Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
ID Title
CVE-2026-36425 Privilege Escalation in CVE-2026-36425 (CVE-2026-36425)
vulnerability in CVE-2026-36425 (CVE-2026-36425). Confidential information can be exposed externally.
CVE-2026-38158 SQL Injection in sqli (CVE-2026-38158)
SQL injection in sqli (CVE-2026-38158). Successful exploitation can lead to full system takeover.
CVE-2024-32385 Information Disclosure in CVE-2024-32385 (CVE-2024-32385)
vulnerability in CVE-2024-32385 (CVE-2024-32385). Risk of unauthorized operations or information disclosure.
CVE-2024-32389 Vulnerability in CVE-2024-32389 (CVE-2024-32389)
vulnerability in CVE-2024-32389 (CVE-2024-32389). Risk of unauthorized operations or information disclosure.
GHSA-x8mg-6r4p-87pf Information Disclosure in com.arcadedb:arcadedb-server (GHSA-x8mg-6r4p-87pf)
vulnerability in com.arcadedb:arcadedb-server (GHSA-x8mg-6r4p-87pf). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/batch/b`. Mitigation: upgrade to `26.7.2` or later.
GHSA-vwjc-v7x7-cm6g Vulnerability in com.arcadedb:arcadedb-engine (GHSA-vwjc-v7x7-cm6g)
vulnerability in com.arcadedb:arcadedb-engine (GHSA-vwjc-v7x7-cm6g). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/command/`. Mitigation: upgrade to `26.7.2` or later.
CVE-2026-63397 Vulnerability in @genql/cli (CVE-2026-63397)
vulnerability in @genql/cli (CVE-2026-63397). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.3.4` or later.
CVE-2026-63089 Vulnerability in CVE-2026-63089 (CVE-2026-63089)
vulnerability in CVE-2026-63089 (CVE-2026-63089). Confidential information can be exposed externally.
CVE-2026-62994 Vulnerability in corednsio (CVE-2026-62994)
vulnerability in corednsio (CVE-2026-62994). Risk of unauthorized operations or information disclosure.
CVE-2026-62963 Vulnerability in CVE-2026-62963 (CVE-2026-62963)
vulnerability in CVE-2026-62963 (CVE-2026-62963). Risk of unauthorized operations or information disclosure.
CVE-2026-62309 Vulnerability in corednsio (CVE-2026-62309)
vulnerability in corednsio (CVE-2026-62309). Risk of unauthorized operations or information disclosure.
CVE-2026-62299 Vulnerability in corednsio (CVE-2026-62299)
vulnerability in corednsio (CVE-2026-62299). Risk of unauthorized operations or information disclosure.
CVE-2026-62290 Authorization Flaw in linuxfoundation (CVE-2026-62290)
vulnerability in linuxfoundation (CVE-2026-62290). Confidential information can be exposed externally. Exploitable via `X-API-Key header`.
CVE-2026-61718 Vulnerability in CVE-2026-61718 (CVE-2026-61718)
vulnerability in CVE-2026-61718 (CVE-2026-61718). Risk of unauthorized operations or information disclosure. Exploitable via `POST /cache/delete`.
CVE-2026-61389 Out-of-Bounds Write in privilege-escalation (CVE-2026-61389)
out-of-bounds write in privilege-escalation (CVE-2026-61389). Successful exploitation can lead to full system takeover.
CVE-2026-60140 Out-of-Bounds Read in CVE-2026-60140 (CVE-2026-60140)
vulnerability in CVE-2026-60140 (CVE-2026-60140). Risk of unauthorized operations or information disclosure.
CVE-2026-60063 Out-of-Bounds Write in privilege-escalation (CVE-2026-60063)
out-of-bounds write in privilege-escalation (CVE-2026-60063). Successful exploitation can lead to full system takeover.
CVE-2026-55629 Path Traversal in whistle (CVE-2026-55629)
path traversal in whistle (CVE-2026-55629). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.10.3` or later.
CVE-2026-54728 Vulnerability in CVE-2026-54728 (CVE-2026-54728)
vulnerability in CVE-2026-54728 (CVE-2026-54728). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
CVE-2026-15449 Vulnerability in c (CVE-2026-15449)
vulnerability in c (CVE-2026-15449). Risk of unauthorized operations or information disclosure.
CVE-2026-15422 Vulnerability in CVE-2026-15422 (CVE-2026-15422)
vulnerability in CVE-2026-15422 (CVE-2026-15422). Risk of unauthorized operations or information disclosure.
GHSA-x9f9-r4m8-9xc2 OS Command Injection in com.arcadedb:arcadedb-engine (GHSA-x9f9-r4m8-9xc2)
OS command injection in com.arcadedb:arcadedb-engine (GHSA-x9f9-r4m8-9xc2). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.7.2` or later.
GHSA-48qw-824m-86pr Privilege Escalation in com.arcadedb:arcadedb-server (GHSA-48qw-824m-86pr)
vulnerability in com.arcadedb:arcadedb-server (GHSA-48qw-824m-86pr). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/command/{database}`. Mitigation: upgrade to `26.7.1` or later.
CVE-2026-55579 Vulnerability in pheditor/pheditor (CVE-2026-55579)
vulnerability in pheditor/pheditor (CVE-2026-55579). Successful exploitation can lead to full system takeover. Exploitable via ``admin``. Mitigation: upgrade to `2.0.6` or later.
CVE-2026-55578 OS Command Injection in pheditor/pheditor (CVE-2026-55578)
OS command injection in pheditor/pheditor (CVE-2026-55578). Successful exploitation can lead to full system takeover. Exploitable via ``terminal``. Mitigation: upgrade to `2.0.6` or later.
CVE-2026-52724 Vulnerability in github.com/kumahq/kuma/v2 (CVE-2026-52724)
vulnerability in github.com/kumahq/kuma/v2 (CVE-2026-52724). Risk of unauthorized operations or information disclosure. Exploitable via ``KUMA_CONTROL_PLANE_CA_CERT``. Mitigation: upgrade to `2.13.7` or later.
CVE-2026-54076 Vulnerability in com.arcadedb:arcadedb-engine (CVE-2026-54076)
vulnerability in com.arcadedb:arcadedb-engine (CVE-2026-54076). Risk of unauthorized operations or information disclosure. Exploitable via ``UPDATE_SCHEMA``. Mitigation: upgrade to `26.6.1` or later.
CVE-2026-54077 Path Traversal in com.arcadedb:arcadedb-engine (CVE-2026-54077)
path traversal in com.arcadedb:arcadedb-engine (CVE-2026-54077). Risk of unauthorized operations or information disclosure. Exploitable via ``root``. Mitigation: upgrade to `26.6.1` or later.
CVE-2026-54542 Out-of-Bounds Read in nimiq-primitives (CVE-2026-54542)
vulnerability in nimiq-primitives (CVE-2026-54542). Risk of unauthorized operations or information disclosure. Exploitable via ``TrieChunk``. Mitigation: upgrade to `1.6.0` or later.
CVE-2026-54541 Vulnerability in nimiq-primitives (CVE-2026-54541)
vulnerability in nimiq-primitives (CVE-2026-54541). Risk of unauthorized operations or information disclosure. Exploitable via ``TrieChunk``. Mitigation: upgrade to `1.6.0` or later.
CVE-2026-54540 OS Command Injection in pheditor/pheditor (CVE-2026-54540)
OS command injection in pheditor/pheditor (CVE-2026-54540). Successful exploitation can lead to full system takeover. Exploitable via ``TERMINAL_COMMANDS``. Mitigation: upgrade to `2.0.5` or later.
CVE-2026-52832 Path Traversal in github.com/nuclio/nuclio (CVE-2026-52832)
path traversal in github.com/nuclio/nuclio (CVE-2026-52832). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/functions`. Mitigation: upgrade to `1.16.5` or later.
CVE-2026-52833 Code Injection in github.com/nuclio/nuclio (CVE-2026-52833)
code injection in github.com/nuclio/nuclio (CVE-2026-52833). Risk of unauthorized operations or information disclosure. Exploitable via ``build.gradle``. Mitigation: upgrade to `1.16.5` or later.
CVE-2026-53714 Vulnerability in github.com/envoyproxy/gateway (CVE-2026-53714)
vulnerability in github.com/envoyproxy/gateway (CVE-2026-53714). Risk of unauthorized operations or information disclosure. Exploitable via ``StreamInterceptor``. Mitigation: upgrade to `1.7.4` or later.
GHSA-ggxf-9f6j-w742 Use-After-Free in diesel (GHSA-ggxf-9f6j-w742)
vulnerability in diesel (GHSA-ggxf-9f6j-w742). Risk of unauthorized operations or information disclosure. Exploitable via ``SqliteConnection``. Mitigation: upgrade to `2.3.10` or later.
CVE-2026-53713 Vulnerability in github.com/envoyproxy/gateway (CVE-2026-53713)
vulnerability in github.com/envoyproxy/gateway (CVE-2026-53713). Risk of unauthorized operations or information disclosure. Exploitable via ``to_absolute_normalized_path``. Mitigation: upgrade to `1.7.4` or later.
CVE-2026-53715 Vulnerability in github.com/envoyproxy/gateway (CVE-2026-53715)
vulnerability in github.com/envoyproxy/gateway (CVE-2026-53715). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.4` or later.
CVE-2026-53717 Vulnerability in github.com/envoyproxy/gateway (CVE-2026-53717)
vulnerability in github.com/envoyproxy/gateway (CVE-2026-53717). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.4` or later.
CVE-2026-53719 Vulnerability in github.com/envoyproxy/gateway (CVE-2026-53719)
vulnerability in github.com/envoyproxy/gateway (CVE-2026-53719). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.4` or later.
CVE-2026-53716 Vulnerability in github.com/envoyproxy/gateway (CVE-2026-53716)
vulnerability in github.com/envoyproxy/gateway (CVE-2026-53716). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.4` or later.
CVE-2026-54526 Vulnerability in github.com/argoproj/argo-workflows/v4 (CVE-2026-54526)
vulnerability in github.com/argoproj/argo-workflows/v4 (CVE-2026-54526). Successful exploitation can lead to full system takeover. Exploitable via ``hostNetwork``. Mitigation: upgrade to `4.0.6` or later.
CVE-2026-53536 Vulnerability in CVE-2026-53536 (CVE-2026-53536)
vulnerability in CVE-2026-53536 (CVE-2026-53536). Risk of unauthorized operations or information disclosure.
CVE-2026-53535 Path Traversal in dos (CVE-2026-53535)
path traversal in dos (CVE-2026-53535). Risk of unauthorized operations or information disclosure.
CVE-2026-47089 Vulnerability in CVE-2026-47089 (CVE-2026-47089)
vulnerability in CVE-2026-47089 (CVE-2026-47089). Risk of unauthorized operations or information disclosure.
CVE-2026-47088 Vulnerability in CVE-2026-47088 (CVE-2026-47088)
vulnerability in CVE-2026-47088 (CVE-2026-47088). Risk of unauthorized operations or information disclosure.
CVE-2026-47087 Vulnerability in CVE-2026-47087 (CVE-2026-47087)
vulnerability in CVE-2026-47087 (CVE-2026-47087). Risk of unauthorized operations or information disclosure.
CVE-2026-47086 Authorization Flaw in CVE-2026-47086 (CVE-2026-47086)
vulnerability in CVE-2026-47086 (CVE-2026-47086). Risk of unauthorized operations or information disclosure.
CVE-2026-47085 Vulnerability in CVE-2026-47085 (CVE-2026-47085)
vulnerability in CVE-2026-47085 (CVE-2026-47085). Risk of unauthorized operations or information disclosure.
CVE-2026-47084 Authorization Flaw in CVE-2026-47084 (CVE-2026-47084)
vulnerability in CVE-2026-47084 (CVE-2026-47084). Data can be tampered with by attackers.
CVE-2026-47083 Vulnerability in CVE-2026-47083 (CVE-2026-47083)
vulnerability in CVE-2026-47083 (CVE-2026-47083). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →