Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2020-26037	Path Traversal in path-traversal (CVE-2020-26037) path traversal in path-traversal (CVE-2020-26037). Successful exploitation can lead to full system takeover.	Critical	Path Traversal Cwe 22 Evenbalance Punkbuster	3 years ago
CVE-2023-30186	Use-After-Free in onlyoffice (CVE-2023-30186) vulnerability in onlyoffice (CVE-2023-30186). Successful exploitation can lead to full system takeover.	Critical	JavaScript Cwe 416 Onlyoffice Document Server	3 years ago
CVE-2023-30187	Out-of-Bounds Write in onlyoffice (CVE-2023-30187) out-of-bounds write in onlyoffice (CVE-2023-30187). Successful exploitation can lead to full system takeover.	Critical	JavaScript Cwe 787 Onlyoffice Document Server	3 years ago
CVE-2023-37847	novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability. novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability.	Critical	SQL Injection Cwe 89 Xxyopen Novel Plus	3 years ago
CVE-2023-39805	SQL Injection in sqli (CVE-2023-39805) SQL injection in sqli (CVE-2023-39805). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Idreamsoft +1	3 years ago
CVE-2023-39806	iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function. iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function.	Critical	SQL Injection Cwe 89 Idreamsoft Icms	3 years ago
CVE-2023-33468	Authorization Flaw in kramerav (CVE-2023-33468) vulnerability in kramerav (CVE-2023-33468). Confidential information can be exposed externally.	Critical	Cwe 863 Kramerav Via Go2 Firmware Via Go2 +2	3 years ago
CVE-2023-39004	Vulnerability in privilege-escalation (CVE-2023-39004) vulnerability in privilege-escalation (CVE-2023-39004). Successful exploitation can lead to full system takeover.	Critical	Privilege Escalation Cwe 732 Opnsense	3 years ago
CVE-2023-3632	Vulnerability in kunduz (CVE-2023-3632) vulnerability in kunduz (CVE-2023-3632). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 321 Kunduz	3 years ago
CVE-2023-36911	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	Critical	Remote Code Execution Cwe 190 Microsoft Windows 10 +11	3 years ago
CVE-2023-36910	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	Critical	Remote Code Execution Cwe 190 Microsoft Windows 10 +11	3 years ago
CVE-2023-35385	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	Critical	Remote Code Execution Cwe 190 Microsoft Windows 10 1507 +11	3 years ago
CVE-2023-21709	Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Exchange Server Elevation of Privilege Vulnerability	Critical	Cwe 307 Microsoft Exchange Server	3 years ago
CVE-2023-3386	SQL Injection in sqli (CVE-2023-3386) SQL injection in sqli (CVE-2023-3386). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 A2Technology Camera Trap Tracking System	3 years ago
CVE-2023-3522	SQL Injection in sqli (CVE-2023-3522) SQL injection in sqli (CVE-2023-3522). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 A2Technology License Portal System	3 years ago
CVE-2023-3651	SQL Injection in sqli (CVE-2023-3651) SQL injection in sqli (CVE-2023-3651). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Digital Ant	3 years ago
CVE-2023-3716	SQL Injection in sqli (CVE-2023-3716) SQL injection in sqli (CVE-2023-3716). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Oduyo Online Collection	3 years ago
CVE-2023-3717	SQL Injection in sqli (CVE-2023-3717) SQL injection in sqli (CVE-2023-3717). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Farmakom Remote Administration Console	3 years ago
CVE-2023-3898	SQL Injection in sqli (CVE-2023-3898) SQL injection in sqli (CVE-2023-3898). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Mayanets E Commerce	3 years ago
CVE-2023-36095	Code Injection in langchain (CVE-2023-36095) code injection in langchain (CVE-2023-36095). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.0.236` or later.	Critical	Python Cwe 94 LangChain	3 years ago
CVE-2023-38951	Path Traversal in path-traversal (CVE-2023-38951) path traversal in path-traversal (CVE-2023-38951). Successful exploitation can lead to full system takeover.	Critical	Path Traversal Cwe 22 Zkteco Biotime	3 years ago
CVE-2023-37679	Command Injection in nextgen (CVE-2023-37679) command injection in nextgen (CVE-2023-37679). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 77 Nextgen Mirth Connect	3 years ago
CVE-2023-38954	ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability. ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.	Critical	SQL Injection Cwe 89 Zkteco Bioaccess Ivs	3 years ago
CVE-2023-36082	Vulnerability in gatesair (CVE-2023-36082) vulnerability in gatesair (CVE-2023-36082). Successful exploitation can lead to full system takeover.	Critical	Cwe 522 Gatesair Flexiva Fax 150W Firmware Flexiva Fax 150W	3 years ago
CVE-2023-34960	Command Injection in chamilo (CVE-2023-34960) command injection in chamilo (CVE-2023-34960). Successful exploitation can lead to full system takeover.	Critical	Cwe 77 Chamilo	3 years ago
CVE-2023-34842	Code Injection in dedecms (CVE-2023-34842) code injection in dedecms (CVE-2023-34842). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 94 Dedecms	3 years ago
CVE-2023-37647	SQL Injection in sqli (CVE-2023-37647) SQL injection in sqli (CVE-2023-37647). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Sem Cms +1	3 years ago
CVE-2023-35066	SQL Injection in sqli (CVE-2023-35066) SQL injection in sqli (CVE-2023-35066). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Infodrom E Invoice Approval System	3 years ago
CVE-2023-3046	SQL Injection in sqli (CVE-2023-3046) SQL injection in sqli (CVE-2023-3046). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Biltay Scienta	3 years ago
CVE-2023-35078 KEV	[KEV] Authentication Bypass in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35078) authentication bypass in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35078). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Ivanti Endpoint Manager Mobile Epmm Cwe 287 Authentication Bypass +1	3 years ago
CVE-2023-3519 KEV	[KEV] Code Injection in Citrix netscaler-adc-and-netscaler-gateway (CVE-2023-3519) code injection in Citrix netscaler-adc-and-netscaler-gateway (CVE-2023-3519). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Citrix Netscaler Adc And Netscaler Gateway Cwe 94 Remote Code Execution +2	3 years ago
CVE-2023-2958	Vulnerability in orjinyazilim (CVE-2023-2958) vulnerability in orjinyazilim (CVE-2023-2958). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 639 Orjinyazilim Ats Pro	3 years ago
CVE-2023-3376	SQL Injection in sqli (CVE-2023-3376) SQL injection in sqli (CVE-2023-3376). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Dijital Zekiweb	3 years ago
CVE-2023-2963	SQL Injection in sqli (CVE-2023-2963) SQL injection in sqli (CVE-2023-2963). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Olivaekspertiz Oliva Ekspertiz	3 years ago
CVE-2023-35070	SQL Injection in sqli (CVE-2023-35070) SQL injection in sqli (CVE-2023-35070). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Vegagroup Web Collection	3 years ago
CVE-2023-2957	SQL Injection in sqli (CVE-2023-2957) SQL injection in sqli (CVE-2023-2957). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Lisayazilim Florist Site	3 years ago
CVE-2023-1547	SQL Injection in sqli (CVE-2023-1547) SQL injection in sqli (CVE-2023-1547). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Elra Parkmatik	3 years ago
CVE-2023-33668	Vulnerability in digiexam (CVE-2023-33668) vulnerability in digiexam (CVE-2023-33668). Successful exploitation can lead to full system takeover.	Critical	Cwe 354 Digiexam	3 years ago
CVE-2023-33150	Microsoft Office Security Feature Bypass Vulnerability Microsoft Office Security Feature Bypass Vulnerability	Critical	Cwe 693 Microsoft 365 Apps Office +2	3 years ago
CVE-2023-3045	SQL Injection in sqli (CVE-2023-3045) SQL injection in sqli (CVE-2023-3045). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Tise Parking Web Report	3 years ago
CVE-2023-2852	SQL Injection in sqli (CVE-2023-2852) SQL injection in sqli (CVE-2023-2852). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Softmedyazilim Selfpatron	3 years ago
CVE-2023-2046	SQL Injection in sqli (CVE-2023-2046) SQL injection in sqli (CVE-2023-2046). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Yontemizleme Vehicle Tracking System	3 years ago
CVE-2023-35175	SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-35175) SSRF in ssrf (CVE-2023-35175). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Server-Side Request Forgery Cwe 918 Hp +76	3 years ago
CVE-2023-2907	SQL Injection in sqli (CVE-2023-2907) SQL injection in sqli (CVE-2023-2907). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Marksoft	3 years ago
CVE-2023-29534	Vulnerability in mozilla (CVE-2023-29534) vulnerability in mozilla (CVE-2023-29534). Confidential information can be exposed externally.	Critical	Mozilla Firefox Focus Firefox Mobile	3 years ago
CVE-2023-34832	Vulnerability in tp-link (CVE-2023-34832) vulnerability in tp-link (CVE-2023-34832). Successful exploitation can lead to full system takeover.	Critical	Cwe 120 Tp Link Archer Ax10 Firmware Archer Ax10	3 years ago
CVE-2023-34752	SQL Injection in sqli (CVE-2023-34752) SQL injection in sqli (CVE-2023-34752). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Bloofox +3	3 years ago
CVE-2023-34944	Unrestricted File Upload in chamilo (CVE-2023-34944) vulnerability in chamilo (CVE-2023-34944). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 434 Chamilo Chamilo Lms	3 years ago
CVE-2023-31541	Unrestricted File Upload in ckeditor (CVE-2023-31541) vulnerability in ckeditor (CVE-2023-31541). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Ckeditor	3 years ago
CVE-2023-35064	SQL Injection in sqli (CVE-2023-35064) SQL injection in sqli (CVE-2023-35064). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Satos Satos Mobile	3 years ago

Vulnerabilities

🍪 About cookies