Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: vendors Tag: cwe-254 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-31773	In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder path in smp_random() currently lab... In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder path in smp_random() currently labels the stored STK as authenticated whenever pending_sec_level is BT_SECURITY_HIGH. That reflects wh...	High	Linux Linux Kernel Bluetooth Cwe 254 +1	3 months ago
CVE-2015-1130 KEV	[KEV] Vulnerability in Apple os-x (CVE-2015-1130) vulnerability in Apple os-x (CVE-2015-1130). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Os X Cwe 254	4 years ago
CVE-2017-12353	Vulnerability in cisco (CVE-2017-12353) vulnerability in cisco (CVE-2017-12353). Risk of unauthorized operations or information disclosure.	Medium	Cwe 254 Cisco Asyncos	8 years ago
CVE-2015-7268	Vulnerability in samsung (CVE-2015-7268) vulnerability in samsung (CVE-2015-7268). Confidential information can be exposed externally.	Medium	Cwe 254 Samsung 850 Pro Firmware 850 Pro +7	8 years ago
CVE-2015-7267	Vulnerability in samsung (CVE-2015-7267) vulnerability in samsung (CVE-2015-7267). Confidential information can be exposed externally.	Medium	Cwe 254 Samsung 850 Pro Firmware 850 Pro +7	8 years ago
CVE-2016-10517	Vulnerability in c (CVE-2016-10517) vulnerability in c (CVE-2016-10517). Confidential information can be exposed externally.	High	C Cwe 254 Redislabs Redis	8 years ago
CVE-2017-11818	Vulnerability in microsoft (CVE-2017-11818) vulnerability in microsoft (CVE-2017-11818). Risk of unauthorized operations or information disclosure.	Medium	Cwe 254 Microsoft Windows 10 Windows 81 +3	8 years ago
CVE-2014-9635	Vulnerability in tomcat (CVE-2014-9635) vulnerability in tomcat (CVE-2014-9635). Risk of unauthorized operations or information disclosure. Exploitable via `Cookie header`.	Medium	Tomcat Cwe 254 Jenkins Apache	8 years ago
CVE-2014-9634	Vulnerability in tomcat (CVE-2014-9634) vulnerability in tomcat (CVE-2014-9634). Risk of unauthorized operations or information disclosure.	Medium	Tomcat Cwe 254 Jenkins Apache	8 years ago
CVE-2015-9065	Vulnerability in google (CVE-2015-9065) vulnerability in google (CVE-2015-9065). Successful exploitation can lead to full system takeover.	Critical	Cwe 254 Google Android	9 years ago
CVE-2016-8964	Information Disclosure in ibm (CVE-2016-8964) vulnerability in ibm (CVE-2016-8964). Successful exploitation can lead to full system takeover.	Critical	Cwe 200 Cwe 254 Ibm Bigfix Inventory +1	9 years ago
CVE-2012-5010	Vulnerability in cisco (CVE-2012-5010) vulnerability in cisco (CVE-2012-5010). Data can be tampered with by attackers.	High	Cwe 254 Cisco Adaptive Security Appliance Software	9 years ago
CVE-2016-9738	Vulnerability in ibm (CVE-2016-9738) vulnerability in ibm (CVE-2016-9738). Confidential information can be exposed externally.	High	Cwe 254 Ibm Qradar Security Information And Event Manager	9 years ago
CVE-2016-10336	Vulnerability in google (CVE-2016-10336) vulnerability in google (CVE-2016-10336). Data can be tampered with by attackers.	Medium	Cwe 254 Google Android	9 years ago
CVE-2016-10332	Vulnerability in google (CVE-2016-10332) vulnerability in google (CVE-2016-10332). Data can be tampered with by attackers.	Medium	Cwe 254 Google Android	9 years ago
CVE-2010-1776	Vulnerability in apple (CVE-2010-1776) vulnerability in apple (CVE-2010-1776). Risk of unauthorized operations or information disclosure.	Medium	Cwe 254 Apple Iphone Os	9 years ago
CVE-2016-1520	Vulnerability in grandstream (CVE-2016-1520) vulnerability in grandstream (CVE-2016-1520). Successful exploitation can lead to full system takeover.	High	Cwe 254 Grandstream Wave	9 years ago
CVE-2016-7541	Vulnerability in fortinet (CVE-2016-7541) vulnerability in fortinet (CVE-2016-7541). Data can be tampered with by attackers.	Medium	Cwe 254 Fortinet Fortios	9 years ago
CVE-2016-9470	Cross-Site Scripting (XSS) in revive-adserver (CVE-2016-9470) cross-site scripting in revive-adserver (CVE-2016-9470). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 79 Cwe 254 Revive Adserver	9 years ago
CVE-2015-8986	Vulnerability in mcafee (CVE-2015-8986) vulnerability in mcafee (CVE-2015-8986). Data can be tampered with by attackers.	Medium	Cwe 254 Mcafee Advanced Threat Defense	9 years ago
CVE-2015-8990	Vulnerability in mcafee (CVE-2015-8990) vulnerability in mcafee (CVE-2015-8990). Data can be tampered with by attackers.	High	Cwe 254 Mcafee Advanced Threat Defense	9 years ago
CVE-2016-5933	Vulnerability in ibm (CVE-2016-5933) vulnerability in ibm (CVE-2016-5933). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.	Medium	Cwe 254 Ibm Tivoli Monitoring	9 years ago
CVE-2016-7630	Vulnerability in apple (CVE-2016-7630) vulnerability in apple (CVE-2016-7630). Successful exploitation can lead to full system takeover.	Critical	Cwe 254 Apple Iphone Os	9 years ago
CVE-2016-7638	Vulnerability in apple (CVE-2016-7638) vulnerability in apple (CVE-2016-7638). Risk of unauthorized operations or information disclosure.	Medium	Cwe 254 Apple Iphone Os	9 years ago
CVE-2016-7597	Vulnerability in apple (CVE-2016-7597) vulnerability in apple (CVE-2016-7597). Data can be tampered with by attackers.	Medium	Cwe 254 Apple Iphone Os	9 years ago
CVE-2016-7601	Vulnerability in apple (CVE-2016-7601) vulnerability in apple (CVE-2016-7601). Successful exploitation can lead to full system takeover.	Medium	Cwe 254 Apple Iphone Os	9 years ago
CVE-2016-4689	Vulnerability in apple (CVE-2016-4689) vulnerability in apple (CVE-2016-4689). Data can be tampered with by attackers.	High	Cwe 254 Apple Iphone Os	9 years ago
CVE-2016-4721	Vulnerability in apple (CVE-2016-4721) vulnerability in apple (CVE-2016-4721). Data can be tampered with by attackers.	Medium	Cwe 254 Apple Iphone Os Mac Os X	9 years ago
CVE-2016-4781	Vulnerability in apple (CVE-2016-4781) vulnerability in apple (CVE-2016-4781). Successful exploitation can lead to full system takeover.	Medium	Cwe 254 Apple Iphone Os	9 years ago
CVE-2016-7584	Vulnerability in apple (CVE-2016-7584) vulnerability in apple (CVE-2016-7584). Successful exploitation can lead to full system takeover.	High	Cwe 254 Apple Iphone Os Mac Os X +2	9 years ago
CVE-2016-9010	Vulnerability in ibm (CVE-2016-9010) vulnerability in ibm (CVE-2016-9010). Risk of unauthorized operations or information disclosure.	Medium	Cwe 254 Ibm Integration Bus Websphere Message Broker	9 years ago
CVE-2016-3102	Vulnerability in jenkins (CVE-2016-3102) vulnerability in jenkins (CVE-2016-3102). Risk of unauthorized operations or information disclosure.	High	Cwe 254 Jenkins Script Security	9 years ago
CVE-2016-8911	Vulnerability in ibm (CVE-2016-8911) vulnerability in ibm (CVE-2016-8911). Risk of unauthorized operations or information disclosure.	Medium	Cwe 254 Ibm Kenexa Lms On Cloud	9 years ago
CVE-2016-5898	Vulnerability in ibm (CVE-2016-5898) vulnerability in ibm (CVE-2016-5898). Risk of unauthorized operations or information disclosure.	Medium	Cwe 254 Ibm Jazz Reporting Service	9 years ago
CVE-2016-5949	Vulnerability in ibm (CVE-2016-5949) vulnerability in ibm (CVE-2016-5949). Risk of unauthorized operations or information disclosure.	Medium	Cwe 254 Ibm Kenexa Lcms Premier	9 years ago
CVE-2015-7973	Vulnerability in ntp (CVE-2015-7973) vulnerability in ntp (CVE-2015-7973). Risk of unauthorized operations or information disclosure.	Medium	Cwe 254 Ntp Siemens Tim 4R Ie Firmware +9	9 years ago
CVE-2016-8306	Vulnerability in oracle (CVE-2016-8306) vulnerability in oracle (CVE-2016-8306). Risk of unauthorized operations or information disclosure.	Medium	Cwe 254 Oracle Flexcube Investor Servicing	9 years ago
CVE-2016-8329	Vulnerability in oracle (CVE-2016-8329) vulnerability in oracle (CVE-2016-8329). Risk of unauthorized operations or information disclosure.	Medium	Cwe 254 Oracle Peoplesoft Enterprise Peopletools	9 years ago
CVE-2016-8314	Vulnerability in oracle (CVE-2016-8314) vulnerability in oracle (CVE-2016-8314). Risk of unauthorized operations or information disclosure.	Low	Cwe 254 Oracle Flexcube Core Banking	9 years ago
CVE-2016-8310	Vulnerability in dos (CVE-2016-8310) vulnerability in dos (CVE-2016-8310). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 254 Oracle Flexcube Universal Banking	9 years ago
CVE-2016-8303	Vulnerability in oracle (CVE-2016-8303) vulnerability in oracle (CVE-2016-8303). Risk of unauthorized operations or information disclosure.	Medium	Cwe 254 Oracle Flexcube Universal Banking	9 years ago
CVE-2016-5623	Vulnerability in oracle (CVE-2016-5623) vulnerability in oracle (CVE-2016-5623). Risk of unauthorized operations or information disclosure.	Medium	Cwe 254 Oracle Flexcube Private Banking	9 years ago
CVE-2016-5545	Vulnerability in dos (CVE-2016-5545) vulnerability in dos (CVE-2016-5545). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 254 Oracle Vm Virtualbox	9 years ago
CVE-2016-5196	Vulnerability in google (CVE-2016-5196) vulnerability in google (CVE-2016-5196). Successful exploitation can lead to full system takeover.	High	Cwe 254 Google Chrome	9 years ago
CVE-2016-6497	Vulnerability in apache (CVE-2016-6497) vulnerability in apache (CVE-2016-6497). Data can be tampered with by attackers.	High	Java Apache Cwe 254 Groovy Ldap	9 years ago
CVE-2016-10148	Vulnerability in wordpress (CVE-2016-10148) vulnerability in wordpress (CVE-2016-10148). Risk of unauthorized operations or information disclosure.	Medium	PHP WordPress Cwe 254 Cwe 284	9 years ago

Vulnerabilities

🍪 About cookies