Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2026-24457	Path Traversal in eclipse (CVE-2026-24457) path traversal in eclipse (CVE-2026-24457). Confidential information can be exposed externally.	Critical	Remote Code Execution Cwe 22 Cwe 27 Eclipse +1	5 months ago
CVE-2025-69534	Vulnerability in markdown (CVE-2025-69534) vulnerability in markdown (CVE-2025-69534). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.8.1` or later.	High	Python Denial of Service Cwe 400 Cwe 617 +2	5 months ago
CVE-2026-2743	Path Traversal in path-traversal (CVE-2026-2743) path traversal in path-traversal (CVE-2026-2743). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Path Traversal Cwe 22 Cwe 434 +1	5 months ago
CVE-2026-29000	Vulnerability in CVE-2026-29000 (CVE-2026-29000) vulnerability in CVE-2026-29000 (CVE-2026-29000). Confidential information can be exposed externally.	Critical	Authentication Bypass Cwe 347	5 months ago
CVE-2026-0847	Path Traversal in nltk (CVE-2026-0847) path traversal in nltk (CVE-2026-0847). Confidential information can be exposed externally. Mitigation: upgrade to `3.9.3` or later.	High	Remote Code Execution Path Traversal Cwe 22 Nltk	5 months ago
CVE-2026-20064	Vulnerability in dos (CVE-2026-20064) vulnerability in dos (CVE-2026-20064). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 476 Cisco Secure Firewall Threat Defense	5 months ago
CVE-2026-20025	Vulnerability in dos (CVE-2026-20025) vulnerability in dos (CVE-2026-20025). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 190 Cisco Firepower Threat Defense Software +2	5 months ago
CVE-2026-20024	Buffer Overflow in dos (CVE-2026-20024) vulnerability in dos (CVE-2026-20024). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 119 Cisco Adaptive Security Appliance Software +2	5 months ago
CVE-2026-20023	Out-of-Bounds Write in dos (CVE-2026-20023) out-of-bounds write in dos (CVE-2026-20023). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 787 Cisco Secure Firewall Threat Defense +1	5 months ago
CVE-2026-20021	Vulnerability in dos (CVE-2026-20021) vulnerability in dos (CVE-2026-20021). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 401 Cisco Adaptive Security Appliance Software +1	5 months ago
CVE-2026-20022	Vulnerability in dos (CVE-2026-20022) vulnerability in dos (CVE-2026-20022). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 823 Cisco Adaptive Security Appliance Software +1	5 months ago
CVE-2026-20020	Vulnerability in dos (CVE-2026-20020) vulnerability in dos (CVE-2026-20020). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 20 Cisco Adaptive Security Appliance Software +1	5 months ago
CVE-2026-20105	Vulnerability in dos (CVE-2026-20105) vulnerability in dos (CVE-2026-20105). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 401 Cisco Adaptive Security Appliance Software +1	5 months ago
CVE-2026-20106	Vulnerability in dos (CVE-2026-20106) vulnerability in dos (CVE-2026-20106). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 401 Cisco Adaptive Security Appliance Software +1	5 months ago
CVE-2026-20101	Vulnerability in dos (CVE-2026-20101) vulnerability in dos (CVE-2026-20101). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 330 Cisco Adaptive Security Appliance Software +1	5 months ago
CVE-2026-20103	Vulnerability in dos (CVE-2026-20103) vulnerability in dos (CVE-2026-20103). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770 Cisco Adaptive Security Appliance Software +1	5 months ago
CVE-2026-20102	Cross-Site Scripting (XSS) in cisco (CVE-2026-20102) cross-site scripting in cisco (CVE-2026-20102). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Cisco Adaptive Security Appliance Software +1	5 months ago
CVE-2026-20100	Vulnerability in dos (CVE-2026-20100) vulnerability in dos (CVE-2026-20100). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 120 Cisco Adaptive Security Appliance Software +1	5 months ago
CVE-2026-20070	Vulnerability in cisco (CVE-2026-20070) vulnerability in cisco (CVE-2026-20070). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 80 Cisco Adaptive Security Appliance Software +1	5 months ago
CVE-2026-20069	Vulnerability in cisco (CVE-2026-20069) vulnerability in cisco (CVE-2026-20069). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 444 Cisco Firepower Threat Defense Software +2	5 months ago
CVE-2026-20068	Vulnerability in dos (CVE-2026-20068) vulnerability in dos (CVE-2026-20068). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 248 Cisco Snort +3	5 months ago
CVE-2026-20065	Vulnerability in dos (CVE-2026-20065) vulnerability in dos (CVE-2026-20065). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 667 Cisco Snort +2	5 months ago
CVE-2026-20066	Vulnerability in dos (CVE-2026-20066) vulnerability in dos (CVE-2026-20066). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Denial of Service Cwe 400 Cisco +3	5 months ago
CVE-2026-20067	Out-of-Bounds Write in dos (CVE-2026-20067) out-of-bounds write in dos (CVE-2026-20067). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 787 Cisco Snort +3	5 months ago
CVE-2026-20058	Vulnerability in dos (CVE-2026-20058) vulnerability in dos (CVE-2026-20058). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 786 Cisco Snort +3	5 months ago
CVE-2026-20057	Vulnerability in dos (CVE-2026-20057) vulnerability in dos (CVE-2026-20057). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 369 Cisco Snort +3	5 months ago
CVE-2026-20050	Vulnerability in dos (CVE-2026-20050) vulnerability in dos (CVE-2026-20050). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 404 Cisco Secure Firewall Threat Defense	5 months ago
CVE-2026-20053	Vulnerability in dos (CVE-2026-20053) vulnerability in dos (CVE-2026-20053). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 122 Cisco Snort +3	5 months ago
CVE-2026-20054	Vulnerability in dos (CVE-2026-20054) vulnerability in dos (CVE-2026-20054). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 835 Cisco Snort +3	5 months ago
CVE-2026-20052	Vulnerability in dos (CVE-2026-20052) vulnerability in dos (CVE-2026-20052). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 788 Cisco Secure Firewall Threat Defense	5 months ago
CVE-2026-20039	Vulnerability in dos (CVE-2026-20039) vulnerability in dos (CVE-2026-20039). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 244 Cisco Adaptive Security Appliance Software +1	5 months ago
CVE-2026-20049	Vulnerability in c (CVE-2026-20049) vulnerability in c (CVE-2026-20049). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 131 Cisco +2	5 months ago
CVE-2026-20013	Vulnerability in dos (CVE-2026-20013) vulnerability in dos (CVE-2026-20013). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 401 Cisco Adaptive Security Appliance Software +1	5 months ago
CVE-2026-20014	Vulnerability in dos (CVE-2026-20014) vulnerability in dos (CVE-2026-20014). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 401 Cisco Adaptive Security Appliance Software +1	5 months ago
CVE-2026-20015	Vulnerability in dos (CVE-2026-20015) vulnerability in dos (CVE-2026-20015). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 401 Cisco Adaptive Security Appliance Software +1	5 months ago
CVE-2025-66024	Cross-Site Scripting (XSS) in org.xwiki.contrib.blog:application-blog-ui (CVE-2025-66024) cross-site scripting in org.xwiki.contrib.blog:application-blog-ui (CVE-2025-66024). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.15.7` or later.	Critical	JavaScript Cross-Site Scripting Privilege Escalation Cwe 79 +2	5 months ago
CVE-2026-20006	Vulnerability in dos (CVE-2026-20006) vulnerability in dos (CVE-2026-20006). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 388 Cisco Secure Firewall Threat Defense	5 months ago
CVE-2026-20002	SQL Injection in sqli (CVE-2026-20002) SQL injection in sqli (CVE-2026-20002). Confidential information can be exposed externally.	High	SQL Injection Cwe 89 Cisco Secure Firewall Management Center	5 months ago
CVE-2026-20003	SQL Injection in sqli (CVE-2026-20003) SQL injection in sqli (CVE-2026-20003). Confidential information can be exposed externally.	Medium	SQL Injection Cwe 89 Cisco Secure Firewall Management Center	5 months ago
CVE-2026-3520	Vulnerability in dos (CVE-2026-3520) vulnerability in dos (CVE-2026-3520). Risk of unauthorized operations or information disclosure.	High	JavaScript Denial of Service Cwe 674 Cwe 770 +2	5 months ago
CVE-2026-28518	Path Traversal in path-traversal (CVE-2026-28518) path traversal in path-traversal (CVE-2026-28518). Successful exploitation can lead to full system takeover.	High	Path Traversal Cwe 22 Volcengine Openviking	5 months ago
CVE-2026-25673	Vulnerability in django (CVE-2026-25673) vulnerability in django (CVE-2026-25673). Risk of unauthorized operations or information disclosure.	High	Django Denial of Service Cwe 400 Cwe 770 +1	5 months ago
CVE-2026-3343	Cross-Site Scripting (XSS) in watchguard (CVE-2026-3343) cross-site scripting in watchguard (CVE-2026-3343). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Watchguard +37	5 months ago
CVE-2026-23600	A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS). A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS).	Critical	Authentication Bypass Cwe 287 Hpe Autopass License Server	6 months ago
CVE-2026-2584	SQL Injection in sqli (CVE-2026-2584) SQL injection in sqli (CVE-2026-2584). Risk of unauthorized operations or information disclosure.		SQL Injection Cwe 89	6 months ago
CVE-2026-28516	SQL Injection in sqli (CVE-2026-28516) SQL injection in sqli (CVE-2026-28516). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Opendcim	6 months ago
CVE-2026-3304	Vulnerability in dos (CVE-2026-3304) vulnerability in dos (CVE-2026-3304). Risk of unauthorized operations or information disclosure.	High	JavaScript Denial of Service Cwe 459 Expressjs +1	6 months ago
CVE-2026-2359	Vulnerability in dos (CVE-2026-2359) vulnerability in dos (CVE-2026-2359). Risk of unauthorized operations or information disclosure.	High	JavaScript Denial of Service Cwe 772 Expressjs +1	6 months ago
CVE-2025-10990	Vulnerability in dos (CVE-2025-10990) vulnerability in dos (CVE-2025-10990). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 1333	6 months ago
CVE-2025-11252	SQL Injection in sqli (CVE-2025-11252) SQL injection in sqli (CVE-2025-11252). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Signumtte Windeskfm	6 months ago

Vulnerabilities

🍪 About cookies