Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2022-21587 KEV	[KEV] Vulnerability in Oracle e-business-suite (CVE-2022-21587) vulnerability in Oracle e-business-suite (CVE-2022-21587). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Oracle E Business Suite Cwe 306	3 years ago
CVE-2023-22952 KEV	[KEV] Vulnerability in Sugarcrm multiple-products (CVE-2023-22952) vulnerability in Sugarcrm multiple-products (CVE-2023-22952). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Sugarcrm Multiple Products Cwe 20	3 years ago
CVE-2022-47768	Serenissima Informatica Fast Checkin 1.0 is vulnerable to Directory Traversal. Serenissima Informatica Fast Checkin 1.0 is vulnerable to Directory Traversal.	High	Path Traversal Cwe 22 Serinf Fast Checkin	3 years ago
CVE-2020-25502	Vulnerability in cybereason (CVE-2020-25502) vulnerability in cybereason (CVE-2020-25502). Successful exploitation can lead to full system takeover.	High	Cwe 427 Cybereason Endpoint Detection And Response	3 years ago
CVE-2021-37500	Path Traversal in path-traversal (CVE-2021-37500) path traversal in path-traversal (CVE-2021-37500). Data can be tampered with by attackers.	High	Path Traversal Cwe 22 Reprisesoftware Reprise License Manager	3 years ago
CVE-2021-36630	Vulnerability in dos (CVE-2021-36630) vulnerability in dos (CVE-2021-36630). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770 Ruckuswireless Sz 300 Firmware +7	3 years ago
CVE-2022-44877 KEV	[KEV] OS Command Injection in Cwp control-web-panel (CVE-2022-44877) OS command injection in Cwp control-web-panel (CVE-2022-44877). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cwp Control Web Panel Cwe 78	3 years ago
CVE-2022-47630	Out-of-Bounds Read in trustedfirmware (CVE-2022-47630) vulnerability in trustedfirmware (CVE-2022-47630). Confidential information can be exposed externally.	High	Cwe 125 Trustedfirmware Trusted Firmware A	3 years ago
CVE-2022-3693	Path Traversal in path-traversal (CVE-2022-3693) path traversal in path-traversal (CVE-2022-3693). Confidential information can be exposed externally.	High	Path Traversal Cwe 35 Cwe 22 Fileorbis	3 years ago
CVE-2022-41080 KEV	[KEV] Vulnerability in Microsoft exchange-server (CVE-2022-41080) vulnerability in Microsoft exchange-server (CVE-2022-41080). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Exchange Server	3 years ago
CVE-2023-21674 KEV	[KEV] Use-After-Free in Microsoft windows (CVE-2023-21674) vulnerability in Microsoft windows (CVE-2023-21674). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 416	3 years ago
CVE-2023-22460	Vulnerability in protocol (CVE-2023-22460) vulnerability in protocol (CVE-2023-22460). Risk of unauthorized operations or information disclosure. Exploitable via ``json``. Mitigation: upgrade to `0.19.0` or later.	High	Cwe 20 Protocol Go Ipld Prime	3 years ago
CVE-2018-5430 KEV	[KEV] Path Traversal in Tibco jasperreports (CVE-2018-5430) path traversal in Tibco jasperreports (CVE-2018-5430). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Tibco Jasperreports Cwe 22	3 years ago
CVE-2018-18809 KEV	[KEV] Path Traversal in Tibco jasperreports (CVE-2018-18809) path traversal in Tibco jasperreports (CVE-2018-18809). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Tibco Jasperreports Cwe 22	3 years ago
CVE-2022-3775	Out-of-Bounds Write in gnu (CVE-2022-3775) out-of-bounds write in gnu (CVE-2022-3775). Data can be tampered with by attackers.	High	Cwe 787 Gnu Grub2 Redhat +1	3 years ago
CVE-2022-2601	Vulnerability in gnu (CVE-2022-2601) vulnerability in gnu (CVE-2022-2601). Successful exploitation can lead to full system takeover.	High	Cwe 122 Cwe 787 Gnu Grub2 +9	3 years ago
CVE-2022-42856 KEV	[KEV] Vulnerability in Apple ios (CVE-2022-42856) vulnerability in Apple ios (CVE-2022-42856). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple iOS Cwe 843	3 years ago
CVE-2022-44694	Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Office +1	3 years ago
CVE-2022-44695	Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Office +2	3 years ago
CVE-2022-44696	Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Office +1	3 years ago
CVE-2022-44702	Windows Terminal Remote Code Execution Vulnerability Windows Terminal Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 94 Microsoft Terminal +2	3 years ago
CVE-2021-32415	Vulnerability in privilege-escalation (CVE-2021-32415) vulnerability in privilege-escalation (CVE-2021-32415). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Msi Wrapper	3 years ago
CVE-2022-42475 KEV	[KEV] Vulnerability in Fortinet fortios (CVE-2022-42475) vulnerability in Fortinet fortios (CVE-2022-42475). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Fortinet Fortios Cwe 197	3 years ago
CVE-2022-44698 KEV	[KEV] Vulnerability in Microsoft defender (CVE-2022-44698) vulnerability in Microsoft defender (CVE-2022-44698). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Defender Cwe 755	3 years ago
CVE-2022-27518 KEV	[KEV] Vulnerability in Citrix application-delivery-controller-adc-and-gateway (CVE-2022-27518) vulnerability in Citrix application-delivery-controller-adc-and-gateway (CVE-2022-27518). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Citrix Application Delivery Controller Adc And Gateway Cwe 664	3 years ago
CVE-2022-26500 KEV	[KEV] Path Traversal in Veeam backup-replication (CVE-2022-26500) path traversal in Veeam backup-replication (CVE-2022-26500). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Veeam Backup Replication Cwe 22	3 years ago
CVE-2022-26501 KEV	[KEV] Vulnerability in Veeam backup-replication (CVE-2022-26501) vulnerability in Veeam backup-replication (CVE-2022-26501). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Veeam Backup Replication Cwe 306	3 years ago
CVE-2022-37325	Out-of-Bounds Write in c (CVE-2022-37325) out-of-bounds write in c (CVE-2022-37325). Risk of unauthorized operations or information disclosure.	High	C Cwe 787 Sangoma Asterisk	3 years ago
CVE-2022-3907	Vulnerability in wordpress (CVE-2022-3907) vulnerability in wordpress (CVE-2022-3907). Confidential information can be exposed externally.	High	WordPress Cwe 203 Clerkio	3 years ago
CVE-2022-4262 KEV	[KEV] Vulnerability in Google chromium-v8 (CVE-2022-4262) vulnerability in Google chromium-v8 (CVE-2022-4262). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Google Chromium V8 Cwe 122 Cwe 843	3 years ago
CVE-2022-2808	Vulnerability in algan (CVE-2022-2808) vulnerability in algan (CVE-2022-2808). Successful exploitation can lead to full system takeover.	High	Cwe 639 Algan Prens Student Information System	3 years ago
CVE-2022-46152	OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The funct... OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The function `cleanup_shm_refs()` is called by both `entry_invoke_command()` and `entry_open_session()`. The...	High	Privilege Escalation Cwe 129 Trustedfirmware Op Tee	3 years ago
CVE-2022-31877	Vulnerability in msi (CVE-2022-31877) vulnerability in msi (CVE-2022-31877). Successful exploitation can lead to full system takeover.	High	Cwe 345 Msi Center	3 years ago
CVE-2021-35587 KEV	[KEV] Unsafe Deserialization in Oracle fusion-middleware (CVE-2021-35587) vulnerability in Oracle fusion-middleware (CVE-2021-35587). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Oracle Fusion Middleware Cwe 502 Cwe 790	3 years ago
CVE-2022-4135 KEV	[KEV] Out-of-Bounds Write in Google chromium-gpu (CVE-2022-4135) out-of-bounds write in Google chromium-gpu (CVE-2022-4135). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Google Chromium Gpu Cwe 787	3 years ago
CVE-2022-45884	Vulnerability in c (CVE-2022-45884) vulnerability in c (CVE-2022-45884). Successful exploitation can lead to full system takeover.	High	C Cwe 362 Cwe 416 Linux +12	3 years ago
CVE-2022-37772	Vulnerability in maarch (CVE-2022-37772) vulnerability in maarch (CVE-2022-37772). Confidential information can be exposed externally.	High	Cwe 307 Maarch Maarch Rm	3 years ago
CVE-2022-24037	Vulnerability in karmasis (CVE-2022-24037) vulnerability in karmasis (CVE-2022-24037). Confidential information can be exposed externally.	High	Cwe 20 Karmasis Infraskope Siem	3 years ago
CVE-2022-24036	Vulnerability in karmasis (CVE-2022-24036) vulnerability in karmasis (CVE-2022-24036). Data can be tampered with by attackers.	High	Cwe 284 Karmasis Infraskope Siem	3 years ago
CVE-2022-20946	Vulnerability in dos (CVE-2022-20946) vulnerability in dos (CVE-2022-20946). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 122 Cwe 787 Cisco +1	3 years ago
CVE-2022-20947	Buffer Overflow in dos (CVE-2022-20947) vulnerability in dos (CVE-2022-20947). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 119 Cisco Adaptive Security Appliance Software +1	3 years ago
CVE-2022-20927	Vulnerability in dos (CVE-2022-20927) vulnerability in dos (CVE-2022-20927). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 120 Cisco Adaptive Security Appliance Software +2	3 years ago
CVE-2022-20924	Vulnerability in dos (CVE-2022-20924) vulnerability in dos (CVE-2022-20924). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 703 Cwe 20 Cisco +2	3 years ago
CVE-2022-20854	Vulnerability in dos (CVE-2022-20854) vulnerability in dos (CVE-2022-20854). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cwe 755 Cisco +2	3 years ago
CVE-2022-42125	Path Traversal in path-traversal (CVE-2022-42125) path traversal in path-traversal (CVE-2022-42125). Data can be tampered with by attackers.	High	Path Traversal Cwe 22 Liferay Digital Experience Platform +1	3 years ago
CVE-2022-42123	Path Traversal in path-traversal (CVE-2022-42123) path traversal in path-traversal (CVE-2022-42123). Data can be tampered with by attackers.	High	Path Traversal Cwe 22 Liferay Digital Experience Platform +1	3 years ago
CVE-2022-42124	Vulnerability in liferay (CVE-2022-42124) vulnerability in liferay (CVE-2022-42124). Risk of unauthorized operations or information disclosure.	High	Cwe 1333 Liferay Digital Experience Platform Liferay Portal	3 years ago
CVE-2022-42121	SQL Injection in sqli (CVE-2022-42121) SQL injection in sqli (CVE-2022-42121). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Liferay Liferay Portal +2	3 years ago
CVE-2022-21198	Vulnerability in intel (CVE-2022-21198) vulnerability in intel (CVE-2022-21198). Data can be tampered with by attackers.	High	Cwe 367 Intel Celeron 1000M Firmware Celeron 1000M +892	3 years ago
CVE-2022-41123	Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Exchange Server Elevation of Privilege Vulnerability	High	Microsoft Exchange Server	3 years ago

Vulnerabilities

🍪 About cookies