Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2017-5475	comment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments. comment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments.	High	PHP Cross-Site Request Forgery Cwe 352 S9Y +1	9 years ago
CVE-2017-5476	Serendipity through 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin. Serendipity through 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin.	High	Cross-Site Request Forgery Cwe 352 S9Y Serendipity	9 years ago
CVE-2010-5327	Vulnerability in liferay (CVE-2010-5327) vulnerability in liferay (CVE-2010-5327). Successful exploitation can lead to full system takeover.	High	Cwe 264 Liferay Liferay Portal	9 years ago
CVE-2016-9809	Out-of-Bounds Read in gstreamer (CVE-2016-9809) vulnerability in gstreamer (CVE-2016-9809). Successful exploitation can lead to full system takeover.	High	Cwe 125 Gstreamer	9 years ago
CVE-2016-9812	Out-of-Bounds Read in dos (CVE-2016-9812) vulnerability in dos (CVE-2016-9812). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 125 Gstreamer	9 years ago
CVE-2016-9808	Out-of-Bounds Write in dos (CVE-2016-9808) out-of-bounds write in dos (CVE-2016-9808). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 787 Gstreamer	9 years ago
CVE-2016-7434	Vulnerability in dos (CVE-2016-7434) vulnerability in dos (CVE-2016-7434). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Ntp Hpe +1	9 years ago
CVE-2016-6885	Use-After-Free in dos (CVE-2016-6885) vulnerability in dos (CVE-2016-6885). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 416 Matrixssl	9 years ago
CVE-2016-7426	Vulnerability in dos (CVE-2016-7426) vulnerability in dos (CVE-2016-7426). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Ntp Canonical +10	9 years ago
CVE-2016-9107	Information Disclosure in otr (CVE-2016-9107) vulnerability in otr (CVE-2016-9107). Confidential information can be exposed externally.	High	Cwe 200 Otr Gajim Otr	9 years ago
CVE-2016-9312	Vulnerability in dos (CVE-2016-9312) vulnerability in dos (CVE-2016-9312). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 399 Ntp Microsoft +1	9 years ago
CVE-2016-9882	Vulnerability in cloudfoundry (CVE-2016-9882) vulnerability in cloudfoundry (CVE-2016-9882). Confidential information can be exposed externally.	High	Cwe 532 Cloudfoundry Capi Release Cf Release	9 years ago
CVE-2016-10136	Vulnerability in adups (CVE-2016-10136) vulnerability in adups (CVE-2016-10136). Successful exploitation can lead to full system takeover.	High	Cwe 310 Adups Adups Fota	9 years ago
CVE-2016-10137	Vulnerability in adups (CVE-2016-10137) vulnerability in adups (CVE-2016-10137). Successful exploitation can lead to full system takeover.	High	Cwe 310 Adups Adups Fota	9 years ago
CVE-2016-10138	Vulnerability in adups (CVE-2016-10138) vulnerability in adups (CVE-2016-10138). Successful exploitation can lead to full system takeover.	High	Cwe 310 Adups Adups Fota	9 years ago
CVE-2016-10139	Vulnerability in adups (CVE-2016-10139) vulnerability in adups (CVE-2016-10139). Successful exploitation can lead to full system takeover.	High	Cwe 310 Adups Adups Fota	9 years ago
CVE-2016-3128	Vulnerability in blackberry (CVE-2016-3128) vulnerability in blackberry (CVE-2016-3128). Data can be tampered with by attackers.	High	Cwe 254 Blackberry Enterprise Service	9 years ago
CVE-2017-5364	Buffer Overflow in dos (CVE-2017-5364) vulnerability in dos (CVE-2017-5364). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.0` or later.	High	Remote Code Execution Denial of Service Cwe 119 Foxitsoftware +1	9 years ago
CVE-2016-10140	Information Disclosure in apache (CVE-2016-10140) vulnerability in apache (CVE-2016-10140). Confidential information can be exposed externally.	High	Apache Authentication Bypass Cwe 200 Zoneminder	9 years ago
CVE-2016-3130	Information Disclosure in blackberry (CVE-2016-3130) vulnerability in blackberry (CVE-2016-3130). Successful exploitation can lead to full system takeover.	High	Cwe 200 Cwe 255 Blackberry Enterprise Service	9 years ago
CVE-2016-3151	Path Traversal in path-traversal (CVE-2016-3151) path traversal in path-traversal (CVE-2016-3151). Confidential information can be exposed externally.	High	Path Traversal Cwe 22 Barco Clickshare Csc 1 Firmware +5	9 years ago
CVE-2016-6492	Vulnerability in c (CVE-2016-6492) vulnerability in c (CVE-2016-6492). Successful exploitation can lead to full system takeover.	High	C Cwe 264 Google Android	9 years ago
CVE-2016-10009	Vulnerability in c (CVE-2016-10009) vulnerability in c (CVE-2016-10009). Risk of unauthorized operations or information disclosure.	High	C Cwe 426 OpenBSD Openssh	9 years ago
CVE-2016-10012	Buffer Overflow in openbsd (CVE-2016-10012) vulnerability in openbsd (CVE-2016-10012). Successful exploitation can lead to full system takeover.	High	Cwe 119 OpenBSD Openssh	9 years ago
CVE-2016-9158	Vulnerability in siemens (CVE-2016-9158) vulnerability in siemens (CVE-2016-9158). Risk of unauthorized operations or information disclosure.	High	Cwe 20 Siemens Simatic S7 300 Cpu Firmware Simatic S7 300 Cpu 312 +19	9 years ago
CVE-2016-4978	Unsafe Deserialization in apache (CVE-2016-4978) vulnerability in apache (CVE-2016-4978). Successful exploitation can lead to full system takeover.	High	Apache Cwe 502 Artemis Redhat +2	9 years ago
CVE-2016-2183	Information Disclosure in redhat (CVE-2016-2183) vulnerability in redhat (CVE-2016-2183). Confidential information can be exposed externally.	High	Cwe 200 Redhat Jboss Enterprise Application Platform Jboss Enterprise Web Server +9	9 years ago
CVE-2016-5645	Vulnerability in rockwellautomation (CVE-2016-5645) vulnerability in rockwellautomation (CVE-2016-5645). Risk of unauthorized operations or information disclosure.	High	Cwe 284 Cwe 798 Rockwellautomation 1766 L32Awa +5	9 years ago
CVE-2015-8325	The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows loca... The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demons...	High	C Cwe 264 Debian Debian Linux +8	10 years ago
CVE-2016-0778	Buffer Overflow in c (CVE-2016-0778) vulnerability in c (CVE-2016-0778). Successful exploitation can lead to full system takeover.	High	C Denial of Service Cwe 119 Oracle +10	10 years ago
CVE-2015-6492	Buffer Overflow in dos (CVE-2015-6492) vulnerability in dos (CVE-2015-6492). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 119 Rockwellautomation Micrologix 1100 Firmware +1	10 years ago
CVE-2015-6564	Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in... Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in...	High	C Cwe 264 Cwe 416 OpenBSD +2	10 years ago
CVE-2015-2177	Vulnerability in dos (CVE-2015-2177) vulnerability in dos (CVE-2015-2177). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Siemens Simatic S7 300 Cpu Firmware +1	11 years ago
CVE-2014-1692	Buffer Overflow in c (CVE-2014-1692) vulnerability in c (CVE-2014-1692). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 119 OpenBSD +1	12 years ago
CVE-2013-4733	Vulnerability in digital-alert-systems (CVE-2013-4733) vulnerability in digital-alert-systems (CVE-2013-4733). Confidential information can be exposed externally.	High	Cwe 264 Cwe 532 Digital Alert Systems Dasdec Eas +2	13 years ago
CVE-2013-4734	Vulnerability in digital-alert-systems (CVE-2013-4734) vulnerability in digital-alert-systems (CVE-2013-4734). Risk of unauthorized operations or information disclosure.	High	Cwe 330 Digital Alert Systems Dasdec Eas Monroe Electronics +1	13 years ago
CVE-2012-6435	Vulnerability in dos (CVE-2012-6435) vulnerability in dos (CVE-2012-6435). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 284 Cwe 399 Rockwellautomation +17	13 years ago
CVE-2012-6442	Buffer Overflow in dos (CVE-2012-6442) vulnerability in dos (CVE-2012-6442). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 284 Cwe 119 Rockwellautomation +22	13 years ago
CVE-2012-6436	Buffer Overflow in rockwellautomation (CVE-2012-6436) vulnerability in rockwellautomation (CVE-2012-6436). Risk of unauthorized operations or information disclosure.	High	Cwe 119 Rockwellautomation Controllogix Controllers Guardlogix Controllers +15	13 years ago
CVE-2012-6438	Buffer Overflow in rockwellautomation (CVE-2012-6438) vulnerability in rockwellautomation (CVE-2012-6438). Risk of unauthorized operations or information disclosure.	High	Cwe 119 Rockwellautomation Controllogix Controllers Guardlogix Controllers +15	13 years ago
CVE-2011-0627	Vulnerability in dos (CVE-2011-0627) vulnerability in dos (CVE-2011-0627). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 20 Adobe Flash Player +10	15 years ago
CVE-2010-3190	Vulnerability in c (CVE-2010-3190) vulnerability in c (CVE-2010-3190). Successful exploitation can lead to full system takeover.	High	C C# Cwe 426 Apple +5	15 years ago
CVE-2009-2493	The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005... The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005...	High	C C# Cwe 264 Cwe 94 +9	16 years ago
CVE-2009-0901	The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005... The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005...	High	C C# Cwe 94 Cwe 457 +5	16 years ago
CVE-2003-1567	Information Disclosure in microsoft (CVE-2003-1567) vulnerability in microsoft (CVE-2003-1567). Confidential information can be exposed externally.	High	Cwe 200 Microsoft Internet Information Services	17 years ago
CVE-2008-4309	Vulnerability in c (CVE-2008-4309) vulnerability in c (CVE-2008-4309). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 20 Cwe 190 +1	17 years ago
CVE-1999-0632	The RPC portmapper service is running. The RPC portmapper service is running.	High	Cwe 200	27 years ago

Vulnerabilities

🍪 About cookies