Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CGA-rg85-h2qj-w6x6	CGA-rg85-h2qj-w6x6			3 months ago
CGA-8vf9-hmpx-4c26	CGA-8vf9-hmpx-4c26			3 months ago
CGA-vc7c-6mhm-829j	CGA-vc7c-6mhm-829j			3 months ago
CGA-5hc5-p275-2wrf	CGA-5hc5-p275-2wrf			3 months ago
CGA-4pv4-h7wx-59f2	CGA-4pv4-h7wx-59f2			3 months ago
DEBIAN-CVE-2026-8851	Vulnerability in sogo (DEBIAN-CVE-2026-8851) vulnerability in sogo (DEBIAN-CVE-2026-8851). Confidential information can be exposed externally. Mitigation: upgrade to `5.12.8-1` or later.			3 months ago
CVE-2026-27130	OS Command Injection in CVE-2026-27130 (CVE-2026-27130) OS command injection in CVE-2026-27130 (CVE-2026-27130). Successful exploitation can lead to full system takeover.	Critical	Cwe 78	3 months ago
CVE-2026-26978	Unsafe Deserialization in CVE-2026-26978 (CVE-2026-26978) vulnerability in CVE-2026-26978 (CVE-2026-26978). Risk of unauthorized operations or information disclosure.		Remote Code Execution Cwe 502	3 months ago
UBUNTU-CVE-2026-8851	Vulnerability in sogo (UBUNTU-CVE-2026-8851) vulnerability in sogo (UBUNTU-CVE-2026-8851). Confidential information can be exposed externally. Mitigation: upgrade to `2.2.17a-1.1ubuntu0.1~esm1` or later.			3 months ago
CVE-2026-8838	Code Injection in Amazon redshift-connector (CVE-2026-8838) code injection in Amazon redshift-connector (CVE-2026-8838). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.14` or later.	Critical	AWS Amazon Cloud Python +2	3 months ago
CVE-2026-46559	Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-46559) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-46559). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.13.1` or later.	Medium	Cwe 193 Cwe 787 Imagemagick	3 months ago
CVE-2026-46557	Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-46557) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-46557). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.13.1` or later.	Medium	Cwe 674 Imagemagick	3 months ago
CVE-2026-46523	ImageMagick: Use-After-Free in MSL decoder. ImageMagick: Use-After-Free in MSL decoder.	Medium	Cwe 416 Imagemagick Cwe 825	3 months ago
CVE-2026-46522	Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-46522) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-46522). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.13.1` or later.	High	Cwe 400 Cwe 835 Imagemagick	3 months ago
CVE-2026-46521	Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-46521) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-46521). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.13.1` or later.	Medium	Cwe 131 Cwe 252 Cwe 787 Cwe 835 +1	3 months ago
CVE-2026-46520	ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions	High	Cwe 122 Cwe 787 Imagemagick	3 months ago
CLSA-2026-1779136540	Vulnerability in thunderbird (CLSA-2026-1779136540) vulnerability in thunderbird (CLSA-2026-1779136540). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `115.4.1-1.el9_2.alma.tuxcare.els1` or later.			3 months ago
CVE-2026-45664	Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-45664) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-45664). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.13.1` or later.	Medium	Cwe 400 Cwe 407 Cwe 674 Imagemagick +1	3 months ago
CVE-2026-45624	Out-of-Bounds Read in Magick.NET-Q16-AnyCPU (CVE-2026-45624) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-45624). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.13.1` or later.	Medium	Cwe 125 Cwe 129 Imagemagick	3 months ago
MAL-2026-3835	Vulnerability in solana-web3-alt (MAL-2026-3835) vulnerability in solana-web3-alt (MAL-2026-3835). Risk of unauthorized operations or information disclosure.			3 months ago
MAL-2026-3834	Vulnerability in foundry-utils (MAL-2026-3834) vulnerability in foundry-utils (MAL-2026-3834). Risk of unauthorized operations or information disclosure.			3 months ago
CVE-2026-45367	Vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-45367) vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-45367). Risk of unauthorized operations or information disclosure. Exploitable via ``funcMatches``. Mitigation: upgrade to `6.9.7` or later.	High	Java Denial of Service Cwe 1333 Jvn +2	3 months ago
CVE-2026-45554	Vulnerability in nicegui (CVE-2026-45554) vulnerability in nicegui (CVE-2026-45554). Risk of unauthorized operations or information disclosure. Exploitable via ``RuntimeError``. Mitigation: upgrade to `3.12.0` or later.	Medium	Python Cwe 248 Cwe 770	3 months ago
CVE-2026-45553	Information Disclosure in nicegui (CVE-2026-45553) vulnerability in nicegui (CVE-2026-45553). Confidential information can be exposed externally. Exploitable via ``include``. Mitigation: upgrade to `3.12.0` or later.	High	Python Cwe 200	3 months ago
CVE-2026-45686	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45686) vulnerability in go.opentelemetry.io/obi (CVE-2026-45686). Risk of unauthorized operations or information disclosure. Exploitable via ``set``. Mitigation: upgrade to `0.9.0` or later.	High	Denial of Service Cwe 190 Opentelemetry Ebpf Instrumentation	3 months ago
