Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-425 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-13533	Vulnerability in CVE-2026-13533 (CVE-2026-13533) vulnerability in CVE-2026-13533 (CVE-2026-13533). Risk of unauthorized operations or information disclosure.	Medium	Cwe 425 Cwe 552	1 week ago
CVE-2026-10521	An high privileged remote attacker can access a hidden configuration method, that should not be... An high privileged remote attacker can access a hidden configuration method, that should not be...	High	Cwe 425 Remote Code Execution	2 weeks ago
CVE-2026-9610	Vulnerability in ibm (CVE-2026-9610) vulnerability in ibm (CVE-2026-9610). Risk of unauthorized operations or information disclosure.	Low	Cwe 425 Ibm Datacap Datacap Navigator	2 weeks ago
CVE-2026-34028	Vulnerability in CVE-2026-34028 (CVE-2026-34028) vulnerability in CVE-2026-34028 (CVE-2026-34028). Risk of unauthorized operations or information disclosure.		Cwe 425	3 weeks ago
CVE-2026-11986	Vulnerability in CVE-2026-11986 (CVE-2026-11986) vulnerability in CVE-2026-11986 (CVE-2026-11986). Data can be tampered with by attackers.	Medium	Cwe 425	3 weeks ago
CVE-2026-8205	Vulnerability in concrete5/concrete5 (CVE-2026-8205) vulnerability in concrete5/concrete5 (CVE-2026-8205). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.	Medium	Cwe 425 Concretecms Concrete Cms	1 month ago
CVE-2026-42297	Vulnerability in argo-workflows (CVE-2026-42297) vulnerability in argo-workflows (CVE-2026-42297). Data can be tampered with by attackers. Exploitable via ``auth.CanI``. Mitigation: upgrade to `4.0.5` or later.	High	Cwe 862 Argoproj Argo Workflows Cwe 425	1 month ago
CVE-2026-7500	Vulnerability in org.keycloak:keycloak-services (CVE-2026-7500) vulnerability in org.keycloak:keycloak-services (CVE-2026-7500). Risk of unauthorized operations or information disclosure.	Medium	Cwe 425 Redhat Build Of Keycloak	2 months ago
CVE-2026-35029	Authorization Flaw in litellm (CVE-2026-35029) vulnerability in litellm (CVE-2026-35029). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.83.0` or later.	High	Python Remote Code Execution Cwe 863 Cwe 425 +1	3 months ago
CVE-2025-15381	Information Disclosure in lfprojects (CVE-2025-15381) vulnerability in lfprojects (CVE-2025-15381). Data can be tampered with by attackers. Exploitable via ``NO_PERMISSIONS``.	High	Cwe 200 Cwe 425 Lfprojects MLflow	3 months ago
CVE-2026-33217	Authorization Flaw in linuxfoundation (CVE-2026-33217) vulnerability in linuxfoundation (CVE-2026-33217). Data can be tampered with by attackers.	High	Cwe 863 Cwe 425 Linuxfoundation Nats Server	3 months ago
CVE-2025-15587	Vulnerability in CVE-2025-15587 (CVE-2025-15587) vulnerability in CVE-2025-15587 (CVE-2025-15587). Risk of unauthorized operations or information disclosure.		Cwe 425	3 months ago
CVE-2026-25679	Vulnerability in stdlib (CVE-2026-25679) vulnerability in stdlib (CVE-2026-25679). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.8, 1.26.1` or later.	High	Cwe 425 Cwe 1286 Golang Go	4 months ago
CVE-2025-52024	Vulnerability in aptsys (CVE-2025-52024) vulnerability in aptsys (CVE-2025-52024). Confidential information can be exposed externally.	Critical	Cwe 306 Cwe 425 Cwe 862 Aptsys +1	5 months ago
CVE-2024-45195 KEV	[KEV] Vulnerability in Apache ofbiz (CVE-2024-45195) vulnerability in Apache ofbiz (CVE-2024-45195). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apache Ofbiz Cwe 425	1 year ago
CVE-2021-26085 KEV	[KEV] Vulnerability in Atlassian confluence-server (CVE-2021-26085) vulnerability in Atlassian confluence-server (CVE-2021-26085). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Atlassian Confluence Server Cwe 425	4 years ago
CVE-2017-15235	Vulnerability in horde (CVE-2017-15235) vulnerability in horde (CVE-2017-15235). Confidential information can be exposed externally.	High	Cwe 425 Horde Groupware	8 years ago
CVE-2017-14244	Vulnerability in iball (CVE-2017-14244) vulnerability in iball (CVE-2017-14244). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 425 Iball Ib Wra150N Firmware +1	8 years ago
CVE-2017-10833	Vulnerability in nippon-antenna (CVE-2017-10833) vulnerability in nippon-antenna (CVE-2017-10833). Confidential information can be exposed externally.	Critical	Cwe 425 Nippon Antenna Scr02Hd Firmware Scr02Hd	8 years ago
CVE-2017-2161	Vulnerability in toshiba (CVE-2017-2161) vulnerability in toshiba (CVE-2017-2161). Risk of unauthorized operations or information disclosure.	Low	Cwe 425 Toshiba Flashair	9 years ago
CVE-2017-2143	Vulnerability in frogman-office-inc (CVE-2017-2143) vulnerability in frogman-office-inc (CVE-2017-2143). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 425 Frogman Office Inc Cs Cart Japanese Edition +1	9 years ago
CVE-2017-2139	Vulnerability in frogman-office-inc (CVE-2017-2139) vulnerability in frogman-office-inc (CVE-2017-2139). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 425 Frogman Office Inc Cs Cart	9 years ago
CVE-2017-2486	Vulnerability in apple (CVE-2017-2486) vulnerability in apple (CVE-2017-2486). Data can be tampered with by attackers.	Medium	Cwe 425 Apple Safari Iphone Os	9 years ago

Vulnerabilities

🍪 About cookies