Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2022-41063	Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Excel +4	3 years ago
CVE-2022-41062	Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Sharepoint Enterprise Server Sharepoint Foundation +1	3 years ago
CVE-2022-41039	Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 362 Microsoft Windows 10 +9	3 years ago
CVE-2022-41044	Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 362 Microsoft Windows 7 +1	3 years ago
CVE-2022-41047	Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Windows 10 Windows 11 +8	3 years ago
CVE-2022-41048	Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Windows 10 Windows 11 +8	3 years ago
CVE-2022-41051	Azure RTOS GUIX Studio Remote Code Execution Vulnerability Azure RTOS GUIX Studio Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Azure Rtos Guix Studio	3 years ago
CVE-2022-41052	Windows Graphics Component Remote Code Execution Vulnerability Windows Graphics Component Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Windows 10 Windows 11 +3	3 years ago
CVE-2022-41053	Windows Kerberos Denial of Service Vulnerability Windows Kerberos Denial of Service Vulnerability	High	Denial of Service Microsoft Windows 10 Windows 11 +7	3 years ago
CVE-2022-38015	Windows Hyper-V Denial of Service Vulnerability Windows Hyper-V Denial of Service Vulnerability	Medium	Denial of Service Microsoft Windows 10 Windows 11 +3	3 years ago
CVE-2022-43321	Cross-Site Scripting (XSS) in shopwind (CVE-2022-43321) cross-site scripting in shopwind (CVE-2022-43321). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Shopwind	3 years ago
CVE-2022-41128 KEV	[KEV] Out-of-Bounds Write in Microsoft windows (CVE-2022-41128) out-of-bounds write in Microsoft windows (CVE-2022-41128). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 787 Remote Code Execution +16	3 years ago
CVE-2022-20969	Cross-Site Scripting (XSS) in cisco (CVE-2022-20969) cross-site scripting in cisco (CVE-2022-20969). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Cisco +1	3 years ago
CVE-2022-40840	Cross-Site Scripting (XSS) in ndk-design (CVE-2022-40840) cross-site scripting in ndk-design (CVE-2022-40840). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Ndk Design +1	3 years ago
CVE-2022-40839	SQL Injection in sqli (CVE-2022-40839) SQL injection in sqli (CVE-2022-40839). Confidential information can be exposed externally.	High	SQL Injection Cwe 89 Ndk Design Ndkadvancedcustomizationfields	3 years ago
CVE-2022-40487	Cross-Site Scripting (XSS) in processwire (CVE-2022-40487) cross-site scripting in processwire (CVE-2022-40487). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Processwire	3 years ago
CVE-2022-40488	ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF). ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF).	Medium	Cross-Site Request Forgery Cwe 352 Processwire	3 years ago
CVE-2022-43340	Cross-Site Request Forgery (CSRF) in csrf (CVE-2022-43340) vulnerability in csrf (CVE-2022-43340). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Dzzoffice	3 years ago
CVE-2022-42991	Cross-Site Scripting (XSS) in simple-online-public-access-catalog-project (CVE-2022-42991) cross-site scripting in simple-online-public-access-catalog-project (CVE-2022-42991). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Simple Online Public Access Catalog Project Simple Online Public Access Catalog	3 years ago
CVE-2022-42993	Cross-Site Scripting (XSS) in password-storage-application-project (CVE-2022-42993) cross-site scripting in password-storage-application-project (CVE-2022-42993). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Password Storage Application Project Password Storage Application	3 years ago
CVE-2022-42992	Cross-Site Scripting (XSS) in train-scheduler-app-project (CVE-2022-42992) cross-site scripting in train-scheduler-app-project (CVE-2022-42992). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Train Scheduler App Project Train Scheduler App	3 years ago
CVE-2021-45476	Cross-Site Scripting (XSS) in yordam (CVE-2021-45476) cross-site scripting in yordam (CVE-2021-45476). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Yordam Library Automation System	3 years ago
CVE-2022-38580	Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF). Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).	Critical	Server-Side Request Forgery Cwe 918 Zalando Skipper	3 years ago
CVE-2021-33231	Cross-Site Scripting (XSS) in easyvista (CVE-2021-33231) cross-site scripting in easyvista (CVE-2021-33231). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Easyvista Service Manager	3 years ago
CVE-2022-41415	Out-of-Bounds Write in dos (CVE-2022-41415) out-of-bounds write in dos (CVE-2022-41415). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 787 Acer Altos W2000H W570H F4 Firmware +1	3 years ago
CVE-2022-38901	Cross-Site Scripting (XSS) in liferay (CVE-2022-38901) cross-site scripting in liferay (CVE-2022-38901). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Liferay +2	3 years ago
CVE-2022-42112	Cross-Site Scripting (XSS) in liferay (CVE-2022-42112) cross-site scripting in liferay (CVE-2022-42112). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +2	3 years ago
CVE-2022-42113	Cross-Site Scripting (XSS) in liferay (CVE-2022-42113) cross-site scripting in liferay (CVE-2022-42113). Risk of unauthorized operations or information disclosure. Exploitable via ``redirect``.	Medium	Cross-Site Scripting Cwe 79 Liferay Dxp +1	3 years ago
CVE-2022-42114	Cross-Site Scripting (XSS) in liferay (CVE-2022-42114) cross-site scripting in liferay (CVE-2022-42114). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Dxp +1	3 years ago
CVE-2022-42115	Cross-Site Scripting (XSS) in liferay (CVE-2022-42115) cross-site scripting in liferay (CVE-2022-42115). Risk of unauthorized operations or information disclosure. Exploitable via ``Label``.	Medium	Cross-Site Scripting Cwe 79 Liferay Liferay Portal	3 years ago
CVE-2022-42116	Cross-Site Scripting (XSS) in liferay (CVE-2022-42116) cross-site scripting in liferay (CVE-2022-42116). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Dxp +1	3 years ago
CVE-2022-42117	Cross-Site Scripting (XSS) in liferay (CVE-2022-42117) cross-site scripting in liferay (CVE-2022-42117). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Dxp +1	3 years ago
CVE-2022-21626	Vulnerability in c (CVE-2022-21626) vulnerability in c (CVE-2022-21626). Risk of unauthorized operations or information disclosure.	Medium	Java C Denial of Service Cwe 693 +19	3 years ago
CVE-2022-38902	Cross-Site Scripting (XSS) in liferay (CVE-2022-38902) cross-site scripting in liferay (CVE-2022-38902). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Liferay +2	3 years ago
CVE-2022-40440	Cross-Site Scripting (XSS) in jgraph (CVE-2022-40440) cross-site scripting in jgraph (CVE-2022-40440). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Jgraph Mxgraph	3 years ago
CVE-2022-40047	Cross-Site Scripting (XSS) in flatpress (CVE-2022-40047) cross-site scripting in flatpress (CVE-2022-40047). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Flatpress	3 years ago
CVE-2022-40227	Vulnerability in dos (CVE-2022-40227) vulnerability in dos (CVE-2022-40227). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Siemens Simatic Hmi Comfort Panels Firmware +19	3 years ago
CVE-2022-40684 KEV	[KEV] Authentication Bypass in Fortinet multiple-products (CVE-2022-40684) authentication bypass in Fortinet multiple-products (CVE-2022-40684). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Fortinet Multiple Products Cwe 288 Authentication Bypass +4	3 years ago
CVE-2022-36635	SQL Injection in sqli (CVE-2022-36635) SQL injection in sqli (CVE-2022-36635). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Zkteco Zkbiosecurity V5000	3 years ago
CVE-2022-40123	Path Traversal in path-traversal (CVE-2022-40123) path traversal in path-traversal (CVE-2022-40123). Confidential information can be exposed externally.	Medium	Path Traversal Cwe 22 Mojoportal	3 years ago
CVE-2022-36551	SSRF (Server-Side Request Forgery) in label-studio (CVE-2022-36551) SSRF in label-studio (CVE-2022-36551). Confidential information can be exposed externally. Mitigation: upgrade to `1.5.0.post0` or later.	Medium	Server-Side Request Forgery Cwe 918 Heartex Label Studio	3 years ago
CVE-2022-35156	SQL Injection in sqli (CVE-2022-35156) SQL injection in sqli (CVE-2022-35156). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpgurukul +1	3 years ago
CVE-2022-35155	Cross-Site Scripting (XSS) in phpgurukul (CVE-2022-35155) cross-site scripting in phpgurukul (CVE-2022-35155). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Phpgurukul Bus Pass Management System	3 years ago
CVE-2022-40048	Unrestricted File Upload in flatpress (CVE-2022-40048) vulnerability in flatpress (CVE-2022-40048). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 434 Flatpress	3 years ago
CVE-2022-38553	Cross-Site Scripting (XSS) in creativeitem (CVE-2022-38553) cross-site scripting in creativeitem (CVE-2022-38553). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Creativeitem Academy Learning Management System	3 years ago
CVE-2022-34026	ICEcoder v8.1 allows attackers to execute a directory traversal. ICEcoder v8.1 allows attackers to execute a directory traversal.	High	Path Traversal Cwe 22 Icecoder	3 years ago
CVE-2022-2266	Cross-Site Scripting (XSS) in yordam (CVE-2022-2266) cross-site scripting in yordam (CVE-2022-2266). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Yordam Library Automation System	3 years ago
CVE-2022-28980	Cross-Site Scripting (XSS) in liferay (CVE-2022-28980) cross-site scripting in liferay (CVE-2022-28980). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Dxp +1	3 years ago
CVE-2022-28981	Path Traversal in path-traversal (CVE-2022-28981) path traversal in path-traversal (CVE-2022-28981). Confidential information can be exposed externally. Exploitable via ``parameter``.	High	Path Traversal Cwe 22 Liferay Liferay Portal	3 years ago
CVE-2022-28978	Cross-Site Scripting (XSS) in liferay (CVE-2022-28978) cross-site scripting in liferay (CVE-2022-28978). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +2	3 years ago

Vulnerabilities

🍪 About cookies