Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2021-20124 KEV |
|
[KEV] Path Traversal in Draytek vigorconnect (CVE-2021-20124)
path traversal in Draytek vigorconnect (CVE-2021-20124). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-7262 KEV |
|
[KEV] Path Traversal in Kingsoft wps-office (CVE-2024-7262)
path traversal in Kingsoft wps-office (CVE-2024-7262). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-7965 KEV |
|
[KEV] Vulnerability in Google chromium-v8 (CVE-2024-7965)
vulnerability in Google chromium-v8 (CVE-2024-7965). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-38856 KEV |
|
[KEV] Authorization Flaw in Apache ofbiz (CVE-2024-38856)
vulnerability in Apache ofbiz (CVE-2024-38856). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-7971 KEV |
|
[KEV] Vulnerability in Google chromium-v8 (CVE-2024-7971)
vulnerability in Google chromium-v8 (CVE-2024-7971). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-39717 KEV |
|
[KEV] Unrestricted File Upload in Versa director (CVE-2024-39717)
vulnerability in Versa director (CVE-2024-39717). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-33044 KEV |
|
[KEV] Authentication Bypass in Dahua ip-camera-firmware (CVE-2021-33044)
authentication bypass in Dahua ip-camera-firmware (CVE-2021-33044). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-33045 KEV |
|
[KEV] Authentication Bypass in Dahua ip-camera-firmware (CVE-2021-33045)
authentication bypass in Dahua ip-camera-firmware (CVE-2021-33045). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-0185 KEV |
|
[KEV] Vulnerability in Linux kernel (CVE-2022-0185)
vulnerability in Linux kernel (CVE-2022-0185). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-31196 KEV |
|
[KEV] Vulnerability in Microsoft exchange-server (CVE-2021-31196)
vulnerability in Microsoft exchange-server (CVE-2021-31196). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-23897 KEV |
|
[KEV] Vulnerability in jenkins (CVE-2024-23897)
vulnerability in jenkins (CVE-2024-23897). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-28986 KEV |
|
[KEV] Unsafe Deserialization in Solarwinds web-help-desk (CVE-2024-28986)
vulnerability in Solarwinds web-help-desk (CVE-2024-28986). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-38189 KEV |
|
[KEV] Vulnerability in Microsoft project (CVE-2024-38189)
vulnerability in Microsoft project (CVE-2024-38189). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-38178 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2024-38178)
vulnerability in Microsoft windows (CVE-2024-38178). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-38213 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2024-38213)
vulnerability in Microsoft windows (CVE-2024-38213). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-38193 KEV |
|
[KEV] Use-After-Free in Microsoft windows (CVE-2024-38193)
vulnerability in Microsoft windows (CVE-2024-38193). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-38106 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2024-38106)
vulnerability in Microsoft windows (CVE-2024-38106). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-38107 KEV |
|
[KEV] Use-After-Free in Microsoft windows (CVE-2024-38107)
vulnerability in Microsoft windows (CVE-2024-38107). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-36971 KEV |
|
[KEV] Use-After-Free in Android kernel (CVE-2024-36971)
vulnerability in Android kernel (CVE-2024-36971). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-32113 KEV |
|
[KEV] Path Traversal in Apache ofbiz (CVE-2024-32113)
path traversal in Apache ofbiz (CVE-2024-32113). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2018-0824 KEV |
|
[KEV] Unsafe Deserialization in Microsoft windows (CVE-2018-0824)
vulnerability in Microsoft windows (CVE-2018-0824). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-37085 KEV |
|
[KEV] Vulnerability in Vmware esxi (CVE-2024-37085)
vulnerability in Vmware esxi (CVE-2024-37085). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-4879 KEV |
|
[KEV] Vulnerability in Servicenow utah (CVE-2024-4879)
vulnerability in Servicenow utah (CVE-2024-4879). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-5217 KEV |
|
[KEV] Vulnerability in Servicenow utah (CVE-2024-5217)
vulnerability in Servicenow utah (CVE-2024-5217). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-45249 KEV |
|
[KEV] Vulnerability in Acronis cyber-infrastructure-aci (CVE-2023-45249)
vulnerability in Acronis cyber-infrastructure-aci (CVE-2023-45249). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2012-4792 KEV |
|
[KEV] Use-After-Free in Microsoft internet-explorer (CVE-2012-4792)
vulnerability in Microsoft internet-explorer (CVE-2012-4792). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-39891 KEV |
|
[KEV] Vulnerability in Twilio authy (CVE-2024-39891)
vulnerability in Twilio authy (CVE-2024-39891). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-28995 KEV |
|
[KEV] Path Traversal in Solarwinds serv-u (CVE-2024-28995)
path traversal in Solarwinds serv-u (CVE-2024-28995). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-22948 KEV |
|
[KEV] Vulnerability in Vmware vcenter-server (CVE-2022-22948)
vulnerability in Vmware vcenter-server (CVE-2022-22948). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-34102 KEV |
|
[KEV] XXE (XML External Entity) in Adobe commerce-and-magento-open-source (CVE-2024-34102)
vulnerability in Adobe commerce-and-magento-open-source (CVE-2024-34102). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-36401 KEV |
|
[KEV] Vulnerability in Osgeo geoserver (CVE-2024-36401)
vulnerability in Osgeo geoserver (CVE-2024-36401). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-38112 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2024-38112)
vulnerability in Microsoft windows (CVE-2024-38112). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-38080 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2024-38080)
vulnerability in Microsoft windows (CVE-2024-38080). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-23692 KEV |
|
[KEV] Vulnerability in Rejetto http-file-server (CVE-2024-23692)
vulnerability in Rejetto http-file-server (CVE-2024-23692). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-20399 KEV |
|
[KEV] OS Command Injection in Cisco nx-os (CVE-2024-20399)
OS command injection in Cisco nx-os (CVE-2024-20399). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-24816 KEV |
|
[KEV] Code Injection in Osgeo jai-ext (CVE-2022-24816)
code injection in Osgeo jai-ext (CVE-2022-24816). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-2586 KEV |
|
[KEV] Use-After-Free in Linux kernel (CVE-2022-2586)
vulnerability in Linux kernel (CVE-2022-2586). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2020-13965 KEV |
|
[KEV] Vulnerability in Roundcube webmail (CVE-2020-13965)
vulnerability in Roundcube webmail (CVE-2020-13965). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-32896 KEV |
|
[KEV] Vulnerability in Android pixel (CVE-2024-32896)
vulnerability in Android pixel (CVE-2024-32896). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-26169 KEV |
|
[KEV] Privilege Escalation in Microsoft windows (CVE-2024-26169)
vulnerability in Microsoft windows (CVE-2024-26169). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-4358 KEV |
|
[KEV] Vulnerability in Progress telerik-report-server (CVE-2024-4358)
vulnerability in Progress telerik-report-server (CVE-2024-4358). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-4577 KEV |
|
[KEV] OS Command Injection in Php group php-group (CVE-2024-4577)
OS command injection in Php group php-group (CVE-2024-4577). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-4610 KEV |
|
[KEV] Use-After-Free in Arm mali-gpu-kernel-driver (CVE-2024-4610)
vulnerability in Arm mali-gpu-kernel-driver (CVE-2024-4610). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2017-3506 KEV |
|
[KEV] OS Command Injection in Oracle weblogic-server (CVE-2017-3506)
OS command injection in Oracle weblogic-server (CVE-2017-3506). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-24919 KEV |
|
[KEV] Information Disclosure in Check point check-point (CVE-2024-24919)
vulnerability in Check point check-point (CVE-2024-24919). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-1086 KEV |
|
[KEV] Use-After-Free in Linux kernel (CVE-2024-1086)
vulnerability in Linux kernel (CVE-2024-1086). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-4978 KEV |
|
[KEV] Vulnerability in Justice av solutions justice-av-solutions (CVE-2024-4978)
vulnerability in Justice av solutions justice-av-solutions (CVE-2024-4978). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-5274 KEV |
|
[KEV] Vulnerability in Google chromium-v8 (CVE-2024-5274)
vulnerability in Google chromium-v8 (CVE-2024-5274). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2020-17519 KEV |
|
[KEV] Vulnerability in Apache flink (CVE-2020-17519)
vulnerability in Apache flink (CVE-2020-17519). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-4947 KEV |
|
[KEV] Vulnerability in Google chromium-v8 (CVE-2024-4947)
vulnerability in Google chromium-v8 (CVE-2024-4947). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|