Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-57981	Use-After-Free in microsoft (CVE-2026-57981) vulnerability in microsoft (CVE-2026-57981). Successful exploitation can lead to full system takeover.	High	Cwe 416 Microsoft Edge Chromium	4 days ago
CVE-2026-27660	Vulnerability in CVE-2026-27660 (CVE-2026-27660) vulnerability in CVE-2026-27660 (CVE-2026-27660). Data can be tampered with by attackers.	High	Cwe 284	4 days ago
CVE-2026-26307	Vulnerability in CVE-2026-26307 (CVE-2026-26307) vulnerability in CVE-2026-26307 (CVE-2026-26307). Risk of unauthorized operations or information disclosure.		Cwe 400	4 days ago
CVE-2026-25782	Vulnerability in CVE-2026-25782 (CVE-2026-25782) vulnerability in CVE-2026-25782 (CVE-2026-25782). Risk of unauthorized operations or information disclosure.	Medium	Cwe 639	4 days ago
CVE-2026-25718	Vulnerability in CVE-2026-25718 (CVE-2026-25718) vulnerability in CVE-2026-25718 (CVE-2026-25718). Confidential information can be exposed externally.	Critical	Cwe 59	4 days ago
CVE-2026-25712	Vulnerability in CVE-2026-25712 (CVE-2026-25712) vulnerability in CVE-2026-25712 (CVE-2026-25712). Confidential information can be exposed externally.	High	Cwe 284	4 days ago
CVE-2026-14611	Information Disclosure in CVE-2026-14611 (CVE-2026-14611) vulnerability in CVE-2026-14611 (CVE-2026-14611). Risk of unauthorized operations or information disclosure.	Medium	Cwe 200 Cwe 668	4 days ago
CVE-2026-24690	Vulnerability in CVE-2026-24690 (CVE-2026-24690) vulnerability in CVE-2026-24690 (CVE-2026-24690). Data can be tampered with by attackers.	High	Cwe 284	4 days ago
CVE-2026-26232	Vulnerability in CVE-2026-26232 (CVE-2026-26232) vulnerability in CVE-2026-26232 (CVE-2026-26232). Confidential information can be exposed externally.	Critical	Cwe 294	4 days ago
CVE-2026-20909	Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries. Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries.	Medium	Cwe 284	4 days ago
CVE-2026-27657	Gitea versions before 1.25.5 allow a user to change another user's primary email address. Gitea versions before 1.25.5 allow a user to change another user's primary email address.	High	Cwe 639	4 days ago
CVE-2026-26292	Vulnerability in CVE-2026-26292 (CVE-2026-26292) vulnerability in CVE-2026-26292 (CVE-2026-26292). Successful exploitation can lead to full system takeover.	Critical	Cwe 284	4 days ago
CVE-2026-26247	Vulnerability in CVE-2026-26247 (CVE-2026-26247) vulnerability in CVE-2026-26247 (CVE-2026-26247). Confidential information can be exposed externally.	Critical	Cwe 284	4 days ago
CVE-2026-22547	Vulnerability in CVE-2026-22547 (CVE-2026-22547) vulnerability in CVE-2026-22547 (CVE-2026-22547). Confidential information can be exposed externally.	Critical	Cwe 20	4 days ago
CVE-2026-14610	Buffer Overflow in cpp (CVE-2026-14610) vulnerability in cpp (CVE-2026-14610). Risk of unauthorized operations or information disclosure.	Medium	C++ Cwe 119 Cwe 122	4 days ago
CVE-2026-14609	Vulnerability in CVE-2026-14609 (CVE-2026-14609) vulnerability in CVE-2026-14609 (CVE-2026-14609). Risk of unauthorized operations or information disclosure.	Medium	Cwe 384	4 days ago
CVE-2026-12481	Unsafe Deserialization in deserialization (CVE-2026-12481) vulnerability in deserialization (CVE-2026-12481). Successful exploitation can lead to full system takeover. Exploitable via ``Lambda``.	Critical	Insecure Deserialization Cwe 502 Keras	4 days ago
CVE-2026-58426	Vulnerability in CVE-2026-58426 (CVE-2026-58426) vulnerability in CVE-2026-58426 (CVE-2026-58426). Confidential information can be exposed externally.	Critical	Cwe 347	4 days ago
CVE-2026-58424	Permanent Fork PR Workflow Approval Gate Bypass Permanent Fork PR Workflow Approval Gate Bypass	High	Cwe 285 Cwe 732 Cwe 863	4 days ago
CVE-2026-58423	Authentication Bypass in CVE-2026-58423 (CVE-2026-58423) authentication bypass in CVE-2026-58423 (CVE-2026-58423). Confidential information can be exposed externally.	High	Authentication Bypass Cwe 287	4 days ago
CVE-2026-58422	Vulnerability in CVE-2026-58422 (CVE-2026-58422) vulnerability in CVE-2026-58422 (CVE-2026-58422). Successful exploitation can lead to full system takeover.	Critical	Cwe 284	4 days ago
CVE-2026-58421	Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service	High	Denial of Service Cwe 284	4 days ago
CVE-2026-58419	Notification API leaks private issue metadata after access revocation Notification API leaks private issue metadata after access revocation	High	Cwe 200	4 days ago
CVE-2026-58418	SSRF via HTTP Redirect in Repository Migration SSRF via HTTP Redirect in Repository Migration	Medium	Server-Side Request Forgery Cwe 918	4 days ago
CVE-2026-28740	Vulnerability in CVE-2026-28740 (CVE-2026-28740) vulnerability in CVE-2026-28740 (CVE-2026-28740). Confidential information can be exposed externally.	High	Cwe 639 Cwe 863	4 days ago
CVE-2026-27775	Authorization Flaw in CVE-2026-27775 (CVE-2026-27775) vulnerability in CVE-2026-27775 (CVE-2026-27775). Successful exploitation can lead to full system takeover.	High	Cwe 863	4 days ago
CVE-2026-27771	Vulnerability in CVE-2026-27771 (CVE-2026-27771) vulnerability in CVE-2026-27771 (CVE-2026-27771). Confidential information can be exposed externally.	High	Cwe 862	4 days ago
CVE-2026-27761	Authorization Flaw in CVE-2026-27761 (CVE-2026-27761) vulnerability in CVE-2026-27761 (CVE-2026-27761). Risk of unauthorized operations or information disclosure.	Medium	Cwe 863	4 days ago
CVE-2026-25038	Gitea 1.26.2 allows unauthorized users to access labels of private organizations. Gitea 1.26.2 allows unauthorized users to access labels of private organizations.	High	Cwe 200 Cwe 862	4 days ago
CVE-2026-24451	Information Disclosure in CVE-2026-24451 (CVE-2026-24451) vulnerability in CVE-2026-24451 (CVE-2026-24451). Confidential information can be exposed externally.	High	Cwe 200 Cwe 284	4 days ago
CVE-2026-22874	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-22874) SSRF in ssrf (CVE-2026-22874). Confidential information can be exposed externally.	Critical	Server-Side Request Forgery Cwe 918	4 days ago
CVE-2026-20896	Vulnerability in CVE-2026-20896 (CVE-2026-20896) vulnerability in CVE-2026-20896 (CVE-2026-20896). Successful exploitation can lead to full system takeover.	Critical	Cwe 284	4 days ago
CVE-2026-20779	Vulnerability in CVE-2026-20779 (CVE-2026-20779) vulnerability in CVE-2026-20779 (CVE-2026-20779). Confidential information can be exposed externally.	High	Cwe 294	4 days ago
CVE-2026-14355	Vulnerability in CVE-2026-14355 (CVE-2026-14355) vulnerability in CVE-2026-14355 (CVE-2026-14355). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 122	4 days ago
CVE-2026-14608	Vulnerability in CVE-2026-14608 (CVE-2026-14608) vulnerability in CVE-2026-14608 (CVE-2026-14608). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 285 Cwe 639	5 days ago
CVE-2026-14607	Buffer Overflow in c (CVE-2026-14607) vulnerability in c (CVE-2026-14607). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 119	5 days ago
CVE-2026-14606	Buffer Overflow in CVE-2026-14606 (CVE-2026-14606) vulnerability in CVE-2026-14606 (CVE-2026-14606). Successful exploitation can lead to full system takeover.	High	Cwe 119 Cwe 121	5 days ago
CVE-2026-14605	Buffer Overflow in CVE-2026-14605 (CVE-2026-14605) vulnerability in CVE-2026-14605 (CVE-2026-14605). Successful exploitation can lead to full system takeover.	High	Cwe 119 Cwe 121	5 days ago
CVE-2026-58379	Vulnerability in dos (CVE-2026-58379) vulnerability in dos (CVE-2026-58379). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 122	5 days ago
CVE-2026-14604	Buffer Overflow in cpp (CVE-2026-14604) vulnerability in cpp (CVE-2026-14604). Risk of unauthorized operations or information disclosure.	Medium	C++ Cwe 119 Cwe 415	5 days ago
CVE-2026-14631	Vulnerability in webpackjs (CVE-2026-14631) vulnerability in webpackjs (CVE-2026-14631). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.	Medium	JavaScript Cwe 20 Cwe 248 Webpackjs +1	5 days ago
CVE-2026-14620	Cross-Site Request Forgery (CSRF) in webpackjs (CVE-2026-14620) vulnerability in webpackjs (CVE-2026-14620). Risk of unauthorized operations or information disclosure.	Medium	Cwe 352 Cwe 749 Webpackjs Webpack Dev Server	5 days ago
CVE-2026-14615	Vulnerability in CVE-2026-14615 (CVE-2026-14615) vulnerability in CVE-2026-14615 (CVE-2026-14615). Risk of unauthorized operations or information disclosure.	Medium	Cwe 1220	5 days ago
CVE-2026-14614	Vulnerability in CVE-2026-14614 (CVE-2026-14614) vulnerability in CVE-2026-14614 (CVE-2026-14614). Risk of unauthorized operations or information disclosure.	Medium	Cwe 284	5 days ago
CVE-2026-14613	Vulnerability in CVE-2026-14613 (CVE-2026-14613) vulnerability in CVE-2026-14613 (CVE-2026-14613). Risk of unauthorized operations or information disclosure.	Medium	Cwe 284	5 days ago
CVE-2026-14612	Out-of-Bounds Write in dos (CVE-2026-14612) out-of-bounds write in dos (CVE-2026-14612). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 787	5 days ago
CVE-2026-49815	OS Command Injection in dell (CVE-2026-49815) OS command injection in dell (CVE-2026-49815). Successful exploitation can lead to full system takeover.	High	Cwe 78 Dell Data Domain Operating System	5 days ago
CVE-2026-49814	OS Command Injection in dell (CVE-2026-49814) OS command injection in dell (CVE-2026-49814). Successful exploitation can lead to full system takeover.	High	Cwe 78 Dell Data Domain Operating System	5 days ago
CVE-2026-53478	OS Command Injection in dell (CVE-2026-53478) OS command injection in dell (CVE-2026-53478). Successful exploitation can lead to full system takeover.	High	Cwe 78 Dell Data Domain Operating System	5 days ago
CVE-2026-14460	Vulnerability in CVE-2026-14460 (CVE-2026-14460) vulnerability in CVE-2026-14460 (CVE-2026-14460). Successful exploitation can lead to full system takeover.	High	Cwe 862	5 days ago

Vulnerabilities

🍪 About cookies