Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: languages Clear

ID	Title	Severity	Tags	Detected
CVE-2019-11812	Cross-Site Scripting (XSS) in misp-project (CVE-2019-11812) cross-site scripting in misp-project (CVE-2019-11812). Risk of unauthorized operations or information disclosure.	Medium	PHP JavaScript Cross-Site Scripting Cwe 79 +2	4 years ago
CVE-2019-10869	Path Traversal in wordpress (CVE-2019-10869) path traversal in wordpress (CVE-2019-10869). Successful exploitation can lead to full system takeover.	High	PHP WordPress Path Traversal Cwe 22 +3	4 years ago
CVE-2022-29004	Cross-Site Scripting (XSS) in phpgurukul (CVE-2022-29004) cross-site scripting in phpgurukul (CVE-2022-29004). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Phpgurukul +1	4 years ago
CVE-2022-29005	Cross-Site Scripting (XSS) in phpgurukul (CVE-2022-29005) cross-site scripting in phpgurukul (CVE-2022-29005). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Phpgurukul +1	4 years ago
CVE-2022-1734	Use-After-Free in c (CVE-2022-1734) vulnerability in c (CVE-2022-1734). Successful exploitation can lead to full system takeover.	High	C Cwe 416 Linux Linux Kernel +19	4 years ago
CVE-2011-4327	Information Disclosure in c (CVE-2011-4327) vulnerability in c (CVE-2011-4327). Confidential information can be exposed externally.	Medium	C Cwe 200 OpenBSD Openssh	4 years ago
CVE-2015-1916	Vulnerability in dos (CVE-2015-1916) vulnerability in dos (CVE-2015-1916). Risk of unauthorized operations or information disclosure.	High	Java Denial of Service Cwe 400 Ibm	4 years ago
CVE-2011-0539	Vulnerability in c (CVE-2011-0539) vulnerability in c (CVE-2011-0539). Confidential information can be exposed externally.	High	C Cwe 264 Cwe 457 OpenBSD +1	4 years ago
CVE-2016-10010	Vulnerability in c (CVE-2016-10010) vulnerability in c (CVE-2016-10010). Successful exploitation can lead to full system takeover.	High	C Cwe 264 Cwe 269 OpenBSD +1	4 years ago
CVE-2016-3115	Vulnerability in c (CVE-2016-3115) vulnerability in c (CVE-2016-3115). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 93 OpenBSD Openssh +2	4 years ago
CVE-2016-8858	Vulnerability in c (CVE-2016-8858) vulnerability in c (CVE-2016-8858). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 399 Cwe 400 +2	4 years ago
CVE-2018-7795	Cross-Site Scripting (XSS) in schneider-electric (CVE-2018-7795) cross-site scripting in schneider-electric (CVE-2018-7795). Risk of unauthorized operations or information disclosure.	Medium	Java Cross-Site Scripting Cwe 79 Schneider Electric +2	4 years ago
CVE-2018-19908	OS Command Injection in misp-project (CVE-2018-19908) OS command injection in misp-project (CVE-2018-19908). Successful exploitation can lead to full system takeover.	High	PHP Cwe 78 Misp Project Misp	4 years ago
CVE-2018-13785	Vulnerability in c (CVE-2018-13785) vulnerability in c (CVE-2018-13785). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 190 Cwe 369 +10	4 years ago
CVE-2016-10011	Vulnerability in c (CVE-2016-10011) vulnerability in c (CVE-2016-10011). Confidential information can be exposed externally.	Medium	C Cwe 320 Cwe 119 OpenBSD +1	4 years ago
CVE-2015-5600	Vulnerability in c (CVE-2015-5600) vulnerability in c (CVE-2015-5600). Successful exploitation can lead to full system takeover.	High	C Denial of Service Cwe 264 Cwe 400 +2	4 years ago
CVE-2022-29145	Vulnerability in Microsoft.AspNetCore.App.Runtime.win-x64 (CVE-2022-29145) vulnerability in Microsoft.AspNetCore.App.Runtime.win-x64 (CVE-2022-29145). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.0.5` or later.	High	C# Denial of Service Cwe 400 Microsoft +6	4 years ago
CVE-2022-29117	.NET and Visual Studio Denial of Service Vulnerability .NET and Visual Studio Denial of Service Vulnerability	High	C# Denial of Service Cwe 400 Microsoft +6	4 years ago
CVE-2022-29347	Unrestricted File Upload in web-at-rchiv-project (CVE-2022-29347) vulnerability in web-at-rchiv-project (CVE-2022-29347). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 434 Web At Rchiv Project Web At Rchiv	4 years ago
CVE-2021-31674	Cross-Site Scripting (XSS) in cyclos (CVE-2021-31674) cross-site scripting in cyclos (CVE-2021-31674). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cwe 79 Cyclos	4 years ago
CVE-2022-1353	Information Disclosure in c (CVE-2022-1353) vulnerability in c (CVE-2022-1353). Confidential information can be exposed externally.	High	C Cwe 200 Linux Linux Kernel +21	4 years ago
CVE-2022-28102	Cross-Site Scripting (XSS) in php-mysql-admin-panel-generator-project (CVE-2022-28102) cross-site scripting in php-mysql-admin-panel-generator-project (CVE-2022-28102). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Php Mysql Admin Panel Generator Project +1	4 years ago
CVE-2022-27984	SQL Injection in sqli (CVE-2022-27984) SQL injection in sqli (CVE-2022-27984). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Cuppacms	4 years ago
CVE-2022-27985	SQL Injection in sqli (CVE-2022-27985) SQL injection in sqli (CVE-2022-27985). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Cuppacms	4 years ago
CVE-2022-28094	Cross-Site Scripting (XSS) in online-sports-complex-booking-system-project (CVE-2022-28094) cross-site scripting in online-sports-complex-booking-system-project (CVE-2022-28094). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Online Sports Complex Booking System Project +1	4 years ago
CVE-2022-28093	Vulnerability in online-sports-complex-booking-system-project (CVE-2022-28093) vulnerability in online-sports-complex-booking-system-project (CVE-2022-28093). Successful exploitation can lead to full system takeover.	Critical	PHP Online Sports Complex Booking System Project Online Sports Complex Booking System	4 years ago
CVE-2022-29533	Cross-Site Scripting (XSS) in misp-project (CVE-2022-29533) cross-site scripting in misp-project (CVE-2022-29533). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Misp Project +1	4 years ago
CVE-2022-29532	Cross-Site Scripting (XSS) in misp-project (CVE-2022-29532) cross-site scripting in misp-project (CVE-2022-29532). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Misp Project +1	4 years ago
CVE-2022-29534	Authentication Bypass in misp-project (CVE-2022-29534) authentication bypass in misp-project (CVE-2022-29534). Data can be tampered with by attackers.	High	PHP Cwe 287 Misp Project Misp	4 years ago
CVE-2022-21467	Vulnerability in c (CVE-2022-21467) vulnerability in c (CVE-2022-21467). Confidential information can be exposed externally.	Medium	C Oracle Agile Product Lifecycle Management	4 years ago
CVE-2022-29458	Out-of-Bounds Read in c (CVE-2022-29458) vulnerability in c (CVE-2022-29458). Confidential information can be exposed externally.	High	C Cwe 125 Gnu Ncurses +5	4 years ago
CVE-2021-37291	SQL Injection in sqli (CVE-2021-37291) SQL injection in sqli (CVE-2021-37291). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Kevinlab +1	4 years ago
CVE-2021-37293	Path Traversal in path-traversal (CVE-2021-37293) path traversal in path-traversal (CVE-2021-37293). Confidential information can be exposed externally.	Medium	PHP Path Traversal Cwe 22 Kevinlab +1	4 years ago
CVE-2022-26607	Unrestricted File Upload in baigo (CVE-2022-26607) vulnerability in baigo (CVE-2022-26607). Successful exploitation can lead to full system takeover.	High	PHP Remote Code Execution Cwe 434 Baigo +1	4 years ago
