Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-770 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-59246	Vulnerability in ssrf (CVE-2026-59246) vulnerability in ssrf (CVE-2026-59246). Risk of unauthorized operations or information disclosure.		Server-Side Request Forgery Denial of Service Cwe 770	1 month ago
CVE-2026-58229	Vulnerability in ssrf (CVE-2026-58229) vulnerability in ssrf (CVE-2026-58229). Risk of unauthorized operations or information disclosure.		Server-Side Request Forgery Denial of Service Cwe 770	1 month ago
CVE-2026-58488	Vulnerability in CVE-2026-58488 (CVE-2026-58488) vulnerability in CVE-2026-58488 (CVE-2026-58488). Risk of unauthorized operations or information disclosure.		Cwe 290 Cwe 770	1 month ago
CVE-2026-61465	Vulnerability in dos (CVE-2026-61465) vulnerability in dos (CVE-2026-61465). Risk of unauthorized operations or information disclosure.	Low	Denial of Service Cwe 770 Imagemagick	1 month ago
CVE-2026-57220	Vulnerability in broadcom (CVE-2026-57220) vulnerability in broadcom (CVE-2026-57220). Risk of unauthorized operations or information disclosure.	High	Cwe 770 Broadcom Rabbitmq Server	1 month ago
CVE-2026-57212	Vulnerability in broadcom (CVE-2026-57212) vulnerability in broadcom (CVE-2026-57212). Risk of unauthorized operations or information disclosure.	High	Cwe 770 Broadcom Rabbitmq Server	1 month ago
CVE-2026-59161	Vulnerability in excelize (CVE-2026-59161) vulnerability in excelize (CVE-2026-59161). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Cwe 770 Excelize	1 month ago
CVE-2026-54063	Vulnerability in github.com/xuri/excelize/v2 (CVE-2026-54063) vulnerability in github.com/xuri/excelize/v2 (CVE-2026-54063). Risk of unauthorized operations or information disclosure. Exploitable via ``GetCellValue``. Mitigation: upgrade to `2.11.0` or later.	High	Cwe 770 Excelize	1 month ago
CVE-2026-53653	Vulnerability in getgrav/grav (CVE-2026-53653) vulnerability in getgrav/grav (CVE-2026-53653). Risk of unauthorized operations or information disclosure. Exploitable via `GET /home/test.png`. Mitigation: upgrade to `1.7.53` or later.		Cwe 770	1 month ago
CVE-2026-58661	Vulnerability in n8n (CVE-2026-58661) vulnerability in n8n (CVE-2026-58661). Risk of unauthorized operations or information disclosure. Exploitable via ``uploadMaxFileSize``. Mitigation: upgrade to `1.123.58` or later.	Medium	Cwe 770 N8N	1 month ago
CVE-2026-56309	Vulnerability in CVE-2026-56309 (CVE-2026-56309) vulnerability in CVE-2026-56309 (CVE-2026-56309). Risk of unauthorized operations or information disclosure.	Medium	Cwe 770	1 month ago
CVE-2026-56814	Vulnerability in dos (CVE-2026-56814) vulnerability in dos (CVE-2026-56814). Risk of unauthorized operations or information disclosure.		Denial of Service Cwe 770	1 month ago
CVE-2026-40006	Vulnerability in apache (CVE-2026-40006) vulnerability in apache (CVE-2026-40006). Risk of unauthorized operations or information disclosure.	High	Apache Cwe 306 Cwe 770 Cwe 789	1 month ago
CVE-2026-60108	Vulnerability in dos (CVE-2026-60108) vulnerability in dos (CVE-2026-60108). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770 Zeek	1 month ago
CVE-2026-49476	Vulnerability in soupsieve (CVE-2026-49476) vulnerability in soupsieve (CVE-2026-49476). Risk of unauthorized operations or information disclosure. Exploitable via ``CSSSelector``. Mitigation: upgrade to `2.8.4` or later.	High	Denial of Service Cwe 400 Cwe 770 Facelessuser +1	1 month ago
CVE-2026-12590	Vulnerability in body-parser (CVE-2026-12590) vulnerability in body-parser (CVE-2026-12590). Risk of unauthorized operations or information disclosure. Exploitable via ``limit``. Mitigation: upgrade to `2.3.0` or later.	Low	Denial of Service Cwe 770 Openjsf Body Parser	1 month ago
CVE-2026-31984	Vulnerability in nozominetworks (CVE-2026-31984) vulnerability in nozominetworks (CVE-2026-31984). Risk of unauthorized operations or information disclosure.	High	Cwe 770 Nozominetworks Cmc Guardian	1 month ago
CVE-2026-49866	Vulnerability in @libp2p/gossipsub (CVE-2026-49866) vulnerability in @libp2p/gossipsub (CVE-2026-49866). Risk of unauthorized operations or information disclosure. Exploitable via ``opts.decodeRpcLimits``. Mitigation: upgrade to `16.0.0` or later.	High	JavaScript Cwe 770	1 month ago
CVE-2026-55575	Vulnerability in liquidjs (CVE-2026-55575) vulnerability in liquidjs (CVE-2026-55575). Risk of unauthorized operations or information disclosure. Exploitable via ``pop``. Mitigation: upgrade to `10.27.1` or later.		JavaScript Cwe 770	1 month ago
CVE-2026-14362	Vulnerability in CVE-2026-14362 (CVE-2026-14362) vulnerability in CVE-2026-14362 (CVE-2026-14362). Risk of unauthorized operations or information disclosure.	Medium	Cwe 770	1 month ago
CVE-2026-59873	Vulnerability in tar (CVE-2026-59873) vulnerability in tar (CVE-2026-59873). Risk of unauthorized operations or information disclosure. Exploitable via ``maxReadSize``. Mitigation: upgrade to `7.5.19` or later.	High	JavaScript Cwe 770 Isaacs Tar	1 month ago
CVE-2026-59870	Vulnerability in js-yaml (CVE-2026-59870) vulnerability in js-yaml (CVE-2026-59870). Risk of unauthorized operations or information disclosure. Exploitable via ``YAML11_SCHEMA``. Mitigation: upgrade to `5.2.1` or later.	Medium	JavaScript Cwe 407 Cwe 770 Nodeca +1	1 month ago
CVE-2026-59868	Vulnerability in js-yaml (CVE-2026-59868) vulnerability in js-yaml (CVE-2026-59868). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.2.0` or later.	Medium	JavaScript Cwe 407 Cwe 770 Nodeca +1	1 month ago
CVE-2026-49146	Vulnerability in c (CVE-2026-49146) vulnerability in c (CVE-2026-49146). Risk of unauthorized operations or information disclosure.	High	C Cwe 770	1 month ago
CVE-2026-60001	sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.	Medium	Cwe 770 OpenBSD Openssh	1 month ago
CVE-2026-60000	Vulnerability in dos (CVE-2026-60000) vulnerability in dos (CVE-2026-60000). Risk of unauthorized operations or information disclosure.	Low	Denial of Service Cwe 770 OpenBSD Openssh	1 month ago
CVE-2026-56811	Vulnerability in dos (CVE-2026-56811) vulnerability in dos (CVE-2026-56811). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770 Phoenixframework Phoenix	1 month ago
CVE-2026-42145	Unrestricted File Upload in CVE-2026-42145 (CVE-2026-42145) vulnerability in CVE-2026-42145 (CVE-2026-42145). Risk of unauthorized operations or information disclosure.	Low	PHP Cwe 434 Cwe 770	1 month ago
CVE-2026-41899	Vulnerability in CVE-2026-41899 (CVE-2026-41899) vulnerability in CVE-2026-41899 (CVE-2026-41899). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/feedback`.	Medium	Cwe 306 Cwe 770	1 month ago
CVE-2026-55434	Vulnerability in github.com/coder/coder/v2 (CVE-2026-55434) vulnerability in github.com/coder/coder/v2 (CVE-2026-55434). Risk of unauthorized operations or information disclosure. Exploitable via ``io.ReadAll``. Mitigation: upgrade to `2.33.8` or later.	Medium	Denial of Service Cwe 770 Coder	1 month ago
CVE-2026-55078	Vulnerability in github.com/coder/coder/v2 (CVE-2026-55078) vulnerability in github.com/coder/coder/v2 (CVE-2026-55078). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v2/files`. Mitigation: upgrade to `2.29.17` or later.	Medium	Denial of Service Cwe 409 Cwe 770 Coder	1 month ago
CVE-2026-55646	Vulnerability in vllm (CVE-2026-55646) vulnerability in vllm (CVE-2026-55646). Risk of unauthorized operations or information disclosure. Exploitable via ``VLLM_MAX_AUDIO_CLIP_FILESIZE_MB``. Mitigation: upgrade to `0.24.0` or later.	Medium	Cwe 400 Cwe 770 vLLM	1 month ago
CVE-2026-42546	Vulnerability in c (CVE-2026-42546) vulnerability in c (CVE-2026-42546). Risk of unauthorized operations or information disclosure. Exploitable via ``OPTEE_MSG_ATTR_TYPE_MASK``.	Low	C Cwe 770 Trustedfirmware Op Tee	1 month ago
CVE-2026-13698	Vulnerability in dos (CVE-2026-13698) vulnerability in dos (CVE-2026-13698). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 401 Cwe 770 Openvpn	1 month ago
CVE-2026-56810	Vulnerability in dos (CVE-2026-56810) vulnerability in dos (CVE-2026-56810). Risk of unauthorized operations or information disclosure.		Denial of Service Cwe 770	1 month ago
CVE-2026-11586	Vulnerability in haxx (CVE-2026-11586) vulnerability in haxx (CVE-2026-11586). Risk of unauthorized operations or information disclosure.	High	Cwe 770 Haxx Curl	1 month ago
CVE-2026-52732	Vulnerability in zebrad (CVE-2026-52732) vulnerability in zebrad (CVE-2026-52732). Risk of unauthorized operations or information disclosure. Exploitable via ``zebrad``. Mitigation: upgrade to `4.5.0` or later.	Medium	Rust Cwe 770	1 month ago
CVE-2026-58465	Vulnerability in c (CVE-2026-58465) vulnerability in c (CVE-2026-58465). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 770	1 month ago
CVE-2026-11946	Vulnerability in CVE-2026-11946 (CVE-2026-11946) vulnerability in CVE-2026-11946 (CVE-2026-11946). Risk of unauthorized operations or information disclosure.	High	Cwe 770 Cwe 789	1 month ago
CVE-2026-9563	Vulnerability in dos (CVE-2026-9563) vulnerability in dos (CVE-2026-9563). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cwe 770	1 month ago
CVE-2026-33592	Vulnerability in CVE-2026-33592 (CVE-2026-33592) vulnerability in CVE-2026-33592 (CVE-2026-33592). Risk of unauthorized operations or information disclosure.	High	Cwe 770 Cwe 789	1 month ago
CVE-2026-48824	Vulnerability in github.com/axllent/mailpit (CVE-2026-48824) vulnerability in github.com/axllent/mailpit (CVE-2026-48824). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/send`. Mitigation: upgrade to `1.30.1` or later.	Medium	Denial of Service Cwe 770 Axllent Mailpit	1 month ago
CVE-2026-54428	Vulnerability in org.apache.httpcomponents.core5:httpcore5-h2 (CVE-2026-54428) vulnerability in org.apache.httpcomponents.core5:httpcore5-h2 (CVE-2026-54428). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.5-beta2` or later.	High	Apache Denial of Service Cwe 400 Cwe 770 +1	1 month ago
CVE-2026-56150	Vulnerability in dos (CVE-2026-56150) vulnerability in dos (CVE-2026-56150). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 770 Elastic Fleet Server	1 month ago
CVE-2026-56149	Vulnerability in elasticsearch (CVE-2026-56149) vulnerability in elasticsearch (CVE-2026-56149). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.17, 9.3.6, 9.4.3` or later.	Medium	Denial of Service Cwe 770 Elastic Elasticsearch	1 month ago
CVE-2026-49087	Vulnerability in dos (CVE-2026-49087) vulnerability in dos (CVE-2026-49087). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 770 Elastic Kibana	1 month ago
CVE-2026-20216	Vulnerability in dos (CVE-2026-20216) vulnerability in dos (CVE-2026-20216). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770 Cisco Secure Endpoint +1	1 month ago
CVE-2026-14330	Multiple unbounded alloca() calls in the PulseAudio protocol server. Multiple unbounded alloca() calls in the PulseAudio protocol server.	Medium	Cwe 770	1 month ago
CVE-2025-36319	Vulnerability in ibm (CVE-2025-36319) vulnerability in ibm (CVE-2025-36319). Risk of unauthorized operations or information disclosure.	Medium	Cwe 770 Ibm Watsonxdata Intelligence Software Hub	1 month ago
CVE-2026-49835	Vulnerability in github.com/sigstore/timestamp-authority/v2 (CVE-2026-49835) vulnerability in github.com/sigstore/timestamp-authority/v2 (CVE-2026-49835). Risk of unauthorized operations or information disclosure. Exploitable via ``wrapMetrics``. Mitigation: upgrade to `2.1.0` or later.	Medium	Cwe 770 Linuxfoundation Sigstore Timestamp Authority	2 months ago

Vulnerabilities

🍪 About cookies