Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-27289	Out-of-Bounds Read in adobe (CVE-2026-27289) vulnerability in adobe (CVE-2026-27289). Successful exploitation can lead to full system takeover.	High	Cwe 125 Adobe Photoshop	2 months ago
CVE-2026-32077	Vulnerability in microsoft (CVE-2026-32077) vulnerability in microsoft (CVE-2026-32077). Successful exploitation can lead to full system takeover.	High	Cwe 822 Microsoft Windows 10 1607 Windows 10 1809 +12	2 months ago
CVE-2026-23666	Vulnerability in csharp (CVE-2026-23666) vulnerability in csharp (CVE-2026-23666). Risk of unauthorized operations or information disclosure.	High	C# Cwe 755 Cwe 366 Microsoft +14	2 months ago
CVE-2026-33116	Vulnerability in csharp (CVE-2026-33116) vulnerability in csharp (CVE-2026-33116). Risk of unauthorized operations or information disclosure.	High	C# Cwe 20 Cwe 400 Cwe 835 +22	2 months ago
CVE-2026-32203	Vulnerability in csharp (CVE-2026-32203) vulnerability in csharp (CVE-2026-32203). Risk of unauthorized operations or information disclosure.	High	C# Cwe 20 Cwe 121 Cwe 787 +9	2 months ago
CVE-2026-32154	Use-After-Free in microsoft (CVE-2026-32154) vulnerability in microsoft (CVE-2026-32154). Successful exploitation can lead to full system takeover.	High	Cwe 416 Microsoft Windows 11 23H2 Windows 11 24H2 +5	2 months ago
CVE-2026-32152	Use-After-Free in microsoft (CVE-2026-32152) vulnerability in microsoft (CVE-2026-32152). Successful exploitation can lead to full system takeover.	High	Cwe 416 Microsoft Windows 11 23H2 Windows 11 24H2 +5	2 months ago
CVE-2026-26151	Vulnerability in microsoft (CVE-2026-26151) vulnerability in microsoft (CVE-2026-26151). Confidential information can be exposed externally.	High	Cwe 357 Microsoft Windows 10 1607 Windows 10 1809 +12	2 months ago
CVE-2026-40164	Vulnerability in CVE-2026-40164 (CVE-2026-40164) vulnerability in CVE-2026-40164 (CVE-2026-40164). Risk of unauthorized operations or information disclosure.	High	Cwe 328 Cwe 407 Cwe 341	2 months ago
CVE-2009-0238 KEV	[KEV] Code Injection in Microsoft office (CVE-2009-0238) code injection in Microsoft office (CVE-2009-0238). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Office Cwe 94 Remote Code Execution +1	2 months ago
CVE-2026-33908	Vulnerability in dos (CVE-2026-33908) vulnerability in dos (CVE-2026-33908). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 674 Cwe 776 Imagemagick	2 months ago
CVE-2026-33901	Vulnerability in imagemagick (CVE-2026-33901) vulnerability in imagemagick (CVE-2026-33901). Risk of unauthorized operations or information disclosure.	High	Cwe 122 Cwe 787 Imagemagick	2 months ago
CVE-2026-28291	OS Command Injection in simple-git-project (CVE-2026-28291) OS command injection in simple-git-project (CVE-2026-28291). Successful exploitation can lead to full system takeover.	High	JavaScript Cwe 78 Simple Git Project Simple Git	2 months ago
CVE-2025-69627	Use-After-Free in gonitro (CVE-2025-69627) vulnerability in gonitro (CVE-2025-69627). Successful exploitation can lead to full system takeover.	High	JavaScript Cwe 416 Gonitro Nitro Pdf Pro +2	2 months ago
CVE-2025-69624	Vulnerability in gonitro (CVE-2025-69624) vulnerability in gonitro (CVE-2025-69624). Risk of unauthorized operations or information disclosure.	High	JavaScript Cwe 476 Gonitro Nitro Pdf Pro +2	2 months ago
CVE-2026-1462	Unsafe Deserialization in keras (CVE-2026-1462) vulnerability in keras (CVE-2026-1462). Successful exploitation can lead to full system takeover. Exploitable via ``TFSMLayer``. Mitigation: upgrade to `3.13.2` or later.	High	Insecure Deserialization Cwe 502 Keras Redhat +1	2 months ago
CVE-2026-31426	Use-After-Free in c (CVE-2026-31426) vulnerability in c (CVE-2026-31426). Successful exploitation can lead to full system takeover.	High	C Cwe 416 Linux Linux Kernel	2 months ago
CVE-2026-31417	Vulnerability in linux (CVE-2026-31417) vulnerability in linux (CVE-2026-31417). Risk of unauthorized operations or information disclosure. Exploitable via ``x25_sock.fraglen``.	High	Cwe 191 Linux Linux Kernel	2 months ago
CVE-2026-31419	Use-After-Free in c (CVE-2026-31419) vulnerability in c (CVE-2026-31419). Successful exploitation can lead to full system takeover.	High	C Cwe 416 Linux Linux Kernel	2 months ago
CVE-2026-0233	Vulnerability in paloaltonetworks (CVE-2026-0233) vulnerability in paloaltonetworks (CVE-2026-0233). Successful exploitation can lead to full system takeover.	High	Cwe 295 Paloaltonetworks Autonomous Digital Experience Manager Microsoft +1	2 months ago
CVE-2026-40436	Vulnerability in zte (CVE-2026-40436) vulnerability in zte (CVE-2026-40436). Successful exploitation can lead to full system takeover.	High	Zte Zxesm Iems	2 months ago
CVE-2026-5936	SSRF (Server-Side Request Forgery) in foxit (CVE-2026-5936) SSRF in foxit (CVE-2026-5936). Confidential information can be exposed externally.	High	Cwe 918 Foxit Pdf Services Api	2 months ago
CVE-2012-1854 KEV	[KEV] Vulnerability in Microsoft visual-basic-for-applications-vba (CVE-2012-1854) vulnerability in Microsoft visual-basic-for-applications-vba (CVE-2012-1854). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Visual Basic For Applications Vba Cwe 426 Vba +7	2 months ago
CVE-2025-60710 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2025-60710) vulnerability in Microsoft windows (CVE-2025-60710). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 59 Privilege Escalation	2 months ago
CVE-2023-21529 KEV	[KEV] Unsafe Deserialization in Microsoft exchange-server (CVE-2023-21529) vulnerability in Microsoft exchange-server (CVE-2023-21529). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Exchange Server Cwe 502 Remote Code Execution +6	2 months ago
CVE-2023-36424 KEV	[KEV] Out-of-Bounds Read in Microsoft windows (CVE-2023-36424) vulnerability in Microsoft windows (CVE-2023-36424). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 125 Buffer Overflow +5	2 months ago
CVE-2020-9715 KEV	[KEV] Use-After-Free in Adobe acrobat (CVE-2020-9715) vulnerability in Adobe acrobat (CVE-2020-9715). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Adobe Acrobat Cwe 416 Remote Code Execution +7	2 months ago
CVE-2026-21643 KEV	[KEV] SQL Injection in Fortinet forticlient-ems (CVE-2026-21643) SQL injection in Fortinet forticlient-ems (CVE-2026-21643). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Fortinet Forticlient Ems Cwe 89 Remote Code Execution +12	2 months ago
CVE-2026-34621 KEV	[KEV] Vulnerability in Adobe acrobat-and-reader (CVE-2026-34621) vulnerability in Adobe acrobat-and-reader (CVE-2026-34621). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Adobe Acrobat And Reader Cwe 1321 Remote Code Execution +13	2 months ago
CVE-2019-25695	Out-of-Bounds Write in CVE-2019-25695 (CVE-2019-25695) out-of-bounds write in CVE-2019-25695 (CVE-2019-25695). Successful exploitation can lead to full system takeover.	High	Cwe 787	2 months ago
CVE-2026-31413	Out-of-Bounds Read in linux (CVE-2026-31413) vulnerability in linux (CVE-2026-31413). Successful exploitation can lead to full system takeover.	High	Cwe 125 Linux Linux Kernel	2 months ago
CVE-2026-32146	Improper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification Improper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification	High	Cwe 22 Lpil Gleam Remote Code Execution +1	3 months ago
CVE-2026-4154	Vulnerability in gimp (CVE-2026-4154) vulnerability in gimp (CVE-2026-4154). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 190 Gimp	3 months ago
CVE-2026-4153	Vulnerability in gimp (CVE-2026-4153) vulnerability in gimp (CVE-2026-4153). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 122 Cwe 787 Cwe 120 +1	3 months ago
CVE-2026-4151	Vulnerability in gimp (CVE-2026-4151) vulnerability in gimp (CVE-2026-4151). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 190 Gimp	3 months ago
CVE-2026-4150	Vulnerability in gimp (CVE-2026-4150) vulnerability in gimp (CVE-2026-4150). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 190 Gimp	3 months ago
CVE-2026-4152	Vulnerability in gimp (CVE-2026-4152) vulnerability in gimp (CVE-2026-4152). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 122 Cwe 787 Cwe 131 +1	3 months ago
CVE-2026-5483	Vulnerability in redhat (CVE-2026-5483) vulnerability in redhat (CVE-2026-5483). Successful exploitation can lead to full system takeover.	High	JavaScript Cwe 201 Redhat Openshift Ai	3 months ago
CVE-2026-34481	Vulnerability in apache (CVE-2026-34481) vulnerability in apache (CVE-2026-34481). Data can be tampered with by attackers.	High	Apache Cwe 116 Log4J	3 months ago
CVE-2026-33092	Vulnerability in privilege-escalation (CVE-2026-33092) vulnerability in privilege-escalation (CVE-2026-33092). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 15	3 months ago
CVE-2026-39304	Vulnerability in apache (CVE-2026-39304) vulnerability in apache (CVE-2026-39304). Risk of unauthorized operations or information disclosure.	High	Apache Denial of Service Cwe 400 Cwe 770 +2	3 months ago
CVE-2021-47961	Vulnerability in synology (CVE-2021-47961) vulnerability in synology (CVE-2021-47961). Confidential information can be exposed externally.	High	Cwe 256 Synology Ssl Vpn Client	3 months ago
CVE-2026-22750	Vulnerability in vmware (CVE-2026-22750) vulnerability in vmware (CVE-2026-22750). Data can be tampered with by attackers.	High	Cwe 15 Vmware Spring Cloud Gateway	3 months ago
CVE-2026-28704	Vulnerability in jpcert (CVE-2026-28704) vulnerability in jpcert (CVE-2026-28704). Successful exploitation can lead to full system takeover.	High	Cwe 427 Jpcert Emocheck	3 months ago
CVE-2026-33788	Vulnerability in juniper (CVE-2026-33788) vulnerability in juniper (CVE-2026-33788). Successful exploitation can lead to full system takeover.	High	Cwe 306 Juniper Junos Jnp10K Lc1201 +4	3 months ago
CVE-2026-33771	Vulnerability in juniper (CVE-2026-33771) vulnerability in juniper (CVE-2026-33771). Confidential information can be exposed externally.	High	Cwe 521 Juniper Ctop Os	3 months ago
CVE-2025-13914	Vulnerability in juniper (CVE-2025-13914) vulnerability in juniper (CVE-2025-13914). Confidential information can be exposed externally.	High	Cwe 322 Juniper Apstra	3 months ago
CVE-2026-34734	Use-After-Free in hdfgroup (CVE-2026-34734) vulnerability in hdfgroup (CVE-2026-34734). Successful exploitation can lead to full system takeover.	High	Cwe 416 Cwe 825 Hdfgroup Hdf5	3 months ago
CVE-2026-34486	Vulnerability in tomcat (CVE-2026-34486) vulnerability in tomcat (CVE-2026-34486). Confidential information can be exposed externally. Mitigation: upgrade to `9.0.117, 10.1.54, 11.0.21` or later.	High	Apache Tomcat Cwe 311 Cwe 807	3 months ago
CVE-2026-29146	Vulnerability in apache (CVE-2026-29146) vulnerability in apache (CVE-2026-29146). Confidential information can be exposed externally.	High	Apache Tomcat Cwe 209 Cwe 642 +1	3 months ago

Vulnerabilities

🍪 About cookies