Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2016-4457	CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate. CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate.	High	Cwe 310 Redhat Cloudforms Management Engine	9 years ago
CVE-2016-4471	ManageIQ in CloudForms before 4.1 allows remote authenticated users to execute arbitrary code. ManageIQ in CloudForms before 4.1 allows remote authenticated users to execute arbitrary code.	High	Cwe 264 Redhat Cloudforms	9 years ago
CVE-2015-2251	Information Disclosure in huawei (CVE-2015-2251) vulnerability in huawei (CVE-2015-2251). Confidential information can be exposed externally.	High	JavaScript Cwe 200 Huawei Oceanstor Uds Firmware +1	9 years ago
CVE-2015-2252	Code Injection in huawei (CVE-2015-2252) code injection in huawei (CVE-2015-2252). Successful exploitation can lead to full system takeover.	High	Cwe 94 Huawei Oceanstor Uds Firmware Oceanstor Uds	9 years ago
CVE-2015-2800	Authentication Bypass in dos (CVE-2015-2800) authentication bypass in dos (CVE-2015-2800). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 287 Huawei S5700 Firmware +13	9 years ago
CVE-2017-8108	Vulnerability in cisofy (CVE-2017-8108) vulnerability in cisofy (CVE-2017-8108). Successful exploitation can lead to full system takeover.	High	Cwe 59 Cisofy Lynis	9 years ago
CVE-2017-9022	Vulnerability in dos (CVE-2017-9022) vulnerability in dos (CVE-2017-9022). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Strongswan Debian +3	9 years ago
CVE-2017-9023	Vulnerability in dos (CVE-2017-9023) vulnerability in dos (CVE-2017-9023). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 835 Strongswan	9 years ago
CVE-2017-9517	atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV. atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV.	High	Cross-Site Request Forgery Cwe 352 Atmail	9 years ago
CVE-2017-9518	Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-9518) vulnerability in csrf (CVE-2017-9518). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Atmail	9 years ago
CVE-2017-9519	atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account. atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account.	High	Cross-Site Request Forgery Cwe 352 Atmail	9 years ago
CVE-2017-4908	Buffer Overflow in dos (CVE-2017-4908) vulnerability in dos (CVE-2017-4908). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Vmware Horizon View +1	9 years ago
CVE-2017-4909	Buffer Overflow in dos (CVE-2017-4909) vulnerability in dos (CVE-2017-4909). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Vmware Horizon View +1	9 years ago
CVE-2017-4910	Out-of-Bounds Read in dos (CVE-2017-4910) vulnerability in dos (CVE-2017-4910). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 125 Vmware Horizon View +1	9 years ago
CVE-2017-4911	Out-of-Bounds Write in dos (CVE-2017-4911) out-of-bounds write in dos (CVE-2017-4911). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 787 Vmware Horizon View +1	9 years ago
CVE-2017-4912	Out-of-Bounds Read in dos (CVE-2017-4912) vulnerability in dos (CVE-2017-4912). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 125 Vmware Horizon View +1	9 years ago
CVE-2017-4913	Vulnerability in dos (CVE-2017-4913) vulnerability in dos (CVE-2017-4913). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 190 Vmware Horizon View +1	9 years ago
CVE-2017-6638	Vulnerability in cisco (CVE-2017-6638) vulnerability in cisco (CVE-2017-6638). Successful exploitation can lead to full system takeover.	High	Cwe 264 Cwe 20 Cisco Anyconnect Secure Mobility Client	9 years ago
CVE-2017-6648	Vulnerability in dos (CVE-2017-6648) vulnerability in dos (CVE-2017-6648). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 399 Cisco Telepresence Ce Software +1	9 years ago
CVE-2017-7180	Vulnerability in privilege-escalation (CVE-2017-7180) vulnerability in privilege-escalation (CVE-2017-7180). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 428 Eduiq Net Monitor For Employees	9 years ago
CVE-2015-5175	Vulnerability in apache (CVE-2015-5175) vulnerability in apache (CVE-2015-5175). Risk of unauthorized operations or information disclosure.	High	Apache Denial of Service Cwe 20 Cxf Fediz	9 years ago
CVE-2015-5232	Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197. Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197.	High	Cwe 362 Cornelisnetworks Opa Ff Opa Fm	9 years ago
CVE-2015-6240	Vulnerability in ansible (CVE-2015-6240) vulnerability in ansible (CVE-2015-6240). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `ca2f2c4ebd7b5e097eab0a710f79c1f63badf95b, 952166f48eb0f5797b75b160fd156bbe1e8fc647, 1.9.2` or later.	High	Cwe 59 Redhat Ansible	9 years ago
CVE-2015-8235	Directory traversal vulnerability in Spiffy before 5.4. Directory traversal vulnerability in Spiffy before 5.4.	High	Path Traversal Cwe 22 Call Cc Spiffy	9 years ago
CVE-2016-4973	Buffer Overflow in gnu (CVE-2016-4973) vulnerability in gnu (CVE-2016-4973). Successful exploitation can lead to full system takeover.	High	Cwe 119 Gnu Libssp	9 years ago
CVE-2017-7965	Buffer Overflow in schneider-electric (CVE-2017-7965) vulnerability in schneider-electric (CVE-2017-7965). Successful exploitation can lead to full system takeover.	High	Cwe 119 Schneider Electric Somachine Hvac	9 years ago
CVE-2017-7966	Vulnerability in schneider-electric (CVE-2017-7966) vulnerability in schneider-electric (CVE-2017-7966). Successful exploitation can lead to full system takeover.	High	Cwe 427 Schneider Electric Somachine	9 years ago
CVE-2017-9355	SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-9355) SSRF in ssrf (CVE-2017-9355). Data can be tampered with by attackers.	High	Server-Side Request Forgery Cwe 918 Subsonic	9 years ago
CVE-2017-4898	Vulnerability in vmware (CVE-2017-4898) vulnerability in vmware (CVE-2017-4898). Successful exploitation can lead to full system takeover.	High	Vmware Workstation Player Workstation Pro	9 years ago
CVE-2017-4902	Buffer Overflow in vmware (CVE-2017-4902) vulnerability in vmware (CVE-2017-4902). Successful exploitation can lead to full system takeover.	High	Cwe 119 Vmware Workstation Player Workstation Pro +5	9 years ago
CVE-2017-4903	Buffer Overflow in vmware (CVE-2017-4903) vulnerability in vmware (CVE-2017-4903). Successful exploitation can lead to full system takeover.	High	Cwe 119 Vmware Workstation Player Workstation Pro +5	9 years ago
CVE-2017-4904	Buffer Overflow in dos (CVE-2017-4904) vulnerability in dos (CVE-2017-4904). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Vmware Fusion +6	9 years ago
CVE-2016-9977	Vulnerability in ibm (CVE-2016-9977) vulnerability in ibm (CVE-2016-9977). Successful exploitation can lead to full system takeover.	High	Cwe 20 Ibm Maximo Asset Management Maximo Asset Management Essentials	9 years ago
CVE-2017-7563	Vulnerability in arm (CVE-2017-7563) vulnerability in arm (CVE-2017-7563). Successful exploitation can lead to full system takeover.	High	Cwe 732 Arm Arm Trusted Firmware Trustedfirmware +1	9 years ago
CVE-2017-7564	Vulnerability in dos (CVE-2017-7564) vulnerability in dos (CVE-2017-7564). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Arm Arm Trusted Firmware +2	9 years ago
CVE-2015-7723	AMD fglrx-driver before 15.7 allows local users to gain privileges via a symlink attack. AMD fglrx-driver before 15.7 allows local users to gain privileges via a symlink attack.	High	Cwe 59 Amd Fglrx Driver	9 years ago
CVE-2015-7724	Vulnerability in amd (CVE-2015-7724) vulnerability in amd (CVE-2015-7724). Successful exploitation can lead to full system takeover.	High	Cwe 59 Amd Fglrx Driver	9 years ago
CVE-2015-7888	Path Traversal in path-traversal (CVE-2015-7888) path traversal in path-traversal (CVE-2015-7888). Data can be tampered with by attackers.	High	Path Traversal Cwe 22 Samsung Galaxy S6 Edge Firmware +1	9 years ago
CVE-2017-7313	Information Disclosure in personify (CVE-2017-7313) vulnerability in personify (CVE-2017-7313). Confidential information can be exposed externally.	High	Cwe 200 Personify Personify360 E Business	9 years ago
CVE-2017-7314	Authentication Bypass in personify (CVE-2017-7314) authentication bypass in personify (CVE-2017-7314). Confidential information can be exposed externally.	High	Cwe 287 Personify Personify360 E Business	9 years ago
CVE-2017-9468	Vulnerability in irssi (CVE-2017-9468) vulnerability in irssi (CVE-2017-9468). Risk of unauthorized operations or information disclosure.	High	Cwe 476 Irssi Debian Debian Linux	9 years ago
CVE-2017-9469	Buffer Overflow in irssi (CVE-2017-9469) vulnerability in irssi (CVE-2017-9469). Risk of unauthorized operations or information disclosure.	High	Cwe 119 Irssi Debian Debian Linux	9 years ago
CVE-2017-9462	Vulnerability in mercurial (CVE-2017-9462) vulnerability in mercurial (CVE-2017-9462). Successful exploitation can lead to full system takeover.	High	Python Cwe 732 Mercurial Debian +8	9 years ago
CVE-2017-9465	Out-of-Bounds Read in c (CVE-2017-9465) vulnerability in c (CVE-2017-9465). Confidential information can be exposed externally.	High	C Denial of Service Cwe 125 Virustotal +1	9 years ago
CVE-2016-0768	PostgreSQL PL/Java after 9.0 does not honor access controls on large objects. PostgreSQL PL/Java after 9.0 does not honor access controls on large objects.	High	Java Cwe 284 PostgreSQL	9 years ago
CVE-2017-5243	Vulnerability in rapid7 (CVE-2017-5243) vulnerability in rapid7 (CVE-2017-5243). Successful exploitation can lead to full system takeover.	High	Cwe 327 Rapid7 Nexpose	9 years ago
CVE-2017-9449	SQL Injection in sqli (CVE-2017-9449) SQL injection in sqli (CVE-2017-9449). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Bigtreecms +1	9 years ago
CVE-2014-9923	Buffer Overflow in google (CVE-2014-9923) vulnerability in google (CVE-2014-9923). Successful exploitation can lead to full system takeover.	High	Cwe 119 Google Android	9 years ago
CVE-2014-9924	Vulnerability in google (CVE-2014-9924) vulnerability in google (CVE-2014-9924). Successful exploitation can lead to full system takeover.	High	Cwe 189 Google Android	9 years ago
CVE-2014-9925	Buffer Overflow in google (CVE-2014-9925) vulnerability in google (CVE-2014-9925). Successful exploitation can lead to full system takeover.	High	Cwe 119 Google Android	9 years ago

Vulnerabilities

🍪 About cookies