Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-9587	Vulnerability in CVE-2026-9587 (CVE-2026-9587) vulnerability in CVE-2026-9587 (CVE-2026-9587). Risk of unauthorized operations or information disclosure.		Cwe 73	1 month ago
CVE-2026-9762	Code Injection in ibm (CVE-2026-9762) code injection in ibm (CVE-2026-9762). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 94 Ibm Db2	1 month ago
CVE-2025-59866	Vulnerability in privilege-escalation (CVE-2025-59866) vulnerability in privilege-escalation (CVE-2025-59866). Risk of unauthorized operations or information disclosure.	Low	Privilege Escalation Cwe 732	1 month ago
CVE-2026-9586	SQL Injection in sqli (CVE-2026-9586) SQL injection in sqli (CVE-2026-9586). Risk of unauthorized operations or information disclosure.		Remote Code Execution SQL Injection Cwe 89	1 month ago
CVE-2026-9588	Cross-Site Scripting (XSS) in CVE-2026-9588 (CVE-2026-9588) cross-site scripting in CVE-2026-9588 (CVE-2026-9588). Risk of unauthorized operations or information disclosure.		JavaScript Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-9585	Cross-Site Scripting (XSS) in CVE-2026-9585 (CVE-2026-9585) cross-site scripting in CVE-2026-9585 (CVE-2026-9585). Risk of unauthorized operations or information disclosure.		JavaScript Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-9202	Vulnerability in langflow (CVE-2026-9202) vulnerability in langflow (CVE-2026-9202). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 306 Langflow	1 month ago
CVE-2026-9198 KEV	[KEV] Code Injection in Ibm langflow (CVE-2026-9198) code injection in Ibm langflow (CVE-2026-9198). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Remote Code Execution Cwe 94 Langflow	1 month ago
CVE-2026-8297	SQL Injection in sqli (CVE-2026-8297) SQL injection in sqli (CVE-2026-8297). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	1 month ago
CVE-2026-63309	Authorization Flaw in CVE-2026-63309 (CVE-2026-63309) vulnerability in CVE-2026-63309 (CVE-2026-63309). Risk of unauthorized operations or information disclosure.	Medium	Cwe 863	1 month ago
CVE-2026-63308	Vulnerability in dos (CVE-2026-63308) vulnerability in dos (CVE-2026-63308). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 129 Helm	1 month ago
CVE-2026-63307	Vulnerability in CVE-2026-63307 (CVE-2026-63307) vulnerability in CVE-2026-63307 (CVE-2026-63307). Confidential information can be exposed externally. Exploitable via `GET /api/connection/datasource/{id}`.	Medium	Cwe 639	1 month ago
CVE-2026-21760	Vulnerability in hcltech (CVE-2026-21760) vulnerability in hcltech (CVE-2026-21760). Risk of unauthorized operations or information disclosure.	Medium	Cwe 425 Hcltech Devops Loop	1 month ago
CVE-2026-57860	Vulnerability in c (CVE-2026-57860) vulnerability in c (CVE-2026-57860). Successful exploitation can lead to full system takeover.	High	C Cwe 829	1 month ago
CVE-2026-16106	Vulnerability in redhat (CVE-2026-16106) vulnerability in redhat (CVE-2026-16106). Data can be tampered with by attackers.	Medium	Cwe 862 Redhat Build Of Keycloak	1 month ago
CVE-2026-63101	Vulnerability in CVE-2026-63101 (CVE-2026-63101) vulnerability in CVE-2026-63101 (CVE-2026-63101). Confidential information can be exposed externally.	High	Cwe 306	1 month ago
CVE-2026-21764	Vulnerability in hcltech (CVE-2026-21764) vulnerability in hcltech (CVE-2026-21764). Risk of unauthorized operations or information disclosure.	Low	Cwe 754 Hcltech Devops Loop	1 month ago
