Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-51290	Use-After-Free in dos (CVE-2026-51290) vulnerability in dos (CVE-2026-51290). Confidential information can be exposed externally.	Critical	Denial of Service Cwe 416	1 month ago
CVE-2026-12945	Vulnerability in langflow (CVE-2026-12945) vulnerability in langflow (CVE-2026-12945). Confidential information can be exposed externally.	High	Cwe 639 Langflow	1 month ago
CVE-2026-12996	Out-of-Bounds Read in dos (CVE-2026-12996) vulnerability in dos (CVE-2026-12996). Confidential information can be exposed externally.	High	Denial of Service Cwe 125 Cwe 416 Openvpn +2	1 month ago
CVE-2026-12940	OS Command Injection in langflow (CVE-2026-12940) OS command injection in langflow (CVE-2026-12940). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 78 Langflow	1 month ago
CVE-2026-12932	Vulnerability in dos (CVE-2026-12932) vulnerability in dos (CVE-2026-12932). Confidential information can be exposed externally.	High	Denial of Service Cwe 401 Openvpn	1 month ago
CVE-2026-11885	Vulnerability in CVE-2026-11885 (CVE-2026-11885) vulnerability in CVE-2026-11885 (CVE-2026-11885). Data can be tampered with by attackers.	High	Cwe 120	1 month ago
CVE-2026-51293	Vulnerability in CVE-2026-51293 (CVE-2026-51293) vulnerability in CVE-2026-51293 (CVE-2026-51293). Risk of unauthorized operations or information disclosure.			1 month ago
CVE-2026-51294	SQLite 3.41 is vulnerable to use after free in the jsonArrayLengthFunc function. SQLite 3.41 is vulnerable to use after free in the jsonArrayLengthFunc function.			1 month ago
CVE-2026-51295	Vulnerability in CVE-2026-51295 (CVE-2026-51295) vulnerability in CVE-2026-51295 (CVE-2026-51295). Risk of unauthorized operations or information disclosure.			1 month ago
CVE-2026-13117	Use-After-Free in dos (CVE-2026-13117) vulnerability in dos (CVE-2026-13117). Confidential information can be exposed externally.	High	Denial of Service Cwe 416 Openvpn	1 month ago
CVE-2026-11771	Vulnerability in openvpn (CVE-2026-11771) vulnerability in openvpn (CVE-2026-11771). Risk of unauthorized operations or information disclosure.	High	Cwe 121 Cwe 193 Cwe 787 Openvpn	1 month ago
CVE-2026-67596	Vulnerability in CVE-2026-67596 (CVE-2026-67596) vulnerability in CVE-2026-67596 (CVE-2026-67596). Confidential information can be exposed externally.	Medium	Cwe 261	1 month ago
CVE-2026-58222	Vulnerability in privilege-escalation (CVE-2026-58222) vulnerability in privilege-escalation (CVE-2026-58222). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 90	1 month ago
CVE-2026-58216	Out-of-Bounds Read in dos (CVE-2026-58216) vulnerability in dos (CVE-2026-58216). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 125	1 month ago
CVE-2026-44613	Cross-Site Request Forgery (CSRF) in apache (CVE-2026-44613) vulnerability in apache (CVE-2026-44613). Risk of unauthorized operations or information disclosure.	Medium	Apache Cross-Site Request Forgery Cwe 352 Zeppelin	1 month ago
CVE-2026-57862	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-57862) SSRF in ssrf (CVE-2026-57862). Confidential information can be exposed externally.	High	PHP Server-Side Request Forgery Cwe 918	1 month ago
CVE-2026-48910	Vulnerability in apache (CVE-2026-48910) vulnerability in apache (CVE-2026-48910). Confidential information can be exposed externally.	Medium	JavaScript Apache Cross-Site Scripting Cwe 80 +1	1 month ago
CVE-2026-28813	Cross-Site Request Forgery (CSRF) in apache (CVE-2026-28813) vulnerability in apache (CVE-2026-28813). Successful exploitation can lead to full system takeover.	High	Apache Cross-Site Request Forgery Cwe 352 Jspwiki	1 month ago
CVE-2026-4978	SQL Injection in sqli (CVE-2026-4978) SQL injection in sqli (CVE-2026-4978). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	1 month ago
CVE-2026-28814	Vulnerability in apache (CVE-2026-28814) vulnerability in apache (CVE-2026-28814). Confidential information can be exposed externally.	High	Apache Cwe 306 Jspwiki	1 month ago
CVE-2026-44616	Vulnerability in apache (CVE-2026-44616) vulnerability in apache (CVE-2026-44616). Confidential information can be exposed externally.	Medium	Apache Cwe 90 Zeppelin	1 month ago
CVE-2026-52680	Path Traversal in apache (CVE-2026-52680) path traversal in apache (CVE-2026-52680). Successful exploitation can lead to full system takeover.	Critical	Apache Path Traversal Cwe 22 Cwe 73 +1	1 month ago
CVE-2026-44617	Vulnerability in apache (CVE-2026-44617) vulnerability in apache (CVE-2026-44617). Risk of unauthorized operations or information disclosure.	Medium	Apache Cwe 90 Zeppelin	1 month ago
CVE-2026-28812	Vulnerability in apache (CVE-2026-28812) vulnerability in apache (CVE-2026-28812). Successful exploitation can lead to full system takeover.	Critical	Apache Cwe 290 Jspwiki	1 month ago
CVE-2026-28323	Authentication Bypass in solarwinds (CVE-2026-28323) authentication bypass in solarwinds (CVE-2026-28323). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 287 Solarwinds Web Help Desk	1 month ago
CVE-2026-23985	Vulnerability in apache (CVE-2026-23985) vulnerability in apache (CVE-2026-23985). Risk of unauthorized operations or information disclosure.	Medium	Apache Denial of Service Cwe 1333 Superset	1 month ago
CVE-2026-28811	Vulnerability in apache (CVE-2026-28811) vulnerability in apache (CVE-2026-28811). Confidential information can be exposed externally.	High	Apache Cwe 1295 Jspwiki	1 month ago
CVE-2026-23981	Vulnerability in apache (CVE-2026-23981) vulnerability in apache (CVE-2026-23981). Risk of unauthorized operations or information disclosure.	Medium	Apache Cwe 285 Superset	1 month ago
CVE-2026-15658	Vulnerability in CVE-2026-15658 (CVE-2026-15658) vulnerability in CVE-2026-15658 (CVE-2026-15658). Confidential information can be exposed externally.	High	Cwe 639	1 month ago
CVE-2026-10842	Vulnerability in ibm (CVE-2026-10842) vulnerability in ibm (CVE-2026-10842). Confidential information can be exposed externally.	High	Cwe 289 Ibm Websphere Application Server	1 month ago
CVE-2026-15657	Vulnerability in CVE-2026-15657 (CVE-2026-15657) vulnerability in CVE-2026-15657 (CVE-2026-15657). Confidential information can be exposed externally.	Medium	Cwe 522	1 month ago
CVE-2026-66066	Vulnerability in activestorage (CVE-2026-66066) vulnerability in activestorage (CVE-2026-66066). Risk of unauthorized operations or information disclosure. Exploitable via ``secret_key_base``. Mitigation: upgrade to `8.1.3.1` or later.		Ruby Ruby on Rails Remote Code Execution Cwe 1188	1 month ago
CVE-2026-5846	Vulnerability in cisa (CVE-2026-5846) vulnerability in cisa (CVE-2026-5846). Confidential information can be exposed externally.	Medium	Cisa Ics Industrial Ot +2	1 month ago
CVE-2026-61893	Out-of-Bounds Read in cisa (CVE-2026-61893) vulnerability in cisa (CVE-2026-61893). Risk of unauthorized operations or information disclosure.	Medium	Cisa Ics Industrial Ot +2	1 month ago
CVE-2026-14227	Vulnerability in cisa (CVE-2026-14227) vulnerability in cisa (CVE-2026-14227). Confidential information can be exposed externally.	Medium	Cisa Ics Industrial Ot +2	1 month ago
CVE-2026-62663	Path Traversal in path-traversal (CVE-2026-62663) path traversal in path-traversal (CVE-2026-62663). Confidential information can be exposed externally.	High	Python Path Traversal Cwe 22	1 month ago
CVE-2026-54522	Use-After-Free in msgpack (CVE-2026-54522) vulnerability in msgpack (CVE-2026-54522). Risk of unauthorized operations or information disclosure. Exploitable via ``rmem_last``. Mitigation: upgrade to `1.8.2` or later.	Medium	Ruby C Cwe 416 Msgpack +1	1 month ago
CVE-2026-54722	Vulnerability in dssrf (CVE-2026-54722) vulnerability in dssrf (CVE-2026-54722). Risk of unauthorized operations or information disclosure. Exploitable via ``is_url_safe``. Mitigation: upgrade to `1.0.4` or later.		JavaScript Server-Side Request Forgery Cwe 76	1 month ago
CVE-2026-41186	Information Disclosure in tigera (CVE-2026-41186) vulnerability in tigera (CVE-2026-41186). Confidential information can be exposed externally.	High	Cwe 200 Cwe 489 Tigera Calico	1 month ago
CVE-2026-67348	Vulnerability in CVE-2026-67348 (CVE-2026-67348) vulnerability in CVE-2026-67348 (CVE-2026-67348). Confidential information can be exposed externally.	High	Cwe 639	1 month ago
CVE-2026-15435	Path Traversal in ibm (CVE-2026-15435) path traversal in ibm (CVE-2026-15435). Successful exploitation can lead to full system takeover.	Critical	Cwe 22 Ibm App Connect Enterprise	1 month ago
CVE-2026-67347	Authorization Flaw in CVE-2026-67347 (CVE-2026-67347) vulnerability in CVE-2026-67347 (CVE-2026-67347). Data can be tampered with by attackers.	Medium	Cwe 863	1 month ago
CVE-2026-67349	Vulnerability in CVE-2026-67349 (CVE-2026-67349) vulnerability in CVE-2026-67349 (CVE-2026-67349). Confidential information can be exposed externally. Exploitable via `GET /helmValues`.	High	Cwe 306	1 month ago
CVE-2026-11980	Vulnerability in ibm (CVE-2026-11980) vulnerability in ibm (CVE-2026-11980). Successful exploitation can lead to full system takeover.	High	Cwe 242 Ibm Aspera Desktop App Apple +6	1 month ago
CVE-2026-16308	Vulnerability in dos (CVE-2026-16308) vulnerability in dos (CVE-2026-16308). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770	1 month ago
CVE-2026-14980	Privilege Escalation in ssrf (CVE-2026-14980) vulnerability in ssrf (CVE-2026-14980). Confidential information can be exposed externally.	High	Server-Side Request Forgery Cwe 269 Ibm Websphere Application Server	1 month ago
CVE-2026-67346	SSRF (Server-Side Request Forgery) in CVE-2026-67346 (CVE-2026-67346) SSRF in CVE-2026-67346 (CVE-2026-67346). Confidential information can be exposed externally.	High	Cwe 918	1 month ago
CVE-2026-12947	Vulnerability in ibm (CVE-2026-12947) vulnerability in ibm (CVE-2026-12947). Confidential information can be exposed externally.	High	Cwe 532 Ibm App Connect Enterprise	1 month ago
CVE-2026-6540	Path Traversal in tigera (CVE-2026-6540) path traversal in tigera (CVE-2026-6540). Confidential information can be exposed externally.	High	Cwe 22 Cwe 23 Tigera Calico	1 month ago
CVE-2026-11897	Vulnerability in dos (CVE-2026-11897) vulnerability in dos (CVE-2026-11897). Confidential information can be exposed externally.	High	Denial of Service Cwe 770 Ibm Websphere Application Server	1 month ago

Vulnerabilities

🍪 About cookies