Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
ID Title
CVE-2026-8339 SQL Injection in sqli (CVE-2026-8339)
SQL injection in sqli (CVE-2026-8339). Risk of unauthorized operations or information disclosure.
CVE-2026-40272 Vulnerability in CVE-2026-40272 (CVE-2026-40272)
vulnerability in CVE-2026-40272 (CVE-2026-40272). Successful exploitation can lead to full system takeover.
CVE-2026-18236 Authorization Flaw in CVE-2026-18236 (CVE-2026-18236)
vulnerability in CVE-2026-18236 (CVE-2026-18236). Risk of unauthorized operations or information disclosure.
CVE-2026-41939 Vulnerability in CVE-2026-41939 (CVE-2026-41939)
vulnerability in CVE-2026-41939 (CVE-2026-41939). Successful exploitation can lead to full system takeover.
CVE-2026-18255 Authorization Flaw in CVE-2026-18255 (CVE-2026-18255)
vulnerability in CVE-2026-18255 (CVE-2026-18255). Successful exploitation can lead to full system takeover.
CVE-2026-13723 Path Traversal in CVE-2026-13723 (CVE-2026-13723)
path traversal in CVE-2026-13723 (CVE-2026-13723). Risk of unauthorized operations or information disclosure. Exploitable via ``zipx.Unzip``.
CVE-2026-64560 Vulnerability in CVE-2026-64560 (CVE-2026-64560)
vulnerability in CVE-2026-64560 (CVE-2026-64560). Successful exploitation can lead to full system takeover.
CVE-2026-8338 Vulnerability in CVE-2026-8338 (CVE-2026-8338)
vulnerability in CVE-2026-8338 (CVE-2026-8338). Risk of unauthorized operations or information disclosure.
CVE-2026-14266 Vulnerability in 7-zip (CVE-2026-14266)
vulnerability in 7-zip (CVE-2026-14266). Successful exploitation can lead to full system takeover.
CVE-2026-18257 Vulnerability in CVE-2026-18257 (CVE-2026-18257)
vulnerability in CVE-2026-18257 (CVE-2026-18257). Risk of unauthorized operations or information disclosure.
CVE-2025-60931 Vulnerability in CVE-2025-60931 (CVE-2025-60931)
vulnerability in CVE-2025-60931 (CVE-2025-60931). Confidential information can be exposed externally.
CVE-2026-54705 Vulnerability in mathlive (CVE-2026-54705)
vulnerability in mathlive (CVE-2026-54705). Risk of unauthorized operations or information disclosure. Exploitable via ``Box.toMarkup``. Mitigation: upgrade to `0.110.0` or later.
CVE-2026-52791 Vulnerability in c (CVE-2026-52791)
vulnerability in c (CVE-2026-52791). Risk of unauthorized operations or information disclosure.
CVE-2026-16729 Vulnerability in undici (CVE-2026-16729)
vulnerability in undici (CVE-2026-16729). Risk of unauthorized operations or information disclosure. Exploitable via ``setCookie``. Mitigation: upgrade to `8.9.0` or later.
CVE-2026-15144 Vulnerability in fastify (CVE-2026-15144)
vulnerability in fastify (CVE-2026-15144). Risk of unauthorized operations or information disclosure.
CVE-2026-13697 Information Disclosure in undici (CVE-2026-13697)
vulnerability in undici (CVE-2026-13697). Confidential information can be exposed externally. Exploitable via ``private``. Mitigation: upgrade to `8.9.0` or later.
GHSA-pmwx-rm49-xv39 Path Traversal in activerecord-tenanted (GHSA-pmwx-rm49-xv39)
path traversal in activerecord-tenanted (GHSA-pmwx-rm49-xv39). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.7.0` or later.
GHSA-xvg2-cgv6-6h7v Vulnerability in github.com/tinfoil-factory/netfoil (GHSA-xvg2-cgv6-6h7v)
vulnerability in github.com/tinfoil-factory/netfoil (GHSA-xvg2-cgv6-6h7v). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.4.0` or later.
CVE-2026-54680 Vulnerability in github.com/kube-logging/logging-operator (CVE-2026-54680)
vulnerability in github.com/kube-logging/logging-operator (CVE-2026-54680). Successful exploitation can lead to full system takeover. Exploitable via ``Flow``. Mitigation: upgrade to `0.0.0-20260608145523-cf437d7f1e05` or later.
CVE-2026-54693 Authorization Flaw in github.com/zitadel/zitadel (CVE-2026-54693)
vulnerability in github.com/zitadel/zitadel (CVE-2026-54693). Risk of unauthorized operations or information disclosure. Exploitable via ``UpdateHumanUser``. Mitigation: upgrade to `1.80.0-v2.20.0.20260608144108-ed09b3df7f43` or later.
CVE-2026-54727 Vulnerability in proot-distro (CVE-2026-54727)
vulnerability in proot-distro (CVE-2026-54727). Confidential information can be exposed externally. Exploitable via ``restore``. Mitigation: upgrade to `5.1.6` or later.
CVE-2026-54574 Vulnerability in proot-distro (CVE-2026-54574)
vulnerability in proot-distro (CVE-2026-54574). Confidential information can be exposed externally. Exploitable via ``member.linkname``. Mitigation: upgrade to `5.1.5` or later.
CVE-2026-67193 Vulnerability in CVE-2026-67193 (CVE-2026-67193)
vulnerability in CVE-2026-67193 (CVE-2026-67193). Risk of unauthorized operations or information disclosure.
CVE-2026-67192 Vulnerability in CVE-2026-67192 (CVE-2026-67192)
vulnerability in CVE-2026-67192 (CVE-2026-67192). Successful exploitation can lead to full system takeover.
CVE-2026-67191 Vulnerability in CVE-2026-67191 (CVE-2026-67191)
vulnerability in CVE-2026-67191 (CVE-2026-67191). Successful exploitation can lead to full system takeover.
CVE-2026-67188 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-66051 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-60113 Vulnerability in nasa (CVE-2026-60113)
vulnerability in nasa (CVE-2026-60113). Successful exploitation can lead to full system takeover.
CVE-2026-60112 Vulnerability in nasa (CVE-2026-60112)
vulnerability in nasa (CVE-2026-60112). Successful exploitation can lead to full system takeover.
CVE-2026-17550 Out-of-Bounds Read in autodesk (CVE-2026-17550)
vulnerability in autodesk (CVE-2026-17550). Risk of unauthorized operations or information disclosure.
CVE-2026-16543 Vulnerability in dos (CVE-2026-16543)
vulnerability in dos (CVE-2026-16543). Risk of unauthorized operations or information disclosure.
CVE-2026-16465 Out-of-Bounds Read in autodesk (CVE-2026-16465)
vulnerability in autodesk (CVE-2026-16465). Risk of unauthorized operations or information disclosure.
CVE-2026-16463 Vulnerability in autodesk (CVE-2026-16463)
vulnerability in autodesk (CVE-2026-16463). Successful exploitation can lead to full system takeover.
CVE-2026-15228 Vulnerability in dos (CVE-2026-15228)
vulnerability in dos (CVE-2026-15228). Risk of unauthorized operations or information disclosure.
GHSA-wchh-9x6h-7f6p Vulnerability in matrix-commander (GHSA-wchh-9x6h-7f6p)
vulnerability in matrix-commander (GHSA-wchh-9x6h-7f6p). Risk of unauthorized operations or information disclosure.
CVE-2026-54735 SSRF (Server-Side Request Forgery) in github.com/prebid/prebid-server/v4 (CVE-2026-54735)
SSRF in github.com/prebid/prebid-server/v4 (CVE-2026-54735). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.4.0` or later.
CVE-2026-20079 Vulnerability in cisco (CVE-2026-20079)
vulnerability in cisco (CVE-2026-20079). Successful exploitation can lead to full system takeover.
CVE-2026-20316 KEV [KEV] Vulnerability in Cisco secure-firewall-management-center (CVE-2026-20316)
vulnerability in Cisco secure-firewall-management-center (CVE-2026-20316). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
GHSA-pc2w-4mq8-32qw Vulnerability in @dynatrace-oss/dynatrace-mcp-server (GHSA-pc2w-4mq8-32qw)
vulnerability in @dynatrace-oss/dynatrace-mcp-server (GHSA-pc2w-4mq8-32qw). Risk of unauthorized operations or information disclosure. Exploitable via ``create_dynatrace_notebook``. Mitigation: upgrade to `1.8.7` or later.
CVE-2026-50558 Path Traversal in penelope-shell-handler (CVE-2026-50558)
path traversal in penelope-shell-handler (CVE-2026-50558). Data can be tampered with by attackers. Exploitable via ``download``. Mitigation: upgrade to `0.20.0` or later.
CVE-2026-65947 Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
CVE-2026-65888 Vulnerability in balbooa (CVE-2026-65888)
vulnerability in balbooa (CVE-2026-65888). Successful exploitation can lead to full system takeover.
CVE-2026-65887 Vulnerability in balbooa (CVE-2026-65887)
vulnerability in balbooa (CVE-2026-65887). Successful exploitation can lead to full system takeover.
CVE-2026-65886 Path Traversal in balbooa (CVE-2026-65886)
path traversal in balbooa (CVE-2026-65886). Confidential information can be exposed externally.
CVE-2026-12703 Vulnerability in CVE-2026-12703 (CVE-2026-12703)
vulnerability in CVE-2026-12703 (CVE-2026-12703). Successful exploitation can lead to full system takeover.
CVE-2026-54081 Vulnerability in org.verapdf:parser (CVE-2026-54081)
vulnerability in org.verapdf:parser (CVE-2026-54081). Risk of unauthorized operations or information disclosure. Exploitable via ``for``. Mitigation: upgrade to `1.31.23` or later.
CVE-2026-54080 Vulnerability in org.verapdf:parser (CVE-2026-54080)
vulnerability in org.verapdf:parser (CVE-2026-54080). Risk of unauthorized operations or information disclosure. Exploitable via ``for``. Mitigation: upgrade to `1.31.23` or later.
CVE-2026-66724 Vulnerability in CVE-2026-66724 (CVE-2026-66724)
vulnerability in CVE-2026-66724 (CVE-2026-66724). Risk of unauthorized operations or information disclosure.
CVE-2026-66723 Vulnerability in CVE-2026-66723 (CVE-2026-66723)
vulnerability in CVE-2026-66723 (CVE-2026-66723). Risk of unauthorized operations or information disclosure.
CVE-2026-59247 Vulnerability in CVE-2026-59247 (CVE-2026-59247)
vulnerability in CVE-2026-59247 (CVE-2026-59247). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →