Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-11914	Vulnerability in drupal/composer (CVE-2026-11914) vulnerability in drupal/composer (CVE-2026-11914). Risk of unauthorized operations or information disclosure.	Medium	Drupal Cwe 20	2 months ago
CVE-2026-11913	Vulnerability in drupal/mothermayi (CVE-2026-11913) vulnerability in drupal/mothermayi (CVE-2026-11913). Risk of unauthorized operations or information disclosure.	Critical	Drupal Cwe 79	2 months ago
CVE-2026-11909	Vulnerability in drupal/examples (CVE-2026-11909) vulnerability in drupal/examples (CVE-2026-11909). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.0.6` or later.	Low	Drupal Cwe 862 Rfay Examples For Developers	2 months ago
CVE-2026-11908	Cross-Site Scripting (XSS) in drupal/tagify (CVE-2026-11908) cross-site scripting in drupal/tagify (CVE-2026-11908). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.52` or later.	Medium	Drupal Cross-Site Scripting Cwe 79 Factorial +1	2 months ago
USN-8306-2	Vulnerability in samba (USN-8306-2) vulnerability in samba (USN-8306-2). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2` or later.			2 months ago
CVE-2025-53114	Vulnerability in org.cometd.java:cometd-java-server-common (CVE-2025-53114) vulnerability in org.cometd.java:cometd-java-server-common (CVE-2025-53114). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.0.x` or later.	High	Cwe 400	2 months ago
ECHO-7c49-586a-06bd	ECHO-7c49-586a-06bd			2 months ago
CVE-2026-53698	Vulnerability in org.silverpeas.core:silverpeas-core-war (CVE-2026-53698) vulnerability in org.silverpeas.core:silverpeas-core-war (CVE-2026-53698). Confidential information can be exposed externally.	Medium	Cwe 36	2 months ago
CVE-2026-53694	Vulnerability in CVE-2026-53694 (CVE-2026-53694) vulnerability in CVE-2026-53694 (CVE-2026-53694). Risk of unauthorized operations or information disclosure.		Cwe 88	2 months ago
CVE-2026-53693	Cross-Site Scripting (XSS) in CVE-2026-53693 (CVE-2026-53693) cross-site scripting in CVE-2026-53693 (CVE-2026-53693). Risk of unauthorized operations or information disclosure.		JavaScript Cross-Site Scripting Cwe 79 Cwe 116	2 months ago
CVE-2026-49760	Vulnerability in c (CVE-2026-49760) vulnerability in c (CVE-2026-49760). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 121 Erlang +2	2 months ago
CVE-2026-49759	Vulnerability in c (CVE-2026-49759) vulnerability in c (CVE-2026-49759). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 121 Erlang +3	2 months ago
CVE-2026-48860	Authorization Flaw in erlang (CVE-2026-48860) vulnerability in erlang (CVE-2026-48860). Confidential information can be exposed externally.	Medium	Cwe 863 Cwe 1025 Erlang Erlangotp +1	2 months ago
CVE-2026-48859	Vulnerability in erlang (CVE-2026-48859) vulnerability in erlang (CVE-2026-48859). Risk of unauthorized operations or information disclosure.	Medium	Cwe 208 Erlang Erlangotp Erlangssh	2 months ago
CVE-2026-48858	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-48858) SSRF in ssrf (CVE-2026-48858). Risk of unauthorized operations or information disclosure.	Medium	Server-Side Request Forgery Cwe 918 Erlang Erlanginets +2	2 months ago
CVE-2026-48856	Open Redirect in erlang (CVE-2026-48856) vulnerability in erlang (CVE-2026-48856). Confidential information can be exposed externally. Exploitable via `Authorization header`.	Medium	Cwe 601 Erlang Erlanginets Erlangotp	2 months ago
CVE-2026-48855	Information Disclosure in erlang (CVE-2026-48855) vulnerability in erlang (CVE-2026-48855). Confidential information can be exposed externally.	Medium	Cwe 200 Erlang Erlangotp Erlangssh	2 months ago
CVE-2026-48096	Vulnerability in github.com/openfga/openfga (CVE-2026-48096) vulnerability in github.com/openfga/openfga (CVE-2026-48096). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.16.0` or later.	Medium	Cwe 345 Cwe 668 Openfga Helm Charts	2 months ago
CVE-2026-46558	Vulnerability in plane (CVE-2026-46558) vulnerability in plane (CVE-2026-46558). Confidential information can be exposed externally.	High	Cwe 639 Cwe 862 Plane	2 months ago
CVE-2026-45569	Path Traversal in c (CVE-2026-45569) path traversal in c (CVE-2026-45569). Confidential information can be exposed externally.	High	C nginx Apache Cwe 22 +1	2 months ago
CVE-2026-45567	Authentication Bypass in nginx (CVE-2026-45567) authentication bypass in nginx (CVE-2026-45567). Risk of unauthorized operations or information disclosure.	High	nginx Apache Authentication Bypass Cwe 287 +2	2 months ago
CVE-2026-45566	Open Redirect in nginx (CVE-2026-45566) vulnerability in nginx (CVE-2026-45566). Risk of unauthorized operations or information disclosure.	Medium	JavaScript nginx Apache Cwe 601	2 months ago
CVE-2026-45565	Vulnerability in nginx (CVE-2026-45565) vulnerability in nginx (CVE-2026-45565). Confidential information can be exposed externally.	High	nginx Apache Cwe 20 Cwe 22 +1	2 months ago
CVE-2026-25700	Vulnerability in github.com/apache/incubator-answer (CVE-2026-25700) vulnerability in github.com/apache/incubator-answer (CVE-2026-25700). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.0.1` or later.	High	Apache Cwe 1259 Answer	2 months ago
CGA-pqmv-rf2j-9crj	CGA-pqmv-rf2j-9crj			2 months ago
MAL-2026-5515	Vulnerability in yelp-react-component-chaos (MAL-2026-5515) vulnerability in yelp-react-component-chaos (MAL-2026-5515). Risk of unauthorized operations or information disclosure.			2 months ago
GHSA-5hg6-wrf8-9hhr	Vulnerability in tailwind-animator (GHSA-5hg6-wrf8-9hhr) vulnerability in tailwind-animator (GHSA-5hg6-wrf8-9hhr). Risk of unauthorized operations or information disclosure.			2 months ago
CVE-2026-9045	Vulnerability in CVE-2026-9045 (CVE-2026-9045) vulnerability in CVE-2026-9045 (CVE-2026-9045). Successful exploitation can lead to full system takeover.	High	Cwe 306	2 months ago
CVE-2026-8637	Vulnerability in CVE-2026-8637 (CVE-2026-8637) vulnerability in CVE-2026-8637 (CVE-2026-8637). Successful exploitation can lead to full system takeover.	High	Cwe 427	2 months ago
CVE-2026-8335	Vulnerability in CVE-2026-8335 (CVE-2026-8335) vulnerability in CVE-2026-8335 (CVE-2026-8335). Risk of unauthorized operations or information disclosure.		Cwe 306	2 months ago
CVE-2026-7516	Vulnerability in CVE-2026-7516 (CVE-2026-7516) vulnerability in CVE-2026-7516 (CVE-2026-7516). Risk of unauthorized operations or information disclosure.	Medium	Cwe 749	2 months ago
CVE-2026-6090	Vulnerability in CVE-2026-6090 (CVE-2026-6090) vulnerability in CVE-2026-6090 (CVE-2026-6090). Successful exploitation can lead to full system takeover.	High	Authentication Bypass Cwe 290	2 months ago
CVE-2026-53689	Vulnerability in c (CVE-2026-53689) vulnerability in c (CVE-2026-53689). Confidential information can be exposed externally.	High	C Cwe 1284	2 months ago
CVE-2026-53476	Path Traversal in github.com/kubev2v/assisted-migration-agent (CVE-2026-53476) path traversal in github.com/kubev2v/assisted-migration-agent (CVE-2026-53476). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.16.0` or later.	Critical	Path Traversal Cwe 59 Cwe 22 Kubev2V +1	2 months ago
CVE-2026-53475	Vulnerability in github.com/kubev2v/assisted-migration-agent (CVE-2026-53475) vulnerability in github.com/kubev2v/assisted-migration-agent (CVE-2026-53475). Confidential information can be exposed externally. Mitigation: upgrade to `0.16.0` or later.	Critical	Cwe 295 Kubev2V Assisted Migration Agent	2 months ago
CVE-2026-53474	SQL Injection in github.com/kubev2v/migration-planner (CVE-2026-53474) SQL injection in github.com/kubev2v/migration-planner (CVE-2026-53474). Confidential information can be exposed externally. Mitigation: upgrade to `0.13.5` or later.	Critical	SQL Injection Cwe 89 Kebev2V Migration Assessment	2 months ago
CVE-2026-53473	Cross-Site Scripting (XSS) in kubev2v (CVE-2026-53473) cross-site scripting in kubev2v (CVE-2026-53473). Confidential information can be exposed externally.	High	JavaScript Cross-Site Scripting Cwe 79 Kubev2V +1	2 months ago
CVE-2026-53471	Vulnerability in github.com/kubev2v/migration-planner (CVE-2026-53471) vulnerability in github.com/kubev2v/migration-planner (CVE-2026-53471). Confidential information can be exposed externally. Mitigation: upgrade to `0.13.5` or later.	Critical	Cwe 639 Kebev2V Migration Assessment	2 months ago
CVE-2026-53470	Vulnerability in github.com/kubev2v/migration-planner (CVE-2026-53470) vulnerability in github.com/kubev2v/migration-planner (CVE-2026-53470). Confidential information can be exposed externally. Mitigation: upgrade to `0.13.5` or later.	Critical	Cwe 639 Kebev2V Migration Assessment	2 months ago
CVE-2026-53469	Vulnerability in github.com/kubev2v/migration-planner (CVE-2026-53469) vulnerability in github.com/kubev2v/migration-planner (CVE-2026-53469). Data can be tampered with by attackers. Mitigation: upgrade to `0.13.5` or later.	Critical	Cwe 306	2 months ago
CVE-2026-45564	OS Command Injection in c (CVE-2026-45564) OS command injection in c (CVE-2026-45564). Successful exploitation can lead to full system takeover. Exploitable via `POST /config/versions/`.	High	C nginx Apache Cwe 78	2 months ago
CVE-2026-45563	Vulnerability in nginx (CVE-2026-45563) vulnerability in nginx (CVE-2026-45563). Risk of unauthorized operations or information disclosure. Exploitable via `GET /history/`.	Medium	nginx Apache Cwe 639 Cwe 863	2 months ago
CVE-2026-45561	SSRF (Server-Side Request Forgery) in flask (CVE-2026-45561) SSRF in flask (CVE-2026-45561). Confidential information can be exposed externally.	Medium	Flask nginx Apache Cwe 918	2 months ago
CVE-2026-45560	Cross-Site Scripting (XSS) in c (CVE-2026-45560) cross-site scripting in c (CVE-2026-45560). Risk of unauthorized operations or information disclosure.	Medium	JavaScript C nginx Apache +1	2 months ago
CVE-2026-45559	Vulnerability in nginx (CVE-2026-45559) vulnerability in nginx (CVE-2026-45559). Confidential information can be exposed externally.	Medium	nginx Apache Cwe 90	2 months ago
CVE-2026-45558	Vulnerability in c (CVE-2026-45558) vulnerability in c (CVE-2026-45558). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/service/haproxy/`.	Critical	C nginx Apache Remote Code Execution +4	2 months ago
CVE-2026-45556	Vulnerability in nginx (CVE-2026-45556) vulnerability in nginx (CVE-2026-45556). Successful exploitation can lead to full system takeover. Exploitable via `POST /waf/`.	Critical	nginx Apache Remote Code Execution Cwe 20 +3	2 months ago
CVE-2026-45552	Vulnerability in nginx (CVE-2026-45552) vulnerability in nginx (CVE-2026-45552). Successful exploitation can lead to full system takeover.	Critical	nginx Apache Cwe 639 Cwe 862 +1	2 months ago
CVE-2026-45550	Vulnerability in nginx (CVE-2026-45550) vulnerability in nginx (CVE-2026-45550). Data can be tampered with by attackers. Exploitable via `PUT /smon/check`.	Critical	nginx Apache Cwe 639 Cwe 862 +1	2 months ago
CVE-2026-45549	Vulnerability in nginx (CVE-2026-45549) vulnerability in nginx (CVE-2026-45549). Risk of unauthorized operations or information disclosure.	High	nginx Apache Cwe 862 Cwe 863	2 months ago

Vulnerabilities

🍪 About cookies