Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2016-20032	Cross-Site Scripting (XSS) in CVE-2016-20032 (CVE-2016-20032) cross-site scripting in CVE-2016-20032 (CVE-2016-20032). Risk of unauthorized operations or information disclosure.	High	Cross-Site Scripting Cwe 79	3 months ago
CVE-2016-20025	Vulnerability in privilege-escalation (CVE-2016-20025) vulnerability in privilege-escalation (CVE-2016-20025). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 552	3 months ago
CVE-2025-47813 KEV	[KEV] Vulnerability in Wing ftp server wing-ftp-server (CVE-2025-47813) vulnerability in Wing ftp server wing-ftp-server (CVE-2025-47813). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Wing Ftp Server Cwe 209	3 months ago
CVE-2026-3999	Vulnerability in privilege-escalation (CVE-2026-3999) vulnerability in privilege-escalation (CVE-2026-3999). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 639 Pointsharp Id Server	3 months ago
CVE-2026-4111	Vulnerability in CVE-2026-4111 (CVE-2026-4111) vulnerability in CVE-2026-4111 (CVE-2026-4111). Risk of unauthorized operations or information disclosure.	High	Cwe 835	3 months ago
CVE-2026-3873	Vulnerability in CVE-2026-3873 (CVE-2026-3873) vulnerability in CVE-2026-3873 (CVE-2026-3873). Risk of unauthorized operations or information disclosure.	High	Cwe 798	3 months ago
CVE-2025-71263	Vulnerability in opengroup (CVE-2025-71263) vulnerability in opengroup (CVE-2025-71263). Successful exploitation can lead to full system takeover.	High	Cwe 120 Opengroup Unix	3 months ago
CVE-2025-13779	Vulnerability in CVE-2025-13779 (CVE-2025-13779) vulnerability in CVE-2025-13779 (CVE-2025-13779). Confidential information can be exposed externally.	High	Cwe 306	3 months ago
CVE-2026-3910 KEV	[KEV] Buffer Overflow in Google chromium-v8 (CVE-2026-3910) vulnerability in Google chromium-v8 (CVE-2026-3910). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Google Chromium V8 Cwe 119	3 months ago
CVE-2026-3909 KEV	[KEV] Out-of-Bounds Write in Google skia (CVE-2026-3909) out-of-bounds write in Google skia (CVE-2026-3909). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Google Skia Cwe 787	3 months ago
CVE-2026-32597	Vulnerability in pyjwt (CVE-2026-32597) vulnerability in pyjwt (CVE-2026-32597). Data can be tampered with by attackers. Exploitable via ``crit``. Mitigation: upgrade to `2.12.0` or later.	High	Python Cwe 345 Cwe 863 Cwe 347 +2	3 months ago
CVE-2026-2229	Vulnerability in c (CVE-2026-2229) vulnerability in c (CVE-2026-2229). Risk of unauthorized operations or information disclosure.	High	JavaScript C Cwe 248 Cwe 1284 +2	3 months ago
CVE-2026-1528	Vulnerability in nodejs (CVE-2026-1528) vulnerability in nodejs (CVE-2026-1528). Risk of unauthorized operations or information disclosure.	High	Cwe 248 Cwe 1284 Nodejs Undici	3 months ago
CVE-2026-1526	Vulnerability in nodejs (CVE-2026-1526) vulnerability in nodejs (CVE-2026-1526). Risk of unauthorized operations or information disclosure.	High	JavaScript Cwe 409 Cwe 770 Nodejs +1	3 months ago
CVE-2026-32274	Path Traversal in black (CVE-2026-32274) path traversal in black (CVE-2026-32274). Data can be tampered with by attackers.	High	Python Cwe 22 Black	3 months ago
CVE-2026-3497	Vulnerability in canonical (CVE-2026-3497) vulnerability in canonical (CVE-2026-3497). Risk of unauthorized operations or information disclosure.	High	Cwe 908 Canonical Ubuntu Linux OpenBSD +6	3 months ago
CVE-2026-32141	Vulnerability in webreflection (CVE-2026-32141) vulnerability in webreflection (CVE-2026-32141). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.0` or later.	High	JavaScript Cwe 674 Cwe 770 Webreflection +1	3 months ago
CVE-2026-28356	Vulnerability in dos (CVE-2026-28356) vulnerability in dos (CVE-2026-28356). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.2` or later.	High	Python Denial of Service Cwe 1333	3 months ago
CVE-2026-21672	Vulnerability in privilege-escalation (CVE-2026-21672) vulnerability in privilege-escalation (CVE-2026-21672). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 538	3 months ago
CVE-2026-21668	Vulnerability in veeam (CVE-2026-21668) vulnerability in veeam (CVE-2026-21668). Successful exploitation can lead to full system takeover.	High	Cwe 862 Cwe 693 Veeam Veeam Backup Replication	3 months ago
CVE-2026-21670	A vulnerability allowing a low-privileged user to extract saved SSH credentials. A vulnerability allowing a low-privileged user to extract saved SSH credentials.	High	Cwe 522 Veeam Veeam Backup Replication	3 months ago
CVE-2023-43010	Out-of-Bounds Write in apple (CVE-2023-43010) out-of-bounds write in apple (CVE-2023-43010). Successful exploitation can lead to full system takeover.	High	Cwe 787 Cwe 120 Apple Safari +3	3 months ago
CVE-2026-20046	Vulnerability in cisco (CVE-2026-20046) vulnerability in cisco (CVE-2026-20046). Successful exploitation can lead to full system takeover.	High	Cwe 264 Cisco Ios Xr Ios Xrv 9000	4 months ago
CVE-2025-67037	Code Injection in lantronix (CVE-2025-67037) code injection in lantronix (CVE-2025-67037). Successful exploitation can lead to full system takeover.	High	Cwe 94 Lantronix Eds5032 Firmware Eds5032 +4	4 months ago
CVE-2025-67036	Code Injection in lantronix (CVE-2025-67036) code injection in lantronix (CVE-2025-67036). Successful exploitation can lead to full system takeover.	High	Cwe 94 Lantronix Eds5032 Firmware Eds5032 +4	4 months ago
CVE-2025-67034	Code Injection in lantronix (CVE-2025-67034) code injection in lantronix (CVE-2025-67034). Successful exploitation can lead to full system takeover.	High	Cwe 94 Lantronix Eds5032 Firmware Eds5032 +4	4 months ago
CVE-2026-31892	Authorization Flaw in argoproj (CVE-2026-31892) vulnerability in argoproj (CVE-2026-31892). Confidential information can be exposed externally. Mitigation: upgrade to `4.0.2` or later.	High	Cwe 863 Cwe 807 Argoproj Argo Workflows	4 months ago
CVE-2026-1497	Authorization Flaw in neo4j (CVE-2026-1497) vulnerability in neo4j (CVE-2026-1497). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.26.22, 2026.2.0` or later.	High	Cwe 863 Neo4J	4 months ago
CVE-2026-30902	Privilege Escalation in zoom (CVE-2026-30902) vulnerability in zoom (CVE-2026-30902). Successful exploitation can lead to full system takeover.	High	Cwe 269 Zoom Rooms Workplace Desktop +1	4 months ago
CVE-2026-30900	Vulnerability in zoom (CVE-2026-30900) vulnerability in zoom (CVE-2026-30900). Successful exploitation can lead to full system takeover.	High	Cwe 754 Zoom Meeting Software Development Kit Workplace Desktop +1	4 months ago
CVE-2026-30901	Vulnerability in zoom (CVE-2026-30901) vulnerability in zoom (CVE-2026-30901). Successful exploitation can lead to full system takeover.	High	Cwe 20 Zoom Rooms	4 months ago
CVE-2026-32062	Vulnerability in openclaw (CVE-2026-32062) vulnerability in openclaw (CVE-2026-32062). Risk of unauthorized operations or information disclosure. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.2.22` or later.	High	Cwe 770 Openclaw Openclawvoice Call	4 months ago
CVE-2025-68613 KEV	[KEV] Vulnerability in n8n (CVE-2025-68613) vulnerability in n8n (CVE-2025-68613). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	N8N Cwe 913	4 months ago
CVE-2026-31837	Information Disclosure in istio (CVE-2026-31837) vulnerability in istio (CVE-2026-31837). Confidential information can be exposed externally. Mitigation: upgrade to `1.29.1` or later.	High	Cwe 200 Cwe 1392 Istio	4 months ago
CVE-2026-28807	Path Traversal in wisp (CVE-2026-28807) path traversal in wisp (CVE-2026-28807). Confidential information can be exposed externally. Exploitable via ``wisp.serve_static``. Mitigation: upgrade to `2.2.1` or later.	High	Path Traversal Cwe 22 Gleam Wisp Wisp	4 months ago
CVE-2026-28806	Vulnerability in nerves-hub (CVE-2026-28806) vulnerability in nerves-hub (CVE-2026-28806). Successful exploitation can lead to full system takeover.	High	Cwe 285 Cwe 668 Nerves Hub Nerveshub	4 months ago
CVE-2026-30951	SQL Injection in sqli (CVE-2026-30951) SQL injection in sqli (CVE-2026-30951). Confidential information can be exposed externally. Mitigation: upgrade to `6.37.8` or later.	High	JavaScript SQL Injection Cwe 89 Sequelizejs +1	4 months ago
CVE-2026-26128	Authentication Bypass in microsoft (CVE-2026-26128) authentication bypass in microsoft (CVE-2026-26128). Successful exploitation can lead to full system takeover.	High	Cwe 287 Microsoft Windows 10 1607 Windows 10 1809 +12	4 months ago
CVE-2026-25187	Vulnerability in microsoft (CVE-2026-25187) vulnerability in microsoft (CVE-2026-25187). Successful exploitation can lead to full system takeover.	High	Cwe 59 Microsoft Windows 10 1607 Windows 10 1809 +12	4 months ago
CVE-2026-24294	Authentication Bypass in microsoft (CVE-2026-24294) authentication bypass in microsoft (CVE-2026-24294). Successful exploitation can lead to full system takeover.	High	Cwe 287 Microsoft Windows 10 1607 Windows 10 1809 +12	4 months ago
CVE-2025-11739	Unsafe Deserialization in deserialization (CVE-2025-11739) vulnerability in deserialization (CVE-2025-11739). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 502 Schneider Electric Ecostruxure Power Monitoring Expert +1	4 months ago
CVE-2026-2273	Code Injection in schneider-electric (CVE-2026-2273) code injection in schneider-electric (CVE-2026-2273). Successful exploitation can lead to full system takeover.	High	Cwe 94 Schneider Electric Ecostruxure Automation Expert	4 months ago
CVE-2026-2339	Vulnerability in CVE-2026-2339 (CVE-2026-2339) vulnerability in CVE-2026-2339 (CVE-2026-2339). Successful exploitation can lead to full system takeover.	High	Cwe 306	4 months ago
CVE-2026-26738	Vulnerability in uderzo (CVE-2026-26738) vulnerability in uderzo (CVE-2026-26738). Successful exploitation can lead to full system takeover.	High	Cwe 121 Uderzo Spacesniffer	4 months ago
CVE-2026-26130	Vulnerability in csharp (CVE-2026-26130) vulnerability in csharp (CVE-2026-26130). Risk of unauthorized operations or information disclosure.	High	C# Cwe 770 Microsoft Aspnet Core	4 months ago
CVE-2026-26134	Vulnerability in microsoft (CVE-2026-26134) vulnerability in microsoft (CVE-2026-26134). Successful exploitation can lead to full system takeover.	High	Cwe 190 Cwe 416 Microsoft Office	4 months ago
CVE-2026-26110	Vulnerability in microsoft (CVE-2026-26110) vulnerability in microsoft (CVE-2026-26110). Successful exploitation can lead to full system takeover.	High	Cwe 843 Microsoft 365 Apps Office +1	4 months ago
CVE-2026-25836	OS Command Injection in fortinet (CVE-2026-25836) OS command injection in fortinet (CVE-2026-25836). Successful exploitation can lead to full system takeover.	High	Cwe 78 Fortinet Fortisandbox Cloud	4 months ago
CVE-2026-24293	Vulnerability in microsoft (CVE-2026-24293) vulnerability in microsoft (CVE-2026-24293). Successful exploitation can lead to full system takeover.	High	Cwe 476 Microsoft Windows 10 21H2 Windows 10 22H2 +7	4 months ago
CVE-2026-24289	Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.	High	Cwe 416 Microsoft Windows 10 1607 Windows 10 1809 +12	4 months ago

Vulnerabilities

🍪 About cookies