Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-130 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-5706	Vulnerability in CVE-2026-5706 (CVE-2026-5706) vulnerability in CVE-2026-5706 (CVE-2026-5706). Risk of unauthorized operations or information disclosure.		Remote Code Execution Cwe 130	2 days ago
CVE-2026-71402	Out-of-Bounds Read in c (CVE-2026-71402) vulnerability in c (CVE-2026-71402). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 125 Cwe 130	2 days ago
CVE-2026-81575	Vulnerability in CVE-2026-81575 (CVE-2026-81575) vulnerability in CVE-2026-81575 (CVE-2026-81575). Risk of unauthorized operations or information disclosure.	High	Cwe 130	2 days ago
CVE-2026-58097	Vulnerability in CVE-2026-58097 (CVE-2026-58097) vulnerability in CVE-2026-58097 (CVE-2026-58097). Successful exploitation can lead to full system takeover.	High	Cwe 122 Cwe 130	3 days ago
CVE-2026-58096	Vulnerability in CVE-2026-58096 (CVE-2026-58096) vulnerability in CVE-2026-58096 (CVE-2026-58096). Successful exploitation can lead to full system takeover.	High	Cwe 130 Cwe 787	3 days ago
CVE-2026-14587	Vulnerability in neo4j (CVE-2026-14587) vulnerability in neo4j (CVE-2026-14587). Risk of unauthorized operations or information disclosure.	High	Cwe 130 Neo4J	3 weeks ago
CVE-2026-67292	Vulnerability in c (CVE-2026-67292) vulnerability in c (CVE-2026-67292). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 130	4 weeks ago
CVE-2026-62423	Vulnerability in CVE-2026-62423 (CVE-2026-62423) vulnerability in CVE-2026-62423 (CVE-2026-62423). Risk of unauthorized operations or information disclosure.	Medium	Cwe 130	1 month ago
CVE-2026-62424	Vulnerability in CVE-2026-62424 (CVE-2026-62424) vulnerability in CVE-2026-62424 (CVE-2026-62424). Risk of unauthorized operations or information disclosure.	Medium	Cwe 130	1 month ago
CVE-2026-26081	Vulnerability in haproxy (CVE-2026-26081) vulnerability in haproxy (CVE-2026-26081). Risk of unauthorized operations or information disclosure.	Medium	Cwe 130 HAProxy Aloha Haproxy Enterprise	1 month ago
CVE-2026-60060	Vulnerability in CVE-2026-60060 (CVE-2026-60060) vulnerability in CVE-2026-60060 (CVE-2026-60060). Risk of unauthorized operations or information disclosure.	Medium	Cwe 130	1 month ago
CVE-2026-54466	Vulnerability in websocket-driver (CVE-2026-54466) vulnerability in websocket-driver (CVE-2026-54466). Data can be tampered with by attackers. Mitigation: upgrade to `0.7.5` or later.	High	JavaScript Cwe 130 Faye Websocket Driver	1 month ago
CVE-2026-47692	Vulnerability in envoyproxy (CVE-2026-47692) vulnerability in envoyproxy (CVE-2026-47692). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35.13` or later.	Medium	Cwe 130 Envoyproxy Envoy	2 months ago
CVE-2026-6432	Vulnerability in CVE-2026-6432 (CVE-2026-6432) vulnerability in CVE-2026-6432 (CVE-2026-6432). Risk of unauthorized operations or information disclosure.		Cwe 130	2 months ago
CVE-2026-48487	Vulnerability in zeroconf (CVE-2026-48487) vulnerability in zeroconf (CVE-2026-48487). Risk of unauthorized operations or information disclosure. Exploitable via ``_read_character_string``. Mitigation: upgrade to `0.149.16` or later.	Medium	Python Cwe 130 Paulsm Zeroconf	2 months ago
CVE-2026-45615	Vulnerability in c (CVE-2026-45615) vulnerability in c (CVE-2026-45615). Risk of unauthorized operations or information disclosure. Exploitable via ``INTEGER_decode_oer``.	High	C Denial of Service Cwe 20 Cwe 125 +5	3 months ago
CVE-2026-48685	Vulnerability in pavel-odintsov (CVE-2026-48685) vulnerability in pavel-odintsov (CVE-2026-48685). Risk of unauthorized operations or information disclosure.	Medium	Cwe 130 Pavel Odintsov Fastnetmon	3 months ago
CVE-2026-9054	Vulnerability in CVE-2026-9054 (CVE-2026-9054) vulnerability in CVE-2026-9054 (CVE-2026-9054). Risk of unauthorized operations or information disclosure.		Cwe 130	3 months ago
CVE-2026-45681	Out-of-Bounds Read in go.opentelemetry.io/obi (CVE-2026-45681) vulnerability in go.opentelemetry.io/obi (CVE-2026-45681). Confidential information can be exposed externally. Exploitable via ``k_kprobes_http2_buf_size``. Mitigation: upgrade to `0.9.0` or later.	Medium	Cwe 125 Cwe 130 Opentelemetry Ebpf Instrumentation	3 months ago
CVE-2026-42216	Out-of-Bounds Read in openexr (CVE-2026-42216) vulnerability in openexr (CVE-2026-42216). Confidential information can be exposed externally. Exploitable via ``c13e0e1320a6652e02c5c90c6dbd984d532efe44``.	Critical	Cwe 125 Openexr C C++ +11	3 months ago
CVE-2026-43125	Out-of-Bounds Write in linux (CVE-2026-43125) out-of-bounds write in linux (CVE-2026-43125). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Linux Linux Kernel Buffer Overflow +16	3 months ago
CVE-2026-33846	A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of... A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of...	High	Cwe 130 Gnutls Heap Buffer Overflow Dtls	3 months ago
CVE-2026-41898	Vulnerability in rust-openssl-project (CVE-2026-41898) vulnerability in rust-openssl-project (CVE-2026-41898). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.10.78` or later.	Medium	Rust Cwe 126 Cwe 130 Rust Openssl Project +1	4 months ago
CVE-2026-31635	Vulnerability in c (CVE-2026-31635) vulnerability in c (CVE-2026-31635). Risk of unauthorized operations or information disclosure.	High	C Cwe 130 Linux Linux Kernel	4 months ago
CVE-2026-5367	Vulnerability in CVE-2026-5367 (CVE-2026-5367) vulnerability in CVE-2026-5367 (CVE-2026-5367). Confidential information can be exposed externally.	High	Cwe 130	4 months ago
CVE-2026-5265	Vulnerability in CVE-2026-5265 (CVE-2026-5265) vulnerability in CVE-2026-5265 (CVE-2026-5265). Risk of unauthorized operations or information disclosure.	Medium	Cwe 130	4 months ago
CVE-2026-41035	In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort... In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort...	High	Cwe 130 Samba Rsync Use After Free +2	4 months ago
CVE-2026-33555	Vulnerability in haproxy (CVE-2026-33555) vulnerability in haproxy (CVE-2026-33555). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.6` or later.	Medium	Cwe 130 HAProxy	4 months ago
CVE-2026-34831	Vulnerability in rack (CVE-2026-34831) vulnerability in rack (CVE-2026-34831). Risk of unauthorized operations or information disclosure. Exploitable via ``body.size``. Mitigation: upgrade to `3.2.6` or later.	Medium	Ruby Cwe 130 Cwe 135 Rack	4 months ago
CVE-2026-4371	Vulnerability in mozilla (CVE-2026-4371) vulnerability in mozilla (CVE-2026-4371). Confidential information can be exposed externally.	High	Cwe 126 Cwe 130 Mozilla Thunderbird	5 months ago
CVE-2026-23230	In the Linux kernel, the following vulnerability has been resolved: smb: client: split... In the Linux kernel, the following vulnerability has been resolved: smb: client: split...	High	Linux Linux Kernel Cwe 130 Race Condition	6 months ago
CVE-2025-14847 KEV	[KEV] Vulnerability in Mongodb cisa (CVE-2025-14847) vulnerability in Mongodb cisa (CVE-2025-14847). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	MongoDB Mongodb And Mongodb Server Cwe 130 Cisa +4	8 months ago
CVE-2021-36373	Vulnerability in apache (CVE-2021-36373) vulnerability in apache (CVE-2021-36373). Risk of unauthorized operations or information disclosure.	Medium	Apache Cwe 130 Ant Oracle +31	5 years ago
CVE-2021-36374	Vulnerability in apache (CVE-2021-36374) vulnerability in apache (CVE-2021-36374). Risk of unauthorized operations or information disclosure.	Medium	Apache Cwe 130 Ant Oracle +35	5 years ago

Vulnerabilities

🍪 About cookies