Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2017-6608	Vulnerability in cisco (CVE-2017-6608) vulnerability in cisco (CVE-2017-6608). Risk of unauthorized operations or information disclosure.	High	Cwe 399 Cisco Adaptive Security Appliance Software	9 years ago
CVE-2017-6609	Vulnerability in cisco (CVE-2017-6609) vulnerability in cisco (CVE-2017-6609). Risk of unauthorized operations or information disclosure.	High	Cwe 399 Cisco Adaptive Security Appliance Software	9 years ago
CVE-2017-6610	Vulnerability in cisco (CVE-2017-6610) vulnerability in cisco (CVE-2017-6610). Risk of unauthorized operations or information disclosure.	High	Cwe 399 Cwe 20 Cisco Adaptive Security Appliance Software	9 years ago
CVE-2017-6616	Vulnerability in cisco (CVE-2017-6616) vulnerability in cisco (CVE-2017-6616). Successful exploitation can lead to full system takeover.	High	Cwe 20 Cisco Integrated Management Controller Supervisor	9 years ago
CVE-2017-6619	Vulnerability in cisco (CVE-2017-6619) vulnerability in cisco (CVE-2017-6619). Successful exploitation can lead to full system takeover.	High	Cwe 20 Cisco Integrated Management Controller Supervisor	9 years ago
CVE-2017-1122	Vulnerability in ibm (CVE-2017-1122) vulnerability in ibm (CVE-2017-1122). Successful exploitation can lead to full system takeover.	High	Ibm Security Guardium	9 years ago
CVE-2015-8285	The webssx.sys driver in QuickHeal 16.00 allows remote attackers to cause a denial of service. The webssx.sys driver in QuickHeal 16.00 allows remote attackers to cause a denial of service.	High	Denial of Service Cwe 119 Quickheal Total Security	9 years ago
CVE-2016-1161	Cross-Site Request Forgery (CSRF) in csrf (CVE-2016-1161) vulnerability in csrf (CVE-2016-1161). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Zohocorp Password Manager Pro	9 years ago
CVE-2016-3734	Cross-Site Request Forgery (CSRF) in csrf (CVE-2016-3734) vulnerability in csrf (CVE-2016-3734). Successful exploitation can lead to full system takeover.	High	PHP Cross-Site Request Forgery Cwe 352 Moodle	9 years ago
CVE-2016-5401	Cross-Site Request Forgery (CSRF) in csrf (CVE-2016-5401) vulnerability in csrf (CVE-2016-5401). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Redhat Jboss Bpm Suite +1	9 years ago
CVE-2017-5156	Cross-Site Request Forgery (CSRF) in aveva (CVE-2017-5156) vulnerability in aveva (CVE-2017-5156). Successful exploitation can lead to full system takeover.	High	Cwe 352 Aveva Wonderware Intouch Access Anywhere	9 years ago
CVE-2017-2784	Vulnerability in arm (CVE-2017-2784) vulnerability in arm (CVE-2017-2784). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 295 Arm Mbed Tls +1	9 years ago
CVE-2016-1218	SQL injection vulnerability in Cybozu Garoon before 4.2.2. SQL injection vulnerability in Cybozu Garoon before 4.2.2.	High	SQL Injection Cwe 89 Cybozu Garoon	9 years ago
CVE-2016-4850	LINE for Windows before 4.8.3 allows man-in-the-middle attackers to execute arbitrary code. LINE for Windows before 4.8.3 allows man-in-the-middle attackers to execute arbitrary code.	High	Cwe 284 Linecorp Line	9 years ago
CVE-2016-4862	Vulnerability in cs-cart (CVE-2016-4862) vulnerability in cs-cart (CVE-2016-4862). Successful exploitation can lead to full system takeover.	High	PHP Cwe 20 Cs Cart	9 years ago
CVE-2016-4293	Buffer Overflow in hancom (CVE-2016-4293) vulnerability in hancom (CVE-2016-4293). Successful exploitation can lead to full system takeover.	High	Cwe 119 Hancom Hancom Office 2014	9 years ago
CVE-2016-4650	Buffer Overflow in dos (CVE-2016-4650) vulnerability in dos (CVE-2016-4650). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Apple Iphone Os +2	9 years ago
CVE-2016-5409	Information Disclosure in redhat (CVE-2016-5409) vulnerability in redhat (CVE-2016-5409). Confidential information can be exposed externally. Exploitable via `Cookie header`.	High	Cwe 200 Redhat Openshift	9 years ago
CVE-2016-6331	Vulnerability in mediawiki (CVE-2016-6331) vulnerability in mediawiki (CVE-2016-6331). Confidential information can be exposed externally.	High	PHP Cwe 284 Mediawiki	9 years ago
CVE-2016-6332	Information Disclosure in mediawiki (CVE-2016-6332) vulnerability in mediawiki (CVE-2016-6332). Confidential information can be exposed externally.	High	Cwe 200 Mediawiki	9 years ago
CVE-2016-6335	Information Disclosure in mediawiki (CVE-2016-6335) vulnerability in mediawiki (CVE-2016-6335). Confidential information can be exposed externally.	High	PHP Cwe 200 Mediawiki	9 years ago
CVE-2016-6337	Vulnerability in mediawiki (CVE-2016-6337) vulnerability in mediawiki (CVE-2016-6337). Data can be tampered with by attackers.	High	Cwe 284 Mediawiki	9 years ago
CVE-2017-7692	Vulnerability in c (CVE-2017-7692) vulnerability in c (CVE-2017-7692). Successful exploitation can lead to full system takeover.	High	PHP C Remote Code Execution Cwe 20 +1	9 years ago
CVE-2017-6919	Vulnerability in drupal (CVE-2017-6919) vulnerability in drupal (CVE-2017-6919). Successful exploitation can lead to full system takeover.	High	Drupal	9 years ago
CVE-2017-7283	Vulnerability in unitrends (CVE-2017-7283) vulnerability in unitrends (CVE-2017-7283). Successful exploitation can lead to full system takeover.	High	PHP Cwe 20 Unitrends Enterprise Backup	9 years ago
CVE-2017-7979	Vulnerability in c (CVE-2017-7979) vulnerability in c (CVE-2017-7979). Successful exploitation can lead to full system takeover.	High	C Denial of Service Cwe 20 Linux +1	9 years ago
CVE-2017-7978	Information Disclosure in samsung (CVE-2017-7978) vulnerability in samsung (CVE-2017-7978). Confidential information can be exposed externally.	High	Cwe 200 Samsung Samsung Mobile	9 years ago
CVE-2013-7463	Vulnerability in aescrypt-project (CVE-2013-7463) vulnerability in aescrypt-project (CVE-2013-7463). Confidential information can be exposed externally.	High	Ruby Cwe 330 Aescrypt Project Aescrypt	9 years ago
CVE-2017-7976	Vulnerability in c (CVE-2017-7976) vulnerability in c (CVE-2017-7976). Confidential information can be exposed externally.	High	C Denial of Service Cwe 190 Artifex +1	9 years ago
CVE-2017-7975	Vulnerability in c (CVE-2017-7975) vulnerability in c (CVE-2017-7975). Successful exploitation can lead to full system takeover.	High	C Denial of Service Cwe 190 Artifex +1	9 years ago
CVE-2017-7961	Buffer Overflow in c (CVE-2017-7961) vulnerability in c (CVE-2017-7961). Successful exploitation can lead to full system takeover.	High	C Denial of Service Cwe 119 Gnome +1	9 years ago
CVE-2017-7963	Vulnerability in dos (CVE-2017-7963) vulnerability in dos (CVE-2017-7963). Risk of unauthorized operations or information disclosure.	High	PHP Denial of Service Cwe 770	9 years ago
CVE-2017-7850	Vulnerability in privilege-escalation (CVE-2017-7850) vulnerability in privilege-escalation (CVE-2017-7850). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 732 Tenable Nessus	9 years ago
CVE-2017-7948	Vulnerability in dos (CVE-2017-7948) vulnerability in dos (CVE-2017-7948). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 190 Artifex Ghostscript	9 years ago
CVE-2016-10345	Vulnerability in nginx (CVE-2016-10345) vulnerability in nginx (CVE-2016-10345). Successful exploitation can lead to full system takeover.	High	nginx Cwe 264 Phusion Passenger	9 years ago
CVE-2017-5656	Vulnerability in apache (CVE-2017-5656) vulnerability in apache (CVE-2017-5656). Confidential information can be exposed externally.	High	Apache Cwe 384 Cxf	9 years ago
CVE-2017-5661	XXE (XML External Entity) in apache (CVE-2017-5661) vulnerability in apache (CVE-2017-5661). Confidential information can be exposed externally.	High	Apache Denial of Service Cwe 611 Formatting Objects Processor	9 years ago
CVE-2017-5662	XXE (XML External Entity) in apache (CVE-2017-5662) vulnerability in apache (CVE-2017-5662). Confidential information can be exposed externally.	High	Apache Denial of Service Cwe 611 Batik	9 years ago
CVE-2017-7645	Vulnerability in c (CVE-2017-7645) vulnerability in c (CVE-2017-7645). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 20 Linux +5	9 years ago
CVE-2016-3036	Buffer Overflow in dos (CVE-2016-3036) vulnerability in dos (CVE-2016-3036). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 119 Ibm Cognos Business Intelligence	9 years ago
CVE-2017-1161	Vulnerability in ibm (CVE-2017-1161) vulnerability in ibm (CVE-2017-1161). Risk of unauthorized operations or information disclosure.	High	Cwe 20 Ibm Api Connect	9 years ago
CVE-2017-7892	Vulnerability in capnproto (CVE-2017-7892) vulnerability in capnproto (CVE-2017-7892). Risk of unauthorized operations or information disclosure.	High	Cwe 20 Capnproto	9 years ago
CVE-2016-5396	Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack. Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack.	High	Apache Cwe 399 Traffic Server	9 years ago
CVE-2017-5659	Vulnerability in apache (CVE-2017-5659) vulnerability in apache (CVE-2017-5659). Risk of unauthorized operations or information disclosure.	High	Apache Cwe 20 Traffic Server	9 years ago
CVE-2016-7551	Vulnerability in dos (CVE-2016-7551) vulnerability in dos (CVE-2016-7551). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 399 Digium Asterisk +3	9 years ago
CVE-2017-5647	Information Disclosure in c (CVE-2017-5647) vulnerability in c (CVE-2017-5647). Confidential information can be exposed externally.	High	C Apache Tomcat Cwe 200	9 years ago
CVE-2017-5650	Vulnerability in apache (CVE-2017-5650) vulnerability in apache (CVE-2017-5650). Risk of unauthorized operations or information disclosure.	High	Apache Tomcat Cwe 404	9 years ago
CVE-2017-7885	Vulnerability in c (CVE-2017-7885) vulnerability in c (CVE-2017-7885). Confidential information can be exposed externally.	High	C Denial of Service Cwe 190 Artifex +1	9 years ago
CVE-2017-7889	Vulnerability in c (CVE-2017-7889) vulnerability in c (CVE-2017-7889). Successful exploitation can lead to full system takeover.	High	C Cwe 732 Linux Linux Kernel +4	9 years ago
CVE-2017-7615	Vulnerability in mantisbt (CVE-2017-7615) vulnerability in mantisbt (CVE-2017-7615). Successful exploitation can lead to full system takeover.	High	PHP Cwe 640 Mantisbt	9 years ago

Vulnerabilities

🍪 About cookies