Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2017-14617	Vulnerability in freedesktop (CVE-2017-14617) vulnerability in freedesktop (CVE-2017-14617). Successful exploitation can lead to full system takeover.	High	Cwe 20 Freedesktop Poppler	8 years ago
CVE-2017-14618	Cross-Site Scripting (XSS) in phpmyfaq (CVE-2017-14618) cross-site scripting in phpmyfaq (CVE-2017-14618). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 phpMyFAQ	8 years ago
CVE-2017-14619	Cross-Site Scripting (XSS) in phpmyfaq (CVE-2017-14619) cross-site scripting in phpmyfaq (CVE-2017-14619). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 phpMyFAQ	8 years ago
CVE-2017-14615	Cross-Site Scripting (XSS) in watchguard (CVE-2017-14615) cross-site scripting in watchguard (CVE-2017-14615). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cwe 79 Watchguard Fireware	8 years ago
CVE-2015-9231	Information Disclosure in iterm2 (CVE-2015-9231) vulnerability in iterm2 (CVE-2015-9231). Confidential information can be exposed externally.	High	Cwe 200 Iterm2	8 years ago
CVE-2017-14616	Vulnerability in watchguard (CVE-2017-14616) vulnerability in watchguard (CVE-2017-14616). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Watchguard Fireware	8 years ago
CVE-2015-7347	Cross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1. Cross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1.	Medium	Cross-Site Scripting Cwe 79 Zcms Project Zcms	8 years ago
CVE-2015-6673	Use-after-free vulnerability in Decoder.cpp in libpgf before 6.15.32. Use-after-free vulnerability in Decoder.cpp in libpgf before 6.15.32.	Critical	C++ Cwe 416 Libpgf	8 years ago
CVE-2015-5608	Open redirect vulnerability in Joomla! CMS 3.0.0 through 3.4.1. Open redirect vulnerability in Joomla! CMS 3.0.0 through 3.4.1.	Medium	Cwe 601 Joomla	8 years ago
CVE-2017-14609	Vulnerability in kannel (CVE-2017-14609) vulnerability in kannel (CVE-2017-14609). Successful exploitation can lead to full system takeover.	High	Cwe 665 Kannel	8 years ago
CVE-2017-14610	Vulnerability in bareos (CVE-2017-14610) vulnerability in bareos (CVE-2017-14610). Successful exploitation can lead to full system takeover.	High	Cwe 665 Bareos	8 years ago
CVE-2015-2826	Information Disclosure in wordpress (CVE-2015-2826) vulnerability in wordpress (CVE-2015-2826). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 200 Simple Ads Manager Project Simple Ads Manager	8 years ago
CVE-2015-5395	Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0. Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0.	High	Cross-Site Request Forgery Cwe 352 Debian Debian Linux +2	8 years ago
CVE-2015-2927	Vulnerability in dos (CVE-2015-2927) vulnerability in dos (CVE-2015-2927). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 399 Nodejs Uronode +3	8 years ago
CVE-2015-0162	IBM Security SiteProtector System 3.0, 3.1, and 3.1.1 allows local users to gain privileges. IBM Security SiteProtector System 3.0, 3.1, and 3.1.1 allows local users to gain privileges.	High	Cwe 264 Ibm Security Siteprotector System	8 years ago
CVE-2015-1865	fts.c in coreutils 8.4 allows local users to delete arbitrary files. fts.c in coreutils 8.4 allows local users to delete arbitrary files.	Medium	C Cwe 362 Cwe 367 Gnu +1	8 years ago
CVE-2014-9758	Cross-site scripting (XSS) vulnerability in Magento E-Commerce Platform 1.9.0.1. Cross-site scripting (XSS) vulnerability in Magento E-Commerce Platform 1.9.0.1.	Medium	Cross-Site Scripting Cwe 79 Magento	8 years ago
CVE-2015-1866	Cross-site scripting (XSS) vulnerability in Ember.js 1.10.x before 1.10.1 and 1.11.x before 1.11.2. Cross-site scripting (XSS) vulnerability in Ember.js 1.10.x before 1.10.1 and 1.11.x before 1.11.2.	Medium	JavaScript Cross-Site Scripting Cwe 79 Emberjs	8 years ago
CVE-2015-4707	Cross-Site Scripting (XSS) in ipython (CVE-2015-4707) cross-site scripting in ipython (CVE-2015-4707). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Ipython	8 years ago
CVE-2015-3890	Use-after-free vulnerability in Open Litespeed before 1.3.10. Use-after-free vulnerability in Open Litespeed before 1.3.10.	High	Cwe 416 Litespeedtech Openlitespeed	8 years ago
CVE-2016-8738	Vulnerability in apache (CVE-2016-8738) vulnerability in apache (CVE-2016-8738). Risk of unauthorized operations or information disclosure.	Medium	Apache Cwe 20 Struts	8 years ago
CVE-2017-12611	Vulnerability in apache (CVE-2017-12611) vulnerability in apache (CVE-2017-12611). Successful exploitation can lead to full system takeover.	Critical	Apache Remote Code Execution Cwe 20 Struts	8 years ago
CVE-2017-9793	Vulnerability in apache (CVE-2017-9793) vulnerability in apache (CVE-2017-9793). Risk of unauthorized operations or information disclosure.	High	Apache Denial of Service Cwe 20 Struts	8 years ago
CVE-2017-9804	Vulnerability in apache (CVE-2017-9804) vulnerability in apache (CVE-2017-9804). Risk of unauthorized operations or information disclosure.	High	Apache Cwe 20 Struts	8 years ago
CVE-2017-14607	Out-of-Bounds Read in c (CVE-2017-14607) vulnerability in c (CVE-2017-14607). Confidential information can be exposed externally.	High	C Cwe 125 Imagemagick Canonical +3	8 years ago
CVE-2017-14608	Out-of-Bounds Read in c (CVE-2017-14608) vulnerability in c (CVE-2017-14608). Confidential information can be exposed externally.	Critical	C C++ Cwe 125 Libraw	8 years ago
CVE-2016-6795	Path Traversal in apache (CVE-2016-6795) path traversal in apache (CVE-2016-6795). Successful exploitation can lead to full system takeover.	Critical	Apache Path Traversal Cwe 22 Struts	8 years ago
CVE-2017-9649	Vulnerability in mirion-technologies (CVE-2017-9649) vulnerability in mirion-technologies (CVE-2017-9649). Risk of unauthorized operations or information disclosure.	Medium	Cwe 321 Cwe 798 Mirion Technologies Dmc 3000 Firmware +13	8 years ago
CVE-2017-9645	Vulnerability in mirion (CVE-2017-9645) vulnerability in mirion (CVE-2017-9645). Confidential information can be exposed externally.	Medium	Cwe 326 Mirion Dmc 3000 Transmitter Firmware Dmc 3000 Transmitter +14	8 years ago
CVE-2015-4075	Vulnerability in helpdeskpro (CVE-2015-4075) vulnerability in helpdeskpro (CVE-2015-4075). Successful exploitation can lead to full system takeover.	High	Cwe 74 Helpdeskpro Helpdesk Pro	8 years ago
CVE-2015-8224	Information Disclosure in huawei (CVE-2015-8224) vulnerability in huawei (CVE-2015-8224). Risk of unauthorized operations or information disclosure.	Low	Cwe 200 Huawei P8 Firmware P8	8 years ago
CVE-2017-14339	Vulnerability in yadifa (CVE-2017-14339) vulnerability in yadifa (CVE-2017-14339). Risk of unauthorized operations or information disclosure.	High	Cwe 835 Yadifa	8 years ago
CVE-2015-5607	Cross-site request forgery in the REST API in IPython 2 and 3. Cross-site request forgery in the REST API in IPython 2 and 3.	High	Cwe 352 Ipython Fedoraproject Fedora	8 years ago
CVE-2015-4074	Path Traversal in path-traversal (CVE-2015-4074) path traversal in path-traversal (CVE-2015-4074). Confidential information can be exposed externally.	High	Path Traversal Cwe 22 Helpdesk Pro Project Helpdesk Pro	8 years ago
CVE-2015-4073	SQL Injection in sqli (CVE-2015-4073) SQL injection in sqli (CVE-2015-4073). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Helpdesk Pro Project Helpdesk Pro	8 years ago
CVE-2015-5179	FreeIPA might display user data improperly via vectors involving non-printable characters. FreeIPA might display user data improperly via vectors involving non-printable characters.	High	Cwe 20 Freeipa	8 years ago
CVE-2015-5248	Reflected file download vulnerability in Red Hat Feedhenry Enterprise Mobile Application Platform. Reflected file download vulnerability in Red Hat Feedhenry Enterprise Mobile Application Platform.	Medium	Cwe 20 Redhat Feedhenry Enterprise Mobile Application Platform	8 years ago
CVE-2017-7924	Vulnerability in dos (CVE-2017-7924) vulnerability in dos (CVE-2017-7924). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Rockwellautomation 1763 L16Bwa Firmware +7	8 years ago
CVE-2015-4072	Cross-Site Scripting (XSS) in helpdesk-pro-project (CVE-2015-4072) cross-site scripting in helpdesk-pro-project (CVE-2015-4072). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Helpdesk Pro Project Helpdesk Pro	8 years ago
CVE-2017-9607	Vulnerability in dos (CVE-2017-9607) vulnerability in dos (CVE-2017-9607). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 190 Arm Arm Trusted Firmware +2	8 years ago
CVE-2015-1329	Use-After-Free in canonical (CVE-2015-1329) vulnerability in canonical (CVE-2015-1329). Successful exploitation can lead to full system takeover.	High	Cwe 416 Canonical Ubuntu Linux	8 years ago
CVE-2017-8770	Information Disclosure in twsz (CVE-2017-8770) vulnerability in twsz (CVE-2017-8770). Confidential information can be exposed externally.	High	Cwe 200 Twsz Wifi Repeater Firmware Wifi Repeater	8 years ago
CVE-2017-8771	Vulnerability in twsz (CVE-2017-8771) vulnerability in twsz (CVE-2017-8771). Successful exploitation can lead to full system takeover.	Critical	Cwe 798 Twsz Wifi Repeater Firmware Wifi Repeater	8 years ago
CVE-2017-8772	Vulnerability in twsz (CVE-2017-8772) vulnerability in twsz (CVE-2017-8772). Successful exploitation can lead to full system takeover.	Critical	Cwe 798 Twsz Wifi Repeater Firmware Wifi Repeater	8 years ago
CVE-2017-14604	Vulnerability in c (CVE-2017-14604) vulnerability in c (CVE-2017-14604). Data can be tampered with by attackers.	Medium	C Cwe 20 Gnome Nautilus +2	8 years ago
CVE-2015-4682	Information Disclosure in polycom (CVE-2015-4682) vulnerability in polycom (CVE-2015-4682). Confidential information can be exposed externally.	Medium	Cwe 200 Polycom Realpresence Resource Manager	8 years ago
CVE-2015-4683	Vulnerability in polycom (CVE-2015-4683) vulnerability in polycom (CVE-2015-4683). Successful exploitation can lead to full system takeover.	Critical	Cwe 264 Polycom Realpresence Resource Manager	8 years ago
CVE-2015-4685	Vulnerability in polycom (CVE-2015-4685) vulnerability in polycom (CVE-2015-4685). Successful exploitation can lead to full system takeover.	High	Cwe 264 Polycom Realpresence Resource Manager	8 years ago
CVE-2014-8684	Vulnerability in codeigniter (CVE-2014-8684) vulnerability in codeigniter (CVE-2014-8684). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 310 CodeIgniter Kohanaframework +1	8 years ago
CVE-2014-8686	Vulnerability in codeigniter (CVE-2014-8686) vulnerability in codeigniter (CVE-2014-8686). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 310 CodeIgniter	8 years ago

Vulnerabilities

🍪 About cookies