Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: web-servers Clear

ID	Title	Severity	Tags	Detected
CVE-2026-65637	Vulnerability in apache (CVE-2026-65637) vulnerability in apache (CVE-2026-65637). Successful exploitation can lead to full system takeover.	Critical	Apache Tomcat Cwe 20	3 days ago
CVE-2026-65905	Vulnerability in apache (CVE-2026-65905) vulnerability in apache (CVE-2026-65905). Successful exploitation can lead to full system takeover.	Critical	Apache Tomcat Authentication Bypass Cwe 294	3 days ago
CVE-2026-65182	Vulnerability in apache (CVE-2026-65182) vulnerability in apache (CVE-2026-65182). Confidential information can be exposed externally.	Critical	Apache Tomcat Cwe 284 Cwe 863	3 days ago
CVE-2026-68525	Authorization Flaw in apache (CVE-2026-68525) vulnerability in apache (CVE-2026-68525). Confidential information can be exposed externally.	Critical	Apache Tomcat Cwe 863	3 days ago
CVE-2026-75784	Buffer Overflow in nginx (CVE-2026-75784) vulnerability in nginx (CVE-2026-75784). Successful exploitation can lead to full system takeover.	Critical	nginx Cwe 119 Cwe 121	1 week ago
CVE-2026-48528	SQL Injection in tomcat (CVE-2026-48528) SQL injection in tomcat (CVE-2026-48528). Successful exploitation can lead to full system takeover. Exploitable via ``nodeId``.	Critical	Tomcat SQL Injection Cwe 89 Cwe 287	2 weeks ago
CVE-2026-47754	Path Traversal in tomcat (CVE-2026-47754) path traversal in tomcat (CVE-2026-47754). Confidential information can be exposed externally. Exploitable via ``archiveEntryName``.	Critical	Java Tomcat Path Traversal Cwe 22 +1	2 weeks ago
CVE-2026-66713	Unsafe Deserialization in apache (CVE-2026-66713) vulnerability in apache (CVE-2026-66713). Successful exploitation can lead to full system takeover.	Critical	Java Apache Tomcat Insecure Deserialization +2	1 month ago
CVE-2026-59084	Vulnerability in apache (CVE-2026-59084) vulnerability in apache (CVE-2026-59084). Confidential information can be exposed externally.	Critical	Apache Tomcat Cwe 1059	1 month ago
CVE-2026-59083	Vulnerability in apache (CVE-2026-59083) vulnerability in apache (CVE-2026-59083). Confidential information can be exposed externally.	Critical	Apache Tomcat Cwe 177 Jvn +2	1 month ago
CVE-2026-54763	Vulnerability in github.com/traefik/traefik/v2 (CVE-2026-54763) vulnerability in github.com/traefik/traefik/v2 (CVE-2026-54763). Confidential information can be exposed externally. Exploitable via ``X_Auth_User``. Mitigation: upgrade to `2.11.42` or later.	Critical	Cwe 178 Cwe 290 Cwe 345 Traefik	1 month ago
CVE-2026-5524	Unrestricted File Upload in wordpress (CVE-2026-5524) vulnerability in wordpress (CVE-2026-5524). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress nginx Remote Code Execution +1	1 month ago
CVE-2026-55276	Vulnerability in tomcat (CVE-2026-55276) vulnerability in tomcat (CVE-2026-55276). Confidential information can be exposed externally. Mitigation: upgrade to `9.0.119, 10.1.56, 11.0.23` or later.	Critical	Apache Tomcat Cwe 670	1 month ago
CVE-2026-53434	Vulnerability in tomcat (CVE-2026-53434) vulnerability in tomcat (CVE-2026-53434). Confidential information can be exposed externally. Mitigation: upgrade to `9.0.101, 10.1.37, 11.0.5` or later.	Critical	Apache Tomcat Cwe 390	1 month ago
CVE-2026-53622	Vulnerability in Traefik (CVE-2026-53622) vulnerability in Traefik (CVE-2026-53622). Confidential information can be exposed externally. Exploitable via ``Host``. Mitigation: upgrade to `3.7.3` or later.	Critical	Cwe 288 Traefik Cwe 289	2 months ago
CVE-2026-48491	Vulnerability in Traefik (CVE-2026-48491) vulnerability in Traefik (CVE-2026-48491). Confidential information can be exposed externally. Exploitable via ``SNICheck``. Mitigation: upgrade to `3.7.3` or later.	Critical	Cwe 288 Traefik Cwe 807	2 months ago
CVE-2026-48020	Path Traversal in github.com/traefik/traefik/v2 (CVE-2026-48020) path traversal in github.com/traefik/traefik/v2 (CVE-2026-48020). Confidential information can be exposed externally. Mitigation: upgrade to `2.11.48` or later.	Critical	Cwe 288 Traefik Cwe 22	2 months ago
CVE-2026-45552	Vulnerability in nginx (CVE-2026-45552) vulnerability in nginx (CVE-2026-45552). Successful exploitation can lead to full system takeover.	Critical	nginx Apache Cwe 639 Cwe 862 +1	2 months ago
CVE-2026-45556	Vulnerability in nginx (CVE-2026-45556) vulnerability in nginx (CVE-2026-45556). Successful exploitation can lead to full system takeover. Exploitable via `POST /waf/`.	Critical	nginx Apache Remote Code Execution Cwe 20 +3	2 months ago
CVE-2026-45558	Vulnerability in c (CVE-2026-45558) vulnerability in c (CVE-2026-45558). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/service/haproxy/`.	Critical	C nginx Apache Remote Code Execution +4	2 months ago
CVE-2026-45550	Vulnerability in nginx (CVE-2026-45550) vulnerability in nginx (CVE-2026-45550). Data can be tampered with by attackers. Exploitable via `PUT /smon/check`.	Critical	nginx Apache Cwe 639 Cwe 862 +1	2 months ago
CVE-2026-44774	Vulnerability in github.com/traefik/traefik/v3 (CVE-2026-44774) vulnerability in github.com/traefik/traefik/v3 (CVE-2026-44774). Successful exploitation can lead to full system takeover. Exploitable via `PUT /api/providers/rest`. Mitigation: upgrade to `3.6.17` or later.	Critical	Cwe 284 Traefik Cwe 15	3 months ago
CVE-2026-43515	Vulnerability in tomcat (CVE-2026-43515) vulnerability in tomcat (CVE-2026-43515). Confidential information can be exposed externally. Mitigation: upgrade to `10.1.55, 11.0.22, 9.0.118` or later.	Critical	Apache Tomcat Cwe 285	3 months ago
CVE-2026-41293	Vulnerability in tomcat (CVE-2026-41293) vulnerability in tomcat (CVE-2026-41293). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.1.55, 11.0.22, 9.0.118` or later.	Critical	Apache Tomcat Cwe 20	3 months ago
CVE-2026-43512	Authentication Bypass in tomcat (CVE-2026-43512) authentication bypass in tomcat (CVE-2026-43512). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.1.55, 11.0.22, 9.0.118` or later.	Critical	Apache Tomcat Authentication Bypass Cwe 592	3 months ago
CVE-2026-35051	Vulnerability in github.com/traefik/traefik (CVE-2026-35051) vulnerability in github.com/traefik/traefik (CVE-2026-35051). Confidential information can be exposed externally. Exploitable via ``ForwardAuth``. Mitigation: upgrade to `2.11.43` or later.	Critical	Authentication Bypass Cwe 345 Cwe 501 Traefik	3 months ago
CVE-2026-39858	Vulnerability in github.com/traefik/traefik (CVE-2026-39858) vulnerability in github.com/traefik/traefik (CVE-2026-39858). Confidential information can be exposed externally. Exploitable via `GET /protected`. Mitigation: upgrade to `2.11.43` or later.	Critical	Authentication Bypass Cwe 290 Cwe 306 Cwe 289 +1	3 months ago
CVE-2026-40575	Vulnerability in github.com/oauth2-proxy/oauth2-proxy/v7 (CVE-2026-40575) vulnerability in github.com/oauth2-proxy/oauth2-proxy/v7 (CVE-2026-40575). Confidential information can be exposed externally. Mitigation: upgrade to `7.15.2` or later.	Critical	nginx Cwe 290 Oauth2 Proxy Project Oauth2 Proxy	4 months ago
