Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-1832	Vulnerability in wordpress (CVE-2026-1832) vulnerability in wordpress (CVE-2026-1832). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	1 month ago
CVE-2026-13116	Vulnerability in wordpress (CVE-2026-13116) vulnerability in wordpress (CVE-2026-13116). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 639	1 month ago
CVE-2026-3552	Vulnerability in wordpress (CVE-2026-3552) vulnerability in wordpress (CVE-2026-3552). Risk of unauthorized operations or information disclosure.	Medium	WordPress Denial of Service Cwe 862	1 month ago
CVE-2026-15096	Cross-Site Scripting (XSS) in wordpress (CVE-2026-15096) cross-site scripting in wordpress (CVE-2026-15096). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-13250	Vulnerability in wordpress (CVE-2026-13250) vulnerability in wordpress (CVE-2026-13250). Risk of unauthorized operations or information disclosure.	Medium	PHP WordPress Cwe 862	1 month ago
CVE-2026-15097	Cross-Site Scripting (XSS) in wordpress (CVE-2026-15097) cross-site scripting in wordpress (CVE-2026-15097). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-14262	Privilege Escalation in wordpress (CVE-2026-14262) vulnerability in wordpress (CVE-2026-14262). Successful exploitation can lead to full system takeover. Exploitable via ``payload``.	High	WordPress Authentication Bypass Privilege Escalation Cwe 269	1 month ago
CVE-2026-12141	Cross-Site Scripting (XSS) in wordpress (CVE-2026-12141) cross-site scripting in wordpress (CVE-2026-12141). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cross-Site Scripting Cwe 79	1 month ago
CVE-2025-13968	Cross-Site Scripting (XSS) in wordpress (CVE-2025-13968) cross-site scripting in wordpress (CVE-2025-13968). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-8678	Vulnerability in wordpress (CVE-2026-8678) vulnerability in wordpress (CVE-2026-8678). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	1 month ago
CVE-2026-7544	Information Disclosure in wordpress (CVE-2026-7544) vulnerability in wordpress (CVE-2026-7544). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 200	1 month ago
CVE-2026-5743	Cross-Site Scripting (XSS) in wordpress (CVE-2026-5743) cross-site scripting in wordpress (CVE-2026-5743). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-3367	Cross-Site Scripting (XSS) in wordpress (CVE-2026-3367) cross-site scripting in wordpress (CVE-2026-3367). Risk of unauthorized operations or information disclosure.	Medium	JavaScript WordPress Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-15338	Vulnerability in wordpress (CVE-2026-15338) vulnerability in wordpress (CVE-2026-15338). Successful exploitation can lead to full system takeover.	High	PHP WordPress Path Traversal Cwe 98	1 month ago
CVE-2026-15073	SQL Injection in wordpress (CVE-2026-15073) SQL injection in wordpress (CVE-2026-15073). Confidential information can be exposed externally.	Medium	WordPress SQL Injection Cwe 89	1 month ago
CVE-2026-15072	SQL Injection in wordpress (CVE-2026-15072) SQL injection in wordpress (CVE-2026-15072). Confidential information can be exposed externally.	Medium	WordPress SQL Injection Cwe 89	1 month ago
CVE-2026-13353	Code Injection in wordpress (CVE-2026-13353) code injection in wordpress (CVE-2026-13353). Successful exploitation can lead to full system takeover.	High	PHP WordPress Remote Code Execution Cwe 94	1 month ago
CVE-2026-13262	SQL Injection in wordpress (CVE-2026-13262) SQL injection in wordpress (CVE-2026-13262). Confidential information can be exposed externally.	Medium	WordPress SQL Injection Cwe 89	1 month ago
CVE-2026-13114	Cross-Site Scripting (XSS) in wordpress (CVE-2026-13114) cross-site scripting in wordpress (CVE-2026-13114). Risk of unauthorized operations or information disclosure.	High	WordPress Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-12426	Information Disclosure in wordpress (CVE-2026-12426) vulnerability in wordpress (CVE-2026-12426). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 200	1 month ago
CVE-2026-10628	Vulnerability in wordpress (CVE-2026-10628) vulnerability in wordpress (CVE-2026-10628). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	1 month ago
CVE-2026-11426	Path Traversal in wordpress (CVE-2026-11426) path traversal in wordpress (CVE-2026-11426). Confidential information can be exposed externally.	Medium	WordPress Cwe 22	1 month ago
CVE-2026-13756	Privilege Escalation in wordpress (CVE-2026-13756) vulnerability in wordpress (CVE-2026-13756). Successful exploitation can lead to full system takeover. Exploitable via ``wp_capabilities``.	High	WordPress Privilege Escalation Cwe 269	1 month ago
CVE-2026-15087	vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions: .. vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions: ..	Medium	Drupal Cwe 287	1 month ago
CVE-2026-44383	Vulnerability in CVE-2026-44383 (CVE-2026-44383) vulnerability in CVE-2026-44383 (CVE-2026-44383). Risk of unauthorized operations or information disclosure.	High	Cwe 613	1 month ago
CVE-2026-15089	Authentication Bypass in drupal (CVE-2026-15089) authentication bypass in drupal (CVE-2026-15089). Confidential information can be exposed externally.	Critical	Drupal Cwe 287	1 month ago
CVE-2026-42952	Vulnerability in CVE-2026-42952 (CVE-2026-42952) vulnerability in CVE-2026-42952 (CVE-2026-42952). Data can be tampered with by attackers.	High	Cwe 307	1 month ago
CVE-2026-14286	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.			1 month ago
CVE-2026-15086	Vulnerability in drupal (CVE-2026-15086) vulnerability in drupal (CVE-2026-15086). Confidential information can be exposed externally.	Medium	Drupal	1 month ago
CVE-2026-55175	Unsafe Deserialization in io.spinnaker.rosco:rosco-manifests (CVE-2026-55175) vulnerability in io.spinnaker.rosco:rosco-manifests (CVE-2026-55175). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026.1.1` or later.	High	Remote Code Execution Cwe 502 Linuxfoundation Spinnaker	1 month ago
CVE-2026-59155	Information Disclosure in CVE-2026-59155 (CVE-2026-59155) vulnerability in CVE-2026-59155 (CVE-2026-59155). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/ddns`.		Cwe 200	1 month ago
CVE-2026-58591	Cross-Site Scripting (XSS) in drupal/colorbox (CVE-2026-58591) cross-site scripting in drupal/colorbox (CVE-2026-58591). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.5` or later.	Medium	Drupal Cross-Site Scripting Cwe 79 Colorbox Project +1	1 month ago
CVE-2026-58590	Vulnerability in drupal/flowdrop (CVE-2026-58590) vulnerability in drupal/flowdrop (CVE-2026-58590). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.0` or later.	Medium	Drupal Cwe 862 Flowdrop Project Flowdrop	1 month ago
CVE-2026-58589	Vulnerability in drupal/flowdrop (CVE-2026-58589) vulnerability in drupal/flowdrop (CVE-2026-58589). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.0` or later.	Medium	Drupal Cwe 862 Flowdrop Project Flowdrop	1 month ago
CVE-2026-58588	Cross-Site Scripting (XSS) in drupal/canvas (CVE-2026-58588) cross-site scripting in drupal/canvas (CVE-2026-58588). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.2, 1.5.2, 1.6.1, 1.7.1` or later.	Medium	Drupal Cross-Site Scripting Cwe 79 Drupal Canvas Project +1	1 month ago
CVE-2026-58587	Cross-Site Scripting (XSS) in drupal/canvas (CVE-2026-58587) cross-site scripting in drupal/canvas (CVE-2026-58587). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.2, 1.5.2, 1.6.1, 1.7.1` or later.	Medium	Drupal Cross-Site Scripting Cwe 79 Drupal Canvas Project +1	1 month ago
CVE-2026-58503	Vulnerability in CVE-2026-58503 (CVE-2026-58503) vulnerability in CVE-2026-58503 (CVE-2026-58503). Risk of unauthorized operations or information disclosure.		Cwe 203	1 month ago
CVE-2026-57584	Vulnerability in phalcon/cphalcon (CVE-2026-57584) vulnerability in phalcon/cphalcon (CVE-2026-57584). Risk of unauthorized operations or information disclosure. Exploitable via ``URI_SOURCE_GET_URL``. Mitigation: upgrade to `5.15.0` or later.		PHP Cwe 1333	1 month ago
CVE-2026-55852	Path Traversal in CVE-2026-55852 (CVE-2026-55852) path traversal in CVE-2026-55852 (CVE-2026-55852). Risk of unauthorized operations or information disclosure.		Remote Code Execution Cwe 22	1 month ago
CVE-2026-55810	Vulnerability in drupal/plotly_js (CVE-2026-55810) vulnerability in drupal/plotly_js (CVE-2026-55810). Confidential information can be exposed externally. Exploitable via ``plotly_js_graph``. Mitigation: upgrade to `3.0.2` or later.	High	JavaScript Drupal Cwe 915 Plotly +1	1 month ago
CVE-2026-55809	Vulnerability in drupal/flag_attendance_field (CVE-2026-55809) vulnerability in drupal/flag_attendance_field (CVE-2026-55809). Confidential information can be exposed externally. Exploitable via ``flag_attendance_field``. Mitigation: upgrade to `1.2.0` or later.	High	Drupal Cwe 915 Flag Attendance Field Project Flag Attendance Field	1 month ago
CVE-2026-55808	Cross-Site Scripting (XSS) in drupal (CVE-2026-55808) cross-site scripting in drupal (CVE-2026-55808). Risk of unauthorized operations or information disclosure.	Medium	Drupal Cross-Site Scripting Cwe 79	1 month ago
CVE-2026-55807	SSRF (Server-Side Request Forgery) in drupal (CVE-2026-55807) SSRF in drupal (CVE-2026-55807). Risk of unauthorized operations or information disclosure.	Low	Drupal Server-Side Request Forgery Cwe 918	1 month ago
CVE-2026-55806	Open Redirect in drupal (CVE-2026-55806) vulnerability in drupal (CVE-2026-55806). Risk of unauthorized operations or information disclosure.	Medium	Drupal Cwe 601	1 month ago
CVE-2026-55804	Vulnerability in drupal (CVE-2026-55804) vulnerability in drupal (CVE-2026-55804). Confidential information can be exposed externally.	Medium	Drupal Cwe 915	1 month ago
CVE-2026-55803	Vulnerability in drupal (CVE-2026-55803) vulnerability in drupal (CVE-2026-55803). Confidential information can be exposed externally.	Medium	Drupal Cwe 915	1 month ago
CVE-2026-54736	Vulnerability in phalcon/cphalcon (CVE-2026-54736) vulnerability in phalcon/cphalcon (CVE-2026-54736). Risk of unauthorized operations or information disclosure. Exploitable via ``useSigning``. Mitigation: upgrade to `5.14.1` or later.		PHP Cwe 208 Cwe 347	1 month ago
CVE-2026-52761	Vulnerability in nginx (CVE-2026-52761) vulnerability in nginx (CVE-2026-52761). Risk of unauthorized operations or information disclosure.	Medium	nginx Apache Cwe 467 Owasp +1	1 month ago
CVE-2026-52747	Vulnerability in nginx (CVE-2026-52747) vulnerability in nginx (CVE-2026-52747). Data can be tampered with by attackers.	High	nginx Apache Cwe 180 Owasp +1	1 month ago
CVE-2026-49844	Vulnerability in org.apache.logging.log4j:log4j-api (CVE-2026-49844) vulnerability in org.apache.logging.log4j:log4j-api (CVE-2026-49844). Data can be tampered with by attackers. Mitigation: upgrade to `2.26.1` or later.	Medium	Apache Cwe 116 Log4J	1 month ago

Vulnerabilities

🍪 About cookies