Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-201 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-42505	Vulnerability in CVE-2026-42505 (CVE-2026-42505) vulnerability in CVE-2026-42505 (CVE-2026-42505). Risk of unauthorized operations or information disclosure.	Medium	Cwe 201	11 hours ago
CVE-2026-59519	Vulnerability in CVE-2026-59519 (CVE-2026-59519) vulnerability in CVE-2026-59519 (CVE-2026-59519). Risk of unauthorized operations or information disclosure.	Medium	Cwe 201	3 days ago
CVE-2026-59511	Vulnerability in CVE-2026-59511 (CVE-2026-59511) vulnerability in CVE-2026-59511 (CVE-2026-59511). Risk of unauthorized operations or information disclosure.	Medium	Cwe 201	3 days ago
CVE-2026-57347	Subscriber Sensitive Data Exposure in Hotel Booking Lite <= 6.0.3 versions. Subscriber Sensitive Data Exposure in Hotel Booking Lite <= 6.0.3 versions.	Medium	Cwe 201	6 days ago
CVE-2025-69132	Subscriber Sensitive Data Exposure in Corpkit <= 1.0.5 versions. Subscriber Sensitive Data Exposure in Corpkit <= 1.0.5 versions.	Medium	Cwe 201	6 days ago
CVE-2026-57736	Vulnerability in CVE-2026-57736 (CVE-2026-57736) vulnerability in CVE-2026-57736 (CVE-2026-57736). Risk of unauthorized operations or information disclosure.	High	Cwe 201	1 week ago
CVE-2026-13211	Vulnerability in CVE-2026-13211 (CVE-2026-13211) vulnerability in CVE-2026-13211 (CVE-2026-13211). Risk of unauthorized operations or information disclosure.	Medium	Cwe 201	1 week ago
CVE-2026-12085	Vulnerability in ibm (CVE-2026-12085) vulnerability in ibm (CVE-2026-12085). Confidential information can be exposed externally.	Medium	Cwe 201 Ibm Devops Deploy Urbancode Deploy	1 week ago
CVE-2026-13437	Vulnerability in devolutions (CVE-2026-13437) vulnerability in devolutions (CVE-2026-13437). Confidential information can be exposed externally.	Medium	Cwe 201 Devolutions Powershell Universal	1 week ago
CVE-2026-55180	Information Disclosure in pnpm (CVE-2026-55180) vulnerability in pnpm (CVE-2026-55180). Confidential information can be exposed externally. Exploitable via `Authorization header`. Mitigation: upgrade to `11.5.3` or later.	Medium	Cwe 200 Cwe 201 Cwe 522 Pnpm	1 week ago
CVE-2026-57318	Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions. Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions.	Medium	Cwe 201	1 week ago
CVE-2026-54834	Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone <= 2.3.2 versions. Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone <= 2.3.2 versions.	High	Cwe 201	1 week ago
CVE-2026-54848	Vulnerability in CVE-2026-54848 (CVE-2026-54848) vulnerability in CVE-2026-54848 (CVE-2026-54848). Risk of unauthorized operations or information disclosure.	High	Cwe 201	1 week ago
CVE-2026-54841	Unauthenticated Sensitive Data Exposure in Vitepos <= 3.4.2 versions. Unauthenticated Sensitive Data Exposure in Vitepos <= 3.4.2 versions.	High	Cwe 201	1 week ago
CVE-2026-54821	Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.3.1 versions. Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.3.1 versions.	High	Cwe 201	1 week ago
CVE-2026-22551	Vulnerability in @theia/ai-chat-ui (CVE-2026-22551) vulnerability in @theia/ai-chat-ui (CVE-2026-22551). Confidential information can be exposed externally. Mitigation: upgrade to `1.71.0` or later.	Medium	Cwe 201 Cwe 829 Eclipse Theia	2 weeks ago
CVE-2026-52698	Vulnerability in CVE-2026-52698 (CVE-2026-52698) vulnerability in CVE-2026-52698 (CVE-2026-52698). Risk of unauthorized operations or information disclosure.	High	Cwe 201	3 weeks ago
CVE-2026-34888	Unauthenticated Sensitive Data Exposure in Bricksforge <= 3.1.8.4 versions. Unauthenticated Sensitive Data Exposure in Bricksforge <= 3.1.8.4 versions.	High	Cwe 201	3 weeks ago
CVE-2026-27868	Vulnerability in CVE-2026-27868 (CVE-2026-27868) vulnerability in CVE-2026-27868 (CVE-2026-27868). Risk of unauthorized operations or information disclosure.		PHP Cwe 201	3 weeks ago
CVE-2024-35690	Vulnerability in CVE-2024-35690 (CVE-2024-35690) vulnerability in CVE-2024-35690 (CVE-2024-35690). Confidential information can be exposed externally.	Medium	Cwe 201	3 weeks ago
CVE-2026-54197	Unauthenticated Sensitive Data Exposure in GetGenie <= 4.4.1 versions. Unauthenticated Sensitive Data Exposure in GetGenie <= 4.4.1 versions.	Medium	Cwe 201	3 weeks ago
CVE-2026-52692	Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions. Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions.	High	Cwe 201	3 weeks ago
CVE-2026-52695	Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout <= 1.8.2 versions. Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout <= 1.8.2 versions.	High	Cwe 201	3 weeks ago
CVE-2026-49082	Vulnerability in CVE-2026-49082 (CVE-2026-49082) vulnerability in CVE-2026-49082 (CVE-2026-49082). Risk of unauthorized operations or information disclosure.	High	Cwe 201	3 weeks ago
CVE-2026-48965	Subscriber Sensitive Data Exposure in XCloner <= 4.8.6 versions. Subscriber Sensitive Data Exposure in XCloner <= 4.8.6 versions.	Medium	Cwe 201	3 weeks ago
CVE-2026-42667	Unauthenticated Sensitive Data Exposure in Bookly <= 27.4 versions. Unauthenticated Sensitive Data Exposure in Bookly <= 27.4 versions.	High	Cwe 201	3 weeks ago
CVE-2026-40789	Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions. Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions.	High	Cwe 201	3 weeks ago
CVE-2026-42384	Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions. Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions.	High	Cwe 201	3 weeks ago
CVE-2026-39480	Unauthenticated Sensitive Data Exposure in Backup Migration <= 2.1.1 versions. Unauthenticated Sensitive Data Exposure in Backup Migration <= 2.1.1 versions.	High	Cwe 201	3 weeks ago
CVE-2026-49064	Vulnerability in CVE-2026-49064 (CVE-2026-49064) vulnerability in CVE-2026-49064 (CVE-2026-49064). Confidential information can be exposed externally.	High	Cwe 201	3 weeks ago
CVE-2026-7184	Vulnerability in mattermost (CVE-2026-7184) vulnerability in mattermost (CVE-2026-7184). Confidential information can be exposed externally.	Medium	Cwe 201 Mattermost Mattermost Server	3 weeks ago
CVE-2026-42539	Vulnerability in CVE-2026-42539 (CVE-2026-42539) vulnerability in CVE-2026-42539 (CVE-2026-42539). Confidential information can be exposed externally.	Medium	Cwe 201	1 month ago
CVE-2026-44487	Vulnerability in axios (CVE-2026-44487) vulnerability in axios (CVE-2026-44487). Confidential information can be exposed externally. Exploitable via `Authorization header`. Mitigation: upgrade to `0.32.0` or later.	High	JavaScript Cwe 201 Axios	1 month ago
CVE-2026-44486	Information Disclosure in axios (CVE-2026-44486) vulnerability in axios (CVE-2026-44486). Confidential information can be exposed externally. Exploitable via `GET /start`. Mitigation: upgrade to `0.32.0` or later.	High	JavaScript Cwe 200 Axios Cwe 201	1 month ago
CVE-2026-4035	Vulnerability in mlflow (CVE-2026-4035) vulnerability in mlflow (CVE-2026-4035). Confidential information can be exposed externally. Exploitable via ``api_key``. Mitigation: upgrade to `3.11.0` or later.	High	Cwe 201 Lfprojects MLflow	1 month ago
