Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
openSUSE-SU-2026:10865-1	Vulnerability in beets (openSUSE-SU-2026:10865-1) vulnerability in beets (openSUSE-SU-2026:10865-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.11.0-1.1` or later.			3 months ago
UBUNTU-CVE-2026-47770	Vulnerability in jq (UBUNTU-CVE-2026-47770) vulnerability in jq (UBUNTU-CVE-2026-47770). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.2` or later.			3 months ago
UBUNTU-CVE-2026-47766	[Unknown description]			3 months ago
UBUNTU-CVE-2026-46644	[insecure equivalence in symfony/polyfill-intl-idn for ASCII-only xn-- labels]			3 months ago
CVE-2026-48027 KEV	[KEV] Vulnerability in nx (CVE-2026-48027) vulnerability in nx (CVE-2026-48027). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Cwe 506 Nx Nx Console	3 months ago
CVE-2026-44210	Vulnerability in github.com/kata-containers/kata-containers (CVE-2026-44210) vulnerability in github.com/kata-containers/kata-containers (CVE-2026-44210). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.0.0-20260519062212-ffa59ce3aa78` or later.	Critical	Cwe 88 Katacontainers Kata Containers	3 months ago
CVE-2026-44177	Path Traversal in getkirby/cms (CVE-2026-44177) path traversal in getkirby/cms (CVE-2026-44177). Risk of unauthorized operations or information disclosure. Exploitable via ``Users``. Mitigation: upgrade to `5.4.1` or later.		PHP Path Traversal Cwe 22 Cwe 98	3 months ago
CVE-2026-44176	Vulnerability in getkirby/cms (CVE-2026-44176) vulnerability in getkirby/cms (CVE-2026-44176). Risk of unauthorized operations or information disclosure. Exploitable via ``pages.access``. Mitigation: upgrade to `5.4.1` or later.		Cwe 862	3 months ago
CVE-2026-44175	Cross-Site Scripting (XSS) in getkirby/cms (CVE-2026-44175) cross-site scripting in getkirby/cms (CVE-2026-44175). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.4.1` or later.		Cross-Site Scripting Cwe 79	3 months ago
CVE-2026-44174	Vulnerability in getkirby/cms (CVE-2026-44174) vulnerability in getkirby/cms (CVE-2026-44174). Risk of unauthorized operations or information disclosure. Exploitable via ``search``. Mitigation: upgrade to `5.4.1` or later.		Privilege Escalation Cwe 470	3 months ago
CVE-2026-43947	Authorization Flaw in fuxa-server (CVE-2026-43947) vulnerability in fuxa-server (CVE-2026-43947). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/runscript`. Mitigation: upgrade to `1.3.1` or later.		Remote Code Execution Cwe 863	3 months ago
CVE-2026-43946	Authorization Flaw in fuxa-server (CVE-2026-43946) vulnerability in fuxa-server (CVE-2026-43946). Risk of unauthorized operations or information disclosure. Exploitable via ``req.userId``. Mitigation: upgrade to `1.3.1` or later.		Cwe 863	3 months ago
CVE-2026-43945	Code Injection in @frangoteam/fuxa (CVE-2026-43945) code injection in @frangoteam/fuxa (CVE-2026-43945). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.1` or later.		Remote Code Execution Cwe 94 Cwe 284 Cwe 288 +1	3 months ago
CVE-2026-42568	Vulnerability in org.yamcs:yamcs-core (CVE-2026-42568) vulnerability in org.yamcs:yamcs-core (CVE-2026-42568). Risk of unauthorized operations or information disclosure. Exploitable via ``org.yamcs.security.LdapAuthModule``. Mitigation: upgrade to `5.12.7` or later.	Medium	Cwe 90	3 months ago
CVE-2026-42462	Vulnerability in @fedify/fedify (CVE-2026-42462) vulnerability in @fedify/fedify (CVE-2026-42462). Data can be tampered with by attackers. Exploitable via ``Activity``. Mitigation: upgrade to `1.9.11` or later.	High	Cwe 180 Cwe 347 Cwe 436 Cwe 1289	3 months ago
CVE-2026-9604	Vulnerability in CVE-2026-9604 (CVE-2026-9604) vulnerability in CVE-2026-9604 (CVE-2026-9604). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 284	3 months ago
CVE-2026-8680	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.			3 months ago
CVE-2026-8647	Vulnerability in CVE-2026-8647 (CVE-2026-8647) vulnerability in CVE-2026-8647 (CVE-2026-8647). Risk of unauthorized operations or information disclosure.	Medium	Cwe 338	3 months ago
CVE-2026-46740	Vulnerability in CVE-2026-46740 (CVE-2026-46740) vulnerability in CVE-2026-46740 (CVE-2026-46740). Risk of unauthorized operations or information disclosure.	Medium	Cwe 93 Cwe 150	3 months ago
CVE-2026-42089	Vulnerability in yeoman-environment (CVE-2026-42089) vulnerability in yeoman-environment (CVE-2026-42089). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.0.1` or later.	High	Cwe 829	3 months ago
CVE-2026-41207	Vulnerability in io.netty.incubator:netty-incubator-codec-ohttp (CVE-2026-41207) vulnerability in io.netty.incubator:netty-incubator-codec-ohttp (CVE-2026-41207). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.0.21.Final` or later.	Medium	Java Cwe 330 Netty Netty Incubator Codec Ohttp	3 months ago
CVE-2026-34986	Vulnerability in github.com/go-jose/go-jose/v3 (CVE-2026-34986) vulnerability in github.com/go-jose/go-jose/v3 (CVE-2026-34986). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.5` or later.	High	JavaScript Denial of Service Cwe 248 Cwe 131 +2	3 months ago
ALPINE-CVE-2026-5260	Vulnerability in gnutls (ALPINE-CVE-2026-5260) vulnerability in gnutls (ALPINE-CVE-2026-5260). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.8.13-r0` or later.			3 months ago
CVE-2026-9603	Vulnerability in CVE-2026-9603 (CVE-2026-9603) vulnerability in CVE-2026-9603 (CVE-2026-9603). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 862 Cwe 863	3 months ago
CVE-2026-9584	A security vulnerability has been detected in code-projects Project Management System 1.0.... A security vulnerability has been detected in code-projects Project Management System 1.0....	High	PHP SQL Injection Cwe 74 Cwe 89 +2	3 months ago
CVE-2026-5260	A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret... A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret...	High	Cwe 1284 TLS/SSL Remote Code Execution Cwe 126	3 months ago
CVE-2026-48710	Vulnerability in starlette (CVE-2026-48710) vulnerability in starlette (CVE-2026-48710). Risk of unauthorized operations or information disclosure. Exploitable via `GET /foo`. Mitigation: upgrade to `1.0.1` or later.	Medium	Cwe 444 Encode Starlette Cwe 1289	3 months ago
DEBIAN-CVE-2026-44903	Vulnerability in prometheus (DEBIAN-CVE-2026-44903) vulnerability in prometheus (DEBIAN-CVE-2026-44903). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.5.3` or later.			3 months ago
DEBIAN-CVE-2026-44983	Vulnerability in rust-smallbitvec (DEBIAN-CVE-2026-44983) vulnerability in rust-smallbitvec (DEBIAN-CVE-2026-44983). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.1` or later.			3 months ago
CVE-2026-44905	Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verification pipeline of Vanetza.... Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verification pipeline of Vanetza. When processing incoming V2X messages, the ASN.1 decoder accepts the structure as syntactically val...	High	C C++ Cwe 248 Denial of Service +1	3 months ago
ALPINE-CVE-2026-42015	Vulnerability in gnutls (ALPINE-CVE-2026-42015) vulnerability in gnutls (ALPINE-CVE-2026-42015). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.8.13-r0` or later.			3 months ago
ALPINE-CVE-2026-42013	Vulnerability in gnutls (ALPINE-CVE-2026-42013) vulnerability in gnutls (ALPINE-CVE-2026-42013). Data can be tampered with by attackers. Mitigation: upgrade to `3.8.13-r0` or later.			3 months ago
CVE-2026-43988	Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When pro... Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When processing malformed network packets containing corrupted ASN.1/OER structures (e.g., invalid length fi...	High	C C++ Cwe 248 Denial of Service	3 months ago
CVE-2026-42015	Vulnerability in dos (CVE-2026-42015) vulnerability in dos (CVE-2026-42015). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 193	3 months ago
CVE-2026-42013	A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name ... A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name ...	High	Cwe 1284 Gnutls Authentication Bypass Cwe 295	3 months ago
ALPINE-CVE-2026-42012	Vulnerability in gnutls (ALPINE-CVE-2026-42012) vulnerability in gnutls (ALPINE-CVE-2026-42012). Data can be tampered with by attackers. Mitigation: upgrade to `3.8.13-r0` or later.			3 months ago
CVE-2026-42012	A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a... A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a...	High	Cwe 295 Spoofing Intercept Certificate +1	3 months ago
CVE-2025-46307	Vulnerability in apple (CVE-2025-46307) vulnerability in apple (CVE-2025-46307). Confidential information can be exposed externally.	Medium	Cwe 284 Apple macOS	3 months ago
CVE-2025-46284	Vulnerability in apple (CVE-2025-46284) vulnerability in apple (CVE-2025-46284). Successful exploitation can lead to full system takeover.	High	Cwe 362 Apple macOS	3 months ago
CVE-2025-46280	Out-of-Bounds Read in apple (CVE-2025-46280) vulnerability in apple (CVE-2025-46280). Risk of unauthorized operations or information disclosure.	Medium	Cwe 125 Apple macOS	3 months ago
CVE-2025-43451	Vulnerability in apple (CVE-2025-43451) vulnerability in apple (CVE-2025-43451). Confidential information can be exposed externally.	Medium	Cwe 284 Apple macOS	3 months ago
CVE-2025-43306	Privilege Escalation in apple (CVE-2025-43306) vulnerability in apple (CVE-2025-43306). Successful exploitation can lead to full system takeover.	High	Cwe 269 Apple macOS	3 months ago
CVE-2025-43290	Vulnerability in apple (CVE-2025-43290) vulnerability in apple (CVE-2025-43290). Data can be tampered with by attackers.	Medium	Cwe 732 Apple macOS	3 months ago
CVE-2025-43289	Vulnerability in apple (CVE-2025-43289) vulnerability in apple (CVE-2025-43289). Confidential information can be exposed externally.	Medium	Cwe 285 Apple macOS	3 months ago
UBUNTU-CVE-2026-44903	Vulnerability in prometheus (UBUNTU-CVE-2026-44903) vulnerability in prometheus (UBUNTU-CVE-2026-44903). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.5.3` or later.			3 months ago
UBUNTU-CVE-2026-44983	Vulnerability in rust-smallbitvec (UBUNTU-CVE-2026-44983) vulnerability in rust-smallbitvec (UBUNTU-CVE-2026-44983). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.1` or later.			3 months ago
ECHO-a229-4b9e-b030	ECHO-a229-4b9e-b030			3 months ago
ECHO-e406-9590-08f0	ECHO-e406-9590-08f0			3 months ago
ECHO-4f6e-0017-81fd	ECHO-4f6e-0017-81fd			3 months ago
ECHO-e772-f0e1-af40	ECHO-e772-f0e1-af40			3 months ago

Vulnerabilities

🍪 About cookies