Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2023-25262	SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-25262) SSRF in ssrf (CVE-2023-25262). Confidential information can be exposed externally.	High	Server-Side Request Forgery Cwe 918 Stimulsoft Designer	3 years ago
CVE-2023-24094	Out-of-Bounds Write in dos (CVE-2023-24094) out-of-bounds write in dos (CVE-2023-24094). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 787 Mikrotik Routeros	3 years ago
CVE-2023-20107	Vulnerability in cisco (CVE-2023-20107) vulnerability in cisco (CVE-2023-20107). Confidential information can be exposed externally.	High	Cwe 332 Cwe 331 Cisco Adaptive Security Appliance +6	3 years ago
CVE-2023-1281	Use-After-Free in privilege-escalation (CVE-2023-1281) vulnerability in privilege-escalation (CVE-2023-1281). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 416 Linux Linux Kernel	3 years ago
CVE-2023-1462	Vulnerability in vadi (CVE-2023-1462) vulnerability in vadi (CVE-2023-1462). Successful exploitation can lead to full system takeover.	High	Authentication Bypass Cwe 639 Vadi Digikent	3 years ago
CVE-2023-26769	Vulnerability in c (CVE-2023-26769) vulnerability in c (CVE-2023-26769). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 120 Liblouis	3 years ago
CVE-2023-26360 KEV	[KEV] Vulnerability in Adobe coldfusion (CVE-2023-26360) vulnerability in Adobe coldfusion (CVE-2023-26360). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Adobe Coldfusion Cwe 284	3 years ago
CVE-2023-23398	Microsoft Excel Spoofing Vulnerability Microsoft Excel Spoofing Vulnerability	High	Cwe 290 Microsoft 365 Apps Excel +2	3 years ago
CVE-2023-23397 KEV	[KEV] Vulnerability in Microsoft office (CVE-2023-23397) vulnerability in Microsoft office (CVE-2023-23397). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Office Cwe 294	3 years ago
CVE-2023-24880 KEV	[KEV] Authorization Flaw in Microsoft windows (CVE-2023-24880) vulnerability in Microsoft windows (CVE-2023-24880). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 863	3 years ago
CVE-2022-41328 KEV	[KEV] Path Traversal in Fortinet fortios (CVE-2022-41328) path traversal in Fortinet fortios (CVE-2022-41328). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Fortinet Fortios Cwe 22	3 years ago
CVE-2023-23328	Unrestricted File Upload in avantfax (CVE-2023-23328) vulnerability in avantfax (CVE-2023-23328). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434 Avantfax	3 years ago
CVE-2023-1246	Vulnerability in saysis (CVE-2023-1246) vulnerability in saysis (CVE-2023-1246). Confidential information can be exposed externally.	High	Cwe 552 Saysis Starcities	3 years ago
CVE-2023-27161	SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27161) SSRF in ssrf (CVE-2023-27161). Confidential information can be exposed externally.	High	Server-Side Request Forgery Cwe 918 Jellyfin	3 years ago
CVE-2021-39144 KEV	[KEV] Vulnerability in com.thoughtworks.xstream:xstream (CVE-2021-39144) vulnerability in com.thoughtworks.xstream:xstream (CVE-2021-39144). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `1.4.18` or later.	High	Xstream Cwe 94 Cwe 502	3 years ago
CVE-2020-5741 KEV	[KEV] Unsafe Deserialization in Plex media-server (CVE-2020-5741) vulnerability in Plex media-server (CVE-2020-5741). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Plex Media Server Cwe 502	3 years ago
CVE-2022-33891 KEV	[KEV] OS Command Injection in Apache pyspark (CVE-2022-33891) OS command injection in Apache pyspark (CVE-2022-33891). Successful exploitation can lead to full system takeover. Exploitable via ``spark.acls.enable``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `3.2.2` or later.	High	Apache Spark Cwe 78	3 years ago
CVE-2022-28810 KEV	[KEV] OS Command Injection in Zoho manageengine (CVE-2022-28810) OS command injection in Zoho manageengine (CVE-2022-28810). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Zoho Manageengine Cwe 78 Cwe 259	3 years ago
CVE-2022-35914 KEV	[KEV] Vulnerability in Teclib glpi (CVE-2022-35914) vulnerability in Teclib glpi (CVE-2022-35914). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Teclib Glpi Cwe 74	3 years ago
CVE-2022-45552	Vulnerability in zbt (CVE-2022-45552) vulnerability in zbt (CVE-2022-45552). Confidential information can be exposed externally.	High	Cwe 276 Zbt We1626 Firmware We1626	3 years ago
CVE-2022-45608	Privilege Escalation in thingsboard (CVE-2022-45608) vulnerability in thingsboard (CVE-2022-45608). Successful exploitation can lead to full system takeover.	High	Cwe 269 Thingsboard	3 years ago
CVE-2023-0567	Vulnerability in CVE-2023-0567 (CVE-2023-0567) vulnerability in CVE-2023-0567 (CVE-2023-0567). Confidential information can be exposed externally.	High	PHP Cwe 916	3 years ago
CVE-2021-3855	Command Injection in liman (CVE-2021-3855) command injection in liman (CVE-2021-3855). Successful exploitation can lead to full system takeover.	High	Cwe 77 Liman Port Mys	3 years ago
CVE-2022-45697	Vulnerability in razer (CVE-2022-45697) vulnerability in razer (CVE-2022-45697). Successful exploitation can lead to full system takeover.	High	Cwe 59 Razer Razer Central	3 years ago
CVE-2022-36537 KEV	[KEV] Vulnerability in Zk framework zk-framework (CVE-2022-36537) vulnerability in Zk framework zk-framework (CVE-2022-36537). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Zk Framework Auuploader Cwe 441	3 years ago
CVE-2022-48363	Vulnerability in musicpd (CVE-2022-48363) vulnerability in musicpd (CVE-2022-48363). Risk of unauthorized operations or information disclosure.	High	Cwe 617 Musicpd Music Player Daemon Linuxfoundation +1	3 years ago
CVE-2023-24317	Unrestricted File Upload in judging-management-system-project (CVE-2023-24317) vulnerability in judging-management-system-project (CVE-2023-24317). Confidential information can be exposed externally.	High	PHP Cwe 434 Judging Management System Project Judging Management System	3 years ago
CVE-2023-26314	Vulnerability in dos (CVE-2023-26314) vulnerability in dos (CVE-2023-26314). Successful exploitation can lead to full system takeover.	High	Denial of Service Mono Project Mono Debian +1	3 years ago
CVE-2022-47986 KEV	[KEV] Unsafe Deserialization in Ibm aspera-faspex (CVE-2022-47986) vulnerability in Ibm aspera-faspex (CVE-2022-47986). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Ibm Aspera Faspex Cwe 502	3 years ago
CVE-2022-41223 KEV	[KEV] Code Injection in Mitel mivoice-connect (CVE-2022-41223) code injection in Mitel mivoice-connect (CVE-2022-41223). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Mitel Mivoice Connect Cwe 94	3 years ago
CVE-2022-40765 KEV	[KEV] Command Injection in Mitel mivoice-connect (CVE-2022-40765) command injection in Mitel mivoice-connect (CVE-2022-40765). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Mitel Mivoice Connect Cwe 77	3 years ago
CVE-2022-45701	Command Injection in commscope (CVE-2022-45701) command injection in commscope (CVE-2022-45701). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 77 Commscope Arris Tg2482A Firmware +5	3 years ago
CVE-2023-0882	Vulnerability in krontech (CVE-2023-0882) vulnerability in krontech (CVE-2023-0882). Successful exploitation can lead to full system takeover.	High	Cwe 639 Krontech Single Connect Microsoft +1	3 years ago
CVE-2022-46169 KEV	[KEV] Vulnerability in cacti (CVE-2022-46169) vulnerability in cacti (CVE-2022-46169). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cacti Cwe 74	3 years ago
CVE-2023-23381	Visual Studio Remote Code Execution Vulnerability Visual Studio Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Microsoft Visual Studio 2017 +2	3 years ago
CVE-2023-21778	Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 77 Microsoft Dynamics 365	3 years ago
CVE-2023-21808	.NET and Visual Studio Remote Code Execution Vulnerability .NET and Visual Studio Remote Code Execution Vulnerability	High	C# Remote Code Execution Cwe 416 Microsoft +25	3 years ago
CVE-2023-21815	Visual Studio Remote Code Execution Vulnerability Visual Studio Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 191 Microsoft Visual Studio 2017 +2	3 years ago
CVE-2023-21553	Azure DevOps Server Remote Code Execution Vulnerability Azure DevOps Server Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 94 Microsoft Azure Devops Server	3 years ago
CVE-2023-21566	Visual Studio Elevation of Privilege Vulnerability Visual Studio Elevation of Privilege Vulnerability	High	Cwe 73 Microsoft Visual Studio 2017 Visual Studio 2019 +1	3 years ago
CVE-2023-23378	Print 3D Remote Code Execution Vulnerability Print 3D Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Microsoft Print 3D	3 years ago
CVE-2023-23379	Microsoft Defender for IoT Elevation of Privilege Vulnerability Microsoft Defender for IoT Elevation of Privilege Vulnerability	High	Cwe 23 Microsoft Defender For Iot	3 years ago
CVE-2023-23390	3D Builder Remote Code Execution Vulnerability 3D Builder Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Microsoft 3D Builder	3 years ago
CVE-2023-21812	Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability	High	Cwe 122 Microsoft Windows 10 Windows 10 1607 +11	3 years ago
CVE-2023-21813	Windows Secure Channel Denial of Service Vulnerability Windows Secure Channel Denial of Service Vulnerability	High	Denial of Service Cwe 126 Microsoft Windows 10 +12	3 years ago
CVE-2023-21816	Windows Active Directory Domain Services API Denial of Service Vulnerability Windows Active Directory Domain Services API Denial of Service Vulnerability	High	Denial of Service Cwe 20 Microsoft Windows 10 +12	3 years ago
CVE-2023-21817	Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability	High	Cwe 287 Microsoft Windows 10 Windows 10 1607 +11	3 years ago
CVE-2023-21818	Windows Secure Channel Denial of Service Vulnerability Windows Secure Channel Denial of Service Vulnerability	High	Denial of Service Cwe 20 Microsoft Windows 10 +11	3 years ago
CVE-2023-21819	Windows Secure Channel Denial of Service Vulnerability Windows Secure Channel Denial of Service Vulnerability	High	Denial of Service Cwe 125 Microsoft Windows 10 1809 +6	3 years ago
CVE-2023-21820	Windows Distributed File System (DFS) Remote Code Execution Vulnerability Windows Distributed File System (DFS) Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 126 Microsoft Windows 10 +12	3 years ago

Vulnerabilities

🍪 About cookies