Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: vendors Clear

ID	Title	Severity	Tags	Detected
CVE-2016-9415	Vulnerability in mybb (CVE-2016-9415) vulnerability in mybb (CVE-2016-9415). Data can be tampered with by attackers.	High	Cwe 284 Mybb Merge System Microsoft +1	9 years ago
CVE-2016-9418	Information Disclosure in mybb (CVE-2016-9418) vulnerability in mybb (CVE-2016-9418). Confidential information can be exposed externally.	High	Cwe 200 Mybb Merge System Microsoft +1	9 years ago
CVE-2015-8973	Vulnerability in mybb (CVE-2015-8973) vulnerability in mybb (CVE-2015-8973). Risk of unauthorized operations or information disclosure.	High	PHP Cwe 284 Mybb Merge System	9 years ago
CVE-2016-6285	Cross-Site Scripting (XSS) in atlassian (CVE-2016-6285) cross-site scripting in atlassian (CVE-2016-6285). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.	Medium	Cross-Site Scripting Cwe 79 Atlassian Jira	9 years ago
CVE-2016-6621	SSRF (Server-Side Request Forgery) in ssrf (CVE-2016-6621) SSRF in ssrf (CVE-2016-6621). Confidential information can be exposed externally.	High	Server-Side Request Forgery Cwe 918 Phpmyadmin	9 years ago
CVE-2016-3176	Authentication Bypass in salt (CVE-2016-3176) authentication bypass in salt (CVE-2016-3176). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2015.5.10, 2015.8.8` or later.	Medium	Cwe 287 Saltstack Salt	9 years ago
CVE-2016-10043	OS Command Injection in apache (CVE-2016-10043) OS command injection in apache (CVE-2016-10043). Successful exploitation can lead to full system takeover.	Critical	Apache Cwe 78 Mrf Web Panel	9 years ago
CVE-2016-9249	Vulnerability in dos (CVE-2016-9249) vulnerability in dos (CVE-2016-9249). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 F5 Big Ip Local Traffic Manager +9	9 years ago
CVE-2015-2180	Vulnerability in roundcube (CVE-2015-2180) vulnerability in roundcube (CVE-2015-2180). Successful exploitation can lead to full system takeover.	High	Cwe 74 Roundcube Webmail	9 years ago
CVE-2015-2181	Buffer Overflow in roundcube (CVE-2015-2181) vulnerability in roundcube (CVE-2015-2181). Successful exploitation can lead to full system takeover.	High	Cwe 119 Roundcube Webmail	9 years ago
CVE-2016-7798	Vulnerability in ruby-lang (CVE-2016-7798) vulnerability in ruby-lang (CVE-2016-7798). Confidential information can be exposed externally.	High	Ruby Cwe 326 Ruby Lang Openssl +2	9 years ago
CVE-2015-8034	Information Disclosure in salt (CVE-2015-8034) vulnerability in salt (CVE-2015-8034). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2015.8.3` or later.	Low	Cwe 200 Saltstack Salt	9 years ago
CVE-2016-6266	Vulnerability in trendmicro (CVE-2016-6266) vulnerability in trendmicro (CVE-2016-6266). Successful exploitation can lead to full system takeover.	High	PHP Cwe 20 Trendmicro Smart Protection Server	9 years ago
CVE-2016-6267	Vulnerability in trendmicro (CVE-2016-6267) vulnerability in trendmicro (CVE-2016-6267). Successful exploitation can lead to full system takeover.	High	PHP Cwe 20 Trendmicro Smart Protection Server	9 years ago
CVE-2016-6269	Path Traversal in path-traversal (CVE-2016-6269) path traversal in path-traversal (CVE-2016-6269). Confidential information can be exposed externally.	Critical	PHP Path Traversal Cwe 22 Trendmicro +1	9 years ago
CVE-2016-6604	Vulnerability in samsung (CVE-2016-6604) vulnerability in samsung (CVE-2016-6604). Successful exploitation can lead to full system takeover.	Critical	Cwe 476 Samsung Exynos Fimg2D Google +1	9 years ago
CVE-2016-2518	Out-of-Bounds Read in ntp (CVE-2016-2518) vulnerability in ntp (CVE-2016-2518). Risk of unauthorized operations or information disclosure.	Medium	Cwe 125 Ntp Debian Debian Linux +20	9 years ago
CVE-2016-7544	Vulnerability in cryptopp (CVE-2016-7544) vulnerability in cryptopp (CVE-2016-7544). Risk of unauthorized operations or information disclosure.	High	Cwe 399 Cryptopp Crypto Microsoft +1	9 years ago
CVE-2015-7977	Vulnerability in dos (CVE-2015-7977) vulnerability in dos (CVE-2015-7977). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 476 Ntp Oracle +16	9 years ago
CVE-2015-7973	Vulnerability in ntp (CVE-2015-7973) vulnerability in ntp (CVE-2015-7973). Risk of unauthorized operations or information disclosure.	Medium	Cwe 254 Ntp Siemens Tim 4R Ie Firmware +9	9 years ago
CVE-2017-5572	Privilege Escalation in citrix (CVE-2017-5572) vulnerability in citrix (CVE-2017-5572). Data can be tampered with by attackers.	Medium	Cwe 269 Citrix Xenserver	9 years ago
CVE-2017-5573	Vulnerability in citrix (CVE-2017-5573) vulnerability in citrix (CVE-2017-5573). Data can be tampered with by attackers.	Medium	Citrix Xenserver	9 years ago
CVE-2017-5632	Vulnerability in dos (CVE-2017-5632) vulnerability in dos (CVE-2017-5632). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Asus Rt N56U Firmware Rt N56U	9 years ago
CVE-2016-10175	Information Disclosure in netgear (CVE-2016-10175) vulnerability in netgear (CVE-2016-10175). Successful exploitation can lead to full system takeover.	Critical	Cwe 200 Netgear Wnr2000V5 Firmware Wnr2000V5	9 years ago
CVE-2016-10176	Vulnerability in netgear (CVE-2016-10176) vulnerability in netgear (CVE-2016-10176). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 20 Netgear Wnr2000V5 Firmware +1	9 years ago
CVE-2017-5627	Vulnerability in c (CVE-2017-5627) vulnerability in c (CVE-2017-5627). Successful exploitation can lead to full system takeover.	High	JavaScript C Cwe 190 Artifex +1	9 years ago
CVE-2017-5628	Vulnerability in c (CVE-2017-5628) vulnerability in c (CVE-2017-5628). Successful exploitation can lead to full system takeover.	High	JavaScript C Cwe 190 Artifex +1	9 years ago
CVE-2017-5610	Information Disclosure in wordpress (CVE-2017-5610) vulnerability in wordpress (CVE-2017-5610). Risk of unauthorized operations or information disclosure.	Medium	PHP WordPress Cwe 200 Debian +1	9 years ago
CVE-2017-5611	SQL Injection in wordpress (CVE-2017-5611) SQL injection in wordpress (CVE-2017-5611). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress SQL Injection Cwe 89 +4	9 years ago
CVE-2017-5612	Cross-Site Scripting (XSS) in wordpress (CVE-2017-5612) cross-site scripting in wordpress (CVE-2017-5612). Risk of unauthorized operations or information disclosure.	Medium	PHP WordPress Cross-Site Scripting Cwe 79 +2	9 years ago
CVE-2017-5609	SQL Injection in sqli (CVE-2017-5609) SQL injection in sqli (CVE-2017-5609). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 S9Y +1	9 years ago
CVE-2016-9553	Command Injection in sophos (CVE-2016-9553) command injection in sophos (CVE-2016-9553). Successful exploitation can lead to full system takeover.	High	PHP Cwe 77 Sophos Web Appliance	9 years ago
CVE-2016-9554	Command Injection in sophos (CVE-2016-9554) command injection in sophos (CVE-2016-9554). Successful exploitation can lead to full system takeover.	High	PHP Cwe 77 Sophos Web Appliance	9 years ago
CVE-2017-3433	Vulnerability in oracle (CVE-2017-3433) vulnerability in oracle (CVE-2017-3433). Confidential information can be exposed externally.	High	Oracle One To One Fulfillment	9 years ago
CVE-2017-3435	Vulnerability in oracle (CVE-2017-3435) vulnerability in oracle (CVE-2017-3435). Confidential information can be exposed externally.	High	Oracle One To One Fulfillment	9 years ago
CVE-2017-3436	Vulnerability in oracle (CVE-2017-3436) vulnerability in oracle (CVE-2017-3436). Confidential information can be exposed externally.	High	Oracle One To One Fulfillment	9 years ago
CVE-2017-3437	Vulnerability in oracle (CVE-2017-3437) vulnerability in oracle (CVE-2017-3437). Confidential information can be exposed externally.	High	Oracle One To One Fulfillment	9 years ago
CVE-2017-3438	Vulnerability in oracle (CVE-2017-3438) vulnerability in oracle (CVE-2017-3438). Confidential information can be exposed externally.	High	Oracle One To One Fulfillment	9 years ago
CVE-2017-3439	Vulnerability in oracle (CVE-2017-3439) vulnerability in oracle (CVE-2017-3439). Confidential information can be exposed externally.	High	Oracle One To One Fulfillment	9 years ago
CVE-2017-3440	Vulnerability in oracle (CVE-2017-3440) vulnerability in oracle (CVE-2017-3440). Confidential information can be exposed externally.	High	Oracle Customer Interaction History	9 years ago
CVE-2017-3441	Vulnerability in oracle (CVE-2017-3441) vulnerability in oracle (CVE-2017-3441). Confidential information can be exposed externally.	High	Oracle Customer Interaction History	9 years ago
CVE-2017-3442	Vulnerability in oracle (CVE-2017-3442) vulnerability in oracle (CVE-2017-3442). Confidential information can be exposed externally.	High	Oracle Customer Interaction History	9 years ago
CVE-2017-3443	Vulnerability in oracle (CVE-2017-3443) vulnerability in oracle (CVE-2017-3443). Confidential information can be exposed externally.	High	Oracle Common Applications	9 years ago
CVE-2017-3402	Vulnerability in oracle (CVE-2017-3402) vulnerability in oracle (CVE-2017-3402). Confidential information can be exposed externally.	High	Oracle Advanced Outbound Telephony	9 years ago
CVE-2017-3403	Vulnerability in oracle (CVE-2017-3403) vulnerability in oracle (CVE-2017-3403). Confidential information can be exposed externally.	High	Oracle Advanced Outbound Telephony	9 years ago
CVE-2017-3404	Vulnerability in oracle (CVE-2017-3404) vulnerability in oracle (CVE-2017-3404). Confidential information can be exposed externally.	High	Oracle Advanced Outbound Telephony	9 years ago
CVE-2017-3405	Vulnerability in oracle (CVE-2017-3405) vulnerability in oracle (CVE-2017-3405). Confidential information can be exposed externally.	High	Oracle Advanced Outbound Telephony	9 years ago
CVE-2017-3406	Vulnerability in oracle (CVE-2017-3406) vulnerability in oracle (CVE-2017-3406). Confidential information can be exposed externally.	High	Oracle Advanced Outbound Telephony	9 years ago
CVE-2017-3407	Vulnerability in oracle (CVE-2017-3407) vulnerability in oracle (CVE-2017-3407). Confidential information can be exposed externally.	High	Oracle Advanced Outbound Telephony	9 years ago
CVE-2017-3408	Vulnerability in oracle (CVE-2017-3408) vulnerability in oracle (CVE-2017-3408). Confidential information can be exposed externally.	High	Oracle Advanced Outbound Telephony	9 years ago

Vulnerabilities

🍪 About cookies