Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
ID Title
CVE-2026-56010 Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.
Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.
CVE-2026-56011 Unauthenticated Cross Site Scripting (XSS) in MapPress Maps for WordPress <= 2.97.3 versions.
Unauthenticated Cross Site Scripting (XSS) in MapPress Maps for WordPress <= 2.97.3 versions.
CVE-2025-68064 Contributor Local File Inclusion in Goya Core < 1.0.9.4 versions.
Contributor Local File Inclusion in Goya Core < 1.0.9.4 versions.
CVE-2025-68052 Unauthenticated Cross Site Request Forgery (CSRF) in Eagle Booking <= 1.3.4.3 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in Eagle Booking <= 1.3.4.3 versions.
CVE-2025-68063 Vulnerability in wordpress (CVE-2025-68063)
vulnerability in wordpress (CVE-2025-68063). Successful exploitation can lead to full system takeover.
CVE-2026-57915 Vulnerability in apache (CVE-2026-57915)
vulnerability in apache (CVE-2026-57915). Risk of unauthorized operations or information disclosure.
CVE-2026-40711 OS Command Injection in CVE-2026-40711 (CVE-2026-40711)
OS command injection in CVE-2026-40711 (CVE-2026-40711). Successful exploitation can lead to full system takeover.
CVE-2026-57920 Vulnerability in peplink (CVE-2026-57920)
vulnerability in peplink (CVE-2026-57920). Confidential information can be exposed externally.
CVE-2026-45257 Vulnerability in freebsd (CVE-2026-45257)
vulnerability in freebsd (CVE-2026-45257). Successful exploitation can lead to full system takeover.
CVE-2026-57918 Vulnerability in c (CVE-2026-57918)
vulnerability in c (CVE-2026-57918). Confidential information can be exposed externally.
CVE-2026-57912 Vulnerability in CVE-2026-57912 (CVE-2026-57912)
vulnerability in CVE-2026-57912 (CVE-2026-57912). Confidential information can be exposed externally.
CVE-2026-57913 Vulnerability in CVE-2026-57913 (CVE-2026-57913)
vulnerability in CVE-2026-57913 (CVE-2026-57913). Confidential information can be exposed externally.
CVE-2026-13325 Vulnerability in kubevirt (CVE-2026-13325)
vulnerability in kubevirt (CVE-2026-13325). Successful exploitation can lead to full system takeover.
CVE-2026-11702 Vulnerability in CVE-2026-11702 (CVE-2026-11702)
vulnerability in CVE-2026-11702 (CVE-2026-11702). Confidential information can be exposed externally.
CVE-2026-57877 Vulnerability in dos (CVE-2026-57877)
vulnerability in dos (CVE-2026-57877). Risk of unauthorized operations or information disclosure.
CVE-2026-11625 Vulnerability in CVE-2026-11625 (CVE-2026-11625)
vulnerability in CVE-2026-11625 (CVE-2026-11625). Confidential information can be exposed externally.
CVE-2026-10823 Vulnerability in wordpress (CVE-2026-10823)
vulnerability in wordpress (CVE-2026-10823). Confidential information can be exposed externally.
CVE-2026-57872 Path Traversal in path-traversal (CVE-2026-57872)
path traversal in path-traversal (CVE-2026-57872). Confidential information can be exposed externally.
CVE-2026-2053 SSRF (Server-Side Request Forgery) in wso2 (CVE-2026-2053)
SSRF in wso2 (CVE-2026-2053). Risk of unauthorized operations or information disclosure.
CVE-2026-49486 Vulnerability in apache-airflow-providers-ftp (CVE-2026-49486)
vulnerability in apache-airflow-providers-ftp (CVE-2026-49486). Confidential information can be exposed externally. Exploitable via ``ftplib.FTP_TLS``. Mitigation: upgrade to `3.15.1` or later.
CVE-2026-57873 Vulnerability in dos (CVE-2026-57873)
vulnerability in dos (CVE-2026-57873). Risk of unauthorized operations or information disclosure.
CVE-2026-10835 Vulnerability in wordpress (CVE-2026-10835)
vulnerability in wordpress (CVE-2026-10835). Confidential information can be exposed externally.
CVE-2026-57875 Vulnerability in dos (CVE-2026-57875)
vulnerability in dos (CVE-2026-57875). Risk of unauthorized operations or information disclosure.
CVE-2026-57876 Out-of-Bounds Write in dos (CVE-2026-57876)
out-of-bounds write in dos (CVE-2026-57876). Risk of unauthorized operations or information disclosure.
CVE-2026-57874 Vulnerability in dos (CVE-2026-57874)
vulnerability in dos (CVE-2026-57874). Risk of unauthorized operations or information disclosure.
