Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2020-12271 KEV [KEV] SQL Injection in Sophos sfos (CVE-2020-12271)
SQL injection in Sophos sfos (CVE-2020-12271). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-10181 KEV [KEV] Cross-Site Request Forgery (CSRF) in Sumavision enhanced-multimedia-router-emr (CVE-2020-10181)
vulnerability in Sumavision enhanced-multimedia-router-emr (CVE-2020-10181). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2017-6327 KEV [KEV] Vulnerability in symantec (CVE-2017-6327)
vulnerability in symantec (CVE-2017-6327). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-18988 KEV [KEV] Vulnerability in Teamviewer desktop (CVE-2019-18988)
vulnerability in Teamviewer desktop (CVE-2019-18988). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2017-9248 KEV [KEV] Vulnerability in Progress aspnet-ajax-and-sitefinity (CVE-2017-9248)
vulnerability in Progress aspnet-ajax-and-sitefinity (CVE-2017-9248). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-31755 KEV [KEV] Out-of-Bounds Write in Tenda ac11-router (CVE-2021-31755)
out-of-bounds write in Tenda ac11-router (CVE-2021-31755). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-10987 KEV [KEV] OS Command Injection in Tenda ac1900-router-ac15-model (CVE-2020-10987)
OS command injection in Tenda ac1900-router-ac15-model (CVE-2020-10987). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2018-14558 KEV [KEV] OS Command Injection in Tenda ac7 (CVE-2018-14558)
OS command injection in Tenda ac7 (CVE-2018-14558). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-9082 KEV [KEV] Vulnerability in thinkphp (CVE-2019-9082)
vulnerability in thinkphp (CVE-2019-9082). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-18187 KEV [KEV] Path Traversal in Trend micro trend-micro (CVE-2019-18187)
path traversal in Trend micro trend-micro (CVE-2019-18187). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-8467 KEV [KEV] Vulnerability in Trend micro trend-micro (CVE-2020-8467)
vulnerability in Trend micro trend-micro (CVE-2020-8467). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-8468 KEV [KEV] Vulnerability in Trend micro trend-micro (CVE-2020-8468)
vulnerability in Trend micro trend-micro (CVE-2020-8468). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-24557 KEV [KEV] Vulnerability in Trend micro trend-micro (CVE-2020-24557)
vulnerability in Trend micro trend-micro (CVE-2020-24557). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-8599 KEV [KEV] Vulnerability in Trend micro trend-micro (CVE-2020-8599)
vulnerability in Trend micro trend-micro (CVE-2020-8599). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-36742 KEV [KEV] Vulnerability in Trend micro trend-micro (CVE-2021-36742)
vulnerability in Trend micro trend-micro (CVE-2021-36742). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-36741 KEV [KEV] Path Traversal in Trend micro trend-micro (CVE-2021-36741)
path traversal in Trend micro trend-micro (CVE-2021-36741). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-20085 KEV [KEV] Path Traversal in Tvt nvms-1000 (CVE-2019-20085)
path traversal in Tvt nvms-1000 (CVE-2019-20085). Risk of unauthorized operations or information disclosure. Exploitable via `GET /..`. Listed in CISA KEV — actively exploited.
CVE-2020-5849 KEV [KEV] Authentication Bypass in unraid (CVE-2020-5849)
authentication bypass in unraid (CVE-2020-5849). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-5847 KEV [KEV] Vulnerability in unraid (CVE-2020-5847)
vulnerability in unraid (CVE-2020-5847). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-16759 KEV [KEV] Code Injection in vbulletin (CVE-2019-16759)
code injection in vbulletin (CVE-2019-16759). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-17496 KEV [KEV] Vulnerability in vbulletin (CVE-2020-17496)
vulnerability in vbulletin (CVE-2020-17496). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-5544 KEV [KEV] Out-of-Bounds Write in vmware (CVE-2019-5544)
out-of-bounds write in vmware (CVE-2019-5544). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-3950 KEV [KEV] Privilege Escalation in Vmware multiple-products (CVE-2020-3950)
vulnerability in Vmware multiple-products (CVE-2020-3950). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-22005 KEV [KEV] Vulnerability in Vmware vcenter-server (CVE-2021-22005)
vulnerability in Vmware vcenter-server (CVE-2021-22005). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-3952 KEV [KEV] Vulnerability in Vmware vcenter-server (CVE-2020-3952)
vulnerability in Vmware vcenter-server (CVE-2020-3952). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-4006 KEV [KEV] OS Command Injection in Vmware multiple-products (CVE-2020-4006)
OS command injection in Vmware multiple-products (CVE-2020-4006). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-25213 KEV [KEV] Unrestricted File Upload in Wordpress file-manager-plugin (CVE-2020-25213)
vulnerability in Wordpress file-manager-plugin (CVE-2020-25213). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-11738 KEV [KEV] Path Traversal in Wordpress snap-creek-duplicator-plugin (CVE-2020-11738)
path traversal in Wordpress snap-creek-duplicator-plugin (CVE-2020-11738). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-27561 KEV [KEV] OS Command Injection in Yealink device-management (CVE-2021-27561)
OS command injection in Yealink device-management (CVE-2021-27561). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-40539 KEV [KEV] Vulnerability in Zoho manageengine (CVE-2021-40539)
vulnerability in Zoho manageengine (CVE-2021-40539). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-10189 KEV [KEV] Unsafe Deserialization in Zoho manageengine (CVE-2020-10189)
vulnerability in Zoho manageengine (CVE-2020-10189). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-8394 KEV [KEV] Unrestricted File Upload in Zoho manageengine (CVE-2019-8394)
vulnerability in Zoho manageengine (CVE-2019-8394). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-29583 KEV [KEV] Vulnerability in Zyxel multiple-products (CVE-2020-29583)
vulnerability in Zyxel multiple-products (CVE-2020-29583). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-25877 Code Injection in youphptube (CVE-2021-25877)
code injection in youphptube (CVE-2021-25877). Successful exploitation can lead to full system takeover.
CVE-2021-34783 Buffer Overflow in dos (CVE-2021-34783)
vulnerability in dos (CVE-2021-34783). Risk of unauthorized operations or information disclosure.
CVE-2021-34792 Vulnerability in dos (CVE-2021-34792)
vulnerability in dos (CVE-2021-34792). Risk of unauthorized operations or information disclosure.
CVE-2021-34793 Vulnerability in dos (CVE-2021-34793)
vulnerability in dos (CVE-2021-34793). Risk of unauthorized operations or information disclosure.
CVE-2021-40116 Vulnerability in dos (CVE-2021-40116)
vulnerability in dos (CVE-2021-40116). Risk of unauthorized operations or information disclosure.
CVE-2021-40117 Buffer Overflow in dos (CVE-2021-40117)
vulnerability in dos (CVE-2021-40117). Risk of unauthorized operations or information disclosure.
CVE-2021-40118 Vulnerability in dos (CVE-2021-40118)
vulnerability in dos (CVE-2021-40118). Risk of unauthorized operations or information disclosure.
CVE-2021-34781 Buffer Overflow in dos (CVE-2021-34781)
vulnerability in dos (CVE-2021-34781). Risk of unauthorized operations or information disclosure.
CVE-2021-34762 Path Traversal in path-traversal (CVE-2021-34762)
path traversal in path-traversal (CVE-2021-34762). Confidential information can be exposed externally.
CVE-2021-42252 Vulnerability in c (CVE-2021-42252)
vulnerability in c (CVE-2021-42252). Successful exploitation can lead to full system takeover.
CVE-2021-41864 Vulnerability in c (CVE-2021-41864)
vulnerability in c (CVE-2021-41864). Successful exploitation can lead to full system takeover.
CVE-2021-33626 Vulnerability in insyde (CVE-2021-33626)
vulnerability in insyde (CVE-2021-33626). Successful exploitation can lead to full system takeover.
CVE-2021-41617 Privilege Escalation in privilege-escalation (CVE-2021-41617)
vulnerability in privilege-escalation (CVE-2021-41617). Successful exploitation can lead to full system takeover.
CVE-2020-21468 Vulnerability in dos (CVE-2020-21468)
vulnerability in dos (CVE-2020-21468). Risk of unauthorized operations or information disclosure.
CVE-2021-40690 Information Disclosure in apache (CVE-2021-40690)
vulnerability in apache (CVE-2021-40690). Confidential information can be exposed externally.
CVE-2021-40639 Vulnerability in jflyfox (CVE-2021-40639)
vulnerability in jflyfox (CVE-2021-40639). Confidential information can be exposed externally.
CVE-2021-38671 Privilege Escalation in microsoft (CVE-2021-38671)
vulnerability in microsoft (CVE-2021-38671). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →