Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2023-5363	Vulnerability in openssl (CVE-2023-5363) vulnerability in openssl (CVE-2023-5363). Confidential information can be exposed externally.	High	Cwe 684 Openssl Debian Debian Linux +11	2 years ago
CVE-2023-46136	Vulnerability in werkzeug (CVE-2023-46136) vulnerability in werkzeug (CVE-2023-46136). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.8` or later.	High	Denial of Service Cwe 400 Cwe 407 Cwe 787 +2	2 years ago
CVE-2023-20273 KEV	[KEV] OS Command Injection in cisco (CVE-2023-20273) OS command injection in cisco (CVE-2023-20273). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco Cisco Ios Xe Web Ui Cwe 78	2 years ago
CVE-2023-4966 KEV	[KEV] Buffer Overflow in Citrix netscaler-adc-and-netscaler-gateway (CVE-2023-4966) vulnerability in Citrix netscaler-adc-and-netscaler-gateway (CVE-2023-4966). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Citrix Netscaler Adc And Netscaler Gateway Cwe 119	2 years ago
CVE-2023-45898	Use-After-Free in c (CVE-2023-45898) vulnerability in c (CVE-2023-45898). Successful exploitation can lead to full system takeover.	High	C Cwe 416 Linux Linux Kernel	2 years ago
CVE-2023-20198 KEV	[KEV] Vulnerability in Cisco ios-xe-web-ui (CVE-2023-20198) vulnerability in Cisco ios-xe-web-ui (CVE-2023-20198). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco Ios Xe Web Ui Cwe 420	2 years ago
CVE-2023-36565	Microsoft Office Graphics Elevation of Privilege Vulnerability Microsoft Office Graphics Elevation of Privilege Vulnerability	High	Cwe 416 Microsoft Office Office Long Term Servicing Channel	2 years ago
CVE-2023-43896	Vulnerability in macrium (CVE-2023-43896) vulnerability in macrium (CVE-2023-43896). Successful exploitation can lead to full system takeover.	High	Cwe 120 Macrium Reflect	2 years ago
CVE-2023-21608 KEV	[KEV] Use-After-Free in Adobe acrobat-and-reader (CVE-2023-21608) vulnerability in Adobe acrobat-and-reader (CVE-2023-21608). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Adobe Acrobat And Reader Cwe 416	2 years ago
CVE-2023-20109 KEV	[KEV] Out-of-Bounds Write in Cisco ios-and-ios-xe (CVE-2023-20109) out-of-bounds write in Cisco ios-and-ios-xe (CVE-2023-20109). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco Ios And Ios Xe Cwe 787	2 years ago
CVE-2023-41763 KEV	[KEV] SSRF (Server-Side Request Forgery) in Microsoft skype-for-business (CVE-2023-41763) SSRF in Microsoft skype-for-business (CVE-2023-41763). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Skype For Business Cwe 918	2 years ago
CVE-2023-36563 KEV	[KEV] Vulnerability in Microsoft wordpad (CVE-2023-36563) vulnerability in Microsoft wordpad (CVE-2023-36563). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Wordpad Cwe 20	2 years ago
CVE-2023-44487 KEV	[KEV] Vulnerability in Ietf golang.org/x/net (CVE-2023-44487) vulnerability in Ietf golang.org/x/net (CVE-2023-44487). Risk of unauthorized operations or information disclosure. Exploitable via ``Channel``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.17.0` or later.	High	Ietf Http2 Cwe 400 Denial of Service +342	2 years ago
CVE-2023-43615	Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow. Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.	High	Cwe 120 Arm Mbed Tls Trustedfirmware +2	2 years ago
CVE-2023-22515 KEV	[KEV] Vulnerability in Atlassian confluence-data-center-and-server (CVE-2023-22515) vulnerability in Atlassian confluence-data-center-and-server (CVE-2023-22515). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Atlassian Confluence Data Center And Server	2 years ago
CVE-2023-40044 KEV	[KEV] Unsafe Deserialization in Progress ws-ftp-server (CVE-2023-40044) vulnerability in Progress ws-ftp-server (CVE-2023-40044). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Progress Ws Ftp Server Cwe 502	2 years ago
CVE-2023-42824 KEV	[KEV] Vulnerability in Apple ios-and-ipados (CVE-2023-42824) vulnerability in Apple ios-and-ipados (CVE-2023-42824). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Ios And Ipados	2 years ago
CVE-2023-43261	Vulnerability in milesight (CVE-2023-43261) vulnerability in milesight (CVE-2023-43261). Confidential information can be exposed externally.	High	Cwe 532 Milesight Ur5X Firmware Ur51 +10	2 years ago
CVE-2023-42793 KEV	[KEV] Vulnerability in Jetbrains teamcity (CVE-2023-42793) vulnerability in Jetbrains teamcity (CVE-2023-42793). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Jetbrains Teamcity Cwe 288	2 years ago
CVE-2023-28229 KEV	[KEV] Vulnerability in Microsoft windows-cng-key-isolation-service (CVE-2023-28229) vulnerability in Microsoft windows-cng-key-isolation-service (CVE-2023-28229). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cng Key Isolation Service Cwe 591	2 years ago
CVE-2023-43176	Unsafe Deserialization in deserialization (CVE-2023-43176) vulnerability in deserialization (CVE-2023-43176). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 502 Afterlogic Aurora Files	2 years ago
CVE-2023-4211 KEV	[KEV] Use-After-Free in Arm :unknown: (CVE-2023-4211) vulnerability in Arm :unknown: (CVE-2023-4211). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `SoCVersion:2023-10-05` or later.	High	Arm Mali Gpu Kernel Driver Cwe 416	2 years ago
CVE-2023-5217 KEV	[KEV] Out-of-Bounds Write in Google chromium-libvpx (CVE-2023-5217) out-of-bounds write in Google chromium-libvpx (CVE-2023-5217). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Google Chromium Libvpx Cwe 787	2 years ago
CVE-2023-41450	Code Injection in phpkobo (CVE-2023-41450) code injection in phpkobo (CVE-2023-41450). Successful exploitation can lead to full system takeover.	High	Cwe 94 Phpkobo Ajaxnewsticker	2 years ago
CVE-2018-14667 KEV	[KEV] Code Injection in Red hat red-hat (CVE-2018-14667) code injection in Red hat red-hat (CVE-2018-14667). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Red Hat Jboss Richfaces Framework Cwe 94	2 years ago
CVE-2023-41452	Cross-Site Request Forgery (CSRF) in phpkobo (CVE-2023-41452) vulnerability in phpkobo (CVE-2023-41452). Successful exploitation can lead to full system takeover.	High	PHP Cwe 352 Phpkobo Ajaxnewsticker	2 years ago
CVE-2023-4934	Vulnerability in usta (CVE-2023-4934) vulnerability in usta (CVE-2023-4934). Successful exploitation can lead to full system takeover.	High	Authentication Bypass Cwe 639 Usta Aybs	2 years ago
CVE-2023-43856	Vulnerability in iteachyou (CVE-2023-43856) vulnerability in iteachyou (CVE-2023-43856). Confidential information can be exposed externally.	High	Java Cwe 552 Iteachyou Dreamer Cms	2 years ago
CVE-2023-43278	Cross-Site Request Forgery (CSRF) in csrf (CVE-2023-43278) vulnerability in csrf (CVE-2023-43278). Successful exploitation can lead to full system takeover.	High	PHP Cross-Site Request Forgery Cwe 352 Seacms	2 years ago
CVE-2023-41991 KEV	[KEV] Vulnerability in Apple multiple-products (CVE-2023-41991) vulnerability in Apple multiple-products (CVE-2023-41991). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Multiple Products Cwe 295	2 years ago
CVE-2023-41992 KEV	[KEV] Vulnerability in Apple multiple-products (CVE-2023-41992) vulnerability in Apple multiple-products (CVE-2023-41992). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Multiple Products Cwe 754	2 years ago
CVE-2023-41993 KEV	[KEV] Vulnerability in Apple java (CVE-2023-41993) vulnerability in Apple java (CVE-2023-41993). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `1.8.0, 8.0.411` or later.	High	Apple Multiple Products Cwe 754 Bitnami +3	2 years ago
CVE-2023-41179 KEV	[KEV] Vulnerability in Trend micro trend-micro (CVE-2023-41179) vulnerability in Trend micro trend-micro (CVE-2023-41179). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Trend Micro Apex One And Worry Free Business Security	2 years ago
CVE-2023-38887	Unrestricted File Upload in dolibarr (CVE-2023-38887) vulnerability in dolibarr (CVE-2023-38887). Successful exploitation can lead to full system takeover.	High	Cwe 434 Dolibarr Dolibarr Erpcrm	2 years ago
CVE-2023-38886	OS Command Injection in dolibarr (CVE-2023-38886) OS command injection in dolibarr (CVE-2023-38886). Successful exploitation can lead to full system takeover.	High	Cwe 78 Dolibarr Dolibarr Erpcrm	2 years ago
CVE-2023-40934	SQL Injection in sqli (CVE-2023-40934) SQL injection in sqli (CVE-2023-40934). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Nagios Nagios Xi	2 years ago
CVE-2023-40933	SQL Injection in sqli (CVE-2023-40933) SQL injection in sqli (CVE-2023-40933). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Nagios Nagios Xi	2 years ago
CVE-2023-28434 KEV	[KEV] Privilege Escalation in minio (CVE-2023-28434) vulnerability in minio (CVE-2023-28434). Risk of unauthorized operations or information disclosure. Exploitable via ``PostPolicyBucket``. Listed in CISA KEV — actively exploited.	High	Minio Cwe 269	2 years ago
CVE-2023-41595	An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password. An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password.	High	Cwe 798 Vaxilu X Ui	2 years ago
CVE-2022-22265 KEV	[KEV] Vulnerability in Samsung mobile-devices (CVE-2022-22265) vulnerability in Samsung mobile-devices (CVE-2022-22265). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Samsung Mobile Devices Cwe 703	2 years ago
CVE-2014-8361 KEV	[KEV] Vulnerability in Realtek sdk (CVE-2014-8361) vulnerability in Realtek sdk (CVE-2014-8361). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Realtek Sdk Cwe 20	2 years ago
CVE-2017-6884 KEV	[KEV] OS Command Injection in Zyxel emg2926-routers (CVE-2017-6884) OS command injection in Zyxel emg2926-routers (CVE-2017-6884). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Zyxel Emg2926 Routers Cwe 78	2 years ago
CVE-2021-3129 KEV	[KEV] Vulnerability in Laravel ignition (CVE-2021-3129) vulnerability in Laravel ignition (CVE-2021-3129). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Laravel Ignition	2 years ago
CVE-2023-41325	Vulnerability in trustedfirmware (CVE-2023-41325) vulnerability in trustedfirmware (CVE-2023-41325). Confidential information can be exposed externally. Exploitable via ``shdr_verify_signature``.	High	Cwe 415 Trustedfirmware Op Tee	2 years ago
CVE-2023-4665	Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows... Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows...	High	Privilege Escalation Cwe 279 Cwe 732 Adobe +1	2 years ago
CVE-2023-4664	Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege... Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege...	High	Privilege Escalation Cwe 276 Adobe Connect	2 years ago
CVE-2023-26369 KEV	[KEV] Out-of-Bounds Write in Adobe acrobat-and-reader (CVE-2023-26369) out-of-bounds write in Adobe acrobat-and-reader (CVE-2023-26369). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Adobe Acrobat And Reader Cwe 787	2 years ago
CVE-2023-35674 KEV	[KEV] Vulnerability in Android platform/frameworks/base (CVE-2023-35674) vulnerability in Android platform/frameworks/base (CVE-2023-35674). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `13:2023-09-01` or later.	High	Android Framework	2 years ago
CVE-2023-20269 KEV	[KEV] Vulnerability in Cisco adaptive-security-appliance-and-firepower-threat-defense (CVE-2023-20269) vulnerability in Cisco adaptive-security-appliance-and-firepower-threat-defense (CVE-2023-20269). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco Adaptive Security Appliance And Firepower Threat Defense Cwe 288	2 years ago
CVE-2023-4863 KEV	[KEV] Out-of-Bounds Write in Google chromium-webp (CVE-2023-4863) out-of-bounds write in Google chromium-webp (CVE-2023-4863). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Google Chromium Webp Cwe 787	2 years ago

Vulnerabilities

🍪 About cookies