Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2022-28979	Cross-Site Scripting (XSS) in liferay (CVE-2022-28979) cross-site scripting in liferay (CVE-2022-28979). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +2	3 years ago
CVE-2022-28982	Cross-Site Scripting (XSS) in liferay (CVE-2022-28982) cross-site scripting in liferay (CVE-2022-28982). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Dxp +1	3 years ago
CVE-2022-40030	SQL Injection in sqli (CVE-2022-40030) SQL injection in sqli (CVE-2022-40030). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Simple Task Managing System Project +1	3 years ago
CVE-2022-40027	Cross-Site Scripting (XSS) in simple-task-managing-system-project (CVE-2022-40027) cross-site scripting in simple-task-managing-system-project (CVE-2022-40027). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Simple Task Managing System Project +1	3 years ago
CVE-2022-40028	Cross-Site Scripting (XSS) in simple-task-managing-system-project (CVE-2022-40028) cross-site scripting in simple-task-managing-system-project (CVE-2022-40028). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Simple Task Managing System Project +1	3 years ago
CVE-2022-40029	Cross-Site Scripting (XSS) in simple-task-managing-system-project (CVE-2022-40029) cross-site scripting in simple-task-managing-system-project (CVE-2022-40029). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Simple Task Managing System Project +1	3 years ago
CVE-2022-2265	Path Traversal in path-traversal (CVE-2022-2265) path traversal in path-traversal (CVE-2022-2265). Confidential information can be exposed externally.	High	Path Traversal Cwe 35 Cwe 22 Identity And Directory Management System Project +1	3 years ago
CVE-2022-0495	SQL Injection in sqli (CVE-2022-0495) SQL injection in sqli (CVE-2022-0495). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89 Parantezteknoloji Koha Library Automation	3 years ago
CVE-2022-2315	SQL Injection in sqli (CVE-2022-2315) SQL injection in sqli (CVE-2022-2315). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89 Databank Accreditation Trackingpresentation Module	3 years ago
CVE-2022-38619	SQL Injection in sqli (CVE-2022-38619) SQL injection in sqli (CVE-2022-38619). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Bpcbt Smartvista Front End	3 years ago
CVE-2022-2177	SQL Injection in sqli (CVE-2022-2177) SQL injection in sqli (CVE-2022-2177). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89 Kayrasoft	3 years ago
CVE-2022-38618	SQL Injection in sqli (CVE-2022-38618) SQL injection in sqli (CVE-2022-38618). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Bpcbt Smartvista	3 years ago
CVE-2022-37700	Path Traversal in path-traversal (CVE-2022-37700) path traversal in path-traversal (CVE-2022-37700). Confidential information can be exposed externally.	High	PHP Path Traversal Cwe 22 Easycorp +1	3 years ago
CVE-2022-38617	SQL Injection in sqli (CVE-2022-38617) SQL injection in sqli (CVE-2022-38617). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Bpcbt Smartvista	3 years ago
CVE-2022-36534	Command Injection in syncovery (CVE-2022-36534) command injection in syncovery (CVE-2022-36534). Successful exploitation can lead to full system takeover.	High	PHP Remote Code Execution Syncovery Linux +1	3 years ago
CVE-2022-36533	Cross-Site Scripting (XSS) in syncovery (CVE-2022-36533) cross-site scripting in syncovery (CVE-2022-36533). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Syncovery Linux +1	3 years ago
CVE-2022-37251	Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts. Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts.	Medium	Cross-Site Scripting Cwe 79 Craftcms Craft Cms	3 years ago
CVE-2022-37775	Cross-Site Scripting (XSS) in genesys (CVE-2022-37775) cross-site scripting in genesys (CVE-2022-37775). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Genesys Pureconnect	3 years ago
CVE-2022-36532	Vulnerability in bolt (CVE-2022-36532) vulnerability in bolt (CVE-2022-36532). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Bolt Bolt Cms	3 years ago
CVE-2022-29649	Qsmart Next v4.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability. Qsmart Next v4.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability.	Medium	Cross-Site Scripting Cwe 79 Qsmart Next Project Qsmart Next	3 years ago
CVE-2022-38013	Vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2022-38013) vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2022-38013). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.0.9` or later.	High	C# Denial of Service Cwe 400 Microsoft +6	3 years ago
CVE-2022-38616	SQL Injection in sqli (CVE-2022-38616) SQL injection in sqli (CVE-2022-38616). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Bpcbt Smartvista Front End	3 years ago
CVE-2022-34108	Vulnerability in dos (CVE-2022-34108) vulnerability in dos (CVE-2022-34108). Data can be tampered with by attackers.	High	Denial of Service Msi Micro Star International Feature Navigator	3 years ago
CVE-2022-38615	SQL Injection in sqli (CVE-2022-38615) SQL injection in sqli (CVE-2022-38615). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Bpcbt Smartvista Front End	3 years ago
CVE-2022-38613	Path Traversal in path-traversal (CVE-2022-38613) path traversal in path-traversal (CVE-2022-38613). Confidential information can be exposed externally.	Medium	Path Traversal Cwe 22 Bpcbt Smartvista Cardgen	3 years ago
CVE-2022-38096	Vulnerability in c (CVE-2022-38096) vulnerability in c (CVE-2022-38096). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 476 Linux +1	3 years ago
CVE-2022-26258 KEV	[KEV] OS Command Injection in D-link dir-820l (CVE-2022-26258) OS command injection in D-link dir-820l (CVE-2022-26258). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	D Link Dir 820L Cwe 78 Remote Code Execution +2	3 years ago
CVE-2022-35192	Vulnerability in dos (CVE-2022-35192) vulnerability in dos (CVE-2022-35192). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 120 Dlink Dsl 3782 Firmware +1	4 years ago
CVE-2018-14519	Cross-Site Request Forgery (CSRF) in csrf (CVE-2018-14519) vulnerability in csrf (CVE-2018-14519). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Request Forgery Cwe 352 Getkirby Kirby	4 years ago
CVE-2022-35191	Vulnerability in dos (CVE-2022-35191) vulnerability in dos (CVE-2022-35191). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 404 Dlink Dsl 3782 Firmware +1	4 years ago
CVE-2022-28598	Cross-Site Scripting (XSS) in frappe (CVE-2022-28598) cross-site scripting in frappe (CVE-2022-28598). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Frappe Erpnext	4 years ago
CVE-2022-35554	Cross-Site Scripting (XSS) in bpcbt (CVE-2022-35554) cross-site scripting in bpcbt (CVE-2022-35554). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Bpcbt +1	4 years ago
CVE-2022-35201	Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability. Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.	Critical	Remote Code Execution Tenda Ac18 Firmware Ac18	4 years ago
CVE-2022-36530	Cross-Site Scripting (XSS) in rageframe (CVE-2022-36530) cross-site scripting in rageframe (CVE-2022-36530). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Rageframe	4 years ago
CVE-2022-24654	Cross-Site Scripting (XSS) in intelbras (CVE-2022-24654) cross-site scripting in intelbras (CVE-2022-24654). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Intelbras +2	4 years ago
CVE-2022-36526	Authentication Bypass in dlink (CVE-2022-36526) authentication bypass in dlink (CVE-2022-36526). Data can be tampered with by attackers.	High	Authentication Bypass Dlink Go Rt Ac750 Firmware Go Rt Ac750	4 years ago
CVE-2022-37042 KEV	[KEV] Path Traversal in Synacor zimbra-collaboration-suite-zcs (CVE-2022-37042) path traversal in Synacor zimbra-collaboration-suite-zcs (CVE-2022-37042). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Synacor Zimbra Collaboration Suite Zcs Cwe 23 Remote Code Execution +3	4 years ago
CVE-2022-27925 KEV	[KEV] Path Traversal in Synacor zimbra-collaboration-suite-zcs (CVE-2022-27925) path traversal in Synacor zimbra-collaboration-suite-zcs (CVE-2022-27925). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Synacor Zimbra Collaboration Suite Zcs Cwe 22 Path Traversal +1	4 years ago
CVE-2022-35509	Cross-Site Scripting (XSS) in eyoucms (CVE-2022-35509) cross-site scripting in eyoucms (CVE-2022-35509). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Cwe 80 Eyoucms	4 years ago
CVE-2022-20713	Vulnerability in cisco (CVE-2022-20713) vulnerability in cisco (CVE-2022-20713). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 444 Cwe 79 Cisco +2	4 years ago
CVE-2022-30333 KEV	[KEV] Path Traversal in Rarlab unrar (CVE-2022-30333) path traversal in Rarlab unrar (CVE-2022-30333). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.	High	Rarlab Unrar Cwe 22 Cwe 59 +7	4 years ago
CVE-2022-35493	Cross-Site Scripting (XSS) in wrteam (CVE-2022-35493) cross-site scripting in wrteam (CVE-2022-35493). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Wrteam Eshop Ecommerce Store Website	4 years ago
CVE-2022-35118	PyroCMS v3.9 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities. PyroCMS v3.9 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.	Medium	Cross-Site Scripting Cwe 79 Pyrocms	4 years ago
CVE-2022-31321	Vulnerability in dos (CVE-2022-31321) vulnerability in dos (CVE-2022-31321). Confidential information can be exposed externally.	Critical	Denial of Service Cwe 20 Boltcms Bolt	4 years ago
CVE-2022-1277	Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability. Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability.	Critical	SQL Injection Cwe 89 Inavitas Solar Log	4 years ago
CVE-2022-34611	Cross-Site Scripting (XSS) in online-fire-reporting-system-project (CVE-2022-34611) cross-site scripting in online-fire-reporting-system-project (CVE-2022-34611). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Online Fire Reporting System Project +1	4 years ago
CVE-2022-24992	Path Traversal in path-traversal (CVE-2022-24992) path traversal in path-traversal (CVE-2022-24992). Confidential information can be exposed externally.	High	PHP Path Traversal Cwe 22 Qr Code Generator Project +1	4 years ago
CVE-2022-29709	SQL Injection in sqli (CVE-2022-29709) SQL injection in sqli (CVE-2022-29709). Confidential information can be exposed externally.	High	SQL Injection Cwe 89 Communilink Clink Office	4 years ago
CVE-2022-21535	Vulnerability in mysql-shell (CVE-2022-21535) vulnerability in mysql-shell (CVE-2022-21535). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.29` or later.	Low	C Denial of Service Oracle Mysql Shell	4 years ago
CVE-2020-35305	Cross-Site Scripting (XSS) in gollum-project (CVE-2020-35305) cross-site scripting in gollum-project (CVE-2020-35305). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Gollum Project Gollum	4 years ago

Vulnerabilities

🍪 About cookies