Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2026-10548	Authentication Bypass in CVE-2026-10548 (CVE-2026-10548) authentication bypass in CVE-2026-10548 (CVE-2026-10548). Risk of unauthorized operations or information disclosure.	Medium	Cwe 287	3 months ago
CVE-2026-10558	Vulnerability in CVE-2026-10558 (CVE-2026-10558) vulnerability in CVE-2026-10558 (CVE-2026-10558). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 73	3 months ago
CVE-2026-10559	Vulnerability in CVE-2026-10559 (CVE-2026-10559) vulnerability in CVE-2026-10559 (CVE-2026-10559). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 73	3 months ago
CVE-2026-10529	Cross-Site Scripting (XSS) in CVE-2026-10529 (CVE-2026-10529) cross-site scripting in CVE-2026-10529 (CVE-2026-10529). Risk of unauthorized operations or information disclosure.	Low	Java Cross-Site Scripting Cwe 79 Cwe 94	3 months ago
CVE-2026-10296	Vulnerability in sqli (CVE-2026-10296) vulnerability in sqli (CVE-2026-10296). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-24090	Vulnerability in qualcomm (CVE-2026-24090) vulnerability in qualcomm (CVE-2026-24090). Confidential information can be exposed externally.	High	Cwe 306 Qualcomm Ar8031 Firmware Ar8031 +426	3 months ago
CVE-2026-10295	Vulnerability in dos (CVE-2026-10295) vulnerability in dos (CVE-2026-10295). Risk of unauthorized operations or information disclosure.	Low	Denial of Service Cwe 404	3 months ago
CVE-2025-59610	Vulnerability in qualcomm (CVE-2025-59610) vulnerability in qualcomm (CVE-2025-59610). Successful exploitation can lead to full system takeover.	Medium	Cwe 367 Qualcomm Snapdragon G1 Gen 2 Gaming Platform Firmware Snapdragon G1 Gen 2 Gaming Platform +456	3 months ago
CVE-2025-59612	Memory corruption in windows drivers while sending incorrect trusted application request Memory corruption in windows drivers while sending incorrect trusted application request	Medium	Cwe 121 Qualcomm Cologne Firmware Cologne +60	3 months ago
CVE-2019-25718	Vulnerability in privilege-escalation (CVE-2019-25718) vulnerability in privilege-escalation (CVE-2019-25718). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 451 Draeger Infinity Explorer C700 Firmware +1	3 months ago
CVE-2025-59606	Vulnerability in qualcomm (CVE-2025-59606) vulnerability in qualcomm (CVE-2025-59606). Successful exploitation can lead to full system takeover.	High	Cwe 476 Qualcomm Cologne Firmware Cologne +280	3 months ago
CVE-2025-59604	Vulnerability in qualcomm (CVE-2025-59604) vulnerability in qualcomm (CVE-2025-59604). Successful exploitation can lead to full system takeover.	High	Cwe 476 Qualcomm Snapdragon 480 5G Mobile Platform Firmware Snapdragon 480 5G Mobile Platform +514	3 months ago
CVE-2025-59614	Out-of-Bounds Write in qualcomm (CVE-2025-59614) out-of-bounds write in qualcomm (CVE-2025-59614). Successful exploitation can lead to full system takeover.	Medium	Cwe 787 Qualcomm Cologne Firmware Cologne +40	3 months ago
CVE-2025-59611	Memory corruption in diagnostic services due to absence of input validation Memory corruption in diagnostic services due to absence of input validation	Medium	Cwe 787 Qualcomm Aqt1000 Firmware Aqt1000 +98	3 months ago
CVE-2025-59605	Out-of-Bounds Write in qualcomm (CVE-2025-59605) out-of-bounds write in qualcomm (CVE-2025-59605). Successful exploitation can lead to full system takeover.	High	Cwe 787 Qualcomm Snapdragon G1 Gen 2 Gaming Platform Firmware Snapdragon G1 Gen 2 Gaming Platform +266	3 months ago
CVE-2026-9050	Vulnerability in wordpress (CVE-2026-9050) vulnerability in wordpress (CVE-2026-9050). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	3 months ago
CVE-2026-9048	Authorization Flaw in wordpress (CVE-2026-9048) vulnerability in wordpress (CVE-2026-9048). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 863	3 months ago
CVE-2026-10302	Vulnerability in sqli (CVE-2026-10302) vulnerability in sqli (CVE-2026-10302). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10301	Cross-Site Scripting (XSS) in CVE-2026-10301 (CVE-2026-10301) cross-site scripting in CVE-2026-10301 (CVE-2026-10301). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Cwe 94	3 months ago
CVE-2026-10514	Cross-Site Scripting (XSS) in CVE-2026-10514 (CVE-2026-10514) cross-site scripting in CVE-2026-10514 (CVE-2026-10514). Risk of unauthorized operations or information disclosure.	Low	Java Cross-Site Scripting Cwe 79 Cwe 94	3 months ago
CVE-2026-10528	Buffer Overflow in cpp (CVE-2026-10528) vulnerability in cpp (CVE-2026-10528). Risk of unauthorized operations or information disclosure.	Low	C++ Cwe 119 Cwe 121	3 months ago
CVE-2022-0492 KEV	[KEV] Authentication Bypass in Linux c (CVE-2022-0492) authentication bypass in Linux c (CVE-2022-0492). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	C Cwe 287 Cwe 862 Linux +42	3 months ago
CVE-2026-28511	Information Disclosure in elabftw (CVE-2026-28511) vulnerability in elabftw (CVE-2026-28511). Risk of unauthorized operations or information disclosure.	Medium	Cwe 200 Elabftw	3 months ago
CVE-2026-25260	Vulnerability in qualcomm (CVE-2026-25260) vulnerability in qualcomm (CVE-2026-25260). Successful exploitation can lead to full system takeover.	High	Cwe 367 Qualcomm Cologne Firmware Cologne +68	3 months ago
CVE-2026-25277	Memory corruption while using Strongbox due to buffer overflow. Memory corruption while using Strongbox due to buffer overflow.	High	Cwe 120 Qualcomm Cq8750M Firmware Cq8750M +108	3 months ago
CVE-2026-24782	SQL Injection in sqli (CVE-2026-24782) SQL injection in sqli (CVE-2026-24782). Data can be tampered with by attackers.	High	SQL Injection Cwe 89 Accellion Kiteworks	3 months ago
CVE-2026-25258	Memory corruption while processing IOCTL calls for escape operations. Memory corruption while processing IOCTL calls for escape operations.	High	Cwe 125 Qualcomm Cologne Firmware Cologne +40	3 months ago
CVE-2026-25259	Memory corruption while processing multiple IOCTL command for escape operations. Memory corruption while processing multiple IOCTL command for escape operations.	High	Cwe 787 Qualcomm Cologne Firmware Cologne +82	3 months ago
CVE-2026-24752	Cross-Site Scripting (XSS) in accellion (CVE-2026-24752) cross-site scripting in accellion (CVE-2026-24752). Confidential information can be exposed externally.	High	JavaScript Cross-Site Scripting Cwe 79 Accellion +1	3 months ago
CVE-2026-24754	Cross-Site Scripting (XSS) in accellion (CVE-2026-24754) cross-site scripting in accellion (CVE-2026-24754). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Accellion +1	3 months ago
CVE-2026-24088	Vulnerability in qualcomm (CVE-2026-24088) vulnerability in qualcomm (CVE-2026-24088). Successful exploitation can lead to full system takeover.	High	Cwe 306 Qualcomm Ar9380 Firmware Ar9380 +484	3 months ago
CVE-2026-24085	Vulnerability in qualcomm (CVE-2026-24085) vulnerability in qualcomm (CVE-2026-24085). Successful exploitation can lead to full system takeover.	High	Cwe 121 Qualcomm Qca6391 Firmware Qca6391 +530	3 months ago
CVE-2026-10297	Vulnerability in sqli (CVE-2026-10297) vulnerability in sqli (CVE-2026-10297). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-10298	Vulnerability in c (CVE-2026-10298) vulnerability in c (CVE-2026-10298). Risk of unauthorized operations or information disclosure.	Low	C C++ Cwe 404 Cwe 476	3 months ago
CVE-2025-59613	Vulnerability in qualcomm (CVE-2025-59613) vulnerability in qualcomm (CVE-2025-59613). Successful exploitation can lead to full system takeover.	Medium	Cwe 121 Qualcomm Cologne Firmware Cologne +86	3 months ago
CVE-2026-40965	Information Disclosure in CVE-2026-40965 (CVE-2026-40965) vulnerability in CVE-2026-40965 (CVE-2026-40965). Confidential information can be exposed externally. Mitigation: upgrade to `78.13.0` or later.	Critical	Cwe 200	3 months ago
CVE-2026-28580	Vulnerability in google (CVE-2026-28580) vulnerability in google (CVE-2026-28580). Successful exploitation can lead to full system takeover.	High	Cwe 120 Google Android	3 months ago
CVE-2026-28581	Vulnerability in google (CVE-2026-28581) vulnerability in google (CVE-2026-28581). Risk of unauthorized operations or information disclosure.	Medium	Java Cwe 476 Google Android	3 months ago
CVE-2026-28586	Privilege Escalation in google (CVE-2026-28586) vulnerability in google (CVE-2026-28586). Risk of unauthorized operations or information disclosure.	Low	Java Cwe 269 Google Android	3 months ago
CVE-2026-40964	Authentication Bypass in CVE-2026-40964 (CVE-2026-40964) authentication bypass in CVE-2026-40964 (CVE-2026-40964). Confidential information can be exposed externally. Mitigation: upgrade to `3.2.7` or later.	High	Authentication Bypass Cwe 287	3 months ago
CVE-2026-49491	SQL Injection in sqli (CVE-2026-49491) SQL injection in sqli (CVE-2026-49491). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89	3 months ago
CVE-2026-28578	Vulnerability in dos (CVE-2026-28578) vulnerability in dos (CVE-2026-28578). Risk of unauthorized operations or information disclosure.	Medium	Java Denial of Service Cwe 20 Google +1	3 months ago
CVE-2026-10292	Buffer Overflow in CVE-2026-10292 (CVE-2026-10292) vulnerability in CVE-2026-10292 (CVE-2026-10292). Successful exploitation can lead to full system takeover.	High	Cwe 119 Cwe 121	3 months ago
CVE-2026-10293	Buffer Overflow in CVE-2026-10293 (CVE-2026-10293) vulnerability in CVE-2026-10293 (CVE-2026-10293). Successful exploitation can lead to full system takeover.	High	Cwe 119 Cwe 121	3 months ago
CVE-2026-10294	Vulnerability in c (CVE-2026-10294) vulnerability in c (CVE-2026-10294). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 266 Cwe 285	3 months ago
CVE-2026-10291	Vulnerability in @enderfga/claw-orchestrator (CVE-2026-10291) vulnerability in @enderfga/claw-orchestrator (CVE-2026-10291). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.7.1` or later.	Medium	Cwe 400 Cwe 1333	3 months ago
CVE-2026-0097	Vulnerability in google (CVE-2026-0097) vulnerability in google (CVE-2026-0097). Successful exploitation can lead to full system takeover.	High	Cwe 693 Google Android	3 months ago
CVE-2026-10290	Vulnerability in sqli (CVE-2026-10290) vulnerability in sqli (CVE-2026-10290). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	3 months ago
CVE-2026-0099	Vulnerability in google (CVE-2026-0099) vulnerability in google (CVE-2026-0099). Successful exploitation can lead to full system takeover.	High	Java Cwe 273 Google Android	3 months ago
CVE-2026-0096	Vulnerability in google (CVE-2026-0096) vulnerability in google (CVE-2026-0096). Successful exploitation can lead to full system takeover.	High	Java Cwe 451 Google Android	3 months ago

Vulnerabilities

🍪 About cookies