Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-506 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-74232	Vulnerability in CVE-2026-74232 (CVE-2026-74232) vulnerability in CVE-2026-74232 (CVE-2026-74232). Successful exploitation can lead to full system takeover.	Critical	Cwe 300 Cwe 506	2 days ago
CVE-2026-77651	Vulnerability in CVE-2026-77651 (CVE-2026-77651) vulnerability in CVE-2026-77651 (CVE-2026-77651). Successful exploitation can lead to full system takeover.	Critical	Rust Cwe 506	1 week ago
CVE-2026-77650	Vulnerability in CVE-2026-77650 (CVE-2026-77650) vulnerability in CVE-2026-77650 (CVE-2026-77650). Successful exploitation can lead to full system takeover.	Critical	Rust Cwe 506	1 week ago
CVE-2026-77649	Vulnerability in CVE-2026-77649 (CVE-2026-77649) vulnerability in CVE-2026-77649 (CVE-2026-77649). Successful exploitation can lead to full system takeover.	Critical	Rust Cwe 506	1 week ago
CVE-2026-73533	Vulnerability in CVE-2026-73533 (CVE-2026-73533) vulnerability in CVE-2026-73533 (CVE-2026-73533). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 506	2 weeks ago
CVE-2026-73532	Vulnerability in CVE-2026-73532 (CVE-2026-73532) vulnerability in CVE-2026-73532 (CVE-2026-73532). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 506	2 weeks ago
CVE-2026-48161	Vulnerability in react (CVE-2026-48161) vulnerability in react (CVE-2026-48161). Risk of unauthorized operations or information disclosure. Exploitable via ``postinstall``.		JavaScript React Cwe 506	2 weeks ago
CVE-2026-48160	Vulnerability in react (CVE-2026-48160) vulnerability in react (CVE-2026-48160). Risk of unauthorized operations or information disclosure. Exploitable via ``postinstall``.		JavaScript React Cwe 506	2 weeks ago
CVE-2026-48159	Vulnerability in react (CVE-2026-48159) vulnerability in react (CVE-2026-48159). Risk of unauthorized operations or information disclosure. Exploitable via ``postinstall``.		JavaScript React Cwe 506	2 weeks ago
CVE-2026-48158	Vulnerability in react (CVE-2026-48158) vulnerability in react (CVE-2026-48158). Risk of unauthorized operations or information disclosure. Exploitable via ``postinstall``.		JavaScript React Cwe 506	2 weeks ago
CVE-2026-66747	Vulnerability in CVE-2026-66747 (CVE-2026-66747) vulnerability in CVE-2026-66747 (CVE-2026-66747). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 506	3 weeks ago
CVE-2026-67595	Vulnerability in CVE-2026-67595 (CVE-2026-67595) vulnerability in CVE-2026-67595 (CVE-2026-67595). Successful exploitation can lead to full system takeover.	High	JavaScript Cwe 506	1 month ago
CVE-2026-18072	Vulnerability in wordpress (CVE-2026-18072) vulnerability in wordpress (CVE-2026-18072). Successful exploitation can lead to full system takeover. Exploitable via ``init``.	Critical	WordPress Authentication Bypass Cwe 506	1 month ago
CVE-2026-48027 KEV	[KEV] Vulnerability in nx (CVE-2026-48027) vulnerability in nx (CVE-2026-48027). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Cwe 506 Nx Nx Console	3 months ago
CVE-2026-46421	Vulnerability in @cap-js/sqlite (CVE-2026-46421) vulnerability in @cap-js/sqlite (CVE-2026-46421). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.0` or later.		JavaScript C Cwe 506	3 months ago
CVE-2026-46412	Vulnerability in @beproduct/nestjs-auth (CVE-2026-46412) vulnerability in @beproduct/nestjs-auth (CVE-2026-46412). Successful exploitation can lead to full system takeover. Exploitable via ``tanstack_runner.js``.	Critical	Cwe 506	3 months ago
CVE-2026-45758	Vulnerability in guardrails-ai (CVE-2026-45758) vulnerability in guardrails-ai (CVE-2026-45758). Successful exploitation can lead to full system takeover.	Critical	Python Cwe 506 Guardrailsai Guardrails Ai	3 months ago
CVE-2026-8398 KEV	[KEV] Vulnerability in Daemon disc-soft (CVE-2026-8398) vulnerability in Daemon disc-soft (CVE-2026-8398). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Cwe 506 Disc Soft Daemon Tools Microsoft +1	3 months ago
CVE-2026-45321 KEV	[KEV] Vulnerability in @tanstack/arktype-adapter (CVE-2026-45321) vulnerability in @tanstack/arktype-adapter (CVE-2026-45321). Successful exploitation can lead to full system takeover. Exploitable via ``pull_request_target``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `1.166.16` or later.	Critical	Cwe 506 Tanstack Tanstackarktype Adapter Tanstackeslint Plugin Router +184	3 months ago
CVE-2026-44484	Vulnerability in pytorch-lightning (CVE-2026-44484) vulnerability in pytorch-lightning (CVE-2026-44484). Successful exploitation can lead to full system takeover.	Critical	Cwe 506 Lightningai Pytorch Lightning Cwe 829	3 months ago
CVE-2026-33634 KEV	[KEV] Vulnerability in github.com/aquasecurity/trivy (CVE-2026-33634) vulnerability in github.com/aquasecurity/trivy (CVE-2026-33634). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.35.0` or later.	High	Aquasecurity Trivy Cwe 506 Malicious Package +1	5 months ago
CVE-2025-54313 KEV	[KEV] Vulnerability in prettier (CVE-2025-54313) vulnerability in prettier (CVE-2025-54313). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Prettier Eslint Config Prettier Cwe 506	7 months ago
CVE-2025-59374 KEV	[KEV] Vulnerability in Asus live-update (CVE-2025-59374) vulnerability in Asus live-update (CVE-2025-59374). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Asus Live Update Cwe 506	8 months ago
CVE-2025-30154 KEV	[KEV] Vulnerability in Reviewdog action-setup-github-action (CVE-2025-30154) vulnerability in Reviewdog action-setup-github-action (CVE-2025-30154). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Reviewdog Action Setup Github Action Cwe 506	1 year ago
CVE-2025-30066 KEV	[KEV] Vulnerability in Tj-actions changed-files-github-action (CVE-2025-30066) vulnerability in Tj-actions changed-files-github-action (CVE-2025-30066). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Tj Actions Changed Files Github Action Cwe 506	1 year ago
CVE-2024-4978 KEV	[KEV] Vulnerability in Justice av solutions justice-av-solutions (CVE-2024-4978) vulnerability in Justice av solutions justice-av-solutions (CVE-2024-4978). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Justice Av Solutions Viewer Cwe 506	2 years ago

Vulnerabilities

🍪 About cookies