Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2020-11023 KEV |
|
[KEV] Cross-Site Scripting (XSS) in jquery (CVE-2020-11023)
cross-site scripting in jquery (CVE-2020-11023). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `3.5.0` or later.
|
| CVE-2023-36998 |
|
Vulnerability in CVE-2023-36998 (CVE-2023-36998)
vulnerability in CVE-2023-36998 (CVE-2023-36998). Data can be tampered with by attackers.
|
| CVE-2024-11218 |
|
Privilege Escalation in CVE-2024-11218 (CVE-2024-11218)
vulnerability in CVE-2024-11218 (CVE-2024-11218). Successful exploitation can lead to full system takeover. Exploitable via ``buildah.``.
|
| CVE-2024-24451 |
|
Vulnerability in dos (CVE-2024-24451)
vulnerability in dos (CVE-2024-24451). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-24442 |
|
Vulnerability in dos (CVE-2024-24442)
vulnerability in dos (CVE-2024-24442). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-24444 |
|
Vulnerability in dos (CVE-2024-24444)
vulnerability in dos (CVE-2024-24444). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-21664 |
|
Vulnerability in linux (CVE-2025-21664)
vulnerability in linux (CVE-2025-21664). Successful exploitation can lead to full system takeover.
|
| CVE-2024-57945 |
|
Out-of-Bounds Read in linux (CVE-2024-57945)
vulnerability in linux (CVE-2024-57945). Successful exploitation can lead to full system takeover.
|
| CVE-2025-21659 |
|
Vulnerability in linux (CVE-2025-21659)
vulnerability in linux (CVE-2025-21659). Data can be tampered with by attackers.
|
| CVE-2025-21661 |
|
Vulnerability in linux (CVE-2025-21661)
vulnerability in linux (CVE-2025-21661). Successful exploitation can lead to full system takeover.
|
| CVE-2025-21655 |
|
Use-After-Free in linux (CVE-2025-21655)
vulnerability in linux (CVE-2025-21655). Successful exploitation can lead to full system takeover.
|
| CVE-2023-52923 |
|
Vulnerability in linux (CVE-2023-52923)
vulnerability in linux (CVE-2023-52923). Successful exploitation can lead to full system takeover.
|
| CVE-2024-57929 |
|
Vulnerability in c (CVE-2024-57929)
vulnerability in c (CVE-2024-57929). Successful exploitation can lead to full system takeover.
|
| CVE-2024-57921 |
|
Vulnerability in linux (CVE-2024-57921)
vulnerability in linux (CVE-2024-57921). Successful exploitation can lead to full system takeover.
|
| CVE-2024-57918 |
|
Vulnerability in linux (CVE-2024-57918)
vulnerability in linux (CVE-2024-57918). Successful exploitation can lead to full system takeover.
|
| CVE-2024-57917 |
|
Vulnerability in c (CVE-2024-57917)
vulnerability in c (CVE-2024-57917). Successful exploitation can lead to full system takeover.
|
| CVE-2025-21647 |
|
Out-of-Bounds Read in linux (CVE-2025-21647)
vulnerability in linux (CVE-2025-21647). Confidential information can be exposed externally.
|
| CVE-2025-21646 |
|
Vulnerability in c (CVE-2025-21646)
vulnerability in c (CVE-2025-21646). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-21650 |
|
Out-of-Bounds Write in linux (CVE-2025-21650)
out-of-bounds write in linux (CVE-2025-21650). Confidential information can be exposed externally.
|
| CVE-2025-21638 |
|
Vulnerability in linux (CVE-2025-21638)
vulnerability in linux (CVE-2025-21638). Data can be tampered with by attackers.
|
| CVE-2025-21640 |
|
Vulnerability in linux (CVE-2025-21640)
vulnerability in linux (CVE-2025-21640). Data can be tampered with by attackers.
|
| CVE-2025-21637 |
|
Vulnerability in linux (CVE-2025-21637)
vulnerability in linux (CVE-2025-21637). Data can be tampered with by attackers.
|
| CVE-2024-45331 |
|
Vulnerability in fortinet (CVE-2024-45331)
vulnerability in fortinet (CVE-2024-45331). Successful exploitation can lead to full system takeover.
|
| CVE-2024-50603 KEV |
|
[KEV] OS Command Injection in Aviatrix controllers (CVE-2024-50603)
OS command injection in Aviatrix controllers (CVE-2024-50603). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-21629 |
|
Vulnerability in c (CVE-2025-21629)
vulnerability in c (CVE-2025-21629). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-57901 |
|
Vulnerability in c (CVE-2024-57901)
vulnerability in c (CVE-2024-57901). Confidential information can be exposed externally.
|
| CVE-2024-57902 |
|
Vulnerability in c (CVE-2024-57902)
vulnerability in c (CVE-2024-57902). Confidential information can be exposed externally.
|
| CVE-2024-57895 |
|
Vulnerability in c (CVE-2024-57895)
vulnerability in c (CVE-2024-57895). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-57899 |
|
Vulnerability in linux (CVE-2024-57899)
vulnerability in linux (CVE-2024-57899). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-57893 |
|
Vulnerability in linux (CVE-2024-57893)
vulnerability in linux (CVE-2024-57893). Successful exploitation can lead to full system takeover.
|
| CVE-2024-57883 |
|
Vulnerability in c (CVE-2024-57883)
vulnerability in c (CVE-2024-57883). Successful exploitation can lead to full system takeover.
|
| CVE-2024-39282 |
|
Vulnerability in linux (CVE-2024-39282)
vulnerability in linux (CVE-2024-39282). Successful exploitation can lead to full system takeover.
|
| CVE-2024-42911 |
|
Code Injection in CVE-2024-42911 (CVE-2024-42911)
code injection in CVE-2024-42911 (CVE-2024-42911). Confidential information can be exposed externally.
|
| CVE-2025-0474 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-0474)
SSRF in ssrf (CVE-2025-0474). Confidential information can be exposed externally.
|
| CVE-2025-21402 |
|
Microsoft Office OneNote Remote Code Execution Vulnerability
Microsoft Office OneNote Remote Code Execution Vulnerability
|
| CVE-2025-21361 |
|
Microsoft Outlook Remote Code Execution Vulnerability
Microsoft Outlook Remote Code Execution Vulnerability
|
| CVE-2025-21338 |
|
GDI+ Remote Code Execution Vulnerability
GDI+ Remote Code Execution Vulnerability
|
| CVE-2024-12085 |
|
Vulnerability in samba (CVE-2024-12085)
vulnerability in samba (CVE-2024-12085). Confidential information can be exposed externally.
|
| CVE-2024-48884 |
|
Path Traversal in path-traversal (CVE-2024-48884)
path traversal in path-traversal (CVE-2024-48884). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-21335 KEV |
|
[KEV] Use-After-Free in Microsoft windows (CVE-2025-21335)
vulnerability in Microsoft windows (CVE-2025-21335). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-21334 KEV |
|
[KEV] Use-After-Free in Microsoft windows (CVE-2025-21334)
vulnerability in Microsoft windows (CVE-2025-21334). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-21333 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2025-21333)
vulnerability in Microsoft windows (CVE-2025-21333). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-48365 KEV |
|
[KEV] Vulnerability in Qlik sense (CVE-2023-48365)
vulnerability in Qlik sense (CVE-2023-48365). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-12686 KEV |
|
[KEV] OS Command Injection in Beyondtrust privileged-remote-access-pra-and-remote-support-rs (CVE-2024-12686)
OS command injection in Beyondtrust privileged-remote-access-pra-and-remote-support-rs (CVE-2024-12686). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-57849 |
|
Use-After-Free in linux (CVE-2024-57849)
vulnerability in linux (CVE-2024-57849). Successful exploitation can lead to full system takeover.
|
| CVE-2024-57850 |
|
Out-of-Bounds Write in linux (CVE-2024-57850)
out-of-bounds write in linux (CVE-2024-57850). Successful exploitation can lead to full system takeover.
|
| CVE-2024-57875 |
|
Use-After-Free in linux (CVE-2024-57875)
vulnerability in linux (CVE-2024-57875). Successful exploitation can lead to full system takeover.
|
| CVE-2024-57804 |
|
Vulnerability in linux (CVE-2024-57804)
vulnerability in linux (CVE-2024-57804). Data can be tampered with by attackers.
|
| CVE-2024-56788 |
|
Vulnerability in linux (CVE-2024-56788)
vulnerability in linux (CVE-2024-56788). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-57791 |
|
Vulnerability in linux (CVE-2024-57791)
vulnerability in linux (CVE-2024-57791). Risk of unauthorized operations or information disclosure.
|