Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
Filtering: Group: attack-types Clear
ID Title
CVE-2021-29044 Cross-Site Scripting (XSS) in liferay (CVE-2021-29044)
cross-site scripting in liferay (CVE-2021-29044). Risk of unauthorized operations or information disclosure.
CVE-2021-29045 Cross-Site Scripting (XSS) in liferay (CVE-2021-29045)
cross-site scripting in liferay (CVE-2021-29045). Risk of unauthorized operations or information disclosure.
CVE-2021-29046 Cross-Site Scripting (XSS) in liferay (CVE-2021-29046)
cross-site scripting in liferay (CVE-2021-29046). Risk of unauthorized operations or information disclosure.
CVE-2021-29041 Vulnerability in dos (CVE-2021-29041)
vulnerability in dos (CVE-2021-29041). Risk of unauthorized operations or information disclosure.
CVE-2021-29039 Cross-Site Scripting (XSS) in liferay (CVE-2021-29039)
cross-site scripting in liferay (CVE-2021-29039). Risk of unauthorized operations or information disclosure.
CVE-2021-29241 Vulnerability in dos (CVE-2021-29241)
vulnerability in dos (CVE-2021-29241). Risk of unauthorized operations or information disclosure.
CVE-2021-28860 Vulnerability in dos (CVE-2021-28860)
vulnerability in dos (CVE-2021-28860). Data can be tampered with by attackers.
CVE-2021-25679 Cross-Site Scripting (XSS) in adtran (CVE-2021-25679)
cross-site scripting in adtran (CVE-2021-25679). Risk of unauthorized operations or information disclosure.
CVE-2021-25680 Cross-Site Scripting (XSS) in adtran (CVE-2021-25680)
cross-site scripting in adtran (CVE-2021-25680). Risk of unauthorized operations or information disclosure.
CVE-2020-21884 Cross-Site Request Forgery (CSRF) in csrf (CVE-2020-21884)
vulnerability in csrf (CVE-2020-21884). Successful exploitation can lead to full system takeover.
CVE-2021-30109 Cross-Site Scripting (XSS) in froala (CVE-2021-30109)
cross-site scripting in froala (CVE-2021-30109). Risk of unauthorized operations or information disclosure.
CVE-2020-28873 Vulnerability in dos (CVE-2020-28873)
vulnerability in dos (CVE-2020-28873). Risk of unauthorized operations or information disclosure.
CVE-2021-25667 A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE S...
A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC...
CVE-2020-27576 Cross-Site Scripting (XSS) in maxum (CVE-2020-27576)
cross-site scripting in maxum (CVE-2020-27576). Risk of unauthorized operations or information disclosure.
CVE-2020-27574 Cross-Site Request Forgery (CSRF) in csrf (CVE-2020-27574)
vulnerability in csrf (CVE-2020-27574). Successful exploitation can lead to full system takeover.
CVE-2020-24913 SQL Injection in c (CVE-2020-24913)
SQL injection in c (CVE-2020-24913). Successful exploitation can lead to full system takeover.
CVE-2020-24912 Cross-Site Scripting (XSS) in qcubed (CVE-2020-24912)
cross-site scripting in qcubed (CVE-2020-24912). Risk of unauthorized operations or information disclosure.
CVE-2017-14491 Out-of-Bounds Write in platform/external/dnsmasq (CVE-2017-14491)
out-of-bounds write in platform/external/dnsmasq (CVE-2017-14491). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `11:2021-03-01` or later.
CVE-2020-24841 SQL Injection in sqli (CVE-2020-24841)
SQL injection in sqli (CVE-2020-24841). Successful exploitation can lead to full system takeover.
CVE-2021-25299 Cross-Site Scripting (XSS) in nagios (CVE-2021-25299)
cross-site scripting in nagios (CVE-2021-25299). Risk of unauthorized operations or information disclosure.
CVE-2020-36012 Cross-Site Scripting (XSS) in bdtask (CVE-2020-36012)
cross-site scripting in bdtask (CVE-2020-36012). Risk of unauthorized operations or information disclosure.
CVE-2020-36011 Cross-Site Scripting (XSS) in qdocs (CVE-2020-36011)
cross-site scripting in qdocs (CVE-2020-36011). Risk of unauthorized operations or information disclosure.
CVE-2020-28707 Cross-Site Scripting (XSS) in wordpress (CVE-2020-28707)
cross-site scripting in wordpress (CVE-2020-28707). Risk of unauthorized operations or information disclosure.
CVE-2020-17103 , aka 'Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability'. This CVE ID...
, aka 'Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability'. This CVE ID...
CVE-2020-1971 Vulnerability in dos (CVE-2020-1971)
vulnerability in dos (CVE-2020-1971). Risk of unauthorized operations or information disclosure.
CVE-2020-28727 Cross-Site Scripting (XSS) in seeddms (CVE-2020-28727)
cross-site scripting in seeddms (CVE-2020-28727). Risk of unauthorized operations or information disclosure.
CVE-2017-15682 Cross-Site Scripting (XSS) in craftercms (CVE-2017-15682)
cross-site scripting in craftercms (CVE-2017-15682). Risk of unauthorized operations or information disclosure.
CVE-2017-15684 Path Traversal in path-traversal (CVE-2017-15684)
path traversal in path-traversal (CVE-2017-15684). Confidential information can be exposed externally.
CVE-2017-15681 Path Traversal in path-traversal (CVE-2017-15681)
path traversal in path-traversal (CVE-2017-15681). Successful exploitation can lead to full system takeover.
CVE-2020-7565 Vulnerability in schneider-electric (CVE-2020-7565)
vulnerability in schneider-electric (CVE-2020-7565). Confidential information can be exposed externally.
CVE-2020-7563 Out-of-Bounds Write in schneider-electric (CVE-2020-7563)
out-of-bounds write in schneider-electric (CVE-2020-7563). Successful exploitation can lead to full system takeover.
CVE-2020-7564 Vulnerability in schneider-electric (CVE-2020-7564)
vulnerability in schneider-electric (CVE-2020-7564). Successful exploitation can lead to full system takeover.
CVE-2020-28271 Vulnerability in dos (CVE-2020-28271)
vulnerability in dos (CVE-2020-28271). Successful exploitation can lead to full system takeover.
CVE-2020-27388 Cross-Site Scripting (XSS) in yourls (CVE-2020-27388)
cross-site scripting in yourls (CVE-2020-27388). Risk of unauthorized operations or information disclosure.
CVE-2020-1574 Buffer Overflow in microsoft (CVE-2020-1574)
vulnerability in microsoft (CVE-2020-1574). Confidential information can be exposed externally.
CVE-2020-13932 Cross-Site Scripting (XSS) in org.apache.activemq:apache-artemis (CVE-2020-13932)
cross-site scripting in org.apache.activemq:apache-artemis (CVE-2020-13932). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.14.0` or later.
CVE-2020-10246 Cross-Site Scripting (XSS) in misp-project (CVE-2020-10246)
cross-site scripting in misp-project (CVE-2020-10246). Risk of unauthorized operations or information disclosure.
CVE-2020-10247 Cross-Site Scripting (XSS) in misp-project (CVE-2020-10247)
cross-site scripting in misp-project (CVE-2020-10247). Risk of unauthorized operations or information disclosure.
CVE-2019-17571 Unsafe Deserialization in log4j:log4j (CVE-2019-17571)
vulnerability in log4j:log4j (CVE-2019-17571). Successful exploitation can lead to full system takeover.
CVE-2019-16202 Privilege Escalation in privilege-escalation (CVE-2019-16202)
vulnerability in privilege-escalation (CVE-2019-16202). Confidential information can be exposed externally.
CVE-2019-14750 Cross-Site Scripting (XSS) in enhancesoft (CVE-2019-14750)
cross-site scripting in enhancesoft (CVE-2019-14750). Risk of unauthorized operations or information disclosure.
CVE-2019-13103 Vulnerability in dos (CVE-2019-13103)
vulnerability in dos (CVE-2019-13103). Data can be tampered with by attackers.
CVE-2019-14286 Cross-Site Scripting (XSS) in misp-project (CVE-2019-14286)
cross-site scripting in misp-project (CVE-2019-14286). Risk of unauthorized operations or information disclosure.
CVE-2017-14854 Buffer Overflow in orpak (CVE-2017-14854)
vulnerability in orpak (CVE-2017-14854). Data can be tampered with by attackers.
CVE-2017-14853 The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attac...
The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attacker is able to run shell commands and receive valid output from the device.
CVE-2017-14851 SQL Injection in sqli (CVE-2017-14851)
SQL injection in sqli (CVE-2017-14851). Successful exploitation can lead to full system takeover.
CVE-2017-14850 Cross-Site Scripting (XSS) in orpak (CVE-2017-14850)
cross-site scripting in orpak (CVE-2017-14850). Risk of unauthorized operations or information disclosure.
CVE-2017-14728 Vulnerability in orpak (CVE-2017-14728)
vulnerability in orpak (CVE-2017-14728). Successful exploitation can lead to full system takeover.
CVE-2018-16988 Vulnerability in buffalo (CVE-2018-16988)
vulnerability in buffalo (CVE-2018-16988). Successful exploitation can lead to full system takeover.
CVE-2019-11537 Cross-Site Scripting (XSS) in enhancesoft (CVE-2019-11537)
cross-site scripting in enhancesoft (CVE-2019-11537). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →