Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-201 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-54841	Unauthenticated Sensitive Data Exposure in Vitepos <= 3.4.2 versions. Unauthenticated Sensitive Data Exposure in Vitepos <= 3.4.2 versions.	High	Cwe 201	2 months ago
CVE-2026-54848	Vulnerability in CVE-2026-54848 (CVE-2026-54848) vulnerability in CVE-2026-54848 (CVE-2026-54848). Risk of unauthorized operations or information disclosure.	High	Cwe 201	2 months ago
CVE-2026-54821	Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.3.1 versions. Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.3.1 versions.	High	Cwe 201	2 months ago
CVE-2026-22551	Vulnerability in @theia/ai-chat-ui (CVE-2026-22551) vulnerability in @theia/ai-chat-ui (CVE-2026-22551). Confidential information can be exposed externally. Mitigation: upgrade to `1.71.0` or later.	Medium	Cwe 201 Cwe 829 Eclipse Theia	2 months ago
CVE-2026-52698	Vulnerability in CVE-2026-52698 (CVE-2026-52698) vulnerability in CVE-2026-52698 (CVE-2026-52698). Risk of unauthorized operations or information disclosure.	High	Cwe 201	2 months ago
CVE-2026-27868	Vulnerability in CVE-2026-27868 (CVE-2026-27868) vulnerability in CVE-2026-27868 (CVE-2026-27868). Risk of unauthorized operations or information disclosure.		PHP Cwe 201	2 months ago
CVE-2026-34888	Unauthenticated Sensitive Data Exposure in Bricksforge <= 3.1.8.4 versions. Unauthenticated Sensitive Data Exposure in Bricksforge <= 3.1.8.4 versions.	High	Cwe 201	2 months ago
CVE-2024-35690	Vulnerability in CVE-2024-35690 (CVE-2024-35690) vulnerability in CVE-2024-35690 (CVE-2024-35690). Confidential information can be exposed externally.	Medium	Cwe 201	2 months ago
CVE-2026-54197	Unauthenticated Sensitive Data Exposure in GetGenie <= 4.4.1 versions. Unauthenticated Sensitive Data Exposure in GetGenie <= 4.4.1 versions.	Medium	Cwe 201	2 months ago
CVE-2026-52695	Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout <= 1.8.2 versions. Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout <= 1.8.2 versions.	High	Cwe 201	2 months ago
CVE-2026-52692	Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions. Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions.	High	Cwe 201	2 months ago
CVE-2026-48965	Subscriber Sensitive Data Exposure in XCloner <= 4.8.6 versions. Subscriber Sensitive Data Exposure in XCloner <= 4.8.6 versions.	Medium	Cwe 201	2 months ago
CVE-2026-49082	Vulnerability in CVE-2026-49082 (CVE-2026-49082) vulnerability in CVE-2026-49082 (CVE-2026-49082). Risk of unauthorized operations or information disclosure.	High	Cwe 201	2 months ago
CVE-2026-42667	Unauthenticated Sensitive Data Exposure in Bookly <= 27.4 versions. Unauthenticated Sensitive Data Exposure in Bookly <= 27.4 versions.	High	Cwe 201	2 months ago
CVE-2026-40789	Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions. Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions.	High	Cwe 201	2 months ago
CVE-2026-42384	Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions. Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions.	High	Cwe 201	2 months ago
CVE-2026-39480	Unauthenticated Sensitive Data Exposure in Backup Migration <= 2.1.1 versions. Unauthenticated Sensitive Data Exposure in Backup Migration <= 2.1.1 versions.	High	Cwe 201	2 months ago
CVE-2026-49064	Vulnerability in CVE-2026-49064 (CVE-2026-49064) vulnerability in CVE-2026-49064 (CVE-2026-49064). Confidential information can be exposed externally.	High	Cwe 201	2 months ago
CVE-2026-7184	Vulnerability in github.com/mattermost/mattermost-server (CVE-2026-7184) vulnerability in github.com/mattermost/mattermost-server (CVE-2026-7184). Confidential information can be exposed externally. Mitigation: upgrade to `10.11.16` or later.	Medium	Cwe 201 Mattermost Mattermost Server	2 months ago
