Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2023-36847 KEV	[KEV] Vulnerability in Juniper junos-os (CVE-2023-36847) vulnerability in Juniper junos-os (CVE-2023-36847). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Juniper Junos Os Cwe 306	2 years ago
CVE-2023-36851 KEV	[KEV] Vulnerability in Juniper junos-os (CVE-2023-36851) vulnerability in Juniper junos-os (CVE-2023-36851). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Juniper Junos Os Cwe 306	2 years ago
CVE-2023-29552 KEV	[KEV] Vulnerability in Ietf service-location-protocol-slp (CVE-2023-29552) vulnerability in Ietf service-location-protocol-slp (CVE-2023-29552). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Ietf Service Location Protocol Slp	2 years ago
CVE-2023-47360	Vulnerability in videolan (CVE-2023-47360) vulnerability in videolan (CVE-2023-47360). Risk of unauthorized operations or information disclosure.	High	Cwe 191 Videolan Vlc Media Player	2 years ago
CVE-2023-22518 KEV	[KEV] Authorization Flaw in Atlassian confluence-data-center-and-server (CVE-2023-22518) vulnerability in Atlassian confluence-data-center-and-server (CVE-2023-22518). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Atlassian Confluence Data Center And Server Cwe 863	2 years ago
CVE-2023-46847	Vulnerability in dos (CVE-2023-46847) vulnerability in dos (CVE-2023-46847). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 120 Squid Cache Squid +10	2 years ago
CVE-2023-43336	Vulnerability in sangoma (CVE-2023-43336) vulnerability in sangoma (CVE-2023-43336). Successful exploitation can lead to full system takeover.	High	Cwe 284 Sangoma Freepbx	2 years ago
CVE-2023-46604 KEV	[KEV] Unsafe Deserialization in Apache activemq (CVE-2023-46604) vulnerability in Apache activemq (CVE-2023-46604). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apache Activemq Cwe 502	2 years ago
CVE-2023-20083	Vulnerability in dos (CVE-2023-20083) vulnerability in dos (CVE-2023-20083). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 835 Cisco Secure Firewall Threat Defense	2 years ago
CVE-2023-20095	Vulnerability in dos (CVE-2023-20095) vulnerability in dos (CVE-2023-20095). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 772 Cisco Adaptive Security Appliance Software +1	2 years ago
CVE-2023-20063	Code Injection in cisco (CVE-2023-20063) code injection in cisco (CVE-2023-20063). Successful exploitation can lead to full system takeover.	High	Cwe 94 Cwe 20 Cisco Secure Firewall Management Center +1	2 years ago
CVE-2023-20086	Vulnerability in dos (CVE-2023-20086) vulnerability in dos (CVE-2023-20086). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 248 Cisco Adaptive Security Appliance Software +1	2 years ago
CVE-2023-20244	Vulnerability in dos (CVE-2023-20244) vulnerability in dos (CVE-2023-20244). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 771 Cisco Secure Firewall Threat Defense +4	2 years ago
CVE-2023-46748 KEV	[KEV] SQL Injection in F5 big-ip-configuration-utility (CVE-2023-46748) SQL injection in F5 big-ip-configuration-utility (CVE-2023-46748). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	F5 Big Ip Configuration Utility Cwe 89	2 years ago
CVE-2023-46747 KEV	[KEV] Vulnerability in F5 big-ip-configuration-utility (CVE-2023-46747) vulnerability in F5 big-ip-configuration-utility (CVE-2023-46747). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	F5 Big Ip Configuration Utility Cwe 288	2 years ago
CVE-2023-5443	Vulnerability in e-invoice-project (CVE-2023-5443) vulnerability in e-invoice-project (CVE-2023-5443). Confidential information can be exposed externally.	High	Cwe 1320 E Invoice Project E Invoice	2 years ago
CVE-2023-5570	Vulnerability in inohom (CVE-2023-5570) vulnerability in inohom (CVE-2023-5570). Confidential information can be exposed externally.	High	Cwe 1320 Inohom Home Manager Gateway	2 years ago
CVE-2023-5631 KEV	[KEV] Cross-Site Scripting (XSS) in Roundcube webmail (CVE-2023-5631) cross-site scripting in Roundcube webmail (CVE-2023-5631). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Roundcube Webmail Cwe 79	2 years ago
CVE-2023-5367	Out-of-Bounds Write in c (CVE-2023-5367) out-of-bounds write in c (CVE-2023-5367). Successful exploitation can lead to full system takeover.	High	C Denial of Service Cwe 787 Xorg +15	2 years ago
CVE-2023-5574	Use-After-Free in dos (CVE-2023-5574) vulnerability in dos (CVE-2023-5574). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 416 Xorg X Server +2	2 years ago
CVE-2023-5363	Vulnerability in openssl (CVE-2023-5363) vulnerability in openssl (CVE-2023-5363). Confidential information can be exposed externally.	High	Cwe 684 Openssl Debian Debian Linux +11	2 years ago
CVE-2023-4692	Vulnerability in gnu (CVE-2023-4692) vulnerability in gnu (CVE-2023-4692). Successful exploitation can lead to full system takeover.	High	Cwe 122 Cwe 787 Gnu Grub2 +2	2 years ago
CVE-2023-46136	Vulnerability in werkzeug (CVE-2023-46136) vulnerability in werkzeug (CVE-2023-46136). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.8` or later.	High	Denial of Service Cwe 400 Cwe 407 Cwe 787 +2	2 years ago
CVE-2023-20273 KEV	[KEV] OS Command Injection in cisco (CVE-2023-20273) OS command injection in cisco (CVE-2023-20273). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco Cisco Ios Xe Web Ui Cwe 78	2 years ago
CVE-2023-45898	Use-After-Free in c (CVE-2023-45898) vulnerability in c (CVE-2023-45898). Successful exploitation can lead to full system takeover.	High	C Cwe 416 Linux Linux Kernel	2 years ago
CVE-2023-20198 KEV	[KEV] Vulnerability in Cisco ios-xe-web-ui (CVE-2023-20198) vulnerability in Cisco ios-xe-web-ui (CVE-2023-20198). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco Ios Xe Web Ui Cwe 420	2 years ago
CVE-2023-36565	Microsoft Office Graphics Elevation of Privilege Vulnerability Microsoft Office Graphics Elevation of Privilege Vulnerability	High	Cwe 416 Microsoft Office Office Long Term Servicing Channel	2 years ago
CVE-2023-43896	Vulnerability in macrium (CVE-2023-43896) vulnerability in macrium (CVE-2023-43896). Successful exploitation can lead to full system takeover.	High	Cwe 120 Macrium Reflect	2 years ago
CVE-2023-21608 KEV	[KEV] Use-After-Free in Adobe acrobat-and-reader (CVE-2023-21608) vulnerability in Adobe acrobat-and-reader (CVE-2023-21608). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Adobe Acrobat And Reader Cwe 416	2 years ago
CVE-2023-20109 KEV	[KEV] Out-of-Bounds Write in Cisco ios-and-ios-xe (CVE-2023-20109) out-of-bounds write in Cisco ios-and-ios-xe (CVE-2023-20109). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco Ios And Ios Xe Cwe 787	2 years ago
CVE-2023-41763 KEV	[KEV] SSRF (Server-Side Request Forgery) in Microsoft skype-for-business (CVE-2023-41763) SSRF in Microsoft skype-for-business (CVE-2023-41763). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Skype For Business Cwe 918	2 years ago
CVE-2023-36563 KEV	[KEV] Vulnerability in Microsoft wordpad (CVE-2023-36563) vulnerability in Microsoft wordpad (CVE-2023-36563). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Wordpad Cwe 20	2 years ago
CVE-2023-44487 KEV	[KEV] Vulnerability in Ietf golang.org/x/net (CVE-2023-44487) vulnerability in Ietf golang.org/x/net (CVE-2023-44487). Risk of unauthorized operations or information disclosure. Exploitable via ``Channel``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.17.0` or later.	High	Ietf Http2 Cwe 400 Denial of Service +343	2 years ago
CVE-2023-43615	Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow. Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.	High	Cwe 120 Arm Mbed Tls Trustedfirmware +2	2 years ago
CVE-2023-22515 KEV	[KEV] Vulnerability in Atlassian confluence-data-center-and-server (CVE-2023-22515) vulnerability in Atlassian confluence-data-center-and-server (CVE-2023-22515). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Atlassian Confluence Data Center And Server	2 years ago
CVE-2023-40044 KEV	[KEV] Unsafe Deserialization in Progress ws-ftp-server (CVE-2023-40044) vulnerability in Progress ws-ftp-server (CVE-2023-40044). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Progress Ws Ftp Server Cwe 502	2 years ago
CVE-2023-42824 KEV	[KEV] Vulnerability in Apple ios-and-ipados (CVE-2023-42824) vulnerability in Apple ios-and-ipados (CVE-2023-42824). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Ios And Ipados	2 years ago
CVE-2023-43261	Vulnerability in milesight (CVE-2023-43261) vulnerability in milesight (CVE-2023-43261). Confidential information can be exposed externally.	High	Cwe 532 Milesight Ur5X Firmware Ur51 +10	2 years ago
CVE-2023-42793 KEV	[KEV] Vulnerability in Jetbrains teamcity (CVE-2023-42793) vulnerability in Jetbrains teamcity (CVE-2023-42793). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Jetbrains Teamcity Cwe 288	2 years ago
CVE-2023-28229 KEV	[KEV] Vulnerability in Microsoft windows-cng-key-isolation-service (CVE-2023-28229) vulnerability in Microsoft windows-cng-key-isolation-service (CVE-2023-28229). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cng Key Isolation Service Cwe 591	2 years ago
CVE-2023-43176	Unsafe Deserialization in deserialization (CVE-2023-43176) vulnerability in deserialization (CVE-2023-43176). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 502 Afterlogic Aurora Files	2 years ago
CVE-2023-4211 KEV	[KEV] Use-After-Free in Arm :unknown: (CVE-2023-4211) vulnerability in Arm :unknown: (CVE-2023-4211). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `SoCVersion:2023-10-05` or later.	High	Arm Mali Gpu Kernel Driver Cwe 416	2 years ago
CVE-2023-5217 KEV	[KEV] Out-of-Bounds Write in Google electron (CVE-2023-5217) out-of-bounds write in Google electron (CVE-2023-5217). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `27.0.0-beta.8` or later.	High	Google Chromium Libvpx Cwe 787	2 years ago
CVE-2023-41450	Code Injection in phpkobo (CVE-2023-41450) code injection in phpkobo (CVE-2023-41450). Successful exploitation can lead to full system takeover.	High	Cwe 94 Phpkobo Ajaxnewsticker	2 years ago
CVE-2018-14667 KEV	[KEV] Code Injection in Red hat red-hat (CVE-2018-14667) code injection in Red hat red-hat (CVE-2018-14667). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Red Hat Jboss Richfaces Framework Cwe 94	2 years ago
CVE-2023-41452	Cross-Site Request Forgery (CSRF) in phpkobo (CVE-2023-41452) vulnerability in phpkobo (CVE-2023-41452). Successful exploitation can lead to full system takeover.	High	PHP Cwe 352 Phpkobo Ajaxnewsticker	2 years ago
CVE-2023-4934	Vulnerability in usta (CVE-2023-4934) vulnerability in usta (CVE-2023-4934). Successful exploitation can lead to full system takeover.	High	Authentication Bypass Cwe 639 Usta Aybs	2 years ago
CVE-2023-43856	Vulnerability in iteachyou (CVE-2023-43856) vulnerability in iteachyou (CVE-2023-43856). Confidential information can be exposed externally.	High	Java Cwe 552 Iteachyou Dreamer Cms	2 years ago
CVE-2023-43278	Cross-Site Request Forgery (CSRF) in csrf (CVE-2023-43278) vulnerability in csrf (CVE-2023-43278). Successful exploitation can lead to full system takeover.	High	PHP Cross-Site Request Forgery Cwe 352 Seacms	2 years ago
CVE-2023-42753	Out-of-Bounds Write in linux (CVE-2023-42753) out-of-bounds write in linux (CVE-2023-42753). Successful exploitation can lead to full system takeover.	High	Cwe 787 Linux Linux Kernel Redhat +3	2 years ago

Vulnerabilities

🍪 About cookies