Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2021-45969	Vulnerability in insyde (CVE-2021-45969) vulnerability in insyde (CVE-2021-45969). Successful exploitation can lead to full system takeover.	High	Cwe 787 Insyde Insydeh2O	4 years ago
CVE-2021-45970	Vulnerability in insyde (CVE-2021-45970) vulnerability in insyde (CVE-2021-45970). Successful exploitation can lead to full system takeover.	High	Cwe 787 Insyde Insydeh2O	4 years ago
CVE-2021-45485	Vulnerability in c (CVE-2021-45485) vulnerability in c (CVE-2021-45485). Confidential information can be exposed externally.	High	C Cwe 327 Linux Linux Kernel +45	4 years ago
CVE-2021-45418	Path Traversal in path-traversal (CVE-2021-45418) path traversal in path-traversal (CVE-2021-45418). Successful exploitation can lead to full system takeover.	High	Path Traversal Cwe 22 Starcharge Titan 180 Premium Firmware +3	4 years ago
CVE-2021-45419	Vulnerability in starcharge (CVE-2021-45419) vulnerability in starcharge (CVE-2021-45419). Successful exploitation can lead to full system takeover.	High	Cwe 345 Starcharge Titan 180 Premium Firmware Titan 180 Premium +2	4 years ago
CVE-2021-44733	Vulnerability in c (CVE-2021-44733) vulnerability in c (CVE-2021-44733). Successful exploitation can lead to full system takeover.	High	C Cwe 362 Linux Linux Kernel +23	4 years ago
CVE-2021-45450	Vulnerability in trustedfirmware (CVE-2021-45450) vulnerability in trustedfirmware (CVE-2021-45450). Confidential information can be exposed externally.	High	Cwe 327 Trustedfirmware Mbed Tls Fedoraproject +1	4 years ago
CVE-2021-41451	Vulnerability in tp-link (CVE-2021-41451) vulnerability in tp-link (CVE-2021-41451). Risk of unauthorized operations or information disclosure.	High	Cwe 444 Tp Link Archer Ax10 Firmware Archer Ax10	4 years ago
CVE-2021-42912	OS Command Injection in fiberhome (CVE-2021-42912) OS command injection in fiberhome (CVE-2021-42912). Successful exploitation can lead to full system takeover.	High	Cwe 78 Fiberhome An5506 01 A Firmware An5506 01 A +10	4 years ago
CVE-2021-43875	Microsoft Office Graphics Remote Code Execution Vulnerability Microsoft Office Graphics Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Office +1	4 years ago
CVE-2021-43256	Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Excel +5	4 years ago
CVE-2021-4102 KEV	[KEV] Use-After-Free in Google chromium-v8 (CVE-2021-4102) vulnerability in Google chromium-v8 (CVE-2021-4102). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Google Chromium V8 Cwe 416	4 years ago
CVE-2021-43890 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2021-43890) vulnerability in Microsoft windows (CVE-2021-43890). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Windows C App Installer +11	4 years ago
CVE-2021-4104	Unsafe Deserialization in apache (CVE-2021-4104) vulnerability in apache (CVE-2021-4104). Successful exploitation can lead to full system takeover.	High	Apache Remote Code Execution Insecure Deserialization Cwe 502 +49	4 years ago
CVE-2019-7238 KEV	[KEV] Vulnerability in Sonatype nexus-repository-manager (CVE-2019-7238) vulnerability in Sonatype nexus-repository-manager (CVE-2019-7238). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Sonatype Nexus Repository Manager	4 years ago
CVE-2019-0193 KEV	[KEV] Code Injection in Apache solr (CVE-2019-0193) code injection in Apache solr (CVE-2019-0193). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Apache Solr Cwe 94	4 years ago
CVE-2019-10758 KEV	[KEV] Vulnerability in Mongodb mongo-express (CVE-2019-10758) vulnerability in Mongodb mongo-express (CVE-2019-10758). Successful exploitation can lead to full system takeover. Exploitable via ``toBSON``. Listed in CISA KEV — actively exploited.	High	MongoDB Mongo Express	4 years ago
