Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
ID Title
GHSA-23v6-j5g5-7x9p Vulnerability in whs4_pnm (GHSA-23v6-j5g5-7x9p)
vulnerability in whs4_pnm (GHSA-23v6-j5g5-7x9p). Risk of unauthorized operations or information disclosure. Exploitable via ``__filename``.
GHSA-4fw4-5853-rqf8 Vulnerability in whs4_nmp (GHSA-4fw4-5853-rqf8)
vulnerability in whs4_nmp (GHSA-4fw4-5853-rqf8). Risk of unauthorized operations or information disclosure. Exploitable via ``postinstall``.
GHSA-3wm9-8rfp-wp25 Vulnerability in whs4_npm (GHSA-3wm9-8rfp-wp25)
vulnerability in whs4_npm (GHSA-3wm9-8rfp-wp25). Risk of unauthorized operations or information disclosure.
GHSA-6h38-53x2-5jhm Vulnerability in wsh4_npm (GHSA-6h38-53x2-5jhm)
vulnerability in wsh4_npm (GHSA-6h38-53x2-5jhm). Risk of unauthorized operations or information disclosure. Exploitable via ``whs4_typo``.
PYSEC-2026-1074 Vulnerability in ray-mcp-server (PYSEC-2026-1074)
vulnerability in ray-mcp-server (PYSEC-2026-1074). Risk of unauthorized operations or information disclosure.
CVE-2026-56812 Vulnerability in dos (CVE-2026-56812)
vulnerability in dos (CVE-2026-56812). Risk of unauthorized operations or information disclosure.
CVE-2026-56811 Vulnerability in dos (CVE-2026-56811)
vulnerability in dos (CVE-2026-56811). Risk of unauthorized operations or information disclosure.
CVE-2026-14969 Vulnerability in redhat (CVE-2026-14969)
vulnerability in redhat (CVE-2026-14969). Confidential information can be exposed externally.
CVE-2026-14935 Vulnerability in CVE-2026-14935 (CVE-2026-14935)
vulnerability in CVE-2026-14935 (CVE-2026-14935). Risk of unauthorized operations or information disclosure.
PYSEC-2026-1073 Vulnerability in orchestr8-platform (PYSEC-2026-1073)
vulnerability in orchestr8-platform (PYSEC-2026-1073). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-14969 Vulnerability in 389-ds-base (UBUNTU-CVE-2026-14969)
vulnerability in 389-ds-base (UBUNTU-CVE-2026-14969). Confidential information can be exposed externally.
UBUNTU-CVE-2026-14935 Vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-14935)
vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-14935). Risk of unauthorized operations or information disclosure.
GHSA-v63r-xv67-wj6q Vulnerability in runtimedev-link (GHSA-v63r-xv67-wj6q)
vulnerability in runtimedev-link (GHSA-v63r-xv67-wj6q). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/telemetry/poll-command`.
PYSEC-2026-1072 Vulnerability in openai-mcp (PYSEC-2026-1072)
vulnerability in openai-mcp (PYSEC-2026-1072). Risk of unauthorized operations or information disclosure.
PYSEC-2026-1071 Vulnerability in mem8 (PYSEC-2026-1071)
vulnerability in mem8 (PYSEC-2026-1071). Risk of unauthorized operations or information disclosure.
GHSA-r7mv-rcm7-x7m3 Vulnerability in polytrade (GHSA-r7mv-rcm7-x7m3)
vulnerability in polytrade (GHSA-r7mv-rcm7-x7m3). Risk of unauthorized operations or information disclosure. Exploitable via ``getPlugin``.
PYSEC-2026-1070 Vulnerability in langchain-core-mcp (PYSEC-2026-1070)
vulnerability in langchain-core-mcp (PYSEC-2026-1070). Risk of unauthorized operations or information disclosure.
CVE-2025-62349 Authentication Bypass in salt (CVE-2025-62349)
authentication bypass in salt (CVE-2025-62349). Confidential information can be exposed externally. Mitigation: upgrade to `3007.9` or later.
CVE-2025-62348 Code Injection in salt (CVE-2025-62348)
code injection in salt (CVE-2025-62348). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3006.17` or later.
CVE-2026-0599 Vulnerability in text-generation (CVE-2026-0599)
vulnerability in text-generation (CVE-2026-0599). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.7` or later.
CVE-2025-6208 Vulnerability in llama-index-core (CVE-2025-6208)
vulnerability in llama-index-core (CVE-2025-6208). Risk of unauthorized operations or information disclosure. Exploitable via ``SimpleDirectoryReader``. Mitigation: upgrade to `0.12.41` or later.
CVE-2026-25211 Vulnerability in llama-stack (CVE-2026-25211)
vulnerability in llama-stack (CVE-2026-25211). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.4.4` or later.
CVE-2026-1117 Vulnerability in lollms (CVE-2026-1117)
vulnerability in lollms (CVE-2026-1117). Risk of unauthorized operations or information disclosure. Exploitable via ``lollms_generation_events.py``. Mitigation: upgrade to `2.1.0` or later.
CVE-2026-24408 Cross-Site Request Forgery (CSRF) in sigstore (CVE-2026-24408)
vulnerability in sigstore (CVE-2026-24408). Risk of unauthorized operations or information disclosure. Exploitable via ``_OAuthSession``. Mitigation: upgrade to `4.2.0` or later.
CVE-2026-24688 Vulnerability in pypdf (CVE-2026-24688)
vulnerability in pypdf (CVE-2026-24688). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.6.2` or later.
