Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2022-45085	SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-45085) SSRF in ssrf (CVE-2022-45085). Confidential information can be exposed externally.	Medium	Server-Side Request Forgery Cwe 918 Gruparge Smartpower Web	3 years ago
CVE-2022-45589	SQL Injection in sqli (CVE-2022-45589) SQL injection in sqli (CVE-2022-45589). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Talend Esb Runtime	3 years ago
CVE-2021-36712	Cross-Site Scripting (XSS) in yzmcms (CVE-2021-36712) cross-site scripting in yzmcms (CVE-2021-36712). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Yzmcms	3 years ago
CVE-2023-25136	Vulnerability in openbsd (CVE-2023-25136) vulnerability in openbsd (CVE-2023-25136). Risk of unauthorized operations or information disclosure.	Medium	Remote Code Execution Cwe 415 OpenBSD Openssh +10	3 years ago
CVE-2022-46965	SQL Injection in sqli (CVE-2022-46965) SQL injection in sqli (CVE-2022-46965). Confidential information can be exposed externally.	High	SQL Injection Cwe 89 202 Ecommerce Administrative Mandate	3 years ago
CVE-2022-47770	Serenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticated SQL Injection. Serenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticated SQL Injection.	Critical	SQL Injection Cwe 89 Serinf Fast Checkin	3 years ago
CVE-2022-47768	Serenissima Informatica Fast Checkin 1.0 is vulnerable to Directory Traversal. Serenissima Informatica Fast Checkin 1.0 is vulnerable to Directory Traversal.	High	Path Traversal Cwe 22 Serinf Fast Checkin	3 years ago
CVE-2022-44897	Cross-Site Scripting (XSS) in apollotheme (CVE-2022-44897) cross-site scripting in apollotheme (CVE-2022-44897). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Apollotheme Ap Pagebuilder	3 years ago
CVE-2020-22452	SQL Injection in sqli (CVE-2020-22452) SQL injection in sqli (CVE-2020-22452). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpmyadmin	3 years ago
CVE-2022-4554	Cross-Site Scripting (XSS) in idyazilim (CVE-2022-4554) cross-site scripting in idyazilim (CVE-2022-4554). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Idyazilim B2B Dealer Order System	3 years ago
CVE-2023-24070	Cross-Site Scripting (XSS) in misp-project (CVE-2023-24070) cross-site scripting in misp-project (CVE-2023-24070). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Misp Project Misp	3 years ago
CVE-2023-24027	In MISP 2.4.167, app/webroot/js/action_table.js allows XSS via a network history name. In MISP 2.4.167, app/webroot/js/action_table.js allows XSS via a network history name.	Medium	JavaScript Cross-Site Scripting Cwe 79 Misp Project +1	3 years ago
CVE-2022-41441	Cross-Site Scripting (XSS) in reqlogic (CVE-2022-41441) cross-site scripting in reqlogic (CVE-2022-41441). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Reqlogic	3 years ago
CVE-2021-37500	Path Traversal in path-traversal (CVE-2021-37500) path traversal in path-traversal (CVE-2021-37500). Data can be tampered with by attackers.	High	Path Traversal Cwe 22 Reprisesoftware Reprise License Manager	3 years ago
CVE-2021-37498	SSRF (Server-Side Request Forgery) in ssrf (CVE-2021-37498) SSRF in ssrf (CVE-2021-37498). Risk of unauthorized operations or information disclosure.	Medium	Server-Side Request Forgery Cwe 918 Reprisesoftware Reprise License Manager	3 years ago
CVE-2021-36630	Vulnerability in dos (CVE-2021-36630) vulnerability in dos (CVE-2021-36630). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770 Ruckuswireless Sz 300 Firmware +7	3 years ago
CVE-2022-3693	Path Traversal in path-traversal (CVE-2022-3693) path traversal in path-traversal (CVE-2022-3693). Confidential information can be exposed externally.	High	Path Traversal Cwe 35 Cwe 22 Fileorbis	3 years ago
CVE-2022-3792	SQL Injection in sqli (CVE-2022-3792) SQL injection in sqli (CVE-2022-3792). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Gullseye Gullseye Terminal Operating System	3 years ago
CVE-2022-4422	SQL Injection in sqli (CVE-2022-4422) SQL injection in sqli (CVE-2022-4422). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Bulutses Bulutdesk Callcenter	3 years ago
CVE-2022-40011	Cross-Site Scripting (XSS) in typora (CVE-2022-40011) cross-site scripting in typora (CVE-2022-40011). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Typora	3 years ago
CVE-2022-47928	Cross-Site Scripting (XSS) in misp-project (CVE-2022-47928) cross-site scripting in misp-project (CVE-2022-47928). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Misp Project Misp	3 years ago
CVE-2022-40841	Cross-Site Scripting (XSS) in ndk-design (CVE-2022-40841) cross-site scripting in ndk-design (CVE-2022-40841). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Ndk Design Ndkadvancedcustomizationfields	3 years ago
CVE-2022-40435	Cross-Site Scripting (XSS) in employee-performance-evaluation-system-project (CVE-2022-40435) cross-site scripting in employee-performance-evaluation-system-project (CVE-2022-40435). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Employee Performance Evaluation System Project Employee Performance Evaluation System	3 years ago
CVE-2022-31358	Cross-Site Scripting (XSS) in proxmox (CVE-2022-31358) cross-site scripting in proxmox (CVE-2022-31358). Successful exploitation can lead to full system takeover.	Critical	Cross-Site Scripting Cwe 79 Proxmox Virtual Environment	3 years ago
CVE-2022-44694	Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Office +1	3 years ago
CVE-2022-44695	Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Office +2	3 years ago
CVE-2022-44696	Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Office +1	3 years ago
CVE-2022-44702	Windows Terminal Remote Code Execution Vulnerability Windows Terminal Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 94 Microsoft Terminal +2	3 years ago
CVE-2022-44303	Cross-Site Scripting (XSS) in resque-scheduler-project (CVE-2022-44303) cross-site scripting in resque-scheduler-project (CVE-2022-44303). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Resque Scheduler Project +1	3 years ago
CVE-2021-32415	Vulnerability in privilege-escalation (CVE-2021-32415) vulnerability in privilege-escalation (CVE-2021-32415). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Msi Wrapper	3 years ago
CVE-2022-44960	Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44960) cross-site scripting in webtareas-project (CVE-2022-44960). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Webtareas Project +1	3 years ago
CVE-2022-44961	Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44961) cross-site scripting in webtareas-project (CVE-2022-44961). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Webtareas Project +1	3 years ago
CVE-2022-44962	Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44962) cross-site scripting in webtareas-project (CVE-2022-44962). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Webtareas Project +1	3 years ago
CVE-2022-44945	SQL Injection in sqli (CVE-2022-44945) SQL injection in sqli (CVE-2022-44945). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Rukovoditel	3 years ago
CVE-2022-44944	Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44944) cross-site scripting in rukovoditel (CVE-2022-44944). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Rukovoditel	3 years ago
CVE-2022-44946	Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44946) cross-site scripting in rukovoditel (CVE-2022-44946). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Rukovoditel	3 years ago
CVE-2022-44947	Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44947) cross-site scripting in rukovoditel (CVE-2022-44947). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Rukovoditel	3 years ago
CVE-2022-44948	Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44948) cross-site scripting in rukovoditel (CVE-2022-44948). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Rukovoditel	3 years ago
CVE-2022-44949	Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44949) cross-site scripting in rukovoditel (CVE-2022-44949). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Rukovoditel	3 years ago
CVE-2022-44950	Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44950) cross-site scripting in rukovoditel (CVE-2022-44950). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Rukovoditel	3 years ago
CVE-2022-44951	Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44951) cross-site scripting in rukovoditel (CVE-2022-44951). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Rukovoditel	3 years ago
CVE-2022-44952	Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44952) cross-site scripting in rukovoditel (CVE-2022-44952). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Rukovoditel	3 years ago
CVE-2022-44953	Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44953) cross-site scripting in webtareas-project (CVE-2022-44953). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Webtareas Project +1	3 years ago
CVE-2022-44954	Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44954) cross-site scripting in webtareas-project (CVE-2022-44954). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Webtareas Project +1	3 years ago
CVE-2022-44955	Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44955) cross-site scripting in webtareas-project (CVE-2022-44955). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Webtareas Project Webtareas	3 years ago
CVE-2022-44956	Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44956) cross-site scripting in webtareas-project (CVE-2022-44956). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Webtareas Project +1	3 years ago
CVE-2022-44957	Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44957) cross-site scripting in webtareas-project (CVE-2022-44957). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Webtareas Project +1	3 years ago
CVE-2022-44959	Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44959) cross-site scripting in webtareas-project (CVE-2022-44959). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Webtareas Project +1	3 years ago
CVE-2022-44290	SQL Injection in sqli (CVE-2022-44290) SQL injection in sqli (CVE-2022-44290). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Webtareas Project +1	3 years ago
CVE-2022-44291	SQL Injection in sqli (CVE-2022-44291) SQL injection in sqli (CVE-2022-44291). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Webtareas Project +1	3 years ago

Vulnerabilities

🍪 About cookies