Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-295 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-6091	Vulnerability in wolfssl (CVE-2026-6091) vulnerability in wolfssl (CVE-2026-6091). Data can be tampered with by attackers.	Medium	Cwe 295 Wolfssl	2 months ago
CVE-2026-11999	Vulnerability in c (CVE-2026-11999) vulnerability in c (CVE-2026-11999). Data can be tampered with by attackers.	High	C Cwe 295 Wolfssl	2 months ago
CVE-2026-46734	Vulnerability in dell (CVE-2026-46734) vulnerability in dell (CVE-2026-46734). Successful exploitation can lead to full system takeover.	High	Cwe 295 Dell Display And Peripheral Manager	2 months ago
CVE-2026-57289	Vulnerability in jenkins (CVE-2026-57289) vulnerability in jenkins (CVE-2026-57289). Risk of unauthorized operations or information disclosure.	Medium	Cwe 295 Jenkins Bitbucket Push And Pull Request	2 months ago
CVE-2026-54323	Vulnerability in CVE-2026-54323 (CVE-2026-54323) vulnerability in CVE-2026-54323 (CVE-2026-54323). Confidential information can be exposed externally. Exploitable via `Authorization header`. Mitigation: upgrade to `0.185.0` or later.	Medium	Cwe 295	2 months ago
CVE-2026-54100	A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container... A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container...	High	Cwe 295 Openshift Windows SSH +3	2 months ago
CVE-2025-2669	Vulnerability in ibm (CVE-2025-2669) vulnerability in ibm (CVE-2025-2669). Data can be tampered with by attackers.	Medium	Cwe 295 Ibm Db2 Db2 Warehouse +1	2 months ago
CVE-2024-47477	Vulnerability in dell (CVE-2024-47477) vulnerability in dell (CVE-2024-47477). Risk of unauthorized operations or information disclosure.	Medium	Cwe 295 Dell Powerflex Manager	2 months ago
CVE-2026-9697	Vulnerability in undici (CVE-2026-9697) vulnerability in undici (CVE-2026-9697). Confidential information can be exposed externally. Exploitable via ``ProxyAgent``. Mitigation: upgrade to `8.5.0` or later.	High	Cwe 295 Nodejs Undici	2 months ago
CVE-2025-71261	Vulnerability in github.com/harvester/harvester (CVE-2025-71261) vulnerability in github.com/harvester/harvester (CVE-2025-71261). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0` or later.	High	Cwe 295	2 months ago
CVE-2026-9259	Vulnerability in canon (CVE-2026-9259) vulnerability in canon (CVE-2026-9259). Confidential information can be exposed externally.	Medium	Cwe 295 Canon Eos Network Setting Tool Apple +3	2 months ago
CVE-2026-9258	Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier	Medium	Cwe 295 Canon Eos Network Setting Tool Apple +3	2 months ago
CVE-2026-45170	Vulnerability in paloaltonetworks (CVE-2026-45170) vulnerability in paloaltonetworks (CVE-2026-45170). Successful exploitation can lead to full system takeover.	High	Cwe 295 Paloaltonetworks Idira Privilege Cloud Connector	2 months ago
CVE-2026-45175	Vulnerability in paloaltonetworks (CVE-2026-45175) vulnerability in paloaltonetworks (CVE-2026-45175). Successful exploitation can lead to full system takeover.	High	Cwe 295 Paloaltonetworks Idira Endpoint Privilege Manager Apple +5	2 months ago
CVE-2026-40992	Vulnerability in org.springframework.boot:spring-boot-starter-mail (CVE-2026-40992) vulnerability in org.springframework.boot:spring-boot-starter-mail (CVE-2026-40992). Risk of unauthorized operations or information disclosure.	Medium	Spring Cwe 295	2 months ago
CVE-2026-53475	Vulnerability in github.com/kubev2v/assisted-migration-agent (CVE-2026-53475) vulnerability in github.com/kubev2v/assisted-migration-agent (CVE-2026-53475). Confidential information can be exposed externally. Mitigation: upgrade to `0.16.0` or later.	Critical	Cwe 295 Kubev2V Assisted Migration Agent	2 months ago
CVE-2026-9758	Vulnerability in CVE-2026-9758 (CVE-2026-9758) vulnerability in CVE-2026-9758 (CVE-2026-9758). Risk of unauthorized operations or information disclosure.	High	Cwe 295	2 months ago
CVE-2026-41714	Vulnerability in org.springframework.amqp:spring-amqp (CVE-2026-41714) vulnerability in org.springframework.amqp:spring-amqp (CVE-2026-41714). Risk of unauthorized operations or information disclosure.	Medium	Cwe 295 Vmware Spring Advanced Message Queuing Protocol	2 months ago
CVE-2026-42769	Vulnerability in openssl (CVE-2026-42769) vulnerability in openssl (CVE-2026-42769). Confidential information can be exposed externally.	Medium	Cwe 295 Openssl	2 months ago
CVE-2026-50752	Vulnerability in CVE-2026-50752 (CVE-2026-50752) vulnerability in CVE-2026-50752 (CVE-2026-50752). Confidential information can be exposed externally.	High	Cwe 295	2 months ago
CVE-2026-45745	Vulnerability in termix (CVE-2026-45745) vulnerability in termix (CVE-2026-45745). Confidential information can be exposed externally.	High	Cwe 295 Termix	2 months ago
CVE-2026-44393	Vulnerability in oslo.messaging (CVE-2026-44393) vulnerability in oslo.messaging (CVE-2026-44393). Confidential information can be exposed externally.	High	Cwe 297 Cwe 295	2 months ago
CVE-2026-41859	Vulnerability in CVE-2026-41859 (CVE-2026-41859) vulnerability in CVE-2026-41859 (CVE-2026-41859). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `282.1.9` or later.	High	Cwe 295	2 months ago
CVE-2026-49267	Vulnerability in airflow (CVE-2026-49267) vulnerability in airflow (CVE-2026-49267). Confidential information can be exposed externally. Exploitable via ``airflow.utils.email``. Mitigation: upgrade to `3.2.2` or later.	Medium	Apache Cwe 295 Airflow	2 months ago
CVE-2026-47074	Vulnerability in ex_aws_sns (CVE-2026-47074) vulnerability in ex_aws_sns (CVE-2026-47074). Risk of unauthorized operations or information disclosure. Exploitable via ``SigningCertURL``. Mitigation: upgrade to `2.3.5` or later.		Cwe 295	3 months ago
CVE-2026-42790	Vulnerability in erlang (CVE-2026-42790) vulnerability in erlang (CVE-2026-42790). Confidential information can be exposed externally.	High	Cwe 295 Cwe 297 Erlang Erlangotp	3 months ago
CVE-2026-42791	Vulnerability in erlang (CVE-2026-42791) vulnerability in erlang (CVE-2026-42791). Risk of unauthorized operations or information disclosure.	Low	Authentication Bypass Cwe 295 Cwe 672 Erlang +1	3 months ago
CVE-2026-42789	Vulnerability in erlang (CVE-2026-42789) vulnerability in erlang (CVE-2026-42789). Risk of unauthorized operations or information disclosure.	Medium	Cwe 295 Cwe 296 Erlang Erlangotp	3 months ago
CVE-2026-42013	A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name ... A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name ...	High	Cwe 1284 Gnutls Authentication Bypass Cwe 295	3 months ago
CVE-2026-42012	A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a... A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a...	High	Cwe 295 Spoofing Intercept Certificate +1	3 months ago
CVE-2026-48697	Vulnerability in cpp (CVE-2026-48697) vulnerability in cpp (CVE-2026-48697). Confidential information can be exposed externally.	High	C++ Cwe 295 Pavel Odintsov Fastnetmon	3 months ago
CVE-2026-9058	Vulnerability in CVE-2026-9058 (CVE-2026-9058) vulnerability in CVE-2026-9058 (CVE-2026-9058). Risk of unauthorized operations or information disclosure.		Authentication Bypass Cwe 393 Cwe 637 Cwe 295	3 months ago
CVE-2026-8992	Vulnerability in ivanti (CVE-2026-8992) vulnerability in ivanti (CVE-2026-8992). Successful exploitation can lead to full system takeover.	High	Cwe 295 Ivanti Secure Access Client Microsoft +1	3 months ago
CVE-2025-32745	Vulnerability in dell (CVE-2025-32745) vulnerability in dell (CVE-2025-32745). Risk of unauthorized operations or information disclosure.	Medium	Cwe 295 Dell Powerflex Appliance Intelligent Catalog Powerflex Manager +1	3 months ago
CVE-2026-32253	Authentication Bypass in cpp (CVE-2026-32253) authentication bypass in cpp (CVE-2026-32253). Successful exploitation can lead to full system takeover.	Critical	C++ Cwe 287 Cwe 295 Lizardbyte +1	3 months ago
CVE-2026-42508	Vulnerability in golang.org/x/crypto (CVE-2026-42508) vulnerability in golang.org/x/crypto (CVE-2026-42508). Confidential information can be exposed externally. Mitigation: upgrade to `0.52.0` or later.	Critical	Cwe 295 Golang Crypto	3 months ago
CVE-2026-39835	Vulnerability in golang.org/x/crypto (CVE-2026-39835) vulnerability in golang.org/x/crypto (CVE-2026-39835). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.52.0` or later.	Medium	Cwe 295 Golang Crypto Cwe 476	3 months ago
CVE-2026-39828	Vulnerability in golang.org/x/crypto (CVE-2026-39828) vulnerability in golang.org/x/crypto (CVE-2026-39828). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.52.0` or later.	Medium	Cwe 295 Golang Crypto Cwe 281	3 months ago
CVE-2026-48246	Vulnerability in CVE-2026-48246 (CVE-2026-48246) vulnerability in CVE-2026-48246 (CVE-2026-48246). Confidential information can be exposed externally.	Medium	PHP Cwe 295	3 months ago
CVE-2026-48247	Vulnerability in CVE-2026-48247 (CVE-2026-48247) vulnerability in CVE-2026-48247 (CVE-2026-48247). Confidential information can be exposed externally.	Medium	PHP Cwe 295	3 months ago
CVE-2026-48249	Vulnerability in CVE-2026-48249 (CVE-2026-48249) vulnerability in CVE-2026-48249 (CVE-2026-48249). Confidential information can be exposed externally.	Medium	PHP Cwe 295	3 months ago
CVE-2026-48248	Vulnerability in CVE-2026-48248 (CVE-2026-48248) vulnerability in CVE-2026-48248 (CVE-2026-48248). Confidential information can be exposed externally.	Medium	PHP Cwe 295	3 months ago
CVE-2026-45388	Vulnerability in tls (CVE-2026-45388) vulnerability in tls (CVE-2026-45388). Confidential information can be exposed externally. Mitigation: upgrade to `2.1.0, 6a12247b3fbd747972ad2d35b74d9a89f6404952` or later.	Critical	Cwe 295	3 months ago
CVE-2026-45389	Vulnerability in tls (CVE-2026-45389) vulnerability in tls (CVE-2026-45389). Confidential information can be exposed externally. Mitigation: upgrade to `2.1.0, b1a598ef9be83a4f8b0f73a4e2d9730d50906049` or later.	High	Cwe 295	3 months ago
CVE-2026-41119	Vulnerability in CVE-2026-41119 (CVE-2026-41119) vulnerability in CVE-2026-41119 (CVE-2026-41119). Confidential information can be exposed externally.	Medium	Cwe 295	3 months ago
CVE-2026-45574	Vulnerability in com.oviva.telematik:epa4all-client (CVE-2026-45574) vulnerability in com.oviva.telematik:epa4all-client (CVE-2026-45574). Confidential information can be exposed externally. Mitigation: upgrade to `1.2.2` or later.	High	Java Cwe 295	3 months ago
CVE-2026-23998	Vulnerability in github.com/fleetdm/fleet/v4 (CVE-2026-23998) vulnerability in github.com/fleetdm/fleet/v4 (CVE-2026-23998). Confidential information can be exposed externally. Mitigation: upgrade to `4.81.0` or later.	High	Cwe 295 Fleetdm Fleet	3 months ago
CVE-2026-32992	Vulnerability in cpanel (CVE-2026-32992) vulnerability in cpanel (CVE-2026-32992). Confidential information can be exposed externally.	High	Cwe 295 Cpanel Wp Squared Whm	3 months ago
CVE-2026-44363	Vulnerability in misp-modules (CVE-2026-44363) vulnerability in misp-modules (CVE-2026-44363). Risk of unauthorized operations or information disclosure.		Cwe 295 Cwe 918	3 months ago
CVE-2026-41132	Vulnerability in ckan (CVE-2026-41132) vulnerability in ckan (CVE-2026-41132). Confidential information can be exposed externally. Mitigation: upgrade to `2.10.10` or later.	High	Cwe 295 Okfn Ckan	3 months ago

Vulnerabilities

🍪 About cookies