CVE-2026-13281 Vulnerability in Google chrome (CVE-2026-13281)
vulnerability in Google chrome (CVE-2026-13281). Successful exploitation can lead to full system takeover.
CVE-2026-55975 OS Command Injection in cisa (CVE-2026-55975)
OS command injection in cisa (CVE-2026-55975). Successful exploitation can lead to full system takeover.
CVE-2026-50741 Code Injection in revive-adserver (CVE-2026-50741)
code injection in revive-adserver (CVE-2026-50741). Successful exploitation can lead to full system takeover. Exploitable via ``type``.
CVE-2026-48933 Vulnerability in nodejs (CVE-2026-48933)
vulnerability in nodejs (CVE-2026-48933). Risk of unauthorized operations or information disclosure.
CVE-2026-48619 Vulnerability in node (CVE-2026-48619)
vulnerability in node (CVE-2026-48619). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `22.23.0, 24.17.0, 26.3.1` or later.
CVE-2026-48615 Vulnerability in node (CVE-2026-48615)
vulnerability in node (CVE-2026-48615). Confidential information can be exposed externally. Exploitable via ``ERR_PROXY_TUNNEL``. Mitigation: upgrade to `22.23.0, 24.17.0, 26.3.1` or later.
CVE-2026-9222 Vulnerability in CVE-2026-9222 (CVE-2026-9222)
vulnerability in CVE-2026-9222 (CVE-2026-9222). Successful exploitation can lead to full system takeover.
CVE-2026-9221 Vulnerability in CVE-2026-9221 (CVE-2026-9221)
vulnerability in CVE-2026-9221 (CVE-2026-9221). Confidential information can be exposed externally.
CVE-2026-9220 Vulnerability in CVE-2026-9220 (CVE-2026-9220)
vulnerability in CVE-2026-9220 (CVE-2026-9220). Confidential information can be exposed externally.
CVE-2026-22879 vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability
vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability
CVE-2026-54479 Vulnerability in CVE-2026-54479 (CVE-2026-54479)
vulnerability in CVE-2026-54479 (CVE-2026-54479). Risk of unauthorized operations or information disclosure.
CVE-2026-7532 Vulnerability in wolfssl (CVE-2026-7532)
vulnerability in wolfssl (CVE-2026-7532). Data can be tampered with by attackers.
CVE-2026-50176 Vulnerability in CVE-2026-50176 (CVE-2026-50176)
vulnerability in CVE-2026-50176 (CVE-2026-50176). Risk of unauthorized operations or information disclosure.
CVE-2026-13283 Use-After-Free in google (CVE-2026-13283)
vulnerability in google (CVE-2026-13283). Successful exploitation can lead to full system takeover.
CVE-2026-8720 Vulnerability in wolfssl (CVE-2026-8720)
vulnerability in wolfssl (CVE-2026-8720). Data can be tampered with by attackers.
CVE-2026-7511 Vulnerability in wolfssl (CVE-2026-7511)
vulnerability in wolfssl (CVE-2026-7511). Data can be tampered with by attackers.
CVE-2026-6325 Out-of-Bounds Write in wolfssl (CVE-2026-6325)
out-of-bounds write in wolfssl (CVE-2026-6325). Data can be tampered with by attackers.
CVE-2026-6331 Vulnerability in wolfssl (CVE-2026-6331)
vulnerability in wolfssl (CVE-2026-6331). Data can be tampered with by attackers.
CVE-2026-11800 Vulnerability in privilege-escalation (CVE-2026-11800)
vulnerability in privilege-escalation (CVE-2026-11800). Confidential information can be exposed externally.
CVE-2026-12975 XXE (XML External Entity) in ssrf (CVE-2026-12975)
vulnerability in ssrf (CVE-2026-12975). Risk of unauthorized operations or information disclosure.
CVE-2026-12992 SSRF (Server-Side Request Forgery) in redhat (CVE-2026-12992)
SSRF in redhat (CVE-2026-12992). Risk of unauthorized operations or information disclosure.
CVE-2026-11703 Authentication Bypass in wolfssl (CVE-2026-11703)
authentication bypass in wolfssl (CVE-2026-11703). Data can be tampered with by attackers.
CVE-2025-71340 Unsafe Deserialization in picklescan (CVE-2025-71340)
vulnerability in picklescan (CVE-2025-71340). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.30` or later.
CVE-2025-71335 Vulnerability in flowise (CVE-2025-71335)
vulnerability in flowise (CVE-2025-71335). Confidential information can be exposed externally. Mitigation: upgrade to `3.0.10` or later.
CVE-2021-47987 Vulnerability in CVE-2021-47987 (CVE-2021-47987)
vulnerability in CVE-2021-47987 (CVE-2021-47987). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →