Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2026-14955	Path Traversal in wordpress (CVE-2026-14955) path traversal in wordpress (CVE-2026-14955). Confidential information can be exposed externally.	Medium	WordPress Path Traversal Cwe 22	1 month ago
CVE-2026-15425	Cross-Site Scripting (XSS) in wordpress (CVE-2026-15425) cross-site scripting in wordpress (CVE-2026-15425). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-10818	Unrestricted File Upload in wordpress (CVE-2026-10818) vulnerability in wordpress (CVE-2026-10818). Successful exploitation can lead to full system takeover.	High	WordPress Remote Code Execution Cwe 434	1 month ago
CVE-2026-66373	Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,... Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,...	High	Remote Code Execution Cwe 415 Redis	1 month ago
CVE-2026-66337	Out-of-Bounds Read in gnome (CVE-2026-66337) vulnerability in gnome (CVE-2026-66337). Risk of unauthorized operations or information disclosure.	Medium	Cwe 125 Gnome Libsoup Redhat +1	1 month ago
CVE-2026-61892	Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges. Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.	High	Cwe 732	1 month ago
CVE-2026-66338	Vulnerability in gnome (CVE-2026-66338) vulnerability in gnome (CVE-2026-66338). Risk of unauthorized operations or information disclosure.	Medium	Cwe 444 Gnome Libsoup Redhat +1	1 month ago
CVE-2026-16280	Vulnerability in imaginationtech (CVE-2026-16280) vulnerability in imaginationtech (CVE-2026-16280). Successful exploitation can lead to full system takeover.	Critical	Cwe 190 Imaginationtech Ddk Google +3	1 month ago
CVE-2026-73500	Vulnerability in go.etcd.io/etcd/v3 (CVE-2026-73500) vulnerability in go.etcd.io/etcd/v3 (CVE-2026-73500). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.5.33` or later.		Cwe 770	1 month ago
CVE-2026-73502	Vulnerability in github.com/getkin/kin-openapi (CVE-2026-73502) vulnerability in github.com/getkin/kin-openapi (CVE-2026-73502). Risk of unauthorized operations or information disclosure. Exploitable via ``HEAD``. Mitigation: upgrade to `0.144.0` or later.	Medium	Denial of Service Cwe 476	1 month ago
CVE-2026-73499	Authorization Flaw in go.etcd.io/etcd/v3 (CVE-2026-73499) vulnerability in go.etcd.io/etcd/v3 (CVE-2026-73499). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.5.33` or later.		Cwe 863	1 month ago
CVE-2026-73568	Vulnerability in libp2p (CVE-2026-73568) vulnerability in libp2p (CVE-2026-73568). Risk of unauthorized operations or information disclosure. Exploitable via ``length``.	High	Python Cwe 400	1 month ago
CVE-2026-73647	Vulnerability in quasar (CVE-2026-73647) vulnerability in quasar (CVE-2026-73647). Risk of unauthorized operations or information disclosure. Exploitable via ``__proto__``. Mitigation: upgrade to `2.22.0` or later.	Medium	JavaScript Vue.js Denial of Service Cwe 1321	1 month ago
CVE-2026-73505	Code Injection in github.com/jandedobbeleer/oh-my-posh (CVE-2026-73505) code injection in github.com/jandedobbeleer/oh-my-posh (CVE-2026-73505). Successful exploitation can lead to full system takeover. Exploitable via ``cmd``. Mitigation: upgrade to `29.35.1` or later.	High	Cwe 94 Cwe 1336	1 month ago
CVE-2026-73413	Vulnerability in shescape (CVE-2026-73413) vulnerability in shescape (CVE-2026-73413). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.1` or later.		JavaScript Denial of Service Cwe 400 Cwe 407	1 month ago
CVE-2026-73411	Vulnerability in shescape (CVE-2026-73411) vulnerability in shescape (CVE-2026-73411). Risk of unauthorized operations or information disclosure. Exploitable via ``shell``. Mitigation: upgrade to `3.0.1` or later.		JavaScript Cwe 116 Cwe 200	1 month ago
CVE-2026-73414	OS Command Injection in shescape (CVE-2026-73414) OS command injection in shescape (CVE-2026-73414). Risk of unauthorized operations or information disclosure. Exploitable via ``shell``. Mitigation: upgrade to `3.0.1` or later.		JavaScript Cwe 78 Cwe 150	1 month ago
CVE-2026-73412	OS Command Injection in shescape (CVE-2026-73412) OS command injection in shescape (CVE-2026-73412). Risk of unauthorized operations or information disclosure. Exploitable via ``shell``. Mitigation: upgrade to `3.0.1` or later.		JavaScript Cwe 78 Cwe 155	1 month ago
CVE-2026-73509	Path Traversal in github.com/OpenListTeam/OpenList/v4 (CVE-2026-73509) path traversal in github.com/OpenListTeam/OpenList/v4 (CVE-2026-73509). Data can be tampered with by attackers. Exploitable via ``new_name``. Mitigation: upgrade to `4.2.4` or later.	High	Cwe 22	1 month ago
CVE-2026-73493	Vulnerability in org.http4s:http4s-blaze-server_2.13 (CVE-2026-73493) vulnerability in org.http4s:http4s-blaze-server_2.13 (CVE-2026-73493). Risk of unauthorized operations or information disclosure. Exploitable via ``OutOfMemoryError``. Mitigation: upgrade to `1.0.0-M42` or later.	High	Denial of Service Cwe 770	1 month ago
CVE-2026-73495	Vulnerability in org.http4s:blaze-http_2.13 (CVE-2026-73495) vulnerability in org.http4s:blaze-http_2.13 (CVE-2026-73495). Confidential information can be exposed externally. Exploitable via ``Request.headers``. Mitigation: upgrade to `1.0.0-M42` or later.	High	Cwe 444	1 month ago
CVE-2025-71408	Vulnerability in nltk (CVE-2025-71408) vulnerability in nltk (CVE-2025-71408). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.9.3` or later.	High	Python Cwe 95 Nltk	1 month ago
CVE-2026-55985	Vulnerability in CVE-2026-55985 (CVE-2026-55985) vulnerability in CVE-2026-55985 (CVE-2026-55985). Risk of unauthorized operations or information disclosure.	Medium	Cwe 312	1 month ago
CVE-2026-73652	Authorization Flaw in vantage6 (CVE-2026-73652) vulnerability in vantage6 (CVE-2026-73652). Risk of unauthorized operations or information disclosure.		Cwe 863	1 month ago
CVE-2026-73564	Vulnerability in github.com/fatedier/frp (CVE-2026-73564) vulnerability in github.com/fatedier/frp (CVE-2026-73564). Risk of unauthorized operations or information disclosure. Exploitable via ``frps``. Mitigation: upgrade to `0.70.1` or later.		Cwe 129 Cwe 190	1 month ago
CVE-2026-73561	Vulnerability in @anephenix/hub (CVE-2026-73561) vulnerability in @anephenix/hub (CVE-2026-73561). Risk of unauthorized operations or information disclosure. Exploitable via ``setInterval``. Mitigation: upgrade to `0.2.16` or later.	High	JavaScript Cwe 400	1 month ago
CVE-2026-73644	Vulnerability in org.openidentityplatform.opendj:opendj-server-legacy (CVE-2026-73644) vulnerability in org.openidentityplatform.opendj:opendj-server-legacy (CVE-2026-73644). Confidential information can be exposed externally. Mitigation: upgrade to `5.1.2` or later.	Critical	Java Cwe 285 Cwe 639	1 month ago
CVE-2026-73307	SSRF (Server-Side Request Forgery) in @budibase/server (CVE-2026-73307) SSRF in @budibase/server (CVE-2026-73307). Risk of unauthorized operations or information disclosure.		Cwe 918	1 month ago
CVE-2026-73410	Vulnerability in @budibase/server (CVE-2026-73410) vulnerability in @budibase/server (CVE-2026-73410). Successful exploitation can lead to full system takeover. Exploitable via ``fetchWithBlacklist``.	High	Cwe 367 Cwe 918	1 month ago
CVE-2026-73308	Information Disclosure in @budibase/server (CVE-2026-73308) vulnerability in @budibase/server (CVE-2026-73308). Confidential information can be exposed externally. Exploitable via `GET /api/automations/`.	Medium	Cwe 200	1 month ago
CVE-2026-73406	Information Disclosure in @budibase/server (CVE-2026-73406) vulnerability in @budibase/server (CVE-2026-73406). Confidential information can be exposed externally. Exploitable via `GET /api/global/users/tenant/`.	High	Cwe 200	1 month ago
CVE-2026-62323	Authorization Flaw in github.com/cloudreve/Cloudreve/v4 (CVE-2026-62323) vulnerability in github.com/cloudreve/Cloudreve/v4 (CVE-2026-62323). Data can be tampered with by attackers. Exploitable via `PUT /api/v4/file/viewerSession`. Mitigation: upgrade to `4.0.0-20260626022433-f3347130ac48` or later.	Medium	Cwe 863	1 month ago
CVE-2026-73302	Authentication Bypass in @budibase/server (CVE-2026-73302) authentication bypass in @budibase/server (CVE-2026-73302). Risk of unauthorized operations or information disclosure. Exploitable via `POST /realms/budi/protocol/openid-connect/token`.		Cwe 287	1 month ago
CVE-2026-73409	Vulnerability in @budibase/server (CVE-2026-73409) vulnerability in @budibase/server (CVE-2026-73409). Risk of unauthorized operations or information disclosure. Exploitable via ``tlsCertificateKeyFile``.		Cwe 203	1 month ago
CVE-2026-73304	Information Disclosure in @budibase/server (CVE-2026-73304) vulnerability in @budibase/server (CVE-2026-73304). Confidential information can be exposed externally. Exploitable via `GET /api/users/metadata`. Mitigation: upgrade to `3.39.25` or later.	Medium	Cwe 200	1 month ago
CVE-2026-73301	Vulnerability in @budibase/server (CVE-2026-73301) vulnerability in @budibase/server (CVE-2026-73301). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/global/groups`.	Medium	Cwe 862	1 month ago
CVE-2026-73305	Privilege Escalation in @budibase/server (CVE-2026-73305) vulnerability in @budibase/server (CVE-2026-73305). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/public/v1/roles/assign`.	High	Cwe 269 Cwe 862 Cwe 863	1 month ago
CVE-2026-55502	Authorization Flaw in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55502) vulnerability in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55502). Data can be tampered with by attackers. Exploitable via `POST /api/v4/admin/policy/oauth/signin`. Mitigation: upgrade to `4.17.0` or later.	High	Cwe 863	1 month ago
CVE-2026-55499	Authorization Flaw in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55499) vulnerability in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55499). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v4/file/events`. Mitigation: upgrade to `4.0.0-20260613030215-0b00dd308f13` or later.	Medium	Cwe 863	1 month ago
CVE-2026-55497	Vulnerability in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55497) vulnerability in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55497). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/v4/user/setting/avatar`. Mitigation: upgrade to `4.0.0-20260613024411-3607f79bb44c` or later.	Medium	Cwe 400 Cwe 409 Cwe 770	1 month ago
CVE-2026-55496	Information Disclosure in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55496) vulnerability in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55496). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v4/user/search`. Mitigation: upgrade to `4.0.0-20260613023921-7e1289d55279` or later.	Medium	Cwe 200 Cwe 359	1 month ago
CVE-2026-55495	Path Traversal in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55495) path traversal in github.com/cloudreve/Cloudreve/v4 (CVE-2026-55495). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v4/file/wopi/`. Mitigation: upgrade to `4.0.0-20260613023150-7968e50429ef` or later.	Medium	Cwe 22	1 month ago
CVE-2026-66040	FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability... FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability...	High	Cwe 122 Ffmpeg Remote Code Execution	1 month ago
CVE-2026-66041	FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write... FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write...	High	Cwe 787 Ffmpeg Heap Overflow Video Processing	1 month ago
CVE-2026-66039	FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability... FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability...	High	Cwe 122 Cwe 190 Ffmpeg	1 month ago
CVE-2026-66038	Vulnerability in c (CVE-2026-66038) vulnerability in c (CVE-2026-66038). Confidential information can be exposed externally.	Medium	C Cwe 908 Ffmpeg	1 month ago
CVE-2026-66036	FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability... FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability...	High	Cwe 122 Ffmpeg Remote Code Execution	1 month ago
CVE-2026-66037	Vulnerability in c (CVE-2026-66037) vulnerability in c (CVE-2026-66037). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 770 Ffmpeg	1 month ago
CVE-2026-62835	Vulnerability in microsoft (CVE-2026-62835) vulnerability in microsoft (CVE-2026-62835). Confidential information can be exposed externally.	Critical	Cwe 285 Microsoft Azure Portal	1 month ago
CVE-2026-57531	Cross-Site Scripting (XSS) in CVE-2026-57531 (CVE-2026-57531) cross-site scripting in CVE-2026-57531 (CVE-2026-57531). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79	1 month ago

Vulnerabilities

🍪 About cookies