377,174 CVE lengkap 1999–2026

CVE Notifier

Arsip lengkap dari cve.org (CVE Record), skor CVSS dari NVD, dan daftar eksploitasi aktif dari CISA KEV. Ter-update tiap 30 menit.

Lihat feed Sumber data

arsip 377,174 CVE • 12,754 critical • 1,713 KEV

1999–2026
395.000+ CVE
cve.org
NVD CVSS
CISA KEV
Auto-update 30m
SQLite full-text

Feed Kerentanan

Semua Critical (≥9) High (7-9) KEV WordPress

Menampilkan 12 dari 377,174 entri — halaman 367/31432

CVE-2026-84445 CWE-129 N/A

gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers

gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header n…

cve.org grpc:grpc-go 14 Sep 2026

CVE-2026-76442 CWE-1284 7.5

Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security revi…

cve.org Cisco:Cisco · Secure · Email 14 Sep 2026

CVE-2026-76461 CWE-89 9.8

Cisco Secure Email Gateway SQL Injection Vulnerability

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating…

cve.org Cisco:Cisco · Secure · Email 14 Sep 2026

CVE-2026-54156 CWE-770 7.5

node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS

node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to 2.166.0, the process-global g_alreadyUsedNonce cache used by nonceAlreadyBeenUsed in packages/node-opcua-secure-channel/source/server/server_sec…

cve.org node-opcua:node-opcua 14 Sep 2026

CVE-2026-76443 CWE-707 9.8

node-opcua: Missing nonce verification in UserNameIdentityToken authentication

node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to 2.166.0, the UserNameIdentityToken authentication handler in packages/node-opcua-server/source/opcua_server.ts decrypts an RSA-OAEP password blo…

cve.org node-opcua:node-opcua 14 Sep 2026

CVE-2026-57497 CWE-770 5.3

webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules

webtransport-go is an implementation of the WebTransport protocol. Prior to 0.11.1, Session.parseNextCapsule() in session.go skips an unknown WebTransport capsule on the HTTP/3 request stream by calling io.ReadAll on the…

cve.org quic-go:webtransport-go 14 Sep 2026

CVE-2026-61701 CWE-502 8.8

Laravel MagicLink: Insecure Deserialization of MagicLink Actions Leads to Remote Code Execution

Laravel MagicLink creates links for authentication without a password or for accessing private content. From 2.0.0 until 2.25.1, MagicLink stores serialized action objects in the magic_links.action database column and de…

cve.org cesargb:laravel-magiclink 14 Sep 2026

CVE-2026-90796 CWE-89 6.3

itsourcecode Leave Management System index.php sql injection

A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/company/index.php. The manipulation of the argument ID leads to sql injection. The attack c…

cve.org itsourcecode:Leave · Management · System 14 Sep 2026

Statistik

Arsip lengkap kerentanan dari semua sumber — live dari database.

cache/cve.db • 01 Oct 2026 04:20

377,174 Total CVE terindeks

▲ 1999–2026

60,905 Tahun 2026

12,754 Critical (skor ≥ 9)

1,713 CISA KEV aktif

Distribusi Severity

CVSS v3

12,754 critical

Critical 12,754 (8%)
High 61,345 (41%)
Medium 68,090 (45%)
Low 8,634 (6%)

150,872 dinilai • 226,302 belum

Tren CVE per Tahun

1999–2026

2017

2018

2019

2020

2021

2022

2023

2024

2025

2026

cve.org

Arsip penuh CVE dari CVE Program — id, deskripsi, CWE, referensi.

245,461 CVE Record

NVD

Kerentanan dengan skor CVSS v3.x dari NIST National Vulnerability Database.

150,872 CVSS dinilai

Wordfence

Kerentanan plugin/theme WordPress dari Wordfence Intelligence.

11,134 WordPress

WPScan

Kerentanan ekosistem WordPress dari WPScan (Patchstack).

5,444 WordPress

GitHub

CVE yang menyentuh ekosistem GitHub (judul/deskripsi/produk).

3,208 Ekosistem

MITRE

CNA asli yang menerbitkan dan mengelola CVE Record.

114,963 CNA Publish

Sumber Data

cve.org

Arsip CVE Program — id, deskripsi, CWE, referensi. Update tiap 30 menit via delta release.

NVD

Skor CVSS v3.1 untuk entri yang dinilai NIST NVD.

CISA KEV

Kerentanan yang aktif dieksploitasi — prioritas tinggi.

WPScan

Kerentanan ekosistem WordPress.

Wordfence

Kerentanan plugin/theme WordPress.

GitHub

Security Advisories ekosistem open source.