Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
ID Title
DEBIAN-CVE-2026-46340 Vulnerability in netty (DEBIAN-CVE-2026-46340)
vulnerability in netty (DEBIAN-CVE-2026-46340). Risk of unauthorized operations or information disclosure. Exploitable via ``complete``.
DEBIAN-CVE-2026-45673 Vulnerability in netty (DEBIAN-CVE-2026-45673)
vulnerability in netty (DEBIAN-CVE-2026-45673). Data can be tampered with by attackers.
DEBIAN-CVE-2026-45416 Vulnerability in netty (DEBIAN-CVE-2026-45416)
vulnerability in netty (DEBIAN-CVE-2026-45416). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-44894 Vulnerability in netty (DEBIAN-CVE-2026-44894)
vulnerability in netty (DEBIAN-CVE-2026-44894). Data can be tampered with by attackers.
DEBIAN-CVE-2026-44893 Vulnerability in netty (DEBIAN-CVE-2026-44893)
vulnerability in netty (DEBIAN-CVE-2026-44893). Risk of unauthorized operations or information disclosure.
CVE-2026-44205 Cross-Site Scripting (XSS) in CVE-2026-44205 (CVE-2026-44205)
cross-site scripting in CVE-2026-44205 (CVE-2026-44205). Risk of unauthorized operations or information disclosure.
CVE-2026-41581 SQL Injection in sqli (CVE-2026-41581)
SQL injection in sqli (CVE-2026-41581). Risk of unauthorized operations or information disclosure.
CVE-2026-28898 Vulnerability in github.com/apple/swift-nio-http2 (CVE-2026-28898)
vulnerability in github.com/apple/swift-nio-http2 (CVE-2026-28898). Risk of unauthorized operations or information disclosure. Exploitable via ``HTTP2FramePayloadToHTTP1ServerCodec``. Mitigation: upgrade to `1.44.0` or later.
CVE-2026-28975 Vulnerability in github.com/apple/swift-nio-extras (CVE-2026-28975)
vulnerability in github.com/apple/swift-nio-extras (CVE-2026-28975). Risk of unauthorized operations or information disclosure. Exploitable via ``NIOHTTPRequestDecompressor``. Mitigation: upgrade to `1.34.1` or later.
CVE-2026-28980 Vulnerability in github.com/apple/swift-nio (CVE-2026-28980)
vulnerability in github.com/apple/swift-nio (CVE-2026-28980). Risk of unauthorized operations or information disclosure. Exploitable via ``HTTPDecoder``. Mitigation: upgrade to `2.100.0` or later.
CVE-2026-43671 Out-of-Bounds Write in github.com/apple/swift-nio (CVE-2026-43671)
out-of-bounds write in github.com/apple/swift-nio (CVE-2026-43671). Risk of unauthorized operations or information disclosure. Exploitable via ``UInt32.max``. Mitigation: upgrade to `2.100.0` or later.
CVE-2026-28970 Vulnerability in github.com/apple/swift-nio (CVE-2026-28970)
vulnerability in github.com/apple/swift-nio (CVE-2026-28970). Risk of unauthorized operations or information disclosure. Exploitable via ``NIOHTTPRequestHeadersValidator``. Mitigation: upgrade to `2.100.0` or later.
CVE-2026-48121 Vulnerability in @langchain/langgraph-checkpoint-mongodb (CVE-2026-48121)
vulnerability in @langchain/langgraph-checkpoint-mongodb (CVE-2026-48121). Confidential information can be exposed externally. Exploitable via ``MongoDBSaver``. Mitigation: upgrade to `1.3.1` or later.
GHSA-6jq6-x4cx-qvcm Vulnerability in grumpydictator/firefly-iii (GHSA-6jq6-x4cx-qvcm)
vulnerability in grumpydictator/firefly-iii (GHSA-6jq6-x4cx-qvcm). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/piggy-banks`. Mitigation: upgrade to `6.6.3` or later.
GHSA-9r4w-jg96-92mv Vulnerability in github.com/google/go-attestation (GHSA-9r4w-jg96-92mv)
vulnerability in github.com/google/go-attestation (GHSA-9r4w-jg96-92mv). Data can be tampered with by attackers. Exploitable via ``SignatureHeaderSize``.
