Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: network Clear

ID	Title	Severity	Tags	Detected
CVE-2026-25199	Information Disclosure in apache (CVE-2026-25199) vulnerability in apache (CVE-2026-25199). Confidential information can be exposed externally.	Critical	Apache Cwe 200 Cloudstack Authentication Bypass +10	3 months ago
CVE-2026-8153	OS Command Injection in iot-embedded (CVE-2026-8153) OS command injection in iot-embedded (CVE-2026-8153). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Os Network Iot Embedded +8	3 months ago
CVE-2013-10075	Vulnerability in apache (CVE-2013-10075) vulnerability in apache (CVE-2013-10075). Confidential information can be exposed externally.	Critical	Apache Cwe 672 Chorny Perl +12	3 months ago
CVE-2025-69690	Unsafe Deserialization in deserialization (CVE-2025-69690) vulnerability in deserialization (CVE-2025-69690). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 502 Cwe 915 Remote Code Execution +13	3 months ago
CVE-2026-42826	Information Disclosure in microsoft (CVE-2026-42826) vulnerability in microsoft (CVE-2026-42826). Successful exploitation can lead to full system takeover.	Critical	Cwe 200 Microsoft Azure Devops Azure +9	3 months ago
CVE-2026-33109	Vulnerability in apache (CVE-2026-33109) vulnerability in apache (CVE-2026-33109). Successful exploitation can lead to full system takeover.	Critical	Apache Cwe 284 Microsoft Azure Managed Instance For Apache Cassandra +10	3 months ago
CVE-2026-33823	Vulnerability in microsoft (CVE-2026-33823) vulnerability in microsoft (CVE-2026-33823). Confidential information can be exposed externally.	Critical	Cwe 285 Microsoft Teams Authentication Bypass +11	3 months ago
CVE-2026-33844	Vulnerability in apache (CVE-2026-33844) vulnerability in apache (CVE-2026-33844). Successful exploitation can lead to full system takeover.	Critical	Apache Cwe 20 Microsoft Azure Managed Instance For Apache Cassandra +11	3 months ago
CVE-2025-63704	Vulnerability in prototype-pollution (CVE-2025-63704) vulnerability in prototype-pollution (CVE-2025-63704). Successful exploitation can lead to full system takeover.	Critical	Cwe 1321 Prototype Pollution npm JavaScript +11	3 months ago
CVE-2025-63706	Code Injection in npm (CVE-2025-63706) code injection in npm (CVE-2025-63706). Successful exploitation can lead to full system takeover.	Critical	Cwe 94 npm Nodejs Command Injection +14	3 months ago
CVE-2026-43208	Vulnerability in linux (CVE-2026-43208) vulnerability in linux (CVE-2026-43208). Successful exploitation can lead to full system takeover.	Critical	Linux Os Network Remote Code Execution +12	3 months ago
CVE-2026-43198	Vulnerability in linux (CVE-2026-43198) vulnerability in linux (CVE-2026-43198). Successful exploitation can lead to full system takeover.	Critical	Linux Tcp Race Condition Cve 2026 43198 +11	3 months ago
CVE-2026-43186	Vulnerability in c (CVE-2026-43186) vulnerability in c (CVE-2026-43186). Successful exploitation can lead to full system takeover.	Critical	C Cwe 190 Cwe 122 Linux +13	3 months ago
CVE-2026-43114	Vulnerability in c (CVE-2026-43114) vulnerability in c (CVE-2026-43114). Confidential information can be exposed externally.	Critical	C Linux Linux Kernel Avx2 +13	3 months ago
CVE-2026-43117	Vulnerability in linux (CVE-2026-43117) vulnerability in linux (CVE-2026-43117). Confidential information can be exposed externally.	Critical	Linux Linux Kernel Os Privilege Escalation +11	3 months ago
CVE-2026-43083	Vulnerability in linux (CVE-2026-43083) vulnerability in linux (CVE-2026-43083). Confidential information can be exposed externally.	Critical	Linux Ipv6 Buffer Overflow Cwe 19 +10	3 months ago
CVE-2026-0300 KEV	[KEV] Out-of-Bounds Write in Palo alto networks palo-alto-networks (CVE-2026-0300) out-of-bounds write in Palo alto networks palo-alto-networks (CVE-2026-0300). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	Critical	Palo Alto Networks Pan Os Cwe 787 Firewall +67	3 months ago
CVE-2026-42087	SQL Injection in sqli (CVE-2026-42087) SQL injection in sqli (CVE-2026-42087). Confidential information can be exposed externally. Exploitable via ``tsdb_lookup``.	Critical	SQL Injection Cwe 89 Openc3 Cosmos +11	3 months ago
CVE-2026-43039	Vulnerability in linux (CVE-2026-43039) vulnerability in linux (CVE-2026-43039). Successful exploitation can lead to full system takeover.	Critical	Linux Linux Kernel Vulnerability Heap Leakage +9	3 months ago
CVE-2026-43038	Vulnerability in linux (CVE-2026-43038) vulnerability in linux (CVE-2026-43038). Successful exploitation can lead to full system takeover.	Critical	Linux Linux Kernel Ipv6 Icmp +9	3 months ago
CVE-2026-32202 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2026-32202) vulnerability in Microsoft windows (CVE-2026-32202). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	Medium	Microsoft Windows Cwe 693 Spoofing +20	4 months ago
CVE-2025-29635 KEV	[KEV] Command Injection in D-link dir-823x (CVE-2025-29635) command injection in D-link dir-823x (CVE-2025-29635). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	D Link Dir 823X Cwe 77 Command Injection +8	4 months ago
CVE-2024-7399 KEV	[KEV] Path Traversal in Samsung magicinfo-9-server (CVE-2024-7399) path traversal in Samsung magicinfo-9-server (CVE-2024-7399). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Samsung Magicinfo 9 Server Cwe 22 Cwe 434 +9	4 months ago
CVE-2026-20122 KEV	[KEV] Vulnerability in Cisco catalyst-sd-wan-manger (CVE-2026-20122) vulnerability in Cisco catalyst-sd-wan-manger (CVE-2026-20122). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco Catalyst Sd Wan Manger Cwe 648 Api +7	4 months ago
CVE-2026-20133 KEV	[KEV] Information Disclosure in Cisco catalyst-sd-wan-manager (CVE-2026-20133) vulnerability in Cisco catalyst-sd-wan-manager (CVE-2026-20133). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco Catalyst Sd Wan Manager Cwe 200 Credential Leak +6	4 months ago
CVE-2026-32201 KEV	[KEV] Vulnerability in Microsoft sharepoint-server (CVE-2026-32201) vulnerability in Microsoft sharepoint-server (CVE-2026-32201). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	Medium	Microsoft Sharepoint Server Cwe 20 Web Application +8	4 months ago
CVE-2023-21529 KEV	[KEV] Unsafe Deserialization in Microsoft exchange-server (CVE-2023-21529) vulnerability in Microsoft exchange-server (CVE-2023-21529). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Exchange Server Cwe 502 Remote Code Execution +6	4 months ago
CVE-2026-21643 KEV	[KEV] SQL Injection in Fortinet forticlient-ems (CVE-2026-21643) SQL injection in Fortinet forticlient-ems (CVE-2026-21643). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Fortinet Forticlient Ems Cwe 89 Remote Code Execution +12	4 months ago
CVE-2026-20131 KEV	[KEV] Unsafe Deserialization in Cisco secure-firewall-management-center-fmc (CVE-2026-20131) vulnerability in Cisco secure-firewall-management-center-fmc (CVE-2026-20131). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco Secure Firewall Management Center Fmc Cwe 502 Network	5 months ago
CVE-2026-20127 KEV	[KEV] Authentication Bypass in Cisco catalyst-sd-wan-controller-and-manager (CVE-2026-20127) authentication bypass in Cisco catalyst-sd-wan-controller-and-manager (CVE-2026-20127). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Cisco Catalyst Sd Wan Controller And Manager Cwe 287 Network +3	6 months ago
CVE-2025-20333 KEV	[KEV] Vulnerability in Cisco secure-firewall-adaptive-security-appliance-and-secure-firewall-threat-defense (CVE-2025-20333) vulnerability in Cisco secure-firewall-adaptive-security-appliance-and-secure-firewall-threat-defense (CVE-2025-20333). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Cisco Secure Firewall Adaptive Security Appliance And Secure Firewall Threat Defense Cwe 120 Network +2	11 months ago
CVE-2024-21488	Command Injection in forkhq (CVE-2024-21488) command injection in forkhq (CVE-2024-21488). Risk of unauthorized operations or information disclosure.	High	Cwe 77 Forkhq Network	2 years ago
CVE-2022-20773	A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance... A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance...	High	Cwe 321 Cwe 798 Cisco Umbrella Virtual Appliance +3	4 years ago
CVE-2021-2351	Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unau... Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Su...	High	C Cwe 327 Cwe 384 Oracle +113	5 years ago
CVE-2021-22703	Vulnerability in schneider-electric (CVE-2021-22703) vulnerability in schneider-electric (CVE-2021-22703). Confidential information can be exposed externally.	High	Cwe 319 Schneider Electric Powerlogic Ion7400 Firmware Powerlogic Ion7400 +20	5 years ago
CVE-2020-7562	Out-of-Bounds Read in schneider-electric (CVE-2020-7562) vulnerability in schneider-electric (CVE-2020-7562). Confidential information can be exposed externally.	High	Cwe 125 Schneider Electric Modicon Tsxety4103 Firmware Modicon Tsxety4103 +39	5 years ago
CVE-2016-10401	ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account password is known (or a non-root default account exists w... ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account password is known (or a non-root default account exists within an ISP's deployment of these devices).	High	Cwe 255 Zyxel Pk5001Z Firmware Pk5001Z +1	9 years ago

Vulnerabilities

🍪 About cookies