Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: vendors Clear

ID	Title	Severity	Tags	Detected
CVE-2023-51947	Vulnerability in actidata (CVE-2023-51947) vulnerability in actidata (CVE-2023-51947). Confidential information can be exposed externally.	Critical	PHP Cwe 306 Actidata Actinas Sl 2U 8 Rdx Firmware +1	2 years ago
CVE-2024-21887 KEV	[KEV] Command Injection in Ivanti connect-secure-and-policy-secure (CVE-2024-21887) command injection in Ivanti connect-secure-and-policy-secure (CVE-2024-21887). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Ivanti Connect Secure And Policy Secure Cwe 77 Connect Secure +1	2 years ago
CVE-2023-50988	Out-of-Bounds Write in tenda (CVE-2023-50988) out-of-bounds write in tenda (CVE-2023-50988). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Tenda I29 Firmware I29	2 years ago
CVE-2023-50989	Command Injection in tenda (CVE-2023-50989) command injection in tenda (CVE-2023-50989). Successful exploitation can lead to full system takeover.	Critical	Cwe 77 Tenda I29 Firmware I29	2 years ago
CVE-2023-50990	Out-of-Bounds Write in tenda (CVE-2023-50990) out-of-bounds write in tenda (CVE-2023-50990). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Tenda I29 Firmware I29	2 years ago
CVE-2023-50992	Out-of-Bounds Write in tenda (CVE-2023-50992) out-of-bounds write in tenda (CVE-2023-50992). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Tenda I29 Firmware I29	2 years ago
CVE-2023-50983	Command Injection in tenda (CVE-2023-50983) command injection in tenda (CVE-2023-50983). Successful exploitation can lead to full system takeover.	Critical	Cwe 77 Tenda I29 Firmware I29	2 years ago
CVE-2023-50984	Out-of-Bounds Write in tenda (CVE-2023-50984) out-of-bounds write in tenda (CVE-2023-50984). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Tenda I29 Firmware I29	2 years ago
CVE-2023-50985	Out-of-Bounds Write in tenda (CVE-2023-50985) out-of-bounds write in tenda (CVE-2023-50985). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Tenda I29 Firmware I29	2 years ago
CVE-2023-50986	Out-of-Bounds Write in tenda (CVE-2023-50986) out-of-bounds write in tenda (CVE-2023-50986). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Cwe 120 Tenda I29 Firmware +1	2 years ago
CVE-2023-50987	Out-of-Bounds Write in tenda (CVE-2023-50987) out-of-bounds write in tenda (CVE-2023-50987). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Tenda I29 Firmware I29	2 years ago
CVE-2023-50918	app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs. app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs.	Critical	PHP Misp Project Misp	2 years ago
CVE-2023-41265 KEV	[KEV] Vulnerability in Qlik sense (CVE-2023-41265) vulnerability in Qlik sense (CVE-2023-41265). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.	Critical	Qlik Sense Cwe 444 Qlik Sense	2 years ago
CVE-2023-49060	Vulnerability in mozilla (CVE-2023-49060) vulnerability in mozilla (CVE-2023-49060). Successful exploitation can lead to full system takeover. Exploitable via ``referrerpolicy``.	Critical	Mozilla Firefox Mobile	2 years ago
CVE-2023-48655	Vulnerability in misp-project (CVE-2023-48655) vulnerability in misp-project (CVE-2023-48655). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 116 Misp Project Misp	2 years ago
CVE-2023-48656	An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses. An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses.	Critical	PHP Misp Project Misp	2 years ago
CVE-2023-48657	An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters. An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters.	Critical	PHP Misp Project Misp	2 years ago
CVE-2023-48658	Vulnerability in misp-project (CVE-2023-48658) vulnerability in misp-project (CVE-2023-48658). Successful exploitation can lead to full system takeover.	Critical	PHP Misp Project Misp	2 years ago
CVE-2023-48659	Vulnerability in misp-project (CVE-2023-48659) vulnerability in misp-project (CVE-2023-48659). Successful exploitation can lead to full system takeover.	Critical	PHP Misp Project Misp	2 years ago
CVE-2023-47246 KEV	[KEV] Path Traversal in Sysaid tomcat (CVE-2023-47246) path traversal in Sysaid tomcat (CVE-2023-47246). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Sysaid Sysaid Server Cwe 22 Tomcat +1	2 years ago
CVE-2023-46958	Code Injection in lmxcms (CVE-2023-46958) code injection in lmxcms (CVE-2023-46958). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 94 Lmxcms	2 years ago
CVE-2023-46010	Code Injection in seacms (CVE-2023-46010) code injection in seacms (CVE-2023-46010). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 94 Seacms	2 years ago
CVE-2023-38545	Out-of-Bounds Write in haxx (CVE-2023-38545) out-of-bounds write in haxx (CVE-2023-38545). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Haxx Libcurl Fedoraproject +14	2 years ago
CVE-2023-4966 KEV	[KEV] Buffer Overflow in Citrix netscaler-adc-and-netscaler-gateway (CVE-2023-4966) vulnerability in Citrix netscaler-adc-and-netscaler-gateway (CVE-2023-4966). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.	Critical	Citrix Netscaler Adc And Netscaler Gateway Cwe 119 Netscaler Application Delivery Controller +1	2 years ago
CVE-2023-43234	Code Injection in dedebiz (CVE-2023-43234) code injection in dedebiz (CVE-2023-43234). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 94 Dedebiz	2 years ago
CVE-2023-34576	SQL Injection in sqli (CVE-2023-34576) SQL injection in sqli (CVE-2023-34576). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Store Opart +1	2 years ago
CVE-2023-4662	Vulnerability in adobe (CVE-2023-4662) vulnerability in adobe (CVE-2023-4662). Successful exploitation can lead to full system takeover.	Critical	Cwe 250 Cwe 269 Adobe Connect	2 years ago
CVE-2023-4661	SQL Injection in sqli (CVE-2023-4661) SQL injection in sqli (CVE-2023-4661). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Adobe Connect	2 years ago
CVE-2023-39807	SQL Injection in sqli (CVE-2023-39807) SQL injection in sqli (CVE-2023-39807). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Nvki +1	3 years ago
CVE-2023-39809	Command Injection in nvki (CVE-2023-39809) command injection in nvki (CVE-2023-39809). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 77 Nvki Intelligent Broadband Subscriber Gateway	3 years ago
CVE-2023-39805	SQL Injection in sqli (CVE-2023-39805) SQL injection in sqli (CVE-2023-39805). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Idreamsoft +1	3 years ago
CVE-2023-36911	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	Critical	Remote Code Execution Cwe 190 Microsoft Windows 10 +11	3 years ago
CVE-2023-36910	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	Critical	Remote Code Execution Cwe 190 Microsoft Windows 10 +11	3 years ago
CVE-2023-35385	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	Critical	Remote Code Execution Cwe 190 Microsoft Windows 10 1507 +11	3 years ago
CVE-2023-21709	Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Exchange Server Elevation of Privilege Vulnerability	Critical	Cwe 307 Microsoft Exchange Server	3 years ago
CVE-2023-38951	Path Traversal in path-traversal (CVE-2023-38951) path traversal in path-traversal (CVE-2023-38951). Successful exploitation can lead to full system takeover.	Critical	Path Traversal Cwe 22 Zkteco Biotime	3 years ago
CVE-2023-38954	ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability. ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.	Critical	SQL Injection Cwe 89 Zkteco Bioaccess Ivs	3 years ago
CVE-2023-34842	Code Injection in dedecms (CVE-2023-34842) code injection in dedecms (CVE-2023-34842). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 94 Dedecms	3 years ago
CVE-2023-37647	SQL Injection in sqli (CVE-2023-37647) SQL injection in sqli (CVE-2023-37647). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Sem Cms +1	3 years ago
CVE-2023-35078 KEV	[KEV] Authentication Bypass in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35078) authentication bypass in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35078). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Ivanti Endpoint Manager Mobile Epmm Cwe 287 Authentication Bypass +1	3 years ago
CVE-2023-3519 KEV	[KEV] Code Injection in Citrix netscaler-adc-and-netscaler-gateway (CVE-2023-3519) code injection in Citrix netscaler-adc-and-netscaler-gateway (CVE-2023-3519). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Citrix Netscaler Adc And Netscaler Gateway Cwe 94 Remote Code Execution +2	3 years ago
CVE-2023-33150	Microsoft Office Security Feature Bypass Vulnerability Microsoft Office Security Feature Bypass Vulnerability	Critical	Cwe 693 Microsoft 365 Apps Office +2	3 years ago
CVE-2023-29534	Vulnerability in mozilla (CVE-2023-29534) vulnerability in mozilla (CVE-2023-29534). Confidential information can be exposed externally.	Critical	Mozilla Firefox Focus Firefox Mobile	3 years ago
CVE-2023-34832	Vulnerability in tp-link (CVE-2023-34832) vulnerability in tp-link (CVE-2023-34832). Successful exploitation can lead to full system takeover.	Critical	Cwe 120 Tp Link Archer Ax10 Firmware Archer Ax10	3 years ago
CVE-2023-34752	SQL Injection in sqli (CVE-2023-34752) SQL injection in sqli (CVE-2023-34752). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Bloofox +3	3 years ago
CVE-2023-34944	Unrestricted File Upload in chamilo (CVE-2023-34944) vulnerability in chamilo (CVE-2023-34944). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 434 Chamilo Chamilo Lms	3 years ago
CVE-2023-27997 KEV	[KEV] Vulnerability in Fortinet fortios-and-fortiproxy-ssl-vpn (CVE-2023-27997) vulnerability in Fortinet fortios-and-fortiproxy-ssl-vpn (CVE-2023-27997). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Fortinet Fortios And Fortiproxy Ssl Vpn Cwe 122 Cwe 787 +4	3 years ago
CVE-2023-33532	Command Injection in netgear (CVE-2023-33532) command injection in netgear (CVE-2023-33532). Successful exploitation can lead to full system takeover.	Critical	Cwe 77 Netgear R6250 Firmware R6250	3 years ago
CVE-2016-8735 KEV	[KEV] Vulnerability in Apache tomcat (CVE-2016-8735) vulnerability in Apache tomcat (CVE-2016-8735). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Apache Tomcat Cwe 284 Remote Code Execution +23	3 years ago
CVE-2023-30185	Unrestricted File Upload in crmeb (CVE-2023-30185) vulnerability in crmeb (CVE-2023-30185). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 434 Crmeb	3 years ago

Vulnerabilities

🍪 About cookies