CVE-2026-44653	Vulnerability in librechat (CVE-2026-44653) vulnerability in librechat (CVE-2026-44653). Confidential information can be exposed externally. Exploitable via `GET /api/mcp/servers`.	Medium	Cwe 201 Librechat	1 month ago
CVE-2026-35447	Vulnerability in CVE-2026-35447 (CVE-2026-35447) vulnerability in CVE-2026-35447 (CVE-2026-35447). Risk of unauthorized operations or information disclosure.		PHP Cwe 201	1 month ago
CVE-2026-42673	Vulnerability in CVE-2026-42673 (CVE-2026-42673) vulnerability in CVE-2026-42673 (CVE-2026-42673). Confidential information can be exposed externally.	High	Cwe 201	1 month ago
CVE-2026-49370	In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests	Low	Cwe 201 Jetbrains Youtrack	1 month ago
CVE-2026-10101	Vulnerability in CVE-2026-10101 (CVE-2026-10101) vulnerability in CVE-2026-10101 (CVE-2026-10101). Confidential information can be exposed externally. Exploitable via ``view``.	Medium	Cwe 201	1 month ago
CVE-2026-42746	Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for... Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for...	High	Cwe 201 PHP WordPress	1 month ago
CVE-2026-48877	Vulnerability in CVE-2026-48877 (CVE-2026-48877) vulnerability in CVE-2026-48877 (CVE-2026-48877). Confidential information can be exposed externally.	Medium	Cwe 201	1 month ago
CVE-2026-46481	Vulnerability in org.open-metadata:openmetadata-service (CVE-2026-46481) vulnerability in org.open-metadata:openmetadata-service (CVE-2026-46481). Confidential information can be exposed externally. Exploitable via `POST /api/v1/automations/workflows`. Mitigation: upgrade to `1.12.4` or later.	High	Cwe 201	1 month ago
CVE-2026-45739	Information Disclosure in strawberry-graphql (CVE-2026-45739) vulnerability in strawberry-graphql (CVE-2026-45739). Risk of unauthorized operations or information disclosure. Exploitable via ``parameters``. Mitigation: upgrade to `0.315.4` or later.	Low	Cwe 200 Cwe 201 Strawberry Strawberry Graphql	1 month ago
CVE-2026-45582	Vulnerability in n8n-mcp (CVE-2026-45582) vulnerability in n8n-mcp (CVE-2026-45582). Confidential information can be exposed externally. Exploitable via ``PRIVACY.md``. Mitigation: upgrade to `2.51.3` or later.	Medium	Cwe 201 N8N Mcp	1 month ago
CVE-2026-41181	Vulnerability in github.com/traefik/traefik/v2 (CVE-2026-41181) vulnerability in github.com/traefik/traefik/v2 (CVE-2026-41181). Risk of unauthorized operations or information disclosure. Exploitable via ``errors``. Mitigation: upgrade to `2.11.44` or later.	Medium	Cwe 201 Traefik	1 month ago
CVE-2025-62309	Vulnerability in CVE-2025-62309 (CVE-2025-62309) vulnerability in CVE-2025-62309 (CVE-2025-62309). Risk of unauthorized operations or information disclosure.	Low	Cwe 201	1 month ago
CVE-2025-62308	Vulnerability in CVE-2025-62308 (CVE-2025-62308) vulnerability in CVE-2025-62308 (CVE-2025-62308). Risk of unauthorized operations or information disclosure.	Medium	Cwe 201	1 month ago
CVE-2025-62305	Vulnerability in CVE-2025-62305 (CVE-2025-62305) vulnerability in CVE-2025-62305 (CVE-2025-62305). Risk of unauthorized operations or information disclosure.	Medium	Cwe 201	1 month ago
CVE-2026-45215	Vulnerability in wordpress (CVE-2026-45215) vulnerability in wordpress (CVE-2026-45215). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 201	1 month ago

Vulnerabilities

🍪 About cookies