Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-20 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-43725	Vulnerability in apple (CVE-2026-43725) vulnerability in apple (CVE-2026-43725). Risk of unauthorized operations or information disclosure.	High	Cwe 20 Apple Safari Ipados +2	1 week ago
CVE-2026-43708	Vulnerability in apple (CVE-2026-43708) vulnerability in apple (CVE-2026-43708). Risk of unauthorized operations or information disclosure.	Medium	Cwe 20 Apple Safari Ipados +2	1 week ago
CVE-2026-39868	Vulnerability in apple (CVE-2026-39868) vulnerability in apple (CVE-2026-39868). Data can be tampered with by attackers.	Critical	Cwe 20 Apple Ipados Iphone Os +1	1 week ago
CVE-2026-38639	Vulnerability in dos (CVE-2026-38639) vulnerability in dos (CVE-2026-38639). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20	1 week ago
CVE-2026-52780	Vulnerability in CVE-2026-52780 (CVE-2026-52780) vulnerability in CVE-2026-52780 (CVE-2026-52780). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `17.3.3` or later.	Critical	Remote Code Execution Cwe 20	1 week ago
CVE-2026-13434	Vulnerability in kubevirt (CVE-2026-13434) vulnerability in kubevirt (CVE-2026-13434). Risk of unauthorized operations or information disclosure.	Medium	Cwe 20 Kubevirt Redhat Openshift Virtualization	1 week ago
CVE-2026-42388	Incomplete validation of the SOA record present in a catalog zone might lead to a crash. Incomplete validation of the SOA record present in a catalog zone might lead to a crash.	Medium	Cwe 20	1 week ago
CVE-2026-42387	Vulnerability in CVE-2026-42387 (CVE-2026-42387) vulnerability in CVE-2026-42387 (CVE-2026-42387). Risk of unauthorized operations or information disclosure.	Medium	Cwe 20	1 week ago
CVE-2026-42390	Vulnerability in CVE-2026-42390 (CVE-2026-42390) vulnerability in CVE-2026-42390 (CVE-2026-42390). Risk of unauthorized operations or information disclosure.	Medium	Cwe 20	1 week ago
CVE-2026-42389	Vulnerability in CVE-2026-42389 (CVE-2026-42389) vulnerability in CVE-2026-42389 (CVE-2026-42389). Risk of unauthorized operations or information disclosure.	Medium	Cwe 20	1 week ago
CVE-2026-12246	Vulnerability in nlnetlabs (CVE-2026-12246) vulnerability in nlnetlabs (CVE-2026-12246). Data can be tampered with by attackers.	High	Cwe 20 Cwe 120 Nlnetlabs Nsd	1 week ago
CVE-2026-13025	Vulnerability in google (CVE-2026-13025) vulnerability in google (CVE-2026-13025). Successful exploitation can lead to full system takeover.	High	Cwe 20 Google Chrome Apple +5	1 week ago
CVE-2026-13024	Vulnerability in google (CVE-2026-13024) vulnerability in google (CVE-2026-13024). Risk of unauthorized operations or information disclosure.	Medium	Cwe 20 Google Chrome Apple +5	1 week ago
CVE-2026-48720	Vulnerability in CVE-2026-48720 (CVE-2026-48720) vulnerability in CVE-2026-48720 (CVE-2026-48720). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.2026.05.06.15.42.stable` or later.	High	Cwe 20 Cwe 73	1 week ago
CVE-2026-48704	Vulnerability in CVE-2026-48704 (CVE-2026-48704) vulnerability in CVE-2026-48704 (CVE-2026-48704). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.2026.05.06.15.42.stable` or later.	High	Cwe 20	1 week ago
CVE-2026-12537	Vulnerability in google (CVE-2026-12537) vulnerability in google (CVE-2026-12537). Successful exploitation can lead to full system takeover.	High	Cwe 20 Cwe 78 Google Gemini Cli +1	2 weeks ago
CVE-2026-13006	Vulnerability in CVE-2026-13006 (CVE-2026-13006) vulnerability in CVE-2026-13006 (CVE-2026-13006). Risk of unauthorized operations or information disclosure.		Java Cwe 20	2 weeks ago
CVE-2026-54588	Vulnerability in CVE-2026-54588 (CVE-2026-54588) vulnerability in CVE-2026-54588 (CVE-2026-54588). Confidential information can be exposed externally. Exploitable via ``HTTP_HOST``.	Critical	Cwe 20 Cwe 601	2 weeks ago
CVE-2026-56762	Vulnerability in CVE-2026-56762 (CVE-2026-56762) vulnerability in CVE-2026-56762 (CVE-2026-56762). Risk of unauthorized operations or information disclosure. Exploitable via `Cookie header`.	Medium	JavaScript Cwe 113 Cwe 20	2 weeks ago
CVE-2026-10651	Vulnerability in c (CVE-2026-10651) vulnerability in c (CVE-2026-10651). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 20 Cwe 617 +2	2 weeks ago
CVE-2026-52801	Vulnerability in gogs.io/gogs (CVE-2026-52801) vulnerability in gogs.io/gogs (CVE-2026-52801). Confidential information can be exposed externally. Mitigation: upgrade to `0.14.3` or later.	High	Cwe 20	2 weeks ago
CVE-2026-56306	Vulnerability in CVE-2026-56306 (CVE-2026-56306) vulnerability in CVE-2026-56306 (CVE-2026-56306). Risk of unauthorized operations or information disclosure.	Medium	Cwe 20	2 weeks ago
CVE-2025-64719	Vulnerability in gogs.io/gogs (CVE-2025-64719) vulnerability in gogs.io/gogs (CVE-2025-64719). Risk of unauthorized operations or information disclosure. Exploitable via ``view.go``. Mitigation: upgrade to `0.14.3` or later.	Medium	Denial of Service Cwe 20	2 weeks ago
CVE-2026-7165	Vulnerability in dos (CVE-2026-7165) vulnerability in dos (CVE-2026-7165). Risk of unauthorized operations or information disclosure.		Denial of Service Cwe 20	2 weeks ago
CVE-2026-12787	Vulnerability in deserialization (CVE-2026-12787) vulnerability in deserialization (CVE-2026-12787). Risk of unauthorized operations or information disclosure.	Medium	Insecure Deserialization Cwe 20 Cwe 502	2 weeks ago
CVE-2026-56340	Vulnerability in dos (CVE-2026-56340) vulnerability in dos (CVE-2026-56340). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 20 vLLM Cwe 787	2 weeks ago
CVE-2026-56325	Vulnerability in CVE-2026-56325 (CVE-2026-56325) vulnerability in CVE-2026-56325 (CVE-2026-56325). Risk of unauthorized operations or information disclosure.	Low	Cwe 20	2 weeks ago
CVE-2026-56228	Vulnerability in dos (CVE-2026-56228) vulnerability in dos (CVE-2026-56228). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 20	2 weeks ago
CVE-2026-54911	Vulnerability in ujson (CVE-2026-54911) vulnerability in ujson (CVE-2026-54911). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.13.0` or later.	Medium	Python C Cwe 20 Ultrajson Project +1	2 weeks ago
CVE-2026-48774	Vulnerability in CVE-2026-48774 (CVE-2026-48774) vulnerability in CVE-2026-48774 (CVE-2026-48774). Data can be tampered with by attackers. Exploitable via ``run_sql_readonly``.	High	Cwe 20	2 weeks ago
CVE-2026-53492	Vulnerability in github.com/containerd/containerd/v2 (CVE-2026-53492) vulnerability in github.com/containerd/containerd/v2 (CVE-2026-53492). Confidential information can be exposed externally. Mitigation: upgrade to `2.3.2` or later.	Critical	Cwe 20 Cwe 863 Linuxfoundation containerd	2 weeks ago
CVE-2026-53488	Vulnerability in github.com/containerd/containerd (CVE-2026-53488) vulnerability in github.com/containerd/containerd (CVE-2026-53488). Successful exploitation can lead to full system takeover. Exploitable via ``LABEL``. Mitigation: upgrade to `1.7.33` or later.	High	Cwe 20 Linuxfoundation containerd	2 weeks ago
CVE-2026-21768	Vulnerability in CVE-2026-21768 (CVE-2026-21768) vulnerability in CVE-2026-21768 (CVE-2026-21768). Confidential information can be exposed externally.	Medium	Cwe 20 Cwe 79	2 weeks ago
CVE-2026-39998	Vulnerability in apache (CVE-2026-39998) vulnerability in apache (CVE-2026-39998). Successful exploitation can lead to full system takeover.	High	Apache Cwe 20 Apisix	2 weeks ago
CVE-2026-55602	Vulnerability in http-proxy-middleware (CVE-2026-55602) vulnerability in http-proxy-middleware (CVE-2026-55602). Data can be tampered with by attackers. Exploitable via ``router``. Mitigation: upgrade to `2.0.10` or later.	High	JavaScript Cwe 20 Cwe 187 Chimurai +1	2 weeks ago
CVE-2026-12569 KEV	[KEV] Vulnerability in Ptc deserialization (CVE-2026-12569) vulnerability in Ptc deserialization (CVE-2026-12569). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Remote Code Execution Insecure Deserialization Cwe 20 Cwe 502 +3	2 weeks ago
CVE-2026-50196	Vulnerability in Steeltoe.Discovery.Eureka (CVE-2026-50196) vulnerability in Steeltoe.Discovery.Eureka (CVE-2026-50196). Risk of unauthorized operations or information disclosure. Exploitable via ``DataCenterInfo.FromJson``. Mitigation: upgrade to `3.4.0` or later.	High	Java Insecure Deserialization Cwe 20 Cwe 400	2 weeks ago
CVE-2026-12456	Vulnerability in google (CVE-2026-12456) vulnerability in google (CVE-2026-12456). Risk of unauthorized operations or information disclosure.	Medium	Cwe 20 Google Chrome Apple +5	2 weeks ago
CVE-2026-12453	Vulnerability in google (CVE-2026-12453) vulnerability in google (CVE-2026-12453). Risk of unauthorized operations or information disclosure.	Medium	Cwe 20 Google Chrome Apple +5	2 weeks ago
CVE-2026-12465	Vulnerability in google (CVE-2026-12465) vulnerability in google (CVE-2026-12465). Successful exploitation can lead to full system takeover.	High	Cwe 20 Google Chrome Apple +5	2 weeks ago
CVE-2025-48643	Vulnerability in google (CVE-2025-48643) vulnerability in google (CVE-2025-48643). Successful exploitation can lead to full system takeover.	High	Cwe 20 Google Android	2 weeks ago
CVE-2026-46910	Vulnerability in c (CVE-2026-46910) vulnerability in c (CVE-2026-46910). Confidential information can be exposed externally.	Critical	C Denial of Service Cwe 20 Cwe 200 +5	2 weeks ago
CVE-2026-48055	Vulnerability in path-traversal (CVE-2026-48055) vulnerability in path-traversal (CVE-2026-48055). Data can be tampered with by attackers.	Critical	Path Traversal Cwe 20 Cwe 22	3 weeks ago
CVE-2026-0142	Vulnerability in c (CVE-2026-0142) vulnerability in c (CVE-2026-0142). Risk of unauthorized operations or information disclosure.	Low	C Cwe 20 Cwe 125 Google +1	3 weeks ago
CVE-2026-49444	Vulnerability in n8n (CVE-2026-49444) vulnerability in n8n (CVE-2026-49444). Confidential information can be exposed externally. Exploitable via ``NODES_EXCLUDE``. Mitigation: upgrade to `2.21.8` or later.	High	Python Cwe 20 N8N	3 weeks ago
CVE-2026-54299	Vulnerability in astro (CVE-2026-54299) vulnerability in astro (CVE-2026-54299). Confidential information can be exposed externally. Exploitable via ``request.url``. Mitigation: upgrade to `6.4.6` or later.	High	Cwe 20 Cwe 918 Astro	3 weeks ago
CVE-2026-53537	Vulnerability in python-multipart (CVE-2026-53537) vulnerability in python-multipart (CVE-2026-53537). Risk of unauthorized operations or information disclosure. Exploitable via ``parse_options_header``. Mitigation: upgrade to `0.0.30` or later.	Low	Python Cwe 20 Cwe 436 Fastapiexpert +1	3 weeks ago
CVE-2026-12191	Vulnerability in deserialization (CVE-2026-12191) vulnerability in deserialization (CVE-2026-12191). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 20 Cwe 502 Python	3 weeks ago
CVE-2025-58175	Vulnerability in org.geoserver.web:gs-web-app (CVE-2025-58175) vulnerability in org.geoserver.web:gs-web-app (CVE-2025-58175). Confidential information can be exposed externally. Exploitable via ``ENTITY_RESOLUTION_ALLOWLIST``. Mitigation: upgrade to `2.27.3` or later.	Medium	Server-Side Request Forgery Cwe 20 Cwe 611 Cwe 918 +2	3 weeks ago
CVE-2026-54133	Vulnerability in jmespath (CVE-2026-54133) vulnerability in jmespath (CVE-2026-54133). Successful exploitation can lead to full system takeover. Exploitable via ``JP_PHP_COMPILE``. Mitigation: upgrade to `2.9.1` or later.	Critical	PHP Cwe 20 Cwe 94 Cwe 116 +1	3 weeks ago

Vulnerabilities

🍪 About cookies