Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2016-6335	Information Disclosure in mediawiki (CVE-2016-6335) vulnerability in mediawiki (CVE-2016-6335). Confidential information can be exposed externally.	High	PHP Cwe 200 Mediawiki	9 years ago
CVE-2017-7692	Vulnerability in c (CVE-2017-7692) vulnerability in c (CVE-2017-7692). Successful exploitation can lead to full system takeover.	High	PHP C Remote Code Execution Cwe 20 +1	9 years ago
CVE-2017-7283	Vulnerability in unitrends (CVE-2017-7283) vulnerability in unitrends (CVE-2017-7283). Successful exploitation can lead to full system takeover.	High	PHP Cwe 20 Unitrends Enterprise Backup	9 years ago
CVE-2017-7979	Vulnerability in c (CVE-2017-7979) vulnerability in c (CVE-2017-7979). Successful exploitation can lead to full system takeover.	High	C Denial of Service Cwe 20 Linux +1	9 years ago
CVE-2017-7978	Information Disclosure in samsung (CVE-2017-7978) vulnerability in samsung (CVE-2017-7978). Confidential information can be exposed externally.	High	Cwe 200 Samsung Samsung Mobile	9 years ago
CVE-2017-7976	Vulnerability in c (CVE-2017-7976) vulnerability in c (CVE-2017-7976). Confidential information can be exposed externally.	High	C Denial of Service Cwe 190 Artifex +1	9 years ago
CVE-2013-7463	Vulnerability in aescrypt-project (CVE-2013-7463) vulnerability in aescrypt-project (CVE-2013-7463). Confidential information can be exposed externally.	High	Ruby Cwe 330 Aescrypt Project Aescrypt	9 years ago
CVE-2017-7975	Vulnerability in c (CVE-2017-7975) vulnerability in c (CVE-2017-7975). Successful exploitation can lead to full system takeover.	High	C Denial of Service Cwe 190 Artifex +1	9 years ago
CVE-2017-7963	Vulnerability in dos (CVE-2017-7963) vulnerability in dos (CVE-2017-7963). Risk of unauthorized operations or information disclosure.	High	PHP Denial of Service Cwe 770	9 years ago
CVE-2017-7961	Buffer Overflow in c (CVE-2017-7961) vulnerability in c (CVE-2017-7961). Successful exploitation can lead to full system takeover.	High	C Denial of Service Cwe 119 Gnome +1	9 years ago
CVE-2017-7948	Vulnerability in dos (CVE-2017-7948) vulnerability in dos (CVE-2017-7948). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 190 Artifex Ghostscript	9 years ago
CVE-2017-7850	Vulnerability in privilege-escalation (CVE-2017-7850) vulnerability in privilege-escalation (CVE-2017-7850). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 732 Tenable Nessus	9 years ago
CVE-2016-10345	Vulnerability in nginx (CVE-2016-10345) vulnerability in nginx (CVE-2016-10345). Successful exploitation can lead to full system takeover.	High	nginx Cwe 264 Phusion Passenger	9 years ago
CVE-2017-7645	Vulnerability in c (CVE-2017-7645) vulnerability in c (CVE-2017-7645). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 20 Linux +5	9 years ago
CVE-2017-5661	XXE (XML External Entity) in apache (CVE-2017-5661) vulnerability in apache (CVE-2017-5661). Confidential information can be exposed externally.	High	Apache Denial of Service Cwe 611 Formatting Objects Processor	9 years ago
CVE-2017-5662	XXE (XML External Entity) in apache (CVE-2017-5662) vulnerability in apache (CVE-2017-5662). Confidential information can be exposed externally.	High	Apache Denial of Service Cwe 611 Batik	9 years ago
CVE-2017-1161	Vulnerability in ibm (CVE-2017-1161) vulnerability in ibm (CVE-2017-1161). Risk of unauthorized operations or information disclosure.	High	Cwe 20 Ibm Api Connect	9 years ago
CVE-2017-7892	Vulnerability in capnproto (CVE-2017-7892) vulnerability in capnproto (CVE-2017-7892). Risk of unauthorized operations or information disclosure.	High	Cwe 20 Capnproto	9 years ago
CVE-2016-3036	Buffer Overflow in dos (CVE-2016-3036) vulnerability in dos (CVE-2016-3036). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 119 Ibm Cognos Business Intelligence	9 years ago
CVE-2017-5659	Vulnerability in apache (CVE-2017-5659) vulnerability in apache (CVE-2017-5659). Risk of unauthorized operations or information disclosure.	High	Apache Cwe 20 Traffic Server	9 years ago
CVE-2016-5396	Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack. Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack.	High	Apache Cwe 399 Traffic Server	9 years ago
CVE-2016-7551	Vulnerability in dos (CVE-2016-7551) vulnerability in dos (CVE-2016-7551). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 399 Digium Asterisk +3	9 years ago
CVE-2017-5647	Information Disclosure in c (CVE-2017-5647) vulnerability in c (CVE-2017-5647). Confidential information can be exposed externally.	High	C Apache Tomcat Cwe 200	9 years ago
CVE-2017-5650	Vulnerability in apache (CVE-2017-5650) vulnerability in apache (CVE-2017-5650). Risk of unauthorized operations or information disclosure.	High	Apache Tomcat Cwe 404	9 years ago
CVE-2017-7885	Vulnerability in c (CVE-2017-7885) vulnerability in c (CVE-2017-7885). Confidential information can be exposed externally.	High	C Denial of Service Cwe 190 Artifex +1	9 years ago
CVE-2017-7889	Vulnerability in c (CVE-2017-7889) vulnerability in c (CVE-2017-7889). Successful exploitation can lead to full system takeover.	High	C Cwe 732 Linux Linux Kernel +4	9 years ago
CVE-2017-7881	Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-7881) vulnerability in csrf (CVE-2017-7881). Successful exploitation can lead to full system takeover. Exploitable via `Referer header`.	High	PHP Cross-Site Request Forgery Cwe 352 Bigtreecms +1	9 years ago
CVE-2017-7877	CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations. CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.	High	Cross-Site Request Forgery Cwe 352 Flatcore Flatcore Cms	9 years ago
CVE-2017-7717	SQL Injection in sqli (CVE-2017-7717) SQL injection in sqli (CVE-2017-7717). Successful exploitation can lead to full system takeover.	High	Java SQL Injection Cwe 89 Sap +1	9 years ago
CVE-2017-7879	SQL Injection in sqli (CVE-2017-7879) SQL injection in sqli (CVE-2017-7879). Confidential information can be exposed externally.	High	SQL Injection Cwe 89 Flatcore Flatcore Cms	9 years ago
CVE-2017-7690	OS Command Injection in proxifier (CVE-2017-7690) OS command injection in proxifier (CVE-2017-7690). Successful exploitation can lead to full system takeover.	High	Cwe 78 Proxifier	9 years ago
CVE-2017-7696	Vulnerability in dos (CVE-2017-7696) vulnerability in dos (CVE-2017-7696). Risk of unauthorized operations or information disclosure.	High	Java Denial of Service Cwe 770 Sap +1	9 years ago
CVE-2017-6554	Vulnerability in quest (CVE-2017-6554) vulnerability in quest (CVE-2017-6554). Successful exploitation can lead to full system takeover.	High	Cwe 20 Quest Privilege Manager	9 years ago
CVE-2016-7051	XXE (XML External Entity) in ssrf (CVE-2016-7051) vulnerability in ssrf (CVE-2016-7051). Data can be tampered with by attackers.	High	Server-Side Request Forgery Cwe 611 Cwe 918 Fasterxml +1	9 years ago
CVE-2016-3104	Vulnerability in dos (CVE-2016-3104) vulnerability in dos (CVE-2016-3104). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 MongoDB	9 years ago
CVE-2016-7032	Vulnerability in todd-miller (CVE-2016-7032) vulnerability in todd-miller (CVE-2016-7032). Successful exploitation can lead to full system takeover.	High	Cwe 284 Todd Miller Sudo	9 years ago
CVE-2016-1713	Unrestricted File Upload in vtiger (CVE-2016-1713) vulnerability in vtiger (CVE-2016-1713). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434 Vtiger Vtiger Crm	9 years ago
CVE-2016-0727	Vulnerability in canonical (CVE-2016-0727) vulnerability in canonical (CVE-2016-0727). Successful exploitation can lead to full system takeover.	High	Cwe 264 Canonical Ubuntu Linux	9 years ago
CVE-2016-4889	Vulnerability in zohocorp (CVE-2016-4889) vulnerability in zohocorp (CVE-2016-4889). Successful exploitation can lead to full system takeover.	High	Cwe 264 Zohocorp Servicedesk Plus	9 years ago
CVE-2016-6299	Vulnerability in fedoraproject (CVE-2016-6299) vulnerability in fedoraproject (CVE-2016-6299). Successful exploitation can lead to full system takeover.	High	Cwe 264 Fedoraproject Fedora Mock Project +1	9 years ago
CVE-2016-6489	Vulnerability in redhat (CVE-2016-6489) vulnerability in redhat (CVE-2016-6489). Confidential information can be exposed externally.	High	Cwe 203 Redhat Enterprise Linux Desktop Enterprise Linux Hpc Node +6	9 years ago
CVE-2016-8602	Vulnerability in c (CVE-2016-8602) vulnerability in c (CVE-2016-8602). Successful exploitation can lead to full system takeover.	High	C Denial of Service Cwe 704 Artifex +1	9 years ago
CVE-2015-6567	Vulnerability in wolfcms (CVE-2015-6567) vulnerability in wolfcms (CVE-2015-6567). Successful exploitation can lead to full system takeover.	High	PHP Cwe 20 Wolfcms Wolf Cms	9 years ago
CVE-2015-6568	Vulnerability in wolfcms (CVE-2015-6568) vulnerability in wolfcms (CVE-2015-6568). Successful exploitation can lead to full system takeover.	High	PHP Cwe 20 Wolfcms Wolf Cms	9 years ago
CVE-2015-8356	SQL Injection in sqli (CVE-2015-8356) SQL injection in sqli (CVE-2015-8356). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Bitrix Project +1	9 years ago
CVE-2017-7218	Vulnerability in paloaltonetworks (CVE-2017-7218) vulnerability in paloaltonetworks (CVE-2017-7218). Successful exploitation can lead to full system takeover.	High	Cwe 20 Paloaltonetworks Pan Os	9 years ago
CVE-2017-7408	Vulnerability in dos (CVE-2017-7408) vulnerability in dos (CVE-2017-7408). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Paloaltonetworks Traps	9 years ago
CVE-2017-7456	Vulnerability in dos (CVE-2017-7456) vulnerability in dos (CVE-2017-7456). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Moxa Mxview	9 years ago
CVE-2017-7455	Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control. Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.	High	Cwe 200 Moxa Mxview	9 years ago
CVE-2017-7867	Out-of-Bounds Write in c (CVE-2017-7867) out-of-bounds write in c (CVE-2017-7867). Risk of unauthorized operations or information disclosure.	High	C C++ Cwe 787 Icu Project +3	9 years ago

Vulnerabilities

🍪 About cookies