Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-93 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-11362	Vulnerability in binary (CVE-2026-11362) vulnerability in binary (CVE-2026-11362). Successful exploitation can lead to full system takeover.	Critical	Cwe 93 Cwe 150 Binary Datadog	2 months ago
CVE-2026-9270	Vulnerability in binary (CVE-2026-9270) vulnerability in binary (CVE-2026-9270). Confidential information can be exposed externally.	Critical	Cwe 93 Cwe 150 Binary Datadog	2 months ago
CVE-2026-50292	Vulnerability in freedesktop (CVE-2026-50292) vulnerability in freedesktop (CVE-2026-50292). Successful exploitation can lead to full system takeover.	High	Cwe 93 Freedesktop Libinput	2 months ago
CVE-2026-46739	Vulnerability in cosimo (CVE-2026-46739) vulnerability in cosimo (CVE-2026-46739). Risk of unauthorized operations or information disclosure.	Medium	Cwe 93 Cosimo Net Cwe 150	2 months ago
CVE-2026-46741	Vulnerability in sanbeg (CVE-2026-46741) vulnerability in sanbeg (CVE-2026-46741). Data can be tampered with by attackers.	High	Cwe 93 Sanbeg Etsy Cwe 150	2 months ago
CVE-2026-8722	Vulnerability in team (CVE-2026-8722) vulnerability in team (CVE-2026-8722). Risk of unauthorized operations or information disclosure.	Medium	Cwe 93 Team Net Cwe 150	2 months ago
CVE-2026-48861	Vulnerability in mint (CVE-2026-48861) vulnerability in mint (CVE-2026-48861). Risk of unauthorized operations or information disclosure. Exploitable via ``method``. Mitigation: upgrade to `1.9.0` or later.		Cwe 93	2 months ago
CVE-2026-45372	Vulnerability in c (CVE-2026-45372) vulnerability in c (CVE-2026-45372). Data can be tampered with by attackers. Mitigation: upgrade to `0.44.0` or later.	Critical	C C++ Cwe 93 Cwe 444 +2	3 months ago
CVE-2026-49130	Vulnerability in CVE-2026-49130 (CVE-2026-49130) vulnerability in CVE-2026-49130 (CVE-2026-49130). Risk of unauthorized operations or information disclosure.	Medium	Cwe 93	3 months ago
CVE-2026-45070	Vulnerability in symfony/mime (CVE-2026-45070) vulnerability in symfony/mime (CVE-2026-45070). Risk of unauthorized operations or information disclosure. Exploitable via ``tokens``. Mitigation: upgrade to `8.0.12` or later.	Medium	PHP Symfony Cwe 93 Sensiolabs	3 months ago
CVE-2026-45067	Vulnerability in symfony/mime (CVE-2026-45067) vulnerability in symfony/mime (CVE-2026-45067). Risk of unauthorized operations or information disclosure. Exploitable via ``SmtpTransport``. Mitigation: upgrade to `8.0.12` or later.		Symfony Cwe 93	3 months ago
CVE-2026-46740	Vulnerability in CVE-2026-46740 (CVE-2026-46740) vulnerability in CVE-2026-46740 (CVE-2026-46740). Risk of unauthorized operations or information disclosure.	Medium	Cwe 93 Cwe 150	3 months ago
CVE-2026-47072	Vulnerability in hackney (CVE-2026-47072) vulnerability in hackney (CVE-2026-47072). Data can be tampered with by attackers. Exploitable via `Host header`. Mitigation: upgrade to `4.0.1` or later.	High	Cwe 93 Benoitc Hackney	3 months ago
CVE-2026-47075	Vulnerability in hackney (CVE-2026-47075) vulnerability in hackney (CVE-2026-47075). Data can be tampered with by attackers. Exploitable via ``Authorization``. Mitigation: upgrade to `4.0.1` or later.	High	Cwe 93 Benoitc Hackney	3 months ago
CVE-2026-47069	Vulnerability in hackney (CVE-2026-47069) vulnerability in hackney (CVE-2026-47069). Risk of unauthorized operations or information disclosure. Exploitable via ``Name``. Mitigation: upgrade to `4.0.1` or later.	Medium	Cwe 93 Benoitc Hackney	3 months ago
CVE-2026-8788	Vulnerability in CVE-2026-8788 (CVE-2026-8788) vulnerability in CVE-2026-8788 (CVE-2026-8788). Risk of unauthorized operations or information disclosure.	High	Cwe 93 Cwe 150	3 months ago
CVE-2026-46720	Vulnerability in CVE-2026-46720 (CVE-2026-46720) vulnerability in CVE-2026-46720 (CVE-2026-46720). Data can be tampered with by attackers.	High	Cwe 93 Cwe 150	3 months ago
CVE-2026-46719	Vulnerability in CVE-2026-46719 (CVE-2026-46719) vulnerability in CVE-2026-46719 (CVE-2026-46719). Risk of unauthorized operations or information disclosure.	Medium	Cwe 93 Cwe 150	3 months ago
CVE-2026-32993	Vulnerability in CVE-2026-32993 (CVE-2026-32993) vulnerability in CVE-2026-32993 (CVE-2026-32993). Risk of unauthorized operations or information disclosure. Exploitable via ``status``.	High	Cwe 93	3 months ago
CVE-2026-42578	Vulnerability in io.netty:netty-handler-proxy (CVE-2026-42578) vulnerability in io.netty:netty-handler-proxy (CVE-2026-42578). Data can be tampered with by attackers. Exploitable via ``io.netty.handler.proxy.HttpProxyHandler``. Mitigation: upgrade to `4.2.13.Final` or later.	High	Cwe 113 Netty Cwe 93	3 months ago
CVE-2026-35504	Vulnerability in CVE-2026-35504 (CVE-2026-35504) vulnerability in CVE-2026-35504 (CVE-2026-35504). Risk of unauthorized operations or information disclosure.	Medium	Cwe 93	3 months ago
CVE-2026-44217	Vulnerability in sse-channel (CVE-2026-44217) vulnerability in sse-channel (CVE-2026-44217). Risk of unauthorized operations or information disclosure. Exploitable via ``event``. Mitigation: upgrade to `4.0.1` or later.		JavaScript Cwe 93	3 months ago
CVE-2026-43968	Vulnerability in cowlib (CVE-2026-43968) vulnerability in cowlib (CVE-2026-43968). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.16.1` or later.	Medium	Cross-Site Scripting Cwe 93 Ninenines Cowlib	3 months ago
CVE-2026-43969	Vulnerability in cowlib (CVE-2026-43969) vulnerability in cowlib (CVE-2026-43969). Risk of unauthorized operations or information disclosure.	Low	Cwe 93 Ninenines Cowlib	3 months ago
CVE-2026-42257	Command Injection in net-imap (CVE-2026-42257) command injection in net-imap (CVE-2026-42257). Successful exploitation can lead to full system takeover. Exploitable via ``CRLF``. Mitigation: upgrade to `0.4.24` or later.	Critical	Ruby Cwe 77 Cwe 93 Ruby Lang +1	3 months ago
CVE-2026-42258	Command Injection in net-imap (CVE-2026-42258) command injection in net-imap (CVE-2026-42258). Data can be tampered with by attackers. Exploitable via ``flag``. Mitigation: upgrade to `0.4.24` or later.	Medium	Ruby Cwe 77 Cwe 93 Ruby Lang +1	3 months ago
CVE-2026-44214	Vulnerability in eventsource-encoder (CVE-2026-44214) vulnerability in eventsource-encoder (CVE-2026-44214). Risk of unauthorized operations or information disclosure. Exploitable via ``event``. Mitigation: upgrade to `1.0.2` or later.	Medium	Cwe 93 Cwe 113 Rexxars Eventsource Encoder	3 months ago
CVE-2026-41570	Vulnerability in phpunit/phpunit (CVE-2026-41570) vulnerability in phpunit/phpunit (CVE-2026-41570). Successful exploitation can lead to full system takeover. Exploitable via ``auto_prepend_file``. Mitigation: upgrade to `13.1.6` or later.	High	PHP Remote Code Execution Cwe 88 Cwe 93 +2	3 months ago
CVE-2026-42586	Vulnerability in io.netty:netty-codec-redis (CVE-2026-42586) vulnerability in io.netty:netty-codec-redis (CVE-2026-42586). Data can be tampered with by attackers. Exploitable via ``io.netty.handler.codec.redis.RedisEncoder``. Mitigation: upgrade to `4.1.133.Final` or later.	Medium	Cwe 93 Netty	3 months ago
CVE-2026-43882	Vulnerability in wwbn/avideo (CVE-2026-43882) vulnerability in wwbn/avideo (CVE-2026-43882). Risk of unauthorized operations or information disclosure. Exploitable via ``title``.	Medium	PHP Cwe 93	3 months ago
CVE-2026-39849	Vulnerability in pi-hole (CVE-2026-39849) vulnerability in pi-hole (CVE-2026-39849). Successful exploitation can lead to full system takeover. Exploitable via ``dns.interface``.	High	Cwe 93 Pi Hole Ftldns	3 months ago
CVE-2026-34458	Vulnerability in privilege-escalation (CVE-2026-34458) vulnerability in privilege-escalation (CVE-2026-34458). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 93 Sandboxie Plus Sandboxie	3 months ago
CVE-2026-41417	Vulnerability in io.netty:netty-codec-http (CVE-2026-41417) vulnerability in io.netty:netty-codec-http (CVE-2026-41417). Risk of unauthorized operations or information disclosure. Exploitable via `POST /s2`. Mitigation: upgrade to `4.2.13.Final` or later.	Medium	Cwe 93 Cwe 444 Netty	3 months ago
CVE-2026-5140	Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM... Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM...	High	Authentication Bypass Cwe 93 Pardus Os	4 months ago
CVE-2026-6351	Vulnerability in CVE-2026-6351 (CVE-2026-6351) vulnerability in CVE-2026-6351 (CVE-2026-6351). Confidential information can be exposed externally.	High	Cwe 93	4 months ago
CVE-2026-1502	CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.		Cwe 93	4 months ago
CVE-2026-39983	Vulnerability in patrickjuchli (CVE-2026-39983) vulnerability in patrickjuchli (CVE-2026-39983). Data can be tampered with by attackers. Mitigation: upgrade to `5.2.1` or later.	High	JavaScript Cwe 93 Patrickjuchli Basic Ftp	4 months ago
CVE-2026-39394	Vulnerability in csrf (CVE-2026-39394) vulnerability in csrf (CVE-2026-39394). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.31.4.0` or later.	High	Cross-Site Request Forgery Cwe 93 Ci4 Cms Erp Ci4Ms	4 months ago
CVE-2026-26962	Vulnerability in rack (CVE-2026-26962) vulnerability in rack (CVE-2026-26962). Risk of unauthorized operations or information disclosure. Exploitable via ``filename``. Mitigation: upgrade to `3.2.6` or later.	Medium	Ruby Cwe 93 Rack	4 months ago
CVE-2025-56007	Vulnerability in keenetic (CVE-2025-56007) vulnerability in keenetic (CVE-2025-56007). Risk of unauthorized operations or information disclosure.	Medium	Cwe 93 Keenetic Keeneticos	10 months ago
CVE-2025-61884 KEV	[KEV] Path Traversal in Oracle e-business-suite (CVE-2025-61884) path traversal in Oracle e-business-suite (CVE-2025-61884). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.	High	Oracle E Business Suite Cwe 918 C +6	10 months ago
CVE-2025-28357	Vulnerability in CVE-2025-28357 (CVE-2025-28357) vulnerability in CVE-2025-28357 (CVE-2025-28357). Successful exploitation can lead to full system takeover.	High	Cwe 93	10 months ago
CVE-2025-8419	Vulnerability in c (CVE-2025-8419) vulnerability in c (CVE-2025-8419). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 93 Redhat Keycloak	1 year ago
CVE-2025-6175	Vulnerability in CVE-2025-6175 (CVE-2025-6175) vulnerability in CVE-2025-6175 (CVE-2025-6175). Risk of unauthorized operations or information disclosure.	High	Cwe 93	1 year ago
CVE-2023-49082	Vulnerability in aiohttp (CVE-2023-49082) vulnerability in aiohttp (CVE-2023-49082). Risk of unauthorized operations or information disclosure.	Medium	Python Cwe 20 Cwe 93 Aiohttp	2 years ago
CVE-2022-27924 KEV	[KEV] Vulnerability in Synacor zimbra-collaboration-suite-zcs (CVE-2022-27924) vulnerability in Synacor zimbra-collaboration-suite-zcs (CVE-2022-27924). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.	High	Synacor Zimbra Collaboration Suite Zcs Cwe 93 Cwe 74 +1	4 years ago
CVE-2016-3115	Vulnerability in c (CVE-2016-3115) vulnerability in c (CVE-2016-3115). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 93 OpenBSD Openssh +2	4 years ago
CVE-2020-3561	Vulnerability in cisco (CVE-2020-3561) vulnerability in cisco (CVE-2020-3561). Risk of unauthorized operations or information disclosure.	Medium	Cwe 93 Cwe 74 Cisco Adaptive Security Appliance +2	5 years ago
CVE-2017-14037	CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability. CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability.	Medium	Cwe 93 Crushftp	9 years ago
CVE-2014-9564	Vulnerability in ibm (CVE-2014-9564) vulnerability in ibm (CVE-2014-9564). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 93 Ibm Ib6131 Firmware +3	9 years ago

Vulnerabilities

🍪 About cookies