Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: vendors Clear

ID	Title	Severity	Tags	Detected
CVE-2023-33532	Command Injection in netgear (CVE-2023-33532) command injection in netgear (CVE-2023-33532). Successful exploitation can lead to full system takeover.	Critical	Cwe 77 Netgear R6250 Firmware R6250	3 years ago
CVE-2023-33530	Command Injection in tenda (CVE-2023-33530) command injection in tenda (CVE-2023-33530). Successful exploitation can lead to full system takeover.	High	Cwe 77 Tenda G103 Firmware G103	3 years ago
CVE-2023-33009 KEV	[KEV] Vulnerability in Zyxel multiple-firewalls (CVE-2023-33009) vulnerability in Zyxel multiple-firewalls (CVE-2023-33009). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Zyxel Multiple Firewalls Cwe 120	3 years ago
CVE-2023-33010 KEV	[KEV] Vulnerability in Zyxel multiple-firewalls (CVE-2023-33010) vulnerability in Zyxel multiple-firewalls (CVE-2023-33010). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Zyxel Multiple Firewalls Cwe 120	3 years ago
CVE-2023-34362 KEV	[KEV] SQL Injection in Progress moveit-transfer (CVE-2023-34362) SQL injection in Progress moveit-transfer (CVE-2023-34362). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Progress Moveit Transfer Cwe 89	3 years ago
CVE-2023-28771 KEV	[KEV] OS Command Injection in Zyxel multiple-firewalls (CVE-2023-28771) OS command injection in Zyxel multiple-firewalls (CVE-2023-28771). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Zyxel Multiple Firewalls Cwe 78	3 years ago
CVE-2023-33234	Vulnerability in apache (CVE-2023-33234) vulnerability in apache (CVE-2023-33234). Successful exploitation can lead to full system takeover.	High	Apache Cwe 74 Apache Airflow Providers Cncf Kubernetes	3 years ago
CVE-2023-2868 KEV	[KEV] Vulnerability in Barracuda networks barracuda-networks (CVE-2023-2868) vulnerability in Barracuda networks barracuda-networks (CVE-2023-2868). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Barracuda Networks Email Security Gateway Esg Appliance Cwe 20	3 years ago
CVE-2023-32409 KEV	[KEV] Vulnerability in Apple multiple-products (CVE-2023-32409) vulnerability in Apple multiple-products (CVE-2023-32409). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Multiple Products	3 years ago
CVE-2023-28204 KEV	[KEV] Out-of-Bounds Read in Apple multiple-products (CVE-2023-28204) vulnerability in Apple multiple-products (CVE-2023-28204). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Multiple Products Cwe 125	3 years ago
CVE-2023-32373 KEV	[KEV] Use-After-Free in Apple multiple-products (CVE-2023-32373) vulnerability in Apple multiple-products (CVE-2023-32373). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Multiple Products Cwe 416	3 years ago
CVE-2023-21492 KEV	[KEV] Vulnerability in Samsung mobile-devices (CVE-2023-21492) vulnerability in Samsung mobile-devices (CVE-2023-21492). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Samsung Mobile Devices Cwe 532	3 years ago
CVE-2004-1464 KEV	[KEV] Vulnerability in Cisco ios (CVE-2004-1464) vulnerability in Cisco ios (CVE-2004-1464). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco iOS	3 years ago
CVE-2016-6415 KEV	[KEV] Information Disclosure in Cisco ios (CVE-2016-6415) vulnerability in Cisco ios (CVE-2016-6415). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco iOS Ios Xr And Ios Xe +1	3 years ago
CVE-2022-47879	Code Injection in jedox (CVE-2022-47879) code injection in jedox (CVE-2022-47879). Successful exploitation can lead to full system takeover.	High	PHP Remote Code Execution Cwe 94 Jedox +1	3 years ago
CVE-2022-47880	Vulnerability in jedox (CVE-2022-47880) vulnerability in jedox (CVE-2022-47880). Confidential information can be exposed externally.	Medium	PHP Cwe 522 Jedox Jedox Cloud	3 years ago
CVE-2014-0196 KEV	[KEV] Vulnerability in Linux kernel (CVE-2014-0196) vulnerability in Linux kernel (CVE-2014-0196). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Linux Kernel Cwe 362	3 years ago
CVE-2010-3904 KEV	[KEV] Vulnerability in Linux kernel (CVE-2010-3904) vulnerability in Linux kernel (CVE-2010-3904). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Linux Kernel Cwe 20	3 years ago
CVE-2015-5317 KEV	[KEV] Information Disclosure in jenkins (CVE-2015-5317) vulnerability in jenkins (CVE-2015-5317). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Jenkins Jenkins User Interface Ui Cwe 200	3 years ago
CVE-2016-8735 KEV	[KEV] Vulnerability in Apache tomcat (CVE-2016-8735) vulnerability in Apache tomcat (CVE-2016-8735). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apache Tomcat Cwe 284	3 years ago
CVE-2016-3427 KEV	[KEV] Vulnerability in Oracle java-se-and-jrockit (CVE-2016-3427) vulnerability in Oracle java-se-and-jrockit (CVE-2016-3427). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Oracle Java Se And Jrockit	3 years ago
CVE-2021-3560 KEV	[KEV] Authorization Flaw in Red hat red-hat (CVE-2021-3560) vulnerability in Red hat red-hat (CVE-2021-3560). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Red Hat Polkit Cwe 863	3 years ago
CVE-2023-25717 KEV	[KEV] Code Injection in Ruckus wireless ruckus-wireless (CVE-2023-25717) code injection in Ruckus wireless ruckus-wireless (CVE-2023-25717). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Ruckus Wireless Multiple Products Cwe 94	3 years ago
CVE-2023-29333	Microsoft Access Denial of Service Vulnerability Microsoft Access Denial of Service Vulnerability	Low	Denial of Service Cwe 400 Microsoft 365 Apps +2	3 years ago
CVE-2023-29335	Microsoft Word Security Feature Bypass Vulnerability Microsoft Word Security Feature Bypass Vulnerability	High	Cwe 20 Microsoft Windows 10 1507 Windows 10 1607 +14	3 years ago
CVE-2023-29336 KEV	[KEV] Use-After-Free in Microsoft win32k (CVE-2023-29336) vulnerability in Microsoft win32k (CVE-2023-29336). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Win32K Cwe 416	3 years ago
CVE-2023-30185	Unrestricted File Upload in crmeb (CVE-2023-30185) vulnerability in crmeb (CVE-2023-30185). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 434 Crmeb	3 years ago
CVE-2023-30242	SQL Injection in sqli (CVE-2023-30242) SQL injection in sqli (CVE-2023-30242). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Netentsec +1	3 years ago
CVE-2023-23059	Vulnerability in geovision (CVE-2023-23059) vulnerability in geovision (CVE-2023-23059). Successful exploitation can lead to full system takeover.	Critical	Cwe 276 Geovision Gv Edge Recording Manager	3 years ago
CVE-2021-45046 KEV	[KEV] Vulnerability in Apache log4j2 (CVE-2021-45046) vulnerability in Apache log4j2 (CVE-2021-45046). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apache Log4J2 Cwe 917	3 years ago
CVE-2023-21839 KEV	[KEV] Vulnerability in Oracle weblogic-server (CVE-2023-21839) vulnerability in Oracle weblogic-server (CVE-2023-21839). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Oracle Weblogic Server	3 years ago
CVE-2023-1389 KEV	[KEV] Command Injection in Tp-link archer-ax21 (CVE-2023-1389) command injection in Tp-link archer-ax21 (CVE-2023-1389). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Tp Link Archer Ax21 Cwe 77	3 years ago
CVE-2023-27350 KEV	[KEV] Vulnerability in Papercut mfng (CVE-2023-27350) vulnerability in Papercut mfng (CVE-2023-27350). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Papercut Mfng Cwe 284	3 years ago
CVE-2023-28432 KEV	[KEV] Information Disclosure in minio (CVE-2023-28432) vulnerability in minio (CVE-2023-28432). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Minio Cwe 200	3 years ago
CVE-2023-2136 KEV	[KEV] Vulnerability in Google platform/external/skia (CVE-2023-2136) vulnerability in Google platform/external/skia (CVE-2023-2136). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `13:2023-07-01` or later.	High	Google Chromium Skia Cwe 190	3 years ago
CVE-2017-6742 KEV	[KEV] Buffer Overflow in Cisco ios-and-ios-xe-software (CVE-2017-6742) vulnerability in Cisco ios-and-ios-xe-software (CVE-2017-6742). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco Ios And Ios Xe Software Cwe 119	3 years ago
CVE-2023-2033 KEV	[KEV] Vulnerability in Google chromium-v8 (CVE-2023-2033) vulnerability in Google chromium-v8 (CVE-2023-2033). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Google Chromium V8 Cwe 843	3 years ago
CVE-2019-8526 KEV	[KEV] Use-After-Free in Apple macos (CVE-2019-8526) vulnerability in Apple macos (CVE-2019-8526). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple macOS Cwe 416	3 years ago
CVE-2023-27666	Cross-Site Scripting (XSS) in auto-dealer-management-system-project (CVE-2023-27666) cross-site scripting in auto-dealer-management-system-project (CVE-2023-27666). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Auto Dealer Management System Project +1	3 years ago
CVE-2023-20963 KEV	[KEV] Vulnerability in Android platform/frameworks/base (CVE-2023-20963) vulnerability in Android platform/frameworks/base (CVE-2023-20963). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `13:2023-03-01` or later.	High	Android Framework Cwe 295	3 years ago
CVE-2023-29492 KEV	[KEV] Code Injection in Novi survey novi-survey (CVE-2023-29492) code injection in Novi survey novi-survey (CVE-2023-29492). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Novi Survey Cwe 94	3 years ago
CVE-2023-28252 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2023-28252) vulnerability in Microsoft windows (CVE-2023-28252). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 122	3 years ago
CVE-2023-28205 KEV	[KEV] Use-After-Free in Apple multiple-products (CVE-2023-28205) vulnerability in Apple multiple-products (CVE-2023-28205). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Multiple Products Cwe 416	3 years ago
CVE-2023-28206 KEV	[KEV] Out-of-Bounds Write in Apple ios (CVE-2023-28206) out-of-bounds write in Apple ios (CVE-2023-28206). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple iOS Ipados And Macos +1	3 years ago
CVE-2019-1388 KEV	[KEV] Privilege Escalation in Microsoft windows (CVE-2019-1388) vulnerability in Microsoft windows (CVE-2019-1388). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 269	3 years ago
CVE-2023-26083 KEV	[KEV] Vulnerability in Arm mali-graphics-processing-unit-gpu (CVE-2023-26083) vulnerability in Arm mali-graphics-processing-unit-gpu (CVE-2023-26083). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Arm Mali Graphics Processing Unit Gpu Cwe 401	3 years ago
CVE-2021-27876 KEV	[KEV] Authentication Bypass in Veritas backup-exec-agent (CVE-2021-27876) authentication bypass in Veritas backup-exec-agent (CVE-2021-27876). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Veritas Backup Exec Agent Cwe 287	3 years ago
CVE-2021-27877 KEV	[KEV] Authentication Bypass in Veritas backup-exec-agent (CVE-2021-27877) authentication bypass in Veritas backup-exec-agent (CVE-2021-27877). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Veritas Backup Exec Agent Cwe 287	3 years ago
CVE-2021-27878 KEV	[KEV] Authentication Bypass in Veritas backup-exec-agent (CVE-2021-27878) authentication bypass in Veritas backup-exec-agent (CVE-2021-27878). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Veritas Backup Exec Agent Cwe 287	3 years ago
CVE-2022-27926 KEV	[KEV] Cross-Site Scripting (XSS) in Synacor zimbra-collaboration-suite-zcs (CVE-2022-27926) cross-site scripting in Synacor zimbra-collaboration-suite-zcs (CVE-2022-27926). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Synacor Zimbra Collaboration Suite Zcs Cwe 79 Cwe 138	3 years ago

Vulnerabilities

🍪 About cookies