Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2019-12678	Vulnerability in dos (CVE-2019-12678) vulnerability in dos (CVE-2019-12678). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 191 Cisco Adaptive Security Appliance +12	6 years ago
CVE-2019-16202	Privilege Escalation in privilege-escalation (CVE-2019-16202) vulnerability in privilege-escalation (CVE-2019-16202). Confidential information can be exposed externally.	Medium	Privilege Escalation Cwe 269 Misp Project Misp	6 years ago
CVE-2019-1973	Cross-Site Scripting (XSS) in cisco (CVE-2019-1973) cross-site scripting in cisco (CVE-2019-1973). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Cisco Enterprise Nfv Infrastructure Software	7 years ago
CVE-2019-14750	Cross-Site Scripting (XSS) in enhancesoft (CVE-2019-14750) cross-site scripting in enhancesoft (CVE-2019-14750). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Enhancesoft +1	7 years ago
CVE-2019-13103	Vulnerability in dos (CVE-2019-13103) vulnerability in dos (CVE-2019-13103). Data can be tampered with by attackers.	High	Denial of Service Cwe 674 Denx U Boot	7 years ago
CVE-2019-14286	Cross-Site Scripting (XSS) in misp-project (CVE-2019-14286) cross-site scripting in misp-project (CVE-2019-14286). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Misp Project +1	7 years ago
CVE-2019-1068 KEV	[KEV] Vulnerability in Microsoft sql-server (CVE-2019-1068) vulnerability in Microsoft sql-server (CVE-2019-1068). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Remote Code Execution Cwe 20 Microsoft Sql Server +2	7 years ago
CVE-2017-14854	Buffer Overflow in orpak (CVE-2017-14854) vulnerability in orpak (CVE-2017-14854). Data can be tampered with by attackers.	Critical	Remote Code Execution Cwe 119 Cwe 121 Orpak +1	7 years ago
CVE-2017-14853	The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attac... The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attacker is able to run shell commands and receive valid output from the device.	High	Cwe 94 Orpak Siteomat Remote Code Execution	7 years ago
CVE-2017-14851	SQL Injection in sqli (CVE-2017-14851) SQL injection in sqli (CVE-2017-14851). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Authentication Bypass Cwe 89 Orpak +1	7 years ago
CVE-2017-14850	Cross-Site Scripting (XSS) in orpak (CVE-2017-14850) cross-site scripting in orpak (CVE-2017-14850). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Orpak Siteomat	7 years ago
CVE-2017-14728	Vulnerability in orpak (CVE-2017-14728) vulnerability in orpak (CVE-2017-14728). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 798 Orpak Siteomat	7 years ago
CVE-2019-1697	Vulnerability in dos (CVE-2019-1697) vulnerability in dos (CVE-2019-1697). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 20 Cisco Adaptive Security Appliance Software +13	7 years ago
CVE-2019-1703	Vulnerability in dos (CVE-2019-1703) vulnerability in dos (CVE-2019-1703). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cwe 770 Cisco +5	7 years ago
CVE-2019-1704	Vulnerability in dos (CVE-2019-1704) vulnerability in dos (CVE-2019-1704). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cisco Secure Firewall Threat Defense	7 years ago
CVE-2019-1708	Vulnerability in dos (CVE-2019-1708) vulnerability in dos (CVE-2019-1708). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 404 Cwe 401 Cisco +10	7 years ago
CVE-2019-1701	Cross-Site Scripting (XSS) in cisco (CVE-2019-1701) cross-site scripting in cisco (CVE-2019-1701). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Cisco Adaptive Security Appliance Software +13	7 years ago
CVE-2019-1694	Vulnerability in dos (CVE-2019-1694) vulnerability in dos (CVE-2019-1694). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Cisco Adaptive Security Appliance Software +13	7 years ago
CVE-2019-1696	Vulnerability in dos (CVE-2019-1696) vulnerability in dos (CVE-2019-1696). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cisco Secure Firewall Management Center +1	7 years ago
CVE-2018-15388	Vulnerability in dos (CVE-2018-15388) vulnerability in dos (CVE-2018-15388). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cisco Adaptive Security Appliance Software +13	7 years ago
CVE-2018-15462	Vulnerability in dos (CVE-2018-15462) vulnerability in dos (CVE-2018-15462). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 399 Cwe 770 Cisco +1	7 years ago
CVE-2019-1687	Vulnerability in dos (CVE-2019-1687) vulnerability in dos (CVE-2019-1687). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Cisco Adaptive Security Appliance Software +13	7 years ago
CVE-2019-1693	Vulnerability in dos (CVE-2019-1693) vulnerability in dos (CVE-2019-1693). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 399 Cisco Adaptive Security Appliance Software +13	7 years ago
CVE-2018-16988	Vulnerability in buffalo (CVE-2018-16988) vulnerability in buffalo (CVE-2018-16988). Successful exploitation can lead to full system takeover.	Critical	PHP Authentication Bypass Cwe 640 Buffalo +1	7 years ago
CVE-2019-11537	Cross-Site Scripting (XSS) in enhancesoft (CVE-2019-11537) cross-site scripting in enhancesoft (CVE-2019-11537). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Enhancesoft +1	7 years ago
CVE-2019-6575	Vulnerability in dos (CVE-2019-6575) vulnerability in dos (CVE-2019-6575). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 248 Cwe 755 Siemens +43	7 years ago
CVE-2019-10254	Cross-Site Scripting (XSS) in misp-project (CVE-2019-10254) cross-site scripting in misp-project (CVE-2019-10254). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Misp Project Misp	7 years ago
CVE-2019-7386	Vulnerability in dos (CVE-2019-7386) vulnerability in dos (CVE-2019-7386). Risk of unauthorized operations or information disclosure.	Medium	Remote Code Execution Denial of Service Kaiostech Kaios +3	7 years ago
CVE-2019-1691	Vulnerability in dos (CVE-2019-1691) vulnerability in dos (CVE-2019-1691). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 20 Cwe 755 Cisco +1	7 years ago
CVE-2019-1669	Vulnerability in dos (CVE-2019-1669) vulnerability in dos (CVE-2019-1669). Data can be tampered with by attackers.	High	Denial of Service Cwe 693 Cisco Secure Firewall Threat Defense	7 years ago
CVE-2018-18861	Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command. Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command.	Critical	Remote Code Execution Cwe 119 Pcman Ftp Server	7 years ago
CVE-2018-19211	Vulnerability in c (CVE-2018-19211) vulnerability in c (CVE-2018-19211). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 476 Invisible Island +1	7 years ago
CVE-2018-19217	Vulnerability in dos (CVE-2018-19217) vulnerability in dos (CVE-2018-19217). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 476 Invisible Island Ncurses	7 years ago
CVE-2018-15454	Vulnerability in dos (CVE-2018-15454) vulnerability in dos (CVE-2018-15454). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Cisco Adaptive Security Appliance Software +1	7 years ago
CVE-2018-15756	Vulnerability in spring (CVE-2018-15756) vulnerability in spring (CVE-2018-15756). Risk of unauthorized operations or information disclosure.	High	JavaScript Spring Denial of Service Vmware +42	7 years ago
CVE-2018-15399	Vulnerability in dos (CVE-2018-15399) vulnerability in dos (CVE-2018-15399). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 400 Cwe 770 Cisco +2	7 years ago
CVE-2018-15383	Vulnerability in dos (CVE-2018-15383) vulnerability in dos (CVE-2018-15383). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cwe 770 Cisco +3	7 years ago
CVE-2018-15390	Vulnerability in dos (CVE-2018-15390) vulnerability in dos (CVE-2018-15390). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 399 Cwe 667 Cisco +1	7 years ago
CVE-2018-3882	SQL Injection in sqli (CVE-2018-3882) SQL injection in sqli (CVE-2018-3882). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Frappe Erpnext	7 years ago
CVE-2018-3883	SQL Injection in sqli (CVE-2018-3883) SQL injection in sqli (CVE-2018-3883). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Frappe Erpnext	7 years ago
CVE-2018-3884	SQL Injection in sqli (CVE-2018-3884) SQL injection in sqli (CVE-2018-3884). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Frappe Erpnext	7 years ago
CVE-2018-3885	SQL Injection in sqli (CVE-2018-3885) SQL injection in sqli (CVE-2018-3885). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Frappe Erpnext	7 years ago
CVE-2018-10902	Vulnerability in c (CVE-2018-10902) vulnerability in c (CVE-2018-10902). Successful exploitation can lead to full system takeover.	High	C Privilege Escalation Cwe 416 Cwe 415 +10	8 years ago
CVE-2018-1155	Cross-Site Scripting (XSS) in tenable (CVE-2018-1155) cross-site scripting in tenable (CVE-2018-1155). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Tenable +1	8 years ago
CVE-2018-1002206	Path Traversal in sharpcompress (CVE-2018-1002206) path traversal in sharpcompress (CVE-2018-1002206). Data can be tampered with by attackers. Mitigation: upgrade to `0.21.0` or later.	Medium	Path Traversal Cwe 22 Adamhathcock Sharpcompress	8 years ago
CVE-2018-11039	Vulnerability in spring (CVE-2018-11039) vulnerability in spring (CVE-2018-11039). Confidential information can be exposed externally.	Medium	Spring Cross-Site Scripting Vmware Spring Framework +34	8 years ago
CVE-2018-11562	Cross-Site Scripting (XSS) in misp-project (CVE-2018-11562) cross-site scripting in misp-project (CVE-2018-11562). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Misp Project Misp	8 years ago
CVE-2018-1258	Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauth... Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.	High	Spring Cwe 863 Pivotal Software Spring Security +47	8 years ago
CVE-2018-0228	Vulnerability in dos (CVE-2018-0228) vulnerability in dos (CVE-2018-0228). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Cwe 667 Cisco +2	8 years ago
CVE-2018-0230	Vulnerability in dos (CVE-2018-0230) vulnerability in dos (CVE-2018-0230). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cisco Secure Firewall Threat Defense +1	8 years ago

Vulnerabilities

🍪 About cookies