Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2026-21708	SQL Injection in veeam (CVE-2026-21708) SQL injection in veeam (CVE-2026-21708). Confidential information can be exposed externally.	Critical	Remote Code Execution Cwe 89 Veeam Veeam Backup Replication	5 months ago
CVE-2026-21669	Code Injection in veeam (CVE-2026-21669) code injection in veeam (CVE-2026-21669). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 94 Cwe 693 Veeam +1	5 months ago
CVE-2026-21671	Code Injection in veeam (CVE-2026-21671) code injection in veeam (CVE-2026-21671). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 94 Cwe 693 Veeam +1	5 months ago
CVE-2025-66956	Vulnerability in CVE-2025-66956 (CVE-2025-66956) vulnerability in CVE-2025-66956 (CVE-2025-66956). Successful exploitation can lead to full system takeover.	Critical	Cwe 284	5 months ago
CVE-2025-70041	Vulnerability in CVE-2025-70041 (CVE-2025-70041) vulnerability in CVE-2025-70041 (CVE-2025-70041). Successful exploitation can lead to full system takeover.	Critical	Cwe 259	5 months ago
CVE-2026-1524	Authentication Bypass in neo4j (CVE-2026-1524) authentication bypass in neo4j (CVE-2026-1524). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.26.22, 2026.2.0` or later.	Critical	Cwe 287 Cwe 863 Neo4J	5 months ago
CVE-2025-70082	OS Command Injection in lantronix (CVE-2025-70082) OS command injection in lantronix (CVE-2025-70082). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Cwe 288 Cwe 620 Lantronix +4	5 months ago
CVE-2025-67039	Vulnerability in lantronix (CVE-2025-67039) vulnerability in lantronix (CVE-2025-67039). Confidential information can be exposed externally. Exploitable via `Authorization header`.	Critical	Cwe 288 Lantronix Eds3016Ps1Ns Firmware Eds3016Ps1Ns +2	5 months ago
CVE-2025-67041	OS Command Injection in lantronix (CVE-2025-67041) OS command injection in lantronix (CVE-2025-67041). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Cwe 288 Cwe 620 Lantronix +4	5 months ago
CVE-2025-67035	Code Injection in lantronix (CVE-2025-67035) code injection in lantronix (CVE-2025-67035). Successful exploitation can lead to full system takeover.	Critical	Cwe 94 Lantronix Eds5032 Firmware Eds5032 +4	5 months ago
CVE-2026-30903	Vulnerability in zoom (CVE-2026-30903) vulnerability in zoom (CVE-2026-30903). Successful exploitation can lead to full system takeover.	Critical	Cwe 73 Cwe 610 Zoom Workplace Desktop +1	5 months ago
CVE-2026-28229	Authorization Flaw in github.com/argoproj/argo-workflows/v4 (CVE-2026-28229) vulnerability in github.com/argoproj/argo-workflows/v4 (CVE-2026-28229). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.0.2` or later.	Critical	Cwe 863 Cwe 306 Argoproj Argo Workflows	5 months ago
CVE-2026-29515	Vulnerability in xiaomi (CVE-2026-29515) vulnerability in xiaomi (CVE-2026-29515). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 303 Cwe 862 Xiaomi +1	5 months ago
CVE-2026-23813	Authentication Bypass in hpe (CVE-2026-23813) authentication bypass in hpe (CVE-2026-23813). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Hpe Arubaos Cx Aruba Cx 10000 48Y6C R8P13A +154	5 months ago
CVE-2026-28292	Vulnerability in simple-git (CVE-2026-28292) vulnerability in simple-git (CVE-2026-28292). Successful exploitation can lead to full system takeover. Exploitable via ``blockUnsafeOperationsPlugin``. Mitigation: upgrade to `3.32.3` or later.	Critical	JavaScript Remote Code Execution Cwe 78 Cwe 178 +3	5 months ago
CVE-2026-3843	SQL Injection in sqli (CVE-2026-3843) SQL injection in sqli (CVE-2026-3843). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution SQL Injection Cwe 89 +4	5 months ago
CVE-2026-23240	Vulnerability in Kernel (CVE-2026-23240) vulnerability in Kernel (CVE-2026-23240). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.12.75, 6.18.16, 6.19.6` or later.	Critical	Cwe 362 Linux Linux Kernel	5 months ago
CVE-2025-56422	Unsafe Deserialization in deserialization (CVE-2025-56422) vulnerability in deserialization (CVE-2025-56422). Successful exploitation can lead to full system takeover.	Critical	Insecure Deserialization Cwe 502 Limesurvey	5 months ago
CVE-2026-3823	Vulnerability in blackbeartechhive (CVE-2026-3823) vulnerability in blackbeartechhive (CVE-2026-3823). Successful exploitation can lead to full system takeover.	Critical	Cwe 121 Cwe 787 Blackbeartechhive Atop Ehg2408 Firmware +3	5 months ago
CVE-2026-29063	Vulnerability in immutable-js (CVE-2026-29063) vulnerability in immutable-js (CVE-2026-29063). Successful exploitation can lead to full system takeover.	Critical	JavaScript Cwe 1321 Cwe 915 Immutable Js +1	5 months ago
CVE-2026-28802	Vulnerability in authlib (CVE-2026-28802) vulnerability in authlib (CVE-2026-28802). Successful exploitation can lead to full system takeover.	Critical	Python Cwe 347 Authlib	5 months ago
CVE-2026-24457	Path Traversal in eclipse (CVE-2026-24457) path traversal in eclipse (CVE-2026-24457). Confidential information can be exposed externally.	Critical	Remote Code Execution Cwe 22 Cwe 27 Eclipse +1	5 months ago
CVE-2026-30789	Vulnerability in rustdesk (CVE-2026-30789) vulnerability in rustdesk (CVE-2026-30789). Successful exploitation can lead to full system takeover.	Critical	Cwe 307 Cwe 916 Rustdesk Apple +8	5 months ago
CVE-2026-30790	Vulnerability in rustdesk (CVE-2026-30790) vulnerability in rustdesk (CVE-2026-30790). Successful exploitation can lead to full system takeover.	Critical	Cwe 319 Cwe 916 Rustdesk Rustdesk Server +6	5 months ago
CVE-2026-30783	Vulnerability in rustdesk (CVE-2026-30783) vulnerability in rustdesk (CVE-2026-30783). Successful exploitation can lead to full system takeover.	Critical	Cwe 602 Cwe 841 Rustdesk Apple +8	5 months ago
CVE-2026-2743	Path Traversal in path-traversal (CVE-2026-2743) path traversal in path-traversal (CVE-2026-2743). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Path Traversal Cwe 22 Cwe 434 +1	5 months ago
CVE-2026-29000	Vulnerability in CVE-2026-29000 (CVE-2026-29000) vulnerability in CVE-2026-29000 (CVE-2026-29000). Confidential information can be exposed externally.	Critical	Authentication Bypass Cwe 347	5 months ago
CVE-2025-66024	Cross-Site Scripting (XSS) in org.xwiki.contrib.blog:application-blog-ui (CVE-2025-66024) cross-site scripting in org.xwiki.contrib.blog:application-blog-ui (CVE-2025-66024). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.15.7` or later.	Critical	JavaScript Cross-Site Scripting Privilege Escalation Cwe 79 +2	5 months ago
CVE-2026-27446	Vulnerability in org.apache.activemq:artemis-server (CVE-2026-27446) vulnerability in org.apache.activemq:artemis-server (CVE-2026-27446). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.52.0` or later.	Critical	Apache Cwe 306 Activemq Artemis Artemis +5	5 months ago
CVE-2026-2590	Vulnerability in devolutions (CVE-2026-2590) vulnerability in devolutions (CVE-2026-2590). Successful exploitation can lead to full system takeover.	Critical	Cwe 20 Cwe 295 Devolutions Remote Desktop Manager	5 months ago
CVE-2026-23600	A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS). A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS).	Critical	Authentication Bypass Cwe 287 Hpe Autopass License Server	5 months ago
CVE-2026-28517	OS Command Injection in opendcim (CVE-2026-28517) OS command injection in opendcim (CVE-2026-28517). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 78 Opendcim	6 months ago
CVE-2026-2880	Vulnerability in fastify (CVE-2026-2880) vulnerability in fastify (CVE-2026-2880). Confidential information can be exposed externally.	Critical	Cwe 20 Fastify Fastifymiddie	6 months ago
CVE-2026-2293	Authorization Flaw in nestjs (CVE-2026-2293) vulnerability in nestjs (CVE-2026-2293). Successful exploitation can lead to full system takeover.	Critical	JavaScript Cwe 863 Cwe 551 NestJS +1	6 months ago
CVE-2025-11252	SQL Injection in sqli (CVE-2025-11252) SQL injection in sqli (CVE-2025-11252). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Signumtte Windeskfm	6 months ago
CVE-2026-24352	Vulnerability in pluxml (CVE-2026-24352) vulnerability in pluxml (CVE-2026-24352). Successful exploitation can lead to full system takeover.	Critical	Cwe 384 Pluxml	6 months ago
CVE-2025-11251	SQL Injection in sqli (CVE-2025-11251) SQL injection in sqli (CVE-2025-11251). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Daynex Woyio	6 months ago
CVE-2026-21660	Vulnerability in johnsoncontrols (CVE-2026-21660) vulnerability in johnsoncontrols (CVE-2026-21660). Successful exploitation can lead to full system takeover.	Critical	Cwe 256 Cwe 522 Johnsoncontrols Frick Controls Quantum Hd Firmware +1	6 months ago
CVE-2026-27577	Code Injection in n8n (CVE-2026-27577) code injection in n8n (CVE-2026-27577). Successful exploitation can lead to full system takeover.	Critical	Cwe 94 N8N	6 months ago
CVE-2026-27148	Vulnerability in storybook (CVE-2026-27148) vulnerability in storybook (CVE-2026-27148). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cross-Site Scripting Cwe 74 Cwe 79 +2	6 months ago
CVE-2026-27727	Vulnerability in mchange (CVE-2026-27727) vulnerability in mchange (CVE-2026-27727). Successful exploitation can lead to full system takeover. Exploitable via ``factoryClassLocation``.	Critical	Java Cwe 74 Cwe 502 Mchange +1	6 months ago
CVE-2026-2624	Vulnerability in epati (CVE-2026-2624) vulnerability in epati (CVE-2026-2624). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 306 Epati Antikor Next Generation Firewall	6 months ago
CVE-2026-27606	Path Traversal in path-traversal (CVE-2026-27606) path traversal in path-traversal (CVE-2026-27606). Successful exploitation can lead to full system takeover.	Critical	JavaScript Remote Code Execution Path Traversal Cwe 22 +2	6 months ago
CVE-2026-20127 KEV	[KEV] Authentication Bypass in Cisco catalyst-sd-wan-controller-and-manager (CVE-2026-20127) authentication bypass in Cisco catalyst-sd-wan-controller-and-manager (CVE-2026-20127). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Cisco Catalyst Sd Wan Controller And Manager Cwe 287 Network +3	6 months ago
CVE-2026-2807	Out-of-Bounds Write in mozilla (CVE-2026-2807) out-of-bounds write in mozilla (CVE-2026-2807). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Mozilla Firefox Thunderbird	6 months ago
CVE-2026-2773	Buffer Overflow in mozilla (CVE-2026-2773) vulnerability in mozilla (CVE-2026-2773). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Mozilla Firefox Thunderbird	6 months ago
CVE-2026-2777	Privilege Escalation in privilege-escalation (CVE-2026-2777) vulnerability in privilege-escalation (CVE-2026-2777). Successful exploitation can lead to full system takeover.	Critical	Privilege Escalation Cwe 269 Mozilla Firefox +1	6 months ago
CVE-2026-2792	Out-of-Bounds Write in mozilla (CVE-2026-2792) out-of-bounds write in mozilla (CVE-2026-2792). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Mozilla Firefox Thunderbird	6 months ago
CVE-2026-2793	Out-of-Bounds Write in mozilla (CVE-2026-2793) out-of-bounds write in mozilla (CVE-2026-2793). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Mozilla Firefox Thunderbird	6 months ago
CVE-2026-2795	Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox < 148. Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox < 148.	Critical	JavaScript Cwe 416 Mozilla Firefox +1	6 months ago

Vulnerabilities

🍪 About cookies