Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
Filtering: Tag: cwe-863 Clear
ID Title
CVE-2026-42070 Authorization Flaw in mantisbt/mantisbt (CVE-2026-42070)
vulnerability in mantisbt/mantisbt (CVE-2026-42070). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.28.2` or later.
CVE-2026-34579 Information Disclosure in mantisbt/mantisbt (CVE-2026-34579)
vulnerability in mantisbt/mantisbt (CVE-2026-34579). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.28.2` or later.
CVE-2026-45002 Vulnerability in openclaw (CVE-2026-45002)
vulnerability in openclaw (CVE-2026-45002). Risk of unauthorized operations or information disclosure. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.20` or later.
CVE-2026-44998 Authorization Flaw in openclaw (CVE-2026-44998)
vulnerability in openclaw (CVE-2026-44998). Risk of unauthorized operations or information disclosure.
CVE-2026-44991 Vulnerability in openclaw (CVE-2026-44991)
vulnerability in openclaw (CVE-2026-44991). Risk of unauthorized operations or information disclosure. Exploitable via ``commands.ownerAllowFrom``. Mitigation: upgrade to `2026.4.21` or later.
CVE-2026-42312 Vulnerability in pyload-ng (CVE-2026-42312)
vulnerability in pyload-ng (CVE-2026-42312). Confidential information can be exposed externally. Exploitable via ``ADMIN_ONLY_CORE_OPTIONS``. Mitigation: upgrade to `0.5.0b3.dev100` or later.
CVE-2026-42313 Vulnerability in pyload-ng (CVE-2026-42313)
vulnerability in pyload-ng (CVE-2026-42313). Confidential information can be exposed externally. Exploitable via ``ADMIN_ONLY_CORE_OPTIONS``. Mitigation: upgrade to `0.5.0b3.dev100` or later.
CVE-2026-42843 Authorization Flaw in getgrav/grav-plugin-api (CVE-2026-42843)
vulnerability in getgrav/grav-plugin-api (CVE-2026-42843). Successful exploitation can lead to full system takeover. Exploitable via ``api.access``. Mitigation: upgrade to `1.0.0-beta.15` or later.
CVE-2026-42349 Vulnerability in @clerk/shared (CVE-2026-42349)
vulnerability in @clerk/shared (CVE-2026-42349). Confidential information can be exposed externally. Exploitable via ``clerkMiddleware``. Mitigation: upgrade to `4.8.3` or later.
CVE-2026-42610 Authorization Flaw in getgrav/grav (CVE-2026-42610)
vulnerability in getgrav/grav (CVE-2026-42610). Confidential information can be exposed externally. Exploitable via ``editor_chen``. Mitigation: upgrade to `2.0.0-beta.2` or later.
CVE-2026-44573 Authorization Flaw in next (CVE-2026-44573)
vulnerability in next (CVE-2026-44573). Confidential information can be exposed externally. Exploitable via ``i18n``. Mitigation: upgrade to `16.2.5` or later.
CVE-2026-44473 Vulnerability in github.com/ellanetworks/core (CVE-2026-44473)
vulnerability in github.com/ellanetworks/core (CVE-2026-44473). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.10.0` or later.
CVE-2025-9973 Vulnerability in privilege-escalation (CVE-2025-9973)
vulnerability in privilege-escalation (CVE-2025-9973). Confidential information can be exposed externally.
CVE-2025-10908 Authorization Flaw in c (CVE-2025-10908)
vulnerability in c (CVE-2025-10908). Risk of unauthorized operations or information disclosure.
CVE-2026-42571 Authorization Flaw in github.com/pelicanplatform/pelican (CVE-2026-42571)
vulnerability in github.com/pelicanplatform/pelican (CVE-2026-42571). Risk of unauthorized operations or information disclosure. Exploitable via ``Issuer.GroupSource``. Mitigation: upgrade to `0.0.0-20260408120501-7f73b9c3e677` or later.
CVE-2025-15633 Authorization Flaw in hcltech (CVE-2025-15633)
vulnerability in hcltech (CVE-2025-15633). Confidential information can be exposed externally.
CVE-2026-42296 Authorization Flaw in argo-workflows (CVE-2026-42296)
vulnerability in argo-workflows (CVE-2026-42296). Confidential information can be exposed externally. Mitigation: upgrade to `3.7.14, 4.0.5` or later.
CVE-2026-42137 Vulnerability in getkirby (CVE-2026-42137)
vulnerability in getkirby (CVE-2026-42137). Confidential information can be exposed externally.
CVE-2026-41432 Vulnerability in github.com/QuantumNous/new-api (CVE-2026-41432)
vulnerability in github.com/QuantumNous/new-api (CVE-2026-41432). Data can be tampered with by attackers. Exploitable via `POST /api/user/pay`. Mitigation: upgrade to `0.12.10` or later.
CVE-2026-44330 Authorization Flaw in github.com/free5gc/nef (CVE-2026-44330)
vulnerability in github.com/free5gc/nef (CVE-2026-44330). Data can be tampered with by attackers. Exploitable via `GET /applications`.
CVE-2026-44567 Vulnerability in open-webui (CVE-2026-44567)
vulnerability in open-webui (CVE-2026-44567). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/auths/signup`. Mitigation: upgrade to `0.1.124` or later.
CVE-2026-44832 Vulnerability in snipe/snipe-it (CVE-2026-44832)
vulnerability in snipe/snipe-it (CVE-2026-44832). Successful exploitation can lead to full system takeover. Exploitable via ``users.edit``. Mitigation: upgrade to `8.4.1` or later.
CVE-2026-42160 Vulnerability in CVE-2026-42160 (CVE-2026-42160)
vulnerability in CVE-2026-42160 (CVE-2026-42160). Risk of unauthorized operations or information disclosure.
CVE-2026-44561 Authorization Flaw in open-webui (CVE-2026-44561)
vulnerability in open-webui (CVE-2026-44561). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/channels/{channel_id}/messages`. Mitigation: upgrade to `0.9.0` or later.
CVE-2026-44564 Authorization Flaw in open-webui (CVE-2026-44564)
vulnerability in open-webui (CVE-2026-44564). Risk of unauthorized operations or information disclosure. Exploitable via ``read``. Mitigation: upgrade to `0.9.0` or later.
CVE-2026-44557 Authorization Flaw in open-webui (CVE-2026-44557)
vulnerability in open-webui (CVE-2026-44557). Risk of unauthorized operations or information disclosure. Exploitable via `POST /query/doc`. Mitigation: upgrade to `0.9.0` or later.
CVE-2025-66170 Authorization Flaw in apache (CVE-2025-66170)
vulnerability in apache (CVE-2025-66170). Confidential information can be exposed externally.
CVE-2026-40213 Authorization Flaw in openstack-cyborg (CVE-2026-40213)
vulnerability in openstack-cyborg (CVE-2026-40213). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.0.1` or later.
CVE-2026-44283 Authorization Flaw in go.etcd.io/etcd/v3 (CVE-2026-44283)
vulnerability in go.etcd.io/etcd/v3 (CVE-2026-44283). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.5.30` or later.
CVE-2026-39852 Authorization Flaw in io.quarkus:quarkus-vertx-http (CVE-2026-39852)
vulnerability in io.quarkus:quarkus-vertx-http (CVE-2026-39852). Confidential information can be exposed externally. Mitigation: upgrade to `3.35.1.1` or later.
CVE-2026-39402 Authorization Flaw in dos (CVE-2026-39402)
vulnerability in dos (CVE-2026-39402). Risk of unauthorized operations or information disclosure.
CVE-2026-33489 Vulnerability in github.com/coredns/coredns (CVE-2026-33489)
vulnerability in github.com/coredns/coredns (CVE-2026-33489). Confidential information can be exposed externally. Mitigation: upgrade to `1.14.3` or later.
CVE-2026-42812 Vulnerability in org.apache.polaris:polaris-runtime-service (CVE-2026-42812)
vulnerability in org.apache.polaris:polaris-runtime-service (CVE-2026-42812). Successful exploitation can lead to full system takeover. Exploitable via ``write.metadata.path``. Mitigation: upgrade to `1.4.1` or later.
CVE-2026-43001 Authorization Flaw in keystone (CVE-2026-43001)
vulnerability in keystone (CVE-2026-43001). Confidential information can be exposed externally. Exploitable via `POST /v3/credentials`.
CVE-2026-42432 Vulnerability in openclaw (CVE-2026-42432)
vulnerability in openclaw (CVE-2026-42432). Successful exploitation can lead to full system takeover. Exploitable via ``openclaw``. Mitigation: upgrade to `2026.4.8` or later.
CVE-2026-42429 Privilege Escalation in openclaw (CVE-2026-42429)
vulnerability in openclaw (CVE-2026-42429). Data can be tampered with by attackers. Exploitable via ``operator.read``. Mitigation: upgrade to `2026.4.8` or later.
CVE-2026-41371 Authorization Flaw in privilege-escalation (CVE-2026-41371)
vulnerability in privilege-escalation (CVE-2026-41371). Data can be tampered with by attackers.
CVE-2026-41367 Authorization Flaw in openclaw (CVE-2026-41367)
vulnerability in openclaw (CVE-2026-41367). Risk of unauthorized operations or information disclosure.
CVE-2026-41427 Authorization Flaw in better-auth (CVE-2026-41427)
vulnerability in better-auth (CVE-2026-41427). Data can be tampered with by attackers. Mitigation: upgrade to `1.6.5` or later.
CVE-2025-13480 Authorization Flaw in fudosecurity (CVE-2025-13480)
vulnerability in fudosecurity (CVE-2025-13480). Confidential information can be exposed externally.
CVE-2026-39454 Vulnerability in skygroup (CVE-2026-39454)
vulnerability in skygroup (CVE-2026-39454). Successful exploitation can lead to full system takeover.
CVE-2026-40515 Authorization Flaw in hkuds (CVE-2026-40515)
vulnerability in hkuds (CVE-2026-40515). Confidential information can be exposed externally.
CVE-2025-40897 Authorization Flaw in CVE-2025-40897 (CVE-2025-40897)
vulnerability in CVE-2025-40897 (CVE-2025-40897). Data can be tampered with by attackers.
CVE-2026-40291 Privilege Escalation in chamilo (CVE-2026-40291)
vulnerability in chamilo (CVE-2026-40291). Successful exploitation can lead to full system takeover. Exploitable via `PUT /api/users/{id}`.
CVE-2026-24069 Authorization Flaw in CVE-2026-24069 (CVE-2026-24069)
vulnerability in CVE-2026-24069 (CVE-2026-24069). Risk of unauthorized operations or information disclosure.
CVE-2026-33551 Authorization Flaw in keystone (CVE-2026-33551)
vulnerability in keystone (CVE-2026-33551). Confidential information can be exposed externally. Mitigation: upgrade to `26.1.1` or later.
CVE-2026-2619 Authorization Flaw in gitlab (CVE-2026-2619)
vulnerability in gitlab (CVE-2026-2619). Risk of unauthorized operations or information disclosure.
CVE-2026-1752 Authorization Flaw in gitlab (CVE-2026-1752)
vulnerability in gitlab (CVE-2026-1752). Risk of unauthorized operations or information disclosure.
CVE-2026-33461 Authorization Flaw in elastic (CVE-2026-33461)
vulnerability in elastic (CVE-2026-33461). Confidential information can be exposed externally.
CVE-2026-33460 Authorization Flaw in elastic (CVE-2026-33460)
vulnerability in elastic (CVE-2026-33460). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →