Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-46432	Code Injection in lmdeploy (CVE-2026-46432) code injection in lmdeploy (CVE-2026-46432). Successful exploitation can lead to full system takeover. Exploitable via ``model_path``. Mitigation: upgrade to `0.13.0` or later.	High	Cwe 94	1 month ago
CVE-2026-46490	Vulnerability in samlify (CVE-2026-46490) vulnerability in samlify (CVE-2026-46490). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.13.0` or later.	High	JavaScript Privilege Escalation Cwe 91 Samlify Project +1	1 month ago
CVE-2026-46481	Vulnerability in org.open-metadata:openmetadata-service (CVE-2026-46481) vulnerability in org.open-metadata:openmetadata-service (CVE-2026-46481). Confidential information can be exposed externally. Exploitable via `POST /api/v1/automations/workflows`. Mitigation: upgrade to `1.12.4` or later.	High	Cwe 201	1 month ago
CVE-2026-9089	Vulnerability in CVE-2026-9089 (CVE-2026-9089) vulnerability in CVE-2026-9089 (CVE-2026-9089). Successful exploitation can lead to full system takeover.	High	Cwe 494	1 month ago
CVE-2026-45208	A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker... A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker...	High	Cwe 367 Privilege Escalation Timing Attack Local Attack	1 month ago
CVE-2026-45207	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation	1 month ago
CVE-2026-45206	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Windows Privilege Escalation	1 month ago
CVE-2026-34929	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation	1 month ago
CVE-2026-34928	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation Os	1 month ago
CVE-2026-34930	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation	1 month ago
CVE-2026-34927	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation	1 month ago
CVE-2026-2740	Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and... Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and...	High	Remote Code Execution Cwe 77	1 month ago
CVE-2025-71217	Vulnerability in trendmicro (CVE-2025-71217) vulnerability in trendmicro (CVE-2025-71217). Successful exploitation can lead to full system takeover.	High	Cwe 346 Trendmicro Apex One	1 month ago
CVE-2025-71214	Vulnerability in trendmicro (CVE-2025-71214) vulnerability in trendmicro (CVE-2025-71214). Successful exploitation can lead to full system takeover.	High	Cwe 346 Trendmicro Apex One	1 month ago
CVE-2025-71216	Vulnerability in trendmicro (CVE-2025-71216) vulnerability in trendmicro (CVE-2025-71216). Successful exploitation can lead to full system takeover.	High	Cwe 367 Trendmicro Apex One	1 month ago
CVE-2025-71215	Vulnerability in trendmicro (CVE-2025-71215) vulnerability in trendmicro (CVE-2025-71215). Successful exploitation can lead to full system takeover.	High	Cwe 367 Trendmicro Apex One	1 month ago
CVE-2025-71212	Vulnerability in CVE-2025-71212 (CVE-2025-71212) vulnerability in CVE-2025-71212 (CVE-2025-71212). Successful exploitation can lead to full system takeover.	High	Cwe 59	1 month ago
CVE-2025-71213	Vulnerability in CVE-2025-71213 (CVE-2025-71213) vulnerability in CVE-2025-71213 (CVE-2025-71213). Successful exploitation can lead to full system takeover.	High	Cwe 346	1 month ago
CVE-2025-13479	Vulnerability in CVE-2025-13479 (CVE-2025-13479) vulnerability in CVE-2025-13479 (CVE-2025-13479). Confidential information can be exposed externally.	High	Cwe 639	1 month ago
CVE-2025-13477	Vulnerability in CVE-2025-13477 (CVE-2025-13477) vulnerability in CVE-2025-13477 (CVE-2025-13477). Confidential information can be exposed externally.	High	Authentication Bypass Cwe 359 Cwe 522	1 month ago
CVE-2026-43502	Vulnerability in linux (CVE-2026-43502) vulnerability in linux (CVE-2026-43502). Successful exploitation can lead to full system takeover.	High	Linux Linux Kernel	1 month ago
CVE-2026-43497	Use-After-Free in linux (CVE-2026-43497) vulnerability in linux (CVE-2026-43497). Successful exploitation can lead to full system takeover.	High	Cwe 416 Linux Linux Kernel	1 month ago
CVE-2026-43499	Use-After-Free in linux (CVE-2026-43499) vulnerability in linux (CVE-2026-43499). Successful exploitation can lead to full system takeover.	High	Cwe 416 Linux Linux Kernel	1 month ago
CVE-2026-43498	Out-of-Bounds Write in linux (CVE-2026-43498) out-of-bounds write in linux (CVE-2026-43498). Successful exploitation can lead to full system takeover.	High	Cwe 787 Linux Linux Kernel	1 month ago
CVE-2026-43495	Out-of-Bounds Read in linux (CVE-2026-43495) vulnerability in linux (CVE-2026-43495). Successful exploitation can lead to full system takeover.	High	Cwe 125 Linux Linux Kernel	1 month ago
CVE-2026-43494	Vulnerability in linux (CVE-2026-43494) vulnerability in linux (CVE-2026-43494). Successful exploitation can lead to full system takeover.	High	Linux Linux Kernel Cwe 1341	1 month ago
CVE-2026-47261	Vulnerability in wasmtime-wasi (CVE-2026-47261) vulnerability in wasmtime-wasi (CVE-2026-47261). Data can be tampered with by attackers. Exploitable via ``path_open``. Mitigation: upgrade to `24.0.9` or later.	High	Cwe 284 Bytecodealliance Wasmtime	1 month ago
CVE-2026-45251	Use-After-Free in freebsd (CVE-2026-45251) vulnerability in freebsd (CVE-2026-45251). Successful exploitation can lead to full system takeover.	High	Cwe 416 FreeBSD	1 month ago
CVE-2026-45253	Out-of-Bounds Write in freebsd (CVE-2026-45253) out-of-bounds write in freebsd (CVE-2026-45253). Successful exploitation can lead to full system takeover.	High	Cwe 787 FreeBSD	1 month ago
CVE-2026-45255	OS Command Injection in freebsd (CVE-2026-45255) OS command injection in freebsd (CVE-2026-45255). Successful exploitation can lead to full system takeover.	High	Cwe 78 FreeBSD	1 month ago
CVE-2026-28764	MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability	High	Cwe 823 Mediaarea Mediainfolib	1 month ago
CVE-2026-39461	Vulnerability in freebsd (CVE-2026-39461) vulnerability in freebsd (CVE-2026-39461). Successful exploitation can lead to full system takeover.	High	Cwe 121 FreeBSD	1 month ago
CVE-2026-42001	Insufficient Validation of Autoprimary SOA Queries Insufficient Validation of Autoprimary SOA Queries	High	Cwe 400 Powerdns Authoritative	1 month ago
CVE-2026-9157	Vulnerability in CVE-2026-9157 (CVE-2026-9157) vulnerability in CVE-2026-9157 (CVE-2026-9157). Successful exploitation can lead to full system takeover.	High	Cwe 20 Cwe 434	1 month ago
CVE-2026-4858	Path Traversal in github.com/mattermost/mattermost-server (CVE-2026-4858) path traversal in github.com/mattermost/mattermost-server (CVE-2026-4858). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.11.15` or later.	High	Path Traversal Cwe 22 Mattermost Mattermost Server	1 month ago
CVE-2026-45250	Vulnerability in freebsd (CVE-2026-45250) vulnerability in freebsd (CVE-2026-45250). Successful exploitation can lead to full system takeover.	High	Cwe 121 FreeBSD	1 month ago
CVE-2026-44066	Out-of-Bounds Read in CVE-2026-44066 (CVE-2026-44066) vulnerability in CVE-2026-44066 (CVE-2026-44066). Confidential information can be exposed externally.	High	Cwe 125	1 month ago
CVE-2026-44068	Path Traversal in path-traversal (CVE-2026-44068) path traversal in path-traversal (CVE-2026-44068). Data can be tampered with by attackers.	High	Path Traversal Cwe 22	1 month ago
CVE-2026-44064	Out-of-Bounds Read in dos (CVE-2026-44064) vulnerability in dos (CVE-2026-44064). Risk of unauthorized operations or information disclosure.	High	Cwe 125 Denial of Service	1 month ago
CVE-2026-44062	Out-of-Bounds Write in c (CVE-2026-44062) out-of-bounds write in c (CVE-2026-44062). Successful exploitation can lead to full system takeover.	High	Cwe 787 C Denial of Service	1 month ago
CVE-2026-44060	Vulnerability in dos (CVE-2026-44060) vulnerability in dos (CVE-2026-44060). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 191	1 month ago
CVE-2026-44058	Authentication Bypass in CVE-2026-44058 (CVE-2026-44058) authentication bypass in CVE-2026-44058 (CVE-2026-44058). Successful exploitation can lead to full system takeover.	High	Authentication Bypass Cwe 287	1 month ago
CVE-2026-44055	OS Command Injection in CVE-2026-44055 (CVE-2026-44055) OS command injection in CVE-2026-44055 (CVE-2026-44055). Successful exploitation can lead to full system takeover.	High	Cwe 78	1 month ago
CVE-2026-44051	Vulnerability in CVE-2026-44051 (CVE-2026-44051) vulnerability in CVE-2026-44051 (CVE-2026-44051). Confidential information can be exposed externally.	High	Cwe 59	1 month ago
CVE-2026-44049	Out-of-Bounds Write in dos (CVE-2026-44049) out-of-bounds write in dos (CVE-2026-44049). Successful exploitation can lead to full system takeover.	High	Cwe 787 Denial of Service	1 month ago
CVE-2026-44048	Vulnerability in dos (CVE-2026-44048) vulnerability in dos (CVE-2026-44048). Successful exploitation can lead to full system takeover.	High	Cwe 121 Denial of Service	1 month ago
CVE-2026-44047	SQL Injection in sqli (CVE-2026-44047) SQL injection in sqli (CVE-2026-44047). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Denial of Service	1 month ago
CVE-2026-44053	Vulnerability in CVE-2026-44053 (CVE-2026-44053) vulnerability in CVE-2026-44053 (CVE-2026-44053). Confidential information can be exposed externally.	High	Cwe 327	1 month ago
CVE-2026-44052	Vulnerability in CVE-2026-44052 (CVE-2026-44052) vulnerability in CVE-2026-44052 (CVE-2026-44052). Confidential information can be exposed externally.	High	Cwe 532	1 month ago
CVE-2026-40165	Vulnerability in authentik (CVE-2026-40165) vulnerability in authentik (CVE-2026-40165). Confidential information can be exposed externally. Mitigation: upgrade to `2025.12.5, 2026.2.3` or later.	High	Authentication Bypass Cwe 91 Cwe 287 Cwe 436	1 month ago

Vulnerabilities

🍪 About cookies