Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-34621 KEV	[KEV] Vulnerability in Adobe acrobat-and-reader (CVE-2026-34621) vulnerability in Adobe acrobat-and-reader (CVE-2026-34621). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Adobe Acrobat And Reader Cwe 1321 Remote Code Execution +20	4 months ago
CVE-2012-1854 KEV	[KEV] Vulnerability in Microsoft visual-basic-for-applications-vba (CVE-2012-1854) vulnerability in Microsoft visual-basic-for-applications-vba (CVE-2012-1854). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Visual Basic For Applications Vba Cwe 426 Vba +7	4 months ago
CVE-2025-60710 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2025-60710) vulnerability in Microsoft windows (CVE-2025-60710). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 59 Privilege Escalation	4 months ago
CVE-2023-36424 KEV	[KEV] Out-of-Bounds Read in Microsoft windows (CVE-2023-36424) vulnerability in Microsoft windows (CVE-2023-36424). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 125 Buffer Overflow +5	4 months ago
CVE-2020-9715 KEV	[KEV] Use-After-Free in Adobe acrobat (CVE-2020-9715) vulnerability in Adobe acrobat (CVE-2020-9715). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Adobe Acrobat Cwe 416 Remote Code Execution +7	4 months ago
CVE-2026-21643 KEV	[KEV] SQL Injection in Fortinet forticlient-ems (CVE-2026-21643) SQL injection in Fortinet forticlient-ems (CVE-2026-21643). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Fortinet Forticlient Ems Cwe 89 Remote Code Execution +12	4 months ago
CVE-2023-21529 KEV	[KEV] Unsafe Deserialization in Microsoft exchange-server (CVE-2023-21529) vulnerability in Microsoft exchange-server (CVE-2023-21529). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Exchange Server Cwe 502 Remote Code Execution +6	4 months ago
CVE-2026-40393	Out-of-Bounds Write in mesa3d (CVE-2026-40393) out-of-bounds write in mesa3d (CVE-2026-40393). Successful exploitation can lead to full system takeover.	High	Cwe 787 Mesa3D Mesa	4 months ago
CVE-2019-25695	Out-of-Bounds Write in CVE-2019-25695 (CVE-2019-25695) out-of-bounds write in CVE-2019-25695 (CVE-2019-25695). Successful exploitation can lead to full system takeover.	High	Cwe 787	4 months ago
CVE-2026-31413	Out-of-Bounds Read in linux (CVE-2026-31413) vulnerability in linux (CVE-2026-31413). Successful exploitation can lead to full system takeover.	High	Cwe 125 Linux Linux Kernel	4 months ago
CVE-2026-32146	Improper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification Improper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification	High	Cwe 22 Lpil Gleam Remote Code Execution +1	4 months ago
CVE-2026-4153	Vulnerability in gimp (CVE-2026-4153) vulnerability in gimp (CVE-2026-4153). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 122 Cwe 787 Cwe 120 +1	4 months ago
CVE-2026-4154	Vulnerability in gimp (CVE-2026-4154) vulnerability in gimp (CVE-2026-4154). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 190 Gimp	4 months ago
CVE-2026-4152	Vulnerability in gimp (CVE-2026-4152) vulnerability in gimp (CVE-2026-4152). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 122 Cwe 787 Cwe 131 +1	4 months ago
CVE-2026-4150	Vulnerability in gimp (CVE-2026-4150) vulnerability in gimp (CVE-2026-4150). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 190 Gimp	4 months ago
CVE-2026-4151	Vulnerability in gimp (CVE-2026-4151) vulnerability in gimp (CVE-2026-4151). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 190 Gimp	4 months ago
CVE-2026-5483	Vulnerability in redhat (CVE-2026-5483) vulnerability in redhat (CVE-2026-5483). Successful exploitation can lead to full system takeover.	High	JavaScript Cwe 201 Redhat Openshift Ai	4 months ago
CVE-2026-34481	Vulnerability in apache (CVE-2026-34481) vulnerability in apache (CVE-2026-34481). Data can be tampered with by attackers.	High	Apache Cwe 116 Log4J Jvn +2	4 months ago
CVE-2026-29002	Vulnerability in privilege-escalation (CVE-2026-29002) vulnerability in privilege-escalation (CVE-2026-29002). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 639 Couchcms	4 months ago
CVE-2026-33092	Vulnerability in privilege-escalation (CVE-2026-33092) vulnerability in privilege-escalation (CVE-2026-33092). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 15	4 months ago
CVE-2026-39304	Vulnerability in activemq (CVE-2026-39304) vulnerability in activemq (CVE-2026-39304). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.19.4, 6.2.4` or later.	High	Apache Denial of Service Cwe 400 Cwe 770 +2	4 months ago
CVE-2021-47961	Vulnerability in synology (CVE-2021-47961) vulnerability in synology (CVE-2021-47961). Confidential information can be exposed externally.	High	Cwe 256 Synology Ssl Vpn Client	4 months ago
CVE-2026-22750	Vulnerability in vmware (CVE-2026-22750) vulnerability in vmware (CVE-2026-22750). Data can be tampered with by attackers.	High	Cwe 15 Vmware Spring Cloud Gateway	4 months ago
CVE-2026-28704	Vulnerability in jpcert (CVE-2026-28704) vulnerability in jpcert (CVE-2026-28704). Successful exploitation can lead to full system takeover.	High	Cwe 427 Jpcert Emocheck	4 months ago
CVE-2026-33788	Vulnerability in juniper (CVE-2026-33788) vulnerability in juniper (CVE-2026-33788). Successful exploitation can lead to full system takeover.	High	Cwe 306 Juniper Junos Jnp10K Lc1201 +5	4 months ago
CVE-2026-33771	Vulnerability in juniper (CVE-2026-33771) vulnerability in juniper (CVE-2026-33771). Confidential information can be exposed externally.	High	Cwe 521 Juniper Ctop Os Ctp Operating System	4 months ago
CVE-2025-13914	Vulnerability in juniper (CVE-2025-13914) vulnerability in juniper (CVE-2025-13914). Confidential information can be exposed externally.	High	Cwe 322 Juniper Apstra	4 months ago
CVE-2026-34486 KEV	[KEV] Vulnerability in Apache tomcat (CVE-2026-34486) vulnerability in Apache tomcat (CVE-2026-34486). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `9.0.117, 10.1.54, 11.0.21` or later.	High	Apache Tomcat Cwe 311 Cwe 807 +7	4 months ago
CVE-2026-34734	Use-After-Free in hdfgroup (CVE-2026-34734) vulnerability in hdfgroup (CVE-2026-34734). Successful exploitation can lead to full system takeover.	High	Cwe 416 Cwe 825 Hdfgroup Hdf5	4 months ago
CVE-2026-29146	Vulnerability in apache (CVE-2026-29146) vulnerability in apache (CVE-2026-29146). Confidential information can be exposed externally.	High	Apache Tomcat Cwe 209 Cwe 642 +1	4 months ago
CVE-2026-34971	Out-of-Bounds Read in bytecodealliance (CVE-2026-34971) vulnerability in bytecodealliance (CVE-2026-34971). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `36.0.7` or later.	High	Cwe 125 Cwe 787 Bytecodealliance Wasmtime	4 months ago
CVE-2026-1584	Vulnerability in dos (CVE-2026-1584) vulnerability in dos (CVE-2026-1584). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 476 Gnu Gnutls +2	4 months ago
CVE-2026-40072	SSRF (Server-Side Request Forgery) in web3 (CVE-2026-40072) SSRF in web3 (CVE-2026-40072). Risk of unauthorized operations or information disclosure. Exploitable via ``OffchainLookup``. Mitigation: upgrade to `8.0.0b2` or later.	High	Python Server-Side Request Forgery Cwe 918 Apeworx +1	4 months ago
CVE-2026-39981	Path Traversal in agixt (CVE-2026-39981) path traversal in agixt (CVE-2026-39981). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.9.2` or later.	High	Path Traversal Cwe 22 Agixt	4 months ago
CVE-2026-39983	Vulnerability in patrickjuchli (CVE-2026-39983) vulnerability in patrickjuchli (CVE-2026-39983). Data can be tampered with by attackers. Mitigation: upgrade to `5.2.1` or later.	High	JavaScript Cwe 93 Patrickjuchli Basic Ftp	4 months ago
CVE-2026-39911	Vulnerability in hedera (CVE-2026-39911) vulnerability in hedera (CVE-2026-39911). Successful exploitation can lead to full system takeover.	High	JavaScript Cwe 668 Hedera Guardian	4 months ago
CVE-2026-39976	Authentication Bypass in laravel (CVE-2026-39976) authentication bypass in laravel (CVE-2026-39976). Confidential information can be exposed externally. Mitigation: upgrade to `13.7.1` or later.	High	Laravel Authentication Bypass Cwe 287 Passport	4 months ago
CVE-2026-35204	Path Traversal in helm (CVE-2026-35204) path traversal in helm (CVE-2026-35204). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.4` or later.	High	Cwe 22 Helm	4 months ago
CVE-2026-35205	Vulnerability in helm (CVE-2026-35205) vulnerability in helm (CVE-2026-35205). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.1.4` or later.	High	Cwe 636 Cwe 347 Helm	4 months ago
CVE-2025-70364	Code Injection in CVE-2025-70364 (CVE-2025-70364) code injection in CVE-2025-70364 (CVE-2025-70364). Successful exploitation can lead to full system takeover.	High	PHP Cwe 94	4 months ago
CVE-2026-4116	Vulnerability in sonicwall (CVE-2026-4116) vulnerability in sonicwall (CVE-2026-4116). Successful exploitation can lead to full system takeover.	High	Cwe 176 Sonicwall Sma6210 Firmware Sma6210 +7	4 months ago
CVE-2026-4112	SQL Injection in sqli (CVE-2026-4112) SQL injection in sqli (CVE-2026-4112). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Sonicwall Sma6210 Firmware +8	4 months ago
CVE-2026-4113	Vulnerability in sonicwall (CVE-2026-4113) vulnerability in sonicwall (CVE-2026-4113). Successful exploitation can lead to full system takeover.	High	Cwe 204 Sonicwall Sma6210 Firmware Sma6210 +7	4 months ago
CVE-2026-4660	Information Disclosure in github.com/hashicorp/go-getter (CVE-2026-4660) vulnerability in github.com/hashicorp/go-getter (CVE-2026-4660). Confidential information can be exposed externally. Mitigation: upgrade to `1.8.6` or later.	High	Cwe 200 Cwe 22	4 months ago
CVE-2026-34185	SQL Injection in sqli (CVE-2026-34185) SQL injection in sqli (CVE-2026-34185). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Hydrosystempoznan Control System	4 months ago
CVE-2026-5837	Vulnerability in sqli (CVE-2026-5837) vulnerability in sqli (CVE-2026-5837). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	4 months ago
CVE-2026-5832	SSRF (Server-Side Request Forgery) in CVE-2026-5832 (CVE-2026-5832) SSRF in CVE-2026-5832 (CVE-2026-5832). Risk of unauthorized operations or information disclosure.	High	Cwe 918	4 months ago
CVE-2026-5828	Vulnerability in sqli (CVE-2026-5828) vulnerability in sqli (CVE-2026-5828). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	4 months ago
CVE-2026-5829	Vulnerability in sqli (CVE-2026-5829) vulnerability in sqli (CVE-2026-5829). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	4 months ago
CVE-2026-5830	Buffer Overflow in tenda (CVE-2026-5830) vulnerability in tenda (CVE-2026-5830). Successful exploitation can lead to full system takeover.	High	Cwe 119 Cwe 121 Tenda Ac15 Firmware +1	4 months ago

Vulnerabilities

🍪 About cookies