Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2026-12814	Command Injection in CVE-2026-12814 (CVE-2026-12814) command injection in CVE-2026-12814 (CVE-2026-12814). Risk of unauthorized operations or information disclosure.	Medium	Cwe 77 Cwe 78	2 months ago
CVE-2026-12811	Cross-Site Scripting (XSS) in CVE-2026-12811 (CVE-2026-12811) cross-site scripting in CVE-2026-12811 (CVE-2026-12811). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.8.39` or later.	Medium	Cross-Site Scripting Cwe 79 Cwe 94	2 months ago
CVE-2026-12812	Vulnerability in CVE-2026-12812 (CVE-2026-12812) vulnerability in CVE-2026-12812 (CVE-2026-12812). Risk of unauthorized operations or information disclosure.	Low	Cwe 74 Cwe 80	2 months ago
CVE-2026-12808	Vulnerability in CVE-2026-12808 (CVE-2026-12808) vulnerability in CVE-2026-12808 (CVE-2026-12808). Risk of unauthorized operations or information disclosure.	Medium	Cwe 74 Cwe 77	2 months ago
CVE-2026-12807	Vulnerability in CVE-2026-12807 (CVE-2026-12807) vulnerability in CVE-2026-12807 (CVE-2026-12807). Risk of unauthorized operations or information disclosure.	Medium	Cwe 74 Cwe 77	2 months ago
CVE-2026-12805	Buffer Overflow in CVE-2026-12805 (CVE-2026-12805) vulnerability in CVE-2026-12805 (CVE-2026-12805). Risk of unauthorized operations or information disclosure.	Medium	Cwe 119 Cwe 122	2 months ago
CVE-2026-12806	Buffer Overflow in CVE-2026-12806 (CVE-2026-12806) vulnerability in CVE-2026-12806 (CVE-2026-12806). Successful exploitation can lead to full system takeover.	High	Cwe 119 Cwe 120	2 months ago
CVE-2026-12804	Open Redirect in CVE-2026-12804 (CVE-2026-12804) vulnerability in CVE-2026-12804 (CVE-2026-12804). Risk of unauthorized operations or information disclosure.	Medium	Cwe 601	2 months ago
CVE-2026-56410	xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId. xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.	Medium	Cwe 190 Libexpat Project Libexpat	2 months ago
CVE-2026-56408	libexpat before 2.8.2 has an integer overflow in copyString. libexpat before 2.8.2 has an integer overflow in copyString.	Medium	Cwe 190 Libexpat Project Libexpat	2 months ago
CVE-2026-56411	xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations. xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.	Medium	Cwe 190 Libexpat Project Libexpat	2 months ago
CVE-2026-56409	Vulnerability in libexpat-project (CVE-2026-56409) vulnerability in libexpat-project (CVE-2026-56409). Confidential information can be exposed externally.	Medium	Cwe 190 Libexpat Project Libexpat	2 months ago
CVE-2026-56412	Use-After-Free in libexpat-project (CVE-2026-56412) vulnerability in libexpat-project (CVE-2026-56412). Risk of unauthorized operations or information disclosure.	Medium	Cwe 416 Libexpat Project Libexpat	2 months ago
CVE-2026-56407	Vulnerability in libexpat-project (CVE-2026-56407) vulnerability in libexpat-project (CVE-2026-56407). Confidential information can be exposed externally.	Medium	Cwe 190 Libexpat Project Libexpat	2 months ago
CVE-2026-56406	Vulnerability in libexpat-project (CVE-2026-56406) vulnerability in libexpat-project (CVE-2026-56406). Confidential information can be exposed externally.	Medium	Cwe 190 Libexpat Project Libexpat	2 months ago
CVE-2026-56405	libexpat before 2.8.2 has an integer overflow in getAttributeId. libexpat before 2.8.2 has an integer overflow in getAttributeId.	Medium	Cwe 190 Libexpat Project Libexpat	2 months ago
CVE-2026-56404	libexpat before 2.8.2 has an integer overflow in addBinding. libexpat before 2.8.2 has an integer overflow in addBinding.	Medium	Cwe 190 Libexpat Project Libexpat	2 months ago
CVE-2026-56403	libexpat before 2.8.2 has an integer overflow in storeAtts. libexpat before 2.8.2 has an integer overflow in storeAtts.	Medium	Cwe 190 Libexpat Project Libexpat	2 months ago
CVE-2026-56393	Cross-Site Scripting (XSS) in craftcms/cms (CVE-2026-56393) cross-site scripting in craftcms/cms (CVE-2026-56393). Risk of unauthorized operations or information disclosure. Exploitable via ``checkbox.twig``. Mitigation: upgrade to `4.17.0-beta.1` or later.	Medium	JavaScript Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-56395	Cross-Site Scripting (XSS) in CVE-2026-56395 (CVE-2026-56395) cross-site scripting in CVE-2026-56395 (CVE-2026-56395). Successful exploitation can lead to full system takeover.	Critical	JavaScript Remote Code Execution Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-56397	Cross-Site Scripting (XSS) in CVE-2026-56397 (CVE-2026-56397) cross-site scripting in CVE-2026-56397 (CVE-2026-56397). Successful exploitation can lead to full system takeover.	Critical	JavaScript Remote Code Execution Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-56384	Information Disclosure in craftcms/cms (CVE-2026-56384) vulnerability in craftcms/cms (CVE-2026-56384). Risk of unauthorized operations or information disclosure. Exploitable via ``assetId``. Mitigation: upgrade to `5.9.14` or later.	Medium	Cwe 862	2 months ago
CVE-2026-56396	Vulnerability in CVE-2026-56396 (CVE-2026-56396) vulnerability in CVE-2026-56396 (CVE-2026-56396). Successful exploitation can lead to full system takeover.	High	Cwe 862	2 months ago
CVE-2026-56394	Path Traversal in craftcms/cms (CVE-2026-56394) path traversal in craftcms/cms (CVE-2026-56394). Confidential information can be exposed externally. Exploitable via ``extension``. Mitigation: upgrade to `5.9.13` or later.	Medium	Path Traversal Cwe 22	2 months ago
CVE-2026-56381	Cross-Site Scripting (XSS) in craftcms/cms (CVE-2026-56381) cross-site scripting in craftcms/cms (CVE-2026-56381). Risk of unauthorized operations or information disclosure. Exploitable via ``allowAdminChanges``. Mitigation: upgrade to `5.8.22` or later.	Medium	JavaScript Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-56383	Cross-Site Scripting (XSS) in craftcms/cms (CVE-2026-56383) cross-site scripting in craftcms/cms (CVE-2026-56383). Risk of unauthorized operations or information disclosure. Exploitable via ``editableTable.twig``. Mitigation: upgrade to `5.8.23` or later.	Medium	JavaScript Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-56316	Vulnerability in CVE-2026-56316 (CVE-2026-56316) vulnerability in CVE-2026-56316 (CVE-2026-56316). Risk of unauthorized operations or information disclosure.	Medium	Cwe 203	2 months ago
CVE-2026-56367	Out-of-Bounds Read in c (CVE-2026-56367) vulnerability in c (CVE-2026-56367). Risk of unauthorized operations or information disclosure.	Low	C Cwe 125 Imagemagick	2 months ago
CVE-2026-56378	Out-of-Bounds Read in dos (CVE-2026-56378) vulnerability in dos (CVE-2026-56378). Risk of unauthorized operations or information disclosure.	Low	Denial of Service Cwe 125 Imagemagick	2 months ago
CVE-2026-56382	Code Injection in craftcms/cms (CVE-2026-56382) code injection in craftcms/cms (CVE-2026-56382). Successful exploitation can lead to full system takeover. Exploitable via `POST /admin/actions/fields/render-card-preview`. Mitigation: upgrade to `5.9.14` or later.	High	PHP Remote Code Execution Cwe 94	2 months ago
CVE-2026-56299	Vulnerability in dos (CVE-2026-56299) vulnerability in dos (CVE-2026-56299). Risk of unauthorized operations or information disclosure.	Medium	Authentication Bypass Denial of Service Cwe 306	2 months ago
CVE-2026-56242	Information Disclosure in CVE-2026-56242 (CVE-2026-56242) vulnerability in CVE-2026-56242 (CVE-2026-56242). Confidential information can be exposed externally.	High	Cwe 200	2 months ago
CVE-2026-56265	Vulnerability in kidocode (CVE-2026-56265) vulnerability in kidocode (CVE-2026-56265). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 798 Kidocode Crawl4Ai	2 months ago
CVE-2026-56239	Privilege Escalation in privilege-escalation (CVE-2026-56239) vulnerability in privilege-escalation (CVE-2026-56239). Data can be tampered with by attackers.	High	Privilege Escalation Cwe 269	2 months ago
CVE-2026-56236	Vulnerability in CVE-2026-56236 (CVE-2026-56236) vulnerability in CVE-2026-56236 (CVE-2026-56236). Data can be tampered with by attackers.	Medium	Cwe 59	2 months ago
CVE-2026-56253	Vulnerability in CVE-2026-56253 (CVE-2026-56253) vulnerability in CVE-2026-56253 (CVE-2026-56253). Confidential information can be exposed externally.	High	Cwe 284	2 months ago
CVE-2025-71357	Unsafe Deserialization in picklescan (CVE-2025-71357) vulnerability in picklescan (CVE-2025-71357). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.0.30` or later.	High	Cwe 502 Mmaitre314 Picklescan	2 months ago
CVE-2025-71378	Unsafe Deserialization in picklescan (CVE-2025-71378) vulnerability in picklescan (CVE-2025-71378). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.0.30` or later.	High	Cwe 502 Mmaitre314 Picklescan	2 months ago
CVE-2025-71348	Vulnerability in picklescan (CVE-2025-71348) vulnerability in picklescan (CVE-2025-71348). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.0.28` or later.	High	Remote Code Execution Cwe 502 Mmaitre314 Picklescan	2 months ago
CVE-2025-71351	Vulnerability in CVE-2025-71351 (CVE-2025-71351) vulnerability in CVE-2025-71351 (CVE-2025-71351). Risk of unauthorized operations or information disclosure.		Remote Code Execution Cwe 184	2 months ago
CVE-2026-12798	SSRF (Server-Side Request Forgery) in litellm (CVE-2026-12798) SSRF in litellm (CVE-2026-12798). Risk of unauthorized operations or information disclosure.	Medium	Cwe 918 LiteLLM	2 months ago
CVE-2026-12799	Vulnerability in litellm (CVE-2026-12799) vulnerability in litellm (CVE-2026-12799). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 285 LiteLLM	2 months ago
CVE-2026-12797	Vulnerability in litellm (CVE-2026-12797) vulnerability in litellm (CVE-2026-12797). Risk of unauthorized operations or information disclosure.	Medium	Cwe 285 Cwe 863 LiteLLM	2 months ago
CVE-2026-12795	Authentication Bypass in litellm (CVE-2026-12795) authentication bypass in litellm (CVE-2026-12795). Risk of unauthorized operations or information disclosure.	High	Cwe 287 Cwe 306 LiteLLM	2 months ago
CVE-2026-12784	Vulnerability in CVE-2026-12784 (CVE-2026-12784) vulnerability in CVE-2026-12784 (CVE-2026-12784). Successful exploitation can lead to full system takeover.	High	Cwe 266 Cwe 284	2 months ago
CVE-2026-12786	Vulnerability in CVE-2026-12786 (CVE-2026-12786) vulnerability in CVE-2026-12786 (CVE-2026-12786). Successful exploitation can lead to full system takeover.	High	Cwe 266 Cwe 284	2 months ago
CVE-2026-12789	Vulnerability in sqli (CVE-2026-12789) vulnerability in sqli (CVE-2026-12789). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	2 months ago
CVE-2026-12787	Vulnerability in deserialization (CVE-2026-12787) vulnerability in deserialization (CVE-2026-12787). Risk of unauthorized operations or information disclosure.	Medium	Insecure Deserialization Cwe 20 Cwe 502	2 months ago
CVE-2026-12788	Vulnerability in CVE-2026-12788 (CVE-2026-12788) vulnerability in CVE-2026-12788 (CVE-2026-12788). Risk of unauthorized operations or information disclosure.	Medium	Cwe 610 Cwe 611	2 months ago
CVE-2026-12781	Vulnerability in CVE-2026-12781 (CVE-2026-12781) vulnerability in CVE-2026-12781 (CVE-2026-12781). Successful exploitation can lead to full system takeover.	High	Cwe 266 Cwe 284	2 months ago

Vulnerabilities

🍪 About cookies