Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-55805	Cross-Site Scripting (XSS) in drupal (CVE-2026-55805) cross-site scripting in drupal (CVE-2026-55805). Risk of unauthorized operations or information disclosure.	Medium	Drupal Cross-Site Scripting Cwe 79	5 days ago
CVE-2026-41707	Vulnerability in CVE-2026-41707 (CVE-2026-41707) vulnerability in CVE-2026-41707 (CVE-2026-41707). Confidential information can be exposed externally.	High	Authentication Bypass Cwe 294	5 days ago
CVE-2026-80186	Vulnerability in dos (CVE-2026-80186) vulnerability in dos (CVE-2026-80186). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 120	5 days ago
CVE-2026-16643	Vulnerability in drupal (CVE-2026-16643) vulnerability in drupal (CVE-2026-16643). Confidential information can be exposed externally.	Medium	Drupal Cwe 20	5 days ago
CVE-2026-16640	Cross-Site Scripting (XSS) in drupal (CVE-2026-16640) cross-site scripting in drupal (CVE-2026-16640). Risk of unauthorized operations or information disclosure.	Medium	Drupal Cross-Site Scripting Cwe 79	5 days ago
CVE-2026-16641	Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: .. Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: ..	Critical	Drupal Cwe 20	5 days ago
CVE-2026-16642	Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: .. Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: ..	Medium	Drupal Cwe 20	5 days ago
CVE-2026-16645	Vulnerability in drupal (CVE-2026-16645) vulnerability in drupal (CVE-2026-16645). Confidential information can be exposed externally.	Critical	JavaScript Drupal Cwe 862	5 days ago
CVE-2026-16646	Vulnerability in Drupal PanKM. This issue affects PanKM versions: .. Vulnerability in Drupal PanKM. This issue affects PanKM versions: ..	Medium	Drupal Cwe 306	5 days ago
CVE-2026-80185	Vulnerability in c (CVE-2026-80185) vulnerability in c (CVE-2026-80185). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 843	5 days ago
CVE-2026-16644	Authorization Flaw in drupal (CVE-2026-16644) vulnerability in drupal (CVE-2026-16644). Confidential information can be exposed externally.	Critical	Drupal Cwe 863	5 days ago
CVE-2026-15916	Vulnerability in drupal (CVE-2026-15916) vulnerability in drupal (CVE-2026-15916). Risk of unauthorized operations or information disclosure.	Medium	Drupal Cwe 862	5 days ago
CVE-2026-15088	Vulnerability in drupal (CVE-2026-15088) vulnerability in drupal (CVE-2026-15088). Confidential information can be exposed externally.	Medium	Drupal Cwe 20	5 days ago
CVE-2026-16638	Cross-Site Scripting (XSS) in drupal (CVE-2026-16638) cross-site scripting in drupal (CVE-2026-16638). Risk of unauthorized operations or information disclosure.	Medium	Drupal Cross-Site Scripting Cwe 79	5 days ago
CVE-2026-15917	Cross-Site Scripting (XSS) in drupal (CVE-2026-15917) cross-site scripting in drupal (CVE-2026-15917). Risk of unauthorized operations or information disclosure.	Medium	Drupal Cross-Site Scripting Cwe 79	5 days ago
CVE-2026-16639	Vulnerability in drupal (CVE-2026-16639) vulnerability in drupal (CVE-2026-16639). Successful exploitation can lead to full system takeover.	Critical	Drupal Authentication Bypass Cwe 288	5 days ago
CVE-2026-80184	Authorization Flaw in CVE-2026-80184 (CVE-2026-80184) vulnerability in CVE-2026-80184 (CVE-2026-80184). Risk of unauthorized operations or information disclosure.		Cwe 863	5 days ago
CVE-2026-80182	Authorization Flaw in CVE-2026-80182 (CVE-2026-80182) vulnerability in CVE-2026-80182 (CVE-2026-80182). Risk of unauthorized operations or information disclosure.		Cwe 863	5 days ago
CVE-2026-79845	Vulnerability in sqli (CVE-2026-79845) vulnerability in sqli (CVE-2026-79845). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	5 days ago
CVE-2026-79804	Vulnerability in sqli (CVE-2026-79804) vulnerability in sqli (CVE-2026-79804). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	5 days ago
CVE-2026-66422	Vulnerability in apache (CVE-2026-66422) vulnerability in apache (CVE-2026-66422). Data can be tampered with by attackers.	High	Apache Tomcat Cwe 285	5 days ago
CVE-2026-65637	Vulnerability in apache (CVE-2026-65637) vulnerability in apache (CVE-2026-65637). Successful exploitation can lead to full system takeover.	Critical	Apache Tomcat Cwe 20	5 days ago
CVE-2026-68763	Vulnerability in apache (CVE-2026-68763) vulnerability in apache (CVE-2026-68763). Risk of unauthorized operations or information disclosure.	High	Apache Tomcat Cwe 400	5 days ago
CVE-2026-65183	Vulnerability in apache (CVE-2026-65183) vulnerability in apache (CVE-2026-65183). Successful exploitation can lead to full system takeover.	High	Apache Tomcat Cwe 367	5 days ago
CVE-2026-65927	Vulnerability in apache (CVE-2026-65927) vulnerability in apache (CVE-2026-65927). Risk of unauthorized operations or information disclosure.	High	Apache Tomcat Cwe 193	5 days ago
CVE-2026-65905	Vulnerability in apache (CVE-2026-65905) vulnerability in apache (CVE-2026-65905). Successful exploitation can lead to full system takeover.	Critical	Apache Tomcat Authentication Bypass Cwe 294	5 days ago
CVE-2026-65182	Vulnerability in apache (CVE-2026-65182) vulnerability in apache (CVE-2026-65182). Confidential information can be exposed externally.	Critical	Apache Tomcat Cwe 284 Cwe 863	5 days ago
CVE-2026-78655	Vulnerability in CVE-2026-78655 (CVE-2026-78655) vulnerability in CVE-2026-78655 (CVE-2026-78655). Confidential information can be exposed externally.	Critical	Cwe 307 Cwe 642	5 days ago
CVE-2026-78619	Vulnerability in CVE-2026-78619 (CVE-2026-78619) vulnerability in CVE-2026-78619 (CVE-2026-78619). Successful exploitation can lead to full system takeover.	Critical	Cwe 305 Cwe 1025	5 days ago
CVE-2026-73180	Vulnerability in apache (CVE-2026-73180) vulnerability in apache (CVE-2026-73180). Confidential information can be exposed externally.	Medium	Apache Tomcat Cwe 613	5 days ago
CVE-2026-68569	Authentication Bypass in apache (CVE-2026-68569) authentication bypass in apache (CVE-2026-68569). Confidential information can be exposed externally.	High	Apache Tomcat Cwe 287	5 days ago
CVE-2026-68525	Authorization Flaw in apache (CVE-2026-68525) vulnerability in apache (CVE-2026-68525). Confidential information can be exposed externally.	Critical	Apache Tomcat Cwe 863	5 days ago
CVE-2026-38474	Vulnerability in CVE-2026-38474 (CVE-2026-38474) vulnerability in CVE-2026-38474 (CVE-2026-38474). Risk of unauthorized operations or information disclosure.		PHP	5 days ago
CVE-2026-38467	Vulnerability in sqli (CVE-2026-38467) vulnerability in sqli (CVE-2026-38467). Risk of unauthorized operations or information disclosure.		PHP SQL Injection	5 days ago
CVE-2026-38472	Vulnerability in c (CVE-2026-38472) vulnerability in c (CVE-2026-38472). Risk of unauthorized operations or information disclosure.		PHP JavaScript C Cross-Site Scripting	5 days ago
CVE-2026-38468	Vulnerability in sqli (CVE-2026-38468) vulnerability in sqli (CVE-2026-38468). Risk of unauthorized operations or information disclosure.		PHP SQL Injection	5 days ago
CVE-2026-38469	Vulnerability in CVE-2026-38469 (CVE-2026-38469) vulnerability in CVE-2026-38469 (CVE-2026-38469). Risk of unauthorized operations or information disclosure.		PHP JavaScript Java Cross-Site Scripting	5 days ago
CVE-2026-38466	Vulnerability in CVE-2026-38466 (CVE-2026-38466) vulnerability in CVE-2026-38466 (CVE-2026-38466). Risk of unauthorized operations or information disclosure.		JavaScript Cross-Site Scripting	5 days ago
CVE-2026-38473	Vulnerability in CVE-2026-38473 (CVE-2026-38473) vulnerability in CVE-2026-38473 (CVE-2026-38473). Risk of unauthorized operations or information disclosure.		PHP JavaScript Cross-Site Scripting	5 days ago
CVE-2026-38470	Vulnerability in CVE-2026-38470 (CVE-2026-38470) vulnerability in CVE-2026-38470 (CVE-2026-38470). Risk of unauthorized operations or information disclosure.			5 days ago
CVE-2026-38465	Vulnerability in CVE-2026-38465 (CVE-2026-38465) vulnerability in CVE-2026-38465 (CVE-2026-38465). Risk of unauthorized operations or information disclosure.		JavaScript Cross-Site Scripting	5 days ago
CVE-2022-0995 KEV	An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event... An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event...	High	Linux Buffer Overflow Cwe 787 Privilege Escalation +27	5 days ago
CVE-2015-5287 KEV	The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local... The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local...	High	Privilege Escalation Symlink Attack Red Hat Eol +11	5 days ago
CVE-2015-3246 KEV	libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the... libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the...	Medium	Linux Race Condition Privilege Escalation Denial of Service +7	5 days ago
CVE-2021-23758 KEV	Ajax.NET Professional Ajax.NET Professional — Ajax.NET Professional Deserialization of Untrusted Data Vulnerability Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.	High	Cwe 502 Remote Code Execution Insecure Deserialization C# +4	5 days ago
CVE-2026-70665	Vulnerability in rails (CVE-2026-70665) vulnerability in rails (CVE-2026-70665). Risk of unauthorized operations or information disclosure.	Medium	Ruby Ruby on Rails Privilege Escalation Cwe 285	5 days ago
CVE-2026-54757	Code Injection in compliance-trestle (CVE-2026-54757) code injection in compliance-trestle (CVE-2026-54757). Successful exploitation can lead to full system takeover. Exploitable via ``SandboxedEnvironment``. Mitigation: upgrade to `4.1.0` or later.	High	Python Remote Code Execution Cwe 94	5 days ago
CVE-2026-63404	Vulnerability in CVE-2026-63404 (CVE-2026-63404) vulnerability in CVE-2026-63404 (CVE-2026-63404). Risk of unauthorized operations or information disclosure.		Cwe 377	5 days ago
CVE-2026-63403	Vulnerability in dos (CVE-2026-63403) vulnerability in dos (CVE-2026-63403). Risk of unauthorized operations or information disclosure.		Denial of Service Cwe 248	5 days ago
CVE-2026-62865	Vulnerability in CVE-2026-62865 (CVE-2026-62865) vulnerability in CVE-2026-62865 (CVE-2026-62865). Risk of unauthorized operations or information disclosure.		Cwe 73 Cwe 200	5 days ago

Vulnerabilities

🍪 About cookies