Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2019-1010294	Vulnerability in trustedfirmware (CVE-2019-1010294) vulnerability in trustedfirmware (CVE-2019-1010294). Confidential information can be exposed externally.	High	Cwe 189 Trustedfirmware Op Tee	6 years ago
CVE-2017-14853	The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attac... The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attacker is able to run shell commands and receive valid output from the device.	High	Cwe 94 Orpak Siteomat Remote Code Execution	7 years ago
CVE-2017-14852	An insecure communication was found between a user and the Orpak SiteOmat management console for... An insecure communication was found between a user and the Orpak SiteOmat management console for...	High	Cwe 310 Cwe 311 Orpak Siteomat +3	7 years ago
CVE-2019-6820	Vulnerability in schneider-electric (CVE-2019-6820) vulnerability in schneider-electric (CVE-2019-6820). Risk of unauthorized operations or information disclosure.	High	Cwe 306 Schneider Electric Modicon M100 Firmware Modicon M100 +22	7 years ago
CVE-2019-11687	Vulnerability in nema (CVE-2019-11687) vulnerability in nema (CVE-2019-11687). Successful exploitation can lead to full system takeover.	High	Cwe 20 Nema Dicom Standard	7 years ago
CVE-2019-10953	Vulnerability in abb (CVE-2019-10953) vulnerability in abb (CVE-2019-10953). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Cwe 770 Abb Pm554 Tp Eth Firmware +23	7 years ago
CVE-2018-16561	Vulnerability in siemens (CVE-2018-16561) vulnerability in siemens (CVE-2018-16561). Risk of unauthorized operations or information disclosure.	High	Cwe 20 Siemens Simatic S7 300 Firmware Simatic S7 300 +6	7 years ago
CVE-2019-6575	Vulnerability in dos (CVE-2019-6575) vulnerability in dos (CVE-2019-6575). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 248 Cwe 755 Siemens +43	7 years ago
CVE-2017-15031	Information Disclosure in trustedfirmware (CVE-2017-15031) vulnerability in trustedfirmware (CVE-2017-15031). Confidential information can be exposed externally.	High	Cwe 200 Trustedfirmware Trusted Firmware A	7 years ago
CVE-2018-17924	Vulnerability in rockwellautomation (CVE-2018-17924) vulnerability in rockwellautomation (CVE-2018-17924). Risk of unauthorized operations or information disclosure.	High	Cwe 306 Rockwellautomation Micrologix 1400 Firmware Micrologix 1400 +30	7 years ago
CVE-2018-6439	Vulnerability in broadcom (CVE-2018-6439) vulnerability in broadcom (CVE-2018-6439). Successful exploitation can lead to full system takeover.	High	Broadcom Fabric Operating System	7 years ago
CVE-2018-3882	SQL Injection in sqli (CVE-2018-3882) SQL injection in sqli (CVE-2018-3882). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Frappe Erpnext	7 years ago
CVE-2018-3883	SQL Injection in sqli (CVE-2018-3883) SQL injection in sqli (CVE-2018-3883). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Frappe Erpnext	7 years ago
CVE-2018-3884	SQL Injection in sqli (CVE-2018-3884) SQL injection in sqli (CVE-2018-3884). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Frappe Erpnext	7 years ago
CVE-2018-3885	SQL Injection in sqli (CVE-2018-3885) SQL injection in sqli (CVE-2018-3885). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Frappe Erpnext	7 years ago
CVE-2018-10902	Vulnerability in c (CVE-2018-10902) vulnerability in c (CVE-2018-10902). Successful exploitation can lead to full system takeover.	High	C Privilege Escalation Cwe 416 Cwe 415 +10	7 years ago
CVE-2018-12594	Information Disclosure in reliablecontrols (CVE-2018-12594) vulnerability in reliablecontrols (CVE-2018-12594). Confidential information can be exposed externally.	High	Cwe 200 Reliablecontrols Mach Prowebcom Firmware Mach Prowebcom	8 years ago
CVE-2018-1259	XXE (XML External Entity) in broadcom (CVE-2018-1259) vulnerability in broadcom (CVE-2018-1259). Confidential information can be exposed externally.	High	Cwe 611 Broadcom Spring Data Commons Pivotal Software +3	8 years ago
CVE-2018-1274	Vulnerability in dos (CVE-2018-1274) vulnerability in dos (CVE-2018-1274). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770 Broadcom Spring Data Commons +3	8 years ago
CVE-2018-9989	Out-of-Bounds Read in arm (CVE-2018-9989) vulnerability in arm (CVE-2018-9989). Risk of unauthorized operations or information disclosure.	High	Cwe 125 Arm Mbed Tls Trustedfirmware +2	8 years ago
CVE-2018-9988	Out-of-Bounds Read in arm (CVE-2018-9988) vulnerability in arm (CVE-2018-9988). Risk of unauthorized operations or information disclosure.	High	Cwe 125 Arm Mbed Tls Trustedfirmware +2	8 years ago
CVE-2018-7195	Vulnerability in enhancesoft (CVE-2018-7195) vulnerability in enhancesoft (CVE-2018-7195). Successful exploitation can lead to full system takeover.	High	Enhancesoft Osticket	8 years ago
CVE-2017-12174	Vulnerability in apache (CVE-2017-12174) vulnerability in apache (CVE-2017-12174). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Apache Artemis Redhat +3	8 years ago
CVE-2018-6926	OS Command Injection in misp-project (CVE-2018-6926) OS command injection in misp-project (CVE-2018-6926). Successful exploitation can lead to full system takeover.	High	PHP Cwe 78 Misp Project Misp	8 years ago
CVE-2017-12626	Vulnerability in org.apache.poi:poi (CVE-2017-12626) vulnerability in org.apache.poi:poi (CVE-2017-12626). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.17` or later.	High	Apache Denial of Service Cwe 835 Poi	8 years ago
CVE-2017-17704	Vulnerability in swhouse (CVE-2017-17704) vulnerability in swhouse (CVE-2017-17704). Data can be tampered with by attackers.	High	Cwe 330 Swhouse Istar Ultra Firmware Istar Ultra	8 years ago
CVE-2017-14855	Vulnerability in dos (CVE-2017-14855) vulnerability in dos (CVE-2017-14855). Risk of unauthorized operations or information disclosure.	High	Denial of Service Redlion Hmi Panel Firmware Hmi Panel	8 years ago
CVE-2017-17997	Vulnerability in c (CVE-2017-17997) vulnerability in c (CVE-2017-17997). Risk of unauthorized operations or information disclosure.	High	C Cwe 476 Wireshark Debian +1	8 years ago
CVE-2017-17983	SQL Injection in sqli (CVE-2017-17983) SQL injection in sqli (CVE-2017-17983). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17987	Unrestricted File Upload in muslim-matrimonial-script-project (CVE-2017-17987) vulnerability in muslim-matrimonial-script-project (CVE-2017-17987). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434 Muslim Matrimonial Script Project Muslim Matrimonial Script	8 years ago
CVE-2017-17990	Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action. Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.	High	PHP Cross-Site Request Forgery Cwe 352 Iwcnetwork +1	8 years ago
CVE-2014-0120	Cross-Site Request Forgery (CSRF) in csrf (CVE-2014-0120) vulnerability in csrf (CVE-2014-0120). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Hawt Hawtio +2	8 years ago
CVE-2014-8119	Vulnerability in dos (CVE-2014-8119) vulnerability in dos (CVE-2014-8119). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Fedoraproject Fedora +4	8 years ago
CVE-2015-3302	Vulnerability in wordpress (CVE-2015-3302) vulnerability in wordpress (CVE-2015-3302). Confidential information can be exposed externally.	High	WordPress Cwe 284 Thecartpress Thecartpress Ecommerce Shopping Cart	8 years ago
CVE-2015-8008	Vulnerability in mediawiki (CVE-2015-8008) vulnerability in mediawiki (CVE-2015-8008). Confidential information can be exposed externally.	High	Cwe 284 Mediawiki Fedoraproject Fedora	8 years ago
CVE-2017-17901	Vulnerability in dos (CVE-2017-17901) vulnerability in dos (CVE-2017-17901). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Zyxel P 660Hw Firmware +1	8 years ago
CVE-2017-17973	Use-After-Free in c (CVE-2017-17973) vulnerability in c (CVE-2017-17973). Successful exploitation can lead to full system takeover.	High	C Cwe 416 Libtiff	8 years ago
CVE-2017-17916	SQL Injection in rails (CVE-2017-17916) SQL injection in rails (CVE-2017-17916). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +1	8 years ago
CVE-2017-17917	SQL Injection in rails (CVE-2017-17917) SQL injection in rails (CVE-2017-17917). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +1	8 years ago
CVE-2017-17919	SQL Injection in rails (CVE-2017-17919) SQL injection in rails (CVE-2017-17919). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +2	8 years ago
CVE-2017-17920	SQL Injection in rails (CVE-2017-17920) SQL injection in rails (CVE-2017-17920). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +2	8 years ago
CVE-2013-7400	Information Disclosure in dkd (CVE-2013-7400) vulnerability in dkd (CVE-2013-7400). Confidential information can be exposed externally.	High	Cwe 200 Dkd Direct Mail	8 years ago
CVE-2014-3651	Vulnerability in dos (CVE-2014-3651) vulnerability in dos (CVE-2014-3651). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Keycloak	8 years ago
CVE-2017-17950	Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter. Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.	High	PHP SQL Injection Cwe 89 Cells +1	8 years ago
CVE-2017-17952	Vulnerability in php-multivendor-ecommerce-project (CVE-2017-17952) vulnerability in php-multivendor-ecommerce-project (CVE-2017-17952). Data can be tampered with by attackers.	High	PHP Cwe 20 Php Multivendor Ecommerce Project Php Multivendor Ecommerce	8 years ago
CVE-2017-17960	PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php. PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.	High	PHP Cross-Site Request Forgery Cwe 352 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-15667	Vulnerability in dos (CVE-2017-15667) vulnerability in dos (CVE-2017-15667). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Flexense Sysgauge	8 years ago
CVE-2017-17936	Vanguard Marketplace Digital Products PHP has CSRF via /search. Vanguard Marketplace Digital Products PHP has CSRF via /search.	High	PHP Cross-Site Request Forgery Cwe 352 Vanguard Project +1	8 years ago
CVE-2017-17939	PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php. PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.	High	PHP Cross-Site Request Forgery Cwe 352 Single Theater Booking Script Project +1	8 years ago
CVE-2017-17941	SQL Injection in sqli (CVE-2017-17941) SQL injection in sqli (CVE-2017-17941). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Single Theater Booking Script Project +1	8 years ago

Vulnerabilities

🍪 About cookies