Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-400 Clear

ID	Title	Severity	Tags	Detected
CVE-2022-21293	Vulnerability in java (CVE-2022-21293) vulnerability in java (CVE-2022-21293). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0, 1.8.0, 7.0.331, 8.0.321, 11.0.14, 17.0.2` or later.	Medium	Bitnami Java C Denial of Service +26	2 months ago
CVE-2022-21277	Vulnerability in java (CVE-2022-21277) vulnerability in java (CVE-2022-21277). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.14, 17.0.2` or later.	Medium	Bitnami Java C Denial of Service +24	2 months ago
CVE-2026-44167	Vulnerability in phpseclib/phpseclib (CVE-2026-44167) vulnerability in phpseclib/phpseclib (CVE-2026-44167). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.29` or later.	High	PHP Cwe 400	2 months ago
CVE-2026-32936	Vulnerability in github.com/coredns/coredns (CVE-2026-32936) vulnerability in github.com/coredns/coredns (CVE-2026-32936). Risk of unauthorized operations or information disclosure. Exploitable via ``dns``. Mitigation: upgrade to `1.14.3` or later.	High	Denial of Service Cwe 400 Corednsio Coredns +3	2 months ago
CVE-2026-42154	Vulnerability in github.com/prometheus/prometheus (CVE-2026-42154) vulnerability in github.com/prometheus/prometheus (CVE-2026-42154). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.11.3` or later.	High	Cwe 400 Cwe 789 Prometheus Cwe 770	2 months ago
CVE-2026-37459	Vulnerability in dos (CVE-2026-37459) vulnerability in dos (CVE-2026-37459). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cwe 191	2 months ago
CVE-2025-70071	Vulnerability in cpp (CVE-2025-70071) vulnerability in cpp (CVE-2025-70071). Risk of unauthorized operations or information disclosure.	Medium	C++ Denial of Service Cwe 400 Cwe 770 +1	2 months ago
CVE-2025-70069	Vulnerability in cpp (CVE-2025-70069) vulnerability in cpp (CVE-2025-70069). Risk of unauthorized operations or information disclosure.	High	C++ Denial of Service Cwe 400 Cwe 770 +1	2 months ago
CVE-2026-36957	Vulnerability in dos (CVE-2026-36957) vulnerability in dos (CVE-2026-36957). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Dbitnet Dbit N300 T1 Pro Firmware +1	2 months ago
CVE-2026-36958	Vulnerability in u-speed (CVE-2026-36958) vulnerability in u-speed (CVE-2026-36958). Risk of unauthorized operations or information disclosure.	High	Cwe 400 U Speed N300 Firmware N300	2 months ago
CVE-2026-41310	Vulnerability in OpenTelemetry.Exporter.Zipkin (CVE-2026-41310) vulnerability in OpenTelemetry.Exporter.Zipkin (CVE-2026-41310). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.15.3` or later.	Medium	C# Cwe 400 Cwe 770 Opentelemetry +1	2 months ago
CVE-2026-21728	Vulnerability in grafana (CVE-2026-21728) vulnerability in grafana (CVE-2026-21728). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Grafana Tempo Cwe 770	2 months ago
CVE-2026-6844	Vulnerability in dos (CVE-2026-6844) vulnerability in dos (CVE-2026-6844). Risk of unauthorized operations or information disclosure. Exploitable via ``readelf``.	Medium	Denial of Service Cwe 400 Gnu Binutils +4	2 months ago
CVE-2026-40924	Vulnerability in github.com/tektoncd/pipeline (CVE-2026-40924) vulnerability in github.com/tektoncd/pipeline (CVE-2026-40924). Risk of unauthorized operations or information disclosure. Exploitable via ``FetchHttpResource``. Mitigation: upgrade to `1.9.3` or later.	Medium	Cwe 400 Linuxfoundation Tekton Pipelines	2 months ago
CVE-2026-40192	Vulnerability in pillow (CVE-2026-40192) vulnerability in pillow (CVE-2026-40192). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.2.0` or later.	High	Python Denial of Service Cwe 400 Cwe 770 +2	2 months ago
CVE-2026-3505	Vulnerability in CVE-2026-3505 (CVE-2026-3505) vulnerability in CVE-2026-3505 (CVE-2026-3505). Risk of unauthorized operations or information disclosure.	High	Java Cwe 400 Cwe 770	2 months ago
CVE-2026-33116	Vulnerability in csharp (CVE-2026-33116) vulnerability in csharp (CVE-2026-33116). Risk of unauthorized operations or information disclosure.	High	C# Cwe 20 Cwe 400 Cwe 835 +22	2 months ago
CVE-2026-39304	Vulnerability in apache (CVE-2026-39304) vulnerability in apache (CVE-2026-39304). Risk of unauthorized operations or information disclosure.	High	Apache Denial of Service Cwe 400 Cwe 770 +2	2 months ago
CVE-2026-23869	Vulnerability in react (CVE-2026-23869) vulnerability in react (CVE-2026-23869). Risk of unauthorized operations or information disclosure.	High	React Denial of Service Cwe 400 Cwe 502 +1	2 months ago
CVE-2026-34045	Vulnerability in linuxfoundation (CVE-2026-34045) vulnerability in linuxfoundation (CVE-2026-34045). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.26.2` or later.	High	Cwe 209 Cwe 284 Cwe 400 Cwe 770 +2	3 months ago
CVE-2022-4986	Vulnerability in beldan (CVE-2022-4986) vulnerability in beldan (CVE-2022-4986). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Beldan Eaglesdv Firmware Eaglesdv	3 months ago
CVE-2024-14033	Vulnerability in CVE-2024-14033 (CVE-2024-14033) vulnerability in CVE-2024-14033 (CVE-2024-14033). Risk of unauthorized operations or information disclosure.	High	Cwe 400	3 months ago
CVE-2026-34829	Vulnerability in rack (CVE-2026-34829) vulnerability in rack (CVE-2026-34829). Risk of unauthorized operations or information disclosure. Exploitable via ``BoundedIO``. Mitigation: upgrade to `3.2.6` or later.	High	Ruby Denial of Service Cwe 400 Cwe 770 +1	3 months ago
CVE-2026-34827	Vulnerability in rack (CVE-2026-34827) vulnerability in rack (CVE-2026-34827). Risk of unauthorized operations or information disclosure. Exploitable via ``name``. Mitigation: upgrade to `3.2.6` or later.	High	Ruby Denial of Service Cwe 400 Cwe 407 +2	3 months ago
CVE-2026-27857	Vulnerability in dovecot (CVE-2026-27857) vulnerability in dovecot (CVE-2026-27857). Risk of unauthorized operations or information disclosure.	Medium	Cwe 400 Cwe 770 Dovecot Open Xchange	3 months ago
CVE-2026-27858	Vulnerability in dovecot (CVE-2026-27858) vulnerability in dovecot (CVE-2026-27858). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Cwe 770 Dovecot Open Xchange	3 months ago
CVE-2026-4926	Vulnerability in c (CVE-2026-4926) vulnerability in c (CVE-2026-4926). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 400 Cwe 1333 +2	3 months ago
CVE-2026-3116	Vulnerability in mattermost (CVE-2026-3116) vulnerability in mattermost (CVE-2026-3116). Risk of unauthorized operations or information disclosure.	Medium	Cwe 400 Mattermost Mattermost Server	3 months ago
CVE-2025-69654	Vulnerability in dos (CVE-2025-69654) vulnerability in dos (CVE-2025-69654). Risk of unauthorized operations or information disclosure. Exploitable via ``qjs``.	High	JavaScript Denial of Service Cwe 400 Quickjs Project +1	4 months ago
CVE-2026-26018	Vulnerability in dos (CVE-2026-26018) vulnerability in dos (CVE-2026-26018). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 337 Cwe 400 Cwe 770 +3	4 months ago
CVE-2026-26999	Vulnerability in traefik (CVE-2026-26999) vulnerability in traefik (CVE-2026-26999). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Cwe 772 Traefik	4 months ago
CVE-2025-69534	Vulnerability in markdown (CVE-2025-69534) vulnerability in markdown (CVE-2025-69534). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.8.1` or later.	High	Python Denial of Service Cwe 400 Cwe 617 +2	4 months ago
CVE-2026-1605	Vulnerability in eclipse (CVE-2026-1605) vulnerability in eclipse (CVE-2026-1605). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Cwe 401 Cwe 772 Eclipse +1	4 months ago
CVE-2026-25673	Vulnerability in django (CVE-2026-25673) vulnerability in django (CVE-2026-25673). Risk of unauthorized operations or information disclosure.	High	Django Denial of Service Cwe 400 Cwe 770 +1	4 months ago
CVE-2026-29049	Vulnerability in chainguard.dev/melange (CVE-2026-29049) vulnerability in chainguard.dev/melange (CVE-2026-29049). Risk of unauthorized operations or information disclosure. Exploitable via ``io.Copy``. Mitigation: upgrade to `0.43.4` or later.	Medium	C Cwe 400 Cwe 918 Chainguard +1	4 months ago
CVE-2025-67445	Vulnerability in totolink (CVE-2025-67445) vulnerability in totolink (CVE-2025-67445). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Totolink X5000R Firmware X5000R	4 months ago
CVE-2026-25535	Vulnerability in dos (CVE-2026-25535) vulnerability in dos (CVE-2026-25535). Risk of unauthorized operations or information disclosure. Exploitable via ``addImage``.	High	JavaScript Denial of Service Cwe 400 Cwe 770 +2	4 months ago
CVE-2026-25949	Vulnerability in dos (CVE-2026-25949) vulnerability in dos (CVE-2026-25949). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.8` or later.	High	Denial of Service Cwe 400 Cwe 770 Traefik	4 months ago
CVE-2025-69873	Vulnerability in dos (CVE-2025-69873) vulnerability in dos (CVE-2025-69873). Risk of unauthorized operations or information disclosure.	Low	JavaScript Denial of Service Cwe 1333 Cwe 400	4 months ago
CVE-2025-70999	Vulnerability in dos (CVE-2025-70999) vulnerability in dos (CVE-2025-70999). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Oneflow	5 months ago
CVE-2025-71000	Vulnerability in dos (CVE-2025-71000) vulnerability in dos (CVE-2025-71000). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Oneflow	5 months ago
CVE-2025-65891	Vulnerability in dos (CVE-2025-65891) vulnerability in dos (CVE-2025-65891). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Oneflow	5 months ago
CVE-2025-65886	Vulnerability in dos (CVE-2025-65886) vulnerability in dos (CVE-2025-65886). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Oneflow	5 months ago
CVE-2025-65888	Vulnerability in dos (CVE-2025-65888) vulnerability in dos (CVE-2025-65888). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Oneflow	5 months ago
CVE-2025-65889	Vulnerability in dos (CVE-2025-65889) vulnerability in dos (CVE-2025-65889). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Oneflow	5 months ago
CVE-2025-65890	Vulnerability in dos (CVE-2025-65890) vulnerability in dos (CVE-2025-65890). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Oneflow	5 months ago
CVE-2026-21720	Vulnerability in grafana (CVE-2026-21720) vulnerability in grafana (CVE-2026-21720). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Cwe 703 Cwe 772 Grafana	5 months ago
CVE-2026-23864	Vulnerability in react (CVE-2026-23864) vulnerability in react (CVE-2026-23864). Risk of unauthorized operations or information disclosure.	High	React Denial of Service Cwe 400 Cwe 502 +2	5 months ago
CVE-2026-24001	Vulnerability in kpdecker (CVE-2026-24001) vulnerability in kpdecker (CVE-2026-24001). Risk of unauthorized operations or information disclosure. Exploitable via ``parsePatch``.	High	JavaScript Cwe 400 Cwe 1333 Kpdecker +1	5 months ago
CVE-2025-59465	Vulnerability in dos (CVE-2025-59465) vulnerability in dos (CVE-2025-59465). Risk of unauthorized operations or information disclosure. Exploitable via ``HPACK``.	High	JavaScript Denial of Service Cwe 400 Cwe 248 +1	5 months ago

Vulnerabilities

🍪 About cookies