Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: products Clear

ID	Title	Severity	Tags	Detected
CVE-2021-29241	Vulnerability in dos (CVE-2021-29241) vulnerability in dos (CVE-2021-29241). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 476 Codesys Control For Beaglebone Sl +10	5 years ago
CVE-2020-24913	SQL Injection in c (CVE-2020-24913) SQL injection in c (CVE-2020-24913). Successful exploitation can lead to full system takeover.	Critical	PHP C SQL Injection Cwe 89 +1	5 years ago
CVE-2020-24914	Unsafe Deserialization in qcubed (CVE-2020-24914) vulnerability in qcubed (CVE-2020-24914). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 502 Qcubed	5 years ago
CVE-2020-24036	Unsafe Deserialization in fork-cms (CVE-2020-24036) vulnerability in fork-cms (CVE-2020-24036). Successful exploitation can lead to full system takeover.	High	PHP Cwe 502 Fork Cms	5 years ago
CVE-2020-24912	Cross-Site Scripting (XSS) in qcubed (CVE-2020-24912) cross-site scripting in qcubed (CVE-2020-24912). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Qcubed	5 years ago
CVE-2017-14491	Out-of-Bounds Write in platform/external/dnsmasq (CVE-2017-14491) out-of-bounds write in platform/external/dnsmasq (CVE-2017-14491). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `11:2021-03-01` or later.	Critical	Denial of Service Cwe 787 Thekelleys Dnsmasq +40	5 years ago
CVE-2021-25299	Cross-Site Scripting (XSS) in nagios (CVE-2021-25299) cross-site scripting in nagios (CVE-2021-25299). Risk of unauthorized operations or information disclosure.	Medium	PHP Remote Code Execution Cross-Site Scripting Cwe 79 +2	5 years ago
CVE-2021-26117	Authentication Bypass in apache (CVE-2021-26117) authentication bypass in apache (CVE-2021-26117). Data can be tampered with by attackers.	High	Apache Cwe 287 Activemq Artemis +9	5 years ago
CVE-2021-26118	Vulnerability in org.apache.activemq:artemis-openwire-protocol (CVE-2021-26118) vulnerability in org.apache.activemq:artemis-openwire-protocol (CVE-2021-26118). Data can be tampered with by attackers. Mitigation: upgrade to `2.16.0` or later.	High	Apache Cwe 284 Artemis Netapp +1	5 years ago
CVE-2020-28874	Privilege Escalation in projectsend (CVE-2020-28874) vulnerability in projectsend (CVE-2020-28874). Data can be tampered with by attackers.	High	PHP Cwe 287 Cwe 404 Projectsend	5 years ago
CVE-2020-20950	Vulnerability in ietf (CVE-2020-20950) vulnerability in ietf (CVE-2020-20950). Confidential information can be exposed externally.	Medium	Cwe 327 Ietf Public Key Cryptography Standards 1 Microchip +7	5 years ago
CVE-2020-17103	, aka 'Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability'. This CVE ID... , aka 'Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability'. This CVE ID...	High	Cwe 269 Microsoft Windows 10 Windows Server 2016 +3	5 years ago
CVE-2020-1971	Vulnerability in dos (CVE-2020-1971) vulnerability in dos (CVE-2020-1971). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 476 Openssl Debian +50	5 years ago
CVE-2020-28727	Cross-Site Scripting (XSS) in seeddms (CVE-2020-28727) cross-site scripting in seeddms (CVE-2020-28727). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Seeddms	5 years ago
CVE-2020-7564	Vulnerability in schneider-electric (CVE-2020-7564) vulnerability in schneider-electric (CVE-2020-7564). Successful exploitation can lead to full system takeover.	High	Cwe 120 Schneider Electric Modicon Tsxety4103 Firmware Modicon Tsxety4103 +40	5 years ago
CVE-2020-27388	Cross-Site Scripting (XSS) in yourls (CVE-2020-27388) cross-site scripting in yourls (CVE-2020-27388). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Yourls	5 years ago
CVE-2020-13932	Cross-Site Scripting (XSS) in org.apache.activemq:apache-artemis (CVE-2020-13932) cross-site scripting in org.apache.activemq:apache-artemis (CVE-2020-13932). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.14.0` or later.	Medium	Apache Cross-Site Scripting Cwe 79 Artemis	5 years ago
CVE-2020-10727	Vulnerability in org.apache.activemq:artemis-commons (CVE-2020-10727) vulnerability in org.apache.activemq:artemis-commons (CVE-2020-10727). Confidential information can be exposed externally. Exploitable via ``resetUsers``. Mitigation: upgrade to `2.13.0` or later.	Medium	Cwe 312 Cwe 522 Apache Artemis +2	6 years ago
CVE-2020-9488	Vulnerability in org.apache.logging.log4j:log4j (CVE-2020-9488) vulnerability in org.apache.logging.log4j:log4j (CVE-2020-9488). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.2` or later.	Low	Apache Cwe 295 Log4J Oracle +47	6 years ago
CVE-2019-17571	Unsafe Deserialization in log4j:log4j (CVE-2019-17571) vulnerability in log4j:log4j (CVE-2019-17571). Successful exploitation can lead to full system takeover.	Critical	Insecure Deserialization Cwe 502 Apache Log4J +21	6 years ago
CVE-2019-19634	Unrestricted File Upload in csharp (CVE-2019-19634) vulnerability in csharp (CVE-2019-19634). Successful exploitation can lead to full system takeover.	Critical	PHP C# Cwe 434 Verot Project +3	6 years ago
CVE-2019-19576	Unrestricted File Upload in csharp (CVE-2019-19576) vulnerability in csharp (CVE-2019-19576). Successful exploitation can lead to full system takeover.	Critical	PHP C# Cwe 434 Verot Project +3	6 years ago
CVE-2019-13721	Use-After-Free in google (CVE-2019-13721) vulnerability in google (CVE-2019-13721). Successful exploitation can lead to full system takeover.	High	Cwe 416 Cwe 787 Google Chrome	6 years ago
CVE-2019-11135	Vulnerability in opensuse (CVE-2019-11135) vulnerability in opensuse (CVE-2019-11135). Confidential information can be exposed externally.	Medium	Opensuse Leap Fedoraproject Fedora +308	6 years ago
CVE-2019-16168	Vulnerability in c (CVE-2019-16168) vulnerability in c (CVE-2019-16168). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 369 SQLite Netapp +25	6 years ago
CVE-2019-13118	Vulnerability in nokogiri (CVE-2019-13118) vulnerability in nokogiri (CVE-2019-13118). Confidential information can be exposed externally. Exploitable via ``numbers.c``. Mitigation: upgrade to `1.10.5` or later.	Medium	C Cwe 843 Xmlsoft Libxslt +30	7 years ago
CVE-2018-16988	Vulnerability in buffalo (CVE-2018-16988) vulnerability in buffalo (CVE-2018-16988). Successful exploitation can lead to full system takeover.	Critical	PHP Authentication Bypass Cwe 640 Buffalo +1	7 years ago
CVE-2019-7317	Use-After-Free in c (CVE-2019-7317) vulnerability in c (CVE-2019-7317). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 416 Libpng Debian +41	7 years ago
CVE-2018-12649	Vulnerability in misp-project (CVE-2018-12649) vulnerability in misp-project (CVE-2018-12649). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 307 Misp Project Misp	8 years ago
CVE-2018-3639	Vulnerability in intel (CVE-2018-3639) vulnerability in intel (CVE-2018-3639). Confidential information can be exposed externally.	Medium	Cwe 203 Intel Atom C Atom E +330	8 years ago
CVE-2018-1259	XXE (XML External Entity) in broadcom (CVE-2018-1259) vulnerability in broadcom (CVE-2018-1259). Confidential information can be exposed externally.	High	Cwe 611 Broadcom Spring Data Commons Pivotal Software +3	8 years ago
CVE-2018-1274	Vulnerability in dos (CVE-2018-1274) vulnerability in dos (CVE-2018-1274). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770 Broadcom Spring Data Commons +3	8 years ago
CVE-2017-12174	Vulnerability in apache (CVE-2017-12174) vulnerability in apache (CVE-2017-12174). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Apache Artemis Redhat +3	8 years ago
CVE-2018-6926	OS Command Injection in misp-project (CVE-2018-6926) OS command injection in misp-project (CVE-2018-6926). Successful exploitation can lead to full system takeover.	High	PHP Cwe 78 Misp Project Misp	8 years ago
CVE-2017-12626	Vulnerability in org.apache.poi:poi (CVE-2017-12626) vulnerability in org.apache.poi:poi (CVE-2017-12626). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.17` or later.	High	Apache Denial of Service Cwe 835 Poi	8 years ago
CVE-2017-5753	Vulnerability in intel (CVE-2017-5753) vulnerability in intel (CVE-2017-5753). Confidential information can be exposed externally.	Medium	Cwe 203 Intel Atom C Atom E +397	8 years ago
CVE-2017-17089	Cross-Site Scripting (XSS) in webmin (CVE-2017-17089) cross-site scripting in webmin (CVE-2017-17089). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Webmin	8 years ago
CVE-2017-12810	PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel. PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel.	Medium	PHP Cross-Site Scripting Cwe 79 Stivasoft +1	8 years ago
CVE-2017-17981	PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter. PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17982	PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php. PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php.	Medium	PHP Cross-Site Request Forgery Cwe 352 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17983	SQL Injection in sqli (CVE-2017-17983) SQL injection in sqli (CVE-2017-17983). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17984	PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter. PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17985	PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter. PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17986	PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter. PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17987	Unrestricted File Upload in muslim-matrimonial-script-project (CVE-2017-17987) vulnerability in muslim-matrimonial-script-project (CVE-2017-17987). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434 Muslim Matrimonial Script Project Muslim Matrimonial Script	8 years ago
CVE-2017-17988	Cross-Site Scripting (XSS) in muslim-matrimonial-script-project (CVE-2017-17988) cross-site scripting in muslim-matrimonial-script-project (CVE-2017-17988). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17989	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17989) cross-site scripting in iwcnetwork (CVE-2017-17989). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17990	Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action. Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.	High	PHP Cross-Site Request Forgery Cwe 352 Iwcnetwork +1	8 years ago
CVE-2017-17991	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17991) cross-site scripting in iwcnetwork (CVE-2017-17991). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17992	Path Traversal in path-traversal (CVE-2017-17992) path traversal in path-traversal (CVE-2017-17992). Successful exploitation can lead to full system takeover.	Critical	PHP Path Traversal Cwe 22 Iwcnetwork +1	8 years ago

Vulnerabilities

🍪 About cookies