Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2026-73628	Cross-Site Scripting (XSS) in CVE-2026-73628 (CVE-2026-73628) cross-site scripting in CVE-2026-73628 (CVE-2026-73628). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.1` or later.	Medium	PHP JavaScript Cross-Site Scripting Cwe 79	3 weeks ago
CVE-2026-73619	Vulnerability in gitpython-project (CVE-2026-73619) vulnerability in gitpython-project (CVE-2026-73619). Confidential information can be exposed externally.	Medium	Cwe 73 Gitpython Project Gitpython	3 weeks ago
CVE-2026-73613	Vulnerability in CVE-2026-73613 (CVE-2026-73613) vulnerability in CVE-2026-73613 (CVE-2026-73613). Data can be tampered with by attackers.	High	Cwe 59	3 weeks ago
CVE-2026-73602	Vulnerability in path-traversal (CVE-2026-73602) vulnerability in path-traversal (CVE-2026-73602). Risk of unauthorized operations or information disclosure.		JavaScript Path Traversal Cwe 95	3 weeks ago
CVE-2026-73601	Vulnerability in CVE-2026-73601 (CVE-2026-73601) vulnerability in CVE-2026-73601 (CVE-2026-73601). Risk of unauthorized operations or information disclosure.		Remote Code Execution Cwe 95	3 weeks ago
CVE-2026-73607	Vulnerability in CVE-2026-73607 (CVE-2026-73607) vulnerability in CVE-2026-73607 (CVE-2026-73607). Risk of unauthorized operations or information disclosure.	Medium	Cwe 862	3 weeks ago
CVE-2026-73605	Vulnerability in path-traversal (CVE-2026-73605) vulnerability in path-traversal (CVE-2026-73605). Risk of unauthorized operations or information disclosure.	Medium	Path Traversal Cwe 862	3 weeks ago
CVE-2026-73609	Vulnerability in CVE-2026-73609 (CVE-2026-73609) vulnerability in CVE-2026-73609 (CVE-2026-73609). Risk of unauthorized operations or information disclosure.	Medium	Cwe 862	3 weeks ago
CVE-2026-73608	Vulnerability in CVE-2026-73608 (CVE-2026-73608) vulnerability in CVE-2026-73608 (CVE-2026-73608). Confidential information can be exposed externally. Mitigation: upgrade to `3.7.4` or later.	High	Cwe 862	3 weeks ago
CVE-2026-73603	Vulnerability in CVE-2026-73603 (CVE-2026-73603) vulnerability in CVE-2026-73603 (CVE-2026-73603). Risk of unauthorized operations or information disclosure.		Cwe 862	3 weeks ago
CVE-2026-16455	Vulnerability in CVE-2026-16455 (CVE-2026-16455) vulnerability in CVE-2026-16455 (CVE-2026-16455). Risk of unauthorized operations or information disclosure.		Cwe 93	3 weeks ago
CVE-2026-73484	Vulnerability in flowiseai (CVE-2026-73484) vulnerability in flowiseai (CVE-2026-73484). Confidential information can be exposed externally.	High	Cwe 184 Flowiseai Flowise	3 weeks ago
CVE-2026-45819	Vulnerability in dos (CVE-2026-45819) vulnerability in dos (CVE-2026-45819). Risk of unauthorized operations or information disclosure.		Denial of Service Cwe 705 Cwe 755	3 weeks ago
CVE-2026-73483	OS Command Injection in flowiseai (CVE-2026-73483) OS command injection in flowiseai (CVE-2026-73483). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.1.3` or later.	High	JavaScript Cwe 78 Flowiseai Flowise	3 weeks ago
CVE-2026-73487	Code Injection in ssrf (CVE-2026-73487) code injection in ssrf (CVE-2026-73487). Successful exploitation can lead to full system takeover.	Critical	Python Server-Side Request Forgery Cwe 94 Flowiseai +1	3 weeks ago
CVE-2026-73485	Code Injection in flowiseai (CVE-2026-73485) code injection in flowiseai (CVE-2026-73485). Successful exploitation can lead to full system takeover.	High	Python Cwe 94 Flowiseai Flowise	3 weeks ago
CVE-2026-73486	Code Injection in flowiseai (CVE-2026-73486) code injection in flowiseai (CVE-2026-73486). Successful exploitation can lead to full system takeover.	High	Python Cwe 94 Flowiseai Flowise	3 weeks ago
CVE-2026-18368	Vulnerability in c (CVE-2026-18368) vulnerability in c (CVE-2026-18368). Risk of unauthorized operations or information disclosure.		C Denial of Service Cwe 122	3 weeks ago
CVE-2026-12263	Vulnerability in CVE-2026-12263 (CVE-2026-12263) vulnerability in CVE-2026-12263 (CVE-2026-12263). Successful exploitation can lead to full system takeover.	High	Authentication Bypass Cwe 347	3 weeks ago
CVE-2026-73604	Information Disclosure in CVE-2026-73604 (CVE-2026-73604) vulnerability in CVE-2026-73604 (CVE-2026-73604). Confidential information can be exposed externally. Exploitable via `GET /api/v1/credentials/`.	Medium	Cwe 200	3 weeks ago
CVE-2026-59503	Information Disclosure in CVE-2026-59503 (CVE-2026-59503) vulnerability in CVE-2026-59503 (CVE-2026-59503). Confidential information can be exposed externally.	Critical	Cwe 200	3 weeks ago
CVE-2026-59506	CWE-306: Missing Authentication for Critical Function CWE-306: Missing Authentication for Critical Function	Critical	Cwe 306	3 weeks ago
CVE-2026-59507	Vulnerability in CVE-2026-59507 (CVE-2026-59507) vulnerability in CVE-2026-59507 (CVE-2026-59507). Confidential information can be exposed externally.	Critical	Cwe 798	3 weeks ago
CVE-2026-59500	CWE-287: Improper Authentication CWE-287: Improper Authentication	Critical	Cwe 287	3 weeks ago
CVE-2026-59501	CWE-284: Improper Access Control CWE-284: Improper Access Control	High	Cwe 284	3 weeks ago
CVE-2026-59505	CWE-284: Improper Access Control CWE-284: Improper Access Control	High	Cwe 284	3 weeks ago
CVE-2026-59502	CWE-203: Observable Discrepancy CWE-203: Observable Discrepancy	Medium	Cwe 203	3 weeks ago
CVE-2026-59499	CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-200: Exposure of Sensitive Information to an Unauthorized Actor	High	Cwe 200	3 weeks ago
CVE-2026-19484	Vulnerability in fastify (CVE-2026-19484) vulnerability in fastify (CVE-2026-19484). Risk of unauthorized operations or information disclosure.	High	JavaScript Cwe 835 Cwe 1322 Fastify +1	3 weeks ago
CVE-2026-11970	Vulnerability in CVE-2026-11970 (CVE-2026-11970) vulnerability in CVE-2026-11970 (CVE-2026-11970). Risk of unauthorized operations or information disclosure.		Cwe 754	3 weeks ago
CVE-2026-19695	Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service	Medium	Denial of Service Cwe 121 Wireshark	3 weeks ago
CVE-2026-19696	Out-of-Bounds Write in dos (CVE-2026-19696) out-of-bounds write in dos (CVE-2026-19696). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 787 Wireshark Microsoft +1	3 weeks ago
CVE-2026-16458	Vulnerability in CVE-2026-16458 (CVE-2026-16458) vulnerability in CVE-2026-16458 (CVE-2026-16458). Risk of unauthorized operations or information disclosure.		Cwe 208 Cwe 327	3 weeks ago
CVE-2026-16459	Vulnerability in CVE-2026-16459 (CVE-2026-16459) vulnerability in CVE-2026-16459 (CVE-2026-16459). Risk of unauthorized operations or information disclosure.		Cwe 208 Cwe 327	3 weeks ago
CVE-2026-15413	Vulnerability in wordpress (CVE-2026-15413) vulnerability in wordpress (CVE-2026-15413). Successful exploitation can lead to full system takeover.	Critical	WordPress Cwe 912	3 weeks ago
CVE-2026-19694	TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service	Medium	Denial of Service Cwe 122 Wireshark	3 weeks ago
CVE-2026-14332	Vulnerability in wordpress (CVE-2026-14332) vulnerability in wordpress (CVE-2026-14332). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	3 weeks ago
CVE-2026-19481	Vulnerability in dos (CVE-2026-19481) vulnerability in dos (CVE-2026-19481). Risk of unauthorized operations or information disclosure.	High	JavaScript Denial of Service Cwe 754 Fastify +1	3 weeks ago
CVE-2026-3639	Cross-Site Scripting (XSS) in wordpress (CVE-2026-3639) cross-site scripting in wordpress (CVE-2026-3639). Risk of unauthorized operations or information disclosure. Exploitable via ``ppwp``.	Medium	WordPress Cross-Site Scripting Cwe 79	3 weeks ago
CVE-2026-11840	Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions... Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions...	High	SQL Injection Cwe 89 Sql	3 weeks ago
CVE-2026-18146	The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin... The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin...	High	WordPress Cross-Site Scripting Cwe 79 PHP	3 weeks ago
CVE-2026-18622	Vulnerability in CVE-2026-18622 (CVE-2026-18622) vulnerability in CVE-2026-18622 (CVE-2026-18622). Data can be tampered with by attackers.	Medium	Cwe 451	3 weeks ago
CVE-2026-3835	Vulnerability in wordpress (CVE-2026-3835) vulnerability in wordpress (CVE-2026-3835). Risk of unauthorized operations or information disclosure. Exploitable via ``LIKE``.	Medium	WordPress Cwe 285	3 weeks ago
CVE-2026-13610	Privilege Escalation in wordpress (CVE-2026-13610) vulnerability in wordpress (CVE-2026-13610). Confidential information can be exposed externally.	High	WordPress Cwe 269	3 weeks ago
CVE-2026-19182	Authorization Flaw in CVE-2026-19182 (CVE-2026-19182) vulnerability in CVE-2026-19182 (CVE-2026-19182). Risk of unauthorized operations or information disclosure.	Medium	Cwe 863	3 weeks ago
CVE-2026-14182	Authentication Bypass in wordpress (CVE-2026-14182) authentication bypass in wordpress (CVE-2026-14182). Successful exploitation can lead to full system takeover.	Critical	WordPress Cwe 287	3 weeks ago
CVE-2026-13328	Vulnerability in wordpress (CVE-2026-13328) vulnerability in wordpress (CVE-2026-13328). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 284	3 weeks ago
CVE-2026-19135	Vulnerability in CVE-2026-19135 (CVE-2026-19135) vulnerability in CVE-2026-19135 (CVE-2026-19135). Risk of unauthorized operations or information disclosure.	Medium	Java Cwe 470	3 weeks ago
CVE-2026-19088	Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-19088) vulnerability in wordpress (CVE-2026-19088). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cross-Site Request Forgery Cwe 352	3 weeks ago
CVE-2026-18728	Vulnerability in dos (CVE-2026-18728) vulnerability in dos (CVE-2026-18728). Risk of unauthorized operations or information disclosure. Exploitable via ``iscsiuio``.	Medium	Denial of Service Cwe 191 Redhat Enterprise Linux	3 weeks ago

Vulnerabilities

🍪 About cookies