Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-40215	Out-of-Bounds Read in openvpn (CVE-2026-40215) vulnerability in openvpn (CVE-2026-40215). Confidential information can be exposed externally.	High	Cwe 125 Cwe 416 Openvpn	2 months ago
CVE-2026-11585	Vulnerability in sqli (CVE-2026-11585) vulnerability in sqli (CVE-2026-11585). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	2 months ago
ALPINE-CVE-2026-40215	Vulnerability in openvpn (ALPINE-CVE-2026-40215) vulnerability in openvpn (ALPINE-CVE-2026-40215). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.20-r0` or later.			2 months ago
CGA-c7qr-89q9-3ff6	CGA-c7qr-89q9-3ff6			2 months ago
MAL-2026-5334	Vulnerability in spaysrbx (MAL-2026-5334) vulnerability in spaysrbx (MAL-2026-5334). Risk of unauthorized operations or information disclosure. Exploitable via ``__init__.py``.			2 months ago
CVE-2026-49141	Vulnerability in CVE-2026-49141 (CVE-2026-49141) vulnerability in CVE-2026-49141 (CVE-2026-49141). Data can be tampered with by attackers.	High	Cwe 639	2 months ago
CVE-2026-47345	Cross-Site Scripting (XSS) in typo3/html-sanitizer (CVE-2026-47345) cross-site scripting in typo3/html-sanitizer (CVE-2026-47345). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.2` or later.		Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-47344	Cross-Site Scripting (XSS) in typo3/html-sanitizer (CVE-2026-47344) cross-site scripting in typo3/html-sanitizer (CVE-2026-47344). Risk of unauthorized operations or information disclosure. Exploitable via ``ALLOW_INSECURE_RAW_TEXT``. Mitigation: upgrade to `2.3.2` or later.		Cross-Site Scripting Cwe 79 Cwe 436	2 months ago
CVE-2026-46484	Path Traversal in path-traversal (CVE-2026-46484) path traversal in path-traversal (CVE-2026-46484). Data can be tampered with by attackers.	High	Path Traversal Cwe 22 Cwe 285	2 months ago
ALPINE-CVE-2026-35058	Vulnerability in openvpn (ALPINE-CVE-2026-35058) vulnerability in openvpn (ALPINE-CVE-2026-35058). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.20-r0` or later.			2 months ago
CVE-2026-40519	OS Command Injection in nginx (CVE-2026-40519) OS command injection in nginx (CVE-2026-40519). Successful exploitation can lead to full system takeover.	High	JavaScript nginx Remote Code Execution Cwe 78	2 months ago
CVE-2026-35058	Vulnerability in dos (CVE-2026-35058) vulnerability in dos (CVE-2026-35058). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 617 Openvpn	2 months ago
CVE-2026-11584	Vulnerability in sqli (CVE-2026-11584) vulnerability in sqli (CVE-2026-11584). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	2 months ago
CVE-2026-11583	Vulnerability in sqli (CVE-2026-11583) vulnerability in sqli (CVE-2026-11583). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	2 months ago
CVE-2026-11582	Vulnerability in sqli (CVE-2026-11582) vulnerability in sqli (CVE-2026-11582). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	2 months ago
CVE-2026-11393	Code Injection in Amazon @aws/agentcore (CVE-2026-11393) code injection in Amazon @aws/agentcore (CVE-2026-11393). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.0.0-preview.9` or later.	Critical	AWS Amazon Cloud Python +1	2 months ago
USN-8408-1	Vulnerability in php-twig (USN-8408-1) vulnerability in php-twig (USN-8408-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.23.0-2ubuntu0.1~esm1` or later.			2 months ago
CGA-8887-5872-hxpf	CGA-8887-5872-hxpf			2 months ago
MAL-2026-5333	Vulnerability in nerfstudio-gs (MAL-2026-5333) vulnerability in nerfstudio-gs (MAL-2026-5333). Risk of unauthorized operations or information disclosure.			2 months ago
CVE-2026-52778	Vulnerability in yeswiki/yeswiki (CVE-2026-52778) vulnerability in yeswiki/yeswiki (CVE-2026-52778). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.6.6` or later.	Critical	PHP Denial of Service Cwe 94 Cwe 1333	2 months ago
CVE-2026-11559	Vulnerability in sqli (CVE-2026-11559) vulnerability in sqli (CVE-2026-11559). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	2 months ago
CVE-2026-11558	Vulnerability in sqli (CVE-2026-11558) vulnerability in sqli (CVE-2026-11558). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	2 months ago
CVE-2026-11557	Buffer Overflow in CVE-2026-11557 (CVE-2026-11557) vulnerability in CVE-2026-11557 (CVE-2026-11557). Successful exploitation can lead to full system takeover.	High	Cwe 119 Cwe 121	2 months ago
CVE-2026-10787	Vulnerability in devolutions (CVE-2026-10787) vulnerability in devolutions (CVE-2026-10787). Risk of unauthorized operations or information disclosure.	Medium	Cwe 862 Devolutions Devolutions Server	2 months ago
CVE-2026-10786	Vulnerability in devolutions (CVE-2026-10786) vulnerability in devolutions (CVE-2026-10786). Confidential information can be exposed externally.	Medium	Cwe 312 Devolutions Devolutions Server	2 months ago
CVE-2026-10544	OS Command Injection in devolutions (CVE-2026-10544) OS command injection in devolutions (CVE-2026-10544). Risk of unauthorized operations or information disclosure.	Medium	Cwe 78 Devolutions Devolutions Server	2 months ago
CVE-2026-44893	Vulnerability in io.netty:netty-codec-haproxy (CVE-2026-44893) vulnerability in io.netty:netty-codec-haproxy (CVE-2026-44893). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.135.Final` or later.	High	Cwe 703 Netty Cwe 805	2 months ago
CVE-2026-44892	Vulnerability in io.netty:netty-codec-http3 (CVE-2026-44892) vulnerability in io.netty:netty-codec-http3 (CVE-2026-44892). Risk of unauthorized operations or information disclosure. Exploitable via ``Http3ConnectionHandler``. Mitigation: upgrade to `4.2.15.Final` or later.	High	C Denial of Service Cwe 400 Cwe 1188 +1	2 months ago
CVE-2026-44890	Vulnerability in io.netty:netty-codec-redis (CVE-2026-44890) vulnerability in io.netty:netty-codec-redis (CVE-2026-44890). Risk of unauthorized operations or information disclosure. Exploitable via ``decodeLength``. Mitigation: upgrade to `4.1.135.Final` or later.	High	Denial of Service Cwe 400 Netty Cwe 770	2 months ago
CVE-2026-44250	Vulnerability in io.netty:netty-codec-redis (CVE-2026-44250) vulnerability in io.netty:netty-codec-redis (CVE-2026-44250). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.135.Final` or later.	High	Denial of Service Cwe 400 Netty Cwe 770	2 months ago
CVE-2026-44249	Vulnerability in io.netty:netty-handler (CVE-2026-44249) vulnerability in io.netty:netty-handler (CVE-2026-44249). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.135.Final` or later.	High	Cwe 284 Cwe 697 Netty Cwe 1287	2 months ago
MAL-2026-5331	Vulnerability in bittensor-burn (MAL-2026-5331) vulnerability in bittensor-burn (MAL-2026-5331). Risk of unauthorized operations or information disclosure.			2 months ago
CVE-2026-42890	Code Injection in actual (CVE-2026-42890) code injection in actual (CVE-2026-42890). Risk of unauthorized operations or information disclosure. Exploitable via ``actual``. Mitigation: upgrade to `26.5.0` or later.		JavaScript Cwe 94	2 months ago
CVE-2026-8913	OS Command Injection in CVE-2026-8913 (CVE-2026-8913) OS command injection in CVE-2026-8913 (CVE-2026-8913). Risk of unauthorized operations or information disclosure.		Cwe 78	2 months ago
CVE-2026-11556	Command Injection in CVE-2026-11556 (CVE-2026-11556) command injection in CVE-2026-11556 (CVE-2026-11556). Successful exploitation can lead to full system takeover.	High	Cwe 77 Cwe 78	2 months ago
CVE-2026-11555	Vulnerability in dlink (CVE-2026-11555) vulnerability in dlink (CVE-2026-11555). Risk of unauthorized operations or information disclosure.	Low	Cwe 266 Cwe 272 Dlink Dgs 1100 08Pd Firmware +1	2 months ago
CVE-2026-11554	Vulnerability in CVE-2026-11554 (CVE-2026-11554) vulnerability in CVE-2026-11554 (CVE-2026-11554). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 272	2 months ago
CVE-2026-11553	Buffer Overflow in CVE-2026-11553 (CVE-2026-11553) vulnerability in CVE-2026-11553 (CVE-2026-11553). Successful exploitation can lead to full system takeover.	High	Cwe 119 Cwe 121	2 months ago
CVE-2026-11552	Vulnerability in CVE-2026-11552 (CVE-2026-11552) vulnerability in CVE-2026-11552 (CVE-2026-11552). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 255 Cwe 259	2 months ago
MAL-2026-5332	Vulnerability in xforpy (MAL-2026-5332) vulnerability in xforpy (MAL-2026-5332). Risk of unauthorized operations or information disclosure.			2 months ago
CGA-55m9-wc52-v96c	CGA-55m9-wc52-v96c			2 months ago
CVE-2026-41479	Open Redirect in authlib (CVE-2026-41479) vulnerability in authlib (CVE-2026-41479). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.10` or later.	Medium	Python Cwe 601 Authlib	2 months ago
openSUSE-SU-2026:20928-1	Vulnerability in syft (openSUSE-SU-2026:20928-1) vulnerability in syft (openSUSE-SU-2026:20928-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.45.0-bp160.1.1` or later.			2 months ago
CGA-9mv3-jwwc-mrr5	CGA-9mv3-jwwc-mrr5			2 months ago
USN-8407-1	Vulnerability in strongswan (USN-8407-1) vulnerability in strongswan (USN-8407-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.9.5-2ubuntu2.7` or later.			2 months ago
CGA-mmxx-4q5g-5mfc	CGA-mmxx-4q5g-5mfc			2 months ago
CGA-r882-6frc-5ph8	CGA-r882-6frc-5ph8			2 months ago
CGA-rf95-2wc7-qx99	CGA-rf95-2wc7-qx99			2 months ago
CVE-2026-48507	Authorization Flaw in snipe/snipe-it (CVE-2026-48507) vulnerability in snipe/snipe-it (CVE-2026-48507). Risk of unauthorized operations or information disclosure. Exploitable via ``users.edit``. Mitigation: upgrade to `8.6.0` or later.	High	Cwe 863 Snipeitapp Snipe It	2 months ago
DEBIAN-CVE-2026-46311	Vulnerability in linux (DEBIAN-CVE-2026-46311) vulnerability in linux (DEBIAN-CVE-2026-46311). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.0.9-1` or later.			2 months ago

Vulnerabilities

🍪 About cookies