Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-400 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-45680	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45680) vulnerability in go.opentelemetry.io/obi (CVE-2026-45680). Risk of unauthorized operations or information disclosure. Exploitable via ``probeMetrics``. Mitigation: upgrade to `0.9.0` or later.	Medium	Cwe 400 Cwe 834 Opentelemetry Ebpf Instrumentation	3 months ago
CVE-2026-45031	Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-45031) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-45031). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.13.1` or later.	Medium	Cwe 400 Cwe 770 Imagemagick	3 months ago
CVE-2026-46385	Vulnerability in github.com/iskorotkov/avro/v2 (CVE-2026-46385) vulnerability in github.com/iskorotkov/avro/v2 (CVE-2026-46385). Risk of unauthorized operations or information disclosure. Exploitable via ``Reader.ReadBlockHeader``. Mitigation: upgrade to `2.33.0` or later.	High	Cwe 400 Cwe 835	3 months ago
CVE-2026-45149	Vulnerability in brace-expansion (CVE-2026-45149) vulnerability in brace-expansion (CVE-2026-45149). Risk of unauthorized operations or information disclosure. Exploitable via ``max``. Mitigation: upgrade to `5.0.6` or later.	Medium	Cwe 400 Juliangruber Brace Expansion	3 months ago
CVE-2025-56352	Vulnerability in dos (CVE-2025-56352) vulnerability in dos (CVE-2025-56352). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400	3 months ago
CVE-2026-8769	Vulnerability in @ai-sdk/provider-utils (CVE-2026-8769) vulnerability in @ai-sdk/provider-utils (CVE-2026-8769). Risk of unauthorized operations or information disclosure.	Medium	Cwe 400 Cwe 404 Vercel Ai	3 months ago
CVE-2026-38728	Vulnerability in smtp-server (CVE-2026-38728) vulnerability in smtp-server (CVE-2026-38728). Risk of unauthorized operations or information disclosure. Exploitable via ``_remainder``. Mitigation: upgrade to `3.18.3` or later.	High	JavaScript Denial of Service Cwe 400	3 months ago
CVE-2026-33378	Vulnerability in grafana (CVE-2026-33378) vulnerability in grafana (CVE-2026-33378). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.6.14, 12.2.8, 12.3.6, 12.4.3, 13.0.1` or later.	Medium	Cwe 400 Grafana	3 months ago
CVE-2026-42304	Vulnerability in Twisted (CVE-2026-42304) vulnerability in Twisted (CVE-2026-42304). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.4.0rc2` or later.	High	Python Denial of Service Cwe 400 Cwe 407 +1	3 months ago
CVE-2026-42587	Vulnerability in io.netty:netty-codec-http (CVE-2026-42587) vulnerability in io.netty:netty-codec-http (CVE-2026-42587). Risk of unauthorized operations or information disclosure. Exploitable via ``HttpContentDecompressor``. Mitigation: upgrade to `4.1.133.Final` or later.	High	Denial of Service Cwe 400 Netty Cwe 770	3 months ago
CVE-2026-42579	Vulnerability in io.netty:netty-codec-dns (CVE-2026-42579) vulnerability in io.netty:netty-codec-dns (CVE-2026-42579). Data can be tampered with by attackers. Exploitable via ``io.netty.handler.codec.dns.DnsCodecUtil``. Mitigation: upgrade to `4.1.133.Final` or later.	High	Cwe 20 Cwe 400 Cwe 626 Netty +1	3 months ago
CVE-2026-42583	Vulnerability in io.netty:netty-codec-compression (CVE-2026-42583) vulnerability in io.netty:netty-codec-compression (CVE-2026-42583). Risk of unauthorized operations or information disclosure. Exploitable via ``decompressedLength``. Mitigation: upgrade to `4.2.13.Final` or later.	High	Cwe 400 Cwe 770 Netty	3 months ago
CVE-2026-44456	Vulnerability in hono (CVE-2026-44456) vulnerability in hono (CVE-2026-44456). Risk of unauthorized operations or information disclosure. Exploitable via ``maxSize``. Mitigation: upgrade to `4.12.16` or later.	Medium	JavaScript Cwe 400 Hono	3 months ago
CVE-2026-44796	Vulnerability in nautobot (CVE-2026-44796) vulnerability in nautobot (CVE-2026-44796). Risk of unauthorized operations or information disclosure. Exploitable via ``find``. Mitigation: upgrade to `2.4.33` or later.	Medium	Denial of Service Cwe 400 Cwe 1333 Networktocode +1	3 months ago
CVE-2026-44296	Vulnerability in dos (CVE-2026-44296) vulnerability in dos (CVE-2026-44296). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.26.0.167` or later.	High	Denial of Service Cwe 400 Cwe 405	3 months ago
CVE-2026-44241	Vulnerability in io.micronaut:micronaut-context (CVE-2026-44241) vulnerability in io.micronaut:micronaut-context (CVE-2026-44241). Risk of unauthorized operations or information disclosure. Exploitable via ``TimeConverterRegistrar``. Mitigation: upgrade to `3.8.14` or later.	High	Java Cwe 400 C	3 months ago
CVE-2026-44242	Vulnerability in io.micronaut:micronaut-inject (CVE-2026-44242) vulnerability in io.micronaut:micronaut-inject (CVE-2026-44242). Risk of unauthorized operations or information disclosure. Exploitable via ``ResourceBundleMessageSource``. Mitigation: upgrade to `3.8.14` or later.	Low	Java Cwe 400	3 months ago
CVE-2026-42544	Vulnerability in granian (CVE-2026-42544) vulnerability in granian (CVE-2026-42544). Risk of unauthorized operations or information disclosure. Exploitable via ``Err``. Mitigation: upgrade to `2.7.4` or later.	High	Python Rust Cwe 20 Cwe 248 +1	3 months ago
CVE-2026-34677	Vulnerability in adobe (CVE-2026-34677) vulnerability in adobe (CVE-2026-34677). Risk of unauthorized operations or information disclosure.	Medium	Cwe 400 Adobe C2Pa C2Pa Web	3 months ago
CVE-2026-34678	Vulnerability in adobe (CVE-2026-34678) vulnerability in adobe (CVE-2026-34678). Risk of unauthorized operations or information disclosure.	Medium	Cwe 400 Adobe C2Pa C2Pa Web	3 months ago
CVE-2026-34665	Vulnerability in adobe (CVE-2026-34665) vulnerability in adobe (CVE-2026-34665). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Adobe C2Pa C2Pa Web	3 months ago
CVE-2026-34673	Vulnerability in adobe (CVE-2026-34673) vulnerability in adobe (CVE-2026-34673). Risk of unauthorized operations or information disclosure.	Medium	Cwe 400 Adobe C2Pa C2Pa Web	3 months ago
CVE-2026-34650	Vulnerability in adobe (CVE-2026-34650) vulnerability in adobe (CVE-2026-34650). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Adobe Commerce Commerce B2B +1	3 months ago
CVE-2026-34651	Vulnerability in adobe (CVE-2026-34651) vulnerability in adobe (CVE-2026-34651). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Adobe Commerce Commerce B2B +1	3 months ago
CVE-2026-34648	Vulnerability in adobe (CVE-2026-34648) vulnerability in adobe (CVE-2026-34648). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Adobe Commerce Commerce B2B +1	3 months ago
CVE-2026-34649	Vulnerability in adobe (CVE-2026-34649) vulnerability in adobe (CVE-2026-34649). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Adobe Commerce Commerce B2B +1	3 months ago
CVE-2026-23824	Vulnerability in arubanetworks (CVE-2026-23824) vulnerability in arubanetworks (CVE-2026-23824). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Arubanetworks Arubaos Sd Wan	3 months ago
CVE-2026-42073	Cross-Site Request Forgery (CSRF) in @gitlawb/openclaude (CVE-2026-42073) vulnerability in @gitlawb/openclaude (CVE-2026-42073). Risk of unauthorized operations or information disclosure. Exploitable via ``error``. Mitigation: upgrade to `0.5.1` or later.	Medium	Cross-Site Request Forgery Cwe 352 Cwe 400 Gitlawb +1	3 months ago
CVE-2026-42006	Vulnerability in dovecot (CVE-2026-42006) vulnerability in dovecot (CVE-2026-42006). Risk of unauthorized operations or information disclosure.	Medium	Cwe 400 Dovecot Open Xchange Cwe 770	3 months ago
CVE-2026-40016	Vulnerability in dovecot (CVE-2026-40016) vulnerability in dovecot (CVE-2026-40016). Risk of unauthorized operations or information disclosure.	Medium	Cwe 400 Dovecot Open Xchange	3 months ago
CVE-2026-43653	Vulnerability in apple (CVE-2026-43653) vulnerability in apple (CVE-2026-43653). Confidential information can be exposed externally.	Medium	Cwe 400 Apple Ipados Iphone Os +2	3 months ago
CVE-2026-28967	Vulnerability in apple (CVE-2026-28967) vulnerability in apple (CVE-2026-28967). Risk of unauthorized operations or information disclosure.	Medium	Cwe 400 Apple Ipados Iphone Os	3 months ago
CVE-2026-28872	Vulnerability in apple (CVE-2026-28872) vulnerability in apple (CVE-2026-28872). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Apple Ipados Iphone Os	3 months ago
CVE-2026-28908	Vulnerability in dos (CVE-2026-28908) vulnerability in dos (CVE-2026-28908). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Apple macOS	3 months ago
CVE-2026-8319	Vulnerability in ai-agents (CVE-2026-8319) vulnerability in ai-agents (CVE-2026-8319). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 400 Cwe 404	3 months ago
CVE-2026-7790	Vulnerability in cowlib (CVE-2026-7790) vulnerability in cowlib (CVE-2026-7790). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.16.1` or later.		Denial of Service Cwe 400	3 months ago
CVE-2026-45047	Vulnerability in github.com/xddxdd/bird-lg-go (CVE-2026-45047) vulnerability in github.com/xddxdd/bird-lg-go (CVE-2026-45047). Risk of unauthorized operations or information disclosure. Exploitable via ``apiHandler``. Mitigation: upgrade to `0.0.0-20260507060110-0ff87024cb9e` or later.	High	Cwe 400	3 months ago
CVE-2026-31247	Vulnerability in docling (CVE-2026-31247) vulnerability in docling (CVE-2026-31247). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400	3 months ago
CVE-2026-23870	Vulnerability in react-server-dom-parcel (CVE-2026-23870) vulnerability in react-server-dom-parcel (CVE-2026-23870). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `19.2.6` or later.	High	C React Denial of Service Cwe 400 +4	3 months ago
CVE-2025-10470	Vulnerability in wso2 (CVE-2025-10470) vulnerability in wso2 (CVE-2025-10470). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Wso2 Identity Server	3 months ago
CVE-2026-20188	Vulnerability in Cisco dos (CVE-2026-20188) vulnerability in Cisco dos (CVE-2026-20188). Risk of unauthorized operations or information disclosure.	None	Cisco Network Denial of Service Cwe 400	3 months ago
CVE-2026-8187	Vulnerability in c (CVE-2026-8187) vulnerability in c (CVE-2026-8187). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 400 Cwe 404 Open5Gs	3 months ago
CVE-2026-42343	Vulnerability in dos (CVE-2026-42343) vulnerability in dos (CVE-2026-42343). Risk of unauthorized operations or information disclosure.		JavaScript Denial of Service Cwe 400	3 months ago
CVE-2026-42212	Vulnerability in csharp (CVE-2026-42212) vulnerability in csharp (CVE-2026-42212). Risk of unauthorized operations or information disclosure.		C# Denial of Service Cwe 400 Cwe 611 +1	3 months ago
CVE-2026-44247	Vulnerability in volcano.sh/volcano (CVE-2026-44247) vulnerability in volcano.sh/volcano (CVE-2026-44247). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.14.2` or later.	Medium	Cwe 400 Cwe 770 Linuxfoundation Volcano	3 months ago
CVE-2026-38361	Vulnerability in dash-uploader (CVE-2026-38361) vulnerability in dash-uploader (CVE-2026-38361). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.7.0a1` or later.	High	Cwe 400 Cwe 670 Fohrloop Dash Uploader +1	3 months ago
CVE-2025-13836	Vulnerability in python (CVE-2025-13836) vulnerability in python (CVE-2025-13836). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.10.20, 3.11.15, 3.12.13, 3.13.11, 3.14.1` or later.	High	Denial of Service Cwe 400 Python	3 months ago
CVE-2026-26171	Vulnerability in dotnet (CVE-2026-26171) vulnerability in dotnet (CVE-2026-26171). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.26, 9.0.15, 10.0.6` or later.	High	C# Cwe 400 Cwe 611 Cwe 776 +8	3 months ago
CVE-2024-27686	Vulnerability in dos (CVE-2024-27686) vulnerability in dos (CVE-2024-27686). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400	3 months ago
CVE-2022-26523	Vulnerability in dos (CVE-2022-26523) vulnerability in dos (CVE-2022-26523). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 400	3 months ago

Vulnerabilities

🍪 About cookies