CVE-2026-34457	Vulnerability in oauth2-proxy (CVE-2026-34457) vulnerability in oauth2-proxy (CVE-2026-34457). Confidential information can be exposed externally. Mitigation: upgrade to `7.15.2` or later.	Critical	nginx Authentication Bypass Cwe 290 Oauth2 Proxy Project +1	4 months ago
CVE-2016-20026	Vulnerability in apache (CVE-2016-20026) vulnerability in apache (CVE-2016-20026). Successful exploitation can lead to full system takeover.	Critical	Apache Tomcat Cwe 798	5 months ago
CVE-2026-23941	Vulnerability in nginx (CVE-2026-23941) vulnerability in nginx (CVE-2026-23941). Confidential information can be exposed externally.	Critical	nginx Apache Cwe 444 Erlang +2	5 months ago
CVE-2025-55754	Vulnerability in org.apache.tomcat:tomcat (CVE-2025-55754) vulnerability in org.apache.tomcat:tomcat (CVE-2025-55754). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.0.109, 10.1.45, 11.0.11` or later.	Critical	Apache Tomcat Cwe 150	10 months ago
CVE-2023-53382	Vulnerability in c (CVE-2023-53382) vulnerability in c (CVE-2023-53382). Successful exploitation can lead to full system takeover.	Critical	C nginx Cwe 476 Linux +1	11 months ago
CVE-2023-47246 KEV	[KEV] Path Traversal in Sysaid tomcat (CVE-2023-47246) path traversal in Sysaid tomcat (CVE-2023-47246). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Sysaid Sysaid Server Cwe 22 Tomcat +1	2 years ago
CVE-2016-8735 KEV	[KEV] Vulnerability in Apache tomcat (CVE-2016-8735) vulnerability in Apache tomcat (CVE-2016-8735). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Apache Tomcat Cwe 284 Remote Code Execution +23	3 years ago
CVE-2020-1938 KEV	[KEV] Privilege Escalation in org.apache.tomcat.embed:tomcat-embed-core (CVE-2020-1938) vulnerability in org.apache.tomcat.embed:tomcat-embed-core (CVE-2020-1938). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `7.0.100` or later.	Critical	Apache Tomcat Remote Code Execution Geode +25	4 years ago
CVE-2016-5018	Vulnerability in apache (CVE-2016-5018) vulnerability in apache (CVE-2016-5018). Confidential information can be exposed externally.	Critical	Apache Tomcat Netapp Oncommand Insight +17	9 years ago
CVE-2015-1778	Authentication Bypass in org.opendaylight.odlparent:opendaylight-karaf-resources (CVE-2015-1778) authentication bypass in org.opendaylight.odlparent:opendaylight-karaf-resources (CVE-2015-1778). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.2.3-Helium-SR3` or later.	Critical	Tomcat Cwe 287 Opendaylight	9 years ago
CVE-2017-5651	Vulnerability in apache (CVE-2017-5651) vulnerability in apache (CVE-2017-5651). Successful exploitation can lead to full system takeover.	Critical	Apache Tomcat	9 years ago
CVE-2017-5648	Vulnerability in apache (CVE-2017-5648) vulnerability in apache (CVE-2017-5648). Confidential information can be exposed externally.	Critical	Apache Tomcat Cwe 668	9 years ago
CVE-2016-6808	Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42. Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42.	Critical	Apache Tomcat Cwe 119 Tomcat Jk Connector	9 years ago
CVE-2009-3555	Vulnerability in org.apache.tomcat:tomcat (CVE-2009-3555) vulnerability in org.apache.tomcat:tomcat (CVE-2009-3555). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.5.33` or later.	Critical	Apache Cwe 295 Cwe 300 Http Server +13	16 years ago

Vulnerabilities

🍪 About cookies