Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2023-34842	Code Injection in dedecms (CVE-2023-34842) code injection in dedecms (CVE-2023-34842). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 94 Dedecms	2 years ago
CVE-2023-37647	SQL Injection in sqli (CVE-2023-37647) SQL injection in sqli (CVE-2023-37647). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Sem Cms +1	2 years ago
CVE-2023-35081 KEV	[KEV] Path Traversal in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35081) path traversal in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35081). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Ivanti Endpoint Manager Mobile Epmm Cwe 22	2 years ago
CVE-2020-22623	Path Traversal in path-traversal (CVE-2020-22623) path traversal in path-traversal (CVE-2020-22623). Confidential information can be exposed externally.	High	Path Traversal Cwe 22 Insightsoftware Jreport	2 years ago
CVE-2021-36580	Open Redirect in icewarp (CVE-2021-36580) vulnerability in icewarp (CVE-2021-36580). Risk of unauthorized operations or information disclosure.	Medium	Cwe 601 Icewarp Icewarp Server Mail Server	2 years ago
CVE-2023-37580 KEV	[KEV] Cross-Site Scripting (XSS) in Synacor zimbra-collaboration-suite-zcs (CVE-2023-37580) cross-site scripting in Synacor zimbra-collaboration-suite-zcs (CVE-2023-37580). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Synacor Zimbra Collaboration Suite Zcs Cwe 79	2 years ago
CVE-2023-35066	SQL Injection in sqli (CVE-2023-35066) SQL injection in sqli (CVE-2023-35066). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Infodrom E Invoice Approval System	2 years ago
CVE-2023-35067	Vulnerability in infodrom (CVE-2023-35067) vulnerability in infodrom (CVE-2023-35067). Confidential information can be exposed externally.	High	Cwe 256 Cwe 522 Infodrom E Invoice Approval System	2 years ago
CVE-2023-3046	SQL Injection in sqli (CVE-2023-3046) SQL injection in sqli (CVE-2023-3046). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Biltay Scienta	2 years ago
CVE-2023-35078 KEV	[KEV] Authentication Bypass in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35078) authentication bypass in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35078). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Ivanti Endpoint Manager Mobile Epmm Cwe 287	2 years ago
CVE-2023-3640	Vulnerability in c (CVE-2023-3640) vulnerability in c (CVE-2023-3640). Successful exploitation can lead to full system takeover.	High	C Cwe 385 Cwe 203 Linux +3	2 years ago
CVE-2023-3019	Use-After-Free in dos (CVE-2023-3019) vulnerability in dos (CVE-2023-3019). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 416 Qemu Redhat +1	2 years ago
CVE-2021-35391	SSRF (Server-Side Request Forgery) in deskpro (CVE-2021-35391) SSRF in deskpro (CVE-2021-35391). Successful exploitation can lead to full system takeover.	High	Cwe 918 Deskpro	2 years ago
CVE-2023-37728	Cross-Site Scripting (XSS) in icewarp (CVE-2023-37728) cross-site scripting in icewarp (CVE-2023-37728). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Icewarp	2 years ago
CVE-2023-29298 KEV	[KEV] Vulnerability in Adobe coldfusion (CVE-2023-29298) vulnerability in Adobe coldfusion (CVE-2023-29298). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Adobe Coldfusion Cwe 284	2 years ago
CVE-2023-38205 KEV	[KEV] Vulnerability in Adobe coldfusion (CVE-2023-38205) vulnerability in Adobe coldfusion (CVE-2023-38205). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Adobe Coldfusion Cwe 284	2 years ago
CVE-2023-37733	Cross-Site Scripting (XSS) in tduckcloud (CVE-2023-37733) cross-site scripting in tduckcloud (CVE-2023-37733). Risk of unauthorized operations or information disclosure.	Medium	Cwe 79 Tduckcloud Tduck Platform	2 years ago
CVE-2023-3519 KEV	[KEV] Code Injection in Citrix netscaler-adc-and-netscaler-gateway (CVE-2023-3519) code injection in Citrix netscaler-adc-and-netscaler-gateway (CVE-2023-3519). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Citrix Netscaler Adc And Netscaler Gateway Cwe 94	2 years ago
CVE-2023-30383	Vulnerability in dos (CVE-2023-30383) vulnerability in dos (CVE-2023-30383). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 120 Tp Link Archer C2 V1 Firmware +5	2 years ago
CVE-2023-3376	SQL Injection in sqli (CVE-2023-3376) SQL injection in sqli (CVE-2023-3376). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Dijital Zekiweb	2 years ago
CVE-2023-2963	SQL Injection in sqli (CVE-2023-2963) SQL injection in sqli (CVE-2023-2963). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Olivaekspertiz Oliva Ekspertiz	2 years ago
CVE-2023-2960	Cross-Site Scripting (XSS) in olivaekspertiz (CVE-2023-2960) cross-site scripting in olivaekspertiz (CVE-2023-2960). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Olivaekspertiz Oliva Ekspertiz	2 years ago
CVE-2023-2959	Authentication Bypass in olivaekspertiz (CVE-2023-2959) authentication bypass in olivaekspertiz (CVE-2023-2959). Confidential information can be exposed externally.	High	Authentication Bypass Cwe 305 Cwe 287 Olivaekspertiz +1	2 years ago
CVE-2023-36884 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2023-36884) vulnerability in Microsoft windows (CVE-2023-36884). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 362	2 years ago
CVE-2023-31821	Vulnerability in albis (CVE-2023-31821) vulnerability in albis (CVE-2023-31821). Confidential information can be exposed externally.	High	Cwe 312 Albis	3 years ago
CVE-2023-31824	Vulnerability in dericia (CVE-2023-31824) vulnerability in dericia (CVE-2023-31824). Confidential information can be exposed externally.	High	Cwe 522 Dericia Delicia	3 years ago
CVE-2023-35070	SQL Injection in sqli (CVE-2023-35070) SQL injection in sqli (CVE-2023-35070). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Vegagroup Web Collection	3 years ago
CVE-2023-2957	SQL Injection in sqli (CVE-2023-2957) SQL injection in sqli (CVE-2023-2957). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Lisayazilim Florist Site	3 years ago
CVE-2023-1547	SQL Injection in sqli (CVE-2023-1547) SQL injection in sqli (CVE-2023-1547). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Elra Parkmatik	3 years ago
CVE-2023-3319	Cross-Site Scripting (XSS) in idisplay (CVE-2023-3319) cross-site scripting in idisplay (CVE-2023-3319). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Idisplay Platplay Ds	3 years ago
CVE-2023-35069	Path Traversal in path-traversal (CVE-2023-35069) path traversal in path-traversal (CVE-2023-35069). Confidential information can be exposed externally.	High	Path Traversal Cwe 22 Biges Bullwark Momentum Series	3 years ago
CVE-2022-29303 KEV	[KEV] OS Command Injection in Solarview compact (CVE-2022-29303) OS command injection in Solarview compact (CVE-2022-29303). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Solarview Compact Cwe 78	3 years ago
CVE-2020-20021	Vulnerability in dos (CVE-2020-20021) vulnerability in dos (CVE-2020-20021). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Mikrotik Routeros	3 years ago
CVE-2023-33162	Microsoft Excel Information Disclosure Vulnerability Microsoft Excel Information Disclosure Vulnerability	Medium	Cwe 125 Microsoft 365 Apps Office +2	3 years ago
CVE-2023-33161	Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 415 Microsoft 365 Apps +2	3 years ago
CVE-2023-33149	Microsoft Office Graphics Remote Code Execution Vulnerability Microsoft Office Graphics Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 416 Microsoft 365 Apps +2	3 years ago
CVE-2023-33153	Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook Remote Code Execution Vulnerability	Medium	Remote Code Execution Cwe 416 Microsoft 365 Apps +2	3 years ago
CVE-2023-33152	Microsoft ActiveX Remote Code Execution Vulnerability Microsoft ActiveX Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Microsoft 365 Apps +2	3 years ago
CVE-2023-33148	Microsoft Office Elevation of Privilege Vulnerability Microsoft Office Elevation of Privilege Vulnerability	High	Cwe 59 Microsoft 365 Apps Office +1	3 years ago
CVE-2023-33158	Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 191 Microsoft 365 Apps +2	3 years ago
CVE-2023-33150	Microsoft Office Security Feature Bypass Vulnerability Microsoft Office Security Feature Bypass Vulnerability	Critical	Cwe 693 Microsoft 365 Apps Office +2	3 years ago
CVE-2023-31818	Vulnerability in marukyu (CVE-2023-31818) vulnerability in marukyu (CVE-2023-31818). Confidential information can be exposed externally.	High	Cwe 668 Marukyu Marukyu Line	3 years ago
CVE-2020-20118	Vulnerability in dos (CVE-2020-20118) vulnerability in dos (CVE-2020-20118). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 120 Avast Antivirus	3 years ago
CVE-2023-35311 KEV	[KEV] Vulnerability in Microsoft outlook (CVE-2023-35311) vulnerability in Microsoft outlook (CVE-2023-35311). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Outlook Cwe 367	3 years ago
CVE-2023-36874 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2023-36874) vulnerability in Microsoft windows (CVE-2023-36874). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 59	3 years ago
CVE-2022-31199 KEV	[KEV] Unsafe Deserialization in Netwrix auditor (CVE-2022-31199) vulnerability in Netwrix auditor (CVE-2022-31199). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Netwrix Auditor Cwe 502 Cwe 122	3 years ago
CVE-2023-3271	Vulnerability in sick (CVE-2023-3271) vulnerability in sick (CVE-2023-3271). Confidential information can be exposed externally.	High	Cwe 284 Sick Icr890 4 Firmware Icr890 4	3 years ago
CVE-2023-3273	Vulnerability in sick (CVE-2023-3273) vulnerability in sick (CVE-2023-3273). Risk of unauthorized operations or information disclosure.	High	Cwe 284 Sick Icr890 4 Firmware Icr890 4	3 years ago
CVE-2023-3045	SQL Injection in sqli (CVE-2023-3045) SQL injection in sqli (CVE-2023-3045). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Tise Parking Web Report	3 years ago
CVE-2023-35699	Vulnerability in sick (CVE-2023-35699) vulnerability in sick (CVE-2023-35699). Confidential information can be exposed externally.	Medium	Cwe 313 Cwe 312 Sick Icr890 4 Firmware +1	3 years ago

Vulnerabilities

🍪 About cookies