Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2020-29006	Vulnerability in misp-project (CVE-2020-29006) vulnerability in misp-project (CVE-2020-29006). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 862 Misp Project Misp	4 years ago
CVE-2020-25466	SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-25466) SSRF in ssrf (CVE-2020-25466). Successful exploitation can lead to full system takeover.	Critical	Server-Side Request Forgery Cwe 918 Crmeb	4 years ago
CVE-2018-5353	Vulnerability in zohocorp (CVE-2018-5353) vulnerability in zohocorp (CVE-2018-5353). Successful exploitation can lead to full system takeover.	Critical	Cwe 290 Zohocorp Manageengine Adselfservice Plus	4 years ago
CVE-2020-24193	SQL Injection in sqli (CVE-2020-24193) SQL injection in sqli (CVE-2020-24193). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Authentication Bypass Cwe 89 Daily Tracker System Project +1	4 years ago
CVE-2022-28932	D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions. D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions.	Critical	Cwe 276 Dlink Dsl G2452Dg Firmware Dsl G2452Dg	4 years ago
CVE-2015-0987	Information Disclosure in omron (CVE-2015-0987) vulnerability in omron (CVE-2015-0987). Confidential information can be exposed externally.	Critical	Cwe 200 Cwe 319 Omron Cx Programmer +2	4 years ago
CVE-2022-29351	Unrestricted File Upload in tiddlywiki (CVE-2022-29351) vulnerability in tiddlywiki (CVE-2022-29351). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Tiddlywiki Tiddlywiki5	4 years ago
CVE-2018-8851	Vulnerability in echelon (CVE-2018-8851) vulnerability in echelon (CVE-2018-8851). Successful exploitation can lead to full system takeover.	Critical	Cwe 256 Cwe 522 Echelon Smartserver 1 Firmware +7	4 years ago
CVE-2018-11091	Unrestricted File Upload in mybiz (CVE-2018-11091) vulnerability in mybiz (CVE-2018-11091). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Mybiz Myprocurenet	4 years ago
CVE-2018-7791	Authentication Bypass in schneider-electric (CVE-2018-7791) authentication bypass in schneider-electric (CVE-2018-7791). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Cwe 284 Schneider Electric Modicon M221 Firmware +1	4 years ago
CVE-2018-7790	Vulnerability in schneider-electric (CVE-2018-7790) vulnerability in schneider-electric (CVE-2018-7790). Successful exploitation can lead to full system takeover.	Critical	Cwe 294 Schneider Electric Modicon M221 Firmware Modicon M221	4 years ago
CVE-2022-28568	Unrestricted File Upload in simple-doctors-appointment-system-project (CVE-2022-28568) vulnerability in simple-doctors-appointment-system-project (CVE-2022-28568). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 434 Simple Doctors Appointment System Project Simple Doctors Appointment System	4 years ago
CVE-2022-29347	Unrestricted File Upload in web-at-rchiv-project (CVE-2022-29347) vulnerability in web-at-rchiv-project (CVE-2022-29347). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 434 Web At Rchiv Project Web At Rchiv	4 years ago
CVE-2021-43163	Command Injection in ruijienetworks (CVE-2021-43163) command injection in ruijienetworks (CVE-2021-43163). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 77 Ruijienetworks Reyeeos +5	4 years ago
CVE-2021-41945	Vulnerability in encode (CVE-2021-41945) vulnerability in encode (CVE-2021-41945). Confidential information can be exposed externally. Exploitable via ``httpx.URL``.	Critical	Cwe 20 Encode Httpx	4 years ago
CVE-2022-27984	SQL Injection in sqli (CVE-2022-27984) SQL injection in sqli (CVE-2022-27984). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Cuppacms	4 years ago
CVE-2022-27985	SQL Injection in sqli (CVE-2022-27985) SQL injection in sqli (CVE-2022-27985). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Cuppacms	4 years ago
CVE-2022-29528	An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur. An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur.	Critical	Insecure Deserialization Cwe 502 Misp Project Misp	4 years ago
CVE-2022-27262	Unrestricted File Upload in sailsjs (CVE-2022-27262) vulnerability in sailsjs (CVE-2022-27262). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Sailsjs Skipper	4 years ago
CVE-2022-28397	Unrestricted File Upload in ghost (CVE-2022-28397) vulnerability in ghost (CVE-2022-28397). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Ghost	4 years ago
CVE-2022-27260	Unrestricted File Upload in buttercms (CVE-2022-27260) vulnerability in buttercms (CVE-2022-27260). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Buttercms	4 years ago
CVE-2021-37291	SQL Injection in sqli (CVE-2021-37291) SQL injection in sqli (CVE-2021-37291). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Kevinlab +1	4 years ago
CVE-2022-26645	Unrestricted File Upload in oretnom23 (CVE-2022-26645) vulnerability in oretnom23 (CVE-2022-26645). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 434 Oretnom23 +1	4 years ago
CVE-2021-46007	OS Command Injection in totolink (CVE-2021-46007) OS command injection in totolink (CVE-2021-46007). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Totolink Ar3100R Firmware Ar3100R	4 years ago
CVE-2021-46009	Vulnerability in totolink (CVE-2021-46009) vulnerability in totolink (CVE-2021-46009). Successful exploitation can lead to full system takeover.	Critical	Cwe 306 Totolink A3100R Firmware A3100R	4 years ago
CVE-2022-25521	UNNO v03.11.00 was discovered to contain access control issue. UNNO v03.11.00 was discovered to contain access control issue.	Critical	Cwe 798 Nuuo Network Video Recorder Firmware	4 years ago
CVE-2018-1273 KEV	[KEV] Code Injection in Vmware tanzu vmware-tanzu (CVE-2018-1273) code injection in Vmware tanzu vmware-tanzu (CVE-2018-1273). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Vmware Tanzu Spring Data Commons Cwe 94 Remote Code Execution +8	4 years ago
CVE-2021-42237 KEV	[KEV] Unsafe Deserialization in Sitecore xp (CVE-2021-42237) vulnerability in Sitecore xp (CVE-2021-42237). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Sitecore Xp Cwe 502 Insecure Deserialization +1	4 years ago
CVE-2021-45756	Vulnerability in asus (CVE-2021-45756) vulnerability in asus (CVE-2021-45756). Successful exploitation can lead to full system takeover.	Critical	Cwe 120 Asus Rt Ac68U Firmware Rt Ac68U +2	4 years ago
CVE-2022-25578	Code Injection in taogogo (CVE-2022-25578) code injection in taogogo (CVE-2022-25578). Successful exploitation can lead to full system takeover.	Critical	Cwe 94 Taogogo Taocms	4 years ago
CVE-2021-45834	Unrestricted File Upload in opendocman (CVE-2021-45834) vulnerability in opendocman (CVE-2021-45834). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 434 Opendocman	4 years ago
CVE-2021-44088	SQL Injection in sqli (CVE-2021-44088) SQL injection in sqli (CVE-2021-44088). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Attendance And Payroll System Project Attendance And Payroll System	4 years ago
CVE-2021-44620	Command Injection in totolink (CVE-2021-44620) command injection in totolink (CVE-2021-44620). Successful exploitation can lead to full system takeover.	Critical	Cwe 77 Totolink A3100R Firmware A3100R	4 years ago
CVE-2022-23383	Authentication Bypass in yzmcms (CVE-2022-23383) authentication bypass in yzmcms (CVE-2022-23383). Confidential information can be exposed externally.	Critical	Cwe 287 Yzmcms	4 years ago
CVE-2022-0715	Authentication Bypass in schneider-electric (CVE-2022-0715) authentication bypass in schneider-electric (CVE-2022-0715). Data can be tampered with by attackers.	Critical	Cwe 287 Cwe 345 Schneider Electric Smt Series 1015 Ups Firmware +65	4 years ago
CVE-2022-25089	Printix Secure Cloud Print Management 1.3.1035.0 incorrectly uses Privileged APIs. Printix Secure Cloud Print Management 1.3.1035.0 incorrectly uses Privileged APIs.	Critical	Cwe 269 Kofax Printix	4 years ago
CVE-2022-25060	OS Command Injection in tp-link (CVE-2022-25060) OS command injection in tp-link (CVE-2022-25060). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Tp Link Tl Wr840N Firmware Tl Wr840N	4 years ago
CVE-2022-25064	OS Command Injection in tp-link (CVE-2022-25064) OS command injection in tp-link (CVE-2022-25064). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 78 Tp Link Tl Wr840N Firmware +1	4 years ago
CVE-2022-25061	OS Command Injection in tp-link (CVE-2022-25061) OS command injection in tp-link (CVE-2022-25061). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Tp Link Tl Wr840N Firmware Tl Wr840N	4 years ago
CVE-2022-0664	Vulnerability in netmaker (CVE-2022-0664) vulnerability in netmaker (CVE-2022-0664). Successful exploitation can lead to full system takeover.	Critical	Cwe 321 Netmaker	4 years ago
CVE-2021-45420	Information Disclosure in dos (CVE-2021-45420) vulnerability in dos (CVE-2021-45420). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Denial of Service Cwe 200 Cwe 306 +4	4 years ago
CVE-2021-42637	SSRF (Server-Side Request Forgery) in ssrf (CVE-2021-42637) SSRF in ssrf (CVE-2021-42637). Successful exploitation can lead to full system takeover.	Critical	Server-Side Request Forgery Cwe 918 Printerlogic Web Stack	4 years ago
CVE-2021-42640	Vulnerability in printerlogic (CVE-2021-42640) vulnerability in printerlogic (CVE-2021-42640). Confidential information can be exposed externally.	Critical	Cwe 668 Printerlogic Web Stack	4 years ago
CVE-2021-44971	Vulnerability in tenda (CVE-2021-44971) vulnerability in tenda (CVE-2021-44971). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Authentication Bypass Cwe 697 Tenda +4	4 years ago
CVE-2022-23305	SQL Injection in log4j:log4j (CVE-2022-23305) SQL injection in log4j:log4j (CVE-2022-23305). Successful exploitation can lead to full system takeover.	Critical	Apache Cwe 89 Log4J Netapp +30	4 years ago
CVE-2021-44732	Vulnerability in arm (CVE-2021-44732) vulnerability in arm (CVE-2021-44732). Successful exploitation can lead to full system takeover.	Critical	Cwe 415 Arm Mbed Tls Trustedfirmware +2	4 years ago
CVE-2021-42216	A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php. A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php.	Critical	PHP Cwe 326 Anonaddy	4 years ago
CVE-2021-41716	Authentication Bypass in mahadiscom (CVE-2021-41716) authentication bypass in mahadiscom (CVE-2021-41716). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Mahadiscom Mahavitaran	4 years ago
CVE-2020-25366	Vulnerability in dos (CVE-2020-25366) vulnerability in dos (CVE-2020-25366). Data can be tampered with by attackers.	Critical	Denial of Service Cwe 862 Dlink Dir 823G Firmware +1	4 years ago
CVE-2020-25367	Command Injection in dlink (CVE-2020-25367) command injection in dlink (CVE-2020-25367). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Dlink Dir 823G Firmware Dir 823G	4 years ago

Vulnerabilities

🍪 About cookies