Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: vendors Tag: cwe-384 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-59883	Vulnerability in CVE-2026-59883 (CVE-2026-59883) vulnerability in CVE-2026-59883 (CVE-2026-59883). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 346 Cwe 384	7 hours ago
CVE-2026-13707	Vulnerability in CVE-2026-13707 (CVE-2026-13707) vulnerability in CVE-2026-13707 (CVE-2026-13707). Risk of unauthorized operations or information disclosure.		PHP Cwe 384	1 week ago
CVE-2026-40082	Vulnerability in cacti (CVE-2026-40082) vulnerability in cacti (CVE-2026-40082). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 384 Cacti	1 week ago
CVE-2026-56425	Vulnerability in csrf (CVE-2026-56425) vulnerability in csrf (CVE-2026-56425). Successful exploitation can lead to full system takeover. Exploitable via `Referer header`.	High	PHP Cross-Site Request Forgery Cwe 384 Misp Project +1	2 weeks ago
CVE-2026-53900	Vulnerability in mozilla (CVE-2026-53900) vulnerability in mozilla (CVE-2026-53900). Risk of unauthorized operations or information disclosure.	Medium	Cwe 345 Cwe 384 Mozilla Firefox Mobile	3 weeks ago
CVE-2026-11335	Vulnerability in CVE-2026-11335 (CVE-2026-11335) vulnerability in CVE-2026-11335 (CVE-2026-11335). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 384	1 month ago
CVE-2026-43827	Vulnerability in org.apache.shiro:shiro-core (CVE-2026-43827) vulnerability in org.apache.shiro:shiro-core (CVE-2026-43827). Confidential information can be exposed externally. Mitigation: upgrade to `3.0.0-alpha-2` or later.	Medium	Apache Cwe 384 Shiro	1 month ago
CVE-2026-41613	OS Command Injection in microsoft (CVE-2026-41613) OS command injection in microsoft (CVE-2026-41613). Successful exploitation can lead to full system takeover.	High	Cwe 78 Cwe 384 Microsoft Visual Studio Code	1 month ago
CVE-2025-46605	Vulnerability in dell (CVE-2025-46605) vulnerability in dell (CVE-2025-46605). Confidential information can be exposed externally.	Medium	Cwe 384 Dell Data Domain Operating System	2 months ago
CVE-2025-45953	Vulnerability in phpgurukul (CVE-2025-45953) vulnerability in phpgurukul (CVE-2025-45953). Confidential information can be exposed externally.	Critical	PHP Cwe 384 Phpgurukul Hostel Management System	1 year ago
CVE-2025-45949	Vulnerability in phpgurukul (CVE-2025-45949) vulnerability in phpgurukul (CVE-2025-45949). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 384 Phpgurukul User Registration Login And User Management System	1 year ago
CVE-2017-1270	Vulnerability in ibm (CVE-2017-1270) vulnerability in ibm (CVE-2017-1270). Risk of unauthorized operations or information disclosure.	Low	Cwe 384 Ibm Security Guardium	8 years ago
CVE-2017-11562	Vulnerability in mt4 (CVE-2017-11562) vulnerability in mt4 (CVE-2017-11562). Successful exploitation can lead to full system takeover.	High	PHP Cwe 384 Mt4 Senhasegura	8 years ago
CVE-2017-15304	Vulnerability in airtame (CVE-2017-15304) vulnerability in airtame (CVE-2017-15304). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 384 Airtame Hdmi Dongle Firmware +1	8 years ago
CVE-2017-12225	Authentication Bypass in cisco (CVE-2017-12225) authentication bypass in cisco (CVE-2017-12225). Data can be tampered with by attackers.	Medium	Cwe 287 Cwe 384 Cisco Prime Lan Management Solution	8 years ago
CVE-2016-10405	Vulnerability in d-link (CVE-2016-10405) vulnerability in d-link (CVE-2016-10405). Successful exploitation can lead to full system takeover.	Critical	Cwe 384 D Link Dir 600L Firmware Dlink +1	8 years ago
CVE-2017-12868	Vulnerability in simplesamlphp (CVE-2017-12868) vulnerability in simplesamlphp (CVE-2017-12868). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 384 Simplesamlphp	8 years ago
CVE-2016-9981	Vulnerability in ibm (CVE-2016-9981) vulnerability in ibm (CVE-2016-9981). Successful exploitation can lead to full system takeover.	High	Cwe 384 Ibm Security Appscan	8 years ago
CVE-2017-4014	Vulnerability in mcafee (CVE-2017-4014) vulnerability in mcafee (CVE-2017-4014). Successful exploitation can lead to full system takeover.	High	Cwe 384 Mcafee Network Data Loss Prevention	9 years ago
CVE-2017-5656	Vulnerability in apache (CVE-2017-5656) vulnerability in apache (CVE-2017-5656). Confidential information can be exposed externally.	High	Apache Cwe 384 Cxf	9 years ago
CVE-2017-1152	Vulnerability in ibm (CVE-2017-1152) vulnerability in ibm (CVE-2017-1152). Risk of unauthorized operations or information disclosure.	Medium	Cwe 384 Ibm Financial Transaction Manager	9 years ago
CVE-2017-6412	In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310. In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.	High	Cwe 384 Sophos Web Appliance	9 years ago
CVE-2016-9703	Vulnerability in ibm (CVE-2016-9703) vulnerability in ibm (CVE-2016-9703). Risk of unauthorized operations or information disclosure.	Low	Cwe 384 Ibm Security Identity Manager Virtual Appliance	9 years ago
CVE-2016-6043	Vulnerability in ibm (CVE-2016-6043) vulnerability in ibm (CVE-2016-6043). Successful exploitation can lead to full system takeover.	High	Cwe 384 Ibm Tivoli Storage Manager	9 years ago
CVE-2016-6040	Vulnerability in ibm (CVE-2016-6040) vulnerability in ibm (CVE-2016-6040). Risk of unauthorized operations or information disclosure.	Medium	Cwe 384 Ibm Rational Collaborative Lifecycle Management	9 years ago

Vulnerabilities

🍪 About cookies