Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-57784	Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57784) vulnerability in csrf (CVE-2026-57784). Successful exploitation can lead to full system takeover.	Critical	Cross-Site Request Forgery Cwe 352	1 month ago
CVE-2026-59526	Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.	Critical	SQL Injection Cwe 89	1 month ago
CVE-2026-59543	Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions. Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions.	Critical	Remote Code Execution Cwe 94	1 month ago
CVE-2026-59525	Unauthenticated SQL Injection in Participants Database <= 2.7.8.3 versions. Unauthenticated SQL Injection in Participants Database <= 2.7.8.3 versions.	Critical	SQL Injection Cwe 89	1 month ago
CVE-2026-59544	Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions. Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions.	Critical	PHP Cwe 502	1 month ago
CVE-2026-59514	Unauthenticated SQL Injection in Buddyboss Platform <= 3.0.5 versions. Unauthenticated SQL Injection in Buddyboss Platform <= 3.0.5 versions.	Critical	SQL Injection Cwe 89	1 month ago
CVE-2026-27064	Editor Arbitrary File Upload in Mailster <= 4.1.17 versions. Editor Arbitrary File Upload in Mailster <= 4.1.17 versions.	Critical	Cwe 434	1 month ago
CVE-2026-65431	Path Traversal in CVE-2026-65431 (CVE-2026-65431) path traversal in CVE-2026-65431 (CVE-2026-65431). Successful exploitation can lead to full system takeover.	Critical	Cwe 22	1 month ago
CVE-2026-64873	Custom query URLs could access internal or reserved network services. Custom query URLs could access internal or reserved network services.	Critical	Server-Side Request Forgery Cwe 918	1 month ago
CVE-2026-64874	CDN credentials were exposed in administrator request URLs. CDN credentials were exposed in administrator request URLs.	Critical	Cwe 200	1 month ago
CVE-2026-14282	Unrestricted File Upload in wordpress (CVE-2026-14282) vulnerability in wordpress (CVE-2026-14282). Successful exploitation can lead to full system takeover.	Critical	WordPress Remote Code Execution Cwe 434	1 month ago
CVE-2026-15011	Code Injection in wordpress (CVE-2026-15011) code injection in wordpress (CVE-2026-15011). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Cwe 94	1 month ago
CVE-2026-15015	Vulnerability in wordpress (CVE-2026-15015) vulnerability in wordpress (CVE-2026-15015). Successful exploitation can lead to full system takeover.	Critical	WordPress Cwe 862	1 month ago
CVE-2026-16723	Vulnerability in com.alibaba:fastjson (CVE-2026-16723) vulnerability in com.alibaba:fastjson (CVE-2026-16723). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 20 Cwe 502	1 month ago
CVE-2026-60369	Privilege Escalation in c (CVE-2026-60369) vulnerability in c (CVE-2026-60369). Successful exploitation can lead to full system takeover.	Critical	Java C Cwe 269 Cwe 284 +3	1 month ago
CVE-2026-60372	Privilege Escalation in c (CVE-2026-60372) vulnerability in c (CVE-2026-60372). Successful exploitation can lead to full system takeover.	Critical	Java C Cwe 269 Cwe 284 +4	1 month ago
CVE-2026-60367	Privilege Escalation in c (CVE-2026-60367) vulnerability in c (CVE-2026-60367). Successful exploitation can lead to full system takeover.	Critical	Java C Cwe 269 Cwe 287 +4	1 month ago
CVE-2026-60366	Privilege Escalation in c (CVE-2026-60366) vulnerability in c (CVE-2026-60366). Successful exploitation can lead to full system takeover.	Critical	Java C Cwe 269 Cwe 284 +4	1 month ago
CVE-2026-10050	Vulnerability in org.eclipse.jetty:jetty-security (CVE-2026-10050) vulnerability in org.eclipse.jetty:jetty-security (CVE-2026-10050). Confidential information can be exposed externally. Mitigation: upgrade to `12.1.10` or later.	Critical	Cwe 173 Cwe 303 Eclipse Jetty	1 month ago
CVE-2026-56817	XXE (XML External Entity) in io.netty:netty-codec-xml (CVE-2026-56817) vulnerability in io.netty:netty-codec-xml (CVE-2026-56817). Successful exploitation can lead to full system takeover. Exploitable via ``XmlDecoder``. Mitigation: upgrade to `4.1.136.Final` or later.	Critical	Cwe 611 Netty	1 month ago
CVE-2026-64796	Vulnerability in CVE-2026-64796 (CVE-2026-64796) vulnerability in CVE-2026-64796 (CVE-2026-64796). Successful exploitation can lead to full system takeover.	Critical	PHP JavaScript Cwe 284	1 month ago
CVE-2026-64793	Vulnerability in CVE-2026-64793 (CVE-2026-64793) vulnerability in CVE-2026-64793 (CVE-2026-64793). Confidential information can be exposed externally.	Critical	Cwe 284	1 month ago
CVE-2026-64798	Vulnerability in CVE-2026-64798 (CVE-2026-64798) vulnerability in CVE-2026-64798 (CVE-2026-64798). Confidential information can be exposed externally.	Critical	Cwe 338	1 month ago
CVE-2025-50329	Vulnerability in CVE-2025-50329 (CVE-2025-50329) vulnerability in CVE-2025-50329 (CVE-2025-50329). Successful exploitation can lead to full system takeover.	Critical	Cwe 693	1 month ago
CVE-2026-16624	Vulnerability in CVE-2026-16624 (CVE-2026-16624) vulnerability in CVE-2026-16624 (CVE-2026-16624). Confidential information can be exposed externally.	Critical	Cwe 639	1 month ago
CVE-2026-46738	Vulnerability in dell (CVE-2026-46738) vulnerability in dell (CVE-2026-46738). Successful exploitation can lead to full system takeover.	Critical	Cwe 20 Dell Powerprotect Data Manager	1 month ago
CVE-2026-40712	Vulnerability in dell (CVE-2026-40712) vulnerability in dell (CVE-2026-40712). Successful exploitation can lead to full system takeover.	Critical	Cwe 20 Dell Powerprotect Data Manager	1 month ago
CVE-2026-16606	Code Injection in CVE-2026-16606 (CVE-2026-16606) code injection in CVE-2026-16606 (CVE-2026-16606). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 94	1 month ago
CVE-2026-2395	SQL Injection in sqli (CVE-2026-2395) SQL injection in sqli (CVE-2026-2395). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	1 month ago
CVE-2026-62144	Authentication Bypass in CVE-2026-62144 (CVE-2026-62144) authentication bypass in CVE-2026-62144 (CVE-2026-62144). Confidential information can be exposed externally.	Critical	Authentication Bypass Cwe 287	1 month ago
CVE-2026-50252	Vulnerability in nlnetlabs (CVE-2026-50252) vulnerability in nlnetlabs (CVE-2026-50252). Data can be tampered with by attackers.	Critical	Cwe 349 Nlnetlabs Unbound	1 month ago
CVE-2026-16232 KEV	[KEV] Authentication Bypass in Check point checkpoint (CVE-2026-16232) authentication bypass in Check point checkpoint (CVE-2026-16232). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Authentication Bypass Cwe 287 Checkpoint Multi Domain Security Management +1	1 month ago
CVE-2026-65590	OS Command Injection in @n8n/computer-use (CVE-2026-65590) OS command injection in @n8n/computer-use (CVE-2026-65590). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.29.8` or later.	Critical	Cwe 78 N8N	1 month ago
CVE-2026-16419	Out-of-Bounds Read in google (CVE-2026-16419) vulnerability in google (CVE-2026-16419). Successful exploitation can lead to full system takeover.	Critical	Cwe 125 Cwe 787 Google Chrome +1	1 month ago