CVE-2026-24123 Path Traversal in bentoml (CVE-2026-24123)
path traversal in bentoml (CVE-2026-24123). Confidential information can be exposed externally. Exploitable via ``bentofile.yaml``. Mitigation: upgrade to `1.4.34` or later.
CVE-2026-23892 Vulnerability in octoprint (CVE-2026-23892)
vulnerability in octoprint (CVE-2026-23892). Confidential information can be exposed externally. Mitigation: upgrade to `1.11.6` or later.
CVE-2026-1213 Vulnerability in askbot (CVE-2026-1213)
vulnerability in askbot (CVE-2026-1213). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.12.3` or later.
CVE-2026-24490 Cross-Site Scripting (XSS) in mobsf (CVE-2026-24490)
cross-site scripting in mobsf (CVE-2026-24490). Confidential information can be exposed externally. Exploitable via ``AndroidManifest.xml``. Mitigation: upgrade to `4.4.5` or later.
CVE-2025-11687 Cross-Site Scripting (XSS) in gi-docgen (CVE-2025-11687)
cross-site scripting in gi-docgen (CVE-2025-11687). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2025.5` or later.
CVE-2026-24489 Vulnerability in gakido (CVE-2026-24489)
vulnerability in gakido (CVE-2026-24489). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.1.1` or later.
CVE-2026-24780 Vulnerability in agpt (CVE-2026-24780)
vulnerability in agpt (CVE-2026-24780). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api-keys`.
CVE-2026-23946 Unsafe Deserialization in tendenci (CVE-2026-23946)
vulnerability in tendenci (CVE-2026-23946). Successful exploitation can lead to full system takeover. Exploitable via ``is_superuser``. Mitigation: upgrade to `15.3.12` or later.
CVE-2026-23877 Vulnerability in swingmusic (CVE-2026-23877)
vulnerability in swingmusic (CVE-2026-23877). Risk of unauthorized operations or information disclosure. Exploitable via `POST /folder/dir-browser`. Mitigation: upgrade to `2.1.4` or later.
CVE-2026-23996 Vulnerability in fastapi-api-key (CVE-2026-23996)
vulnerability in fastapi-api-key (CVE-2026-23996). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.0` or later.
CVE-2026-23842 Vulnerability in chatterbot (CVE-2026-23842)
vulnerability in chatterbot (CVE-2026-23842). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.11` or later.
CVE-2026-23968 Vulnerability in copier (CVE-2026-23968)
vulnerability in copier (CVE-2026-23968). Confidential information can be exposed externally. Mitigation: upgrade to `9.11.2` or later.
CVE-2026-24130 Vulnerability in moonraker (CVE-2026-24130)
vulnerability in moonraker (CVE-2026-24130). Risk of unauthorized operations or information disclosure. Exploitable via ``ldap``. Mitigation: upgrade to `0.10.0` or later.
CVE-2026-23986 Vulnerability in copier (CVE-2026-23986)
vulnerability in copier (CVE-2026-23986). Data can be tampered with by attackers. Exploitable via ``os.scandir``. Mitigation: upgrade to `9.11.2` or later.
CVE-2026-23833 Vulnerability in esphome (CVE-2026-23833)
vulnerability in esphome (CVE-2026-23833). Risk of unauthorized operations or information disclosure. Exploitable via ``field_length``. Mitigation: upgrade to `2025.12.7` or later.
CVE-2026-24009 Unsafe Deserialization in docling-core (CVE-2026-24009)
vulnerability in docling-core (CVE-2026-24009). Successful exploitation can lead to full system takeover. Exploitable via ``PyYAML``. Mitigation: upgrade to `2.48.4` or later.
CVE-2026-21889 Vulnerability in weblate (CVE-2026-21889)
vulnerability in weblate (CVE-2026-21889). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.15.2` or later.
CVE-2026-22798 Vulnerability in hermes (CVE-2026-22798)
vulnerability in hermes (CVE-2026-22798). Data can be tampered with by attackers. Exploitable via ``hermes``. Mitigation: upgrade to `0.9.1` or later.
CVE-2026-22870 Vulnerability in guarddog (CVE-2026-22870)
vulnerability in guarddog (CVE-2026-22870). Risk of unauthorized operations or information disclosure. Exploitable via ``tarsafe``. Mitigation: upgrade to `2.7.1` or later.
CVE-2026-22871 Path Traversal in guarddog (CVE-2026-22871)
path traversal in guarddog (CVE-2026-22871). Risk of unauthorized operations or information disclosure. Exploitable via ``path``. Mitigation: upgrade to `2.7.1` or later.
CVE-2026-22779 Vulnerability in blacksheep (CVE-2026-22779)
vulnerability in blacksheep (CVE-2026-22779). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.6` or later.
CVE-2025-68492 Vulnerability in chainlit (CVE-2025-68492)
vulnerability in chainlit (CVE-2025-68492). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.8.5` or later.
CVE-2026-22033 Vulnerability in label-studio (CVE-2026-22033)
vulnerability in label-studio (CVE-2026-22033). Risk of unauthorized operations or information disclosure. Exploitable via `PATCH /api/users/{id}/`.
CVE-2026-22701 Vulnerability in filelock (CVE-2026-22701)
vulnerability in filelock (CVE-2026-22701). Risk of unauthorized operations or information disclosure. Exploitable via ``filelock``. Mitigation: upgrade to `3.20.3` or later.
CVE-2026-23949 Path Traversal in jaraco-context (CVE-2026-23949)
path traversal in jaraco-context (CVE-2026-23949). Confidential information can be exposed externally. Exploitable via ``strip_first_component``. Mitigation: upgrade to `6.1.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →