Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: products Clear

ID	Title	Severity	Tags	Detected
CVE-2026-41608	Vulnerability in apache (CVE-2026-41608) vulnerability in apache (CVE-2026-41608). Risk of unauthorized operations or information disclosure.	High	Python Apache Cwe 409 Thrift	1 month ago
CVE-2026-55970	Vulnerability in c (CVE-2026-55970) vulnerability in c (CVE-2026-55970). Risk of unauthorized operations or information disclosure.	Medium	C Apache Cwe 126 Thrift	1 month ago
CVE-2026-49158	Vulnerability in apache (CVE-2026-49158) vulnerability in apache (CVE-2026-49158). Risk of unauthorized operations or information disclosure.	High	Ruby Apache Cwe 409 Thrift	1 month ago
CVE-2026-55968	Vulnerability in apache (CVE-2026-55968) vulnerability in apache (CVE-2026-55968). Risk of unauthorized operations or information disclosure.	High	JavaScript Apache Cwe 407 Cwe 770 +1	1 month ago
CVE-2026-45112	Vulnerability in apache (CVE-2026-45112) vulnerability in apache (CVE-2026-45112). Risk of unauthorized operations or information disclosure.	High	Java Apache Cwe 770 Thrift	1 month ago
CVE-2026-48144	Vulnerability in apache (CVE-2026-48144) vulnerability in apache (CVE-2026-48144). Confidential information can be exposed externally.	Critical	Apache Cwe 297 Thrift	1 month ago
CVE-2026-48145	Vulnerability in c (CVE-2026-48145) vulnerability in c (CVE-2026-48145). Confidential information can be exposed externally.	High	C Apache Cwe 297 Thrift	1 month ago
CVE-2026-13714	Unrestricted File Upload in wordpress (CVE-2026-13714) vulnerability in wordpress (CVE-2026-13714). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Remote Code Execution Cwe 434	1 month ago
CVE-2025-68686 KEV	[KEV] Information Disclosure in Fortinet fortios (CVE-2025-68686) vulnerability in Fortinet fortios (CVE-2025-68686). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.	Medium	Cwe 200 Fortinet Fortios	1 month ago
CVE-2026-15962	Unsafe Deserialization in wordpress (CVE-2026-15962) vulnerability in wordpress (CVE-2026-15962). Successful exploitation can lead to full system takeover.	High	PHP WordPress Insecure Deserialization Cwe 502	1 month ago
CVE-2026-66011	Vulnerability in imagemagick (CVE-2026-66011) vulnerability in imagemagick (CVE-2026-66011). Risk of unauthorized operations or information disclosure.	Low	Cwe 401 Imagemagick	1 month ago
CVE-2026-65707	SQL Injection in sqli (CVE-2026-65707) SQL injection in sqli (CVE-2026-65707). Confidential information can be exposed externally.	Medium	PHP SQL Injection Cwe 89	1 month ago
CVE-2026-73649	Code Injection in velocityjs (CVE-2026-73649) code injection in velocityjs (CVE-2026-73649). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.7` or later.	Critical	JavaScript Apache Cwe 94	1 month ago
CVE-2026-62946	Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-62946) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-62946). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.15.0` or later.	Medium	Cwe 190 Imagemagick	1 month ago
CVE-2026-62363	ImageMagick: Heap Buffer Over-Write in fx operation ImageMagick: Heap Buffer Over-Write in fx operation	Medium	Cwe 787 Imagemagick	1 month ago
CVE-2026-62343	Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-62343) vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-62343). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.15.0` or later.	Medium	Cwe 190 Imagemagick	1 month ago
CVE-2026-49326	Vulnerability in apache (CVE-2026-49326) vulnerability in apache (CVE-2026-49326). Confidential information can be exposed externally.	Medium	Apache Cwe 862 Hbase	1 month ago
CVE-2026-45812	Vulnerability in apache (CVE-2026-45812) vulnerability in apache (CVE-2026-45812). Confidential information can be exposed externally.	Medium	Apache Cwe 131 Nimble	1 month ago
CVE-2026-45815	Vulnerability in apache (CVE-2026-45815) vulnerability in apache (CVE-2026-45815). Risk of unauthorized operations or information disclosure.	High	Apache Cwe 617 Nimble	1 month ago
CVE-2026-45813	Vulnerability in c (CVE-2026-45813) vulnerability in c (CVE-2026-45813). Successful exploitation can lead to full system takeover.	High	C Apache Cwe 191 Cwe 787 +1	1 month ago
CVE-2026-66144	Vulnerability in dos (CVE-2026-66144) vulnerability in dos (CVE-2026-66144). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Apache Neethi	1 month ago
CVE-2026-46452	Vulnerability in apache (CVE-2026-46452) vulnerability in apache (CVE-2026-46452). Risk of unauthorized operations or information disclosure.	Medium	Apache Cwe 20 Nimble	1 month ago
CVE-2026-66142	Vulnerability in apache (CVE-2026-66142) vulnerability in apache (CVE-2026-66142). Risk of unauthorized operations or information disclosure.	High	Apache Denial of Service Cwe 400 Neethi	1 month ago
CVE-2026-45816	Vulnerability in apache (CVE-2026-45816) vulnerability in apache (CVE-2026-45816). Risk of unauthorized operations or information disclosure.	High	Apache Cwe 476 Nimble	1 month ago
CVE-2026-66143	Vulnerability in apache (CVE-2026-66143) vulnerability in apache (CVE-2026-66143). Risk of unauthorized operations or information disclosure.	High	Apache Denial of Service Cwe 400 Neethi	1 month ago
CVE-2026-45811	Vulnerability in apache (CVE-2026-45811) vulnerability in apache (CVE-2026-45811). Successful exploitation can lead to full system takeover.	High	Apache Cwe 120 Nimble	1 month ago
CVE-2026-15663	SQL Injection in wordpress (CVE-2026-15663) SQL injection in wordpress (CVE-2026-15663). Confidential information can be exposed externally.	Medium	PHP WordPress SQL Injection Cwe 89	1 month ago
CVE-2026-63317	Vulnerability in apache (CVE-2026-63317) vulnerability in apache (CVE-2026-63317). Risk of unauthorized operations or information disclosure.	Medium	Apache Remote Code Execution Cwe 470 Opennlp	1 month ago
CVE-2026-12702	Vulnerability in octopus (CVE-2026-12702) vulnerability in octopus (CVE-2026-12702). Data can be tampered with by attackers.	Medium	Cwe 284 Octopus Octopus Server Linux +3	1 month ago
CVE-2026-16870	Vulnerability in CVE-2026-16870 (CVE-2026-16870) vulnerability in CVE-2026-16870 (CVE-2026-16870). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 121 Cwe 787 Cwe 918 +1	1 month ago
CVE-2026-66140	Vulnerability in path-traversal (CVE-2026-66140) vulnerability in path-traversal (CVE-2026-66140). Successful exploitation can lead to full system takeover.	High	Path Traversal Cwe 24 Exim	1 month ago
CVE-2026-66141	Vulnerability in privilege-escalation (CVE-2026-66141) vulnerability in privilege-escalation (CVE-2026-66141). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 829 Exim	1 month ago
CVE-2026-6454	Cross-Site Scripting (XSS) in wordpress (CVE-2026-6454) cross-site scripting in wordpress (CVE-2026-6454). Risk of unauthorized operations or information disclosure.	Medium	PHP JavaScript WordPress Cross-Site Scripting +1	1 month ago
CVE-2026-16767	Path Traversal in path-traversal (CVE-2026-16767) path traversal in path-traversal (CVE-2026-16767). Risk of unauthorized operations or information disclosure.	Medium	PHP Path Traversal Cwe 22	1 month ago
CVE-2026-16807	Out-of-Bounds Write in Google chrome (CVE-2026-16807) out-of-bounds write in Google chrome (CVE-2026-16807). Successful exploitation can lead to full system takeover.	High	Chrome Google Browser Webkit +1	1 month ago
CVE-2026-16765	Vulnerability in sqli (CVE-2026-16765) vulnerability in sqli (CVE-2026-16765). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	1 month ago
CVE-2026-16806	Use-After-Free in google (CVE-2026-16806) vulnerability in google (CVE-2026-16806). Successful exploitation can lead to full system takeover.	High	Cwe 416 Google Chrome	1 month ago
CVE-2026-16805	Use-After-Free in google (CVE-2026-16805) vulnerability in google (CVE-2026-16805). Successful exploitation can lead to full system takeover.	High	Cwe 416 Google Chrome	1 month ago
CVE-2026-16804	Use-After-Free in google (CVE-2026-16804) vulnerability in google (CVE-2026-16804). Successful exploitation can lead to full system takeover.	High	Cwe 416 Google Chrome	1 month ago
CVE-2026-15981	Authentication Bypass in wordpress (CVE-2026-15981) authentication bypass in wordpress (CVE-2026-15981). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Authentication Bypass Cwe 287	1 month ago
CVE-2026-15968	Cross-Site Scripting (XSS) in progress (CVE-2026-15968) cross-site scripting in progress (CVE-2026-15968). Successful exploitation can lead to full system takeover.	High	Cross-Site Scripting Cwe 79 Progress Moveit Transfer	1 month ago
CVE-2026-10697	Authentication Bypass in progress (CVE-2026-10697) authentication bypass in progress (CVE-2026-10697). Successful exploitation can lead to full system takeover.	High	Cwe 287 Progress Moveit Transfer	1 month ago
CVE-2026-15966	Vulnerability in progress (CVE-2026-15966) vulnerability in progress (CVE-2026-15966). Successful exploitation can lead to full system takeover.	High	Cwe 942 Progress Moveit Transfer	1 month ago
CVE-2026-15967	Vulnerability in progress (CVE-2026-15967) vulnerability in progress (CVE-2026-15967). Successful exploitation can lead to full system takeover.	High	Cwe 613 Progress Moveit Transfer	1 month ago
CVE-2026-65906	Code Injection in jetbrains (CVE-2026-65906) code injection in jetbrains (CVE-2026-65906). Successful exploitation can lead to full system takeover.	High	Cwe 94 Jetbrains Teamcity	1 month ago
CVE-2026-59933	Vulnerability in phpoffice/phpspreadsheet (CVE-2026-59933) vulnerability in phpoffice/phpspreadsheet (CVE-2026-59933). Risk of unauthorized operations or information disclosure. Exploitable via ``bigBlockChain``. Mitigation: upgrade to `1.30.6` or later.	High	PHP Denial of Service Cwe 400 Cwe 835	1 month ago
CVE-2026-59932	Vulnerability in phpoffice/phpspreadsheet (CVE-2026-59932) vulnerability in phpoffice/phpspreadsheet (CVE-2026-59932). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.30.6` or later.	High	PHP Denial of Service Cwe 400 Cwe 409	1 month ago
CVE-2026-59931	SSRF (Server-Side Request Forgery) in phpoffice/phpspreadsheet (CVE-2026-59931) SSRF in phpoffice/phpspreadsheet (CVE-2026-59931). Confidential information can be exposed externally. Exploitable via ``example.com``. Mitigation: upgrade to `1.30.6` or later.	High	PHP Server-Side Request Forgery Cwe 918	1 month ago
CVE-2026-65493	Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions. Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions.	High	PHP Cwe 502	1 month ago
CVE-2026-65497	Administrator PHP Object Injection in Complianz <= 7.5.0 versions. Administrator PHP Object Injection in Complianz <= 7.5.0 versions.	High	PHP Cwe 502	1 month ago

Vulnerabilities

🍪 About cookies