CVE-2021-44515 KEV	[KEV] Vulnerability in Zoho desktop-central (CVE-2021-44515) vulnerability in Zoho desktop-central (CVE-2021-44515). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Zoho Desktop Central	4 years ago
CVE-2019-13272 KEV	[KEV] Privilege Escalation in Linux kernel (CVE-2019-13272) vulnerability in Linux kernel (CVE-2019-13272). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Linux Kernel Cwe 269	4 years ago
CVE-2021-35394 KEV	[KEV] OS Command Injection in Realtek jungle-software-development-kit-sdk (CVE-2021-35394) OS command injection in Realtek jungle-software-development-kit-sdk (CVE-2021-35394). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Realtek Jungle Software Development Kit Sdk Cwe 78 Cwe 138	4 years ago
CVE-2021-44168 KEV	[KEV] Vulnerability in Fortinet fortios (CVE-2021-44168) vulnerability in Fortinet fortios (CVE-2021-44168). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Fortinet Fortios Cwe 494	4 years ago
CVE-2017-17562 KEV	[KEV] Vulnerability in Embedthis goahead (CVE-2017-17562) vulnerability in Embedthis goahead (CVE-2017-17562). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Embedthis Goahead Cwe 20	4 years ago
CVE-2010-1871 KEV	[KEV] Vulnerability in Red hat red-hat (CVE-2010-1871) vulnerability in Red hat red-hat (CVE-2010-1871). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Red Hat Jboss Seam 2 Cwe 20	4 years ago
CVE-2020-17463 KEV	[KEV] SQL Injection in Fuel cms fuel-cms (CVE-2020-17463) SQL injection in Fuel cms fuel-cms (CVE-2020-17463). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Fuel Cms Cwe 89	4 years ago
CVE-2020-8816 KEV	[KEV] OS Command Injection in Pi-hole adminlte (CVE-2020-8816) OS command injection in Pi-hole adminlte (CVE-2020-8816). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Pi Hole Adminlte Cwe 78	4 years ago
CVE-2021-41449	Path Traversal in path-traversal (CVE-2021-41449) path traversal in path-traversal (CVE-2021-41449). Confidential information can be exposed externally.	High	Path Traversal Cwe 22 Netgear Rax35 Firmware +5	4 years ago
CVE-2021-41450	Vulnerability in dos (CVE-2021-41450) vulnerability in dos (CVE-2021-41450). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 444 Tp Link Archer Ax10 V1 Firmware +1	4 years ago
CVE-2021-36133	Vulnerability in trustedfirmware (CVE-2021-36133) vulnerability in trustedfirmware (CVE-2021-36133). Confidential information can be exposed externally.	High	Cwe 732 Trustedfirmware Op Tee Nxp +6	4 years ago
CVE-2021-44149	An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0. The OPTEE-OS CSU driver for NXP i.MX6UL SoC devices lacks security access configuration for wakeup-related registers, resu... An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0. The OPTEE-OS CSU driver for NXP i.MX6UL SoC devices lacks security access configuration for wakeup-related registers, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operat...	High	Trustedfirmware Op Tee Nxp Imx 6Ultralite +3	4 years ago
CVE-2021-4019	vim is vulnerable to Heap-based Buffer Overflow vim is vulnerable to Heap-based Buffer Overflow	High	Cwe 122 Cwe 787 Neovim Vim +5	4 years ago
CVE-2020-11261 KEV	[KEV] Vulnerability in :linux_kernel:Qualcomm (CVE-2020-11261) vulnerability in :linux_kernel:Qualcomm (CVE-2020-11261). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `SoCVersion:2021-01-05` or later.	High	Qualcomm Snapdragon Auto Snapdragon Compute Snapdragon Connectivity +6	4 years ago
CVE-2018-14847 KEV	[KEV] Path Traversal in Mikrotik routeros (CVE-2018-14847) path traversal in Mikrotik routeros (CVE-2018-14847). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Mikrotik Routeros Cwe 22	4 years ago
CVE-2021-37415 KEV	[KEV] Vulnerability in Zoho manageengine-servicedesk-plus-sdp (CVE-2021-37415) vulnerability in Zoho manageengine-servicedesk-plus-sdp (CVE-2021-37415). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Zoho Manageengine Servicedesk Plus Sdp Cwe 306	4 years ago
CVE-2021-44077 KEV	[KEV] Vulnerability in Zoho manageengine-servicedesk-plus-sdp-supportcenter-plus (CVE-2021-44077) vulnerability in Zoho manageengine-servicedesk-plus-sdp-supportcenter-plus (CVE-2021-44077). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Zoho Manageengine Servicedesk Plus Sdp Supportcenter Plus Cwe 306	4 years ago
CVE-2021-42306	Vulnerability in microsoft (CVE-2021-42306) vulnerability in microsoft (CVE-2021-42306). Confidential information can be exposed externally.	High	Cwe 522 Microsoft Azure Active Directory Azure Active Site Recovery +2	4 years ago
CVE-2021-41436	Vulnerability in dos (CVE-2021-41436) vulnerability in dos (CVE-2021-41436). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 444 Asus Gt Ax11000 Firmware +35	4 years ago
CVE-2021-41164	Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML	High	JavaScript Cwe 79 Ckeditor Drupal +11	4 years ago
CVE-2021-22204 KEV	[KEV] Vulnerability in Perl exiftool (CVE-2021-22204) vulnerability in Perl exiftool (CVE-2021-22204). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Perl Exiftool Cwe 95	4 years ago
CVE-2021-40449 KEV	[KEV] Use-After-Free in Microsoft windows (CVE-2021-40449) vulnerability in Microsoft windows (CVE-2021-40449). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 416	4 years ago
CVE-2021-42321 KEV	[KEV] Vulnerability in Microsoft exchange (CVE-2021-42321) vulnerability in Microsoft exchange (CVE-2021-42321). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Exchange Cwe 184 Cwe 502 +2	4 years ago
CVE-2021-42292 KEV	[KEV] Vulnerability in Microsoft office (CVE-2021-42292) vulnerability in Microsoft office (CVE-2021-42292). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Office Cwe 357 365 Apps +5	4 years ago
CVE-2021-43208	3D Viewer Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-43209. 3D Viewer Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-43209.	High	Remote Code Execution Cwe 94 Microsoft 3D Viewer	4 years ago
CVE-2021-43209	3D Viewer Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-43208. 3D Viewer Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-43208.	High	Remote Code Execution Microsoft 3D Viewer	4 years ago
CVE-2021-42322	Visual Studio Code Elevation of Privilege Vulnerability Visual Studio Code Elevation of Privilege Vulnerability	High	Cwe 269 Microsoft Visual Studio Code	4 years ago
CVE-2021-42316	Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Dynamics 365	4 years ago
CVE-2021-42296	Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 94 Microsoft 365 Apps +1	4 years ago
CVE-2021-42298	Microsoft Defender Remote Code Execution Vulnerability Microsoft Defender Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 94 Microsoft Malware Protection Engine	4 years ago
CVE-2021-42291	Privilege Escalation in microsoft (CVE-2021-42291) vulnerability in microsoft (CVE-2021-42291). Successful exploitation can lead to full system takeover.	High	Cwe 269 Microsoft Windows Server Windows Server 2008 +4	4 years ago
CVE-2021-42283	Privilege Escalation in microsoft (CVE-2021-42283) vulnerability in microsoft (CVE-2021-42283). Successful exploitation can lead to full system takeover.	High	Cwe 269 Microsoft Windows 10 Windows 11 +8	4 years ago
CVE-2021-42285	Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability	High	Cwe 269 Microsoft Windows 10 Windows 11 +9	4 years ago

Vulnerabilities

🍪 About cookies