Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-358 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-54431	Vulnerability in CVE-2026-54431 (CVE-2026-54431) vulnerability in CVE-2026-54431 (CVE-2026-54431). Risk of unauthorized operations or information disclosure.		Cwe 358	6 days ago
CVE-2026-14440	Vulnerability in CVE-2026-14440 (CVE-2026-14440) vulnerability in CVE-2026-14440 (CVE-2026-14440). Confidential information can be exposed externally.	Medium	Cwe 358 Cwe 693	6 days ago
CVE-2026-12577	DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability. DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability.		Cwe 358	1 week ago
CVE-2026-57915	Vulnerability in apache (CVE-2026-57915) vulnerability in apache (CVE-2026-57915). Risk of unauthorized operations or information disclosure.	High	Apache Cwe 304 Cwe 358	1 week ago
CVE-2026-48797	Vulnerability in backpropagate (CVE-2026-48797) vulnerability in backpropagate (CVE-2026-48797). Risk of unauthorized operations or information disclosure. Exploitable via ``BACKPROPAGATE_UI_AUTH``. Mitigation: upgrade to `1.2.0` or later.		Python Denial of Service Cwe 358 Cwe 862 +1	3 weeks ago
CVE-2026-50628	Vulnerability in apache (CVE-2026-50628) vulnerability in apache (CVE-2026-50628). Successful exploitation can lead to full system takeover.	Critical	Cwe 20 Apache Cxf Cwe 358	3 weeks ago
CVE-2026-11127	Vulnerability in google (CVE-2026-11127) vulnerability in google (CVE-2026-11127). Data can be tampered with by attackers.	Medium	Cwe 358 Google Chrome Android	1 month ago
CVE-2026-11122	Vulnerability in google (CVE-2026-11122) vulnerability in google (CVE-2026-11122). Risk of unauthorized operations or information disclosure.	Medium	Cwe 358 Google Chrome Apple +5	1 month ago
CVE-2026-42082	Vulnerability in github.com/free5gc/amf (CVE-2026-42082) vulnerability in github.com/free5gc/amf (CVE-2026-42082). Risk of unauthorized operations or information disclosure. Exploitable via ``OnGoing``.	Low	Cwe 358 Free5Gc	1 month ago
CVE-2026-42081	Vulnerability in github.com/free5gc/amf (CVE-2026-42081) vulnerability in github.com/free5gc/amf (CVE-2026-42081). Risk of unauthorized operations or information disclosure. Exploitable via ``handlePathSwitchRequestMain``.	Medium	Cwe 358 Free5Gc	1 month ago
CVE-2026-28914	Vulnerability in apple (CVE-2026-28914) vulnerability in apple (CVE-2026-28914). Data can be tampered with by attackers.	Medium	Cwe 358 Cwe 693 Apple macOS	1 month ago
CVE-2026-45109	Vulnerability in next (CVE-2026-45109) vulnerability in next (CVE-2026-45109). Confidential information can be exposed externally. Exploitable via ``middleware.ts``. Mitigation: upgrade to `16.2.6` or later.	High	JavaScript React Cwe 288 Vercel +2	1 month ago
CVE-2026-44474	Vulnerability in github.com/ellanetworks/core (CVE-2026-44474) vulnerability in github.com/ellanetworks/core (CVE-2026-44474). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.10.0` or later.	Low	Cwe 358	1 month ago
CVE-2026-44475	Vulnerability in github.com/ellanetworks/core (CVE-2026-44475) vulnerability in github.com/ellanetworks/core (CVE-2026-44475). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.10.0` or later.	Medium	Cwe 358	1 month ago
CVE-2026-44473	Vulnerability in github.com/ellanetworks/core (CVE-2026-44473) vulnerability in github.com/ellanetworks/core (CVE-2026-44473). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.10.0` or later.	High	Cwe 358 Cwe 863	1 month ago
CVE-2026-44513	Code Injection in diffusers (CVE-2026-44513) code injection in diffusers (CVE-2026-44513). Successful exploitation can lead to full system takeover. Exploitable via ``trust_remote_code``. Mitigation: upgrade to `0.38.0` or later.	High	Remote Code Execution Cwe 94 Hugging Face Diffusers +1	2 months ago
CVE-2026-35679	Vulnerability in CVE-2026-35679 (CVE-2026-35679) vulnerability in CVE-2026-35679 (CVE-2026-35679). Risk of unauthorized operations or information disclosure.	Low	Cwe 358	3 months ago
CVE-2026-1486	Vulnerability in CVE-2026-1486 (CVE-2026-1486) vulnerability in CVE-2026-1486 (CVE-2026-1486). Successful exploitation can lead to full system takeover.	High	Cwe 358	4 months ago
CVE-2024-55599	Vulnerability in fortinet (CVE-2024-55599) vulnerability in fortinet (CVE-2024-55599). Risk of unauthorized operations or information disclosure.	Medium	Cwe 358 Fortinet Fortiproxy Fortisase +1	1 year ago
CVE-2024-7965 KEV	[KEV] Vulnerability in Google chromium-v8 (CVE-2024-7965) vulnerability in Google chromium-v8 (CVE-2024-7965). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Google Chromium V8 Cwe 358	1 year ago
CVE-2017-8152	Vulnerability in huawei (CVE-2017-8152) vulnerability in huawei (CVE-2017-8152). Data can be tampered with by attackers.	Medium	Cwe 358 Huawei Honor 5S Firmware Honor 5S	8 years ago
CVE-2017-12303	Vulnerability in cisco (CVE-2017-12303) vulnerability in cisco (CVE-2017-12303). Risk of unauthorized operations or information disclosure.	Medium	Cwe 358 Cisco Asyncos	8 years ago
CVE-2017-6032	Vulnerability in schneider-electric (CVE-2017-6032) vulnerability in schneider-electric (CVE-2017-6032). Risk of unauthorized operations or information disclosure.	Medium	Cwe 657 Cwe 358 Schneider Electric Modbus Firmware +1	9 years ago
CVE-2014-4843	Vulnerability in ibm (CVE-2014-4843) vulnerability in ibm (CVE-2014-4843). Risk of unauthorized operations or information disclosure.	Medium	Cwe 358 Ibm Curam Social Program Management	9 years ago
CVE-2016-10229	Vulnerability in c (CVE-2016-10229) vulnerability in c (CVE-2016-10229). Successful exploitation can lead to full system takeover.	Critical	C Cwe 358 Linux Linux Kernel +2	9 years ago
CVE-2017-7177	Vulnerability in openinfosecfoundation (CVE-2017-7177) vulnerability in openinfosecfoundation (CVE-2017-7177). Data can be tampered with by attackers.	High	Cwe 358 Openinfosecfoundation Suricata	9 years ago
CVE-2016-3017	Vulnerability in ibm (CVE-2016-3017) vulnerability in ibm (CVE-2016-3017). Confidential information can be exposed externally.	High	Cwe 358 Ibm Security Access Manager 90 Firmware Security Access Manager For Mobile 80 Firmware +4	9 years ago

Vulnerabilities

🍪 About cookies