Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-22879	vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability	High	Cwe 129	1 week ago
CVE-2026-8720	Vulnerability in wolfssl (CVE-2026-8720) vulnerability in wolfssl (CVE-2026-8720). Data can be tampered with by attackers.	High	Cwe 354 Wolfssl	1 week ago
CVE-2026-6092	Vulnerability in wolfssl (CVE-2026-6092) vulnerability in wolfssl (CVE-2026-6092). Risk of unauthorized operations or information disclosure.	Medium	Cwe 757 Wolfssl	1 week ago
CVE-2026-55962	Authentication Bypass in wolfssl (CVE-2026-55962) authentication bypass in wolfssl (CVE-2026-55962). Data can be tampered with by attackers.	Medium	Cwe 287 Wolfssl	1 week ago
CVE-2026-7511	Vulnerability in wolfssl (CVE-2026-7511) vulnerability in wolfssl (CVE-2026-7511). Data can be tampered with by attackers.	High	Cwe 347 Wolfssl	1 week ago
CVE-2026-44622	Vulnerability in CVE-2026-44622 (CVE-2026-44622) vulnerability in CVE-2026-44622 (CVE-2026-44622). Risk of unauthorized operations or information disclosure.	Medium	Cwe 522	1 week ago
CVE-2026-6329	Vulnerability in wolfssl (CVE-2026-6329) vulnerability in wolfssl (CVE-2026-6329). Data can be tampered with by attackers.	Medium	Cwe 347 Wolfssl	1 week ago
CVE-2026-50176	Vulnerability in CVE-2026-50176 (CVE-2026-50176) vulnerability in CVE-2026-50176 (CVE-2026-50176). Risk of unauthorized operations or information disclosure.	High	Cwe 307	1 week ago
CVE-2026-54479	Vulnerability in CVE-2026-54479 (CVE-2026-54479) vulnerability in CVE-2026-54479 (CVE-2026-54479). Risk of unauthorized operations or information disclosure.	High	Cwe 613	1 week ago
CVE-2026-13283	Use-After-Free in google (CVE-2026-13283) vulnerability in google (CVE-2026-13283). Successful exploitation can lead to full system takeover.	High	Cwe 416 Google Chrome Android	1 week ago
CVE-2026-6325	Out-of-Bounds Write in wolfssl (CVE-2026-6325) out-of-bounds write in wolfssl (CVE-2026-6325). Data can be tampered with by attackers.	High	Cwe 787 Wolfssl	1 week ago
CVE-2026-6331	Vulnerability in wolfssl (CVE-2026-6331) vulnerability in wolfssl (CVE-2026-6331). Data can be tampered with by attackers.	High	Cwe 347 Wolfssl	1 week ago
CVE-2026-13282	Use-After-Free in google (CVE-2026-13282) vulnerability in google (CVE-2026-13282). Successful exploitation can lead to full system takeover.	Medium	Cwe 416 Google Chrome Android	1 week ago
CVE-2026-10098	Vulnerability in wolfssl (CVE-2026-10098) vulnerability in wolfssl (CVE-2026-10098). Risk of unauthorized operations or information disclosure.	Medium	Cwe 295 Wolfssl	1 week ago
CVE-2025-71335	Vulnerability in flowiseai (CVE-2025-71335) vulnerability in flowiseai (CVE-2025-71335). Confidential information can be exposed externally.	High	Cwe 613 Flowiseai Flowise	1 week ago
CVE-2025-71334	Vulnerability in flowiseai (CVE-2025-71334) vulnerability in flowiseai (CVE-2025-71334). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 73 Flowiseai Flowise	1 week ago
CVE-2026-12992	SSRF (Server-Side Request Forgery) in redhat (CVE-2026-12992) SSRF in redhat (CVE-2026-12992). Risk of unauthorized operations or information disclosure.	High	Cwe 918 Redhat Build Of Apicurio Registry	1 week ago
CVE-2025-71336	OS Command Injection in flowiseai (CVE-2025-71336) OS command injection in flowiseai (CVE-2025-71336). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 78 Flowiseai Flowise	1 week ago
CVE-2026-11800	Vulnerability in privilege-escalation (CVE-2026-11800) vulnerability in privilege-escalation (CVE-2026-11800). Confidential information can be exposed externally.	High	Privilege Escalation Cwe 347 Redhat Build Of Keycloak	1 week ago
CVE-2025-71340	Unsafe Deserialization in CVE-2025-71340 (CVE-2025-71340) vulnerability in CVE-2025-71340 (CVE-2025-71340). Confidential information can be exposed externally.	High	Python Cwe 502	1 week ago
CVE-2026-12975	XXE (XML External Entity) in ssrf (CVE-2026-12975) vulnerability in ssrf (CVE-2026-12975). Risk of unauthorized operations or information disclosure.	High	Server-Side Request Forgery Denial of Service Cwe 611 Redhat +1	1 week ago
CVE-2025-71338	Vulnerability in path-traversal (CVE-2025-71338) vulnerability in path-traversal (CVE-2025-71338). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Path Traversal Cwe 73 Flowiseai +1	1 week ago
CVE-2026-11703	Authentication Bypass in wolfssl (CVE-2026-11703) authentication bypass in wolfssl (CVE-2026-11703). Data can be tampered with by attackers.	High	Cwe 287 Wolfssl	1 week ago
CVE-2025-71333	Vulnerability in path-traversal (CVE-2025-71333) vulnerability in path-traversal (CVE-2025-71333). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Path Traversal Cwe 73 Flowiseai +1	1 week ago
CVE-2025-71327	Vulnerability in flowiseai (CVE-2025-71327) vulnerability in flowiseai (CVE-2025-71327). Confidential information can be exposed externally.	Critical	Authentication Bypass Cwe 306 Flowiseai Flowise	1 week ago
CVE-2025-71324	Vulnerability in path-traversal (CVE-2025-71324) vulnerability in path-traversal (CVE-2025-71324). Confidential information can be exposed externally.	High	Path Traversal Cwe 73 Flowiseai Flowise	1 week ago
CVE-2020-37256	Cross-Site Scripting (XSS) in getgrav (CVE-2020-37256) cross-site scripting in getgrav (CVE-2020-37256). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Getgrav Grav	1 week ago
CVE-2021-47986	Vulnerability in CVE-2021-47986 (CVE-2021-47986) vulnerability in CVE-2021-47986 (CVE-2021-47986). Successful exploitation can lead to full system takeover.	High	Cwe 494	1 week ago
CVE-2021-47987	Vulnerability in CVE-2021-47987 (CVE-2021-47987) vulnerability in CVE-2021-47987 (CVE-2021-47987). Successful exploitation can lead to full system takeover.	High	Cwe 494	1 week ago
CVE-2025-71328	Vulnerability in flowiseai (CVE-2025-71328) vulnerability in flowiseai (CVE-2025-71328). Confidential information can be exposed externally.	High	Cwe 620 Flowiseai Flowise	1 week ago
CVE-2026-43920	Vulnerability in csrf (CVE-2026-43920) vulnerability in csrf (CVE-2026-43920). Risk of unauthorized operations or information disclosure.		Cross-Site Request Forgery Cwe 306	1 week ago
CVE-2026-40941	Vulnerability in cacti (CVE-2026-40941) vulnerability in cacti (CVE-2026-40941). Data can be tampered with by attackers.	Medium	Cwe 347 Cacti	1 week ago
CVE-2026-40084	Path Traversal in path-traversal (CVE-2026-40084) path traversal in path-traversal (CVE-2026-40084). Confidential information can be exposed externally.	Medium	PHP Path Traversal Cwe 22 Cacti	1 week ago
CVE-2026-40083	SQL Injection in sqli (CVE-2026-40083) SQL injection in sqli (CVE-2026-40083). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Cacti	1 week ago
CVE-2026-40082	Vulnerability in cacti (CVE-2026-40082) vulnerability in cacti (CVE-2026-40082). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 384 Cacti	1 week ago
CVE-2026-40080	Open Redirect in cacti (CVE-2026-40080) vulnerability in cacti (CVE-2026-40080). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 601 Cacti	1 week ago
CVE-2026-55166	Vulnerability in lemur (CVE-2026-55166) vulnerability in lemur (CVE-2026-55166). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/1/authorities`. Mitigation: upgrade to `1.9.2` or later.			1 week ago
CVE-2026-55165	Vulnerability in lemur (CVE-2026-55165) vulnerability in lemur (CVE-2026-55165). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.9.2` or later.			1 week ago
CVE-2026-55164	Vulnerability in lemur (CVE-2026-55164) vulnerability in lemur (CVE-2026-55164). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/1/users/`. Mitigation: upgrade to `1.9.2` or later.			1 week ago
CVE-2026-55163	Authorization Flaw in lemur (CVE-2026-55163) vulnerability in lemur (CVE-2026-55163). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/1/roles/`. Mitigation: upgrade to `1.9.2` or later.			1 week ago
CVE-2026-55162	SSRF (Server-Side Request Forgery) in lemur (CVE-2026-55162) SSRF in lemur (CVE-2026-55162). Risk of unauthorized operations or information disclosure. Exploitable via `POST /certificates/upload`. Mitigation: upgrade to `1.9.2` or later.			1 week ago
CVE-2026-48722	Vulnerability in io.nextflow:nextflow (CVE-2026-48722) vulnerability in io.nextflow:nextflow (CVE-2026-48722). Risk of unauthorized operations or information disclosure. Exploitable via ``TOWER_ACCESS_TOKEN``. Mitigation: upgrade to `26.04.3` or later.			1 week ago
CVE-2026-48702	Vulnerability in github.com/sigstore/rekor (CVE-2026-48702) vulnerability in github.com/sigstore/rekor (CVE-2026-48702). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/log/entries`. Mitigation: upgrade to `1.5.2` or later.			1 week ago
CVE-2026-48529	Vulnerability in github.com/github/github-mcp-server (CVE-2026-48529) vulnerability in github.com/github/github-mcp-server (CVE-2026-48529). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.2` or later.	Medium	Cwe 284	1 week ago
CVE-2026-6412	Vulnerability in wolfssl (CVE-2026-6412) vulnerability in wolfssl (CVE-2026-6412). Risk of unauthorized operations or information disclosure.	Medium	Cwe 327 Wolfssl	1 week ago
CVE-2026-6450	Vulnerability in wolfssl (CVE-2026-6450) vulnerability in wolfssl (CVE-2026-6450). Risk of unauthorized operations or information disclosure.	Medium	Cwe 295 Wolfssl	1 week ago
CVE-2026-56445	Path Traversal in c (CVE-2026-56445) path traversal in c (CVE-2026-56445). Data can be tampered with by attackers.	Critical	C Cwe 22	1 week ago
CVE-2026-6731	Vulnerability in wolfssl (CVE-2026-6731) vulnerability in wolfssl (CVE-2026-6731). Data can be tampered with by attackers.	High	Cwe 295 Wolfssl	1 week ago
CVE-2026-6681	Vulnerability in wolfssl (CVE-2026-6681) vulnerability in wolfssl (CVE-2026-6681). Risk of unauthorized operations or information disclosure.	Medium	Cwe 120 Cwe 787 Wolfssl	1 week ago
CVE-2026-38637	Vulnerability in dos (CVE-2026-38637) vulnerability in dos (CVE-2026-38637). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400	1 week ago

Vulnerabilities

🍪 About cookies