Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
Filtering: Group: products Clear
ID Title
CVE-2025-59234 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-59227 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-53782 Vulnerability in microsoft (CVE-2025-53782)
vulnerability in microsoft (CVE-2025-53782). Successful exploitation can lead to full system takeover.
CVE-2025-57740 Vulnerability in fortinet (CVE-2025-57740)
vulnerability in fortinet (CVE-2025-57740). Successful exploitation can lead to full system takeover.
CVE-2025-58903 Vulnerability in fortinet (CVE-2025-58903)
vulnerability in fortinet (CVE-2025-58903). Risk of unauthorized operations or information disclosure.
CVE-2025-47890 Open Redirect in fortinet (CVE-2025-47890)
vulnerability in fortinet (CVE-2025-47890). Risk of unauthorized operations or information disclosure.
CVE-2025-31366 Cross-Site Scripting (XSS) in fortinet (CVE-2025-31366)
cross-site scripting in fortinet (CVE-2025-31366). Risk of unauthorized operations or information disclosure.
CVE-2025-31514 Vulnerability in fortinet (CVE-2025-31514)
vulnerability in fortinet (CVE-2025-31514). Risk of unauthorized operations or information disclosure.
CVE-2025-25253 Vulnerability in fortinet (CVE-2025-25253)
vulnerability in fortinet (CVE-2025-25253). Successful exploitation can lead to full system takeover.
CVE-2025-24990 KEV [KEV] Vulnerability in Microsoft windows (CVE-2025-24990)
vulnerability in Microsoft windows (CVE-2025-24990). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-59230 KEV [KEV] Vulnerability in Microsoft windows (CVE-2025-59230)
vulnerability in Microsoft windows (CVE-2025-59230). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-47827 KEV [KEV] Vulnerability in igel (CVE-2025-47827)
vulnerability in igel (CVE-2025-47827). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2016-7836 KEV [KEV] Authentication Bypass in Skysea client-view (CVE-2016-7836)
authentication bypass in Skysea client-view (CVE-2016-7836). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-43798 KEV [KEV] Path Traversal in Grafana labs github.com/grafana/grafana (CVE-2021-43798)
path traversal in Grafana labs github.com/grafana/grafana (CVE-2021-43798). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `8.0.7` or later.
CVE-2025-27915 KEV [KEV] Cross-Site Scripting (XSS) in Synacor zimbra-collaboration-suite-zcs (CVE-2025-27915)
cross-site scripting in Synacor zimbra-collaboration-suite-zcs (CVE-2025-27915). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-43226 KEV [KEV] Vulnerability in Microsoft windows (CVE-2021-43226)
vulnerability in Microsoft windows (CVE-2021-43226). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2013-3918 KEV [KEV] Vulnerability in Microsoft windows (CVE-2013-3918)
vulnerability in Microsoft windows (CVE-2013-3918). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2011-3402 KEV [KEV] Vulnerability in Microsoft windows (CVE-2011-3402)
vulnerability in Microsoft windows (CVE-2011-3402). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-22555 KEV [KEV] Out-of-Bounds Write in Linux kernel (CVE-2021-22555)
out-of-bounds write in Linux kernel (CVE-2021-22555). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2010-3765 KEV [KEV] Vulnerability in Mozilla multiple-products (CVE-2010-3765)
vulnerability in Mozilla multiple-products (CVE-2010-3765). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-61882 KEV [KEV] Authentication Bypass in Oracle e-business-suite (CVE-2025-61882)
authentication bypass in Oracle e-business-suite (CVE-2025-61882). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2010-3962 KEV [KEV] Vulnerability in Microsoft internet-explorer (CVE-2010-3962)
vulnerability in Microsoft internet-explorer (CVE-2010-3962). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-22862 Vulnerability in fortinet (CVE-2025-22862)
vulnerability in fortinet (CVE-2025-22862). Successful exploitation can lead to full system takeover.
CVE-2017-1000353 KEV [KEV] Vulnerability in jenkins (CVE-2017-1000353)
vulnerability in jenkins (CVE-2017-1000353). Successful exploitation can lead to full system takeover. Exploitable via ``SignedObject``. Listed in CISA KEV — actively exploited.
CVE-2025-21043 KEV [KEV] Out-of-Bounds Write in Samsung mobile-devices (CVE-2025-21043)
out-of-bounds write in Samsung mobile-devices (CVE-2025-21043). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2014-6278 KEV [KEV] OS Command Injection in gnu (CVE-2014-6278)
OS command injection in gnu (CVE-2014-6278). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2015-7755 KEV [KEV] Authentication Bypass in Juniper screenos (CVE-2015-7755)
authentication bypass in Juniper screenos (CVE-2015-7755). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-4008 KEV [KEV] Vulnerability in Smartbedded meteobridge (CVE-2025-4008)
vulnerability in Smartbedded meteobridge (CVE-2025-4008). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-32463 KEV [KEV] Vulnerability in sudo (CVE-2025-32463)
vulnerability in sudo (CVE-2025-32463). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-59689 KEV [KEV] Command Injection in Libraesva email-security-gateway (CVE-2025-59689)
command injection in Libraesva email-security-gateway (CVE-2025-59689). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-10035 KEV [KEV] Command Injection in Fortra goanywhere-mft (CVE-2025-10035)
command injection in Fortra goanywhere-mft (CVE-2025-10035). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2025-20352 KEV [KEV] Vulnerability in Cisco ios-and-ios-xe (CVE-2025-20352)
vulnerability in Cisco ios-and-ios-xe (CVE-2025-20352). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-21311 KEV [KEV] SSRF (Server-Side Request Forgery) in adminer (CVE-2021-21311)
SSRF in adminer (CVE-2021-21311). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-20363 Vulnerability in cisco (CVE-2025-20363)
vulnerability in cisco (CVE-2025-20363). Successful exploitation can lead to full system takeover.
CVE-2025-20362 KEV [KEV] Vulnerability in Cisco secure-firewall-adaptive-security-appliance-and-secure-firewall-threat-defense (CVE-2025-20362)
vulnerability in Cisco secure-firewall-adaptive-security-appliance-and-secure-firewall-threat-defense (CVE-2025-20362). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-20333 KEV [KEV] Vulnerability in Cisco secure-firewall-adaptive-security-appliance-and-secure-firewall-threat-defense (CVE-2025-20333)
vulnerability in Cisco secure-firewall-adaptive-security-appliance-and-secure-firewall-threat-defense (CVE-2025-20333). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2025-10585 KEV [KEV] Vulnerability in Google chromium-v8 (CVE-2025-10585)
vulnerability in Google chromium-v8 (CVE-2025-10585). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2025-55885 SQL Injection in sqli (CVE-2025-55885)
SQL injection in sqli (CVE-2025-55885). Risk of unauthorized operations or information disclosure.
CVE-2025-10592 Vulnerability in sqli (CVE-2025-10592)
vulnerability in sqli (CVE-2025-10592). Risk of unauthorized operations or information disclosure.
CVE-2025-57145 Cross-Site Scripting (XSS) in phpgurukul (CVE-2025-57145)
cross-site scripting in phpgurukul (CVE-2025-57145). Risk of unauthorized operations or information disclosure.
CVE-2025-56295 Unrestricted File Upload in carmelo (CVE-2025-56295)
vulnerability in carmelo (CVE-2025-56295). Confidential information can be exposed externally.
CVE-2025-57119 Vulnerability in phpgurukul (CVE-2025-57119)
vulnerability in phpgurukul (CVE-2025-57119). Successful exploitation can lead to full system takeover.
CVE-2025-43368 Use-After-Free in apple (CVE-2025-43368)
vulnerability in apple (CVE-2025-43368). Risk of unauthorized operations or information disclosure.
CVE-2025-43357 Vulnerability in apple (CVE-2025-43357)
vulnerability in apple (CVE-2025-43357). Risk of unauthorized operations or information disclosure.
CVE-2025-57117 Cross-Site Scripting (XSS) in remyandrade (CVE-2025-57117)
cross-site scripting in remyandrade (CVE-2025-57117). Risk of unauthorized operations or information disclosure.
CVE-2025-5086 KEV [KEV] Unsafe Deserialization in Dassault systèmes dassault-systemes (CVE-2025-5086)
vulnerability in Dassault systèmes dassault-systemes (CVE-2025-5086). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-34176 Path Traversal in path-traversal (CVE-2025-34176)
path traversal in path-traversal (CVE-2025-34176). Risk of unauthorized operations or information disclosure.
CVE-2025-34177 Cross-Site Scripting (XSS) in pfsense (CVE-2025-34177)
cross-site scripting in pfsense (CVE-2025-34177). Risk of unauthorized operations or information disclosure.
CVE-2025-34178 Cross-Site Scripting (XSS) in pfsense (CVE-2025-34178)
cross-site scripting in pfsense (CVE-2025-34178). Risk of unauthorized operations or information disclosure.
CVE-2025-34173 Path Traversal in path-traversal (CVE-2025-34173)
path traversal in path-traversal (CVE-2025-34173). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →