Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2024-1107	Vulnerability in talyabilisim (CVE-2024-1107) vulnerability in talyabilisim (CVE-2024-1107). Successful exploitation can lead to full system takeover.	Critical	Cwe 639 Talyabilisim Travel Apps	2 years ago
CVE-2024-5535	Out-of-Bounds Read in CVE-2024-5535 (CVE-2024-5535) vulnerability in CVE-2024-5535 (CVE-2024-5535). Confidential information can be exposed externally.	Critical	Cwe 125	2 years ago
CVE-2024-0949	Vulnerability in CVE-2024-0949 (CVE-2024-0949) vulnerability in CVE-2024-0949 (CVE-2024-0949). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 306 Cwe 552 Cwe 798	2 years ago
CVE-2024-0947	Vulnerability in CVE-2024-0947 (CVE-2024-0947) vulnerability in CVE-2024-0947 (CVE-2024-0947). Successful exploitation can lead to full system takeover.	Critical	Cwe 565	2 years ago
CVE-2024-4228	SQL Injection in sqli (CVE-2024-4228) SQL injection in sqli (CVE-2024-4228). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	2 years ago
CVE-2024-5683	Code Injection in CVE-2024-5683 (CVE-2024-5683) code injection in CVE-2024-5683 (CVE-2024-5683). Successful exploitation can lead to full system takeover.	Critical	Cwe 94	2 years ago
CVE-2024-38612	Use-After-Free in linux (CVE-2024-38612) vulnerability in linux (CVE-2024-38612). Successful exploitation can lead to full system takeover.	Critical	Cwe 416 Cwe 476 Linux Linux Kernel	2 years ago
CVE-2023-37058	Privilege Escalation in unionman (CVE-2023-37058) vulnerability in unionman (CVE-2023-37058). Successful exploitation can lead to full system takeover.	Critical	Cwe 269 Unionman Jlink Ax1800 Firmware Jlink Ax1800	2 years ago
CVE-2023-37057	Vulnerability in CVE-2023-37057 (CVE-2023-37057) vulnerability in CVE-2023-37057 (CVE-2023-37057). Successful exploitation can lead to full system takeover.	Critical	Cwe 288	2 years ago
CVE-2024-36543	Vulnerability in CVE-2024-36543 (CVE-2024-36543) vulnerability in CVE-2024-36543 (CVE-2024-36543). Successful exploitation can lead to full system takeover.	Critical	Cwe 400	2 years ago
CVE-2024-3166	Cross-Site Scripting (XSS) in mintplexlabs (CVE-2024-3166) cross-site scripting in mintplexlabs (CVE-2024-3166). Successful exploitation can lead to full system takeover.	Critical	JavaScript Remote Code Execution Cross-Site Scripting Cwe 79 +3	2 years ago
CVE-2024-1100	SQL Injection in sqli (CVE-2024-1100) SQL injection in sqli (CVE-2024-1100). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	2 years ago
CVE-2024-35563	SQL Injection in sqli (CVE-2024-35563) SQL injection in sqli (CVE-2024-35563). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	2 years ago
CVE-2024-35398	Vulnerability in totolink (CVE-2024-35398) vulnerability in totolink (CVE-2024-35398). Successful exploitation can lead to full system takeover.	Critical	Cwe 120 Totolink Cp900L Firmware Cp900L	2 years ago
CVE-2024-35396	Vulnerability in totolink (CVE-2024-35396) vulnerability in totolink (CVE-2024-35396). Successful exploitation can lead to full system takeover.	Critical	Cwe 798 Cwe 284 Totolink Cp900L Firmware +1	2 years ago
CVE-2024-35960	Vulnerability in linux (CVE-2024-35960) vulnerability in linux (CVE-2024-35960). Data can be tampered with by attackers.	Critical	Cwe 476 Linux Linux Kernel Debian +1	2 years ago
CVE-2024-35845	Vulnerability in linux (CVE-2024-35845) vulnerability in linux (CVE-2024-35845). Confidential information can be exposed externally.	Critical	Cwe 134 Linux Linux Kernel Debian +1	2 years ago
CVE-2024-33120	Unrestricted File Upload in roothub (CVE-2024-33120) vulnerability in roothub (CVE-2024-33120). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Roothub	2 years ago
CVE-2024-27053	Vulnerability in c (CVE-2024-27053) vulnerability in c (CVE-2024-27053). Confidential information can be exposed externally.	Critical	C Cwe 476 Linux Linux Kernel +2	2 years ago
CVE-2024-3375	Vulnerability in CVE-2024-3375 (CVE-2024-3375) vulnerability in CVE-2024-3375 (CVE-2024-3375). Confidential information can be exposed externally.	Critical	Cwe 732	2 years ago
CVE-2024-25343	Privilege Escalation in tenda (CVE-2024-25343) vulnerability in tenda (CVE-2024-25343). Confidential information can be exposed externally.	Critical	Cwe 269 Tenda N300 Firmware N300	2 years ago
CVE-2024-32161	jizhiCMS 2.5 suffers from a File upload vulnerability. jizhiCMS 2.5 suffers from a File upload vulnerability.	Critical	Cwe 434 Jizhicms	2 years ago
CVE-2024-3566	Command Injection in node (CVE-2024-3566) command injection in node (CVE-2024-3566). Successful exploitation can lead to full system takeover. Exploitable via ``cmd.exe``. Mitigation: upgrade to `18.19.0` or later.	Critical	Cwe 77 Haskell Process Library Nodejs +7	2 years ago
CVE-2024-23080	Vulnerability in CVE-2024-23080 (CVE-2024-23080) vulnerability in CVE-2024-23080 (CVE-2024-23080). Confidential information can be exposed externally.	Critical	Cwe 476	2 years ago
CVE-2024-22949	Out-of-Bounds Read in jfree (CVE-2024-22949) vulnerability in jfree (CVE-2024-22949). Confidential information can be exposed externally.	Critical	Cwe 125 Jfree Jfreechart	2 years ago
CVE-2024-23086	Out-of-Bounds Read in mikkotommila (CVE-2024-23086) vulnerability in mikkotommila (CVE-2024-23086). Successful exploitation can lead to full system takeover.	Critical	Cwe 125 Mikkotommila Apfloat	2 years ago
CVE-2024-23078	Vulnerability in CVE-2024-23078 (CVE-2024-23078) vulnerability in CVE-2024-23078 (CVE-2024-23078). Confidential information can be exposed externally.	Critical	Cwe 476	2 years ago
CVE-2024-30166	Vulnerability in dos (CVE-2024-30166) vulnerability in dos (CVE-2024-30166). Confidential information can be exposed externally.	Critical	Denial of Service Cwe 121 Trustedfirmware Mbed Tls	2 years ago
CVE-2024-29640	OS Command Injection in CVE-2024-29640 (CVE-2024-29640) OS command injection in CVE-2024-29640 (CVE-2024-29640). Successful exploitation can lead to full system takeover.	Critical	Cwe 78	2 years ago
CVE-2023-6191	SQL Injection in sqli (CVE-2023-6191) SQL injection in sqli (CVE-2023-6191). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Webpdks	2 years ago
CVE-2024-28713	Unrestricted File Upload in mtons (CVE-2024-28713) vulnerability in mtons (CVE-2024-28713). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Mtons Mblog	2 years ago
CVE-2023-6437	OS Command Injection in CVE-2023-6437 (CVE-2023-6437) OS command injection in CVE-2023-6437 (CVE-2023-6437). Successful exploitation can lead to full system takeover.	Critical	Cwe 78	2 years ago
CVE-2023-6153	Vulnerability in CVE-2023-6153 (CVE-2023-6153) vulnerability in CVE-2023-6153 (CVE-2023-6153). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 305	2 years ago
CVE-2023-6173	SQL Injection in sqli (CVE-2023-6173) SQL injection in sqli (CVE-2023-6173). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	2 years ago
CVE-2024-28386	Code Injection in home-made (CVE-2024-28386) code injection in home-made (CVE-2024-28386). Successful exploitation can lead to full system takeover.	Critical	Cwe 94 Home Made Fastmag Sync	2 years ago
CVE-2024-2865	SQL Injection in sqli (CVE-2024-2865) SQL injection in sqli (CVE-2024-2865). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	2 years ago
CVE-2024-29858	Vulnerability in misp-project (CVE-2024-29858) vulnerability in misp-project (CVE-2024-29858). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 616 Misp Project Misp	2 years ago
CVE-2024-29859	Unrestricted File Upload in misp-project (CVE-2024-29859) vulnerability in misp-project (CVE-2024-29859). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 434 Misp Project Misp	2 years ago
CVE-2024-1202	Vulnerability in CVE-2024-1202 (CVE-2024-1202) vulnerability in CVE-2024-1202 (CVE-2024-1202). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 305	2 years ago
CVE-2024-25294	SSRF (Server-Side Request Forgery) in ssrf (CVE-2024-25294) SSRF in ssrf (CVE-2024-25294). Confidential information can be exposed externally.	Critical	Java Server-Side Request Forgery Cwe 918 Getrebuild +1	2 years ago
CVE-2023-42789	Out-of-Bounds Write in fortinet (CVE-2023-42789) out-of-bounds write in fortinet (CVE-2023-42789). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Fortinet Fortiproxy Fortios	2 years ago
CVE-2024-27304	SQL Injection in sqli (CVE-2024-27304) SQL injection in sqli (CVE-2024-27304). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Cwe 190 Jackc +2	2 years ago
CVE-2023-7103	Vulnerability in zksoftware (CVE-2023-7103) vulnerability in zksoftware (CVE-2023-7103). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 305 Zksoftware Uface 5	2 years ago
CVE-2023-5155	SQL Injection in sqli (CVE-2023-5155) SQL injection in sqli (CVE-2023-5155). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Utarit Solipay Mobile	2 years ago
CVE-2023-7081	SQL Injection in sqli (CVE-2023-7081) SQL injection in sqli (CVE-2023-7081). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Postahsil Online Payment System	2 years ago
CVE-2023-6677	SQL Injection in sqli (CVE-2023-6677) SQL injection in sqli (CVE-2023-6677). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Oduyo Online Collection	2 years ago
CVE-2024-25675	Vulnerability in misp-project (CVE-2024-25675) vulnerability in misp-project (CVE-2024-25675). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 749 Misp Project Misp	2 years ago
CVE-2024-25674	Unrestricted File Upload in misp-project (CVE-2024-25674) vulnerability in misp-project (CVE-2024-25674). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Misp Project Misp	2 years ago
CVE-2024-24321	Command Injection in dlink (CVE-2024-24321) command injection in dlink (CVE-2024-24321). Successful exploitation can lead to full system takeover.	Critical	Cwe 77 Dlink Dir 816 Firmware Dir 816	2 years ago
CVE-2023-46359	OS Command Injection in hardy-barth (CVE-2023-46359) OS command injection in hardy-barth (CVE-2023-46359). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Hardy Barth Cph2 Echarge Firmware Cph2 Echarge	2 years ago

Vulnerabilities

🍪 About cookies