Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2023-38606 KEV	[KEV] Vulnerability in Apple multiple-products (CVE-2023-38606) vulnerability in Apple multiple-products (CVE-2023-38606). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Multiple Products	2 years ago
CVE-2023-35067	Vulnerability in infodrom (CVE-2023-35067) vulnerability in infodrom (CVE-2023-35067). Confidential information can be exposed externally.	High	Cwe 256 Cwe 522 Infodrom E Invoice Approval System	2 years ago
CVE-2023-35078 KEV	[KEV] Authentication Bypass in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35078) authentication bypass in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35078). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Ivanti Endpoint Manager Mobile Epmm Cwe 287	2 years ago
CVE-2023-3640	Vulnerability in c (CVE-2023-3640) vulnerability in c (CVE-2023-3640). Successful exploitation can lead to full system takeover.	High	C Cwe 385 Cwe 203 Linux +3	2 years ago
CVE-2021-35391	SSRF (Server-Side Request Forgery) in deskpro (CVE-2021-35391) SSRF in deskpro (CVE-2021-35391). Successful exploitation can lead to full system takeover.	High	Cwe 918 Deskpro	2 years ago
CVE-2023-29298 KEV	[KEV] Vulnerability in Adobe coldfusion (CVE-2023-29298) vulnerability in Adobe coldfusion (CVE-2023-29298). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Adobe Coldfusion Cwe 284	2 years ago
CVE-2023-38205 KEV	[KEV] Vulnerability in Adobe coldfusion (CVE-2023-38205) vulnerability in Adobe coldfusion (CVE-2023-38205). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Adobe Coldfusion Cwe 284	2 years ago
CVE-2023-3519 KEV	[KEV] Code Injection in Citrix netscaler-adc-and-netscaler-gateway (CVE-2023-3519) code injection in Citrix netscaler-adc-and-netscaler-gateway (CVE-2023-3519). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Citrix Netscaler Adc And Netscaler Gateway Cwe 94	2 years ago
CVE-2023-30383	Vulnerability in dos (CVE-2023-30383) vulnerability in dos (CVE-2023-30383). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 120 Tp Link Archer C2 V1 Firmware +5	2 years ago
CVE-2023-2959	Authentication Bypass in olivaekspertiz (CVE-2023-2959) authentication bypass in olivaekspertiz (CVE-2023-2959). Confidential information can be exposed externally.	High	Authentication Bypass Cwe 305 Cwe 287 Olivaekspertiz +1	2 years ago
CVE-2023-36884 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2023-36884) vulnerability in Microsoft windows (CVE-2023-36884). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 362	2 years ago
CVE-2023-31824	Vulnerability in dericia (CVE-2023-31824) vulnerability in dericia (CVE-2023-31824). Confidential information can be exposed externally.	High	Cwe 522 Dericia Delicia	2 years ago
CVE-2023-31823	Vulnerability in marui (CVE-2023-31823) vulnerability in marui (CVE-2023-31823). Confidential information can be exposed externally.	High	Cwe 319 Marui	2 years ago
CVE-2023-31821	Vulnerability in albis (CVE-2023-31821) vulnerability in albis (CVE-2023-31821). Confidential information can be exposed externally.	High	Cwe 312 Albis	2 years ago
CVE-2023-31825	Vulnerability in inageya (CVE-2023-31825) vulnerability in inageya (CVE-2023-31825). Confidential information can be exposed externally.	High	Cwe 311 Inageya	2 years ago
CVE-2023-31822	Vulnerability in entetsu (CVE-2023-31822) vulnerability in entetsu (CVE-2023-31822). Confidential information can be exposed externally.	High	Cwe 311 Entetsu Entetsu Store	2 years ago
CVE-2023-31820	Vulnerability in shizutetsu (CVE-2023-31820) vulnerability in shizutetsu (CVE-2023-31820). Confidential information can be exposed externally.	High	Cwe 311 Shizutetsu Shizutetsu Store	2 years ago
CVE-2023-31819	Vulnerability in keisei-store (CVE-2023-31819) vulnerability in keisei-store (CVE-2023-31819). Confidential information can be exposed externally.	High	Cwe 311 Keisei Store Livre	2 years ago
CVE-2023-35069	Path Traversal in path-traversal (CVE-2023-35069) path traversal in path-traversal (CVE-2023-35069). Confidential information can be exposed externally.	High	Path Traversal Cwe 22 Biges Bullwark Momentum Series	2 years ago
CVE-2022-29303 KEV	[KEV] OS Command Injection in Solarview compact (CVE-2022-29303) OS command injection in Solarview compact (CVE-2022-29303). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Solarview Compact Cwe 78	2 years ago
CVE-2023-37450 KEV	[KEV] Vulnerability in Apple multiple-products (CVE-2023-37450) vulnerability in Apple multiple-products (CVE-2023-37450). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Multiple Products	2 years ago
CVE-2020-20021	Vulnerability in dos (CVE-2020-20021) vulnerability in dos (CVE-2020-20021). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Mikrotik Routeros	2 years ago
CVE-2023-33161	Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 415 Microsoft 365 Apps +2	3 years ago
CVE-2023-33158	Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 191 Microsoft 365 Apps +2	3 years ago
CVE-2023-33152	Microsoft ActiveX Remote Code Execution Vulnerability Microsoft ActiveX Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Microsoft 365 Apps +2	3 years ago
CVE-2023-33149	Microsoft Office Graphics Remote Code Execution Vulnerability Microsoft Office Graphics Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 416 Microsoft 365 Apps +2	3 years ago
CVE-2023-33148	Microsoft Office Elevation of Privilege Vulnerability Microsoft Office Elevation of Privilege Vulnerability	High	Cwe 59 Microsoft 365 Apps Office +1	3 years ago
CVE-2023-31818	Vulnerability in marukyu (CVE-2023-31818) vulnerability in marukyu (CVE-2023-31818). Confidential information can be exposed externally.	High	Cwe 668 Marukyu Marukyu Line	3 years ago
CVE-2023-32046 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2023-32046) vulnerability in Microsoft windows (CVE-2023-32046). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows	3 years ago
CVE-2023-32049 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2023-32049) vulnerability in Microsoft windows (CVE-2023-32049). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows	3 years ago
CVE-2023-35311 KEV	[KEV] Vulnerability in Microsoft outlook (CVE-2023-35311) vulnerability in Microsoft outlook (CVE-2023-35311). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Outlook Cwe 367	3 years ago
CVE-2023-36874 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2023-36874) vulnerability in Microsoft windows (CVE-2023-36874). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 59	3 years ago
CVE-2022-31199 KEV	[KEV] Unsafe Deserialization in Netwrix auditor (CVE-2022-31199) vulnerability in Netwrix auditor (CVE-2022-31199). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Netwrix Auditor Cwe 502 Cwe 122	3 years ago
CVE-2023-3271	Vulnerability in sick (CVE-2023-3271) vulnerability in sick (CVE-2023-3271). Confidential information can be exposed externally.	High	Cwe 284 Sick Icr890 4 Firmware Icr890 4	3 years ago
CVE-2023-3273	Vulnerability in sick (CVE-2023-3273) vulnerability in sick (CVE-2023-3273). Risk of unauthorized operations or information disclosure.	High	Cwe 284 Sick Icr890 4 Firmware Icr890 4	3 years ago
CVE-2023-3272	Vulnerability in sick (CVE-2023-3272) vulnerability in sick (CVE-2023-3272). Confidential information can be exposed externally.	High	Cwe 319 Sick Icr890 4 Firmware Icr890 4	3 years ago
CVE-2023-35696	Vulnerability in sick (CVE-2023-35696) vulnerability in sick (CVE-2023-35696). Confidential information can be exposed externally.	High	Cwe 668 Sick Icr890 4 Firmware Icr890 4	3 years ago
CVE-2021-29256 KEV	[KEV] Use-After-Free in Arm :unknown: (CVE-2021-29256) vulnerability in Arm :unknown: (CVE-2021-29256). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `SoCVersion:2023-07-05` or later.	High	Arm Mali Graphics Processing Unit Gpu Cwe 416	3 years ago
CVE-2022-42175	Vulnerability in soluslabs (CVE-2022-42175) vulnerability in soluslabs (CVE-2022-42175). Successful exploitation can lead to full system takeover.	High	Cwe 639 Soluslabs Solusvm	3 years ago
CVE-2022-27405	Out-of-Bounds Read in platform/external/freetype (CVE-2022-27405) vulnerability in platform/external/freetype (CVE-2022-27405). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `13:2023-07-01` or later.	High	Cwe 125 Freetype Fedoraproject Fedora	3 years ago
CVE-2023-36144	Vulnerability in intelbras (CVE-2023-36144) vulnerability in intelbras (CVE-2023-36144). Confidential information can be exposed externally.	High	Authentication Bypass Cwe 862 Intelbras Sg 2404 Mr Firmware +1	3 years ago
CVE-2023-37306	Vulnerability in misp-project (CVE-2023-37306) vulnerability in misp-project (CVE-2023-37306). Confidential information can be exposed externally.	High	Cwe 209 Misp Project Misp	3 years ago
CVE-2023-35176	Vulnerability in dos (CVE-2023-35176) vulnerability in dos (CVE-2023-35176). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 120 Hp W1A75A Firmware +75	3 years ago
CVE-2023-35178	Vulnerability in hp (CVE-2023-35178) vulnerability in hp (CVE-2023-35178). Successful exploitation can lead to full system takeover.	High	Cwe 120 Hp W1A75A Firmware W1A75A +74	3 years ago
CVE-2023-35177	Out-of-Bounds Write in hp (CVE-2023-35177) out-of-bounds write in hp (CVE-2023-35177). Successful exploitation can lead to full system takeover.	High	Cwe 787 Hp W1A75A Firmware W1A75A +74	3 years ago
CVE-2023-36143	OS Command Injection in maxprintisp (CVE-2023-36143) OS command injection in maxprintisp (CVE-2023-36143). Successful exploitation can lead to full system takeover.	High	Cwe 78 Maxprintisp Maxlink 1200G Firmware Maxlink 1200G	3 years ago
CVE-2019-17621 KEV	[KEV] OS Command Injection in D-link dir-859-router (CVE-2019-17621) OS command injection in D-link dir-859-router (CVE-2019-17621). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	D Link Dir 859 Router Cwe 78	3 years ago
CVE-2019-20500 KEV	[KEV] OS Command Injection in D-link dwl-2600ap-access-point (CVE-2019-20500) OS command injection in D-link dwl-2600ap-access-point (CVE-2019-20500). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	D Link Dwl 2600Ap Access Point Cwe 78	3 years ago
CVE-2021-25487 KEV	[KEV] Out-of-Bounds Read in Samsung mobile-devices (CVE-2021-25487) vulnerability in Samsung mobile-devices (CVE-2021-25487). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Samsung Mobile Devices Cwe 125	3 years ago
CVE-2021-25489 KEV	[KEV] Vulnerability in Samsung mobile-devices (CVE-2021-25489) vulnerability in Samsung mobile-devices (CVE-2021-25489). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Samsung Mobile Devices Cwe 20	3 years ago

Vulnerabilities

🍪 About cookies