Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-113 Clear

ID	Title	Severity	Tags	Detected
CVE-2025-71381	Vulnerability in CVE-2025-71381 (CVE-2025-71381) vulnerability in CVE-2025-71381 (CVE-2025-71381). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.10.3` or later.	Medium	Cwe 113	1 week ago
CVE-2026-56762	Vulnerability in CVE-2026-56762 (CVE-2026-56762) vulnerability in CVE-2026-56762 (CVE-2026-56762). Risk of unauthorized operations or information disclosure. Exploitable via `Cookie header`.	Medium	JavaScript Cwe 113 Cwe 20	2 weeks ago
CVE-2026-55766	Vulnerability in guzzlehttp/psr7 (CVE-2026-55766) vulnerability in guzzlehttp/psr7 (CVE-2026-55766). Risk of unauthorized operations or information disclosure. Exploitable via ``Request``. Mitigation: upgrade to `2.12.1` or later.	Medium	PHP Cwe 93 Cwe 113 Guzzlephp +1	2 weeks ago
CVE-2026-50269	Vulnerability in aiohttp (CVE-2026-50269) vulnerability in aiohttp (CVE-2026-50269). Risk of unauthorized operations or information disclosure. Exploitable via ``Payload.headers``. Mitigation: upgrade to `3.14.0` or later.	High	Python Cwe 93 Cwe 113 Aiohttp	3 weeks ago
CVE-2026-50630	Vulnerability in apache (CVE-2026-50630) vulnerability in apache (CVE-2026-50630). Risk of unauthorized operations or information disclosure.	Medium	Cwe 113 Apache Cxf	3 weeks ago
CVE-2026-49214	Vulnerability in guzzlehttp/psr7 (CVE-2026-49214) vulnerability in guzzlehttp/psr7 (CVE-2026-49214). Risk of unauthorized operations or information disclosure. Exploitable via ``Uri``. Mitigation: upgrade to `2.10.2` or later.	Medium	PHP Cwe 20 Cwe 93 Cwe 113 +2	3 weeks ago
CVE-2026-43966	Vulnerability in cowlib (CVE-2026-43966) vulnerability in cowlib (CVE-2026-43966). Risk of unauthorized operations or information disclosure.		Cwe 113	1 month ago
CVE-2026-48596	Vulnerability in tesla (CVE-2026-48596) vulnerability in tesla (CVE-2026-48596). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.18.3` or later.		Cwe 113	1 month ago
CVE-2026-38967	Vulnerability in CVE-2026-38967 (CVE-2026-38967) vulnerability in CVE-2026-38967 (CVE-2026-38967). Successful exploitation can lead to full system takeover.	Critical	Cwe 113	1 month ago
CVE-2026-38978	Vulnerability in CVE-2026-38978 (CVE-2026-38978) vulnerability in CVE-2026-38978 (CVE-2026-38978). Risk of unauthorized operations or information disclosure.	Medium	Cwe 113	1 month ago
CVE-2026-44489	Vulnerability in axios (CVE-2026-44489) vulnerability in axios (CVE-2026-44489). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `1.16.0` or later.	Low	JavaScript Cwe 113 Cwe 1321 Axios	1 month ago
CVE-2026-47675	Vulnerability in hono (CVE-2026-47675) vulnerability in hono (CVE-2026-47675). Risk of unauthorized operations or information disclosure. Exploitable via ``domain``. Mitigation: upgrade to `4.12.21` or later.	Medium	JavaScript Cwe 113 Cwe 1287 Hono	1 month ago
CVE-2026-9658	Vulnerability in CVE-2026-9658 (CVE-2026-9658) vulnerability in CVE-2026-9658 (CVE-2026-9658). Risk of unauthorized operations or information disclosure. Exploitable via `GET /path`.	High	Cwe 113 Cwe 790	1 month ago
CVE-2026-42578	Vulnerability in io.netty:netty-handler-proxy (CVE-2026-42578) vulnerability in io.netty:netty-handler-proxy (CVE-2026-42578). Data can be tampered with by attackers. Exploitable via ``io.netty.handler.proxy.HttpProxyHandler``. Mitigation: upgrade to `4.2.13.Final` or later.	High	Cwe 113 Netty Cwe 93	1 month ago
CVE-2026-7010	Vulnerability in CVE-2026-7010 (CVE-2026-7010) vulnerability in CVE-2026-7010 (CVE-2026-7010). Risk of unauthorized operations or information disclosure.	Medium	Cwe 113	1 month ago
CVE-2026-42874	Vulnerability in microdot (CVE-2026-42874) vulnerability in microdot (CVE-2026-42874). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.1` or later.	Low	Python Cross-Site Scripting Cwe 113	1 month ago
CVE-2026-44214	Vulnerability in eventsource-encoder (CVE-2026-44214) vulnerability in eventsource-encoder (CVE-2026-44214). Risk of unauthorized operations or information disclosure. Exploitable via ``event``. Mitigation: upgrade to `1.0.2` or later.	Medium	Cwe 93 Cwe 113 Rexxars Eventsource Encoder	1 month ago
CVE-2026-41683	Vulnerability in i18next-http-middleware (CVE-2026-41683) vulnerability in i18next-http-middleware (CVE-2026-41683). Data can be tampered with by attackers. Exploitable via ``i18next``. Mitigation: upgrade to `3.9.3` or later.	High	JavaScript Express Cwe 79 Cwe 113	2 months ago
CVE-2026-40175	Vulnerability in axios (CVE-2026-40175) vulnerability in axios (CVE-2026-40175). Risk of unauthorized operations or information disclosure. Exploitable via `GET /pings`. Mitigation: upgrade to `0.31.0` or later.	Medium	JavaScript Remote Code Execution Cwe 113 Cwe 444 +3	2 months ago
CVE-2017-1262	Vulnerability in ibm (CVE-2017-1262) vulnerability in ibm (CVE-2017-1262). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 113 Ibm Security Guardium	8 years ago
CVE-2017-12309	Vulnerability in cisco (CVE-2017-12309) vulnerability in cisco (CVE-2017-12309). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 113 Cisco Email Security Appliance Firmware	8 years ago
CVE-2015-1445	HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30. HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30.	High	Cwe 113 Fli4L	8 years ago
CVE-2017-7443	Vulnerability in apt-cacher-ng-project (CVE-2017-7443) vulnerability in apt-cacher-ng-project (CVE-2017-7443). Risk of unauthorized operations or information disclosure.	Medium	Cwe 113 Apt Cacher Ng Project Apt Cacher Ng Apt Cacher Project +1	9 years ago
CVE-2016-8024	Vulnerability in mcafee (CVE-2016-8024) vulnerability in mcafee (CVE-2016-8024). Successful exploitation can lead to full system takeover.	High	Cwe 113 Mcafee Virusscan Enterprise	9 years ago

Vulnerabilities

🍪 About cookies