CVE-2026-21762	Vulnerability in hcltech (CVE-2026-21762) vulnerability in hcltech (CVE-2026-21762). Risk of unauthorized operations or information disclosure.	Low	Cross-Site Scripting Cwe 644 Hcltech Devops Loop	1 month ago
CVE-2026-21761	Vulnerability in hcltech (CVE-2026-21761) vulnerability in hcltech (CVE-2026-21761). Risk of unauthorized operations or information disclosure.	Medium	Cwe 942 Hcltech Devops Loop	1 month ago
CVE-2026-16093	Vulnerability in redhat (CVE-2026-16093) vulnerability in redhat (CVE-2026-16093). Risk of unauthorized operations or information disclosure.	Medium	Cwe 807 Redhat Build Of Keycloak Data Grid +2	1 month ago
CVE-2026-16108	Information Disclosure in redhat (CVE-2026-16108) vulnerability in redhat (CVE-2026-16108). Risk of unauthorized operations or information disclosure.	Medium	Cwe 200 Redhat Build Of Keycloak	1 month ago
CVE-2026-12694	Vulnerability in CVE-2026-12694 (CVE-2026-12694) vulnerability in CVE-2026-12694 (CVE-2026-12694). Data can be tampered with by attackers.	Critical	Cwe 862	1 month ago
CVE-2026-16104	Vulnerability in redhat (CVE-2026-16104) vulnerability in redhat (CVE-2026-16104). Risk of unauthorized operations or information disclosure.	Medium	Cwe 522 Redhat Build Of Keycloak	1 month ago
CVE-2026-16103	Vulnerability in redhat (CVE-2026-16103) vulnerability in redhat (CVE-2026-16103). Risk of unauthorized operations or information disclosure.	Medium	Cwe 841 Redhat Build Of Keycloak	1 month ago
CVE-2026-63100	Vulnerability in CVE-2026-63100 (CVE-2026-63100) vulnerability in CVE-2026-63100 (CVE-2026-63100). Confidential information can be exposed externally.	Medium	Cwe 862	1 month ago
CVE-2026-12692	Vulnerability in CVE-2026-12692 (CVE-2026-12692) vulnerability in CVE-2026-12692 (CVE-2026-12692). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 620	1 month ago
CVE-2026-12691	Vulnerability in CVE-2026-12691 (CVE-2026-12691) vulnerability in CVE-2026-12691 (CVE-2026-12691). Confidential information can be exposed externally.	High	Authentication Bypass Cwe 306	1 month ago
CVE-2026-12693	Vulnerability in CVE-2026-12693 (CVE-2026-12693) vulnerability in CVE-2026-12693 (CVE-2026-12693). Confidential information can be exposed externally.	Critical	Cwe 639	1 month ago
CVE-2026-63099	Vulnerability in CVE-2026-63099 (CVE-2026-63099) vulnerability in CVE-2026-63099 (CVE-2026-63099). Confidential information can be exposed externally.	Medium	Cwe 639	1 month ago
CVE-2026-11763	Vulnerability in CVE-2026-11763 (CVE-2026-11763) vulnerability in CVE-2026-11763 (CVE-2026-11763). Confidential information can be exposed externally.	Medium	Cwe 639	1 month ago
CVE-2026-9537	Vulnerability in CVE-2026-9537 (CVE-2026-9537) vulnerability in CVE-2026-9537 (CVE-2026-9537). Risk of unauthorized operations or information disclosure.	Medium	Cwe 208	1 month ago
CVE-2026-14871	Authorization Flaw in CVE-2026-14871 (CVE-2026-14871) vulnerability in CVE-2026-14871 (CVE-2026-14871). Risk of unauthorized operations or information disclosure.		Cwe 863	1 month ago
CVE-2026-63096	SSRF (Server-Side Request Forgery) in CVE-2026-63096 (CVE-2026-63096) SSRF in CVE-2026-63096 (CVE-2026-63096). Risk of unauthorized operations or information disclosure.	Medium	Cwe 918	1 month ago
CVE-2026-60024	Vulnerability in CVE-2026-60024 (CVE-2026-60024) vulnerability in CVE-2026-60024 (CVE-2026-60024). Successful exploitation can lead to full system takeover.	Critical	Cwe 1188	1 month ago
CVE-2026-63095	Vulnerability in CVE-2026-63095 (CVE-2026-63095) vulnerability in CVE-2026-63095 (CVE-2026-63095). Data can be tampered with by attackers.	Medium	Cwe 639	1 month ago
CVE-2026-60025	Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-60025) vulnerability in csrf (CVE-2026-60025). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352	1 month ago
CVE-2026-15007	Vulnerability in c (CVE-2026-15007) vulnerability in c (CVE-2026-15007). Risk of unauthorized operations or information disclosure.		C Denial of Service Cwe 770	1 month ago
CVE-2026-63097	Authorization Flaw in CVE-2026-63097 (CVE-2026-63097) vulnerability in CVE-2026-63097 (CVE-2026-63097). Risk of unauthorized operations or information disclosure.	Medium	Cwe 863	1 month ago
CVE-2026-15343	Path Traversal in path-traversal (CVE-2026-15343) path traversal in path-traversal (CVE-2026-15343). Risk of unauthorized operations or information disclosure.		Path Traversal Cwe 22	1 month ago
CVE-2026-15783	Vulnerability in CVE-2026-15783 (CVE-2026-15783) vulnerability in CVE-2026-15783 (CVE-2026-15783). Risk of unauthorized operations or information disclosure.		Cwe 862	1 month ago
CVE-2026-58149	Information Disclosure in CVE-2026-58149 (CVE-2026-58149) vulnerability in CVE-2026-58149 (CVE-2026-58149). Risk of unauthorized operations or information disclosure.	Medium	Cwe 200	1 month ago
CVE-2026-12715	Vulnerability in CVE-2026-12715 (CVE-2026-12715) vulnerability in CVE-2026-12715 (CVE-2026-12715). Risk of unauthorized operations or information disclosure.		Cwe 862	1 month ago
CVE-2026-58148	The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability. The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability.		Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-14741	Vulnerability in dos (CVE-2026-14741) vulnerability in dos (CVE-2026-14741). Risk of unauthorized operations or information disclosure. Exploitable via ``Date``.	High	Denial of Service Cwe 1333	1 month ago
CVE-2026-63098	Vulnerability in strangebee (CVE-2026-63098) vulnerability in strangebee (CVE-2026-63098). Risk of unauthorized operations or information disclosure.	Medium	Cwe 306 Strangebee Thehive	1 month ago
CVE-2026-54247	Vulnerability in github.com/zalando/skipper (CVE-2026-54247) vulnerability in github.com/zalando/skipper (CVE-2026-54247). Risk of unauthorized operations or information disclosure. Exploitable via `POST /admission`. Mitigation: upgrade to `0.26.22` or later.			1 month ago
CVE-2026-63094	Vulnerability in CVE-2026-63094 (CVE-2026-63094) vulnerability in CVE-2026-63094 (CVE-2026-63094). Confidential information can be exposed externally.	High	Cwe 345 Cwe 601	1 month ago
CVE-2026-51083	Vulnerability in CVE-2026-51083 (CVE-2026-51083) vulnerability in CVE-2026-51083 (CVE-2026-51083). Confidential information can be exposed externally.	Medium	Cwe 284	1 month ago
CVE-2026-63093	Vulnerability in anysphere (CVE-2026-63093) vulnerability in anysphere (CVE-2026-63093). Successful exploitation can lead to full system takeover.	High	Cwe 426 Anysphere Cursor Microsoft +1	1 month ago
CVE-2026-51081	Cross-Site Scripting (XSS) in CVE-2026-51081 (CVE-2026-51081) cross-site scripting in CVE-2026-51081 (CVE-2026-51081). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79	1 month ago

Vulnerabilities

🍪 About cookies