Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2026-44645	Vulnerability in liquidjs (CVE-2026-44645) vulnerability in liquidjs (CVE-2026-44645). Risk of unauthorized operations or information disclosure. Exploitable via ``renderLimit``.	Medium	JavaScript Denial of Service Cwe 400	3 months ago
CVE-2026-44644	Cross-Site Scripting (XSS) in liquidjs (CVE-2026-44644) cross-site scripting in liquidjs (CVE-2026-44644). Risk of unauthorized operations or information disclosure. Exploitable via ``strip_html``.	Medium	JavaScript Cross-Site Scripting Cwe 79	3 months ago
CVE-2026-44632	Code Injection in org.yamcs:yamcs-core (CVE-2026-44632) code injection in org.yamcs:yamcs-core (CVE-2026-44632). Successful exploitation can lead to full system takeover. Exploitable via ``ChangeMissionDatabase``. Mitigation: upgrade to `5.12.7` or later.	Critical	Java Remote Code Execution Cwe 94 Spaceapplications +1	3 months ago
CVE-2026-44587	Cross-Site Scripting (XSS) in carrierwave (CVE-2026-44587) cross-site scripting in carrierwave (CVE-2026-44587). Risk of unauthorized operations or information disclosure. Exploitable via ``Regexp.quote``. Mitigation: upgrade to `2.2.7` or later.	Medium	JavaScript Ruby Cross-Site Scripting Cwe 79 +4	3 months ago
CVE-2026-44177	Path Traversal in getkirby/cms (CVE-2026-44177) path traversal in getkirby/cms (CVE-2026-44177). Risk of unauthorized operations or information disclosure. Exploitable via ``Users``. Mitigation: upgrade to `5.4.1` or later.		PHP Path Traversal Cwe 22 Cwe 98	3 months ago
CVE-2026-44175	Cross-Site Scripting (XSS) in getkirby/cms (CVE-2026-44175) cross-site scripting in getkirby/cms (CVE-2026-44175). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.4.1` or later.		Cross-Site Scripting Cwe 79	3 months ago
CVE-2026-44174	Vulnerability in getkirby/cms (CVE-2026-44174) vulnerability in getkirby/cms (CVE-2026-44174). Risk of unauthorized operations or information disclosure. Exploitable via ``search``. Mitigation: upgrade to `5.4.1` or later.		Privilege Escalation Cwe 470	3 months ago
CVE-2026-43947	Authorization Flaw in fuxa-server (CVE-2026-43947) vulnerability in fuxa-server (CVE-2026-43947). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/runscript`. Mitigation: upgrade to `1.3.1` or later.		Remote Code Execution Cwe 863	3 months ago
CVE-2026-43945	Code Injection in @frangoteam/fuxa (CVE-2026-43945) code injection in @frangoteam/fuxa (CVE-2026-43945). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.1` or later.		Remote Code Execution Cwe 94 Cwe 284 Cwe 288 +1	3 months ago
CVE-2026-34986	Vulnerability in github.com/go-jose/go-jose/v3 (CVE-2026-34986) vulnerability in github.com/go-jose/go-jose/v3 (CVE-2026-34986). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.5` or later.	High	JavaScript Denial of Service Cwe 248 Cwe 131 +2	3 months ago
CVE-2026-5260	A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret... A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret...	High	Cwe 1284 TLS/SSL Remote Code Execution Cwe 126	3 months ago
CVE-2026-9584	A security vulnerability has been detected in code-projects Project Management System 1.0.... A security vulnerability has been detected in code-projects Project Management System 1.0....	High	PHP SQL Injection Cwe 74 Cwe 89 +2	3 months ago
CVE-2026-44905	Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verification pipeline of Vanetza.... Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verification pipeline of Vanetza. When processing incoming V2X messages, the ASN.1 decoder accepts the structure as syntactically val...	High	C C++ Cwe 248 Denial of Service +1	3 months ago
CVE-2026-42015	Vulnerability in dos (CVE-2026-42015) vulnerability in dos (CVE-2026-42015). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 193	3 months ago
CVE-2026-43988	Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When pro... Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When processing malformed network packets containing corrupted ASN.1/OER structures (e.g., invalid length fi...	High	C C++ Cwe 248 Denial of Service	3 months ago
CVE-2026-42013	A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name ... A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name ...	High	Cwe 1284 Gnutls Authentication Bypass Cwe 295	3 months ago
CVE-2026-45412	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-45412) SSRF in ssrf (CVE-2026-45412). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.9.1` or later.		Server-Side Request Forgery Cwe 918	3 months ago
CVE-2026-42335	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-42335) SSRF in ssrf (CVE-2026-42335). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.8.1` or later.		Server-Side Request Forgery Cwe 918	3 months ago
CVE-2026-42336	Vulnerability in ssrf (CVE-2026-42336) vulnerability in ssrf (CVE-2026-42336). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.8.1` or later.		Server-Side Request Forgery Cwe 367 Cwe 918	3 months ago
CVE-2025-68711	Vulnerability in c (CVE-2025-68711) vulnerability in c (CVE-2025-68711). Risk of unauthorized operations or information disclosure.	Low	C Privilege Escalation Cwe 288	3 months ago
CVE-2025-68708	Vulnerability in c (CVE-2025-68708) vulnerability in c (CVE-2025-68708). Risk of unauthorized operations or information disclosure.	Low	C Privilege Escalation Cwe 288	3 months ago
