Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-64633	A vulnerability allowing remote unauthenticated code execution on the agent host. A vulnerability allowing remote unauthenticated code execution on the agent host.		Cwe 94	4 weeks ago
CVE-2026-63456	Authentication Bypass in CVE-2026-63456 (CVE-2026-63456) authentication bypass in CVE-2026-63456 (CVE-2026-63456). Successful exploitation can lead to full system takeover.	Critical	Cwe 287	4 weeks ago
CVE-2026-64631	A vulnerability allowing a low-privileged user to inject SQL and extract database contents. A vulnerability allowing a low-privileged user to inject SQL and extract database contents.		Cwe 89	4 weeks ago
CVE-2026-58074	A vulnerability allowing a high-privileged user to execute arbitrary code on the server. A vulnerability allowing a high-privileged user to execute arbitrary code on the server.		Cwe 94	4 weeks ago
CVE-2026-58075	Authentication Bypass in CVE-2026-58075 (CVE-2026-58075) authentication bypass in CVE-2026-58075 (CVE-2026-58075). Risk of unauthorized operations or information disclosure.		Cwe 287	4 weeks ago
CVE-2026-63455	Vulnerability in CVE-2026-63455 (CVE-2026-63455) vulnerability in CVE-2026-63455 (CVE-2026-63455). Successful exploitation can lead to full system takeover.	Critical	Cwe 306	4 weeks ago
CVE-2026-64630	Authorization Flaw in CVE-2026-64630 (CVE-2026-64630) vulnerability in CVE-2026-64630 (CVE-2026-64630). Risk of unauthorized operations or information disclosure.		Cwe 863	4 weeks ago
CVE-2026-58073	Vulnerability in CVE-2026-58073 (CVE-2026-58073) vulnerability in CVE-2026-58073 (CVE-2026-58073). Risk of unauthorized operations or information disclosure.		Cwe 288	4 weeks ago
CVE-2026-58071	Vulnerability in CVE-2026-58071 (CVE-2026-58071) vulnerability in CVE-2026-58071 (CVE-2026-58071). Risk of unauthorized operations or information disclosure.		Cwe 306	4 weeks ago
CVE-2026-58072	Path Traversal in CVE-2026-58072 (CVE-2026-58072) path traversal in CVE-2026-58072 (CVE-2026-58072). Risk of unauthorized operations or information disclosure.		Cwe 22	4 weeks ago
CVE-2026-18784	Buffer Overflow in c (CVE-2026-18784) vulnerability in c (CVE-2026-18784). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 119 Cwe 122	4 weeks ago
CVE-2026-15314	Vulnerability in tp-link (CVE-2026-15314) vulnerability in tp-link (CVE-2026-15314). Risk of unauthorized operations or information disclosure.	High	Cwe 120 Tp Link Tapo P110 Firmware Tapo P110	4 weeks ago
CVE-2026-15337	Vulnerability in django (CVE-2026-15337) vulnerability in django (CVE-2026-15337). Risk of unauthorized operations or information disclosure. Exploitable via ``DATA_UPLOAD_MAX_MEMORY_SIZE``.	Medium	Django Cwe 789 Djangoproject	4 weeks ago
CVE-2025-29296	Command Injection in CVE-2025-29296 (CVE-2025-29296) command injection in CVE-2025-29296 (CVE-2025-29296). Successful exploitation can lead to full system takeover.	Critical	Cwe 77	4 weeks ago
CVE-2026-58067	Vulnerability in CVE-2026-58067 (CVE-2026-58067) vulnerability in CVE-2026-58067 (CVE-2026-58067). Risk of unauthorized operations or information disclosure.		Cwe 789	4 weeks ago
CVE-2026-56848	Use-After-Free in CVE-2026-56848 (CVE-2026-56848) vulnerability in CVE-2026-56848 (CVE-2026-56848). Risk of unauthorized operations or information disclosure.	High	JavaScript Cwe 416	4 weeks ago
CVE-2026-15920	Vulnerability in django (CVE-2026-15920) vulnerability in django (CVE-2026-15920). Risk of unauthorized operations or information disclosure. Exploitable via ``URLField``.	Medium	Django Cross-Site Scripting Insecure Deserialization Cwe 83 +1	4 weeks ago
CVE-2026-18787	Vulnerability in CVE-2026-18787 (CVE-2026-18787) vulnerability in CVE-2026-18787 (CVE-2026-18787). Successful exploitation can lead to full system takeover.	High	Cwe 74 Cwe 77	4 weeks ago
CVE-2026-15307	Vulnerability in django (CVE-2026-15307) vulnerability in django (CVE-2026-15307). Successful exploitation can lead to full system takeover. Exploitable via ``django.contrib.gis.gdal.GDALRaster``.	High	Django Remote Code Execution Cwe 73 Cwe 918 +1	4 weeks ago
CVE-2026-18775	SSRF (Server-Side Request Forgery) in CVE-2026-18775 (CVE-2026-18775) SSRF in CVE-2026-18775 (CVE-2026-18775). Risk of unauthorized operations or information disclosure.	Medium	Cwe 918	4 weeks ago
CVE-2026-15830	Vulnerability in django (CVE-2026-15830) vulnerability in django (CVE-2026-15830). Risk of unauthorized operations or information disclosure. Exploitable via ``django.contrib.gis.geos.GEOSGeometry``.	Medium	Django Cwe 674 Djangoproject	4 weeks ago
CVE-2026-18774	SSRF (Server-Side Request Forgery) in CVE-2026-18774 (CVE-2026-18774) SSRF in CVE-2026-18774 (CVE-2026-18774). Risk of unauthorized operations or information disclosure.	Medium	Cwe 918	4 weeks ago
CVE-2026-18785	Buffer Overflow in c (CVE-2026-18785) vulnerability in c (CVE-2026-18785). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 119 Cwe 416	4 weeks ago
CVE-2026-18830	Vulnerability in Amazon aws (CVE-2026-18830) vulnerability in Amazon aws (CVE-2026-18830). Confidential information can be exposed externally.	High	AWS Amazon Cloud Cwe 1287	4 weeks ago
CVE-2026-70474	Authorization Flaw in flowise (CVE-2026-70474) vulnerability in flowise (CVE-2026-70474). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/oauth2-credential/authorize/`. Mitigation: upgrade to `3.1.3` or later.		Cwe 863	4 weeks ago
GHSA-rwrp-9823-p2xq	Information Disclosure in flowise (GHSA-rwrp-9823-p2xq) vulnerability in flowise (GHSA-rwrp-9823-p2xq). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/credentials/`. Mitigation: upgrade to `3.1.3` or later.			4 weeks ago
CVE-2026-70473	Information Disclosure in flowise (CVE-2026-70473) vulnerability in flowise (CVE-2026-70473). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/upsert-history`. Mitigation: upgrade to `3.1.3` or later.		Cwe 200 Cwe 202 Cwe 862	4 weeks ago
CVE-2026-70472	Vulnerability in flowise (CVE-2026-70472) vulnerability in flowise (CVE-2026-70472). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/openai-assistants-vector-store`. Mitigation: upgrade to `3.1.3` or later.		Cwe 285 Cwe 863	4 weeks ago
CVE-2026-69264	Code Injection in flowise (CVE-2026-69264) code injection in flowise (CVE-2026-69264). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/prediction/`. Mitigation: upgrade to `3.1.3` or later.		JavaScript Python Remote Code Execution Cwe 94 +1	4 weeks ago
GHSA-88pr-878c-24wf	Path Traversal in flowise-components (GHSA-88pr-878c-24wf) path traversal in flowise-components (GHSA-88pr-878c-24wf). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/document-store/loader/preview`. Mitigation: upgrade to `3.1.3` or later.			4 weeks ago
CVE-2026-70471	Authorization Flaw in flowise (CVE-2026-70471) vulnerability in flowise (CVE-2026-70471). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.3` or later.		Cwe 863	4 weeks ago
CVE-2026-70470	Vulnerability in flowise (CVE-2026-70470) vulnerability in flowise (CVE-2026-70470). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/prediction/{chatflowId}`. Mitigation: upgrade to `3.1.3` or later.		JavaScript Python Cwe 184	4 weeks ago
CVE-2026-69263	Vulnerability in flowise (CVE-2026-69263) vulnerability in flowise (CVE-2026-69263). Risk of unauthorized operations or information disclosure. Exploitable via ``npx``. Mitigation: upgrade to `3.1.3` or later.		Cwe 184	4 weeks ago
CVE-2026-69262	Authorization Flaw in flowise (CVE-2026-69262) vulnerability in flowise (CVE-2026-69262). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /api/v1/chatflows/`. Mitigation: upgrade to `3.1.3` or later.		Cwe 863	4 weeks ago
CVE-2026-69110	Path Traversal in CVE-2026-69110 (CVE-2026-69110) path traversal in CVE-2026-69110 (CVE-2026-69110). Confidential information can be exposed externally. Exploitable via `GET /api/tmp/`.	Critical	Cwe 22	4 weeks ago
CVE-2026-69100	Code Injection in CVE-2026-69100 (CVE-2026-69100) code injection in CVE-2026-69100 (CVE-2026-69100). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 94	4 weeks ago
CVE-2026-69098	Unsafe Deserialization in c (CVE-2026-69098) vulnerability in c (CVE-2026-69098). Successful exploitation can lead to full system takeover.	Critical	Python C Remote Code Execution Insecure Deserialization +1	4 weeks ago
CVE-2026-25292	Vulnerability in qualcomm (CVE-2026-25292) vulnerability in qualcomm (CVE-2026-25292). Successful exploitation can lead to full system takeover.	High	Cwe 1286 Qualcomm Sm6225P Firmware Sm6225P +414	4 weeks ago
CVE-2026-25289	Vulnerability in qualcomm (CVE-2026-25289) vulnerability in qualcomm (CVE-2026-25289). Successful exploitation can lead to full system takeover.	Critical	Cwe 121 Qualcomm Sm7550P Firmware Sm7550P +396	4 weeks ago
CVE-2026-25288	Vulnerability in dos (CVE-2026-25288) vulnerability in dos (CVE-2026-25288). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 126 Qualcomm Orne Firmware +107	4 weeks ago
CVE-2026-24084	Vulnerability in qualcomm (CVE-2026-24084) vulnerability in qualcomm (CVE-2026-24084). Confidential information can be exposed externally.	High	Cwe 1294 Qualcomm Sdx57M Firmware Sdx57M +242	4 weeks ago
CVE-2026-24083	Memory Corruption while processing IOCTL device driver requests with invalid arguments. Memory Corruption while processing IOCTL device driver requests with invalid arguments.	High	Cwe 822 Qualcomm Qam8295P Firmware Qam8295P +4	4 weeks ago
CVE-2026-24080	Memory Corruption when handling malformed request parameters in the fingerprint TA. Memory Corruption when handling malformed request parameters in the fingerprint TA.	High	Cwe 120 Qualcomm Qam8295P Firmware Qam8295P +70	4 weeks ago
CVE-2026-24079	Vulnerability in qualcomm (CVE-2026-24079) vulnerability in qualcomm (CVE-2026-24079). Confidential information can be exposed externally.	High	Cwe 306 Qualcomm Ar8035 Firmware Ar8035 +272	4 weeks ago
CVE-2026-24078	Vulnerability in qualcomm (CVE-2026-24078) vulnerability in qualcomm (CVE-2026-24078). Confidential information can be exposed externally.	Medium	Cwe 359 Qualcomm 5G Fixed Wireless Access Platform Firmware 5G Fixed Wireless Access Platform +280	4 weeks ago
CVE-2026-24077	Vulnerability in qualcomm (CVE-2026-24077) vulnerability in qualcomm (CVE-2026-24077). Confidential information can be exposed externally.	Medium	Cwe 191 Qualcomm Aqt1000 Firmware Aqt1000 +276	4 weeks ago
CVE-2026-24076	Memory Corruption when processing registry values with incorrect types using a direct query method. Memory Corruption when processing registry values with incorrect types using a direct query method.	Medium	Cwe 120 Qualcomm Aqt1000 Firmware Aqt1000 +102	4 weeks ago
CVE-2026-21366	Memory corruption while processing a packet with a size close to the maximum allowed value. Memory corruption while processing a packet with a size close to the maximum allowed value.	High	Cwe 190 Qualcomm Lemans Au Lgit Firmware Lemans Au Lgit +64	4 weeks ago
CVE-2026-18801	Vulnerability in sqli (CVE-2026-18801) vulnerability in sqli (CVE-2026-18801). Risk of unauthorized operations or information disclosure.		SQL Injection Cwe 20	4 weeks ago
CVE-2026-18773	Vulnerability in CVE-2026-18773 (CVE-2026-18773) vulnerability in CVE-2026-18773 (CVE-2026-18773). Risk of unauthorized operations or information disclosure.	Medium	Cwe 285 Cwe 863	4 weeks ago

Vulnerabilities

🍪 About cookies