Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2014-9558	Multiple SQL injection vulnerabilities in SmartCMS v.2. Multiple SQL injection vulnerabilities in SmartCMS v.2.	Critical	SQL Injection Cwe 89 Smartcms	9 years ago
CVE-2017-13707	Privilege Escalation in privilege-escalation (CVE-2017-13707) vulnerability in privilege-escalation (CVE-2017-13707). Successful exploitation can lead to full system takeover.	Critical	Privilege Escalation Cwe 269 Axcient Replibit	9 years ago
CVE-2017-12816	Vulnerability in kaspersky (CVE-2017-12816) vulnerability in kaspersky (CVE-2017-12816). Successful exploitation can lead to full system takeover.	Critical	Cwe 732 Kaspersky Internet Security	9 years ago
CVE-2017-12707	Vulnerability in spidercontrol (CVE-2017-12707) vulnerability in spidercontrol (CVE-2017-12707). Successful exploitation can lead to full system takeover.	Critical	Cwe 121 Cwe 119 Spidercontrol Scada Microbrowser	9 years ago
CVE-2014-7857	Authentication Bypass in d-link (CVE-2014-7857) authentication bypass in d-link (CVE-2014-7857). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 D Link Dns 322L Firmware Dlink +13	9 years ago
CVE-2014-7858	Authentication Bypass in d-link (CVE-2014-7858) authentication bypass in d-link (CVE-2014-7858). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 D Link Dnr 326 Firmware Dlink +1	9 years ago
CVE-2014-7859	Buffer Overflow in d-link (CVE-2014-7859) vulnerability in d-link (CVE-2014-7859). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 D Link Dns 322L Firmware Dlink +9	9 years ago
CVE-2015-8352	Path Traversal in path-traversal (CVE-2015-8352) path traversal in path-traversal (CVE-2015-8352). Successful exploitation can lead to full system takeover.	Critical	PHP Path Traversal Cwe 22 Zen Cart	9 years ago
CVE-2015-1801	Buffer Overflow in dos (CVE-2015-1801) vulnerability in dos (CVE-2015-1801). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 119 Samsung Galaxy S4 Firmware +1	9 years ago
CVE-2017-12679	SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php. SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php.	Critical	PHP SQL Injection Cwe 89 Nexusphp	9 years ago
CVE-2017-13669	SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php. SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.	Critical	PHP SQL Injection Cwe 89 Nexusphp	9 years ago
CVE-2017-12965	Vulnerability in apache2triad (CVE-2017-12965) vulnerability in apache2triad (CVE-2017-12965). Successful exploitation can lead to full system takeover.	Critical	Cwe 384 Apache2Triad	9 years ago
CVE-2015-5224	Vulnerability in kernel (CVE-2015-5224) vulnerability in kernel (CVE-2015-5224). Successful exploitation can lead to full system takeover.	Critical	Cwe 377 Kernel Util Linux	9 years ago
CVE-2017-12791	Path Traversal in salt (CVE-2017-12791) path traversal in salt (CVE-2017-12791). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2016.11.7, 2017.7.1` or later.	Critical	Path Traversal Cwe 22 Saltstack Salt	9 years ago
CVE-2017-12858	Vulnerability in c (CVE-2017-12858) vulnerability in c (CVE-2017-12858). Successful exploitation can lead to full system takeover.	Critical	C Cwe 415 Libzip	9 years ago
CVE-2017-13137	The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php. The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php.	Critical	PHP WordPress SQL Injection Cwe 89 +2	9 years ago
CVE-2017-13139	Out-of-Bounds Read in c (CVE-2017-13139) vulnerability in c (CVE-2017-13139). Successful exploitation can lead to full system takeover.	Critical	C Cwe 125 Imagemagick Debian +3	9 years ago
CVE-2015-6472	Vulnerability in wago (CVE-2015-6472) vulnerability in wago (CVE-2015-6472). Successful exploitation can lead to full system takeover.	Critical	Cwe 255 Wago 750 849 Firmware 750 849 +4	9 years ago
CVE-2015-6473	WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation. WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.	Critical	Cwe 254 Wago 750 849 Firmware 750 849 +2	9 years ago
CVE-2016-4460	Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication. Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication.	Critical	Apache Cwe 287 Pony Mail	9 years ago
CVE-2017-12785	Buffer Overflow in noviflow (CVE-2017-12785) vulnerability in noviflow (CVE-2017-12785). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Noviflow Noviware	9 years ago
CVE-2017-12786	Buffer Overflow in noviflow (CVE-2017-12786) vulnerability in noviflow (CVE-2017-12786). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Noviflow Noviware	9 years ago
CVE-2017-12787	Buffer Overflow in noviflow (CVE-2017-12787) vulnerability in noviflow (CVE-2017-12787). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Noviflow Noviware	9 years ago
CVE-2015-2857	Command Injection in accellion (CVE-2015-2857) command injection in accellion (CVE-2015-2857). Successful exploitation can lead to full system takeover.	Critical	Cwe 77 Accellion File Transfer Appliance	9 years ago
CVE-2017-7420	Authentication Bypass in microfocus (CVE-2017-7420) authentication bypass in microfocus (CVE-2017-7420). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 287 Microfocus Enterprise Developer +2	9 years ago
CVE-2017-12981	SQL Injection in sqli (CVE-2017-12981) SQL injection in sqli (CVE-2017-12981). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Nexusphp	9 years ago
CVE-2017-11366	OS Command Injection in codiad (CVE-2017-11366) OS command injection in codiad (CVE-2017-11366). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 78 Codiad	9 years ago
CVE-2007-5199	Buffer Overflow in c (CVE-2007-5199) vulnerability in c (CVE-2007-5199). Successful exploitation can lead to full system takeover.	Critical	C Cwe 119 X Libxfont	9 years ago
CVE-2007-5341	Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8. Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.	Critical	Remote Code Execution Cwe 119 Mozilla Firefox	9 years ago
CVE-2017-7364	Use-After-Free in google (CVE-2017-7364) vulnerability in google (CVE-2017-7364). Successful exploitation can lead to full system takeover.	Critical	Cwe 416 Google Android	9 years ago
CVE-2016-10390	Vulnerability in google (CVE-2016-10390) vulnerability in google (CVE-2016-10390). Successful exploitation can lead to full system takeover.	Critical	Cwe 399 Google Android	9 years ago
CVE-2016-10391	Vulnerability in google (CVE-2016-10391) vulnerability in google (CVE-2016-10391). Successful exploitation can lead to full system takeover.	Critical	Cwe 20 Google Android	9 years ago
CVE-2016-10392	Buffer Overflow in google (CVE-2016-10392) vulnerability in google (CVE-2016-10392). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Google Android	9 years ago
CVE-2016-5871	Buffer Overflow in google (CVE-2016-5871) vulnerability in google (CVE-2016-5871). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Cwe 190 Google Android	9 years ago
CVE-2016-5872	Vulnerability in google (CVE-2016-5872) vulnerability in google (CVE-2016-5872). Successful exploitation can lead to full system takeover.	Critical	Cwe 20 Google Android	9 years ago
CVE-2015-9055	Vulnerability in google (CVE-2015-9055) vulnerability in google (CVE-2015-9055). Successful exploitation can lead to full system takeover.	Critical	Cwe 20 Google Android	9 years ago
CVE-2015-9060	Vulnerability in google (CVE-2015-9060) vulnerability in google (CVE-2015-9060). Successful exploitation can lead to full system takeover.	Critical	Cwe 20 Google Android	9 years ago
CVE-2015-9061	Vulnerability in google (CVE-2015-9061) vulnerability in google (CVE-2015-9061). Successful exploitation can lead to full system takeover.	Critical	Cwe 20 Google Android	9 years ago
CVE-2015-9062	Buffer Overflow in google (CVE-2015-9062) vulnerability in google (CVE-2015-9062). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Cwe 190 Google Android	9 years ago
CVE-2015-9063	Buffer Overflow in google (CVE-2015-9063) vulnerability in google (CVE-2015-9063). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Google Android	9 years ago
CVE-2015-9064	Vulnerability in google (CVE-2015-9064) vulnerability in google (CVE-2015-9064). Successful exploitation can lead to full system takeover.	Critical	Cwe 284 Google Android	9 years ago
CVE-2015-9065	Vulnerability in google (CVE-2015-9065) vulnerability in google (CVE-2015-9065). Successful exploitation can lead to full system takeover.	Critical	Cwe 254 Google Android	9 years ago
CVE-2015-9066	Buffer Overflow in google (CVE-2015-9066) vulnerability in google (CVE-2015-9066). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Google Android	9 years ago
CVE-2015-9067	Vulnerability in google (CVE-2015-9067) vulnerability in google (CVE-2015-9067). Successful exploitation can lead to full system takeover.	Critical	Google Android	9 years ago
CVE-2015-9068	Vulnerability in google (CVE-2015-9068) vulnerability in google (CVE-2015-9068). Successful exploitation can lead to full system takeover.	Critical	Cwe 20 Google Android	9 years ago
CVE-2015-9069	Vulnerability in google (CVE-2015-9069) vulnerability in google (CVE-2015-9069). Successful exploitation can lead to full system takeover.	Critical	Cwe 20 Google Android	9 years ago
CVE-2015-9070	Buffer Overflow in google (CVE-2015-9070) vulnerability in google (CVE-2015-9070). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Google Android	9 years ago
CVE-2015-9071	Buffer Overflow in google (CVE-2015-9071) vulnerability in google (CVE-2015-9071). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Google Android	9 years ago
CVE-2015-9072	Vulnerability in google (CVE-2015-9072) vulnerability in google (CVE-2015-9072). Successful exploitation can lead to full system takeover.	Critical	Cwe 476 Google Android	9 years ago
CVE-2015-9073	Vulnerability in google (CVE-2015-9073) vulnerability in google (CVE-2015-9073). Successful exploitation can lead to full system takeover.	Critical	Cwe 476 Google Android	9 years ago

Vulnerabilities

🍪 About cookies