Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2020-21833	Out-of-Bounds Write in c (CVE-2020-21833) out-of-bounds write in c (CVE-2020-21833). Successful exploitation can lead to full system takeover.	High	C Cwe 787 Gnu Libredwg	4 years ago
CVE-2020-21841	Out-of-Bounds Write in c (CVE-2020-21841) out-of-bounds write in c (CVE-2020-21841). Successful exploitation can lead to full system takeover.	High	C Cwe 787 Gnu Libredwg	4 years ago
CVE-2021-23134	Use-After-Free in netapp (CVE-2021-23134) vulnerability in netapp (CVE-2021-23134). Successful exploitation can lead to full system takeover.	High	Cwe 416 Netapp Cloud Backup H300S Firmware +17	4 years ago
CVE-2020-27518	Privilege Escalation in privilege-escalation (CVE-2020-27518) vulnerability in privilege-escalation (CVE-2020-27518). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 269 Windscribe	4 years ago
CVE-2021-31780	Vulnerability in misp-project (CVE-2021-31780) vulnerability in misp-project (CVE-2021-31780). Confidential information can be exposed externally.	High	PHP Cwe 212 Misp Project Misp	4 years ago
CVE-2020-21883	OS Command Injection in indionetworks (CVE-2020-21883) OS command injection in indionetworks (CVE-2020-21883). Successful exploitation can lead to full system takeover.	High	Cwe 78 Indionetworks Unibox U50 Firmware Unibox U50 +8	4 years ago
CVE-2021-28927	OS Command Injection in c (CVE-2021-28927) OS command injection in c (CVE-2021-28927). Successful exploitation can lead to full system takeover.	High	C Cwe 78 Libretro Retroarch +2	4 years ago
CVE-2021-28937	Vulnerability in acexy (CVE-2021-28937) vulnerability in acexy (CVE-2021-28937). Confidential information can be exposed externally.	High	Cwe 312 Acexy Wireless N Wifi Repeater Firmware Wireless N Wifi Repeater	4 years ago
CVE-2021-28936	Authorization Flaw in acexy (CVE-2021-28936) vulnerability in acexy (CVE-2021-28936). Data can be tampered with by attackers.	High	Cwe 863 Acexy Wireless N Wifi Repeater Firmware Wireless N Wifi Repeater	4 years ago
CVE-2021-27364	Out-of-Bounds Read in c (CVE-2021-27364) vulnerability in c (CVE-2021-27364). Confidential information can be exposed externally.	High	C Cwe 125 Netapp Cloud Backup +10	4 years ago
CVE-2021-27365	Out-of-Bounds Write in netapp (CVE-2021-27365) out-of-bounds write in netapp (CVE-2021-27365). Successful exploitation can lead to full system takeover.	High	Cwe 787 Netapp Cloud Backup Linux +7	4 years ago
CVE-2021-21974	Out-of-Bounds Write in vmware (CVE-2021-21974) out-of-bounds write in vmware (CVE-2021-21974). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 787 Vmware Cloud Foundation +1	4 years ago
CVE-2020-24175	Out-of-Bounds Write in yz1 (CVE-2020-24175) out-of-bounds write in yz1 (CVE-2020-24175). Successful exploitation can lead to full system takeover.	High	Cwe 787 Yz1	4 years ago
CVE-2020-25493	Vulnerability in oclean (CVE-2020-25493) vulnerability in oclean (CVE-2020-25493). Confidential information can be exposed externally.	High	Cwe 327 Cwe 798 Oclean	4 years ago
CVE-2021-21009	SSRF (Server-Side Request Forgery) in ssrf (CVE-2021-21009) SSRF in ssrf (CVE-2021-21009). Confidential information can be exposed externally.	High	Server-Side Request Forgery Cwe 918 Adobe Campaign +4	4 years ago
CVE-2020-23630	A blind SQL injection vulnerability exists in zzcms ver201910 based on time (cookie injection). A blind SQL injection vulnerability exists in zzcms ver201910 based on time (cookie injection).	High	SQL Injection Cwe 89 Zzcms	4 years ago
CVE-2018-8725	Vulnerability in k7computing (CVE-2018-8725) vulnerability in k7computing (CVE-2018-8725). Successful exploitation can lead to full system takeover.	High	Cwe 120 K7Computing Antivrius Enterprise Security +2	4 years ago
CVE-2018-8044	Privilege Escalation in k7computing (CVE-2018-8044) vulnerability in k7computing (CVE-2018-8044). Successful exploitation can lead to full system takeover.	High	Cwe 269 Cwe 863 K7Computing Antivrius +3	4 years ago
CVE-2018-8726	Vulnerability in k7computing (CVE-2018-8726) vulnerability in k7computing (CVE-2018-8726). Successful exploitation can lead to full system takeover.	High	Cwe 120 K7Computing Antivrius Enterprise Security +2	4 years ago
CVE-2018-9332	Privilege Escalation in k7computing (CVE-2018-9332) vulnerability in k7computing (CVE-2018-9332). Successful exploitation can lead to full system takeover.	High	Cwe 269 K7Computing Antivrius Enterprise Security +2	4 years ago
CVE-2018-8724	Privilege Escalation in k7computing (CVE-2018-8724) vulnerability in k7computing (CVE-2018-8724). Successful exploitation can lead to full system takeover.	High	Cwe 269 Cwe 863 K7Computing Antivrius +3	4 years ago
CVE-2018-9333	Vulnerability in k7computing (CVE-2018-9333) vulnerability in k7computing (CVE-2018-9333). Successful exploitation can lead to full system takeover.	High	Cwe 120 Cwe 269 K7Computing Antivrius +3	4 years ago
CVE-2020-27279	Vulnerability in redlion (CVE-2020-27279) vulnerability in redlion (CVE-2020-27279). Risk of unauthorized operations or information disclosure.	High	Cwe 476 Redlion Crimson	4 years ago
CVE-2020-29228	SQL Injection in sqli (CVE-2020-29228) SQL injection in sqli (CVE-2020-29228). Data can be tampered with by attackers.	High	SQL Injection Cwe 89 Egavilanmedia User Registration And Login System With Admin Panel	4 years ago
CVE-2020-29189	Authorization Flaw in terra-master (CVE-2020-29189) vulnerability in terra-master (CVE-2020-29189). Confidential information can be exposed externally.	High	Terra Master Tos	4 years ago
CVE-2020-35273	Cross-Site Request Forgery (CSRF) in csrf (CVE-2020-35273) vulnerability in csrf (CVE-2020-35273). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Egavilanmedia User Registration Login System With Admin Panel	4 years ago
CVE-2020-28860	SQL Injection in sqli (CVE-2020-28860) SQL injection in sqli (CVE-2020-28860). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Openasset Digital Asset Management	4 years ago
CVE-2020-28856	Vulnerability in openasset (CVE-2020-28856) vulnerability in openasset (CVE-2020-28856). Data can be tampered with by attackers.	High	Cwe 290 Openasset Digital Asset Management	4 years ago
CVE-2020-28858	Cross-Site Request Forgery (CSRF) in openasset (CVE-2020-28858) vulnerability in openasset (CVE-2020-28858). Successful exploitation can lead to full system takeover.	High	Cwe 352 Openasset Digital Asset Management	4 years ago
CVE-2020-23735	Vulnerability in privilege-escalation (CVE-2020-23735) vulnerability in privilege-escalation (CVE-2020-23735). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 862 Saibo Cyber Game Accelerator	4 years ago
CVE-2020-28209	Vulnerability in schneider-electric (CVE-2020-28209) vulnerability in schneider-electric (CVE-2020-28209). Successful exploitation can lead to full system takeover.	High	Cwe 428 Schneider Electric Enterprise Server Installer Microsoft +1	4 years ago
CVE-2020-23968	Vulnerability in ilex (CVE-2020-23968) vulnerability in ilex (CVE-2020-23968). Successful exploitation can lead to full system takeover.	High	Cwe 59 Ilex International Signgo	4 years ago
CVE-2020-17091	Microsoft Teams Remote Code Execution Vulnerability Microsoft Teams Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 94 Microsoft Teams	4 years ago
CVE-2020-28043	SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-28043) SSRF in ssrf (CVE-2020-28043). Confidential information can be exposed externally.	High	Server-Side Request Forgery Cwe 918 Misp Project Misp	4 years ago
