Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2024-44797	Cross-Site Scripting (XSS) in gazelle-project (CVE-2024-44797) cross-site scripting in gazelle-project (CVE-2024-44797). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Gazelle Project +1	2 years ago
CVE-2023-29929	Out-of-Bounds Write in dos (CVE-2023-29929) out-of-bounds write in dos (CVE-2023-29929). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 787	2 years ago
CVE-2024-6508	Vulnerability in csrf (CVE-2024-6508) vulnerability in csrf (CVE-2024-6508). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 331	2 years ago
CVE-2021-31196 KEV	[KEV] Vulnerability in Microsoft exchange-server (CVE-2021-31196) vulnerability in Microsoft exchange-server (CVE-2021-31196). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Exchange Server Remote Code Execution	2 years ago
CVE-2024-42849	Vulnerability in dos (CVE-2024-42849) vulnerability in dos (CVE-2024-42849). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 400 Silverpeas	2 years ago
CVE-2022-23817	Vulnerability in privilege-escalation (CVE-2022-23817) vulnerability in privilege-escalation (CVE-2022-23817). Risk of unauthorized operations or information disclosure.		Privilege Escalation Cwe 20 Cwe 120	2 years ago
CVE-2023-31339	Vulnerability in dos (CVE-2023-31339) vulnerability in dos (CVE-2023-31339). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 20 Cwe 125 Amd +43	2 years ago
CVE-2024-6684	Vulnerability in CVE-2024-6684 (CVE-2024-6684) vulnerability in CVE-2024-6684 (CVE-2024-6684). Risk of unauthorized operations or information disclosure.		Authentication Bypass Cwe 288	2 years ago
CVE-2024-42467	SSRF (Server-Side Request Forgery) in org.openhab.ui.bundles:org.openhab.ui.cometvisu (CVE-2024-42467) SSRF in org.openhab.ui.bundles:org.openhab.ui.cometvisu (CVE-2024-42467). Confidential information can be exposed externally. Mitigation: upgrade to `4.2.1` or later.	Critical	JavaScript Remote Code Execution Cross-Site Scripting Server-Side Request Forgery +3	2 years ago
CVE-2024-43112	Cross-Site Scripting (XSS) in mozilla (CVE-2024-43112) cross-site scripting in mozilla (CVE-2024-43112). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Mozilla Firefox Mobile	2 years ago
CVE-2024-43113	Cross-Site Scripting (XSS) in mozilla (CVE-2024-43113) cross-site scripting in mozilla (CVE-2024-43113). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Mozilla Firefox Mobile	2 years ago
CVE-2024-40101	Cross-Site Scripting (XSS) in microweber (CVE-2024-40101) cross-site scripting in microweber (CVE-2024-40101). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Microweber	2 years ago
CVE-2024-38889	SQL Injection in sqli (CVE-2024-38889) SQL injection in sqli (CVE-2024-38889). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Cwe 78 Horizoncloud +1	2 years ago
CVE-2024-38882	OS Command Injection in sqli (CVE-2024-38882) OS command injection in sqli (CVE-2024-38882). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 78 Horizoncloud Caterease	2 years ago
CVE-2024-38884	Authorization Flaw in horizoncloud (CVE-2024-38884) vulnerability in horizoncloud (CVE-2024-38884). Successful exploitation can lead to full system takeover.	High	Authentication Bypass Cwe 863 Cwe 592 Horizoncloud +1	2 years ago
CVE-2024-37129	Path Traversal in path-traversal (CVE-2024-37129) path traversal in path-traversal (CVE-2024-37129). Successful exploitation can lead to full system takeover.	Medium	Path Traversal Cwe 22 Dell Inventory Collector	2 years ago
CVE-2024-39011	Vulnerability in dos (CVE-2024-39011) vulnerability in dos (CVE-2024-39011). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 1321 Chargeover Chargeoverredoc	2 years ago
CVE-2024-38909	Vulnerability in std42 (CVE-2024-38909) vulnerability in std42 (CVE-2024-38909). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 284 Std42 Elfinder	2 years ago
CVE-2024-6699	SQL Injection in sqli (CVE-2024-6699) SQL injection in sqli (CVE-2024-6699). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Mikafon Ma7 Firmware +1	2 years ago
CVE-2024-37857	SQL Injection in sqli (CVE-2024-37857) SQL injection in sqli (CVE-2024-37857). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Oretnom23 +1	2 years ago
CVE-2024-37858	SQL Injection in sqli (CVE-2024-37858) SQL injection in sqli (CVE-2024-37858). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Cwe 269 +2	2 years ago
CVE-2024-37856	Cross-Site Scripting (XSS) in oretnom23 (CVE-2024-37856) cross-site scripting in oretnom23 (CVE-2024-37856). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Oretnom23 Lost And Found Information System	2 years ago
CVE-2024-37859	Cross-Site Scripting (XSS) in oretnom23 (CVE-2024-37859) cross-site scripting in oretnom23 (CVE-2024-37859). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Oretnom23 +1	2 years ago
CVE-2024-41628	Path Traversal in path-traversal (CVE-2024-41628) path traversal in path-traversal (CVE-2024-41628). Confidential information can be exposed externally.	High	Path Traversal Cwe 22	2 years ago
CVE-2024-41597	Cross-Site Request Forgery (CSRF) in csrf (CVE-2024-41597) vulnerability in csrf (CVE-2024-41597). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Request Forgery Cwe 352 Processwire	2 years ago
CVE-2024-21527	SSRF (Server-Side Request Forgery) in ssrf (CVE-2024-21527) SSRF in ssrf (CVE-2024-21527). Confidential information can be exposed externally.	High	Server-Side Request Forgery Cwe 918	2 years ago
CVE-2024-0857	SQL Injection in sqli (CVE-2024-0857) SQL injection in sqli (CVE-2024-0857). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Uni Yaz Flexwater Corporate Water Management	2 years ago
CVE-2024-5620	Vulnerability in CVE-2024-5620 (CVE-2024-5620) vulnerability in CVE-2024-5620 (CVE-2024-5620). Risk of unauthorized operations or information disclosure.	Medium	Authentication Bypass Cwe 288	2 years ago
CVE-2024-4944	Command Injection in privilege-escalation (CVE-2024-4944) command injection in privilege-escalation (CVE-2024-4944). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 77 Watchguard Mobile Vpn With Ssl +2	2 years ago
CVE-2024-5974	A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with... A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with...	High	Cwe 120 Watchguard Fireware Firebox M200 +51	2 years ago
CVE-2024-5971	A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not s... A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource co...	High	Java Denial of Service Cwe 674 TLS/SSL	2 years ago
CVE-2024-6409	Vulnerability in CVE-2024-6409 (CVE-2024-6409) vulnerability in CVE-2024-6409 (CVE-2024-6409). Risk of unauthorized operations or information disclosure.	High	Remote Code Execution Cwe 364	2 years ago
CVE-2024-6127	Path Traversal in path-traversal (CVE-2024-6127) path traversal in path-traversal (CVE-2024-6127). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Path Traversal Cwe 22 Cwe 434	2 years ago
CVE-2024-1153	SQL Injection in sqli (CVE-2024-1153) SQL injection in sqli (CVE-2024-1153). Confidential information can be exposed externally.	Medium	SQL Injection Cwe 89 Talyabilisim Travel Apps	2 years ago
CVE-2024-0949	Vulnerability in CVE-2024-0949 (CVE-2024-0949) vulnerability in CVE-2024-0949 (CVE-2024-0949). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 306 Cwe 552 Cwe 798	2 years ago
CVE-2024-4228	SQL Injection in sqli (CVE-2024-4228) SQL injection in sqli (CVE-2024-4228). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	2 years ago
CVE-2024-4754	Cross-Site Scripting (XSS) in CVE-2024-4754 (CVE-2024-4754) cross-site scripting in CVE-2024-4754 (CVE-2024-4754). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79	2 years ago
CVE-2024-37673	Cross-Site Scripting (XSS) in tessi (CVE-2024-37673) cross-site scripting in tessi (CVE-2024-37673). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Tessi Docubase	2 years ago
CVE-2024-37675	Cross-Site Scripting (XSS) in tessi (CVE-2024-37675) cross-site scripting in tessi (CVE-2024-37675). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Tessi Docubase	2 years ago
CVE-2024-37671	Cross-Site Scripting (XSS) in tessi (CVE-2024-37671) cross-site scripting in tessi (CVE-2024-37671). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Tessi Docubase	2 years ago
CVE-2024-37672	Cross-Site Scripting (XSS) in tessi (CVE-2024-37672) cross-site scripting in tessi (CVE-2024-37672). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Tessi Docubase	2 years ago
CVE-2024-37674	Cross-Site Scripting (XSS) in moodle (CVE-2024-37674) cross-site scripting in moodle (CVE-2024-37674). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Moodle	2 years ago
CVE-2024-5154	Path Traversal in github.com/cri-o/cri-o (CVE-2024-5154) path traversal in github.com/cri-o/cri-o (CVE-2024-5154). Confidential information can be exposed externally. Mitigation: upgrade to `1.30.1` or later.	High	Path Traversal Cwe 22 Kubernetes CRI-O +3	2 years ago
CVE-2024-35249	Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 502 Microsoft Dynamics 365 Business Central	2 years ago
CVE-2024-35252	Azure Storage Movement Client Library Denial of Service Vulnerability Azure Storage Movement Client Library Denial of Service Vulnerability	High	Denial of Service Cwe 1104 Microsoft Azure Storage Data Movement Library	2 years ago
CVE-2024-30104	Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 59 Microsoft 365 Apps +2	2 years ago
CVE-2024-30101	Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 416 Microsoft 365 Apps +2	2 years ago
CVE-2024-30103	Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 184 Microsoft 365 Apps +3	2 years ago
CVE-2024-30095	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Cwe 787 Microsoft +14	2 years ago
CVE-2024-30097	Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 415 Microsoft Windows 10 1507 +11	2 years ago

Vulnerabilities

🍪 About cookies