Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-307 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-53904	Vulnerability in dos (CVE-2026-53904) vulnerability in dos (CVE-2026-53904). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 307 Cwe 640 Mycomplianceoffice +1	1 week ago
CVE-2026-35098	Vulnerability in CVE-2026-35098 (CVE-2026-35098) vulnerability in CVE-2026-35098 (CVE-2026-35098). Risk of unauthorized operations or information disclosure.		Cwe 307	1 week ago
CVE-2026-11779	Vulnerability in CVE-2026-11779 (CVE-2026-11779) vulnerability in CVE-2026-11779 (CVE-2026-11779). Risk of unauthorized operations or information disclosure.		Cwe 307	1 week ago
CVE-2026-50176	Vulnerability in CVE-2026-50176 (CVE-2026-50176) vulnerability in CVE-2026-50176 (CVE-2026-50176). Risk of unauthorized operations or information disclosure.	High	Cwe 307	1 week ago
CVE-2026-56234	Vulnerability in CVE-2026-56234 (CVE-2026-56234) vulnerability in CVE-2026-56234 (CVE-2026-56234). Risk of unauthorized operations or information disclosure. Exploitable via `POST /functions/v1/private/validate_password_compliance`.	Medium	Cwe 307	2 weeks ago
CVE-2026-56450	Vulnerability in CVE-2026-56450 (CVE-2026-56450) vulnerability in CVE-2026-56450 (CVE-2026-56450). Risk of unauthorized operations or information disclosure.		Cwe 307	2 weeks ago
CVE-2026-6853	Vulnerability in CVE-2026-6853 (CVE-2026-6853) vulnerability in CVE-2026-6853 (CVE-2026-6853). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 307	3 weeks ago
CVE-2026-3329	Vulnerability in CVE-2026-3329 (CVE-2026-3329) vulnerability in CVE-2026-3329 (CVE-2026-3329). Risk of unauthorized operations or information disclosure.		Cwe 307	3 weeks ago
CVE-2025-2414	Vulnerability in CVE-2025-2414 (CVE-2025-2414) vulnerability in CVE-2025-2414 (CVE-2025-2414). Confidential information can be exposed externally.	High	Authentication Bypass Cwe 307	1 month ago
CVE-2025-2415	Vulnerability in CVE-2025-2415 (CVE-2025-2415) vulnerability in CVE-2025-2415 (CVE-2025-2415). Confidential information can be exposed externally.	High	Authentication Bypass Cwe 307	1 month ago
CVE-2026-47380	Vulnerability in nocodb (CVE-2026-47380) vulnerability in nocodb (CVE-2026-47380). Risk of unauthorized operations or information disclosure. Exploitable via ``auth.service.ts``. Mitigation: upgrade to `2026.04.1` or later.		Cwe 208 Cwe 307	1 month ago
CVE-2026-43926	Vulnerability in nginx (CVE-2026-43926) vulnerability in nginx (CVE-2026-43926). Risk of unauthorized operations or information disclosure.		nginx Apache Cwe 204 Cwe 307	1 month ago
CVE-2026-36612	Vulnerability in CVE-2026-36612 (CVE-2026-36612) vulnerability in CVE-2026-36612 (CVE-2026-36612). Confidential information can be exposed externally.	Medium	Cwe 307 Cwe 1188	1 month ago
CVE-2026-36607	Vulnerability in CVE-2026-36607 (CVE-2026-36607) vulnerability in CVE-2026-36607 (CVE-2026-36607). Successful exploitation can lead to full system takeover.	High	Cwe 307	1 month ago
CVE-2026-10216	Vulnerability in CVE-2026-10216 (CVE-2026-10216) vulnerability in CVE-2026-10216 (CVE-2026-10216). Risk of unauthorized operations or information disclosure.	Low	Cwe 307 Cwe 799	1 month ago
CVE-2026-47203	Vulnerability in github.com/authelia/authelia/v4 (CVE-2026-47203) vulnerability in github.com/authelia/authelia/v4 (CVE-2026-47203). Risk of unauthorized operations or information disclosure. Exploitable via ``Authorization``. Mitigation: upgrade to `4.39.20` or later.		Cwe 178 Cwe 307	1 month ago
CVE-2026-49324	Vulnerability in CVE-2026-49324 (CVE-2026-49324) vulnerability in CVE-2026-49324 (CVE-2026-49324). Risk of unauthorized operations or information disclosure.	Medium	Cwe 307 Cwe 400 Cwe 770	1 month ago
CVE-2026-8760	Vulnerability in wordpress (CVE-2026-8760) vulnerability in wordpress (CVE-2026-8760). Successful exploitation can lead to full system takeover.	Critical	WordPress Authentication Bypass Cwe 307	1 month ago
CVE-2026-1816	Vulnerability in CVE-2026-1816 (CVE-2026-1816) vulnerability in CVE-2026-1816 (CVE-2026-1816). Confidential information can be exposed externally.	Medium	Cwe 307	1 month ago
CVE-2026-35675	Vulnerability in thorsten/phpmyfaq (CVE-2026-35675) vulnerability in thorsten/phpmyfaq (CVE-2026-35675). Data can be tampered with by attackers. Mitigation: upgrade to `4.1.3` or later.	High	Authentication Bypass Cwe 307	1 month ago
CVE-2025-61081	Vulnerability in CVE-2025-61081 (CVE-2025-61081) vulnerability in CVE-2025-61081 (CVE-2025-61081). Data can be tampered with by attackers.	High	Cwe 307	1 month ago
CVE-2020-37228	Vulnerability in CVE-2020-37228 (CVE-2020-37228) vulnerability in CVE-2020-37228 (CVE-2020-37228). Successful exploitation can lead to full system takeover.	Critical	Cwe 307	1 month ago
CVE-2026-45010	Vulnerability in thorsten/phpmyfaq (CVE-2026-45010) vulnerability in thorsten/phpmyfaq (CVE-2026-45010). Confidential information can be exposed externally. Exploitable via `POST /admin/check`. Mitigation: upgrade to `4.1.2` or later.	Critical	Cwe 307	1 month ago
CVE-2026-45364	Vulnerability in better-auth (CVE-2026-45364) vulnerability in better-auth (CVE-2026-45364). Risk of unauthorized operations or information disclosure. Exploitable via ``normalizeIP``. Mitigation: upgrade to `1.5.0-beta.9` or later.	High	Cwe 307	1 month ago
CVE-2025-62313	Vulnerability in CVE-2025-62313 (CVE-2025-62313) vulnerability in CVE-2025-62313 (CVE-2025-62313). Risk of unauthorized operations or information disclosure.	Medium	Cwe 307	1 month ago
CVE-2026-44195	Vulnerability in opnsense (CVE-2026-44195) vulnerability in opnsense (CVE-2026-44195). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.1.7` or later.	Medium	Cwe 307 Opnsense	1 month ago
CVE-2025-64526	Vulnerability in @strapi/plugin-users-permissions (CVE-2025-64526) vulnerability in @strapi/plugin-users-permissions (CVE-2025-64526). Risk of unauthorized operations or information disclosure. Exploitable via ``ctx.request.body.email``. Mitigation: upgrade to `5.45.0` or later.	Medium	Cwe 307 Strapi	1 month ago
CVE-2026-7255	Vulnerability in zyxel (CVE-2026-7255) vulnerability in zyxel (CVE-2026-7255). Confidential information can be exposed externally.	Medium	Cwe 307 Zyxel Wre6505 Firmware Wre6505	1 month ago
CVE-2026-43914	Vulnerability in dani-garcia (CVE-2026-43914) vulnerability in dani-garcia (CVE-2026-43914). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35.4` or later.	High	Rust Cwe 307 Dani Garcia Vaultwarden	1 month ago
CVE-2026-7820	Vulnerability in pgadmin4 (CVE-2026-7820) vulnerability in pgadmin4 (CVE-2026-7820). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.15` or later.	Medium	Flask Cwe 307 Pgadmin Pgadmin 4	1 month ago
CVE-2026-41893	Vulnerability in signalk-server (CVE-2026-41893) vulnerability in signalk-server (CVE-2026-41893). Data can be tampered with by attackers. Exploitable via `POST /login`. Mitigation: upgrade to `2.25.0` or later.	High	Express Cwe 307 Signalk Signal K Server	1 month ago
CVE-2025-2514	Vulnerability in hitachi (CVE-2025-2514) vulnerability in hitachi (CVE-2025-2514). Risk of unauthorized operations or information disclosure.	Medium	Cwe 307 Hitachi Virtual Storage One Block Vsp G130 Firmware +37	2 months ago
CVE-2026-36959	Vulnerability in u-speed (CVE-2026-36959) vulnerability in u-speed (CVE-2026-36959). Confidential information can be exposed externally.	High	Cwe 307 U Speed N300 Firmware N300	2 months ago
CVE-2026-6947	Vulnerability in CVE-2026-6947 (CVE-2026-6947) vulnerability in CVE-2026-6947 (CVE-2026-6947). Data can be tampered with by attackers.	High	Cwe 307	2 months ago
CVE-2026-41213	Vulnerability in node-oauth (CVE-2026-41213) vulnerability in node-oauth (CVE-2026-41213). Confidential information can be exposed externally.	Medium	JavaScript Cwe 307 Cwe 1289 Node Oauth +1	2 months ago
CVE-2025-46606	Vulnerability in dell (CVE-2025-46606) vulnerability in dell (CVE-2025-46606). Confidential information can be exposed externally.	Medium	Cwe 307 Dell Data Domain Operating System	2 months ago
CVE-2025-31991	Vulnerability in hcltech (CVE-2025-31991) vulnerability in hcltech (CVE-2025-31991). Data can be tampered with by attackers. Mitigation: upgrade to `5.1.7` or later.	Medium	Cwe 307 Hcltech Devops Velocity	2 months ago
CVE-2026-30789	Vulnerability in rustdesk (CVE-2026-30789) vulnerability in rustdesk (CVE-2026-30789). Successful exploitation can lead to full system takeover.	Critical	Cwe 307 Cwe 916 Rustdesk Apple +8	4 months ago
CVE-2025-7630	Authentication Bypass in CVE-2025-7630 (CVE-2025-7630) authentication bypass in CVE-2025-7630 (CVE-2025-7630). Risk of unauthorized operations or information disclosure.	Medium	Cwe 287 Cwe 307	4 months ago
CVE-2025-4319	Vulnerability in CVE-2025-4319 (CVE-2025-4319) vulnerability in CVE-2025-4319 (CVE-2025-4319). Confidential information can be exposed externally.	Critical	Cwe 307 Cwe 640	5 months ago
CVE-2025-1928	Vulnerability in restajet (CVE-2025-1928) vulnerability in restajet (CVE-2025-1928). Confidential information can be exposed externally.	Critical	Cwe 307 Restajet Online Food Delivery System	6 months ago
CVE-2025-65427	Vulnerability in dbitnet (CVE-2025-65427) vulnerability in dbitnet (CVE-2025-65427). Risk of unauthorized operations or information disclosure.	Medium	Cwe 307 Dbitnet Dbit N300 T1 Pro Firmware Dbit N300 T1 Pro	6 months ago
CVE-2025-10161	Vulnerability in CVE-2025-10161 (CVE-2025-10161) vulnerability in CVE-2025-10161 (CVE-2025-10161). Risk of unauthorized operations or information disclosure.	High	Authentication Bypass Cwe 307 Cwe 602 Cwe 807	7 months ago
CVE-2025-56224	Vulnerability in ascertia (CVE-2025-56224) vulnerability in ascertia (CVE-2025-56224). Successful exploitation can lead to full system takeover.	High	Cwe 307 Ascertia Signinghub	8 months ago
CVE-2025-2417	Vulnerability in CVE-2025-2417 (CVE-2025-2417) vulnerability in CVE-2025-2417 (CVE-2025-2417). Confidential information can be exposed externally.	High	Authentication Bypass Cwe 307	10 months ago
CVE-2025-2411	Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano... Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano...	High	Authentication Bypass Cwe 307	10 months ago
CVE-2025-2416	Vulnerability in CVE-2025-2416 (CVE-2025-2416) vulnerability in CVE-2025-2416 (CVE-2025-2416). Confidential information can be exposed externally.	High	Authentication Bypass Cwe 307	10 months ago
CVE-2025-1740	Vulnerability in CVE-2025-1740 (CVE-2025-1740) vulnerability in CVE-2025-1740 (CVE-2025-1740). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 307	10 months ago
CVE-2025-2413	Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor... Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor...	High	Authentication Bypass Cwe 307	10 months ago
CVE-2025-2412	Vulnerability in CVE-2025-2412 (CVE-2025-2412) vulnerability in CVE-2025-2412 (CVE-2025-2412). Confidential information can be exposed externally.	High	Authentication Bypass Cwe 307	10 months ago

Vulnerabilities

🍪 About cookies