CVE-2020-22552	Vulnerability in snap7-project (CVE-2020-22552) vulnerability in snap7-project (CVE-2020-22552). Risk of unauthorized operations or information disclosure.	High	Snap7 Project Snap7	4 years ago
CVE-2020-17003	Buffer Overflow in microsoft (CVE-2020-17003) vulnerability in microsoft (CVE-2020-17003). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 119 Microsoft 3D Viewer	4 years ago
CVE-2020-16918	Out-of-Bounds Write in microsoft (CVE-2020-16918) out-of-bounds write in microsoft (CVE-2020-16918). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 787 Microsoft 365 Apps +1	4 years ago
CVE-2020-26869	Information Disclosure in arcinfo (CVE-2020-26869) vulnerability in arcinfo (CVE-2020-26869). Confidential information can be exposed externally.	High	Cwe 200 Arcinfo Pcvue	4 years ago
CVE-2020-26868	Vulnerability in arcinfo (CVE-2020-26868) vulnerability in arcinfo (CVE-2020-26868). Risk of unauthorized operations or information disclosure.	High	Cwe 767 Cwe 668 Arcinfo Pcvue	4 years ago
CVE-2018-5354	Vulnerability in anixis (CVE-2018-5354) vulnerability in anixis (CVE-2018-5354). Successful exploitation can lead to full system takeover.	High	Cwe 290 Anixis Password Reset Client	4 years ago
CVE-2020-25766	Vulnerability in misp-project (CVE-2020-25766) vulnerability in misp-project (CVE-2020-25766). Data can be tampered with by attackers.	High	Misp Project Misp	4 years ago
CVE-2020-25515	Unrestricted File Upload in simple-library-management-system-project (CVE-2020-25515) vulnerability in simple-library-management-system-project (CVE-2020-25515). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434 Simple Library Management System Project Simple Library Management System	4 years ago
CVE-2020-25487	SQL Injection in sqli (CVE-2020-25487) SQL injection in sqli (CVE-2020-25487). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Phpgurukul +1	4 years ago
CVE-2020-25514	SQL Injection in simple-library-management-system-project (CVE-2020-25514) SQL injection in simple-library-management-system-project (CVE-2020-25514). Successful exploitation can lead to full system takeover.	High	PHP Cwe 89 Simple Library Management System Project Simple Library Management System	4 years ago
CVE-2020-23451	Cross-Site Request Forgery (CSRF) in csrf (CVE-2020-23451) vulnerability in csrf (CVE-2020-23451). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Privilege Escalation Cwe 352 Spiceworks	4 years ago
CVE-2020-3478	Vulnerability in cisco (CVE-2020-3478) vulnerability in cisco (CVE-2020-3478). Data can be tampered with by attackers.	High	Cwe 20 Cisco Enterprise Nfv Infrastructure Software	4 years ago
CVE-2020-15711	In MISP before 2.4.129, setting a favourite homepage was not CSRF protected. In MISP before 2.4.129, setting a favourite homepage was not CSRF protected.	High	Cross-Site Request Forgery Cwe 352 Misp Project Misp	4 years ago
CVE-2020-3973	SQL Injection in arista (CVE-2020-3973) SQL injection in arista (CVE-2020-3973). Successful exploitation can lead to full system takeover.	High	Cwe 89 Arista Velocloud Orchestrator Linux +1	4 years ago
CVE-2020-14969	Vulnerability in misp-project (CVE-2020-14969) vulnerability in misp-project (CVE-2020-14969). Confidential information can be exposed externally.	High	PHP Cwe 862 Misp Project Misp	4 years ago
CVE-2020-7488	Vulnerability in schneider-electric (CVE-2020-7488) vulnerability in schneider-electric (CVE-2020-7488). Confidential information can be exposed externally.	High	Cwe 319 Schneider Electric Ecostruxure Machine Expert Somachine +9	4 years ago

Vulnerabilities

🍪 About cookies