Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2023-42426	Cross-Site Scripting (XSS) in froala (CVE-2023-42426) cross-site scripting in froala (CVE-2023-42426). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Froala Froala Editor	2 years ago
CVE-2023-43141	Vulnerability in totolink (CVE-2023-43141) vulnerability in totolink (CVE-2023-43141). Successful exploitation can lead to full system takeover.	Critical	Cwe 284 Totolink A3700R Firmware A3700R +2	2 years ago
CVE-2023-41991 KEV	[KEV] Vulnerability in Apple multiple-products (CVE-2023-41991) vulnerability in Apple multiple-products (CVE-2023-41991). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Multiple Products Cwe 295	2 years ago
CVE-2023-41992 KEV	[KEV] Vulnerability in Apple multiple-products (CVE-2023-41992) vulnerability in Apple multiple-products (CVE-2023-41992). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Multiple Products Cwe 754	2 years ago
CVE-2023-41993 KEV	[KEV] Vulnerability in Apple java (CVE-2023-41993) vulnerability in Apple java (CVE-2023-41993). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `1.8.0, 8.0.411` or later.	High	Apple Multiple Products Cwe 754 Bitnami +3	2 years ago
CVE-2023-34576	SQL Injection in sqli (CVE-2023-34576) SQL injection in sqli (CVE-2023-34576). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Store Opart +1	2 years ago
CVE-2023-42456	Path Traversal in sudo-rs (CVE-2023-42456) path traversal in sudo-rs (CVE-2023-42456). Risk of unauthorized operations or information disclosure. Exploitable via ``useradd``. Mitigation: upgrade to `0.2.1` or later.	Low	Path Traversal Cwe 22 Cwe 23 Memorysafety +1	2 years ago
CVE-2023-34575	SQL Injection in sqli (CVE-2023-34575) SQL injection in sqli (CVE-2023-34575). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Store Opart Opart Save Cart	2 years ago
CVE-2023-38888	Cross-Site Scripting (XSS) in dolibarr (CVE-2023-38888) cross-site scripting in dolibarr (CVE-2023-38888). Successful exploitation can lead to full system takeover.	Critical	Cross-Site Scripting Cwe 79 Dolibarr Dolibarr Erpcrm	2 years ago
CVE-2023-38886	OS Command Injection in dolibarr (CVE-2023-38886) OS command injection in dolibarr (CVE-2023-38886). Successful exploitation can lead to full system takeover.	High	Cwe 78 Dolibarr Dolibarr Erpcrm	2 years ago
CVE-2023-38887	Unrestricted File Upload in dolibarr (CVE-2023-38887) vulnerability in dolibarr (CVE-2023-38887). Successful exploitation can lead to full system takeover.	High	Cwe 434 Dolibarr Dolibarr Erpcrm	2 years ago
CVE-2023-40933	SQL Injection in sqli (CVE-2023-40933) SQL injection in sqli (CVE-2023-40933). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Nagios Nagios Xi	2 years ago
CVE-2023-40934	SQL Injection in sqli (CVE-2023-40934) SQL injection in sqli (CVE-2023-40934). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Nagios Nagios Xi	2 years ago
CVE-2023-40932	Cross-Site Scripting (XSS) in nagios (CVE-2023-40932) cross-site scripting in nagios (CVE-2023-40932). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Nagios +1	2 years ago
CVE-2023-40931	SQL Injection in sqli (CVE-2023-40931) SQL injection in sqli (CVE-2023-40931). Confidential information can be exposed externally.	Medium	PHP SQL Injection Cwe 89 Nagios +1	2 years ago
CVE-2023-42399	Cross-Site Scripting (XSS) in csharp (CVE-2023-42399) cross-site scripting in csharp (CVE-2023-42399). Risk of unauthorized operations or information disclosure.	Medium	C# Cross-Site Scripting Cwe 79 Xdsoft +1	2 years ago
CVE-2023-28434 KEV	[KEV] Privilege Escalation in minio (CVE-2023-28434) vulnerability in minio (CVE-2023-28434). Risk of unauthorized operations or information disclosure. Exploitable via ``PostPolicyBucket``. Listed in CISA KEV — actively exploited.	High	Minio Cwe 269	2 years ago
CVE-2023-39046	Vulnerability in tonton-tei-waiting-project (CVE-2023-39046) vulnerability in tonton-tei-waiting-project (CVE-2023-39046). Risk of unauthorized operations or information disclosure.	Medium	Cwe 668 Tonton Tei Waiting Project Tonton Tei Waiting	2 years ago
CVE-2023-39049	Vulnerability in youmart-tokunaga-project (CVE-2023-39049) vulnerability in youmart-tokunaga-project (CVE-2023-39049). Risk of unauthorized operations or information disclosure.	Medium	Cwe 668 Youmart Tokunaga Project Youmart Tokunaga	2 years ago
CVE-2023-39056	Vulnerability in coffee-jumbo-project (CVE-2023-39056) vulnerability in coffee-jumbo-project (CVE-2023-39056). Risk of unauthorized operations or information disclosure.	Medium	Cwe 668 Coffee Jumbo Project Coffee Jumbo	2 years ago
CVE-2023-39043	Vulnerability in ykc (CVE-2023-39043) vulnerability in ykc (CVE-2023-39043). Risk of unauthorized operations or information disclosure.	Medium	Cwe 668 Ykc Tokushima Awayokocho	2 years ago
CVE-2023-39058	Vulnerability in the-b-members-card-project (CVE-2023-39058) vulnerability in the-b-members-card-project (CVE-2023-39058). Risk of unauthorized operations or information disclosure.	Medium	Cwe 668 The B Members Card Project The B Members Card	2 years ago
CVE-2023-39039	Vulnerability in camp-style-project-line-project (CVE-2023-39039) vulnerability in camp-style-project-line-project (CVE-2023-39039). Risk of unauthorized operations or information disclosure.	Medium	Cwe 668 Camp Style Project Line Project Camp Style Project Line	2 years ago
CVE-2023-39040	Vulnerability in cheese-cafe-line-project (CVE-2023-39040) vulnerability in cheese-cafe-line-project (CVE-2023-39040). Risk of unauthorized operations or information disclosure.	Medium	Cwe 668 Cheese Cafe Line Project Cheese Cafe Line	2 years ago
CVE-2023-4527	Vulnerability in gnu (CVE-2023-4527) vulnerability in gnu (CVE-2023-4527). Risk of unauthorized operations or information disclosure.	Medium	Cwe 121 Cwe 125 Gnu Glibc +34	2 years ago
CVE-2023-4806	Use-After-Free in gnu (CVE-2023-4806) vulnerability in gnu (CVE-2023-4806). Risk of unauthorized operations or information disclosure.	Medium	Cwe 416 Gnu Glibc Redhat +22	2 years ago
CVE-2023-41595	An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password. An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password.	High	Cwe 798 Vaxilu X Ui	2 years ago
CVE-2022-22265 KEV	[KEV] Vulnerability in Samsung mobile-devices (CVE-2022-22265) vulnerability in Samsung mobile-devices (CVE-2022-22265). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Samsung Mobile Devices Cwe 703	2 years ago
CVE-2014-8361 KEV	[KEV] Vulnerability in Realtek sdk (CVE-2014-8361) vulnerability in Realtek sdk (CVE-2014-8361). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Realtek Sdk Cwe 20	2 years ago
CVE-2017-6884 KEV	[KEV] OS Command Injection in Zyxel emg2926-routers (CVE-2017-6884) OS command injection in Zyxel emg2926-routers (CVE-2017-6884). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Zyxel Emg2926 Routers Cwe 78	2 years ago
CVE-2023-41325	Vulnerability in trustedfirmware (CVE-2023-41325) vulnerability in trustedfirmware (CVE-2023-41325). Confidential information can be exposed externally. Exploitable via ``shdr_verify_signature``.	High	Cwe 415 Trustedfirmware Op Tee	2 years ago
CVE-2023-4835	SQL Injection in sqli (CVE-2023-4835) SQL injection in sqli (CVE-2023-4835). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Petroleum Management Software Application Project Petroleum Management Software Application	2 years ago
CVE-2023-4833	SQL Injection in sqli (CVE-2023-4833) SQL injection in sqli (CVE-2023-4833). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Besttem Network Marketing Project Besttem Network Marketing	2 years ago
CVE-2023-4663	Cross-Site Scripting (XSS) in adobe (CVE-2023-4663) cross-site scripting in adobe (CVE-2023-4663). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 80 Cwe 79 Adobe +1	2 years ago
CVE-2023-4664	Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege... Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege...	High	Privilege Escalation Cwe 276 Adobe Connect	2 years ago
CVE-2023-4662	Vulnerability in adobe (CVE-2023-4662) vulnerability in adobe (CVE-2023-4662). Successful exploitation can lead to full system takeover.	Critical	Cwe 250 Cwe 269 Adobe Connect	2 years ago
CVE-2023-4665	Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows... Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows...	High	Privilege Escalation Cwe 279 Cwe 732 Adobe +1	2 years ago
CVE-2023-4661	SQL Injection in sqli (CVE-2023-4661) SQL injection in sqli (CVE-2023-4661). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Adobe Connect	2 years ago
CVE-2023-4670	SQL Injection in sqli (CVE-2023-4670) SQL injection in sqli (CVE-2023-4670). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Innosa Probbys Project Innosa Probbys	2 years ago
CVE-2023-4231	SQL Injection in sqli (CVE-2023-4231) SQL injection in sqli (CVE-2023-4231). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Cevik Informatics Online Payment System	2 years ago
CVE-2023-4673	SQL Injection in sqli (CVE-2023-4673) SQL injection in sqli (CVE-2023-4673). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Sanalogi Turasistan	2 years ago
CVE-2023-4830	SQL Injection in sqli (CVE-2023-4830) SQL injection in sqli (CVE-2023-4830). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Turaconsulting Signalix	2 years ago
CVE-2023-40983	Cross-Site Scripting (XSS) in webmin (CVE-2023-40983) cross-site scripting in webmin (CVE-2023-40983). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Webmin	2 years ago
CVE-2023-40982	Cross-Site Scripting (XSS) in webmin (CVE-2023-40982) cross-site scripting in webmin (CVE-2023-40982). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Webmin	2 years ago
CVE-2023-40984	Cross-Site Scripting (XSS) in webmin (CVE-2023-40984) cross-site scripting in webmin (CVE-2023-40984). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Webmin	2 years ago
CVE-2023-40985	Cross-Site Scripting (XSS) in webmin (CVE-2023-40985) cross-site scripting in webmin (CVE-2023-40985). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Webmin	2 years ago
CVE-2023-40986	Cross-Site Scripting (XSS) in webmin (CVE-2023-40986) cross-site scripting in webmin (CVE-2023-40986). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Webmin	2 years ago
CVE-2023-4766	SQL Injection in sqli (CVE-2023-4766) SQL injection in sqli (CVE-2023-4766). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Movus	2 years ago
CVE-2023-4676	Cross-Site Scripting (XSS) in yordam (CVE-2023-4676) cross-site scripting in yordam (CVE-2023-4676). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Yordam Medaspro	2 years ago
CVE-2023-4702	Vulnerability in yepas (CVE-2023-4702) vulnerability in yepas (CVE-2023-4702). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 288 Cwe 306 Yepas +1	2 years ago

Vulnerabilities

🍪 About cookies