CVE-2022-26645	Unrestricted File Upload in oretnom23 (CVE-2022-26645) vulnerability in oretnom23 (CVE-2022-26645). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 434 Oretnom23 +1	4 years ago
CVE-2021-40904	Vulnerability in checkmk (CVE-2021-40904) vulnerability in checkmk (CVE-2021-40904). Successful exploitation can lead to full system takeover.	High	PHP Remote Code Execution Cwe 276 Checkmk	4 years ago
CVE-2021-40906	Cross-Site Scripting (XSS) in checkmk (CVE-2021-40906) cross-site scripting in checkmk (CVE-2021-40906). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Checkmk +1	4 years ago
CVE-2022-25574	Cross-Site Scripting (XSS) in douco (CVE-2022-25574) cross-site scripting in douco (CVE-2022-25574). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Douco +1	4 years ago
CVE-2018-25032	Out-of-Bounds Write in nokogiri (CVE-2018-25032) out-of-bounds write in nokogiri (CVE-2018-25032). Risk of unauthorized operations or information disclosure.	High	Cwe 787 Nokogiri Python Microsoft +44	4 years ago
CVE-2019-11043 KEV	[KEV] Vulnerability in Php fastcgi-process-manager-fpm (CVE-2019-11043) vulnerability in Php fastcgi-process-manager-fpm (CVE-2019-11043). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	PHP Fastcgi Process Manager Fpm Cwe 120	4 years ago
CVE-2018-11138 KEV	[KEV] OS Command Injection in Quest kace-system-management-appliance (CVE-2018-11138) OS command injection in Quest kace-system-management-appliance (CVE-2018-11138). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Quest Kace System Management Appliance Cwe 78 PHP	4 years ago
CVE-2012-1823 KEV	[KEV] Vulnerability in php (CVE-2012-1823) vulnerability in php (CVE-2012-1823). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	PHP Cwe 20	4 years ago
CVE-2022-27245	SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-27245) SSRF in ssrf (CVE-2022-27245). Successful exploitation can lead to full system takeover.	High	PHP Server-Side Request Forgery Cwe 918 Misp Project +1	4 years ago
CVE-2022-27246	Cross-Site Scripting (XSS) in misp-project (CVE-2022-27246) cross-site scripting in misp-project (CVE-2022-27246). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cwe 79 Misp Project Misp	4 years ago
CVE-2021-45834	Unrestricted File Upload in opendocman (CVE-2021-45834) vulnerability in opendocman (CVE-2021-45834). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 434 Opendocman	4 years ago
CVE-2021-44087	Vulnerability in attendance-and-payroll-system-project (CVE-2021-44087) vulnerability in attendance-and-payroll-system-project (CVE-2021-44087). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Attendance And Payroll System Project Attendance And Payroll System	4 years ago
CVE-2022-24618	Vulnerability in c (CVE-2022-24618) vulnerability in c (CVE-2022-24618). Successful exploitation can lead to full system takeover.	High	C Cwe 281 Heimdalsecurity Heimdal Premium Security	4 years ago
CVE-2022-24512	Code Injection in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2022-24512) code injection in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2022-24512). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.0.3` or later.	Medium	C# Remote Code Execution Cwe 94 Microsoft +7	4 years ago
CVE-2022-24464	Vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2022-24464) vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2022-24464). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.0.3` or later.	High	C# Denial of Service Cwe 400 Microsoft +6	4 years ago
CVE-2012-4681 KEV	[KEV] Vulnerability in Oracle java-se (CVE-2012-4681) vulnerability in Oracle java-se (CVE-2012-4681). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	Critical	Oracle Java Se Java Cwe 284 +7	4 years ago

Vulnerabilities

🍪 About cookies