Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2022-38619	SQL Injection in sqli (CVE-2022-38619) SQL injection in sqli (CVE-2022-38619). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Bpcbt Smartvista Front End	3 years ago
CVE-2022-2177	SQL Injection in sqli (CVE-2022-2177) SQL injection in sqli (CVE-2022-2177). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89 Kayrasoft	3 years ago
CVE-2022-26258 KEV	[KEV] OS Command Injection in D-link dir-820l (CVE-2022-26258) OS command injection in D-link dir-820l (CVE-2022-26258). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	D Link Dir 820L Cwe 78 Remote Code Execution +2	3 years ago
CVE-2022-35201	Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability. Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.	Critical	Remote Code Execution Tenda Ac18 Firmware Ac18	4 years ago
CVE-2022-37042 KEV	[KEV] Path Traversal in Synacor zimbra-collaboration-suite-zcs (CVE-2022-37042) path traversal in Synacor zimbra-collaboration-suite-zcs (CVE-2022-37042). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Synacor Zimbra Collaboration Suite Zcs Cwe 23 Remote Code Execution +3	4 years ago
CVE-2022-31321	Vulnerability in dos (CVE-2022-31321) vulnerability in dos (CVE-2022-31321). Confidential information can be exposed externally.	Critical	Denial of Service Cwe 20 Boltcms Bolt	4 years ago
CVE-2022-1277	Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability. Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability.	Critical	SQL Injection Cwe 89 Inavitas Solar Log	4 years ago
CVE-2022-32224	Unsafe Deserialization in activerecord (CVE-2022-32224) vulnerability in activerecord (CVE-2022-32224). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.2.8.1` or later.	Critical	Remote Code Execution SQL Injection Cwe 502 Activerecord Project +1	4 years ago
CVE-2022-29499 KEV	[KEV] Vulnerability in Mitel mivoice-connect (CVE-2022-29499) vulnerability in Mitel mivoice-connect (CVE-2022-29499). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Mitel Mivoice Connect Cwe 20 Remote Code Execution	4 years ago
CVE-2022-24562	Vulnerability in iobit (CVE-2022-24562) vulnerability in iobit (CVE-2022-24562). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 306 Iobit Iotransfer	4 years ago
CVE-2022-31384	SQL Injection in sqli (CVE-2022-31384) SQL injection in sqli (CVE-2022-31384). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpgurukul +1	4 years ago
CVE-2022-31382	SQL Injection in sqli (CVE-2022-31382) SQL injection in sqli (CVE-2022-31382). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpgurukul +1	4 years ago
CVE-2022-31383	SQL Injection in sqli (CVE-2022-31383) SQL injection in sqli (CVE-2022-31383). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpgurukul +1	4 years ago
CVE-2021-42675	Unrestricted File Upload in kreado (CVE-2021-42675) vulnerability in kreado (CVE-2021-42675). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 434 Kreado +1	4 years ago
CVE-2022-29704	BrowsBox CMS v4.0 was discovered to contain a SQL injection vulnerability. BrowsBox CMS v4.0 was discovered to contain a SQL injection vulnerability.	Critical	SQL Injection Cwe 89 Browsbox Brows Box	4 years ago
CVE-2022-31340	Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php. Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php.	Critical	PHP SQL Injection Cwe 89 Argie +1	4 years ago
CVE-2022-30490	SQL Injection in sqli (CVE-2022-30490) SQL injection in sqli (CVE-2022-30490). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Badminton Center Management System Project +1	4 years ago
CVE-2022-28945	Path Traversal in path-traversal (CVE-2022-28945) path traversal in path-traversal (CVE-2022-28945). Successful exploitation can lead to full system takeover.	Critical	Path Traversal Cwe 22 Webbank Webcube	4 years ago
CVE-2022-24240	SQL Injection in sqli (CVE-2022-24240) SQL injection in sqli (CVE-2022-24240). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Aceware Aceweb Online Portal	4 years ago
CVE-2021-41653	Code Injection in tp-link (CVE-2021-41653) code injection in tp-link (CVE-2021-41653). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 94 Tp Link Tl Wr840N Firmware +1	4 years ago
CVE-2020-25912	XXE (XML External Entity) in dos (CVE-2020-25912) vulnerability in dos (CVE-2020-25912). Confidential information can be exposed externally.	Critical	PHP Denial of Service Cwe 611 Getsymphony +1	4 years ago
CVE-2021-39302	SQL Injection in sqli (CVE-2021-39302) SQL injection in sqli (CVE-2021-39302). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Misp Project +1	4 years ago
CVE-2021-22779	Vulnerability in schneider-electric (CVE-2021-22779) vulnerability in schneider-electric (CVE-2021-22779). Confidential information can be exposed externally.	Critical	Authentication Bypass Cwe 290 Schneider Electric Ecostruxure Control Expert +60	4 years ago
CVE-2020-35276	SQL Injection in sqli (CVE-2020-35276) SQL injection in sqli (CVE-2020-35276). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Egavilanmedia Ecm Address Book	4 years ago
CVE-2020-24881	SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-24881) SSRF in ssrf (CVE-2020-24881). Successful exploitation can lead to full system takeover.	Critical	Server-Side Request Forgery Cwe 918 Enhancesoft Osticket	4 years ago
CVE-2020-25466	SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-25466) SSRF in ssrf (CVE-2020-25466). Successful exploitation can lead to full system takeover.	Critical	Server-Side Request Forgery Cwe 918 Crmeb	4 years ago
CVE-2020-26867	Unsafe Deserialization in deserialization (CVE-2020-26867) vulnerability in deserialization (CVE-2020-26867). Successful exploitation can lead to full system takeover.	Critical	Insecure Deserialization Cwe 502 Arcinfo Pcvue	4 years ago
CVE-2020-24193	SQL Injection in sqli (CVE-2020-24193) SQL injection in sqli (CVE-2020-24193). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Authentication Bypass Cwe 89 Daily Tracker System Project +1	4 years ago
CVE-2022-28568	Unrestricted File Upload in simple-doctors-appointment-system-project (CVE-2022-28568) vulnerability in simple-doctors-appointment-system-project (CVE-2022-28568). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 434 Simple Doctors Appointment System Project Simple Doctors Appointment System	4 years ago
CVE-2021-43163	Command Injection in ruijienetworks (CVE-2021-43163) command injection in ruijienetworks (CVE-2021-43163). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 77 Ruijienetworks Reyeeos +5	4 years ago
CVE-2021-44596	Vulnerability in wondershare (CVE-2021-44596) vulnerability in wondershare (CVE-2021-44596). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Wondershare Drfone	4 years ago
CVE-2022-27984	SQL Injection in sqli (CVE-2022-27984) SQL injection in sqli (CVE-2022-27984). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Cuppacms	4 years ago
CVE-2022-27985	SQL Injection in sqli (CVE-2022-27985) SQL injection in sqli (CVE-2022-27985). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Cuppacms	4 years ago
CVE-2022-29528	An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur. An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur.	Critical	Insecure Deserialization Cwe 502 Misp Project Misp	4 years ago
CVE-2018-7602 KEV	[KEV] Code Injection in Drupal core (CVE-2018-7602) code injection in Drupal core (CVE-2018-7602). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Drupal Core Remote Code Execution Cwe 94 +2	4 years ago
CVE-2021-37291	SQL Injection in sqli (CVE-2021-37291) SQL injection in sqli (CVE-2021-37291). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Kevinlab +1	4 years ago
CVE-2022-26645	Unrestricted File Upload in oretnom23 (CVE-2022-26645) vulnerability in oretnom23 (CVE-2022-26645). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 434 Oretnom23 +1	4 years ago
CVE-2018-1273 KEV	[KEV] Code Injection in Vmware tanzu vmware-tanzu (CVE-2018-1273) code injection in Vmware tanzu vmware-tanzu (CVE-2018-1273). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Vmware Tanzu Spring Data Commons Cwe 94 Remote Code Execution +8	4 years ago
CVE-2010-2861 KEV	[KEV] Path Traversal in Adobe coldfusion (CVE-2010-2861) path traversal in Adobe coldfusion (CVE-2010-2861). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Adobe Coldfusion Cwe 22 Path Traversal	4 years ago
CVE-2021-42237 KEV	[KEV] Unsafe Deserialization in Sitecore xp (CVE-2021-42237) vulnerability in Sitecore xp (CVE-2021-42237). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Sitecore Xp Cwe 502 Insecure Deserialization +1	4 years ago
CVE-2022-24292	Vulnerability in dos (CVE-2022-24292) vulnerability in dos (CVE-2022-24292). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Denial of Service Hp Laserjet Pro M453 M454 W1Y40A Firmware +135	4 years ago
CVE-2022-24293	Vulnerability in dos (CVE-2022-24293) vulnerability in dos (CVE-2022-24293). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Denial of Service Hp Laserjet Pro M453 M454 W1Y40A Firmware +135	4 years ago
CVE-2021-44087	Vulnerability in attendance-and-payroll-system-project (CVE-2021-44087) vulnerability in attendance-and-payroll-system-project (CVE-2021-44087). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Attendance And Payroll System Project Attendance And Payroll System	4 years ago
CVE-2021-44088	SQL Injection in sqli (CVE-2021-44088) SQL injection in sqli (CVE-2021-44088). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Attendance And Payroll System Project Attendance And Payroll System	4 years ago
CVE-2024-22051	Vulnerability in commonmarker (CVE-2024-22051) vulnerability in commonmarker (CVE-2024-22051). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.23.4` or later.	Critical	Remote Code Execution Cwe 190 Github Cmark Gfm +2	4 years ago
CVE-2020-1938 KEV	[KEV] Privilege Escalation in org.apache.tomcat.embed:tomcat-embed-core (CVE-2020-1938) vulnerability in org.apache.tomcat.embed:tomcat-embed-core (CVE-2020-1938). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `7.0.100` or later.	Critical	Apache Tomcat Remote Code Execution Geode +25	4 years ago
CVE-2016-1019 KEV	[KEV] Vulnerability in Adobe flash-player (CVE-2016-1019) vulnerability in Adobe flash-player (CVE-2016-1019). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Adobe Flash Player Denial of Service Flash Player Desktop Runtime +15	4 years ago
CVE-2012-0507 KEV	[KEV] Vulnerability in Oracle java-se (CVE-2012-0507) vulnerability in Oracle java-se (CVE-2012-0507). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Oracle Java Se Java Denial of Service +10	4 years ago
CVE-2022-25064	OS Command Injection in tp-link (CVE-2022-25064) OS command injection in tp-link (CVE-2022-25064). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 78 Tp Link Tl Wr840N Firmware +1	4 years ago
CVE-2021-42952	Vulnerability in zepl (CVE-2021-42952) vulnerability in zepl (CVE-2021-42952). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Zepl	4 years ago

Vulnerabilities

🍪 About cookies