Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2019-0841 KEV [KEV] Vulnerability in Microsoft windows (CVE-2019-0841)
vulnerability in Microsoft windows (CVE-2019-0841). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-0543 KEV [KEV] Authentication Bypass in Microsoft windows (CVE-2019-0543)
authentication bypass in Microsoft windows (CVE-2019-0543). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2017-0101 KEV [KEV] Buffer Overflow in Microsoft windows (CVE-2017-0101)
vulnerability in Microsoft windows (CVE-2017-0101). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2016-3309 KEV [KEV] Vulnerability in Microsoft windows (CVE-2016-3309)
vulnerability in Microsoft windows (CVE-2016-3309). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-25090 Vulnerability in privilege-escalation (CVE-2022-25090)
vulnerability in privilege-escalation (CVE-2022-25090). Successful exploitation can lead to full system takeover.
CVE-2022-24618 Vulnerability in c (CVE-2022-24618)
vulnerability in c (CVE-2022-24618). Successful exploitation can lead to full system takeover.
CVE-2022-24644 Vulnerability in zzinc (CVE-2022-24644)
vulnerability in zzinc (CVE-2022-24644). Successful exploitation can lead to full system takeover.
CVE-2022-24509 Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-24510 Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-24461 Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-24501 VP9 Video Extensions Remote Code Execution Vulnerability
VP9 Video Extensions Remote Code Execution Vulnerability
CVE-2022-24464 Vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2022-24464)
vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2022-24464). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.0.3` or later.
CVE-2022-24451 VP9 Video Extensions Remote Code Execution Vulnerability
VP9 Video Extensions Remote Code Execution Vulnerability
CVE-2022-24457 HEIF Image Extensions Remote Code Execution Vulnerability
HEIF Image Extensions Remote Code Execution Vulnerability
CVE-2022-23282 Paint 3D Remote Code Execution Vulnerability
Paint 3D Remote Code Execution Vulnerability
CVE-2021-21973 KEV [KEV] Vulnerability in Vmware vcenter-server-and-cloud-foundation (CVE-2021-21973)
vulnerability in Vmware vcenter-server-and-cloud-foundation (CVE-2021-21973). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-8218 KEV [KEV] Code Injection in Pulse secure pulse-secure (CVE-2020-8218)
code injection in Pulse secure pulse-secure (CVE-2020-8218). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-11581 KEV [KEV] Vulnerability in Atlassian jira-server-and-data-center (CVE-2019-11581)
vulnerability in Atlassian jira-server-and-data-center (CVE-2019-11581). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2017-6077 KEV [KEV] OS Command Injection in Netgear wireless-router-dgn2200 (CVE-2017-6077)
OS command injection in Netgear wireless-router-dgn2200 (CVE-2017-6077). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2016-6277 KEV [KEV] Cross-Site Request Forgery (CSRF) in Netgear multiple-routers (CVE-2016-6277)
vulnerability in Netgear multiple-routers (CVE-2016-6277). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2013-0631 KEV [KEV] Information Disclosure in Adobe coldfusion (CVE-2013-0631)
vulnerability in Adobe coldfusion (CVE-2013-0631). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2013-0629 KEV [KEV] Vulnerability in Adobe coldfusion (CVE-2013-0629)
vulnerability in Adobe coldfusion (CVE-2013-0629). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2013-0625 KEV [KEV] Vulnerability in Adobe coldfusion (CVE-2013-0625)
vulnerability in Adobe coldfusion (CVE-2013-0625). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-26485 KEV [KEV] Use-After-Free in Mozilla firefox (CVE-2022-26485)
vulnerability in Mozilla firefox (CVE-2022-26485). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2020-18326 Cross-Site Request Forgery (CSRF) in csrf (CVE-2020-18326)
vulnerability in csrf (CVE-2020-18326). Successful exploitation can lead to full system takeover.
CVE-2022-23327 Vulnerability in dos (CVE-2022-23327)
vulnerability in dos (CVE-2022-23327). Risk of unauthorized operations or information disclosure.
CVE-2022-23328 Vulnerability in dos (CVE-2022-23328)
vulnerability in dos (CVE-2022-23328). Risk of unauthorized operations or information disclosure.
CVE-2021-42950 Vulnerability in zepl (CVE-2021-42950)
vulnerability in zepl (CVE-2021-42950). Successful exploitation can lead to full system takeover.
CVE-2022-24251 Unrestricted File Upload in extensis (CVE-2022-24251)
vulnerability in extensis (CVE-2022-24251). Successful exploitation can lead to full system takeover.
CVE-2022-24255 Vulnerability in extensis (CVE-2022-24255)
vulnerability in extensis (CVE-2022-24255). Successful exploitation can lead to full system takeover.
CVE-2022-24254 Unrestricted File Upload in extensis (CVE-2022-24254)
vulnerability in extensis (CVE-2022-24254). Successful exploitation can lead to full system takeover.
CVE-2010-0188 KEV [KEV] Code Injection in Adobe reader-and-acrobat (CVE-2010-0188)
code injection in Adobe reader-and-acrobat (CVE-2010-0188). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2015-1701 KEV [KEV] Vulnerability in Microsoft win32k (CVE-2015-1701)
vulnerability in Microsoft win32k (CVE-2015-1701). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2019-16928 KEV [KEV] Out-of-Bounds Write in exim (CVE-2019-16928)
out-of-bounds write in exim (CVE-2019-16928). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2022-20708 KEV [KEV] Vulnerability in Cisco small-business-rv160 (CVE-2022-20708)
vulnerability in Cisco small-business-rv160 (CVE-2022-20708). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-20703 KEV [KEV] Vulnerability in Cisco small-business-rv160 (CVE-2022-20703)
vulnerability in Cisco small-business-rv160 (CVE-2022-20703). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-20701 KEV [KEV] Vulnerability in Cisco small-business-rv160 (CVE-2022-20701)
vulnerability in Cisco small-business-rv160 (CVE-2022-20701). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-20700 KEV [KEV] Vulnerability in Cisco small-business-rv160 (CVE-2022-20700)
vulnerability in Cisco small-business-rv160 (CVE-2022-20700). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-20699 KEV [KEV] Vulnerability in Cisco small-business-rv160 (CVE-2022-20699)
vulnerability in Cisco small-business-rv160 (CVE-2022-20699). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-11899 KEV [KEV] Out-of-Bounds Read in Treck tcp/ip stack treck-tcpip-stack (CVE-2020-11899)
vulnerability in Treck tcp/ip stack treck-tcpip-stack (CVE-2020-11899). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-1652 KEV [KEV] Vulnerability in Cisco small-business-rv320-and-rv325-dual-gigabit-wan-vpn-routers (CVE-2019-1652)
vulnerability in Cisco small-business-rv320-and-rv325-dual-gigabit-wan-vpn-routers (CVE-2019-1652). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-1297 KEV [KEV] Vulnerability in Microsoft excel (CVE-2019-1297)
vulnerability in Microsoft excel (CVE-2019-1297). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2018-8581 KEV [KEV] Vulnerability in Microsoft exchange-server (CVE-2018-8581)
vulnerability in Microsoft exchange-server (CVE-2018-8581). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2018-8298 KEV [KEV] Vulnerability in chakracore (CVE-2018-8298)
vulnerability in chakracore (CVE-2018-8298). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2018-0180 KEV [KEV] Vulnerability in Cisco ios-software (CVE-2018-0180)
vulnerability in Cisco ios-software (CVE-2018-0180). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2018-0179 KEV [KEV] Vulnerability in Cisco ios-software (CVE-2018-0179)
vulnerability in Cisco ios-software (CVE-2018-0179). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2018-0175 KEV [KEV] Buffer Overflow in Cisco ios (CVE-2018-0175)
vulnerability in Cisco ios (CVE-2018-0175). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2018-0174 KEV [KEV] Vulnerability in Cisco ios-xe-software (CVE-2018-0174)
vulnerability in Cisco ios-xe-software (CVE-2018-0174). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2018-0173 KEV [KEV] Vulnerability in Cisco ios-and-ios-xe-software (CVE-2018-0173)
vulnerability in Cisco ios-and-ios-xe-software (CVE-2018-0173). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2018-0172 KEV [KEV] Vulnerability in Cisco ios-and-ios-xe-software (CVE-2018-0172)
vulnerability in Cisco ios-and-ios-xe-software (CVE-2018-0172). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →