Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-770 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-41310	Vulnerability in OpenTelemetry.Exporter.Zipkin (CVE-2026-41310) vulnerability in OpenTelemetry.Exporter.Zipkin (CVE-2026-41310). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.15.3` or later.	Medium	C# Cwe 400 Cwe 770 Opentelemetry +1	4 months ago
CVE-2026-32688	Vulnerability in dos (CVE-2026-32688) vulnerability in dos (CVE-2026-32688). Risk of unauthorized operations or information disclosure.		Denial of Service Cwe 770	4 months ago
CVE-2026-21728	Vulnerability in github.com/grafana/tempo (CVE-2026-21728) vulnerability in github.com/grafana/tempo (CVE-2026-21728). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.10.2` or later.	High	Cwe 400 Grafana Tempo Cwe 770	4 months ago
CVE-2026-41644	Vulnerability in github.com/monetr/monetr (CVE-2026-41644) vulnerability in github.com/monetr/monetr (CVE-2026-41644). Confidential information can be exposed externally. Exploitable via `POST /api/lunch_flow/link`. Mitigation: upgrade to `1.12.5` or later.	High	Server-Side Request Forgery Cwe 209 Cwe 770 Cwe 918 +1	4 months ago
CVE-2026-33812	Excessive memory allocation when decoding malicious SFNT in golang.org/x/image Excessive memory allocation when decoding malicious SFNT in golang.org/x/image	Medium	Cwe 770 Golang Image	4 months ago
CVE-2026-40192	Vulnerability in pillow (CVE-2026-40192) vulnerability in pillow (CVE-2026-40192). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.2.0` or later.	High	Python Denial of Service Cwe 400 Cwe 770 +2	4 months ago
CVE-2026-5807	Vulnerability in github.com/hashicorp/vault (CVE-2026-5807) vulnerability in github.com/hashicorp/vault (CVE-2026-5807). Risk of unauthorized operations or information disclosure.	High	Cwe 770 Hashicorp HashiCorp Vault	4 months ago
CVE-2026-35469	Vulnerability in github.com/moby/spdystream (CVE-2026-35469) vulnerability in github.com/moby/spdystream (CVE-2026-35469). Risk of unauthorized operations or information disclosure. Exploitable via ``numSettings``. Mitigation: upgrade to `0.5.1` or later.	Medium	Cwe 770	4 months ago
CVE-2026-3505	Vulnerability in CVE-2026-3505 (CVE-2026-3505) vulnerability in CVE-2026-3505 (CVE-2026-3505). Risk of unauthorized operations or information disclosure.	High	Java Cwe 400 Cwe 770	4 months ago
CVE-2026-39414	Vulnerability in minio (CVE-2026-39414) vulnerability in minio (CVE-2026-39414). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.04.10` or later.	Medium	Cwe 770 Minio	4 months ago
CVE-2026-39304	Vulnerability in activemq (CVE-2026-39304) vulnerability in activemq (CVE-2026-39304). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.19.4, 6.2.4` or later.	High	Apache Denial of Service Cwe 400 Cwe 770 +2	4 months ago
CVE-2026-40036	Vulnerability in dfir-unfurl (CVE-2026-40036) vulnerability in dfir-unfurl (CVE-2026-40036). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `20260405` or later.	High	Denial of Service Cwe 409 Cwe 770 Ryandfir +1	4 months ago
CVE-2026-23869	Vulnerability in react (CVE-2026-23869) vulnerability in react (CVE-2026-23869). Risk of unauthorized operations or information disclosure.	High	React Denial of Service Cwe 400 Cwe 502 +1	4 months ago
CVE-2026-35401	Vulnerability in c (CVE-2026-35401) vulnerability in c (CVE-2026-35401). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.23.0a3` or later.	High	C Cwe 770 Saleor	4 months ago
CVE-2026-33756	Vulnerability in saleor (CVE-2026-33756) vulnerability in saleor (CVE-2026-33756). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.23.0a3` or later.	High	Cwe 770 Saleor	4 months ago
CVE-2026-32280	Vulnerability in stdlib (CVE-2026-32280) vulnerability in stdlib (CVE-2026-32280). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.9, 1.26.2` or later.	High	Denial of Service Cwe 770 Golang Go	4 months ago
CVE-2026-32283	Vulnerability in stdlib (CVE-2026-32283) vulnerability in stdlib (CVE-2026-32283). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.9, 1.26.2` or later.	High	Denial of Service Cwe 770 Cwe 764 Golang +1	4 months ago
CVE-2026-32288	Vulnerability in stdlib (CVE-2026-32288) vulnerability in stdlib (CVE-2026-32288). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.9, 1.26.2` or later.	Medium	Cwe 770 Golang Go	4 months ago
CVE-2026-34045	Vulnerability in linuxfoundation (CVE-2026-34045) vulnerability in linuxfoundation (CVE-2026-34045). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.26.2` or later.	High	Cwe 209 Cwe 284 Cwe 400 Cwe 770 +2	4 months ago
CVE-2026-29181	Vulnerability in opentelemetry (CVE-2026-29181) vulnerability in opentelemetry (CVE-2026-29181). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.41.0` or later.	High	Cwe 770 Opentelemetry	4 months ago
CVE-2026-5762	Vulnerability in dos (CVE-2026-5762) vulnerability in dos (CVE-2026-5762). Risk of unauthorized operations or information disclosure. Exploitable via ``master``.		Denial of Service Cwe 770	4 months ago
CVE-2026-20431	Vulnerability in dos (CVE-2026-20431) vulnerability in dos (CVE-2026-20431). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 770 Mediatek Mt6813 Firmware +37	4 months ago
CVE-2026-35441	Vulnerability in monospace (CVE-2026-35441) vulnerability in monospace (CVE-2026-35441). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.17.0` or later.	Medium	Cwe 400 Cwe 770 Monospace Directus	4 months ago
CVE-2026-34756	Vulnerability in vllm (CVE-2026-34756) vulnerability in vllm (CVE-2026-34756). Risk of unauthorized operations or information disclosure. Exploitable via ``ChatCompletionRequest``. Mitigation: upgrade to `0.19.0` or later.	Medium	Python Denial of Service Cwe 770 Cwe 1284 +1	4 months ago
CVE-2026-34824	Out-of-Bounds Read in dos (CVE-2026-34824) vulnerability in dos (CVE-2026-34824). Risk of unauthorized operations or information disclosure.	High	Python Denial of Service Cwe 125 Cwe 770 +2	4 months ago
CVE-2026-34052	Vulnerability in dos (CVE-2026-34052) vulnerability in dos (CVE-2026-34052). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 401 Cwe 770 Jupyter +1	4 months ago
CVE-2026-34755	Vulnerability in vllm (CVE-2026-34755) vulnerability in vllm (CVE-2026-34755). Risk of unauthorized operations or information disclosure. Exploitable via `POST /v1/chat/completions`. Mitigation: upgrade to `0.19.0` or later.	Medium	Cwe 770 vLLM	4 months ago
CVE-2026-35562	Vulnerability in dos (CVE-2026-35562) vulnerability in dos (CVE-2026-35562). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770 Amazon Athena Odbc +6	4 months ago
CVE-2026-25043	Vulnerability in dos (CVE-2026-25043) vulnerability in dos (CVE-2026-25043). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 770 Budibase	4 months ago
CVE-2026-23468	Vulnerability in linux (CVE-2026-23468) vulnerability in linux (CVE-2026-23468). Risk of unauthorized operations or information disclosure.	Medium	Cwe 770 Linux Linux Kernel	4 months ago
CVE-2026-26477	Vulnerability in dos (CVE-2026-26477) vulnerability in dos (CVE-2026-26477). Risk of unauthorized operations or information disclosure.	Medium	PHP Denial of Service Cwe 770 Cwe 400 +1	4 months ago
CVE-2026-34829	Vulnerability in rack (CVE-2026-34829) vulnerability in rack (CVE-2026-34829). Risk of unauthorized operations or information disclosure. Exploitable via ``BoundedIO``. Mitigation: upgrade to `3.2.6` or later.	High	Ruby Denial of Service Cwe 400 Cwe 770 +1	4 months ago
CVE-2026-34827	Vulnerability in rack (CVE-2026-34827) vulnerability in rack (CVE-2026-34827). Risk of unauthorized operations or information disclosure. Exploitable via ``name``. Mitigation: upgrade to `3.2.6` or later.	High	Ruby Denial of Service Cwe 400 Cwe 407 +2	4 months ago
CVE-2026-34826	Vulnerability in rack (CVE-2026-34826) vulnerability in rack (CVE-2026-34826). Risk of unauthorized operations or information disclosure. Exploitable via ``Range``. Mitigation: upgrade to `3.2.6` or later.	Medium	Ruby Denial of Service Cwe 400 Cwe 770 +1	4 months ago
CVE-2026-34593	Vulnerability in ash-hq (CVE-2026-34593) vulnerability in ash-hq (CVE-2026-34593). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Cwe 770 Ash Hq Ash Framework	4 months ago
CVE-2026-32145	Vulnerability in dos (CVE-2026-32145) vulnerability in dos (CVE-2026-32145). Risk of unauthorized operations or information disclosure.		Denial of Service Cwe 770	4 months ago
CVE-2026-34165	Vulnerability in dos (CVE-2026-34165) vulnerability in dos (CVE-2026-34165). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 191 Cwe 770 Go Git Project +1	4 months ago
CVE-2026-21710	Vulnerability in node (CVE-2026-21710) vulnerability in node (CVE-2026-21710). Risk of unauthorized operations or information disclosure. Exploitable via ``TypeError``. Mitigation: upgrade to `20.20.2, 22.22.2, 24.14.1, 25.8.2` or later.	High	JavaScript Cwe 770 Cwe 843 Nodejs +3	5 months ago
CVE-2026-33871	Vulnerability in dos (CVE-2026-33871) vulnerability in dos (CVE-2026-33871). Risk of unauthorized operations or information disclosure. Exploitable via ``CONTINUATION``.	High	Denial of Service Cwe 770 Netty	5 months ago
CVE-2026-27880	Out-of-Bounds Write in grafana (CVE-2026-27880) out-of-bounds write in grafana (CVE-2026-27880). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `12.1.10, 12.2.8, 12.3.6, 12.4.2` or later.	High	Cwe 787 Cwe 125 Grafana Cwe 770	5 months ago
CVE-2026-27857	Vulnerability in dovecot (CVE-2026-27857) vulnerability in dovecot (CVE-2026-27857). Risk of unauthorized operations or information disclosure.	Medium	Cwe 400 Cwe 770 Dovecot Open Xchange	5 months ago
CVE-2026-27858	Vulnerability in dovecot (CVE-2026-27858) vulnerability in dovecot (CVE-2026-27858). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Cwe 770 Dovecot Open Xchange	5 months ago
CVE-2026-4897	Vulnerability in dos (CVE-2026-4897) vulnerability in dos (CVE-2026-4897). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 770 Freedesktop Polkit +3	5 months ago
CVE-2026-33219	Vulnerability in nats (CVE-2026-33219) vulnerability in nats (CVE-2026-33219). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.11.15, 2.12.6` or later.	Medium	Cwe 770 Linuxfoundation Nats Server	5 months ago
CVE-2026-1519	Vulnerability in isc (CVE-2026-1519) vulnerability in isc (CVE-2026-1519). Risk of unauthorized operations or information disclosure.	High	Cwe 606 Isc Bind Cwe 770	5 months ago
CVE-2026-1526	Vulnerability in nodejs (CVE-2026-1526) vulnerability in nodejs (CVE-2026-1526). Risk of unauthorized operations or information disclosure.	High	JavaScript Cwe 409 Cwe 770 Nodejs +1	5 months ago
CVE-2026-32141	Vulnerability in webreflection (CVE-2026-32141) vulnerability in webreflection (CVE-2026-32141). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.0` or later.	High	JavaScript Cwe 674 Cwe 770 Webreflection +1	5 months ago
CVE-2026-32062	Vulnerability in openclaw (CVE-2026-32062) vulnerability in openclaw (CVE-2026-32062). Risk of unauthorized operations or information disclosure. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.2.22` or later.	High	Cwe 770 Openclaw Openclawvoice Call	5 months ago
CVE-2026-26130	Vulnerability in aspnet-core (CVE-2026-26130) vulnerability in aspnet-core (CVE-2026-26130). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.25, 9.0.14, 10.0.4` or later.	High	C# Cwe 770 Microsoft Aspnet Core	5 months ago
CVE-2026-26018	Vulnerability in dos (CVE-2026-26018) vulnerability in dos (CVE-2026-26018). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 337 Cwe 400 Cwe 770 +3	5 months ago

Vulnerabilities

🍪 About cookies