CVE-2026-48113 Authorization Flaw in github.com/jpillora/chisel (CVE-2026-48113)
vulnerability in github.com/jpillora/chisel (CVE-2026-48113). Risk of unauthorized operations or information disclosure. Exploitable via ``tunnel.Config``. Mitigation: upgrade to `1.11.5` or later.
CGA-v7xc-pc69-85pj CGA-v7xc-pc69-85pj
CGA-2838-gh4g-m6q8 CGA-2838-gh4g-m6q8
CGA-r988-6r73-c2cv CGA-r988-6r73-c2cv
DEBIAN-CVE-2026-50012 DEBIAN-CVE-2026-50012
DEBIAN-CVE-2026-47729 DEBIAN-CVE-2026-47729
GHSA-cp5x-35vp-rj7j Vulnerability in sea-bound-siren (GHSA-cp5x-35vp-rj7j)
vulnerability in sea-bound-siren (GHSA-cp5x-35vp-rj7j). Risk of unauthorized operations or information disclosure.
GHSA-636m-vpq6-g454 Vulnerability in @malwguy/ecto-corsair-whisper-3d2a7c (GHSA-636m-vpq6-g454)
vulnerability in @malwguy/ecto-corsair-whisper-3d2a7c (GHSA-636m-vpq6-g454). Risk of unauthorized operations or information disclosure.
GHSA-22wq-6mfh-69qv Vulnerability in ecto-win-flag-q2m7 (GHSA-22wq-6mfh-69qv)
vulnerability in ecto-win-flag-q2m7 (GHSA-22wq-6mfh-69qv). Risk of unauthorized operations or information disclosure. Exploitable via ``nijin``.
GHSA-jmpq-jp85-ggf3 Vulnerability in ecto-spectral-leak-8d4e2 (GHSA-jmpq-jp85-ggf3)
vulnerability in ecto-spectral-leak-8d4e2 (GHSA-jmpq-jp85-ggf3). Risk of unauthorized operations or information disclosure. Exploitable via ``nijin``.
GHSA-9h8h-37p7-873r Vulnerability in ecto-rust-read-f3a9c1 (GHSA-9h8h-37p7-873r)
vulnerability in ecto-rust-read-f3a9c1 (GHSA-9h8h-37p7-873r). Risk of unauthorized operations or information disclosure.
GHSA-qv45-fm3m-pqmr Vulnerability in ecto-nightly-spirit (GHSA-qv45-fm3m-pqmr)
vulnerability in ecto-nightly-spirit (GHSA-qv45-fm3m-pqmr). Risk of unauthorized operations or information disclosure. Exploitable via ``process.env``.
GHSA-f7w9-m44f-pvf9 Vulnerability in ecto-corsair-flag-x9m4 (GHSA-f7w9-m44f-pvf9)
vulnerability in ecto-corsair-flag-x9m4 (GHSA-f7w9-m44f-pvf9). Risk of unauthorized operations or information disclosure. Exploitable via ``nijin``.
GHSA-ggf2-rhq7-qqgg Vulnerability in ecto-flag-read-m7p2 (GHSA-ggf2-rhq7-qqgg)
vulnerability in ecto-flag-read-m7p2 (GHSA-ggf2-rhq7-qqgg). Risk of unauthorized operations or information disclosure.
GHSA-h2hh-hg37-42gq Vulnerability in ecto-spirit-win-k4n8 (GHSA-h2hh-hg37-42gq)
vulnerability in ecto-spirit-win-k4n8 (GHSA-h2hh-hg37-42gq). Risk of unauthorized operations or information disclosure.
CVE-2026-54102 Rejected reason: Reserved but no longer needed.
Rejected reason: Reserved but no longer needed.
CVE-2026-54101 Rejected reason: Reserved but no longer needed.
Rejected reason: Reserved but no longer needed.
CVE-2026-49993 Vulnerability in @nuxt/webpack-builder (CVE-2026-49993)
vulnerability in @nuxt/webpack-builder (CVE-2026-49993). Confidential information can be exposed externally. Exploitable via ``Origin``. Mitigation: upgrade to `3.21.7` or later.
DEBIAN-CVE-2026-1836 Vulnerability in redmine (DEBIAN-CVE-2026-1836)
vulnerability in redmine (DEBIAN-CVE-2026-1836). Risk of unauthorized operations or information disclosure.
CVE-2026-1836 Vulnerability in CVE-2026-1836 (CVE-2026-1836)
vulnerability in CVE-2026-1836 (CVE-2026-1836). Risk of unauthorized operations or information disclosure.
CVE-2026-12066 Vulnerability in CVE-2026-12066 (CVE-2026-12066)
vulnerability in CVE-2026-12066 (CVE-2026-12066). Risk of unauthorized operations or information disclosure.
CVE-2026-12065 Vulnerability in CVE-2026-12065 (CVE-2026-12065)
vulnerability in CVE-2026-12065 (CVE-2026-12065). Risk of unauthorized operations or information disclosure.
CVE-2026-11967 Vulnerability in CVE-2026-11967 (CVE-2026-11967)
vulnerability in CVE-2026-11967 (CVE-2026-11967). Risk of unauthorized operations or information disclosure.
CVE-2026-11879 Vulnerability in CVE-2026-11879 (CVE-2026-11879)
vulnerability in CVE-2026-11879 (CVE-2026-11879). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2017-20240 Vulnerability in libcrypt-pbkdf2-perl (DEBIAN-CVE-2017-20240)
vulnerability in libcrypt-pbkdf2-perl (DEBIAN-CVE-2017-20240). Confidential information can be exposed externally. Mitigation: upgrade to `0.261630-1` or later.
CVE-2017-20240 Vulnerability in CVE-2017-20240 (CVE-2017-20240)
vulnerability in CVE-2017-20240 (CVE-2017-20240). Confidential information can be exposed externally.
SUSE-SU-2026:2389-1 Vulnerability in GraphicsMagick (SUSE-SU-2026:2389-1)
vulnerability in GraphicsMagick (SUSE-SU-2026:2389-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.42-150600.3.27.1` or later.
SUSE-SU-2026:2388-1 Vulnerability in qemu (SUSE-SU-2026:2388-1)
vulnerability in qemu (SUSE-SU-2026:2388-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.0-150500.49.42.1` or later.
SUSE-SU-2026:2387-1 Vulnerability in python (SUSE-SU-2026:2387-1)
vulnerability in python (SUSE-SU-2026:2387-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.7.18-150000.120.1` or later.
SUSE-SU-2026:2386-1 Vulnerability in qemu (SUSE-SU-2026:2386-1)
vulnerability in qemu (SUSE-SU-2026:2386-1). Risk of unauthorized operations or information disclosure. Exploitable via ``virtio_snd_pcm_in_cb``. Mitigation: upgrade to `8.2.10-150600.3.49.1` or later.
SUSE-SU-2026:2385-1 Vulnerability in qemu (SUSE-SU-2026:2385-1)
vulnerability in qemu (SUSE-SU-2026:2385-1). Risk of unauthorized operations or information disclosure. Exploitable via ``virtio_snd_pcm_in_cb``. Mitigation: upgrade to `9.2.4-150700.3.20.1` or later.
ROOT-APP-NPM-CVE-2026-47131 Vulnerability in @rootio/vm2 (ROOT-APP-NPM-CVE-2026-47131)
vulnerability in @rootio/vm2 (ROOT-APP-NPM-CVE-2026-47131). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.11.3-root.io.2` or later.
ROOT-APP-NPM-CVE-2026-47210 Vulnerability in @rootio/vm2 (ROOT-APP-NPM-CVE-2026-47210)
vulnerability in @rootio/vm2 (ROOT-APP-NPM-CVE-2026-47210). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.11.3-root.io.2` or later.
CVE-2026-49347 Vulnerability in CVE-2026-49347 (CVE-2026-49347)
vulnerability in CVE-2026-49347 (CVE-2026-49347). Risk of unauthorized operations or information disclosure.
CVE-2026-48485 Vulnerability in CVE-2026-48485 (CVE-2026-48485)
vulnerability in CVE-2026-48485 (CVE-2026-48485). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →