Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2017-7940	Vulnerability in c (CVE-2017-7940) vulnerability in c (CVE-2017-7940). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 400 Entropymine Imageworsener	9 years ago
CVE-2017-7939	Out-of-Bounds Read in c (CVE-2017-7939) vulnerability in c (CVE-2017-7939). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 125 Entropymine +1	9 years ago
CVE-2017-7897	Cross-Site Scripting (XSS) in mantisbt (CVE-2017-7897) cross-site scripting in mantisbt (CVE-2017-7897). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Mantisbt	9 years ago
CVE-2017-5653	Vulnerability in apache (CVE-2017-5653) vulnerability in apache (CVE-2017-5653). Risk of unauthorized operations or information disclosure.	Medium	Apache Cwe 295 Cxf	9 years ago
CVE-2017-7896	Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS. Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS.	Medium	Cross-Site Scripting Cwe 79 Trendmicro Interscan Messaging Security Virtual Appliance	9 years ago
CVE-2017-7645	Vulnerability in c (CVE-2017-7645) vulnerability in c (CVE-2017-7645). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 20 Linux +5	9 years ago
CVE-2017-5661	XXE (XML External Entity) in apache (CVE-2017-5661) vulnerability in apache (CVE-2017-5661). Confidential information can be exposed externally.	High	Apache Denial of Service Cwe 611 Formatting Objects Processor	9 years ago
CVE-2017-5662	XXE (XML External Entity) in apache (CVE-2017-5662) vulnerability in apache (CVE-2017-5662). Confidential information can be exposed externally.	High	Apache Denial of Service Cwe 611 Batik	9 years ago
CVE-2017-1161	Vulnerability in ibm (CVE-2017-1161) vulnerability in ibm (CVE-2017-1161). Risk of unauthorized operations or information disclosure.	High	Cwe 20 Ibm Api Connect	9 years ago
CVE-2017-7892	Vulnerability in capnproto (CVE-2017-7892) vulnerability in capnproto (CVE-2017-7892). Risk of unauthorized operations or information disclosure.	High	Cwe 20 Capnproto	9 years ago
CVE-2016-3038	Cross-Site Scripting (XSS) in ibm (CVE-2016-3038) cross-site scripting in ibm (CVE-2016-3038). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Ibm +1	9 years ago
CVE-2017-1160	Cross-Site Scripting (XSS) in ibm (CVE-2017-1160) cross-site scripting in ibm (CVE-2017-1160). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Ibm +1	9 years ago
CVE-2016-3037	Information Disclosure in ibm (CVE-2016-3037) vulnerability in ibm (CVE-2016-3037). Confidential information can be exposed externally.	Medium	Cwe 200 Ibm Cognos Business Intelligence	9 years ago
CVE-2017-5645	Unsafe Deserialization in apache (CVE-2017-5645) vulnerability in apache (CVE-2017-5645). Successful exploitation can lead to full system takeover.	Critical	Apache Cwe 502 Log4J Netapp +80	9 years ago
CVE-2016-3036	Buffer Overflow in dos (CVE-2016-3036) vulnerability in dos (CVE-2016-3036). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 119 Ibm Cognos Business Intelligence	9 years ago
CVE-2016-0228	Open Redirect in ibm (CVE-2016-0228) vulnerability in ibm (CVE-2016-0228). Risk of unauthorized operations or information disclosure.	Medium	Cwe 601 Ibm Marketing Platform	9 years ago
CVE-2017-5659	Vulnerability in apache (CVE-2017-5659) vulnerability in apache (CVE-2017-5659). Risk of unauthorized operations or information disclosure.	High	Apache Cwe 20 Traffic Server	9 years ago
CVE-2016-5396	Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack. Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack.	High	Apache Cwe 399 Traffic Server	9 years ago
CVE-2017-5647	Information Disclosure in c (CVE-2017-5647) vulnerability in c (CVE-2017-5647). Confidential information can be exposed externally.	High	C Apache Tomcat Cwe 200	9 years ago
CVE-2017-5650	Vulnerability in apache (CVE-2017-5650) vulnerability in apache (CVE-2017-5650). Risk of unauthorized operations or information disclosure.	High	Apache Tomcat Cwe 404	9 years ago
CVE-2017-5648	Vulnerability in apache (CVE-2017-5648) vulnerability in apache (CVE-2017-5648). Confidential information can be exposed externally.	Critical	Apache Tomcat Cwe 668	9 years ago
CVE-2016-7551	Vulnerability in dos (CVE-2016-7551) vulnerability in dos (CVE-2016-7551). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 399 Digium Asterisk +3	9 years ago
CVE-2016-6727	Vulnerability in google (CVE-2016-6727) vulnerability in google (CVE-2016-6727). Successful exploitation can lead to full system takeover.	Critical	Cwe 264 Google Android	9 years ago
CVE-2015-8256	Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras. Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.	Medium	Cross-Site Scripting Cwe 79 Axis Network Camera Firmware +10	9 years ago
CVE-2016-4868	Vulnerability in cybozu (CVE-2016-4868) vulnerability in cybozu (CVE-2016-4868). Risk of unauthorized operations or information disclosure.	Medium	Cwe 20 Cybozu Office	9 years ago
CVE-2016-4865	Cross-Site Scripting (XSS) in cybozu (CVE-2016-4865) cross-site scripting in cybozu (CVE-2016-4865). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Cybozu Office	9 years ago
CVE-2016-4866	Cross-Site Scripting (XSS) in cybozu (CVE-2016-4866) cross-site scripting in cybozu (CVE-2016-4866). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Cybozu Office	9 years ago
CVE-2016-4870	Cross-Site Scripting (XSS) in cybozu (CVE-2016-4870) cross-site scripting in cybozu (CVE-2016-4870). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Cybozu Office	9 years ago
CVE-2016-4874	Vulnerability in cybozu (CVE-2016-4874) vulnerability in cybozu (CVE-2016-4874). Risk of unauthorized operations or information disclosure.	Low	Cwe 284 Cybozu Office	9 years ago
CVE-2016-4867	Information Disclosure in cybozu (CVE-2016-4867) vulnerability in cybozu (CVE-2016-4867). Risk of unauthorized operations or information disclosure.	Medium	Cwe 200 Cybozu Office	9 years ago
CVE-2016-4869	Information Disclosure in cybozu (CVE-2016-4869) vulnerability in cybozu (CVE-2016-4869). Confidential information can be exposed externally.	Medium	Cwe 200 Cybozu Office	9 years ago
CVE-2016-4872	Information Disclosure in cybozu (CVE-2016-4872) vulnerability in cybozu (CVE-2016-4872). Risk of unauthorized operations or information disclosure.	Medium	Cwe 200 Cybozu Office	9 years ago
CVE-2016-4871	Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service. Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service.	Medium	Denial of Service Cwe 399 Cybozu Office	9 years ago
CVE-2017-7891	sourcebans-pp (SourceBans++) 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter. sourcebans-pp (SourceBans++) 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Sourcebans Pp Project +1	9 years ago
CVE-2017-7885	Vulnerability in c (CVE-2017-7885) vulnerability in c (CVE-2017-7885). Confidential information can be exposed externally.	High	C Denial of Service Cwe 190 Artifex +1	9 years ago
CVE-2017-7889	Vulnerability in c (CVE-2017-7889) vulnerability in c (CVE-2017-7889). Successful exploitation can lead to full system takeover.	High	C Cwe 732 Linux Linux Kernel +4	9 years ago
CVE-2017-7881	Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-7881) vulnerability in csrf (CVE-2017-7881). Successful exploitation can lead to full system takeover. Exploitable via `Referer header`.	High	PHP Cross-Site Request Forgery Cwe 352 Bigtreecms +1	9 years ago
CVE-2017-7882	Out-of-Bounds Write in libreoffice (CVE-2017-7882) out-of-bounds write in libreoffice (CVE-2017-7882). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Libreoffice	9 years ago
CVE-2017-7875	Out-of-Bounds Write in c (CVE-2017-7875) out-of-bounds write in c (CVE-2017-7875). Successful exploitation can lead to full system takeover.	Critical	C Cwe 787 Feh Project Feh	9 years ago
CVE-2017-7696	Vulnerability in dos (CVE-2017-7696) vulnerability in dos (CVE-2017-7696). Risk of unauthorized operations or information disclosure.	High	Java Denial of Service Cwe 770 Sap +1	9 years ago
CVE-2017-7717	SQL Injection in sqli (CVE-2017-7717) SQL injection in sqli (CVE-2017-7717). Successful exploitation can lead to full system takeover.	High	Java SQL Injection Cwe 89 Sap +1	9 years ago
CVE-2017-7878	SQL Injection in sqli (CVE-2017-7878) SQL injection in sqli (CVE-2017-7878). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Flatcore Flatcore Cms	9 years ago
CVE-2017-7879	SQL Injection in sqli (CVE-2017-7879) SQL injection in sqli (CVE-2017-7879). Confidential information can be exposed externally.	High	SQL Injection Cwe 89 Flatcore Flatcore Cms	9 years ago
CVE-2017-7871	Cross-Site Scripting (XSS) in tdm-project (CVE-2017-7871) cross-site scripting in tdm-project (CVE-2017-7871). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Tdm Project +1	9 years ago
CVE-2017-7690	OS Command Injection in proxifier (CVE-2017-7690) OS command injection in proxifier (CVE-2017-7690). Successful exploitation can lead to full system takeover.	High	Cwe 78 Proxifier	9 years ago
CVE-2017-7357	Unrestricted File Upload in atlassian (CVE-2017-7357) vulnerability in atlassian (CVE-2017-7357). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Atlassian Hipchat Server	9 years ago
CVE-2017-7877	CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations. CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.	High	Cross-Site Request Forgery Cwe 352 Flatcore Flatcore Cms	9 years ago
CVE-2016-7060	Information Disclosure in redhat (CVE-2016-7060) vulnerability in redhat (CVE-2016-7060). Confidential information can be exposed externally.	Medium	Cwe 200 Redhat Quickstart Cloud Installer	9 years ago
CVE-2016-1713	Unrestricted File Upload in vtiger (CVE-2016-1713) vulnerability in vtiger (CVE-2016-1713). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434 Vtiger Vtiger Crm	9 years ago
CVE-2016-0727	Vulnerability in canonical (CVE-2016-0727) vulnerability in canonical (CVE-2016-0727). Successful exploitation can lead to full system takeover.	High	Cwe 264 Canonical Ubuntu Linux	9 years ago

Vulnerabilities

🍪 About cookies