Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: products Clear

ID	Title	Severity	Tags	Detected
CVE-2026-44959	Code Injection in CVE-2026-44959 (CVE-2026-44959) code injection in CVE-2026-44959 (CVE-2026-44959). Successful exploitation can lead to full system takeover.	High	PHP Cwe 94	2 months ago
CVE-2026-44956	Cross-Site Scripting (XSS) in CVE-2026-44956 (CVE-2026-44956) cross-site scripting in CVE-2026-44956 (CVE-2026-44956). Risk of unauthorized operations or information disclosure.	None	PHP JavaScript Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-34912	Vulnerability in CVE-2026-34912 (CVE-2026-34912) vulnerability in CVE-2026-34912 (CVE-2026-34912). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 284	2 months ago
CVE-2026-34913	Vulnerability in CVE-2026-34913 (CVE-2026-34913) vulnerability in CVE-2026-34913 (CVE-2026-34913). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 284	2 months ago
CVE-2026-34914	SQL Injection in sqli (CVE-2026-34914) SQL injection in sqli (CVE-2026-34914). Data can be tampered with by attackers.	High	PHP SQL Injection Cwe 89	2 months ago
CVE-2026-34915	Cross-Site Scripting (XSS) in sqli (CVE-2026-34915) cross-site scripting in sqli (CVE-2026-34915). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 79	2 months ago
CVE-2026-34916	Code Injection in CVE-2026-34916 (CVE-2026-34916) code injection in CVE-2026-34916 (CVE-2026-34916). Successful exploitation can lead to full system takeover.	High	PHP Cwe 94	2 months ago
CVE-2026-11772	Cross-Site Scripting (XSS) in CVE-2026-11772 (CVE-2026-11772) cross-site scripting in CVE-2026-11772 (CVE-2026-11772). Risk of unauthorized operations or information disclosure.		PHP JavaScript Cross-Site Scripting Cwe 79	2 months ago
CVE-2026-56371	Vulnerability in c (CVE-2026-56371) vulnerability in c (CVE-2026-56371). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 401 Imagemagick	2 months ago
CVE-2026-56376	Use-After-Free in dos (CVE-2026-56376) vulnerability in dos (CVE-2026-56376). Risk of unauthorized operations or information disclosure.	Low	Denial of Service Cwe 416 Imagemagick	2 months ago
CVE-2026-56379	Vulnerability in imagemagick (CVE-2026-56379) vulnerability in imagemagick (CVE-2026-56379). Successful exploitation can lead to full system takeover.	High	Cwe 116 Imagemagick Cwe 78	2 months ago
CVE-2026-55599	SSRF (Server-Side Request Forgery) in phpseclib/phpseclib (CVE-2026-55599) SSRF in phpseclib/phpseclib (CVE-2026-55599). Risk of unauthorized operations or information disclosure. Exploitable via `GET /ssrf`. Mitigation: upgrade to `3.0.54` or later.	Medium	PHP Server-Side Request Forgery Cwe 918 Phpseclib	2 months ago
CVE-2026-33731	Vulnerability in wwbn/avideo (CVE-2026-33731) vulnerability in wwbn/avideo (CVE-2026-33731). Data can be tampered with by attackers. Exploitable via ``users_id``. Mitigation: upgrade to `29.0` or later.	Medium	PHP C# Cwe 345	2 months ago
CVE-2026-33692	Vulnerability in wwbn/avideo (CVE-2026-33692) vulnerability in wwbn/avideo (CVE-2026-33692). Confidential information can be exposed externally. Exploitable via `GET /.env`. Mitigation: upgrade to `29.0` or later.	High	Apache Cwe 20	2 months ago
CVE-2026-42127	Vulnerability in dos (CVE-2026-42127) vulnerability in dos (CVE-2026-42127). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770 Grafana Cwe 400	2 months ago
CVE-2026-9006	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-9006) SSRF in ssrf (CVE-2026-9006). Confidential information can be exposed externally.	High	Server-Side Request Forgery Cwe 918 Ibm Websphere Application Server +7	2 months ago
CVE-2026-9071	Vulnerability in dos (CVE-2026-9071) vulnerability in dos (CVE-2026-9071). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Ibm Websphere Application Server +9	2 months ago
CVE-2026-9320	Vulnerability in dos (CVE-2026-9320) vulnerability in dos (CVE-2026-9320). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 400 Ibm Websphere Application Server +9	2 months ago
CVE-2026-8646	Vulnerability in ibm (CVE-2026-8646) vulnerability in ibm (CVE-2026-8646). Confidential information can be exposed externally.	High	Cwe 444 Ibm Websphere Application Server Apple +8	2 months ago
CVE-2026-7664	Authentication Bypass in langflow (CVE-2026-7664) authentication bypass in langflow (CVE-2026-7664). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Langflow	2 months ago
CVE-2026-10845	Authentication Bypass in ibm (CVE-2026-10845) authentication bypass in ibm (CVE-2026-10845). Risk of unauthorized operations or information disclosure.	High	Cwe 287 Ibm Websphere Application Server Aix +6	2 months ago
CVE-2026-9029	The geomap panel's XYZ tile layer has a sanitize-then-interpolate ordering bug.... The geomap panel's XYZ tile layer has a sanitize-then-interpolate ordering bug....	High	Cross-Site Scripting Grafana Cwe 79	2 months ago
CVE-2026-56425	Vulnerability in csrf (CVE-2026-56425) vulnerability in csrf (CVE-2026-56425). Successful exploitation can lead to full system takeover. Exploitable via `Referer header`.	High	PHP Cross-Site Request Forgery Cwe 384 Misp Project +1	2 months ago
CVE-2026-56446	Code Injection in misp-project (CVE-2026-56446) code injection in misp-project (CVE-2026-56446). Successful exploitation can lead to full system takeover.	High	PHP Remote Code Execution Cwe 94 Misp Project +1	2 months ago
CVE-2026-54099	A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container... A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container...	High	Cwe 269 Openshift Windows Privilege Escalation +3	2 months ago
CVE-2026-54100	A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container... A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container...	High	Cwe 295 Openshift Windows SSH +3	2 months ago
CVE-2026-42129	The Loki datasource plugin's callResource handler contains a path traversal vulnerability. An... The Loki datasource plugin's callResource handler contains a path traversal vulnerability. An...	High	Path Traversal Cwe 22 Grafana Loki Datasource	2 months ago
CVE-2026-28381	Vulnerability in grafana (CVE-2026-28381) vulnerability in grafana (CVE-2026-28381). Confidential information can be exposed externally.	Critical	Cwe 284 Grafana Snowflake	2 months ago
CVE-2026-10601	Path Traversal in path-traversal (CVE-2026-10601) path traversal in path-traversal (CVE-2026-10601). Risk of unauthorized operations or information disclosure.	Medium	Path Traversal Cwe 22 Grafana	2 months ago
CVE-2026-10561	Code Injection in langflow (CVE-2026-10561) code injection in langflow (CVE-2026-10561). Successful exploitation can lead to full system takeover.	Critical	Python Authentication Bypass Cwe 94 Langflow	2 months ago
CVE-2025-66336	SQL Injection in apache (CVE-2025-66336) SQL injection in apache (CVE-2025-66336). Confidential information can be exposed externally.	High	Apache SQL Injection Cwe 89 Doris Mcp Server	2 months ago
CVE-2026-44913	Vulnerability in nifi (CVE-2026-44913) vulnerability in nifi (CVE-2026-44913). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.10.0` or later.	High	Apache Cwe 116 Nifi	2 months ago
CVE-2026-44914	Vulnerability in nifi (CVE-2026-44914) vulnerability in nifi (CVE-2026-44914). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.10.0` or later.	High	Apache Cwe 862 Nifi	2 months ago
CVE-2026-44911	Authorization Flaw in nifi (CVE-2026-44911) vulnerability in nifi (CVE-2026-44911). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.10.0` or later.	Medium	Apache Cwe 863 Nifi	2 months ago
CVE-2026-54665	Vulnerability in nifi (CVE-2026-54665) vulnerability in nifi (CVE-2026-54665). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `2.10.0` or later.	Medium	Apache Cwe 346 Nifi	2 months ago
CVE-2025-62198	Vulnerability in apache (CVE-2025-62198) vulnerability in apache (CVE-2025-62198). Risk of unauthorized operations or information disclosure.	Medium	Apache Cross-Site Scripting Cwe 80 Atlas	2 months ago
CVE-2026-12822	Vulnerability in langflow (CVE-2026-12822) vulnerability in langflow (CVE-2026-12822). Risk of unauthorized operations or information disclosure.	Medium	Cwe 74 Cwe 94 Langflow	2 months ago
CVE-2026-56382	Code Injection in craftcms/cms (CVE-2026-56382) code injection in craftcms/cms (CVE-2026-56382). Successful exploitation can lead to full system takeover. Exploitable via `POST /admin/actions/fields/render-card-preview`. Mitigation: upgrade to `5.9.14` or later.	High	PHP Remote Code Execution Cwe 94	2 months ago
CVE-2026-56367	Out-of-Bounds Read in c (CVE-2026-56367) vulnerability in c (CVE-2026-56367). Risk of unauthorized operations or information disclosure.	Low	C Cwe 125 Imagemagick	2 months ago
CVE-2026-56378	Out-of-Bounds Read in dos (CVE-2026-56378) vulnerability in dos (CVE-2026-56378). Risk of unauthorized operations or information disclosure.	Low	Denial of Service Cwe 125 Imagemagick	2 months ago
CVE-2026-12798	SSRF (Server-Side Request Forgery) in litellm (CVE-2026-12798) SSRF in litellm (CVE-2026-12798). Risk of unauthorized operations or information disclosure.	Medium	Cwe 918 LiteLLM	2 months ago
CVE-2026-12799	Vulnerability in litellm (CVE-2026-12799) vulnerability in litellm (CVE-2026-12799). Risk of unauthorized operations or information disclosure.	Medium	Cwe 266 Cwe 285 LiteLLM	2 months ago
CVE-2026-12797	Vulnerability in litellm (CVE-2026-12797) vulnerability in litellm (CVE-2026-12797). Risk of unauthorized operations or information disclosure.	Medium	Cwe 285 Cwe 863 LiteLLM	2 months ago
CVE-2026-12796	Vulnerability in litellm (CVE-2026-12796) vulnerability in litellm (CVE-2026-12796). Risk of unauthorized operations or information disclosure.	Medium	Cwe 613 LiteLLM	2 months ago
CVE-2026-12795	Authentication Bypass in litellm (CVE-2026-12795) authentication bypass in litellm (CVE-2026-12795). Risk of unauthorized operations or information disclosure.	High	Cwe 287 Cwe 306 LiteLLM	2 months ago
CVE-2026-12789	Vulnerability in sqli (CVE-2026-12789) vulnerability in sqli (CVE-2026-12789). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	2 months ago
CVE-2026-12775	Vulnerability in sqli (CVE-2026-12775) vulnerability in sqli (CVE-2026-12775). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	2 months ago
CVE-2026-12776	Vulnerability in sqli (CVE-2026-12776) vulnerability in sqli (CVE-2026-12776). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 74 Cwe 89	2 months ago
CVE-2026-12774	SSRF (Server-Side Request Forgery) in litellm (CVE-2026-12774) SSRF in litellm (CVE-2026-12774). Risk of unauthorized operations or information disclosure.	Medium	Cwe 918 LiteLLM	2 months ago
CVE-2026-12773	A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function... A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function...	High	Cwe 287 LiteLLM Improper Auth Cwe 303	2 months ago

Vulnerabilities

🍪 About cookies