Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Tag: sonicwall Clear

ID	Title	Severity	Tags	Detected
CVE-2026-15410 KEV	[KEV] Code Injection in Sonicwall sma6210-firmware (CVE-2026-15410) code injection in Sonicwall sma6210-firmware (CVE-2026-15410). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Cwe 94 Sonicwall Sma6210 Firmware Sma6210 +3	1 month ago
CVE-2026-15409 KEV	[KEV] SSRF (Server-Side Request Forgery) in Sonicwall ssrf (CVE-2026-15409) SSRF in Sonicwall ssrf (CVE-2026-15409). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Server-Side Request Forgery Cwe 918 Sonicwall Sma6210 Firmware +4	1 month ago
CVE-2026-4112	SQL Injection in sqli (CVE-2026-4112) SQL injection in sqli (CVE-2026-4112). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Sonicwall Sma6210 Firmware +8	4 months ago
CVE-2026-3470	Vulnerability in sonicwall (CVE-2026-3470) vulnerability in sonicwall (CVE-2026-3470). Risk of unauthorized operations or information disclosure.	Low	Cwe 20 Sonicwall Email Security Esa5000 +4	4 months ago
CVE-2026-3469	Vulnerability in dos (CVE-2026-3469) vulnerability in dos (CVE-2026-3469). Risk of unauthorized operations or information disclosure.	Low	Denial of Service Cwe 20 Sonicwall Email Security +5	4 months ago
CVE-2026-3468	Cross-Site Scripting (XSS) in sonicwall (CVE-2026-3468) cross-site scripting in sonicwall (CVE-2026-3468). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Sonicwall +6	4 months ago
CVE-2025-40602 KEV	[KEV] Vulnerability in Sonicwall sma1000-appliance (CVE-2025-40602) vulnerability in Sonicwall sma1000-appliance (CVE-2025-40602). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Sonicwall Sma1000 Appliance Cwe 862 Cwe 250	8 months ago
CVE-2023-44221 KEV	[KEV] OS Command Injection in Sonicwall sma100-appliances (CVE-2023-44221) OS command injection in Sonicwall sma100-appliances (CVE-2023-44221). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Sonicwall Sma100 Appliances Cwe 78	1 year ago
CVE-2021-20035 KEV	[KEV] OS Command Injection in Sonicwall sma100-appliances (CVE-2021-20035) OS command injection in Sonicwall sma100-appliances (CVE-2021-20035). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Sonicwall Sma100 Appliances Cwe 78	1 year ago
CVE-2024-53704 KEV	[KEV] Authentication Bypass in Sonicwall sonicos (CVE-2024-53704) authentication bypass in Sonicwall sonicos (CVE-2024-53704). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Sonicwall Sonicos Cwe 287 Nsa 2700 +22	1 year ago
CVE-2025-23006 KEV	[KEV] Unsafe Deserialization in Sonicwall sma1000-appliances (CVE-2025-23006) vulnerability in Sonicwall sma1000-appliances (CVE-2025-23006). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Sonicwall Sma1000 Appliances Cwe 502 Insecure Deserialization +15	1 year ago
CVE-2024-40766 KEV	[KEV] Vulnerability in Sonicwall sonicos (CVE-2024-40766) vulnerability in Sonicwall sonicos (CVE-2024-40766). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Sonicwall Sonicos Cwe 284	1 year ago
CVE-2024-6387	Vulnerability in sonicwall (CVE-2024-6387) vulnerability in sonicwall (CVE-2024-6387). Successful exploitation can lead to full system takeover.	High	Cwe 364 Cwe 362 Sonicwall Sma 6200 Firmware +89	2 years ago
CVE-2019-7483 KEV	[KEV] Path Traversal in Sonicwall sma100 (CVE-2019-7483) path traversal in Sonicwall sma100 (CVE-2019-7483). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Sonicwall Sma100 Cwe 22	4 years ago
CVE-2021-20028 KEV	[KEV] SQL Injection in Sonicwall secure-remote-access-sra (CVE-2021-20028) SQL injection in Sonicwall secure-remote-access-sra (CVE-2021-20028). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Sonicwall Secure Remote Access Sra Cwe 89	4 years ago
CVE-2020-5135 KEV	[KEV] Vulnerability in Sonicwall sonicos (CVE-2020-5135) vulnerability in Sonicwall sonicos (CVE-2020-5135). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Sonicwall Sonicos Cwe 120	4 years ago
CVE-2021-20038 KEV	[KEV] Vulnerability in Sonicwall sma-100-appliances (CVE-2021-20038) vulnerability in Sonicwall sma-100-appliances (CVE-2021-20038). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Sonicwall Sma 100 Appliances Cwe 121	4 years ago
CVE-2021-45105	Vulnerability in org.apache.logging.log4j:log4j-core (CVE-2021-45105) vulnerability in org.apache.logging.log4j:log4j-core (CVE-2021-45105). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.1` or later.	Medium	Apache Denial of Service Cwe 20 Cwe 674 +126	4 years ago
CVE-2021-44228 KEV	[KEV] Vulnerability in Apache log4j2 (CVE-2021-44228) vulnerability in Apache log4j2 (CVE-2021-44228). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Apache Log4J2 Cwe 20 Cwe 400 +178	4 years ago
CVE-2021-20016 KEV	[KEV] SQL Injection in Sonicwall sslvpn-sma100 (CVE-2021-20016) SQL injection in Sonicwall sslvpn-sma100 (CVE-2021-20016). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Sonicwall Sslvpn Sma100 Cwe 89 Sma 100 Firmware +10	4 years ago
CVE-2021-20023 KEV	[KEV] Path Traversal in Sonicwall email-security (CVE-2021-20023) path traversal in Sonicwall email-security (CVE-2021-20023). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.	Medium	Sonicwall Sonicwall Email Security Cwe 22 Email Security +20	4 years ago
CVE-2021-20022 KEV	[KEV] Unrestricted File Upload in Sonicwall email-security (CVE-2021-20022) vulnerability in Sonicwall email-security (CVE-2021-20022). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Sonicwall Sonicwall Email Security Cwe 434 Email Security +20	4 years ago
CVE-2019-7481 KEV	[KEV] SQL Injection in Sonicwall sma100 (CVE-2019-7481) SQL injection in Sonicwall sma100 (CVE-2019-7481). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.	High	Sonicwall Sma100 Cwe 89 Sma 100 Firmware +1	4 years ago
CVE-2021-20021 KEV	[KEV] Privilege Escalation in Sonicwall email-security (CVE-2021-20021) vulnerability in Sonicwall email-security (CVE-2021-20021). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Sonicwall Sonicwall Email Security Cwe 306 Cwe 269 +21	4 years ago
CVE-2018-3639	Vulnerability in intel (CVE-2018-3639) vulnerability in intel (CVE-2018-3639). Confidential information can be exposed externally.	Medium	Cwe 203 Intel Atom C Atom E +330	8 years ago

Vulnerabilities

🍪 About cookies