CVE-2026-16424	Use-After-Free in google (CVE-2026-16424) vulnerability in google (CVE-2026-16424). Successful exploitation can lead to full system takeover.	Critical	Cwe 416 Google Chrome Android	1 month ago
CVE-2026-8984	Code Injection in autel (CVE-2026-8984) code injection in autel (CVE-2026-8984). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 94 Autel Maxicharger Single Charger Firmware +1	1 month ago
CVE-2026-8985	OS Command Injection in autel (CVE-2026-8985) OS command injection in autel (CVE-2026-8985). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Autel Maxicharger Single Charger Firmware Maxicharger Single Charger	1 month ago
CVE-2026-16416	Vulnerability in google (CVE-2026-16416) vulnerability in google (CVE-2026-16416). Successful exploitation can lead to full system takeover.	Critical	Cwe 190 Google Chrome	1 month ago
CVE-2026-8986	OS Command Injection in autel (CVE-2026-8986) OS command injection in autel (CVE-2026-8986). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Autel Maxicharger Single Charger Firmware Maxicharger Single Charger	1 month ago
CVE-2026-62549	Vulnerability in c (CVE-2026-62549) vulnerability in c (CVE-2026-62549). Confidential information can be exposed externally.	Critical	C Cwe 284 Oracle Human Resources Management System	1 month ago
CVE-2026-62546	Vulnerability in c (CVE-2026-62546) vulnerability in c (CVE-2026-62546). Successful exploitation can lead to full system takeover.	Critical	C Cwe 284 Oracle Applications Framework	1 month ago
CVE-2026-61245	Vulnerability in c (CVE-2026-61245) vulnerability in c (CVE-2026-61245). Successful exploitation can lead to full system takeover.	Critical	C Cwe 284 Cwe 306 Oracle +1	1 month ago
CVE-2026-61244	Vulnerability in c (CVE-2026-61244) vulnerability in c (CVE-2026-61244). Confidential information can be exposed externally.	Critical	C Cwe 284 Oracle Peoplesoft Enterprise Fin Manufacturing Argentina	1 month ago
CVE-2026-61235	Vulnerability in c (CVE-2026-61235) vulnerability in c (CVE-2026-61235). Successful exploitation can lead to full system takeover.	Critical	C Cwe 284 Oracle Peoplesoft Enterprise Hcm Global Payroll Switzerland	1 month ago
CVE-2026-61237	Privilege Escalation in c (CVE-2026-61237) vulnerability in c (CVE-2026-61237). Confidential information can be exposed externally.	Critical	C Denial of Service Cwe 269 Cwe 284 +2	1 month ago
CVE-2026-61238	Vulnerability in c (CVE-2026-61238) vulnerability in c (CVE-2026-61238). Confidential information can be exposed externally.	Critical	C Cwe 284 Oracle Peoplesoft Enterprise Fin Common Objects	1 month ago
CVE-2026-61242	Vulnerability in c (CVE-2026-61242) vulnerability in c (CVE-2026-61242). Successful exploitation can lead to full system takeover.	Critical	C Cwe 284 Oracle Peoplesoft Enterprise Fin Common Objects	1 month ago
CVE-2026-61239	Vulnerability in c (CVE-2026-61239) vulnerability in c (CVE-2026-61239). Data can be tampered with by attackers.	Critical	C Denial of Service Cwe 284 Cwe 306 +2	1 month ago
CVE-2026-61233	Information Disclosure in c (CVE-2026-61233) vulnerability in c (CVE-2026-61233). Successful exploitation can lead to full system takeover.	Critical	C Cwe 200 Cwe 284 Cwe 287 +3	1 month ago
CVE-2026-61211	Vulnerability in c (CVE-2026-61211) vulnerability in c (CVE-2026-61211). Successful exploitation can lead to full system takeover.	Critical	C Cwe 284 Oracle Database Server	1 month ago

Vulnerabilities

🍪 About cookies