CVE-2026-45685	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45685) vulnerability in go.opentelemetry.io/obi (CVE-2026-45685). Risk of unauthorized operations or information disclosure. Exploitable via ``parseOpMessage``. Mitigation: upgrade to `0.9.0` or later.	High	Denial of Service Cwe 20 Cwe 248 Cwe 704 +2	3 months ago
CVE-2026-45684	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45684) vulnerability in go.opentelemetry.io/obi (CVE-2026-45684). Risk of unauthorized operations or information disclosure. Exploitable via ``writev``. Mitigation: upgrade to `0.9.0` or later.	Medium	Cwe 126 Cwe 787 Opentelemetry Ebpf Instrumentation	3 months ago
CVE-2026-45682	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45682) vulnerability in go.opentelemetry.io/obi (CVE-2026-45682). Risk of unauthorized operations or information disclosure. Exploitable via ``CappedConcurrentHashMap``. Mitigation: upgrade to `0.9.0` or later.	Medium	Java Cwe 401 Cwe 770 Opentelemetry +1	3 months ago
CVE-2026-45683	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45683) vulnerability in go.opentelemetry.io/obi (CVE-2026-45683). Risk of unauthorized operations or information disclosure. Exploitable via ``bpf_probe_read``. Mitigation: upgrade to `0.9.0` or later.	Low	Java Cwe 127 Cwe 200 Opentelemetry +1	3 months ago
CVE-2026-45681	Out-of-Bounds Read in go.opentelemetry.io/obi (CVE-2026-45681) vulnerability in go.opentelemetry.io/obi (CVE-2026-45681). Confidential information can be exposed externally. Exploitable via ``k_kprobes_http2_buf_size``. Mitigation: upgrade to `0.9.0` or later.	Medium	Cwe 125 Cwe 130 Opentelemetry Ebpf Instrumentation	3 months ago
CVE-2026-45680	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45680) vulnerability in go.opentelemetry.io/obi (CVE-2026-45680). Risk of unauthorized operations or information disclosure. Exploitable via ``probeMetrics``. Mitigation: upgrade to `0.9.0` or later.	Medium	Cwe 400 Cwe 834 Opentelemetry Ebpf Instrumentation	3 months ago
CGA-964h-x7qw-8v4g	CGA-964h-x7qw-8v4g			3 months ago
CGA-h3fc-hvmg-m7gv	CGA-h3fc-hvmg-m7gv			3 months ago
CGA-8jpw-2g7x-w3h9	CGA-8jpw-2g7x-w3h9			3 months ago
DEBIAN-CVE-2026-8836	Vulnerability in lwip (DEBIAN-CVE-2026-8836) vulnerability in lwip (DEBIAN-CVE-2026-8836). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.2.1+dfsg1-5` or later.			3 months ago
CVE-2026-8836	Buffer Overflow in c (CVE-2026-8836) vulnerability in c (CVE-2026-8836). Successful exploitation can lead to full system takeover.	Critical	C Cwe 119 Cwe 121	3 months ago
CVE-2026-45243	Vulnerability in @steipete/summarize (CVE-2026-45243) vulnerability in @steipete/summarize (CVE-2026-45243). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.15.0` or later.	Medium	Cwe 862 Steipete Summarize	3 months ago
CVE-2026-45242	Vulnerability in @steipete/summarize (CVE-2026-45242) vulnerability in @steipete/summarize (CVE-2026-45242). Data can be tampered with by attackers. Mitigation: upgrade to `0.15.0` or later.	High	Path Traversal Cwe 862 Steipete Summarize	3 months ago
CVE-2026-45231	Cross-Site Scripting (XSS) in CVE-2026-45231 (CVE-2026-45231) cross-site scripting in CVE-2026-45231 (CVE-2026-45231). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79	3 months ago
UBUNTU-CVE-2026-8836	Vulnerability in lwip (UBUNTU-CVE-2026-8836) vulnerability in lwip (UBUNTU-CVE-2026-8836). Successful exploitation can lead to full system takeover.			3 months ago
MGASA-2026-0147	Vulnerability in rclone (MGASA-2026-0147) vulnerability in rclone (MGASA-2026-0147). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.73.5-1.1.mga9` or later.			3 months ago
MGASA-2026-0148	Updated perl-YAML-Syck package fixes security vulnerability Updated perl-YAML-Syck package fixes security vulnerability			3 months ago
MGASA-2026-0149	Vulnerability in perl-WWW-Mechanize-Cached (MGASA-2026-0149) vulnerability in perl-WWW-Mechanize-Cached (MGASA-2026-0149). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.0-1.mga9` or later.			3 months ago
CVE-2026-45731	Path Traversal in WWBN/AVideo (CVE-2026-45731) path traversal in WWBN/AVideo (CVE-2026-45731). Confidential information can be exposed externally. Exploitable via `POST /view/update.php`.	Medium	PHP Cwe 22 Wwbn Avideo	3 months ago
CLSA-2026-1779130594	procps-ng: Fix of CVE-2023-4016 procps-ng: Fix of CVE-2023-4016			3 months ago
CLSA-2026-1779130441	Vulnerability in vim-X11 (CLSA-2026-1779130441) vulnerability in vim-X11 (CLSA-2026-1779130441). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:8.0.1763-16.el8.tuxcare.els1` or later.			3 months ago
CLSA-2026-1779130424	expat: Fix of CVE-2026-45186 expat: Fix of CVE-2026-45186			3 months ago
CLSA-2026-1779130193	vim: Fix of CVE-2022-3520 vim: Fix of CVE-2022-3520			3 months ago
CLSA-2026-1779129979	Vulnerability in vim-X11 (CLSA-2026-1779129979) vulnerability in vim-X11 (CLSA-2026-1779129979). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:8.0.1763-16.el8.tuxcare.els1` or later.			3 months ago
CLSA-2026-1779129849	Vulnerability in httpd (CLSA-2026-1779129849) vulnerability in httpd (CLSA-2026-1779129849). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.6-99.0.5.el7_9.1.tuxcare.els11` or later.			3 months ago

Vulnerabilities

🍪 About cookies