerability in apache (CVE-2017-5651). Successful exploitation can lead to full system takeover.	Critical	Apache Tomcat	9 years ago
CVE-2016-6808	Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42. Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42.	Critical	Apache Tomcat Cwe 119 Tomcat Jk Connector	9 years ago
CVE-2009-3555	Vulnerability in org.apache.tomcat:tomcat (CVE-2009-3555) vulnerability in org.apache.tomcat:tomcat (CVE-2009-3555). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.5.33` or later.	Critical	Apache Cwe 295 Cwe 300 Http Server +13	16 years ago

Vulnerabilities

🍪 About cookies