Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2022-32385	Out-of-Bounds Write in tendacn (CVE-2022-32385) out-of-bounds write in tendacn (CVE-2022-32385). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Tendacn Ac23 Ac2100 Firmware Ac23 Ac2100	4 years ago
CVE-2022-32386	Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan. Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan.	Critical	Cwe 787 Tendacn Ac23 Ac2100 Firmware Ac23 Ac2100	4 years ago
CVE-2022-34835	Out-of-Bounds Write in denx (CVE-2022-34835) out-of-bounds write in denx (CVE-2022-34835). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Denx U Boot	4 years ago
CVE-2022-29499 KEV	[KEV] Vulnerability in Mitel mivoice-connect (CVE-2022-29499) vulnerability in Mitel mivoice-connect (CVE-2022-29499). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Mitel Mivoice Connect Cwe 20 Remote Code Execution	4 years ago
CVE-2021-45024	XXE (XML External Entity) in rocketsoftware (CVE-2021-45024) vulnerability in rocketsoftware (CVE-2021-45024). Successful exploitation can lead to full system takeover.	Critical	Cwe 611 Rocketsoftware Ags Zena	4 years ago
CVE-2022-24562	Vulnerability in iobit (CVE-2022-24562) vulnerability in iobit (CVE-2022-24562). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 306 Iobit Iotransfer	4 years ago
CVE-2022-31384	SQL Injection in sqli (CVE-2022-31384) SQL injection in sqli (CVE-2022-31384). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpgurukul +1	4 years ago
CVE-2022-31382	SQL Injection in sqli (CVE-2022-31382) SQL injection in sqli (CVE-2022-31382). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpgurukul +1	4 years ago
CVE-2022-31383	SQL Injection in sqli (CVE-2022-31383) SQL injection in sqli (CVE-2022-31383). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpgurukul +1	4 years ago
CVE-2021-42675	Unrestricted File Upload in kreado (CVE-2021-42675) vulnerability in kreado (CVE-2021-42675). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 434 Kreado +1	4 years ago
CVE-2022-32511	Unsafe Deserialization in jmespath (CVE-2022-32511) vulnerability in jmespath (CVE-2022-32511). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.6.1` or later.	Critical	Ruby Jmespath Fedoraproject Fedora	4 years ago
CVE-2021-42875	OS Command Injection in totolink (CVE-2021-42875) OS command injection in totolink (CVE-2021-42875). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Totolink Ex1200T Firmware Ex1200T	4 years ago
CVE-2022-29704	BrowsBox CMS v4.0 was discovered to contain a SQL injection vulnerability. BrowsBox CMS v4.0 was discovered to contain a SQL injection vulnerability.	Critical	SQL Injection Cwe 89 Browsbox Brows Box	4 years ago
CVE-2022-31340	Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php. Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php.	Critical	PHP SQL Injection Cwe 89 Argie +1	4 years ago
CVE-2022-30490	SQL Injection in sqli (CVE-2022-30490) SQL injection in sqli (CVE-2022-30490). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Badminton Center Management System Project +1	4 years ago
CVE-2022-28945	Path Traversal in path-traversal (CVE-2022-28945) path traversal in path-traversal (CVE-2022-28945). Successful exploitation can lead to full system takeover.	Critical	Path Traversal Cwe 22 Webbank Webcube	4 years ago
CVE-2022-24239	Unrestricted File Upload in aceware (CVE-2022-24239) vulnerability in aceware (CVE-2022-24239). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Aceware Aceweb Online Portal	4 years ago
CVE-2022-24240	SQL Injection in sqli (CVE-2022-24240) SQL injection in sqli (CVE-2022-24240). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Aceware Aceweb Online Portal	4 years ago
CVE-2021-42872	OS Command Injection in totolink (CVE-2021-42872) OS command injection in totolink (CVE-2021-42872). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Totolink Ex1200T Firmware Ex1200T	4 years ago
CVE-2012-1710 KEV	[KEV] Vulnerability in Oracle fusion-middleware (CVE-2012-1710) vulnerability in Oracle fusion-middleware (CVE-2012-1710). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Oracle Fusion Middleware	4 years ago
CVE-2020-7489	Vulnerability in schneider-electric (CVE-2020-7489) vulnerability in schneider-electric (CVE-2020-7489). Successful exploitation can lead to full system takeover.	Critical	Cwe 74 Schneider Electric Ecostruxure Machine Expert Somachine Basic +6	4 years ago
CVE-2021-41653	Code Injection in tp-link (CVE-2021-41653) code injection in tp-link (CVE-2021-41653). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 94 Tp Link Tl Wr840N Firmware +1	4 years ago
CVE-2020-25368	OS Command Injection in dlink (CVE-2020-25368) OS command injection in dlink (CVE-2020-25368). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Dlink Dir 823G Firmware Dir 823G	4 years ago
CVE-2020-25912	XXE (XML External Entity) in dos (CVE-2020-25912) vulnerability in dos (CVE-2020-25912). Confidential information can be exposed externally.	Critical	PHP Denial of Service Cwe 611 Getsymphony +1	4 years ago
CVE-2021-3825	Vulnerability in pardus (CVE-2021-3825) vulnerability in pardus (CVE-2021-3825). Successful exploitation can lead to full system takeover.	Critical	Cwe 306 Pardus Liderahenk	4 years ago
CVE-2021-41326	Vulnerability in misp-project (CVE-2021-41326) vulnerability in misp-project (CVE-2021-41326). Successful exploitation can lead to full system takeover.	Critical	PHP Misp Project Misp	4 years ago
CVE-2021-36582	Unrestricted File Upload in kooboo (CVE-2021-36582) vulnerability in kooboo (CVE-2021-36582). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Kooboo Kooboo Cms	4 years ago
CVE-2021-36581	Unrestricted File Upload in kooboo (CVE-2021-36581) vulnerability in kooboo (CVE-2021-36581). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Kooboo Kooboo Cms	4 years ago
CVE-2021-39302	SQL Injection in sqli (CVE-2021-39302) SQL injection in sqli (CVE-2021-39302). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Misp Project +1	4 years ago
CVE-2021-33485	CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow. CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.	Critical	Cwe 787 Cwe 122 Codesys Control +6	4 years ago
CVE-2021-22779	Vulnerability in schneider-electric (CVE-2021-22779) vulnerability in schneider-electric (CVE-2021-22779). Confidential information can be exposed externally.	Critical	Authentication Bypass Cwe 290 Schneider Electric Ecostruxure Control Expert +60	4 years ago
CVE-2021-30120	Kaseya VSA through 9.5.7 allows attackers to bypass the 2FA requirement. Kaseya VSA through 9.5.7 allows attackers to bypass the 2FA requirement.	Critical	Cwe 669 Kaseya Vsa	4 years ago
CVE-2021-35502	Vulnerability in misp-project (CVE-2021-35502) vulnerability in misp-project (CVE-2021-35502). Successful exploitation can lead to full system takeover.	Critical	Misp Project Misp	4 years ago
CVE-2021-27132	Vulnerability in sercomm (CVE-2021-27132) vulnerability in sercomm (CVE-2021-27132). Successful exploitation can lead to full system takeover.	Critical	Cwe 74 Sercomm Agcombo Vd625 Firmware Agcombo Vd625	4 years ago
CVE-2020-27285	Vulnerability in redlion (CVE-2020-27285) vulnerability in redlion (CVE-2020-27285). Confidential information can be exposed externally.	Critical	Cwe 306 Redlion Crimson	4 years ago
CVE-2020-35276	SQL Injection in sqli (CVE-2020-35276) SQL injection in sqli (CVE-2020-35276). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Egavilanmedia Ecm Address Book	4 years ago
CVE-2020-29006	Vulnerability in misp-project (CVE-2020-29006) vulnerability in misp-project (CVE-2020-29006). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 862 Misp Project Misp	4 years ago
CVE-2020-24881	SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-24881) SSRF in ssrf (CVE-2020-24881). Successful exploitation can lead to full system takeover.	Critical	Server-Side Request Forgery Cwe 918 Enhancesoft Osticket	4 years ago
CVE-2020-25466	SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-25466) SSRF in ssrf (CVE-2020-25466). Successful exploitation can lead to full system takeover.	Critical	Server-Side Request Forgery Cwe 918 Crmeb	4 years ago
CVE-2020-26867	Unsafe Deserialization in deserialization (CVE-2020-26867) vulnerability in deserialization (CVE-2020-26867). Successful exploitation can lead to full system takeover.	Critical	Insecure Deserialization Cwe 502 Arcinfo Pcvue	4 years ago
CVE-2018-5353	Vulnerability in zohocorp (CVE-2018-5353) vulnerability in zohocorp (CVE-2018-5353). Successful exploitation can lead to full system takeover.	Critical	Cwe 290 Zohocorp Manageengine Adselfservice Plus	4 years ago
CVE-2020-24193	SQL Injection in sqli (CVE-2020-24193) SQL injection in sqli (CVE-2020-24193). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Authentication Bypass Cwe 89 Daily Tracker System Project +1	4 years ago
CVE-2020-15411	Privilege Escalation in misp-project (CVE-2020-15411) vulnerability in misp-project (CVE-2020-15411). Successful exploitation can lead to full system takeover.	Critical	PHP Misp Project Misp	4 years ago
CVE-2019-18184	OS Command Injection in crestron (CVE-2019-18184) OS command injection in crestron (CVE-2019-18184). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Crestron Dmc Stro Firmware Dmc Stro	4 years ago
CVE-2019-1971	OS Command Injection in cisco (CVE-2019-1971) OS command injection in cisco (CVE-2019-1971). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Cwe 20 Cisco Enterprise Nfv Infrastructure Software	4 years ago
CVE-2022-28932	D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions. D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions.	Critical	Cwe 276 Dlink Dsl G2452Dg Firmware Dsl G2452Dg	4 years ago
CVE-2018-19949 KEV	[KEV] Vulnerability in Qnap network-attached-storage-nas (CVE-2018-19949) vulnerability in Qnap network-attached-storage-nas (CVE-2018-19949). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Qnap Network Attached Storage Nas Cwe 20 Cwe 77 +2	4 years ago
CVE-2017-18362 KEV	[KEV] SQL Injection in Kaseya virtual-systemserver-administrator-vsa (CVE-2017-18362) SQL injection in Kaseya virtual-systemserver-administrator-vsa (CVE-2017-18362). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Kaseya Virtual Systemserver Administrator Vsa Cwe 89 Connectwise +1	4 years ago
CVE-2015-0987	Information Disclosure in omron (CVE-2015-0987) vulnerability in omron (CVE-2015-0987). Confidential information can be exposed externally.	Critical	Cwe 200 Cwe 319 Omron Cx Programmer +2	4 years ago
CVE-2022-29351	Unrestricted File Upload in tiddlywiki (CVE-2022-29351) vulnerability in tiddlywiki (CVE-2022-29351). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Tiddlywiki Tiddlywiki5	4 years ago

Vulnerabilities

🍪 About cookies