Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: vendors Tag: cwe-307 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-73529	Vulnerability in laravel (CVE-2026-73529) vulnerability in laravel (CVE-2026-73529). Risk of unauthorized operations or information disclosure. Exploitable via `POST /v1/sessions`.	Medium	PHP Laravel Cwe 307	1 week ago
CVE-2026-19895	Vulnerability in CVE-2026-19895 (CVE-2026-19895) vulnerability in CVE-2026-19895 (CVE-2026-19895). Risk of unauthorized operations or information disclosure.	Low	PHP Cwe 307 Cwe 799	2 weeks ago
CVE-2026-19297	Vulnerability in langflow (CVE-2026-19297) vulnerability in langflow (CVE-2026-19297). Confidential information can be exposed externally.	Critical	Cwe 307 Langflow Apple macOS +4	2 weeks ago
CVE-2026-65948	Vulnerability in apache (CVE-2026-65948) vulnerability in apache (CVE-2026-65948). Risk of unauthorized operations or information disclosure.	High	Apache Cwe 307 Ranger	2 weeks ago
CVE-2026-16619	Vulnerability in wordpress (CVE-2026-16619) vulnerability in wordpress (CVE-2026-16619). Successful exploitation can lead to full system takeover.	High	WordPress Cwe 307	3 weeks ago
CVE-2026-32825	Vulnerability in rails (CVE-2026-32825) vulnerability in rails (CVE-2026-32825). Confidential information can be exposed externally.	High	Ruby Ruby on Rails Cross-Site Request Forgery Cwe 307	1 month ago
CVE-2026-62220	Vulnerability in openclaw (CVE-2026-62220) vulnerability in openclaw (CVE-2026-62220). Risk of unauthorized operations or information disclosure.	Medium	Cwe 307 Openclaw	1 month ago
CVE-2026-15079	Vulnerability in drupal (CVE-2026-15079) vulnerability in drupal (CVE-2026-15079). Risk of unauthorized operations or information disclosure.	Medium	Drupal Cwe 307 Budda Login Disable	1 month ago
CVE-2026-3329	Vulnerability in sonatype (CVE-2026-3329) vulnerability in sonatype (CVE-2026-3329). Confidential information can be exposed externally.	High	Cwe 307 Sonatype Nexus Repository Manager	2 months ago
CVE-2026-11915	Vulnerability in drupal/bfap_sb (CVE-2026-11915) vulnerability in drupal/bfap_sb (CVE-2026-11915). Confidential information can be exposed externally.	Medium	Drupal Cwe 307	2 months ago
CVE-2026-43926	Vulnerability in nginx (CVE-2026-43926) vulnerability in nginx (CVE-2026-43926). Risk of unauthorized operations or information disclosure.		nginx Apache Cwe 204 Cwe 307	2 months ago
CVE-2026-8760	Vulnerability in wordpress (CVE-2026-8760) vulnerability in wordpress (CVE-2026-8760). Successful exploitation can lead to full system takeover.	Critical	WordPress Authentication Bypass Cwe 307	3 months ago
CVE-2026-44596	Vulnerability in org.yamcs:yamcs-core (CVE-2026-44596) vulnerability in org.yamcs:yamcs-core (CVE-2026-44596). Risk of unauthorized operations or information disclosure. Exploitable via `POST /auth/token`. Mitigation: upgrade to `5.12.7` or later.	Medium	Java Cwe 307 Spaceapplications Yamcs	3 months ago
CVE-2026-7255	Vulnerability in zyxel (CVE-2026-7255) vulnerability in zyxel (CVE-2026-7255). Confidential information can be exposed externally.	Medium	Cwe 307 Zyxel Wre6505 Firmware Wre6505	3 months ago
CVE-2025-46606	Vulnerability in dell (CVE-2025-46606) vulnerability in dell (CVE-2025-46606). Confidential information can be exposed externally.	Medium	Cwe 307 Dell Data Domain Operating System	4 months ago
CVE-2026-33580	Vulnerability in openclaw (CVE-2026-33580) vulnerability in openclaw (CVE-2026-33580). Risk of unauthorized operations or information disclosure.	Medium	Cwe 307 Openclaw	4 months ago
CVE-2026-34505	Vulnerability in openclaw (CVE-2026-34505) vulnerability in openclaw (CVE-2026-34505). Risk of unauthorized operations or information disclosure.	Medium	Cwe 307 Openclaw	4 months ago
CVE-2026-30789	Vulnerability in rustdesk (CVE-2026-30789) vulnerability in rustdesk (CVE-2026-30789). Successful exploitation can lead to full system takeover.	Critical	Cwe 307 Cwe 916 Rustdesk Apple +8	5 months ago
CVE-2025-28172	Vulnerability in grandstream (CVE-2025-28172) vulnerability in grandstream (CVE-2025-28172). Risk of unauthorized operations or information disclosure.	Medium	Cwe 307 Grandstream Ucm6510 Firmware Ucm6510	1 year ago
CVE-2023-21709	Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Exchange Server Elevation of Privilege Vulnerability	Critical	Cwe 307 Microsoft Exchange Server	3 years ago
CVE-2021-41435	Vulnerability in asus (CVE-2021-41435) vulnerability in asus (CVE-2021-41435). Successful exploitation can lead to full system takeover.	Critical	Cwe 307 Asus Gt Ax11000 Firmware Gt Ax11000 +34	4 years ago
CVE-2020-15786	Vulnerability in siemens (CVE-2020-15786) vulnerability in siemens (CVE-2020-15786). Successful exploitation can lead to full system takeover.	Critical	Cwe 307 Siemens Simatic Hmi Basic Panels 2Nd Generation Firmware Simatic Hmi Basic Panels 2Nd Generation +6	5 years ago
CVE-2018-12649	Vulnerability in misp-project (CVE-2018-12649) vulnerability in misp-project (CVE-2018-12649). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 307 Misp Project Misp	8 years ago
CVE-2017-12316	Authentication Bypass in cisco (CVE-2017-12316) authentication bypass in cisco (CVE-2017-12316). Confidential information can be exposed externally.	High	Cwe 287 Cwe 307 Cisco Identity Services Engine Software	8 years ago
CVE-2017-14423	Vulnerability in dlink (CVE-2017-14423) vulnerability in dlink (CVE-2017-14423). Data can be tampered with by attackers.	High	PHP Cwe 307 Dlink Dir 850L Firmware +1	8 years ago
CVE-2017-7673	Vulnerability in apache (CVE-2017-7673) vulnerability in apache (CVE-2017-7673). Successful exploitation can lead to full system takeover.	Critical	Apache Cwe 307 Cwe 326 Openmeetings	9 years ago
CVE-2017-10604	Vulnerability in juniper (CVE-2017-10604) vulnerability in juniper (CVE-2017-10604). Risk of unauthorized operations or information disclosure.	Medium	Cwe 307 Juniper Junos Srx	9 years ago
CVE-2017-1197	Vulnerability in ibm (CVE-2017-1197) vulnerability in ibm (CVE-2017-1197). Successful exploitation can lead to full system takeover.	Critical	Cwe 307 Ibm Bigfix Security Compliance Analytics	9 years ago

Vulnerabilities

🍪 About cookies