Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-40836	SQL Injection in sqli (CVE-2026-40836) SQL injection in sqli (CVE-2026-40836). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	3 months ago
CVE-2026-40814	SQL Injection in sqli (CVE-2026-40814) SQL injection in sqli (CVE-2026-40814). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89	3 months ago
CVE-2026-40815	SQL Injection in sqli (CVE-2026-40815) SQL injection in sqli (CVE-2026-40815). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	3 months ago
CVE-2026-40816	SQL Injection in sqli (CVE-2026-40816) SQL injection in sqli (CVE-2026-40816). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89	3 months ago
CVE-2026-40817	SQL Injection in sqli (CVE-2026-40817) SQL injection in sqli (CVE-2026-40817). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	3 months ago
CVE-2026-40818	SQL Injection in sqli (CVE-2026-40818) SQL injection in sqli (CVE-2026-40818). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	3 months ago
CVE-2026-40819	SQL Injection in c (CVE-2026-40819) SQL injection in c (CVE-2026-40819). Confidential information can be exposed externally.	High	C SQL Injection Cwe 89	3 months ago
CVE-2026-6169	Code Injection in wordpress (CVE-2026-6169) code injection in wordpress (CVE-2026-6169). Successful exploitation can lead to full system takeover.	High	PHP WordPress Remote Code Execution Cwe 94	3 months ago
CVE-2026-8832	Code Injection in wordpress (CVE-2026-8832) code injection in wordpress (CVE-2026-8832). Successful exploitation can lead to full system takeover.	High	PHP WordPress Remote Code Execution Cwe 94	3 months ago
CVE-2026-8143	Cross-Site Scripting (XSS) in wordpress (CVE-2026-8143) cross-site scripting in wordpress (CVE-2026-8143). Risk of unauthorized operations or information disclosure.	High	WordPress Cross-Site Scripting Cwe 79	3 months ago
CVE-2023-52945	Vulnerability in synology (CVE-2023-52945) vulnerability in synology (CVE-2023-52945). Successful exploitation can lead to full system takeover.	High	Cwe 427 Synology Beedrive	3 months ago
CVE-2025-41670	Vulnerability in privilege-escalation (CVE-2025-41670) vulnerability in privilege-escalation (CVE-2025-41670). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 427	3 months ago
CVE-2025-41669	Vulnerability in CVE-2025-41669 (CVE-2025-41669) vulnerability in CVE-2025-41669 (CVE-2025-41669). Successful exploitation can lead to full system takeover.	High	Cwe 347	3 months ago
CVE-2026-3375	Cross-Site Scripting (XSS) in wordpress (CVE-2026-3375) cross-site scripting in wordpress (CVE-2026-3375). Risk of unauthorized operations or information disclosure.	High	JavaScript WordPress Cross-Site Scripting Cwe 79	3 months ago
CVE-2026-40812	SQL Injection in sqli (CVE-2026-40812) SQL injection in sqli (CVE-2026-40812). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	3 months ago
CVE-2026-40811	SQL Injection in sqli (CVE-2026-40811) SQL injection in sqli (CVE-2026-40811). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	3 months ago
CVE-2026-40810	SQL Injection in sqli (CVE-2026-40810) SQL injection in sqli (CVE-2026-40810). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	3 months ago
CVE-2026-40813	SQL Injection in sqli (CVE-2026-40813) SQL injection in sqli (CVE-2026-40813). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	3 months ago
CVE-2026-9200	Vulnerability in wordpress (CVE-2026-9200) vulnerability in wordpress (CVE-2026-9200). Successful exploitation can lead to full system takeover.	High	PHP WordPress Cwe 98	3 months ago
CVE-2026-8994	Authentication Bypass in wordpress (CVE-2026-8994) authentication bypass in wordpress (CVE-2026-8994). Successful exploitation can lead to full system takeover. Exploitable via ``wp_ajax_nopriv``.	High	WordPress Authentication Bypass Cwe 287	3 months ago
CVE-2026-8787	Privilege Escalation in wordpress (CVE-2026-8787) vulnerability in wordpress (CVE-2026-8787). Successful exploitation can lead to full system takeover. Exploitable via ``user_email``.	High	WordPress Privilege Escalation Cwe 269	3 months ago
CVE-2026-6268	Cross-Site Scripting (XSS) in wordpress (CVE-2026-6268) cross-site scripting in wordpress (CVE-2026-6268). Risk of unauthorized operations or information disclosure.	High	WordPress Cross-Site Scripting Cwe 79	3 months ago
CVE-2026-49000	Vulnerability in CVE-2026-49000 (CVE-2026-49000) vulnerability in CVE-2026-49000 (CVE-2026-49000). Confidential information can be exposed externally.	High	Cwe 310	3 months ago
CVE-2026-48959	Vulnerability in c (CVE-2026-48959) vulnerability in c (CVE-2026-48959). Risk of unauthorized operations or information disclosure.	High	C Cwe 407	3 months ago
CVE-2026-48961	Vulnerability in CVE-2026-48961 (CVE-2026-48961) vulnerability in CVE-2026-48961 (CVE-2026-48961). Risk of unauthorized operations or information disclosure.	High	Cwe 755	3 months ago
CVE-2026-48962	Code Injection in CVE-2026-48962 (CVE-2026-48962) code injection in CVE-2026-48962 (CVE-2026-48962). Risk of unauthorized operations or information disclosure.	High	Cwe 95 Cwe 94	3 months ago
CVE-2026-2253	Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0,... Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0,...	High	Cwe 611 Cross-Site Scripting Xml Hitachi +1	3 months ago
CVE-2026-49014	Vulnerability in gdal (CVE-2026-49014) vulnerability in gdal (CVE-2026-49014). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.13.1` or later.	High	C++ Cwe 121 Osgeo Gdal	3 months ago
CVE-2026-9207	Tanium addressed an unauthorized code execution vulnerability in Connect. Tanium addressed an unauthorized code execution vulnerability in Connect.	High	Cwe 78 Tanium Connect	3 months ago
CVE-2026-9628	Buffer Overflow in CVE-2026-9628 (CVE-2026-9628) vulnerability in CVE-2026-9628 (CVE-2026-9628). Successful exploitation can lead to full system takeover.	High	Cwe 119 Cwe 121	3 months ago
CVE-2026-9627	Buffer Overflow in CVE-2026-9627 (CVE-2026-9627) vulnerability in CVE-2026-9627 (CVE-2026-9627). Successful exploitation can lead to full system takeover.	High	Cwe 119 Cwe 120	3 months ago
CVE-2026-9631	Buffer Overflow in CVE-2026-9631 (CVE-2026-9631) vulnerability in CVE-2026-9631 (CVE-2026-9631). Successful exploitation can lead to full system takeover.	High	Cwe 119 Cwe 121	3 months ago
CVE-2026-9632	Buffer Overflow in CVE-2026-9632 (CVE-2026-9632) vulnerability in CVE-2026-9632 (CVE-2026-9632). Successful exploitation can lead to full system takeover.	High	Cwe 119 Cwe 121	3 months ago
CVE-2026-44741	SQL Injection in pimcore/admin-ui-classic-bundle (CVE-2026-44741) SQL injection in pimcore/admin-ui-classic-bundle (CVE-2026-44741). Successful exploitation can lead to full system takeover. Exploitable via `POST /admin/translation/translations`. Mitigation: upgrade to `1.7.18` or later.	High	SQL Injection Cwe 89	3 months ago
CVE-2026-44739	SQL Injection in pimcore/pimcore (CVE-2026-44739) SQL injection in pimcore/pimcore (CVE-2026-44739). Confidential information can be exposed externally. Exploitable via `POST /admin/bundle/customreports/custom-report/column-config`. Mitigation: upgrade to `12.3.6` or later.	High	PHP SQL Injection Cwe 89	3 months ago
CVE-2026-44705	Path Traversal in tmp (CVE-2026-44705) path traversal in tmp (CVE-2026-44705). Data can be tampered with by attackers. Exploitable via ``prefix``. Mitigation: upgrade to `0.2.6` or later.	High	JavaScript Path Traversal Cwe 22 Raszi +1	3 months ago
CVE-2026-9312	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-9312) SSRF in ssrf (CVE-2026-9312). Confidential information can be exposed externally.	High	Server-Side Request Forgery Path Traversal Cwe 918 Github +1	3 months ago
CVE-2026-9605	Buffer Overflow in c (CVE-2026-9605) vulnerability in c (CVE-2026-9605). Risk of unauthorized operations or information disclosure.	High	C Cwe 119 Cwe 122	3 months ago
CVE-2026-9606	Vulnerability in sqli (CVE-2026-9606) vulnerability in sqli (CVE-2026-9606). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-42462	Vulnerability in @fedify/fedify (CVE-2026-42462) vulnerability in @fedify/fedify (CVE-2026-42462). Data can be tampered with by attackers. Exploitable via ``Activity``. Mitigation: upgrade to `1.9.11` or later.	High	Cwe 180 Cwe 347 Cwe 436 Cwe 1289	3 months ago
CVE-2026-42089	Vulnerability in yeoman-environment (CVE-2026-42089) vulnerability in yeoman-environment (CVE-2026-42089). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.0.1` or later.	High	Cwe 829	3 months ago
CVE-2026-34986	Vulnerability in github.com/go-jose/go-jose/v3 (CVE-2026-34986) vulnerability in github.com/go-jose/go-jose/v3 (CVE-2026-34986). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.5` or later.	High	JavaScript Denial of Service Cwe 248 Cwe 131 +2	3 months ago
CVE-2026-5260	A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret... A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret...	High	Cwe 1284 TLS/SSL Remote Code Execution Cwe 126	3 months ago
CVE-2026-9584	A security vulnerability has been detected in code-projects Project Management System 1.0.... A security vulnerability has been detected in code-projects Project Management System 1.0....	High	PHP SQL Injection Cwe 74 Cwe 89 +2	3 months ago
CVE-2026-44905	Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verification pipeline of Vanetza.... Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verification pipeline of Vanetza. When processing incoming V2X messages, the ASN.1 decoder accepts the structure as syntactically val...	High	C C++ Cwe 248 Denial of Service +1	3 months ago
CVE-2026-42013	A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name ... A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name ...	High	Cwe 1284 Gnutls Authentication Bypass Cwe 295	3 months ago
CVE-2026-43988	Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When pro... Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When processing malformed network packets containing corrupted ASN.1/OER structures (e.g., invalid length fi...	High	C C++ Cwe 248 Denial of Service	3 months ago
CVE-2025-46284	Vulnerability in apple (CVE-2025-46284) vulnerability in apple (CVE-2025-46284). Successful exploitation can lead to full system takeover.	High	Cwe 362 Apple macOS	3 months ago
CVE-2026-42012	A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a... A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a...	High	Cwe 295 Spoofing Intercept Certificate +1	3 months ago
CVE-2025-43306	Privilege Escalation in apple (CVE-2025-43306) vulnerability in apple (CVE-2025-43306). Successful exploitation can lead to full system takeover.	High	Cwe 269 Apple macOS	3 months ago

Vulnerabilities

🍪 About cookies