Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2016-9379	Vulnerability in xen (CVE-2016-9379) vulnerability in xen (CVE-2016-9379). Confidential information can be exposed externally.	High	Cwe 20 Xen Citrix Xenserver	9 years ago
CVE-2016-9380	Vulnerability in xen (CVE-2016-9380) vulnerability in xen (CVE-2016-9380). Confidential information can be exposed externally.	High	Cwe 20 Xen Citrix Xenserver	9 years ago
CVE-2016-9383	Vulnerability in dos (CVE-2016-9383) vulnerability in dos (CVE-2016-9383). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 20 Xen Citrix +1	9 years ago
CVE-2016-9385	Vulnerability in dos (CVE-2016-9385) vulnerability in dos (CVE-2016-9385). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 20 Xen Citrix +1	9 years ago
CVE-2016-7410	Out-of-Bounds Read in c (CVE-2016-7410) vulnerability in c (CVE-2016-7410). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 125 Libdwarf Project +1	9 years ago
CVE-2016-9401	Use-After-Free in gnu (CVE-2016-9401) vulnerability in gnu (CVE-2016-9401). Risk of unauthorized operations or information disclosure.	Medium	Cwe 416 Gnu Bash Debian +8	9 years ago
CVE-2016-9381	Vulnerability in qemu (CVE-2016-9381) vulnerability in qemu (CVE-2016-9381). Successful exploitation can lead to full system takeover.	High	Cwe 362 Qemu Citrix Xenserver	9 years ago
CVE-2016-7102	Code Injection in c (CVE-2016-7102) code injection in c (CVE-2016-7102). Successful exploitation can lead to full system takeover.	High	C Cwe 94 Owncloud Owncloud Desktop Client	9 years ago
CVE-2016-6920	Buffer Overflow in c (CVE-2016-6920) vulnerability in c (CVE-2016-6920). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 119 Ffmpeg	9 years ago
CVE-2016-7567	Buffer Overflow in c (CVE-2016-7567) vulnerability in c (CVE-2016-7567). Successful exploitation can lead to full system takeover.	Critical	C Cwe 119 Openslp	9 years ago
CVE-2016-6668	Information Disclosure in atlassian (CVE-2016-6668) vulnerability in atlassian (CVE-2016-6668). Confidential information can be exposed externally.	High	Cwe 200 Atlassian Confluence Server Jira Integration For Hipchat	9 years ago
CVE-2016-6484	Vulnerability in infoblox (CVE-2016-6484) vulnerability in infoblox (CVE-2016-6484). Risk of unauthorized operations or information disclosure.	Medium	Cwe 93 Infoblox Netmri	9 years ago
CVE-2016-6517	Path Traversal in path-traversal (CVE-2016-6517) path traversal in path-traversal (CVE-2016-6517). Successful exploitation can lead to full system takeover.	Critical	Path Traversal Cwe 22 Liferay	9 years ago
CVE-2016-6600	Path Traversal in path-traversal (CVE-2016-6600) path traversal in path-traversal (CVE-2016-6600). Successful exploitation can lead to full system takeover.	Critical	Path Traversal Cwe 22 Zohocorp Webnms Framework	9 years ago
CVE-2016-6601	Path Traversal in path-traversal (CVE-2016-6601) path traversal in path-traversal (CVE-2016-6601). Confidential information can be exposed externally.	High	Path Traversal Cwe 22 Zohocorp Webnms Framework	9 years ago
CVE-2016-7792	Vulnerability in ubiquiti-networks (CVE-2016-7792) vulnerability in ubiquiti-networks (CVE-2016-7792). Successful exploitation can lead to full system takeover.	High	Cwe 284 Ubiquiti Networks Unifi Ap Ac Lite Firmware Unifi Ap Ac Lite	9 years ago
CVE-2016-6521	Cross-Site Request Forgery (CSRF) in csrf (CVE-2016-6521) vulnerability in csrf (CVE-2016-6521). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Gopivotal Grails	9 years ago
CVE-2016-9012	Vulnerability in arista (CVE-2016-9012) vulnerability in arista (CVE-2016-9012). Successful exploitation can lead to full system takeover.	High	Cwe 264 Arista Cloudvision Portal	9 years ago
CVE-2016-9382	Vulnerability in dos (CVE-2016-9382) vulnerability in dos (CVE-2016-9382). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 264 Xen Citrix +1	9 years ago
CVE-2016-9386	Vulnerability in citrix (CVE-2016-9386) vulnerability in citrix (CVE-2016-9386). Successful exploitation can lead to full system takeover.	High	Cwe 264 Citrix Xenserver Xen	9 years ago
CVE-2016-9081	Vulnerability in joomla (CVE-2016-9081) vulnerability in joomla (CVE-2016-9081). Successful exploitation can lead to full system takeover.	Critical	Cwe 255 Joomla	9 years ago
CVE-2016-6582	Vulnerability in doorkeeper-project (CVE-2016-6582) vulnerability in doorkeeper-project (CVE-2016-6582). Data can be tampered with by attackers.	Critical	Ruby Cwe 254 Doorkeeper Project Doorkeeper	9 years ago
CVE-2016-1417	Vulnerability in snort (CVE-2016-1417) vulnerability in snort (CVE-2016-1417). Successful exploitation can lead to full system takeover.	High	Cwe 426 Snort	9 years ago
CVE-2016-6160	Vulnerability in dos (CVE-2016-6160) vulnerability in dos (CVE-2016-6160). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 399 Broadcom Tcpreplay	9 years ago
CVE-2016-4340	Vulnerability in gitlab (CVE-2016-4340) vulnerability in gitlab (CVE-2016-4340). Successful exploitation can lead to full system takeover.	High	Cwe 264 Gitlab	9 years ago
CVE-2016-5237	Vulnerability in valvesoftware (CVE-2016-5237) vulnerability in valvesoftware (CVE-2016-5237). Risk of unauthorized operations or information disclosure.	Medium	Cwe 264 Valvesoftware Steamos	9 years ago
CVE-2016-5720	Vulnerability in microsoft (CVE-2016-5720) vulnerability in microsoft (CVE-2016-5720). Successful exploitation can lead to full system takeover.	High	Cwe 264 Microsoft Skype	9 years ago
CVE-2016-5876	Vulnerability in owncloud (CVE-2016-5876) vulnerability in owncloud (CVE-2016-5876). Confidential information can be exposed externally.	Medium	Cwe 264 Owncloud	9 years ago
CVE-2016-1925	Vulnerability in c (CVE-2016-1925) vulnerability in c (CVE-2016-1925). Successful exploitation can lead to full system takeover.	Critical	C Cwe 191 Lha For Unix Project Lha For Unix	9 years ago
CVE-2016-6223	Vulnerability in c (CVE-2016-6223) vulnerability in c (CVE-2016-6223). Confidential information can be exposed externally.	Critical	C Denial of Service Cwe 189 Libtiff	9 years ago
CVE-2016-2783	Vulnerability in avaya (CVE-2016-2783) vulnerability in avaya (CVE-2016-2783). Successful exploitation can lead to full system takeover.	Critical	Cwe 19 Avaya Vsp Operating System Software	9 years ago
CVE-2016-5091	Vulnerability in typo3 (CVE-2016-5091) vulnerability in typo3 (CVE-2016-5091). Successful exploitation can lead to full system takeover.	High	Cwe 254 TYPO3	9 years ago
CVE-2016-3147	Buffer Overflow in dos (CVE-2016-3147) vulnerability in dos (CVE-2016-3147). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 119 Ivanti Landesk Management Suite	9 years ago
CVE-2016-5873	Buffer Overflow in pecl-http (CVE-2016-5873) vulnerability in pecl-http (CVE-2016-5873). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 PHP Pecl Http	9 years ago
CVE-2016-4010	Vulnerability in magento (CVE-2016-4010) vulnerability in magento (CVE-2016-4010). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 74 Magento	9 years ago
CVE-2016-4338	SQL Injection in zabbix (CVE-2016-4338) SQL injection in zabbix (CVE-2016-4338). Successful exploitation can lead to full system takeover.	High	Cwe 89 Zabbix	9 years ago
CVE-2016-5742	SQL Injection in sqli (CVE-2016-5742) SQL injection in sqli (CVE-2016-5742). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Sixapart Movable Type +1	9 years ago
CVE-2016-4793	Vulnerability in cakephp (CVE-2016-4793) vulnerability in cakephp (CVE-2016-4793). Data can be tampered with by attackers.	High	Cwe 20 Cakephp	9 years ago
CVE-2016-5119	Vulnerability in keepass (CVE-2016-5119) vulnerability in keepass (CVE-2016-5119). Successful exploitation can lead to full system takeover.	High	Cwe 20 Keepass	9 years ago
CVE-2016-4056	Cross-Site Scripting (XSS) in typo3 (CVE-2016-4056) cross-site scripting in typo3 (CVE-2016-4056). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 TYPO3	9 years ago
CVE-2016-6164	Vulnerability in c (CVE-2016-6164) vulnerability in c (CVE-2016-6164). Successful exploitation can lead to full system takeover.	Critical	C Cwe 190 Ffmpeg	9 years ago
CVE-2016-3177	Vulnerability in c (CVE-2016-3177) vulnerability in c (CVE-2016-3177). Successful exploitation can lead to full system takeover.	Critical	C Cwe 415 Cwe 416 Giflib Project +1	9 years ago
CVE-2016-2242	Code Injection in exponentcms (CVE-2016-2242) code injection in exponentcms (CVE-2016-2242). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 94 Exponentcms Exponent Cms	9 years ago
CVE-2016-5697	Vulnerability in onelogin (CVE-2016-5697) vulnerability in onelogin (CVE-2016-5697). Data can be tampered with by attackers.	High	Ruby Cwe 91 Onelogin Ruby Saml	9 years ago
CVE-2016-4055	Vulnerability in dos (CVE-2016-4055) vulnerability in dos (CVE-2016-4055). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Denial of Service Cwe 400 Momentjs +5	9 years ago
CVE-2016-4484	Authentication Bypass in cryptsetup-project (CVE-2016-4484) authentication bypass in cryptsetup-project (CVE-2016-4484). Successful exploitation can lead to full system takeover.	Medium	Cwe 287 Cryptsetup Project Cryptsetup	9 years ago
CVE-2014-8362	Vulnerability in vivint (CVE-2014-8362) vulnerability in vivint (CVE-2014-8362). Successful exploitation can lead to full system takeover.	Critical	Cwe 284 Vivint Sky Control Panel Firmware Sky Control Panel	9 years ago
CVE-2016-0769	SQL Injection in wordpress (CVE-2016-0769) SQL injection in wordpress (CVE-2016-0769). Successful exploitation can lead to full system takeover.	High	PHP WordPress SQL Injection Cwe 89 +2	9 years ago
CVE-2015-8971	Command Injection in debian (CVE-2015-8971) command injection in debian (CVE-2015-8971). Successful exploitation can lead to full system takeover.	High	Cwe 77 Debian Debian Linux Enlightenment +1	9 years ago
CVE-2015-7743	XXE (XML External Entity) in paessler (CVE-2015-7743) vulnerability in paessler (CVE-2015-7743). Confidential information can be exposed externally.	Medium	Cwe 611 Paessler Prtg Network Monitor	9 years ago

Vulnerabilities

🍪 About cookies