Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2022-45206	SQL Injection in sqli (CVE-2022-45206) SQL injection in sqli (CVE-2022-45206). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Jeecg Jeecg Boot	3 years ago
CVE-2022-45207	SQL Injection in sqli (CVE-2022-45207) SQL injection in sqli (CVE-2022-45207). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Jeecg Jeecg Boot	3 years ago
CVE-2022-37721	Cross-Site Scripting (XSS) in privilege-escalation (CVE-2022-37721) cross-site scripting in privilege-escalation (CVE-2022-37721). Successful exploitation can lead to full system takeover.	Critical	JavaScript Cross-Site Scripting Privilege Escalation Cwe 79 +1	3 years ago
CVE-2022-37720	Cross-Site Scripting (XSS) in privilege-escalation (CVE-2022-37720) cross-site scripting in privilege-escalation (CVE-2022-37720). Successful exploitation can lead to full system takeover.	Critical	JavaScript Cross-Site Scripting Privilege Escalation Cwe 79 +2	3 years ago
CVE-2022-44194	Out-of-Bounds Write in netgear (CVE-2022-44194) out-of-bounds write in netgear (CVE-2022-44194). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Netgear R7000P Firmware R7000P	3 years ago
CVE-2022-42989	Cross-Site Scripting (XSS) in sankhya (CVE-2022-42989) cross-site scripting in sankhya (CVE-2022-42989). Successful exploitation can lead to full system takeover.	Critical	Cross-Site Scripting Cwe 79 Sankhya Sankhya Om	3 years ago
CVE-2022-40842	SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-40842) SSRF in ssrf (CVE-2022-40842). Confidential information can be exposed externally.	Critical	PHP Server-Side Request Forgery Cwe 918 Ndk Design +1	3 years ago
CVE-2022-36180	Cross-Site Scripting (XSS) in fusiondirectory (CVE-2022-36180) cross-site scripting in fusiondirectory (CVE-2022-36180). Successful exploitation can lead to full system takeover.	Critical	PHP Cross-Site Scripting Cwe 79 Fusiondirectory	3 years ago
CVE-2022-36179	Fusiondirectory 1.3 suffers from Improper Session Handling. Fusiondirectory 1.3 suffers from Improper Session Handling.	Critical	Cwe 613 Fusiondirectory	3 years ago
CVE-2022-42120	SQL Injection in c (CVE-2022-42120) SQL injection in c (CVE-2022-42120). Successful exploitation can lead to full system takeover. Exploitable via ``namespace``.	Critical	C SQL Injection Cwe 89 Liferay +2	3 years ago
CVE-2022-42122	SQL Injection in sqli (CVE-2022-42122) SQL injection in sqli (CVE-2022-42122). Successful exploitation can lead to full system takeover. Exploitable via ``title``.	Critical	SQL Injection Cwe 89 Liferay Dxp +1	3 years ago
CVE-2022-44087	Code Injection in ecisp (CVE-2022-44087) code injection in ecisp (CVE-2022-44087). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 94 Ecisp Espcms	3 years ago
CVE-2022-44088	Code Injection in ecisp (CVE-2022-44088) code injection in ecisp (CVE-2022-44088). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 94 Ecisp Espcms	3 years ago
CVE-2022-44089	Code Injection in ecisp (CVE-2022-44089) code injection in ecisp (CVE-2022-44089). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 94 Ecisp Espcms	3 years ago
CVE-2022-38580	Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF). Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).	Critical	Server-Side Request Forgery Cwe 918 Zalando Skipper	3 years ago
CVE-2018-19323 KEV	[KEV] Vulnerability in Gigabyte multiple-products (CVE-2018-19323) vulnerability in Gigabyte multiple-products (CVE-2018-19323). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Gigabyte Multiple Products Aorus Graphics Engine Gigabyte App Center +2	3 years ago
CVE-2022-41415	Out-of-Bounds Write in dos (CVE-2022-41415) out-of-bounds write in dos (CVE-2022-41415). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 787 Acer Altos W2000H W570H F4 Firmware +1	3 years ago
CVE-2022-40055	Vulnerability in gxgroup (CVE-2022-40055) vulnerability in gxgroup (CVE-2022-40055). Successful exploitation can lead to full system takeover.	Critical	Cwe 307 Gxgroup Gpon Ont Titanium 2122A Firmware Gpon Ont Titanium 2122A	3 years ago
CVE-2022-33106	Vulnerability in wijungle (CVE-2022-33106) vulnerability in wijungle (CVE-2022-33106). Successful exploitation can lead to full system takeover.	Critical	Cwe 307 Wijungle U250 Firmware U250	3 years ago
CVE-2022-40684 KEV	[KEV] Authentication Bypass in Fortinet multiple-products (CVE-2022-40684) authentication bypass in Fortinet multiple-products (CVE-2022-40684). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Fortinet Multiple Products Cwe 288 Authentication Bypass +4	3 years ago
CVE-2022-35156	SQL Injection in sqli (CVE-2022-35156) SQL injection in sqli (CVE-2022-35156). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpgurukul +1	3 years ago
CVE-2022-40030	SQL Injection in sqli (CVE-2022-40030) SQL injection in sqli (CVE-2022-40030). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Simple Task Managing System Project +1	3 years ago
CVE-2022-0495	SQL Injection in sqli (CVE-2022-0495) SQL injection in sqli (CVE-2022-0495). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89 Parantezteknoloji Koha Library Automation	3 years ago
CVE-2022-2315	SQL Injection in sqli (CVE-2022-2315) SQL injection in sqli (CVE-2022-2315). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89 Databank Accreditation Trackingpresentation Module	3 years ago
CVE-2022-38619	SQL Injection in sqli (CVE-2022-38619) SQL injection in sqli (CVE-2022-38619). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Bpcbt Smartvista Front End	3 years ago
CVE-2022-2177	SQL Injection in sqli (CVE-2022-2177) SQL injection in sqli (CVE-2022-2177). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89 Kayrasoft	3 years ago
CVE-2022-36536	Vulnerability in syncovery (CVE-2022-36536) vulnerability in syncovery (CVE-2022-36536). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 330 Syncovery Linux +1	3 years ago
CVE-2022-37257	Vulnerability in stealjs (CVE-2022-37257) vulnerability in stealjs (CVE-2022-37257). Successful exploitation can lead to full system takeover.	Critical	JavaScript Cwe 1321 Stealjs Steal	3 years ago
CVE-2022-26258 KEV	[KEV] OS Command Injection in D-link dir-820l (CVE-2022-26258) OS command injection in D-link dir-820l (CVE-2022-26258). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	D Link Dir 820L Cwe 78 Remote Code Execution +2	3 years ago
CVE-2022-36640	Vulnerability in influxdb (CVE-2022-36640) vulnerability in influxdb (CVE-2022-36640). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.8.0` or later.	Critical	Cwe 276 Influxdata Influxdb	3 years ago
CVE-2022-36202	Vulnerability in doctors-appointment-system-project (CVE-2022-36202) vulnerability in doctors-appointment-system-project (CVE-2022-36202). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 639 Doctors Appointment System Project Doctors Appointment System	3 years ago
CVE-2022-37176	Vulnerability in tendacn (CVE-2022-37176) vulnerability in tendacn (CVE-2022-37176). Successful exploitation can lead to full system takeover.	Critical	Tendacn Ac6 Firmware Ac6	4 years ago
CVE-2022-32993	Vulnerability in totolink (CVE-2022-32993) vulnerability in totolink (CVE-2022-32993). Successful exploitation can lead to full system takeover.	Critical	Totolink A7000R Firmware A7000R	4 years ago
CVE-2022-38555	Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name. Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name.	Critical	Cwe 787 Linksys E1200 Firmware E1200	4 years ago
CVE-2022-37053	TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php. TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.	Critical	PHP Cwe 94 Trendnet Tew733Gr Firmware +1	4 years ago
CVE-2021-42627	Vulnerability in dlink (CVE-2021-42627) vulnerability in dlink (CVE-2021-42627). Successful exploitation can lead to full system takeover.	Critical	Dlink Dir 615 Firmware Dir 615 Dir 615 J1 Firmware +5	4 years ago
CVE-2021-42232	OS Command Injection in tp-link (CVE-2021-42232) OS command injection in tp-link (CVE-2021-42232). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Tp Link Archer A7 Firmware Archer A7	4 years ago
CVE-2022-35201	Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability. Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.	Critical	Remote Code Execution Tenda Ac18 Firmware Ac18	4 years ago
CVE-2022-36262	Code Injection in taogogo (CVE-2022-36262) code injection in taogogo (CVE-2022-36262). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 94 Taogogo Taocms	4 years ago
CVE-2022-37042 KEV	[KEV] Path Traversal in Synacor zimbra-collaboration-suite-zcs (CVE-2022-37042) path traversal in Synacor zimbra-collaboration-suite-zcs (CVE-2022-37042). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Synacor Zimbra Collaboration Suite Zcs Cwe 23 Remote Code Execution +3	4 years ago
CVE-2022-35293	Vulnerability in sap (CVE-2022-35293) vulnerability in sap (CVE-2022-35293). Confidential information can be exposed externally.	Critical	Cwe 862 Sap Enable Now Manager	4 years ago
CVE-2021-33643	Out-of-Bounds Read in feep (CVE-2021-33643) vulnerability in feep (CVE-2021-33643). Confidential information can be exposed externally.	Critical	Cwe 125 Feep Libtar Openatom +3	4 years ago
CVE-2022-37434	Out-of-Bounds Write in c (CVE-2022-37434) out-of-bounds write in c (CVE-2022-37434). Successful exploitation can lead to full system takeover.	Critical	JavaScript C Cwe 787 Cwe 120 +26	4 years ago
CVE-2022-31321	Vulnerability in dos (CVE-2022-31321) vulnerability in dos (CVE-2022-31321). Confidential information can be exposed externally.	Critical	Denial of Service Cwe 20 Boltcms Bolt	4 years ago
CVE-2022-1277	Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability. Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability.	Critical	SQL Injection Cwe 89 Inavitas Solar Log	4 years ago
CVE-2021-41556	Out-of-Bounds Read in cpp (CVE-2021-41556) vulnerability in cpp (CVE-2021-41556). Successful exploitation can lead to full system takeover.	Critical	C++ Cwe 125 Squirrel Lang Squirrel +2	4 years ago
CVE-2022-35131	Cross-Site Scripting (XSS) in joplinapp (CVE-2022-35131) cross-site scripting in joplinapp (CVE-2022-35131). Successful exploitation can lead to full system takeover.	Critical	Cwe 79 Joplinapp Joplin	4 years ago
CVE-2022-35409	Out-of-Bounds Read in arm (CVE-2022-35409) vulnerability in arm (CVE-2022-35409). Confidential information can be exposed externally.	Critical	Cwe 125 Arm Mbed Tls Trustedfirmware +2	4 years ago
CVE-2022-32224	Unsafe Deserialization in activerecord (CVE-2022-32224) vulnerability in activerecord (CVE-2022-32224). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.2.8.1` or later.	Critical	Remote Code Execution SQL Injection Cwe 502 Activerecord Project +1	4 years ago
CVE-2022-33047	OTFCC v0.10.4 was discovered to contain a heap buffer overflow after free via otfccbuild.c. OTFCC v0.10.4 was discovered to contain a heap buffer overflow after free via otfccbuild.c.	Critical	C Cwe 787 Otfcc Project Otfcc	4 years ago

Vulnerabilities

🍪 About cookies