CVE-2026-9573	Vulnerability in sqli (CVE-2026-9573) vulnerability in sqli (CVE-2026-9573). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-9574	Vulnerability in sqli (CVE-2026-9574) vulnerability in sqli (CVE-2026-9574). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-9575	Vulnerability in sqli (CVE-2026-9575) vulnerability in sqli (CVE-2026-9575). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2025-68709	Cross-Site Scripting (XSS) in privilege-escalation (CVE-2025-68709) cross-site scripting in privilege-escalation (CVE-2025-68709). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Privilege Escalation Cwe 79	3 months ago
CVE-2025-68710	Vulnerability in c (CVE-2025-68710) vulnerability in c (CVE-2025-68710). Risk of unauthorized operations or information disclosure.	Low	C Privilege Escalation Cwe 288	3 months ago
CVE-2026-48047	Vulnerability in org.xwiki.platform:xwiki-platform-webjars-api (CVE-2026-48047) vulnerability in org.xwiki.platform:xwiki-platform-webjars-api (CVE-2026-48047). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `17.10.3` or later.		Path Traversal Cwe 24	3 months ago
CVE-2026-8890	Vulnerability in CVE-2026-8890 (CVE-2026-8890) vulnerability in CVE-2026-8890 (CVE-2026-8890). Confidential information can be exposed externally.	High	Authentication Bypass Cwe 639	3 months ago
CVE-2026-9170	Code Injection in dos (CVE-2026-9170) code injection in dos (CVE-2026-9170). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Denial of Service Cwe 444 Cwe 94 +2	3 months ago
CVE-2026-8633	Code Injection in ibm (CVE-2026-8633) code injection in ibm (CVE-2026-8633). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 94 Ibm Websphere Application Server	3 months ago
CVE-2026-8855	Code Injection in dos (CVE-2026-8855) code injection in dos (CVE-2026-8855). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Denial of Service Cwe 94 Ibm +7	3 months ago
CVE-2026-9566	Cross-Site Scripting (XSS) in CVE-2026-9566 (CVE-2026-9566) cross-site scripting in CVE-2026-9566 (CVE-2026-9566). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Cwe 94	3 months ago
CVE-2026-9560	OS Command Injection in privilege-escalation (CVE-2026-9560) OS command injection in privilege-escalation (CVE-2026-9560). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 78 Cwe 267 Cwe 270 +3	3 months ago
CVE-2026-8835	Vulnerability in dos (CVE-2026-8835) vulnerability in dos (CVE-2026-8835). Confidential information can be exposed externally.	High	Denial of Service Cwe 822 Ibm Http Server +6	3 months ago
CVE-2026-8856	Vulnerability in dos (CVE-2026-8856) vulnerability in dos (CVE-2026-8856). Data can be tampered with by attackers.	High	Denial of Service Cwe 400 Ibm Http Server +6	3 months ago
CVE-2026-8834	Vulnerability in dos (CVE-2026-8834) vulnerability in dos (CVE-2026-8834). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 122 Ibm Http Server +6	3 months ago
CVE-2026-8854	Vulnerability in dos (CVE-2026-8854) vulnerability in dos (CVE-2026-8854). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 825 Ibm Http Server +6	3 months ago
CVE-2026-24196	Out-of-Bounds Read in dos (CVE-2026-24196) vulnerability in dos (CVE-2026-24196). Confidential information can be exposed externally.	High	Denial of Service Cwe 125 Nvidia Gpu Display Driver	3 months ago
CVE-2026-24191	Vulnerability in dos (CVE-2026-24191) vulnerability in dos (CVE-2026-24191). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 367 Nvidia Gpu Display Driver	3 months ago
CVE-2026-24195	Vulnerability in dos (CVE-2026-24195) vulnerability in dos (CVE-2026-24195). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Nvidia Gpu Display Driver	3 months ago
CVE-2026-24198	Information Disclosure in dos (CVE-2026-24198) vulnerability in dos (CVE-2026-24198). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 200	3 months ago
CVE-2026-24199	Vulnerability in dos (CVE-2026-24199) vulnerability in dos (CVE-2026-24199). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 362 Nvidia Gpu Display Driver +5	3 months ago
CVE-2026-24201	Out-of-Bounds Write in dos (CVE-2026-24201) out-of-bounds write in dos (CVE-2026-24201). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 787	3 months ago
CVE-2026-24200	Use-After-Free in dos (CVE-2026-24200) vulnerability in dos (CVE-2026-24200). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 416	3 months ago
CVE-2026-24197	Vulnerability in dos (CVE-2026-24197) vulnerability in dos (CVE-2026-24197). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 1188 Nvidia Gpu Display Driver	3 months ago
CVE-2025-33221	Vulnerability in dos (CVE-2025-33221) vulnerability in dos (CVE-2025-33221). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 20 Nvidia Gpu Display Driver	3 months ago
CVE-2026-24190	Vulnerability in dos (CVE-2026-24190) vulnerability in dos (CVE-2026-24190). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 862 Nvidia Gpu Display Driver	3 months ago
CVE-2026-24187	Use-After-Free in dos (CVE-2026-24187) vulnerability in dos (CVE-2026-24187). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 416 Nvidia Gpu Display Driver	3 months ago
CVE-2026-24192	Vulnerability in dos (CVE-2026-24192) vulnerability in dos (CVE-2026-24192). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 681 Nvidia Gpu Display Driver	3 months ago
CVE-2026-24182	Vulnerability in dos (CVE-2026-24182) vulnerability in dos (CVE-2026-24182). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 667 Nvidia Gpu Display Driver	3 months ago

Vulnerabilities

🍪 About cookies