Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
ID Title
GHSA-x9f9-r4m8-9xc2 OS Command Injection in com.arcadedb:arcadedb-engine (GHSA-x9f9-r4m8-9xc2)
OS command injection in com.arcadedb:arcadedb-engine (GHSA-x9f9-r4m8-9xc2). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.7.2` or later.
GHSA-48qw-824m-86pr Privilege Escalation in com.arcadedb:arcadedb-server (GHSA-48qw-824m-86pr)
vulnerability in com.arcadedb:arcadedb-server (GHSA-48qw-824m-86pr). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/command/{database}`. Mitigation: upgrade to `26.7.1` or later.
CVE-2026-55579 Vulnerability in pheditor/pheditor (CVE-2026-55579)
vulnerability in pheditor/pheditor (CVE-2026-55579). Successful exploitation can lead to full system takeover. Exploitable via ``admin``. Mitigation: upgrade to `2.0.6` or later.
CVE-2026-55578 OS Command Injection in pheditor/pheditor (CVE-2026-55578)
OS command injection in pheditor/pheditor (CVE-2026-55578). Successful exploitation can lead to full system takeover. Exploitable via ``terminal``. Mitigation: upgrade to `2.0.6` or later.
CVE-2026-52724 Vulnerability in github.com/kumahq/kuma/v2 (CVE-2026-52724)
vulnerability in github.com/kumahq/kuma/v2 (CVE-2026-52724). Risk of unauthorized operations or information disclosure. Exploitable via ``KUMA_CONTROL_PLANE_CA_CERT``. Mitigation: upgrade to `2.13.7` or later.
CVE-2026-54076 Vulnerability in com.arcadedb:arcadedb-engine (CVE-2026-54076)
vulnerability in com.arcadedb:arcadedb-engine (CVE-2026-54076). Risk of unauthorized operations or information disclosure. Exploitable via ``UPDATE_SCHEMA``. Mitigation: upgrade to `26.6.1` or later.
CVE-2026-54077 Path Traversal in com.arcadedb:arcadedb-engine (CVE-2026-54077)
path traversal in com.arcadedb:arcadedb-engine (CVE-2026-54077). Risk of unauthorized operations or information disclosure. Exploitable via ``root``. Mitigation: upgrade to `26.6.1` or later.
CVE-2026-54542 Out-of-Bounds Read in nimiq-primitives (CVE-2026-54542)
vulnerability in nimiq-primitives (CVE-2026-54542). Risk of unauthorized operations or information disclosure. Exploitable via ``TrieChunk``. Mitigation: upgrade to `1.6.0` or later.
CVE-2026-54541 Vulnerability in nimiq-primitives (CVE-2026-54541)
vulnerability in nimiq-primitives (CVE-2026-54541). Risk of unauthorized operations or information disclosure. Exploitable via ``TrieChunk``. Mitigation: upgrade to `1.6.0` or later.
CVE-2026-54540 OS Command Injection in pheditor/pheditor (CVE-2026-54540)
OS command injection in pheditor/pheditor (CVE-2026-54540). Successful exploitation can lead to full system takeover. Exploitable via ``TERMINAL_COMMANDS``. Mitigation: upgrade to `2.0.5` or later.
CVE-2026-52832 Path Traversal in github.com/nuclio/nuclio (CVE-2026-52832)
path traversal in github.com/nuclio/nuclio (CVE-2026-52832). Data can be tampered with by attackers. Exploitable via `POST /api/functions`. Mitigation: upgrade to `1.16.5` or later.
CVE-2026-52833 Code Injection in github.com/nuclio/nuclio (CVE-2026-52833)
code injection in github.com/nuclio/nuclio (CVE-2026-52833). Successful exploitation can lead to full system takeover. Exploitable via ``build.gradle``. Mitigation: upgrade to `1.16.5` or later.
CVE-2026-53714 Vulnerability in github.com/envoyproxy/gateway (CVE-2026-53714)
vulnerability in github.com/envoyproxy/gateway (CVE-2026-53714). Risk of unauthorized operations or information disclosure. Exploitable via ``StreamInterceptor``. Mitigation: upgrade to `1.7.4` or later.
GHSA-ggxf-9f6j-w742 Use-After-Free in diesel (GHSA-ggxf-9f6j-w742)
vulnerability in diesel (GHSA-ggxf-9f6j-w742). Risk of unauthorized operations or information disclosure. Exploitable via ``SqliteConnection``. Mitigation: upgrade to `2.3.10` or later.
CVE-2026-53713 Vulnerability in github.com/envoyproxy/gateway (CVE-2026-53713)
vulnerability in github.com/envoyproxy/gateway (CVE-2026-53713). Risk of unauthorized operations or information disclosure. Exploitable via ``to_absolute_normalized_path``. Mitigation: upgrade to `1.7.4` or later.
CVE-2026-53715 Vulnerability in github.com/envoyproxy/gateway (CVE-2026-53715)
vulnerability in github.com/envoyproxy/gateway (CVE-2026-53715). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.4` or later.
CVE-2026-53717 Vulnerability in github.com/envoyproxy/gateway (CVE-2026-53717)
vulnerability in github.com/envoyproxy/gateway (CVE-2026-53717). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.4` or later.
CVE-2026-53719 Vulnerability in github.com/envoyproxy/gateway (CVE-2026-53719)
vulnerability in github.com/envoyproxy/gateway (CVE-2026-53719). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.4` or later.
CVE-2026-53716 Vulnerability in github.com/envoyproxy/gateway (CVE-2026-53716)
vulnerability in github.com/envoyproxy/gateway (CVE-2026-53716). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.4` or later.
CVE-2026-54526 Vulnerability in github.com/argoproj/argo-workflows/v4 (CVE-2026-54526)
vulnerability in github.com/argoproj/argo-workflows/v4 (CVE-2026-54526). Successful exploitation can lead to full system takeover. Exploitable via ``hostNetwork``. Mitigation: upgrade to `4.0.6` or later.
CVE-2026-53536 Vulnerability in CVE-2026-53536 (CVE-2026-53536)
vulnerability in CVE-2026-53536 (CVE-2026-53536). Risk of unauthorized operations or information disclosure.
CVE-2026-53535 Path Traversal in dos (CVE-2026-53535)
path traversal in dos (CVE-2026-53535). Risk of unauthorized operations or information disclosure.
CVE-2026-47089 Vulnerability in CVE-2026-47089 (CVE-2026-47089)
vulnerability in CVE-2026-47089 (CVE-2026-47089). Risk of unauthorized operations or information disclosure.
CVE-2026-47088 Vulnerability in CVE-2026-47088 (CVE-2026-47088)
vulnerability in CVE-2026-47088 (CVE-2026-47088). Risk of unauthorized operations or information disclosure.
CVE-2026-47087 Vulnerability in CVE-2026-47087 (CVE-2026-47087)
vulnerability in CVE-2026-47087 (CVE-2026-47087). Risk of unauthorized operations or information disclosure.
CVE-2026-47086 Authorization Flaw in CVE-2026-47086 (CVE-2026-47086)
vulnerability in CVE-2026-47086 (CVE-2026-47086). Risk of unauthorized operations or information disclosure.
CVE-2026-47085 Vulnerability in CVE-2026-47085 (CVE-2026-47085)
vulnerability in CVE-2026-47085 (CVE-2026-47085). Risk of unauthorized operations or information disclosure.
CVE-2026-47084 Authorization Flaw in CVE-2026-47084 (CVE-2026-47084)
vulnerability in CVE-2026-47084 (CVE-2026-47084). Data can be tampered with by attackers.
CVE-2026-47083 Vulnerability in CVE-2026-47083 (CVE-2026-47083)
vulnerability in CVE-2026-47083 (CVE-2026-47083). Risk of unauthorized operations or information disclosure.
CVE-2026-47082 Authorization Flaw in CVE-2026-47082 (CVE-2026-47082)
vulnerability in CVE-2026-47082 (CVE-2026-47082). Risk of unauthorized operations or information disclosure.
CVE-2026-47081 Authorization Flaw in CVE-2026-47081 (CVE-2026-47081)
vulnerability in CVE-2026-47081 (CVE-2026-47081). Risk of unauthorized operations or information disclosure.
CVE-2026-46515 Vulnerability in CVE-2026-46515 (CVE-2026-46515)
vulnerability in CVE-2026-46515 (CVE-2026-46515). Risk of unauthorized operations or information disclosure.
CVE-2026-46514 Vulnerability in CVE-2026-46514 (CVE-2026-46514)
vulnerability in CVE-2026-46514 (CVE-2026-46514). Confidential information can be exposed externally.
CVE-2026-46513 Vulnerability in CVE-2026-46513 (CVE-2026-46513)
vulnerability in CVE-2026-46513 (CVE-2026-46513). Confidential information can be exposed externally.
CVE-2026-46512 Code Injection in CVE-2026-46512 (CVE-2026-46512)
code injection in CVE-2026-46512 (CVE-2026-46512). Successful exploitation can lead to full system takeover.
CVE-2026-46404 SSRF (Server-Side Request Forgery) in CVE-2026-46404 (CVE-2026-46404)
SSRF in CVE-2026-46404 (CVE-2026-46404). Confidential information can be exposed externally.
CVE-2026-46353 Vulnerability in CVE-2026-46353 (CVE-2026-46353)
vulnerability in CVE-2026-46353 (CVE-2026-46353). Confidential information can be exposed externally.
CVE-2026-46351 Vulnerability in CVE-2026-46351 (CVE-2026-46351)
vulnerability in CVE-2026-46351 (CVE-2026-46351). Confidential information can be exposed externally.
CVE-2026-53718 Vulnerability in github.com/envoyproxy/gateway (CVE-2026-53718)
vulnerability in github.com/envoyproxy/gateway (CVE-2026-53718). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.4` or later.
CVE-2026-50166 Vulnerability in github.com/kumahq/kuma/v2 (CVE-2026-50166)
vulnerability in github.com/kumahq/kuma/v2 (CVE-2026-50166). Risk of unauthorized operations or information disclosure. Exploitable via ``kumactl``. Mitigation: upgrade to `2.13.7` or later.
CVE-2026-46687 Vulnerability in CVE-2026-46687 (CVE-2026-46687)
vulnerability in CVE-2026-46687 (CVE-2026-46687). Risk of unauthorized operations or information disclosure.
CVE-2026-46686 Cross-Site Scripting (XSS) in CVE-2026-46686 (CVE-2026-46686)
cross-site scripting in CVE-2026-46686 (CVE-2026-46686). Risk of unauthorized operations or information disclosure.
CVE-2026-46336 Path Traversal in path-traversal (CVE-2026-46336)
path traversal in path-traversal (CVE-2026-46336). Data can be tampered with by attackers.
CVE-2026-45336 Vulnerability in flask (CVE-2026-45336)
vulnerability in flask (CVE-2026-45336). Confidential information can be exposed externally.
CVE-2026-15945 Vulnerability in redhat (CVE-2026-15945)
vulnerability in redhat (CVE-2026-15945). Risk of unauthorized operations or information disclosure.
CVE-2021-27137 KEV [KEV] Vulnerability in Dd-wrt c (CVE-2021-27137)
vulnerability in Dd-wrt c (CVE-2021-27137). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-15737 Vulnerability in Amazon aws (CVE-2026-15737)
vulnerability in Amazon aws (CVE-2026-15737). Confidential information can be exposed externally.
CVE-2026-9046 Vulnerability in CVE-2026-9046 (CVE-2026-9046)
vulnerability in CVE-2026-9046 (CVE-2026-9046). Successful exploitation can lead to full system takeover.
CVE-2026-6511 Vulnerability in CVE-2026-6511 (CVE-2026-6511)
vulnerability in CVE-2026-6511 (CVE-2026-6511). Confidential information can be exposed externally.
CVE-2026-63088 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-63088)
SSRF in ssrf (CVE-2026-63088). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →