Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-14373	Vulnerability in c (CVE-2026-14373) vulnerability in c (CVE-2026-14373). Confidential information can be exposed externally.	High	C Cwe 862	1 month ago
CVE-2026-14891	Vulnerability in CVE-2026-14891 (CVE-2026-14891) vulnerability in CVE-2026-14891 (CVE-2026-14891). Confidential information can be exposed externally.	High	Cwe 59	1 month ago
CVE-2026-58192	Path Traversal in appium (CVE-2026-58192) path traversal in appium (CVE-2026-58192). Data can be tampered with by attackers. Exploitable via `POST /storage/delete`.	High	Cwe 22 Cwe 73 Appium Appiumstorage Plugin	1 month ago
CVE-2026-58207	Vulnerability in linuxfoundation (CVE-2026-58207) vulnerability in linuxfoundation (CVE-2026-58207). Risk of unauthorized operations or information disclosure.	High	Cwe 190 Linuxfoundation Nats Server	1 month ago
CVE-2026-55596	Cross-Site Scripting (XSS) in @platejs/media (CVE-2026-55596) cross-site scripting in @platejs/media (CVE-2026-55596). Confidential information can be exposed externally. Exploitable via ``provider``. Mitigation: upgrade to `53.1.4` or later.	High	JavaScript Cwe 79	1 month ago
CVE-2026-56669	Vulnerability in CVE-2026-56669 (CVE-2026-56669) vulnerability in CVE-2026-56669 (CVE-2026-56669). Risk of unauthorized operations or information disclosure.	High	Cwe 407 Cwe 436	1 month ago
CVE-2026-54591	Path Traversal in asyncssh (CVE-2026-54591) path traversal in asyncssh (CVE-2026-54591). Data can be tampered with by attackers. Exploitable via ``_parse_cd_args``. Mitigation: upgrade to `2.23.1` or later.	High	Python Cwe 22	1 month ago
CVE-2026-49866	Vulnerability in @libp2p/gossipsub (CVE-2026-49866) vulnerability in @libp2p/gossipsub (CVE-2026-49866). Risk of unauthorized operations or information disclosure. Exploitable via ``opts.decodeRpcLimits``. Mitigation: upgrade to `16.0.0` or later.	High	JavaScript Cwe 770	1 month ago
CVE-2026-35210	Vulnerability in citeum (CVE-2026-35210) vulnerability in citeum (CVE-2026-35210). Data can be tampered with by attackers.	High	Cwe 639 Cwe 863 Citeum Opencti	1 month ago
CVE-2026-49825	Vulnerability in lxml_html_clean (CVE-2026-49825) vulnerability in lxml_html_clean (CVE-2026-49825). Confidential information can be exposed externally. Exploitable via ``lxml_html_clean.Cleaner``. Mitigation: upgrade to `0.4.5` or later.	High	Python Cwe 79 Cwe 184	1 month ago
CVE-2026-59936	Vulnerability in pypdf (CVE-2026-59936) vulnerability in pypdf (CVE-2026-59936). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.14.1` or later.	High	Python Cwe 400 Pypdf Project Pypdf	1 month ago
CVE-2026-59939	Vulnerability in httplib2 (CVE-2026-59939) vulnerability in httplib2 (CVE-2026-59939). Risk of unauthorized operations or information disclosure. Exploitable via ``httplib2``. Mitigation: upgrade to `0.32.0` or later.	High	Python Cwe 409 Httplib2 Project Httplib2	1 month ago
CVE-2026-59935	Vulnerability in pypdf (CVE-2026-59935) vulnerability in pypdf (CVE-2026-59935). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.14.2` or later.	High	Python Cwe 835 Pypdf Project Pypdf	1 month ago
CVE-2026-59948	Path Traversal in composer/composer (CVE-2026-59948) path traversal in composer/composer (CVE-2026-59948). Successful exploitation can lead to full system takeover. Exploitable via ``install``. Mitigation: upgrade to `2.2.29` or later.	High	PHP Cwe 22 Cwe 787	1 month ago
CVE-2026-59822	Authentication Bypass in litellm (CVE-2026-59822) authentication bypass in litellm (CVE-2026-59822). Confidential information can be exposed externally. Exploitable via ``Authorization``. Mitigation: upgrade to `1.84.0` or later.	High	Cwe 287 Cwe 306 LiteLLM	1 month ago
CVE-2026-59821	Code Injection in litellm (CVE-2026-59821) code injection in litellm (CVE-2026-59821). Successful exploitation can lead to full system takeover. Exploitable via `POST /guardrails`. Mitigation: upgrade to `1.82.0-stable` or later.	High	Python Cwe 94 LiteLLM	1 month ago
CVE-2026-59802	Vulnerability in CVE-2026-59802 (CVE-2026-59802) vulnerability in CVE-2026-59802 (CVE-2026-59802). Confidential information can be exposed externally.	High	JavaScript Cwe 183	1 month ago
CVE-2026-58253	Authentication Bypass in linuxfoundation (CVE-2026-58253) authentication bypass in linuxfoundation (CVE-2026-58253). Data can be tampered with by attackers.	High	Cwe 287 Linuxfoundation Nats Server	1 month ago
CVE-2026-58250	Vulnerability in c (CVE-2026-58250) vulnerability in c (CVE-2026-58250). Risk of unauthorized operations or information disclosure.	High	C Cwe 476 Linuxfoundation Nats Server	1 month ago
CVE-2026-58213	Vulnerability in linuxfoundation (CVE-2026-58213) vulnerability in linuxfoundation (CVE-2026-58213). Confidential information can be exposed externally.	High	Cwe 74 Linuxfoundation Nats Server	1 month ago
CVE-2026-58210	Vulnerability in linuxfoundation (CVE-2026-58210) vulnerability in linuxfoundation (CVE-2026-58210). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Linuxfoundation Nats Server	1 month ago
CVE-2026-55404	Vulnerability in yt-dlp (CVE-2026-55404) vulnerability in yt-dlp (CVE-2026-55404). Successful exploitation can lead to full system takeover. Exploitable via ``webpage_url``. Mitigation: upgrade to `2026.7.4` or later.	High	Cwe 74 Yt Dlp Project Yt Dlp	1 month ago
CVE-2026-59937	Vulnerability in pypdf (CVE-2026-59937) vulnerability in pypdf (CVE-2026-59937). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.14.0` or later.	High	Python Cwe 400 Pypdf Project Pypdf	1 month ago
CVE-2026-60102	OS Command Injection in c (CVE-2026-60102) OS command injection in c (CVE-2026-60102). Successful exploitation can lead to full system takeover.	High	C Cwe 78	1 month ago
CVE-2026-59928	Vulnerability in mistune (CVE-2026-59928) vulnerability in mistune (CVE-2026-59928). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.0` or later.	High	Python Denial of Service Cwe 407 Cwe 1333 +2	1 month ago
CVE-2026-59925	Vulnerability in mistune (CVE-2026-59925) vulnerability in mistune (CVE-2026-59925). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.0` or later.	High	Python Denial of Service Cwe 407 Cwe 1333 +2	1 month ago
CVE-2026-59922	Vulnerability in mistune (CVE-2026-59922) vulnerability in mistune (CVE-2026-59922). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.0` or later.	High	Python Denial of Service Cwe 407 Cwe 1333 +2	1 month ago
CVE-2026-59892	Vulnerability in @opentelemetry/propagator-jaeger (CVE-2026-59892) vulnerability in @opentelemetry/propagator-jaeger (CVE-2026-59892). Risk of unauthorized operations or information disclosure. Exploitable via ``URIError``. Mitigation: upgrade to `2.9.0` or later.	High	JavaScript Cwe 248	1 month ago
CVE-2026-59887	Vulnerability in linkify-it (CVE-2026-59887) vulnerability in linkify-it (CVE-2026-59887). Risk of unauthorized operations or information disclosure. Exploitable via ``src_email_name``. Mitigation: upgrade to `5.0.2` or later.	High	Cwe 407 Markdown It Linkify It	1 month ago
CVE-2026-59879	Vulnerability in immutable (CVE-2026-59879) vulnerability in immutable (CVE-2026-59879). Risk of unauthorized operations or information disclosure. Exploitable via ``set``. Mitigation: upgrade to `5.1.8` or later.	High	JavaScript Cwe 190 Cwe 400 Cwe 835 +3	1 month ago
CVE-2026-59261	Vulnerability in openclaw (CVE-2026-59261) vulnerability in openclaw (CVE-2026-59261). Confidential information can be exposed externally.	High	Cwe 184 Cwe 522 Openclaw	1 month ago
CVE-2026-59731	Vulnerability in astro (CVE-2026-59731) vulnerability in astro (CVE-2026-59731). Confidential information can be exposed externally. Mitigation: upgrade to `6.4.8` or later.	High	Cwe 647	1 month ago
CVE-2026-29008	Vulnerability in c (CVE-2026-29008) vulnerability in c (CVE-2026-29008). Risk of unauthorized operations or information disclosure.	High	C Cwe 191 Denx U Boot	1 month ago
CVE-2026-39822	Vulnerability in golang (CVE-2026-39822) vulnerability in golang (CVE-2026-39822). Successful exploitation can lead to full system takeover.	High	Cwe 61 Golang Go	1 month ago
CVE-2026-29009	Vulnerability in c (CVE-2026-29009) vulnerability in c (CVE-2026-29009). Risk of unauthorized operations or information disclosure.	High	C Cwe 120 Denx U Boot	1 month ago
CVE-2025-3110	Vulnerability in openvpn (CVE-2025-3110) vulnerability in openvpn (CVE-2025-3110). Data can be tampered with by attackers.	High	Cwe 444 Openvpn Openvpn Access Server	1 month ago
CVE-2026-59880	Vulnerability in immutable (CVE-2026-59880) vulnerability in immutable (CVE-2026-59880). Risk of unauthorized operations or information disclosure. Exploitable via ``Immutable.Map``. Mitigation: upgrade to `5.1.8` or later.	High	JavaScript Cwe 407 Immutable Js Immutable	1 month ago
CVE-2026-59873	Vulnerability in tar (CVE-2026-59873) vulnerability in tar (CVE-2026-59873). Risk of unauthorized operations or information disclosure. Exploitable via ``maxReadSize``. Mitigation: upgrade to `7.5.19` or later.	High	JavaScript Cwe 770 Isaacs Tar	1 month ago
CVE-2026-59874	Vulnerability in tar (CVE-2026-59874) vulnerability in tar (CVE-2026-59874). Risk of unauthorized operations or information disclosure. Exploitable via ``poc.mjs``. Mitigation: upgrade to `7.5.18` or later.	High	JavaScript Cwe 835 Isaacs Tar	1 month ago
CVE-2026-59725	Vulnerability in engine.io (CVE-2026-59725) vulnerability in engine.io (CVE-2026-59725). Risk of unauthorized operations or information disclosure. Exploitable via ``POST``. Mitigation: upgrade to `6.6.7` or later.	High	Cwe 404 Socket Engineio	1 month ago
CVE-2026-59869	Vulnerability in js-yaml (CVE-2026-59869) vulnerability in js-yaml (CVE-2026-59869). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.0` or later.	High	JavaScript Cwe 407 Nodeca Js Yaml	1 month ago
CVE-2026-59724	Vulnerability in dos (CVE-2026-59724) vulnerability in dos (CVE-2026-59724). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Socket Engineio	1 month ago
CVE-2026-3144	Vulnerability in ibm (CVE-2026-3144) vulnerability in ibm (CVE-2026-3144). Successful exploitation can lead to full system takeover.	High	Cwe 1392 Ibm Api Connect	1 month ago
CVE-2026-49145	Vulnerability in CVE-2026-49145 (CVE-2026-49145) vulnerability in CVE-2026-49145 (CVE-2026-49145). Risk of unauthorized operations or information disclosure.	High	Cwe 73 Cwe 426	1 month ago
CVE-2026-56776	Vulnerability in n8n (CVE-2026-56776) vulnerability in n8n (CVE-2026-56776). Risk of unauthorized operations or information disclosure. Exploitable via `POST /workflows/{workflowId}/test-runs/new`. Mitigation: upgrade to `2.25.7` or later.	High	Cwe 863 N8N	1 month ago
CVE-2026-56226	Information Disclosure in CVE-2026-56226 (CVE-2026-56226) vulnerability in CVE-2026-56226 (CVE-2026-56226). Confidential information can be exposed externally. Exploitable via `POST /rest/v1/rpc/get_orgs_v6`.	High	Cwe 200	1 month ago
CVE-2026-56246	Vulnerability in CVE-2026-56246 (CVE-2026-56246) vulnerability in CVE-2026-56246 (CVE-2026-56246). Data can be tampered with by attackers. Exploitable via `DELETE /organization`.	High	Cwe 285	1 month ago
CVE-2026-56250	Vulnerability in dos (CVE-2026-56250) vulnerability in dos (CVE-2026-56250). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 862	1 month ago
CVE-2026-56086	Authorization Flaw in dell (CVE-2026-56086) vulnerability in dell (CVE-2026-56086). Successful exploitation can lead to full system takeover.	High	Cwe 863 Dell Data Domain Operating System	1 month ago
CVE-2026-15053	Tanium addressed a denial of service vulnerability in Tanium Server. Tanium addressed a denial of service vulnerability in Tanium Server.	High	Denial of Service Cwe 789 Tanium Server	1 month ago

Vulnerabilities

🍪 About cookies