CVE-2026-42539	Vulnerability in CVE-2026-42539 (CVE-2026-42539) vulnerability in CVE-2026-42539 (CVE-2026-42539). Confidential information can be exposed externally.	Medium	Cwe 201	2 months ago
CVE-2026-44487	Vulnerability in axios (CVE-2026-44487) vulnerability in axios (CVE-2026-44487). Confidential information can be exposed externally. Exploitable via `Authorization header`. Mitigation: upgrade to `0.32.0` or later.	High	JavaScript Cwe 201 Axios	2 months ago
CVE-2026-44486	Information Disclosure in axios (CVE-2026-44486) vulnerability in axios (CVE-2026-44486). Confidential information can be exposed externally. Exploitable via `GET /start`. Mitigation: upgrade to `0.32.0` or later.	High	JavaScript Cwe 200 Axios Cwe 201	2 months ago
CVE-2026-4035	Vulnerability in mlflow (CVE-2026-4035) vulnerability in mlflow (CVE-2026-4035). Confidential information can be exposed externally. Exploitable via ``api_key``. Mitigation: upgrade to `3.11.0` or later.	High	Cwe 201 Lfprojects MLflow	2 months ago
CVE-2026-44653	Vulnerability in librechat (CVE-2026-44653) vulnerability in librechat (CVE-2026-44653). Confidential information can be exposed externally. Exploitable via `GET /api/mcp/servers`.	Medium	Cwe 201 Librechat	2 months ago
CVE-2026-35447	Vulnerability in CVE-2026-35447 (CVE-2026-35447) vulnerability in CVE-2026-35447 (CVE-2026-35447). Risk of unauthorized operations or information disclosure.		PHP Cwe 201	2 months ago
CVE-2026-42673	Vulnerability in CVE-2026-42673 (CVE-2026-42673) vulnerability in CVE-2026-42673 (CVE-2026-42673). Confidential information can be exposed externally.	High	Cwe 201	2 months ago
CVE-2026-49370	In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests	Low	Cwe 201 Jetbrains Youtrack	3 months ago
CVE-2026-10101	Vulnerability in CVE-2026-10101 (CVE-2026-10101) vulnerability in CVE-2026-10101 (CVE-2026-10101). Confidential information can be exposed externally. Exploitable via ``view``.	Medium	Cwe 201	3 months ago
CVE-2026-47717	Vulnerability in fuxa-server (CVE-2026-47717) vulnerability in fuxa-server (CVE-2026-47717). Confidential information can be exposed externally. Exploitable via `GET /api/project`. Mitigation: upgrade to `1.3.1` or later.	High	Cwe 201	3 months ago
CVE-2026-42746	Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for... Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for...	High	Cwe 201 PHP WordPress	3 months ago
CVE-2026-48877	Vulnerability in CVE-2026-48877 (CVE-2026-48877) vulnerability in CVE-2026-48877 (CVE-2026-48877). Confidential information can be exposed externally.	Medium	Cwe 201	3 months ago
CVE-2026-46481	Vulnerability in org.open-metadata:openmetadata-service (CVE-2026-46481) vulnerability in org.open-metadata:openmetadata-service (CVE-2026-46481). Confidential information can be exposed externally. Exploitable via `POST /api/v1/automations/workflows`. Mitigation: upgrade to `1.12.4` or later.	High	Cwe 201	3 months ago
CVE-2026-45739	Information Disclosure in strawberry-graphql (CVE-2026-45739) vulnerability in strawberry-graphql (CVE-2026-45739). Risk of unauthorized operations or information disclosure. Exploitable via ``parameters``. Mitigation: upgrade to `0.315.4` or later.	Low	Cwe 200 Cwe 201 Strawberry Strawberry Graphql	3 months ago
CVE-2026-45582	Vulnerability in n8n-mcp (CVE-2026-45582) vulnerability in n8n-mcp (CVE-2026-45582). Confidential information can be exposed externally. Exploitable via ``PRIVACY.md``. Mitigation: upgrade to `2.51.3` or later.	Medium	Cwe 201 N8N Mcp	3 months ago
CVE-2026-41181	Vulnerability in github.com/traefik/traefik/v2 (CVE-2026-41181) vulnerability in github.com/traefik/traefik/v2 (CVE-2026-41181). Risk of unauthorized operations or information disclosure. Exploitable via ``errors``. Mitigation: upgrade to `2.11.44` or later.	Medium	Cwe 201 Traefik	3 months ago
CVE-2026-44970	Vulnerability in dbt-mcp (CVE-2026-44970) vulnerability in dbt-mcp (CVE-2026-44970). Risk of unauthorized operations or information disclosure. Exploitable via ``arguments``. Mitigation: upgrade to `1.17.1` or later.	Low	Cwe 201 Getdbt Dbt Mcp Server	3 months ago
CVE-2025-62309	Vulnerability in CVE-2025-62309 (CVE-2025-62309) vulnerability in CVE-2025-62309 (CVE-2025-62309). Risk of unauthorized operations or information disclosure.	Low	Cwe 201	3 months ago
CVE-2025-62308	Vulnerability in CVE-2025-62308 (CVE-2025-62308) vulnerability in CVE-2025-62308 (CVE-2025-62308). Risk of unauthorized operations or information disclosure.	Medium	Cwe 201	3 months ago
CVE-2025-62305	Vulnerability in CVE-2025-62305 (CVE-2025-62305) vulnerability in CVE-2025-62305 (CVE-2025-62305). Risk of unauthorized operations or information disclosure.	Medium	Cwe 201	3 months ago
CVE-2026-45215	Vulnerability in wordpress (CVE-2026-45215) vulnerability in wordpress (CVE-2026-45215). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 201	3 months ago
CVE-2026-20151	Vulnerability in Cisco smart-software-manager-on-prem (CVE-2026-20151) vulnerability in Cisco smart-software-manager-on-prem (CVE-2026-20151). Confidential information can be exposed externally.	High	Cisco Network Cwe 201 Smart Software Manager On Prem	3 months ago
CVE-2026-42880	Information Disclosure in argo-cd (CVE-2026-42880) vulnerability in argo-cd (CVE-2026-42880). Confidential information can be exposed externally.	Critical	Cwe 200 Cwe 212 Argo Cd Privilege Escalation +14	3 months ago
CVE-2025-31978	Vulnerability in hcltech (CVE-2025-31978) vulnerability in hcltech (CVE-2025-31978). Risk of unauthorized operations or information disclosure.	Medium	Cwe 201 Hcltech Bigfix Service Management	3 months ago
CVE-2026-42997	Vulnerability in ironic-python-agent (CVE-2026-42997) vulnerability in ironic-python-agent (CVE-2026-42997). Confidential information can be exposed externally. Mitigation: upgrade to `26.1.6` or later.	High	Cwe 669 Openstack Ironic Cwe 201	3 months ago
CVE-2026-40161	Vulnerability in github.com/tektoncd/pipeline (CVE-2026-40161) vulnerability in github.com/tektoncd/pipeline (CVE-2026-40161). Confidential information can be exposed externally. Exploitable via ``serverURL``. Mitigation: upgrade to `1.11.1` or later.	High	Cwe 201 Linuxfoundation Tekton Pipelines	4 months ago
CVE-2026-40293	Information Disclosure in github.com/openfga/openfga (CVE-2026-40293) vulnerability in github.com/openfga/openfga (CVE-2026-40293). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.14.0` or later.	Medium	Cwe 200 Cwe 201 Openfga	4 months ago
CVE-2026-4525	Vulnerability in github.com/hashicorp/vault (CVE-2026-4525) vulnerability in github.com/hashicorp/vault (CVE-2026-4525). Successful exploitation can lead to full system takeover.	High	Cwe 201 Hashicorp HashiCorp Vault	4 months ago
CVE-2025-41118	Information Disclosure in github.com/grafana/pyroscope (CVE-2025-41118) vulnerability in github.com/grafana/pyroscope (CVE-2025-41118). Confidential information can be exposed externally. Mitigation: upgrade to `1.15.2, 1.16.1` or later.	Critical	C Cwe 732 Cwe 201 Grafana +1	4 months ago
CVE-2026-5483	Vulnerability in redhat (CVE-2026-5483) vulnerability in redhat (CVE-2026-5483). Successful exploitation can lead to full system takeover.	High	JavaScript Cwe 201 Redhat Openshift Ai	4 months ago
CVE-2026-39912	Vulnerability in CVE-2026-39912 (CVE-2026-39912) vulnerability in CVE-2026-39912 (CVE-2026-39912). Confidential information can be exposed externally.	Critical	Cwe 201	4 months ago

Vulnerabilities

🍪 About cookies