Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2017-9354	Vulnerability in c (CVE-2017-9354) vulnerability in c (CVE-2017-9354). Risk of unauthorized operations or information disclosure.	High	C Cwe 20 Wireshark	9 years ago
CVE-2017-9358	Vulnerability in sangoma (CVE-2017-9358) vulnerability in sangoma (CVE-2017-9358). Risk of unauthorized operations or information disclosure.	High	Cwe 835 Sangoma Asterisk Certified Asterisk	9 years ago
CVE-2017-9359	Out-of-Bounds Read in dos (CVE-2017-9359) vulnerability in dos (CVE-2017-9359). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 125 Digium Open Source +1	9 years ago
CVE-2017-9365	Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-9365) vulnerability in csrf (CVE-2017-9365). Successful exploitation can lead to full system takeover.	High	PHP Cross-Site Request Forgery Cwe 352 Bigtreecms +1	9 years ago
CVE-2015-6531	Code Injection in paloaltonetworks (CVE-2015-6531) code injection in paloaltonetworks (CVE-2015-6531). Successful exploitation can lead to full system takeover.	High	Python Cwe 94 Paloaltonetworks Pan Os	9 years ago
CVE-2017-8386	Vulnerability in git (CVE-2017-8386) vulnerability in git (CVE-2017-8386). Successful exploitation can lead to full system takeover.	High	Git Git Shell Opensuse Leap +6	9 years ago
CVE-2017-9334	Vulnerability in dos (CVE-2017-9334) vulnerability in dos (CVE-2017-9334). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Call Cc Chicken	9 years ago
CVE-2017-8402	Code Injection in pivotx (CVE-2017-8402) code injection in pivotx (CVE-2017-8402). Successful exploitation can lead to full system takeover.	High	PHP Cwe 94 Pivotx	9 years ago
CVE-2017-9304	Vulnerability in c (CVE-2017-9304) vulnerability in c (CVE-2017-9304). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 674 Virustotal +1	9 years ago
CVE-2017-7502	Vulnerability in dos (CVE-2017-7502) vulnerability in dos (CVE-2017-7502). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 476 Mozilla Network Security Services	9 years ago
CVE-2016-3083	Vulnerability in apache (CVE-2016-3083) vulnerability in apache (CVE-2016-3083). Data can be tampered with by attackers.	High	Apache Cwe 295 Hive	9 years ago
CVE-2017-2300	Vulnerability in juniper (CVE-2017-2300) vulnerability in juniper (CVE-2017-2300). Risk of unauthorized operations or information disclosure.	High	Juniper Junos	9 years ago
CVE-2017-2301	Vulnerability in dos (CVE-2017-2301) vulnerability in dos (CVE-2017-2301). Risk of unauthorized operations or information disclosure.	High	Denial of Service Juniper Junos	9 years ago
CVE-2017-2302	Vulnerability in dos (CVE-2017-2302) vulnerability in dos (CVE-2017-2302). Risk of unauthorized operations or information disclosure.	High	Denial of Service Juniper Junos	9 years ago
CVE-2017-2303	Vulnerability in dos (CVE-2017-2303) vulnerability in dos (CVE-2017-2303). Risk of unauthorized operations or information disclosure.	High	Denial of Service Juniper Junos	9 years ago
CVE-2017-2304	Information Disclosure in juniper (CVE-2017-2304) vulnerability in juniper (CVE-2017-2304). Confidential information can be exposed externally.	High	Cwe 200 Juniper Junos Ex4300 +5	9 years ago
CVE-2017-2305	Authorization Flaw in privilege-escalation (CVE-2017-2305) vulnerability in privilege-escalation (CVE-2017-2305). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 863 Juniper Junos Space	9 years ago
CVE-2017-2306	Authorization Flaw in juniper (CVE-2017-2306) vulnerability in juniper (CVE-2017-2306). Successful exploitation can lead to full system takeover.	High	Cwe 863 Juniper Junos Space	9 years ago
CVE-2016-10378	SQL Injection in sqli (CVE-2016-10378) SQL injection in sqli (CVE-2016-10378). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 E107	9 years ago
CVE-2016-10379	SQL Injection in sqli (CVE-2016-10379) SQL injection in sqli (CVE-2016-10379). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Virtuemart	9 years ago
CVE-2017-9300	Buffer Overflow in dos (CVE-2017-9300) vulnerability in dos (CVE-2017-9300). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Videolan Vlc Media Player	9 years ago
CVE-2017-9301	Out-of-Bounds Read in dos (CVE-2017-9301) vulnerability in dos (CVE-2017-9301). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 125 Videolan Vlc Media Player	9 years ago
CVE-2017-7917	Cross-Site Request Forgery (CSRF) in moxa (CVE-2017-7917) vulnerability in moxa (CVE-2017-7917). Successful exploitation can lead to full system takeover.	High	Cwe 352 Moxa Oncell G3110 Hspa Firmware Oncell G3110 Hspa +10	9 years ago
CVE-2016-10377	Buffer Overflow in c (CVE-2016-10377) vulnerability in c (CVE-2016-10377). Successful exploitation can lead to full system takeover. Exploitable via ``miniflow_extract``.	High	C Cwe 119 Openvswitch	9 years ago
CVE-2017-9250	Vulnerability in c (CVE-2017-9250) vulnerability in c (CVE-2017-9250). Risk of unauthorized operations or information disclosure.	High	JavaScript C Denial of Service Cwe 476 +1	9 years ago
CVE-2017-7295	Use-After-Free in c (CVE-2017-7295) vulnerability in c (CVE-2017-7295). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 416 Contiki Os +1	9 years ago
CVE-2017-3134	Vulnerability in fortinet (CVE-2017-3134) vulnerability in fortinet (CVE-2017-3134). Successful exploitation can lead to full system takeover.	High	Cwe 20 Fortinet Fortiwlc Sd	9 years ago
CVE-2017-7338	Information Disclosure in fortinet (CVE-2017-7338) vulnerability in fortinet (CVE-2017-7338). Confidential information can be exposed externally.	High	Cwe 200 Fortinet Fortiportal	9 years ago
CVE-2017-7731	Vulnerability in fortinet (CVE-2017-7731) vulnerability in fortinet (CVE-2017-7731). Confidential information can be exposed externally.	High	Cwe 640 Fortinet Fortiportal	9 years ago
CVE-2017-8538	Buffer Overflow in microsoft (CVE-2017-8538) vulnerability in microsoft (CVE-2017-8538). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 119 Microsoft Forefront Security +10	9 years ago
CVE-2017-8541	Buffer Overflow in microsoft (CVE-2017-8541) vulnerability in microsoft (CVE-2017-8541). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 119 Microsoft Forefront Security +10	9 years ago
CVE-2017-7505	Authorization Flaw in theforeman (CVE-2017-7505) vulnerability in theforeman (CVE-2017-7505). Successful exploitation can lead to full system takeover.	High	Cwe 863 Cwe 269 Theforeman Foreman	9 years ago
CVE-2017-9035	Vulnerability in trendmicro (CVE-2017-9035) vulnerability in trendmicro (CVE-2017-9035). Confidential information can be exposed externally.	High	Cwe 319 Trendmicro Serverprotect	9 years ago
CVE-2017-9036	Vulnerability in trendmicro (CVE-2017-9036) vulnerability in trendmicro (CVE-2017-9036). Successful exploitation can lead to full system takeover.	High	Cwe 862 Trendmicro Serverprotect	9 years ago
CVE-2017-7236	SQL Injection in sqli (CVE-2017-7236) SQL injection in sqli (CVE-2017-7236). Confidential information can be exposed externally.	High	SQL Injection Cwe 89 Netapp Oncommand Unified Manager Core Package	9 years ago
CVE-2017-7439	Information Disclosure in netapp (CVE-2017-7439) vulnerability in netapp (CVE-2017-7439). Confidential information can be exposed externally.	High	Cwe 200 Netapp Oncommand Unified Manager Core Package	9 years ago
CVE-2017-9033	Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-9033) vulnerability in csrf (CVE-2017-9033). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Trendmicro Serverprotect	9 years ago
CVE-2014-0097	Authentication Bypass in vmware (CVE-2014-0097) authentication bypass in vmware (CVE-2014-0097). Risk of unauthorized operations or information disclosure.	High	Cwe 287 Vmware Spring Security	9 years ago
CVE-2014-0225	XXE (XML External Entity) in spring (CVE-2014-0225) vulnerability in spring (CVE-2014-0225). Successful exploitation can lead to full system takeover.	High	Spring Cwe 611 Pivotal Software Spring Framework +1	9 years ago
CVE-2015-3191	Cross-Site Request Forgery (CSRF) in csrf (CVE-2015-3191) vulnerability in csrf (CVE-2015-3191). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Cloudfoundry Cf Release +3	9 years ago
CVE-2016-0780	Vulnerability in dos (CVE-2016-0780) vulnerability in dos (CVE-2016-0780). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 399 Cloudfoundry Cf Release +2	9 years ago
CVE-2016-3084	Vulnerability in cloudfoundry (CVE-2016-3084) vulnerability in cloudfoundry (CVE-2016-3084). Successful exploitation can lead to full system takeover.	High	Cwe 264 Cloudfoundry Cloud Foundry Uaa Bosh Pivotal Software +4	9 years ago
CVE-2016-4977	Vulnerability in pivotal (CVE-2016-4977) vulnerability in pivotal (CVE-2016-4977). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 19 Pivotal Spring Security Oauth	9 years ago
CVE-2016-5007	Vulnerability in spring (CVE-2016-5007) vulnerability in spring (CVE-2016-5007). Data can be tampered with by attackers.	High	Spring Cwe 264 Pivotal Software Spring Framework +2	9 years ago
CVE-2017-9230	Vulnerability in bitcoin (CVE-2017-9230) vulnerability in bitcoin (CVE-2017-9230). Confidential information can be exposed externally.	High	Cwe 338 Bitcoin	9 years ago
CVE-2017-9229	Vulnerability in oniguruma-project (CVE-2017-9229) vulnerability in oniguruma-project (CVE-2017-9229). Risk of unauthorized operations or information disclosure.	High	PHP Ruby Cwe 476 Oniguruma Project +2	9 years ago
CVE-2017-2798	Buffer Overflow in marklogic (CVE-2017-2798) vulnerability in marklogic (CVE-2017-2798). Successful exploitation can lead to full system takeover.	High	Cwe 119 Marklogic	9 years ago
CVE-2017-2799	Buffer Overflow in marklogic (CVE-2017-2799) vulnerability in marklogic (CVE-2017-2799). Successful exploitation can lead to full system takeover.	High	Cwe 119 Marklogic	9 years ago
CVE-2017-2817	Buffer Overflow in poweriso (CVE-2017-2817) vulnerability in poweriso (CVE-2017-2817). Successful exploitation can lead to full system takeover.	High	Cwe 119 Poweriso	9 years ago
CVE-2017-2819	Buffer Overflow in hancom (CVE-2017-2819) vulnerability in hancom (CVE-2017-2819). Successful exploitation can lead to full system takeover.	High	Cwe 119 Hancom Hangul Word Processor Thinkfree Office Neo	9 years ago

Vulnerabilities

🍪 About cookies