Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
ID Title
CVE-2026-33509 Privilege Escalation in pyload-ng (CVE-2026-33509)
vulnerability in pyload-ng (CVE-2026-33509). Successful exploitation can lead to full system takeover. Exploitable via ``SETTINGS``.
CVE-2026-28786 Vulnerability in open-webui (CVE-2026-28786)
vulnerability in open-webui (CVE-2026-28786). Risk of unauthorized operations or information disclosure. Exploitable via ``FileNotFoundError``. Mitigation: upgrade to `0.8.6` or later.
CVE-2026-28788 Vulnerability in open-webui (CVE-2026-28788)
vulnerability in open-webui (CVE-2026-28788). Data can be tampered with by attackers. Exploitable via `POST /api/v1/retrieval/process/files/batch`. Mitigation: upgrade to `0.8.6` or later.
CVE-2026-33545 SQL Injection in mobsf (CVE-2026-33545)
SQL injection in mobsf (CVE-2026-33545). Risk of unauthorized operations or information disclosure. Exploitable via ``sqlite_master``. Mitigation: upgrade to `4.4.6` or later.
CVE-2026-4506 Vulnerability in mindsql (CVE-2026-4506)
vulnerability in mindsql (CVE-2026-4506). Risk of unauthorized operations or information disclosure.
CVE-2026-4229 Vulnerability in vanna (CVE-2026-4229)
vulnerability in vanna (CVE-2026-4229). Risk of unauthorized operations or information disclosure.
CVE-2026-33139 Vulnerability in pyspector (CVE-2026-33139)
vulnerability in pyspector (CVE-2026-33139). Risk of unauthorized operations or information disclosure. Exploitable via ``plugin_system.py``. Mitigation: upgrade to `0.1.7` or later.
CVE-2026-33140 Cross-Site Scripting (XSS) in pyspector (CVE-2026-33140)
cross-site scripting in pyspector (CVE-2026-33140). Risk of unauthorized operations or information disclosure. Exploitable via ``XMLHttpRequest``. Mitigation: upgrade to `0.1.7` or later.
CVE-2026-33123 Vulnerability in pypdf (CVE-2026-33123)
vulnerability in pypdf (CVE-2026-33123). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.9.1` or later.
CVE-2026-33125 Vulnerability in frigate (CVE-2026-33125)
vulnerability in frigate (CVE-2026-33125). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /api/users/admin`.
CVE-2026-33155 Vulnerability in deepdiff (CVE-2026-33155)
vulnerability in deepdiff (CVE-2026-33155). Risk of unauthorized operations or information disclosure. Exploitable via ``_RestrictedUnpickler``. Mitigation: upgrade to `8.6.2` or later.
CVE-2026-31826 Vulnerability in pypdf (CVE-2026-31826)
vulnerability in pypdf (CVE-2026-31826). Risk of unauthorized operations or information disclosure. Exploitable via ``BytesIO``. Mitigation: upgrade to `6.8.0` or later.
CVE-2026-32116 Path Traversal in magic-wormhole (CVE-2026-32116)
path traversal in magic-wormhole (CVE-2026-32116). Risk of unauthorized operations or information disclosure. Exploitable via ``filename``. Mitigation: upgrade to `0.23.0` or later.
CVE-2026-32112 Cross-Site Scripting (XSS) in ha-mcp (CVE-2026-32112)
cross-site scripting in ha-mcp (CVE-2026-32112). Confidential information can be exposed externally. Exploitable via ``consent_form.py``. Mitigation: upgrade to `7.0.0` or later.
CVE-2026-32247 Vulnerability in graphiti-core (CVE-2026-32247)
vulnerability in graphiti-core (CVE-2026-32247). Confidential information can be exposed externally. Exploitable via ``SearchFilters.node_labels``. Mitigation: upgrade to `0.28.2` or later.
CVE-2026-32111 SSRF (Server-Side Request Forgery) in ha-mcp (CVE-2026-32111)
SSRF in ha-mcp (CVE-2026-32111). Risk of unauthorized operations or information disclosure. Exploitable via `POST /register`. Mitigation: upgrade to `7.0.0` or later.
CVE-2026-31815 Vulnerability in django-unicorn (CVE-2026-31815)
vulnerability in django-unicorn (CVE-2026-31815). Risk of unauthorized operations or information disclosure. Exploitable via ``_is_public``. Mitigation: upgrade to `0.67.0` or later.
CVE-2026-26118 SSRF (Server-Side Request Forgery) in msmcp-azure (CVE-2026-26118)
SSRF in msmcp-azure (CVE-2026-26118). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.0.0b17` or later.
CVE-2026-29787 Information Disclosure in mcp-memory-service (CVE-2026-29787)
vulnerability in mcp-memory-service (CVE-2026-29787). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/health/detailed`. Mitigation: upgrade to `10.21.0` or later.
CVE-2026-33010 Vulnerability in mcp-memory-service (CVE-2026-33010)
vulnerability in mcp-memory-service (CVE-2026-33010). Confidential information can be exposed externally. Exploitable via ``Origin``. Mitigation: upgrade to `10.25.1` or later.
CVE-2026-27826 SSRF (Server-Side Request Forgery) in mcp-atlassian (CVE-2026-27826)
SSRF in mcp-atlassian (CVE-2026-27826). Confidential information can be exposed externally. Exploitable via `GET /rest/api/2/myself`. Mitigation: upgrade to `0.17.0` or later.
CVE-2025-69219 Vulnerability in apache-airflow-providers-http (CVE-2025-69219)
vulnerability in apache-airflow-providers-http (CVE-2025-69219). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.0.0` or later.
CVE-2026-28804 Vulnerability in pypdf (CVE-2026-28804)
vulnerability in pypdf (CVE-2026-28804). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.7.5` or later.
CVE-2026-2256 Command Injection in ms-agent (CVE-2026-2256)
command injection in ms-agent (CVE-2026-2256). Risk of unauthorized operations or information disclosure.
CVE-2026-28795 Path Traversal in openchatbi (CVE-2026-28795)
path traversal in openchatbi (CVE-2026-28795). Risk of unauthorized operations or information disclosure. Exploitable via ``save_report``. Mitigation: upgrade to `0.2.2` or later.
CVE-2026-27905 Path Traversal in bentoml (CVE-2026-27905)
path traversal in bentoml (CVE-2026-27905). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.36` or later.
CVE-2026-27835 Vulnerability in wger (CVE-2026-27835)
vulnerability in wger (CVE-2026-27835). Risk of unauthorized operations or information disclosure. Exploitable via ``RepetitionsConfigViewSet``.
CVE-2026-27838 Vulnerability in wger (CVE-2026-27838)
vulnerability in wger (CVE-2026-27838). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v2/routine/{pk}/date-sequence-display/`.
CVE-2026-27839 Vulnerability in wger (CVE-2026-27839)
vulnerability in wger (CVE-2026-27839). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v2/nutritionplan/{pk}/nutritional_values/`.
CVE-2026-27695 Vulnerability in zae-limiter (CVE-2026-27695)
vulnerability in zae-limiter (CVE-2026-27695). Risk of unauthorized operations or information disclosure. Exploitable via ``TransactWriteItems``. Mitigation: upgrade to `0.10.1` or later.
CVE-2026-27888 Vulnerability in pypdf (CVE-2026-27888)
vulnerability in pypdf (CVE-2026-27888). Risk of unauthorized operations or information disclosure. Exploitable via ``xfa``. Mitigation: upgrade to `6.7.3` or later.
CVE-2026-28351 Vulnerability in pypdf (CVE-2026-28351)
vulnerability in pypdf (CVE-2026-28351). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.7.4` or later.
CVE-2026-27735 Path Traversal in mcp-server-git (CVE-2026-27735)
path traversal in mcp-server-git (CVE-2026-27735). Risk of unauthorized operations or information disclosure. Exploitable via ``git_add``. Mitigation: upgrade to `2026.1.14` or later.
CVE-2026-27794 Unsafe Deserialization in langgraph-checkpoint (CVE-2026-27794)
vulnerability in langgraph-checkpoint (CVE-2026-27794). Successful exploitation can lead to full system takeover. Exploitable via ``BaseCache``. Mitigation: upgrade to `4.0.0` or later.
CVE-2026-27932 Vulnerability in joserfc (CVE-2026-27932)
vulnerability in joserfc (CVE-2026-27932). Risk of unauthorized operations or information disclosure. Exploitable via ``p2c``. Mitigation: upgrade to `1.6.3` or later.
CVE-2026-27628 Vulnerability in pypdf (CVE-2026-27628)
vulnerability in pypdf (CVE-2026-27628). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.7.2` or later.
CVE-2026-25138 Vulnerability in rucio-webui (CVE-2026-25138)
vulnerability in rucio-webui (CVE-2026-25138). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `39.3.1` or later.
CVE-2026-26717 Vulnerability in richie (CVE-2026-26717)
vulnerability in richie (CVE-2026-26717). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-25734 Vulnerability in rucio-webui (CVE-2026-25734)
vulnerability in rucio-webui (CVE-2026-25734). Confidential information can be exposed externally. Exploitable via `POST /proxy/rses/XSSTEST`. Mitigation: upgrade to `39.3.1` or later.
CVE-2026-25736 Vulnerability in rucio-webui (CVE-2026-25736)
vulnerability in rucio-webui (CVE-2026-25736). Confidential information can be exposed externally. Exploitable via `POST /proxy/rses/WEB1/attr/XSS`. Mitigation: upgrade to `39.3.1` or later.
CVE-2026-27469 Vulnerability in isso (CVE-2026-27469)
vulnerability in isso (CVE-2026-27469). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /id/`. Mitigation: upgrade to `0.13.2` or later.
CVE-2026-25733 Vulnerability in rucio-webui (CVE-2026-25733)
vulnerability in rucio-webui (CVE-2026-25733). Confidential information can be exposed externally. Exploitable via `POST /proxy/rules/`. Mitigation: upgrade to `39.3.1` or later.
CVE-2026-25136 Vulnerability in rucio-webui (CVE-2026-25136)
vulnerability in rucio-webui (CVE-2026-25136). Confidential information can be exposed externally. Exploitable via `POST /proxy/accounts/pentest/attr/XSS`. Mitigation: upgrade to `39.3.1` or later.
CVE-2026-25735 Vulnerability in rucio-webui (CVE-2026-25735)
vulnerability in rucio-webui (CVE-2026-25735). Confidential information can be exposed externally. Exploitable via `POST /proxy/accounts/pentest/identities`. Mitigation: upgrade to `39.3.1` or later.
CVE-2026-26331 OS Command Injection in yt-dlp (CVE-2026-26331)
OS command injection in yt-dlp (CVE-2026-26331). Successful exploitation can lead to full system takeover. Exploitable via ``netrc_cmd``. Mitigation: upgrade to `2026.02.21` or later.
CVE-2026-2473 Vulnerability in google-cloud-aiplatform (CVE-2026-2473)
vulnerability in google-cloud-aiplatform (CVE-2026-2473). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.133.0` or later.
CVE-2026-27194 Vulnerability in dtale (CVE-2026-27194)
vulnerability in dtale (CVE-2026-27194). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.20.0` or later.
CVE-2026-2969 Vulnerability in datapizza-ai-core (CVE-2026-2969)
vulnerability in datapizza-ai-core (CVE-2026-2969). Risk of unauthorized operations or information disclosure.
CVE-2026-2970 Vulnerability in datapizza-ai-core (CVE-2026-2970)
vulnerability in datapizza-ai-core (CVE-2026-2970). Risk of unauthorized operations or information disclosure.
CVE-2026-27025 Vulnerability in pypdf (CVE-2026-27025)
vulnerability in pypdf (CVE-2026-27025). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.7.1` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →