Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2025-69872	Code Injection in CVE-2025-69872 (CVE-2025-69872) code injection in CVE-2025-69872 (CVE-2025-69872). Successful exploitation can lead to full system takeover.	Critical	Python Cwe 94 Cwe 502	4 months ago
CVE-2025-12059	Vulnerability in c (CVE-2025-12059) vulnerability in c (CVE-2025-12059). Successful exploitation can lead to full system takeover.	Critical	C Cwe 538	4 months ago
CVE-2025-8668	Cross-Site Scripting (XSS) in CVE-2025-8668 (CVE-2025-8668) cross-site scripting in CVE-2025-8668 (CVE-2025-8668). Data can be tampered with by attackers.	Critical	Cross-Site Scripting Cwe 79	4 months ago
CVE-2025-8025	Vulnerability in CVE-2025-8025 (CVE-2025-8025) vulnerability in CVE-2025-8025 (CVE-2025-8025). Successful exploitation can lead to full system takeover.	Critical	Cwe 284 Cwe 306	4 months ago
CVE-2025-11242	SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-11242) SSRF in ssrf (CVE-2025-11242). Successful exploitation can lead to full system takeover.	Critical	Server-Side Request Forgery Cwe 918	4 months ago
CVE-2025-6830	SQL Injection in sqli (CVE-2025-6830) SQL injection in sqli (CVE-2025-6830). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	4 months ago
CVE-2026-1615	Code Injection in CVE-2026-1615 (CVE-2026-1615) code injection in CVE-2026-1615 (CVE-2026-1615). Successful exploitation can lead to full system takeover.	Critical	JavaScript Remote Code Execution Cross-Site Scripting Cwe 94	5 months ago
CVE-2026-1709	Vulnerability in keylime (CVE-2026-1709) vulnerability in keylime (CVE-2026-1709). Data can be tampered with by attackers. Mitigation: upgrade to `7.12.0` or later.	Critical	Authentication Bypass Cwe 322 Redhat Enterprise Linux +8	5 months ago
CVE-2025-5329	SQL Injection in sqli (CVE-2025-5329) SQL injection in sqli (CVE-2025-5329). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	5 months ago
CVE-2025-5319	SQL Injection in sqli (CVE-2025-5319) SQL injection in sqli (CVE-2025-5319). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	5 months ago
CVE-2019-19006 KEV	[KEV] Authentication Bypass in Sangoma freepbx (CVE-2019-19006) authentication bypass in Sangoma freepbx (CVE-2019-19006). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Sangoma Freepbx Cwe 287	5 months ago
CVE-2026-22778	Vulnerability in vllm (CVE-2026-22778) vulnerability in vllm (CVE-2026-22778). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.14.1` or later.	Critical	Remote Code Execution Cwe 532 Cwe 209 vLLM	5 months ago
CVE-2025-69929	Vulnerability in n3uron (CVE-2025-69929) vulnerability in n3uron (CVE-2025-69929). Successful exploitation can lead to full system takeover.	Critical	Cwe 327 N3Uron Web User Interface	5 months ago
CVE-2020-37002	OS Command Injection in CVE-2020-37002 (CVE-2020-37002) OS command injection in CVE-2020-37002 (CVE-2020-37002). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 78	5 months ago
CVE-2025-61140	The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution. The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution.	Critical	JavaScript Cwe 1321 Cwe 502 Dchester +1	5 months ago
CVE-2026-24858 KEV	[KEV] Vulnerability in Fortinet multiple-products (CVE-2026-24858) vulnerability in Fortinet multiple-products (CVE-2026-24858). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Fortinet Multiple Products Cwe 288 Authentication Bypass +9	5 months ago
CVE-2026-22586	Vulnerability in salesforce (CVE-2026-22586) vulnerability in salesforce (CVE-2026-22586). Successful exploitation can lead to full system takeover.	Critical	Cwe 321 Salesforce Marketing Cloud Engagement	5 months ago
CVE-2025-52024	Vulnerability in aptsys (CVE-2025-52024) vulnerability in aptsys (CVE-2025-52024). Confidential information can be exposed externally.	Critical	Cwe 306 Cwe 425 Cwe 862 Aptsys +1	5 months ago
CVE-2025-52025	SQL Injection in sqli (CVE-2025-52025) SQL injection in sqli (CVE-2025-52025). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89 Aptsys Gemscms Backend	5 months ago
CVE-2025-4320	Vulnerability in CVE-2025-4320 (CVE-2025-4320) vulnerability in CVE-2025-4320 (CVE-2025-4320). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 305 Cwe 640	5 months ago
CVE-2025-4319	Vulnerability in CVE-2025-4319 (CVE-2025-4319) vulnerability in CVE-2025-4319 (CVE-2025-4319). Confidential information can be exposed externally.	Critical	Cwe 307 Cwe 640	5 months ago
CVE-2026-20912	Vulnerability in gitea (CVE-2026-20912) vulnerability in gitea (CVE-2026-20912). Confidential information can be exposed externally.	Critical	Cwe 284 Cwe 639 Cwe 283 Gitea	5 months ago
CVE-2026-20897	Vulnerability in gitea (CVE-2026-20897) vulnerability in gitea (CVE-2026-20897). Confidential information can be exposed externally.	Critical	Cwe 284 Cwe 639 Gitea	5 months ago
CVE-2026-20750	Vulnerability in gitea (CVE-2026-20750) vulnerability in gitea (CVE-2026-20750). Confidential information can be exposed externally.	Critical	Cwe 284 Gitea	5 months ago
CVE-2025-56590	OS Command Injection in apryse (CVE-2025-56590) OS command injection in apryse (CVE-2025-56590). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Apryse Html2Pdf	5 months ago
CVE-2025-55130	Vulnerability in nodejs (CVE-2025-55130) vulnerability in nodejs (CVE-2025-55130). Confidential information can be exposed externally.	Critical	JavaScript Cwe 289 Cwe 281 Nodejs	5 months ago
CVE-2025-56005	Unsafe Deserialization in dabeaz (CVE-2025-56005) vulnerability in dabeaz (CVE-2025-56005). Successful exploitation can lead to full system takeover. Exploitable via ``picklefile``.	Critical	Python Remote Code Execution Cwe 502 Dabeaz +1	5 months ago
CVE-2026-22797	Vulnerability in CVE-2026-22797 (CVE-2026-22797) vulnerability in CVE-2026-22797 (CVE-2026-22797). Confidential information can be exposed externally.	Critical	Cwe 290	5 months ago
CVE-2026-23883	Use-After-Free in dos (CVE-2026-23883) vulnerability in dos (CVE-2026-23883). Successful exploitation can lead to full system takeover. Exploitable via ``xf_Pointer_New``.	Critical	Denial of Service Cwe 416 Freerdp	5 months ago
CVE-2026-23884	Use-After-Free in dos (CVE-2026-23884) vulnerability in dos (CVE-2026-23884). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 416 Freerdp	5 months ago
CVE-2026-23533	Vulnerability in dos (CVE-2026-23533) vulnerability in dos (CVE-2026-23533). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 122 Freerdp	5 months ago
CVE-2026-23534	Vulnerability in dos (CVE-2026-23534) vulnerability in dos (CVE-2026-23534). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 122 Freerdp	5 months ago
CVE-2026-23532	Vulnerability in dos (CVE-2026-23532) vulnerability in dos (CVE-2026-23532). Successful exploitation can lead to full system takeover. Exploitable via ``gdi_SurfaceToSurface``.	Critical	Denial of Service Cwe 122 Freerdp	5 months ago
CVE-2026-23530	Vulnerability in dos (CVE-2026-23530) vulnerability in dos (CVE-2026-23530). Successful exploitation can lead to full system takeover. Exploitable via ``freerdp_bitmap_decompress_planar``.	Critical	Denial of Service Cwe 122 Freerdp	5 months ago
CVE-2026-23531	Vulnerability in dos (CVE-2026-23531) vulnerability in dos (CVE-2026-23531). Successful exploitation can lead to full system takeover. Exploitable via ``glyphData``.	Critical	Denial of Service Cwe 122 Freerdp	5 months ago
CVE-2025-62581	Delta Electronics DIAView has multiple vulnerabilities. Delta Electronics DIAView has multiple vulnerabilities.	Critical	Cwe 321 Deltaww Diaview	5 months ago
CVE-2025-62582	Delta Electronics DIAView has multiple vulnerabilities. Delta Electronics DIAView has multiple vulnerabilities.	Critical	Cwe 306 Deltaww Diaview	5 months ago
CVE-2026-22859	Out-of-Bounds Read in freerdp (CVE-2026-22859) vulnerability in freerdp (CVE-2026-22859). Confidential information can be exposed externally. Mitigation: upgrade to `3.20.1` or later.	Critical	Cwe 125 Cwe 129 Freerdp	5 months ago
CVE-2026-22855	Out-of-Bounds Read in freerdp (CVE-2026-22855) vulnerability in freerdp (CVE-2026-22855). Confidential information can be exposed externally. Mitigation: upgrade to `3.20.1` or later.	Critical	Cwe 125 Freerdp	5 months ago
CVE-2026-22858	Out-of-Bounds Read in c (CVE-2026-22858) vulnerability in c (CVE-2026-22858). Confidential information can be exposed externally. Mitigation: upgrade to `3.20.1` or later.	Critical	C Cwe 125 Cwe 758 Cwe 787 +1	5 months ago
CVE-2026-22853	Out-of-Bounds Write in freerdp (CVE-2026-22853) out-of-bounds write in freerdp (CVE-2026-22853). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.20.1` or later.	Critical	Cwe 787 Freerdp	5 months ago
CVE-2025-65783	Unrestricted File Upload in hubert (CVE-2025-65783) vulnerability in hubert (CVE-2025-65783). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Hubert Hub	5 months ago
CVE-2026-0881	Sandbox escape in the Messaging System component. This vulnerability affects Firefox < 147. Sandbox escape in the Messaging System component. This vulnerability affects Firefox < 147.	Critical	Cwe 284 Cwe 693 Mozilla Firefox +1	5 months ago
CVE-2026-0879	Buffer Overflow in mozilla (CVE-2026-0879) vulnerability in mozilla (CVE-2026-0879). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Mozilla Firefox Thunderbird	5 months ago
CVE-2025-29329	Vulnerability in sagemcom (CVE-2025-29329) vulnerability in sagemcom (CVE-2025-29329). Successful exploitation can lead to full system takeover.	Critical	Cwe 120 Sagemcom F At St 3686 Firmware F At St 3686	5 months ago
CVE-2025-63314	Vulnerability in ddsn (CVE-2025-63314) vulnerability in ddsn (CVE-2025-63314). Confidential information can be exposed externally.	Critical	Cwe 640 Ddsn Cm3 Acora Cms	5 months ago
CVE-2025-65552	Vulnerability in d3dsecurity (CVE-2025-65552) vulnerability in d3dsecurity (CVE-2025-65552). Successful exploitation can lead to full system takeover.	Critical	Cwe 294 D3Dsecurity Zx G12 Firmware Zx G12	5 months ago
CVE-2025-61686	Path Traversal in react (CVE-2025-61686) path traversal in react (CVE-2025-61686). Data can be tampered with by attackers.	Critical	React Cwe 22 Shopify React Routernode +2	5 months ago
CVE-2025-70974	Vulnerability in CVE-2025-70974 (CVE-2025-70974) vulnerability in CVE-2025-70974 (CVE-2025-70974). Successful exploitation can lead to full system takeover.	Critical	Java Cwe 829	6 months ago
CVE-2026-22189	Vulnerability in cmu (CVE-2026-22189) vulnerability in cmu (CVE-2026-22189). Successful exploitation can lead to full system takeover.	Critical	Cwe 121 Cwe 787 Cmu Panda3D	6 months ago

Vulnerabilities

🍪 About cookies