Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-201 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-55553	Information Disclosure in urllib (CVE-2026-55553) vulnerability in urllib (CVE-2026-55553). Confidential information can be exposed externally. Exploitable via `Cookie header`. Mitigation: upgrade to `2.44.1` or later.	High	JavaScript Cwe 200 Cwe 201 Cwe 522	4 days ago
CVE-2026-66585	Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions. Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions.	High	Cwe 201	5 days ago
CVE-2026-59809	Vulnerability in CVE-2026-59809 (CVE-2026-59809) vulnerability in CVE-2026-59809 (CVE-2026-59809). Confidential information can be exposed externally.	Medium	Cwe 201	1 week ago
CVE-2026-63481	Vulnerability in CVE-2026-63481 (CVE-2026-63481) vulnerability in CVE-2026-63481 (CVE-2026-63481). Risk of unauthorized operations or information disclosure. Exploitable via `Cookie header`.		Cwe 201	1 week ago
CVE-2026-75953	Vulnerability in CVE-2026-75953 (CVE-2026-75953) vulnerability in CVE-2026-75953 (CVE-2026-75953). Confidential information can be exposed externally.	High	Cwe 201	1 week ago
CVE-2026-73386	Vulnerability in CVE-2026-73386 (CVE-2026-73386) vulnerability in CVE-2026-73386 (CVE-2026-73386). Confidential information can be exposed externally.	High	Cwe 201	1 week ago
CVE-2026-73384	Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions. Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions.	High	Cwe 201	1 week ago
CVE-2026-74008	Vulnerability in CVE-2026-74008 (CVE-2026-74008) vulnerability in CVE-2026-74008 (CVE-2026-74008). Risk of unauthorized operations or information disclosure.	Medium	Cwe 201	1 week ago
CVE-2026-66463	Unauthenticated Sensitive Data Exposure in iCARRY <= 2.9 versions. Unauthenticated Sensitive Data Exposure in iCARRY <= 2.9 versions.	High	Cwe 201	2 weeks ago
CVE-2026-66443	Unauthenticated Sensitive Data Exposure in REST API Log <= 1.7.1 versions. Unauthenticated Sensitive Data Exposure in REST API Log <= 1.7.1 versions.	High	Cwe 201	2 weeks ago
CVE-2026-28174	Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions. Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions.	Medium	Cwe 201	2 weeks ago
CVE-2026-16637	Vulnerability in ssrf (CVE-2026-16637) vulnerability in ssrf (CVE-2026-16637). Confidential information can be exposed externally.	Medium	Server-Side Request Forgery Cwe 201 Cwe 918	3 weeks ago
CVE-2026-64652	Vulnerability in CVE-2026-64652 (CVE-2026-64652) vulnerability in CVE-2026-64652 (CVE-2026-64652). Risk of unauthorized operations or information disclosure.	Low	Cwe 201	3 weeks ago
CVE-2026-66696	Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks <= 3.7.8 versions. Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks <= 3.7.8 versions.	Medium	Cwe 201	3 weeks ago
CVE-2026-66685	Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions. Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions.	Medium	Cwe 201	3 weeks ago
CVE-2026-66684	Unauthenticated Sensitive Data Exposure in Export Import Menus <= 1.9.2 versions. Unauthenticated Sensitive Data Exposure in Export Import Menus <= 1.9.2 versions.	Medium	Cwe 201	3 weeks ago
CVE-2026-66683	Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript <= 2.0.16 versions. Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript <= 2.0.16 versions.	Medium	JavaScript Cwe 201	3 weeks ago
CVE-2026-65543	Subscriber Sensitive Data Exposure in Vimeo <= 1.2.2 versions. Subscriber Sensitive Data Exposure in Vimeo <= 1.2.2 versions.	High	Cwe 201	3 weeks ago
CVE-2026-66901	Vulnerability in CVE-2026-66901 (CVE-2026-66901) vulnerability in CVE-2026-66901 (CVE-2026-66901). Confidential information can be exposed externally.	High	Cwe 201 Cwe 918	3 weeks ago
CVE-2026-20484	Vulnerability in mediatek (CVE-2026-20484) vulnerability in mediatek (CVE-2026-20484). Confidential information can be exposed externally.	Medium	Cwe 201 Mediatek Mt8799 Firmware Mt8799 +76	3 weeks ago
CVE-2026-67355	Vulnerability in guzzlehttp/guzzle (CVE-2026-67355) vulnerability in guzzlehttp/guzzle (CVE-2026-67355). Confidential information can be exposed externally. Exploitable via ``CookieJar``. Mitigation: upgrade to `7.15.1` or later.	Medium	Cwe 201	4 weeks ago
CVE-2026-67354	Vulnerability in guzzlehttp/guzzle (CVE-2026-67354) vulnerability in guzzlehttp/guzzle (CVE-2026-67354). Confidential information can be exposed externally. Exploitable via ``referer``. Mitigation: upgrade to `7.15.1` or later.	Medium	Cwe 201	4 weeks ago
CVE-2026-28144	Vulnerability in CVE-2026-28144 (CVE-2026-28144) vulnerability in CVE-2026-28144 (CVE-2026-28144). Risk of unauthorized operations or information disclosure.	Medium	Cwe 201	4 weeks ago
CVE-2026-6267	GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5,... GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5,...	High	Cwe 201 Gitlab Authentication Bypass Access Control	1 month ago
CVE-2026-67425	Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url	High	Server-Side Request Forgery Cwe 201 Cwe 522 Ai Ml +2	1 month ago
CVE-2026-54660	Information Disclosure in swagger-typescript-api (CVE-2026-54660) vulnerability in swagger-typescript-api (CVE-2026-54660). Confidential information can be exposed externally. Exploitable via `GET /exfil-endpoint/data.json`. Mitigation: upgrade to `13.12.2` or later.	High	Cwe 200 Cwe 201 Cwe 522 Cwe 918	1 month ago
CVE-2026-65434	Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce <= 2.16.1 versions. Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce <= 2.16.1 versions.	Medium	Cwe 201	1 month ago
CVE-2026-66339	Vulnerability in gnome (CVE-2026-66339) vulnerability in gnome (CVE-2026-66339). Confidential information can be exposed externally. Exploitable via `Authorization header`.	Medium	Cwe 201 Gnome Libsoup Redhat +1	1 month ago
CVE-2026-16798	Vulnerability in devolutions (CVE-2026-16798) vulnerability in devolutions (CVE-2026-16798). Confidential information can be exposed externally.	Medium	Cwe 201 Devolutions Powershell Universal	1 month ago
CVE-2026-27372	Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions. Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions.	Medium	Cwe 201	1 month ago
CVE-2026-64643	Vulnerability in next (CVE-2026-64643) vulnerability in next (CVE-2026-64643). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.2.11` or later.	Medium	JavaScript React Cwe 201 Vercel +1	1 month ago
CVE-2026-12547	Vulnerability in CVE-2026-12547 (CVE-2026-12547) vulnerability in CVE-2026-12547 (CVE-2026-12547). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`.	Low	Cwe 201	1 month ago
CVE-2026-13380	Vulnerability in vsee (CVE-2026-13380) vulnerability in vsee (CVE-2026-13380). Confidential information can be exposed externally.	High	Cwe 201 Cwe 312 Vsee Clinic +1	1 month ago
CVE-2026-7488	Vulnerability in CVE-2026-7488 (CVE-2026-7488) vulnerability in CVE-2026-7488 (CVE-2026-7488). Confidential information can be exposed externally.	High	Cwe 201	1 month ago
CVE-2026-7189	Vulnerability in CVE-2026-7189 (CVE-2026-7189) vulnerability in CVE-2026-7189 (CVE-2026-7189). Confidential information can be exposed externally.	High	Cwe 201	1 month ago
CVE-2026-54171	Vulnerability in excon (CVE-2026-54171) vulnerability in excon (CVE-2026-54171). Confidential information can be exposed externally. Mitigation: upgrade to `1.5.0` or later.	Medium	Ruby Cwe 201 Excon Project Excon	1 month ago
CVE-2026-1365	Vulnerability in CVE-2026-1365 (CVE-2026-1365) vulnerability in CVE-2026-1365 (CVE-2026-1365). Confidential information can be exposed externally.	Medium	Authentication Bypass Cwe 201	1 month ago
CVE-2026-56460	Vulnerability in hcltechsw (CVE-2026-56460) vulnerability in hcltechsw (CVE-2026-56460). Confidential information can be exposed externally.	Medium	Cwe 201 Hcltechsw Hcl Devops Deploy Hcl Launch	1 month ago
CVE-2026-42505	Vulnerability in golang (CVE-2026-42505) vulnerability in golang (CVE-2026-42505). Risk of unauthorized operations or information disclosure.	Medium	Cwe 201 Golang Go	1 month ago
CVE-2026-59519	Vulnerability in CVE-2026-59519 (CVE-2026-59519) vulnerability in CVE-2026-59519 (CVE-2026-59519). Risk of unauthorized operations or information disclosure.	Medium	Cwe 201	1 month ago
CVE-2026-59511	Vulnerability in CVE-2026-59511 (CVE-2026-59511) vulnerability in CVE-2026-59511 (CVE-2026-59511). Risk of unauthorized operations or information disclosure.	Medium	Cwe 201	1 month ago
CVE-2026-57347	Subscriber Sensitive Data Exposure in Hotel Booking Lite <= 6.0.3 versions. Subscriber Sensitive Data Exposure in Hotel Booking Lite <= 6.0.3 versions.	Medium	Cwe 201	1 month ago
CVE-2025-69132	Subscriber Sensitive Data Exposure in Corpkit <= 1.0.5 versions. Subscriber Sensitive Data Exposure in Corpkit <= 1.0.5 versions.	Medium	Cwe 201	1 month ago
CVE-2026-57736	Vulnerability in CVE-2026-57736 (CVE-2026-57736) vulnerability in CVE-2026-57736 (CVE-2026-57736). Risk of unauthorized operations or information disclosure.	High	Cwe 201	1 month ago
CVE-2026-13211	Vulnerability in CVE-2026-13211 (CVE-2026-13211) vulnerability in CVE-2026-13211 (CVE-2026-13211). Risk of unauthorized operations or information disclosure.	Medium	Cwe 201	1 month ago
CVE-2026-12085	Vulnerability in ibm (CVE-2026-12085) vulnerability in ibm (CVE-2026-12085). Confidential information can be exposed externally.	Medium	Cwe 201 Ibm Devops Deploy Urbancode Deploy	1 month ago
CVE-2026-13437	Vulnerability in devolutions (CVE-2026-13437) vulnerability in devolutions (CVE-2026-13437). Confidential information can be exposed externally.	Medium	Cwe 201 Devolutions Powershell Universal	2 months ago
CVE-2026-55180	Information Disclosure in pnpm (CVE-2026-55180) vulnerability in pnpm (CVE-2026-55180). Confidential information can be exposed externally. Exploitable via `Authorization header`. Mitigation: upgrade to `11.5.3` or later.	Medium	Cwe 200 Cwe 201 Cwe 522 Pnpm	2 months ago
CVE-2026-57318	Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions. Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions.	Medium	Cwe 201	2 months ago
CVE-2026-54834	Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone <= 2.3.2 versions. Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone <= 2.3.2 versions.	High	Cwe 201	2 months ago

Vulnerabilities

🍪 About cookies