Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2022-23350	Cross-Site Scripting (XSS) in bigantsoft (CVE-2022-23350) cross-site scripting in bigantsoft (CVE-2022-23350). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Bigantsoft Bigant Server	4 years ago
CVE-2022-23349	Cross-Site Request Forgery (CSRF) in csrf (CVE-2022-23349) vulnerability in csrf (CVE-2022-23349). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Bigantsoft Bigant Server	4 years ago
CVE-2022-1011	Use-After-Free in privilege-escalation (CVE-2022-1011) vulnerability in privilege-escalation (CVE-2022-1011). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 416 Linux Linux Kernel +42	4 years ago
CVE-2022-27244	Cross-Site Scripting (XSS) in misp-project (CVE-2022-27244) cross-site scripting in misp-project (CVE-2022-27244). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Misp Project Misp	4 years ago
CVE-2022-27245	SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-27245) SSRF in ssrf (CVE-2022-27245). Successful exploitation can lead to full system takeover.	High	PHP Server-Side Request Forgery Cwe 918 Misp Project +1	4 years ago
CVE-2021-44087	Vulnerability in attendance-and-payroll-system-project (CVE-2021-44087) vulnerability in attendance-and-payroll-system-project (CVE-2021-44087). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Attendance And Payroll System Project Attendance And Payroll System	4 years ago
CVE-2021-44088	SQL Injection in sqli (CVE-2021-44088) SQL injection in sqli (CVE-2021-44088). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Attendance And Payroll System Project Attendance And Payroll System	4 years ago
CVE-2022-0778	Vulnerability in dos (CVE-2022-0778) vulnerability in dos (CVE-2022-0778). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 835 Openssl Debian +17	4 years ago
CVE-2021-36368	Authentication Bypass in openbsd (CVE-2021-36368) authentication bypass in openbsd (CVE-2021-36368). Risk of unauthorized operations or information disclosure.	Low	Authentication Bypass Cwe 287 OpenBSD Openssh +2	4 years ago
CVE-2022-25090	Vulnerability in privilege-escalation (CVE-2022-25090) vulnerability in privilege-escalation (CVE-2022-25090). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 362 Kofax Printix	4 years ago
CVE-2022-24644	Vulnerability in zzinc (CVE-2022-24644) vulnerability in zzinc (CVE-2022-24644). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 494 Zzinc Keymouse Firmware +1	4 years ago
CVE-2022-24509	Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Office +1	4 years ago
CVE-2022-24510	Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Office +1	4 years ago
CVE-2022-24512	Code Injection in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2022-24512) code injection in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2022-24512). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.0.3` or later.	Medium	C# Remote Code Execution Cwe 94 Microsoft +7	4 years ago
CVE-2022-24461	Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Office +1	4 years ago
CVE-2022-24501	VP9 Video Extensions Remote Code Execution Vulnerability VP9 Video Extensions Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Vp9 Video Extensions	4 years ago
CVE-2022-24464	Vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2022-24464) vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2022-24464). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.0.3` or later.	High	C# Denial of Service Cwe 400 Microsoft +6	4 years ago
CVE-2022-24451	VP9 Video Extensions Remote Code Execution Vulnerability VP9 Video Extensions Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Vp9 Video Extensions	4 years ago
CVE-2022-24457	HEIF Image Extensions Remote Code Execution Vulnerability HEIF Image Extensions Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 787 Microsoft Heif Image Extension	4 years ago
CVE-2022-23282	Paint 3D Remote Code Execution Vulnerability Paint 3D Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Paint 3D	4 years ago
CVE-2020-18324	Cross-Site Scripting (XSS) in intelliants (CVE-2020-18324) cross-site scripting in intelliants (CVE-2020-18324). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Intelliants Subrion Cms	4 years ago
CVE-2020-18325	Cross-Site Scripting (XSS) in intelliants (CVE-2020-18325) cross-site scripting in intelliants (CVE-2020-18325). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Intelliants Subrion Cms	4 years ago
CVE-2020-18326	Cross-Site Request Forgery (CSRF) in csrf (CVE-2020-18326) vulnerability in csrf (CVE-2020-18326). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Intelliants Subrion Cms	4 years ago
CVE-2022-23327	Vulnerability in dos (CVE-2022-23327) vulnerability in dos (CVE-2022-23327). Risk of unauthorized operations or information disclosure.	High	Denial of Service Ethereum Go Ethereum	4 years ago
CVE-2022-23328	Vulnerability in dos (CVE-2022-23328) vulnerability in dos (CVE-2022-23328). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Ethereum Go Ethereum	4 years ago
CVE-2024-22051	Vulnerability in commonmarker (CVE-2024-22051) vulnerability in commonmarker (CVE-2024-22051). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.23.4` or later.	Critical	Remote Code Execution Cwe 190 Github Cmark Gfm +2	4 years ago
CVE-2021-42950	Vulnerability in zepl (CVE-2021-42950) vulnerability in zepl (CVE-2021-42950). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Zepl	4 years ago
CVE-2022-24573	Cross-Site Scripting (XSS) in element-it (CVE-2022-24573) cross-site scripting in element-it (CVE-2022-24573). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Element It Http Commander	4 years ago
CVE-2021-38265	Cross-Site Scripting (XSS) in liferay (CVE-2021-38265) cross-site scripting in liferay (CVE-2021-38265). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +1	4 years ago
CVE-2021-38267	Cross-Site Scripting (XSS) in liferay (CVE-2021-38267) cross-site scripting in liferay (CVE-2021-38267). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +1	4 years ago
CVE-2021-38269	Cross-Site Scripting (XSS) in liferay (CVE-2021-38269) cross-site scripting in liferay (CVE-2021-38269). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Liferay Portal +1	4 years ago
CVE-2022-25146	Vulnerability in csrf (CVE-2022-25146) vulnerability in csrf (CVE-2022-25146). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Request Forgery Cwe 346 Liferay Digital Experience Platform +1	4 years ago
CVE-2021-38263	Cross-Site Scripting (XSS) in liferay (CVE-2021-38263) cross-site scripting in liferay (CVE-2021-38263). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Liferay Portal +1	4 years ago
CVE-2021-38264	Cross-Site Scripting (XSS) in liferay (CVE-2021-38264) cross-site scripting in liferay (CVE-2021-38264). Risk of unauthorized operations or information disclosure. Exploitable via ``keywords``.	Medium	Cross-Site Scripting Cwe 79 Liferay Liferay Portal	4 years ago
CVE-2020-1938 KEV	[KEV] Privilege Escalation in org.apache.tomcat.embed:tomcat-embed-core (CVE-2020-1938) vulnerability in org.apache.tomcat.embed:tomcat-embed-core (CVE-2020-1938). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `7.0.100` or later.	Critical	Apache Tomcat Remote Code Execution Geode +25	4 years ago
CVE-2016-1019 KEV	[KEV] Vulnerability in Adobe flash-player (CVE-2016-1019) vulnerability in Adobe flash-player (CVE-2016-1019). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Adobe Flash Player Denial of Service Flash Player Desktop Runtime +15	4 years ago
CVE-2012-0507 KEV	[KEV] Vulnerability in Oracle java-se (CVE-2012-0507) vulnerability in Oracle java-se (CVE-2012-0507). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Oracle Java Se Java Denial of Service +10	4 years ago
CVE-2010-0188 KEV	[KEV] Code Injection in Adobe reader-and-acrobat (CVE-2010-0188) code injection in Adobe reader-and-acrobat (CVE-2010-0188). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Adobe Reader And Acrobat Cwe 94 Denial of Service +2	4 years ago
CVE-2022-25020	Cross-Site Scripting (XSS) in pluxml (CVE-2022-25020) cross-site scripting in pluxml (CVE-2022-25020). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Pluxml	4 years ago
CVE-2021-43619	Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition. In the IPC model, a psa_fwu_write caller from SPE or NSPE can overwrite stack memory locations. Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition. In the IPC model, a psa_fwu_write caller from SPE or NSPE can overwrite stack memory locations.	High	Cwe 120 Trustedfirmware Trusted Firmware M Buffer Overflow	4 years ago
CVE-2021-42951	Vulnerability in algorithmia (CVE-2021-42951) vulnerability in algorithmia (CVE-2021-42951). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Algorithmia Msol	4 years ago
CVE-2022-25022	Cross-Site Scripting (XSS) in htmly (CVE-2022-25022) cross-site scripting in htmly (CVE-2022-25022). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Htmly	4 years ago
CVE-2022-25064	OS Command Injection in tp-link (CVE-2022-25064) OS command injection in tp-link (CVE-2022-25064). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 78 Tp Link Tl Wr840N Firmware +1	4 years ago
CVE-2021-42952	Vulnerability in zepl (CVE-2021-42952) vulnerability in zepl (CVE-2021-42952). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Zepl	4 years ago
CVE-2022-25062	Vulnerability in dos (CVE-2022-25062) vulnerability in dos (CVE-2022-25062). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 190 Tp Link Tl Wr840N Firmware +1	4 years ago
CVE-2021-37504	Cross-Site Scripting (XSS) in hayageek (CVE-2021-37504) cross-site scripting in hayageek (CVE-2021-37504). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Hayageek +1	4 years ago
CVE-2022-22899	Out-of-Bounds Write in dos (CVE-2022-22899) out-of-bounds write in dos (CVE-2022-22899). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 787 Coreftp Core Ftp	4 years ago
CVE-2022-22914	Path Traversal in path-traversal (CVE-2022-22914) path traversal in path-traversal (CVE-2022-22914). Confidential information can be exposed externally.	High	Path Traversal Cwe 22 Ovidentia	4 years ago
CVE-2022-22916	Vulnerability in zoneland (CVE-2022-22916) vulnerability in zoneland (CVE-2022-22916). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Zoneland O2Oa	4 years ago
CVE-2019-0752 KEV	[KEV] Vulnerability in Microsoft internet-explorer (CVE-2019-0752) vulnerability in Microsoft internet-explorer (CVE-2019-0752). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Internet Explorer Cwe 843 Remote Code Execution +13	4 years ago

Vulnerabilities

🍪 About cookies