Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-776 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-78681	NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which... NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which...	High	Denial of Service Cwe 776 Python	4 days ago
CVE-2026-3415	Vulnerability in CVE-2026-3415 (CVE-2026-3415) vulnerability in CVE-2026-3415 (CVE-2026-3415). Confidential information can be exposed externally.	High	Cwe 776	3 weeks ago
CVE-2026-14865	Vulnerability in dos (CVE-2026-14865) vulnerability in dos (CVE-2026-14865). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 776 Progress Telerik Ui For Aspnet Ajax	1 month ago
CVE-2026-73569	Vulnerability in fast-xml-parser (CVE-2026-73569) vulnerability in fast-xml-parser (CVE-2026-73569). Risk of unauthorized operations or information disclosure. Exploitable via ``processEntity``. Mitigation: upgrade to `5.10.1` or later.		JavaScript C Cwe 776	1 month ago
CVE-2026-14979	Vulnerability in dos (CVE-2026-14979) vulnerability in dos (CVE-2026-14979). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 776 Ibm Engineering Lifecycle Management	1 month ago
CVE-2026-12993	Vulnerability in redhat (CVE-2026-12993) vulnerability in redhat (CVE-2026-12993). Risk of unauthorized operations or information disclosure.	Medium	Cwe 776 Redhat Build Of Apicurio Registry	2 months ago
CVE-2026-45771	Vulnerability in freeswitch (CVE-2026-45771) vulnerability in freeswitch (CVE-2026-45771). Risk of unauthorized operations or information disclosure.	High	Cwe 776 Freeswitch	2 months ago
CVE-2026-44020	XXE (XML External Entity) in docling (CVE-2026-44020) vulnerability in docling (CVE-2026-44020). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.74.0` or later.	High	Server-Side Request Forgery Denial of Service Cwe 776 Docling +1	2 months ago
CVE-2026-44018	Vulnerability in docling (CVE-2026-44018) vulnerability in docling (CVE-2026-44018). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.91.0` or later.	Medium	Cwe 409 Cwe 611 Cwe 776 Docling	2 months ago
CVE-2026-45304	Vulnerability in symfony/yaml (CVE-2026-45304) vulnerability in symfony/yaml (CVE-2026-45304). Risk of unauthorized operations or information disclosure. Exploitable via ``stdClass``. Mitigation: upgrade to `8.0.12` or later.	High	PHP Symfony Cwe 776 Sensiolabs	3 months ago
CVE-2026-45133	Vulnerability in symfony/yaml (CVE-2026-45133) vulnerability in symfony/yaml (CVE-2026-45133). Risk of unauthorized operations or information disclosure. Exploitable via ``Parser``. Mitigation: upgrade to `8.0.12` or later.	High	PHP Symfony Cwe 674 Cwe 776 +2	3 months ago
CVE-2026-23822	Vulnerability in arubanetworks (CVE-2026-23822) vulnerability in arubanetworks (CVE-2026-23822). Risk of unauthorized operations or information disclosure.	Medium	Cwe 776 Arubanetworks Arubaos	3 months ago
CVE-2026-31248	Vulnerability in docling (CVE-2026-31248) vulnerability in docling (CVE-2026-31248). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 776	3 months ago
CVE-2026-42212	Vulnerability in csharp (CVE-2026-42212) vulnerability in csharp (CVE-2026-42212). Risk of unauthorized operations or information disclosure.		C# Denial of Service Cwe 400 Cwe 611 +1	3 months ago
CVE-2026-26171	Vulnerability in dotnet (CVE-2026-26171) vulnerability in dotnet (CVE-2026-26171). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.26, 9.0.15, 10.0.6` or later.	High	C# Cwe 400 Cwe 611 Cwe 776 +8	3 months ago
CVE-2026-41673	Vulnerability in @xmldom/xmldom (CVE-2026-41673) vulnerability in @xmldom/xmldom (CVE-2026-41673). Risk of unauthorized operations or information disclosure. Exploitable via ``node.textContent``. Mitigation: upgrade to `0.9.10` or later.	High	JavaScript Cwe 674 Cwe 776	4 months ago
CVE-2026-33116	Vulnerability in dotnet-sdk (CVE-2026-33116) vulnerability in dotnet-sdk (CVE-2026-33116). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.26, 9.0.15, 10.0.6` or later.	High	C# Cwe 20 Cwe 400 Cwe 835 +22	4 months ago
CVE-2026-33908	Vulnerability in dos (CVE-2026-33908) vulnerability in dos (CVE-2026-33908). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 674 Cwe 776 Imagemagick	4 months ago
CVE-2026-29074	Vulnerability in svgo (CVE-2026-29074) vulnerability in svgo (CVE-2026-29074). Risk of unauthorized operations or information disclosure.	High	JavaScript Cwe 776 Svgo	5 months ago
CVE-2026-26278	Vulnerability in c (CVE-2026-26278) vulnerability in c (CVE-2026-26278). Risk of unauthorized operations or information disclosure.	High	JavaScript C Cwe 776 Naturalintelligence +1	6 months ago
CVE-2017-5644	Vulnerability in apache (CVE-2017-5644) vulnerability in apache (CVE-2017-5644). Risk of unauthorized operations or information disclosure.	Medium	Apache Denial of Service Cwe 776 Poi	9 years ago

Vulnerabilities

🍪 About cookies