Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: languages Tag: cwe-295 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-55215	Vulnerability in mariadb (CVE-2026-55215) vulnerability in mariadb (CVE-2026-55215). Confidential information can be exposed externally. Mitigation: upgrade to `3.2.4` or later.	High	JavaScript Cwe 295 Cwe 522	2 days ago
CVE-2026-78323	Vulnerability in CVE-2026-78323 (CVE-2026-78323) vulnerability in CVE-2026-78323 (CVE-2026-78323). Confidential information can be exposed externally.	Medium	Java Cwe 295	6 days ago
CVE-2026-53583	Vulnerability in c (CVE-2026-53583) vulnerability in c (CVE-2026-53583). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 295 Cwe 297	1 week ago
CVE-2026-73253	Vulnerability in c (CVE-2026-73253) vulnerability in c (CVE-2026-73253). Risk of unauthorized operations or information disclosure.		C Cwe 295	1 week ago
CVE-2026-73251	Vulnerability in c (CVE-2026-73251) vulnerability in c (CVE-2026-73251). Risk of unauthorized operations or information disclosure.		C Cwe 295	1 week ago
CVE-2026-63336	Vulnerability in com.rabbitmq:amqp-client (CVE-2026-63336) vulnerability in com.rabbitmq:amqp-client (CVE-2026-63336). Risk of unauthorized operations or information disclosure. Exploitable via ``TrustEverythingTrustManager``. Mitigation: upgrade to `5.33.0` or later.		Java Cwe 295	1 week ago
CVE-2026-16792	Vulnerability in c (CVE-2026-16792) vulnerability in c (CVE-2026-16792). Confidential information can be exposed externally.	Medium	C Cwe 295	3 weeks ago
CVE-2026-67598	Vulnerability in CVE-2026-67598 (CVE-2026-67598) vulnerability in CVE-2026-67598 (CVE-2026-67598). Confidential information can be exposed externally.	High	PHP Cwe 295	3 weeks ago
CVE-2026-69248	Vulnerability in cryptography (CVE-2026-69248) vulnerability in cryptography (CVE-2026-69248). Risk of unauthorized operations or information disclosure. Exploitable via ``foo.example.com``. Mitigation: upgrade to `49.0.0` or later.		Python Cwe 295	3 weeks ago
CVE-2026-58062	Vulnerability in CVE-2026-58062 (CVE-2026-58062) vulnerability in CVE-2026-58062 (CVE-2026-58062). Risk of unauthorized operations or information disclosure.		Java Cwe 295	4 weeks ago
CVE-2026-8763	Vulnerability in CVE-2026-8763 (CVE-2026-8763) vulnerability in CVE-2026-8763 (CVE-2026-8763). Risk of unauthorized operations or information disclosure.		Java Cwe 295	4 weeks ago
CVE-2026-67293	Vulnerability in c (CVE-2026-67293) vulnerability in c (CVE-2026-67293). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 295	4 weeks ago
CVE-2026-60648	Vulnerability in c (CVE-2026-60648) vulnerability in c (CVE-2026-60648). Successful exploitation can lead to full system takeover.	High	C Cwe 20 Cwe 295 Cwe 352 +4	1 month ago
CVE-2026-56624	Vulnerability in apache (CVE-2026-56624) vulnerability in apache (CVE-2026-56624). Confidential information can be exposed externally.	High	Java Apache Cwe 295 Mina Sshd	1 month ago
CVE-2026-46428	Vulnerability in lettre (CVE-2026-46428) vulnerability in lettre (CVE-2026-46428). Risk of unauthorized operations or information disclosure. Exploitable via ``rustls``. Mitigation: upgrade to `0.11.22` or later.		Rust Cwe 295	1 month ago
CVE-2026-54919	Vulnerability in c (CVE-2026-54919) vulnerability in c (CVE-2026-54919). Confidential information can be exposed externally.	High	C C++ Cwe 295 Yhirose +1	1 month ago
CVE-2026-49283	Vulnerability in simplesamlphp/saml2 (CVE-2026-49283) vulnerability in simplesamlphp/saml2 (CVE-2026-49283). Confidential information can be exposed externally. Exploitable via ``Response``. Mitigation: upgrade to `4.19.3` or later.	High	PHP Cwe 295	1 month ago
CVE-2026-48934	Vulnerability in node (CVE-2026-48934) vulnerability in node (CVE-2026-48934). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `22.23.0, 24.17.0, 26.3.1` or later.	Medium	JavaScript Nodejs Cwe 295	2 months ago
CVE-2026-11999	Vulnerability in c (CVE-2026-11999) vulnerability in c (CVE-2026-11999). Data can be tampered with by attackers.	High	C Cwe 295 Wolfssl	2 months ago
CVE-2026-48697	Vulnerability in cpp (CVE-2026-48697) vulnerability in cpp (CVE-2026-48697). Confidential information can be exposed externally.	High	C++ Cwe 295 Pavel Odintsov Fastnetmon	3 months ago
CVE-2026-32253	Authentication Bypass in cpp (CVE-2026-32253) authentication bypass in cpp (CVE-2026-32253). Successful exploitation can lead to full system takeover.	Critical	C++ Cwe 287 Cwe 295 Lizardbyte +1	3 months ago
CVE-2026-48247	Vulnerability in CVE-2026-48247 (CVE-2026-48247) vulnerability in CVE-2026-48247 (CVE-2026-48247). Confidential information can be exposed externally.	Medium	PHP Cwe 295	3 months ago
CVE-2026-48249	Vulnerability in CVE-2026-48249 (CVE-2026-48249) vulnerability in CVE-2026-48249 (CVE-2026-48249). Confidential information can be exposed externally.	Medium	PHP Cwe 295	3 months ago
CVE-2026-48246	Vulnerability in CVE-2026-48246 (CVE-2026-48246) vulnerability in CVE-2026-48246 (CVE-2026-48246). Confidential information can be exposed externally.	Medium	PHP Cwe 295	3 months ago
CVE-2026-48248	Vulnerability in CVE-2026-48248 (CVE-2026-48248) vulnerability in CVE-2026-48248 (CVE-2026-48248). Confidential information can be exposed externally.	Medium	PHP Cwe 295	3 months ago
CVE-2026-45574	Vulnerability in com.oviva.telematik:epa4all-client (CVE-2026-45574) vulnerability in com.oviva.telematik:epa4all-client (CVE-2026-45574). Confidential information can be exposed externally. Mitigation: upgrade to `1.2.2` or later.	High	Java Cwe 295	3 months ago
CVE-2026-42312	Vulnerability in pyload-ng (CVE-2026-42312) vulnerability in pyload-ng (CVE-2026-42312). Confidential information can be exposed externally. Exploitable via ``ADMIN_ONLY_CORE_OPTIONS``. Mitigation: upgrade to `0.5.0b3.dev100` or later.	Medium	Python Cwe 295 Cwe 306 Cwe 863 +2	3 months ago
CVE-2026-44900	Vulnerability in com.oviva.telematik:epa4all-client (CVE-2026-44900) vulnerability in com.oviva.telematik:epa4all-client (CVE-2026-44900). Confidential information can be exposed externally. Mitigation: upgrade to `1.2.1` or later.	High	Java Cwe 295	3 months ago
CVE-2026-42225	Vulnerability in c (CVE-2026-42225) vulnerability in c (CVE-2026-42225). Data can be tampered with by attackers.	Medium	C Cwe 295 Teluu Pjsip	3 months ago
CVE-2026-44312	Vulnerability in css_parser (CVE-2026-44312) vulnerability in css_parser (CVE-2026-44312). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.22.0` or later.	Medium	Ruby Cwe 295 Cwe 829	3 months ago
CVE-2026-21945	Vulnerability in java (CVE-2026-21945) vulnerability in java (CVE-2026-21945). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.0, 8.0.481, 11.0.30, 17.0.18, 21.0.10, 25.0.2` or later.	High	Bitnami Java C Denial of Service +8	3 months ago
CVE-2026-5263	Vulnerability in c (CVE-2026-5263) vulnerability in c (CVE-2026-5263). Confidential information can be exposed externally.	Medium	C Cwe 295 Wolfssl	4 months ago
CVE-2026-33753	Vulnerability in trailofbits (CVE-2026-33753) vulnerability in trailofbits (CVE-2026-33753). Data can be tampered with by attackers. Mitigation: upgrade to `1.0.6` or later.	Medium	Python Cwe 295 Trailofbits Rfc3161 Client	4 months ago
CVE-2026-32281	Vulnerability in stdlib (CVE-2026-32281) vulnerability in stdlib (CVE-2026-32281). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.9, 1.26.2` or later.	High	Denial of Service Cwe 295 Golang Go	4 months ago
CVE-2026-33810	Vulnerability in stdlib (CVE-2026-33810) vulnerability in stdlib (CVE-2026-33810). Confidential information can be exposed externally. Mitigation: upgrade to `1.26.2` or later.	High	Cwe 295 Cwe 1289 Golang Go	4 months ago
CVE-2026-34580	Vulnerability in c (CVE-2026-34580) vulnerability in c (CVE-2026-34580). Data can be tampered with by attackers. Mitigation: upgrade to `3.11.1` or later.	High	C Cwe 295 Botan Project Botan	4 months ago
CVE-2026-33896	Vulnerability in digitalbazaar (CVE-2026-33896) vulnerability in digitalbazaar (CVE-2026-33896). Confidential information can be exposed externally. Exploitable via ``basicConstraints``.	High	JavaScript Cwe 295 Digitalbazaar Forge	5 months ago
CVE-2026-27137	Vulnerability in stdlib (CVE-2026-27137) vulnerability in stdlib (CVE-2026-27137). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.26.1` or later.	High	Cwe 295 Golang Go	5 months ago
CVE-2017-17718	The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation. The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.	Medium	Ruby Cwe 295 Net Ldap Project Net Ldap	8 years ago
CVE-2017-1000209	Vulnerability in nv-websocket-client-project (CVE-2017-1000209) vulnerability in nv-websocket-client-project (CVE-2017-1000209). Confidential information can be exposed externally.	Medium	Java Cwe 295 Nv Websocket Client Project Nv Websocket Client	8 years ago
CVE-2014-2845	Vulnerability in c (CVE-2014-2845) vulnerability in c (CVE-2014-2845). Confidential information can be exposed externally.	Medium	C Cwe 295 Cyberduck Microsoft +1	8 years ago
CVE-2017-11770	Vulnerability in csharp (CVE-2017-11770) vulnerability in csharp (CVE-2017-11770). Risk of unauthorized operations or information disclosure.	High	C# Denial of Service Cwe 295 Microsoft +1	8 years ago
CVE-2017-1000097	Vulnerability in golang (CVE-2017-1000097) vulnerability in golang (CVE-2017-1000097). Data can be tampered with by attackers.	High	Cwe 295 Golang Go	8 years ago
CVE-2015-3420	Vulnerability in c (CVE-2015-3420) vulnerability in c (CVE-2015-3420). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 295 Dovecot +2	8 years ago
CVE-2015-2674	Vulnerability in restkit (CVE-2015-2674) vulnerability in restkit (CVE-2015-2674). Data can be tampered with by attackers.	Medium	Python Cwe 295 Restkit	9 years ago
CVE-2017-9574	Vulnerability in c (CVE-2017-9574) vulnerability in c (CVE-2017-9574). Confidential information can be exposed externally.	Medium	C Cwe 295 Meafinancial Kc Area Credit Union Mobile Banking	9 years ago
CVE-2017-4981	Vulnerability in c (CVE-2017-4981) vulnerability in c (CVE-2017-4981). Risk of unauthorized operations or information disclosure.	High	C Cwe 295 Dell Bsafe Cert C	9 years ago
CVE-2017-0248	Vulnerability in csharp (CVE-2017-0248) vulnerability in csharp (CVE-2017-0248). Data can be tampered with by attackers.	High	C# Cwe 295 Microsoft Net Framework	9 years ago
CVE-2017-5915	Vulnerability in c (CVE-2017-5915) vulnerability in c (CVE-2017-5915). Confidential information can be exposed externally.	Medium	C Cwe 295 Emirates Nbd Bank Pjsc Emirates Nbd +1	9 years ago
CVE-2017-5913	Vulnerability in c (CVE-2017-5913) vulnerability in c (CVE-2017-5913). Confidential information can be exposed externally.	Medium	C Cwe 295 Forex Tradeking Forex	9 years ago

Vulnerabilities

🍪 About cookies