Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2018-9988	Out-of-Bounds Read in arm (CVE-2018-9988) vulnerability in arm (CVE-2018-9988). Risk of unauthorized operations or information disclosure.	High	Cwe 125 Arm Mbed Tls Trustedfirmware +2	8 years ago
CVE-2018-9989	Out-of-Bounds Read in arm (CVE-2018-9989) vulnerability in arm (CVE-2018-9989). Risk of unauthorized operations or information disclosure.	High	Cwe 125 Arm Mbed Tls Trustedfirmware +2	8 years ago
CVE-2018-7195	Vulnerability in enhancesoft (CVE-2018-7195) vulnerability in enhancesoft (CVE-2018-7195). Successful exploitation can lead to full system takeover.	High	Enhancesoft Osticket	8 years ago
CVE-2017-12174	Vulnerability in apache (CVE-2017-12174) vulnerability in apache (CVE-2017-12174). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Apache Artemis Redhat +3	8 years ago
CVE-2018-6926	OS Command Injection in misp-project (CVE-2018-6926) OS command injection in misp-project (CVE-2018-6926). Successful exploitation can lead to full system takeover.	High	PHP Cwe 78 Misp Project Misp	8 years ago
CVE-2015-1862	The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve... The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve...	High	Cwe 362 Redhat Automatic Bug Reporting Tool Linux +2	8 years ago
CVE-2017-12626	Vulnerability in org.apache.poi:poi (CVE-2017-12626) vulnerability in org.apache.poi:poi (CVE-2017-12626). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.17` or later.	High	Apache Denial of Service Cwe 835 Poi	8 years ago
CVE-2017-17704	Vulnerability in swhouse (CVE-2017-17704) vulnerability in swhouse (CVE-2017-17704). Data can be tampered with by attackers.	High	Cwe 330 Swhouse Istar Ultra Firmware Istar Ultra	8 years ago
CVE-2017-14855	Vulnerability in dos (CVE-2017-14855) vulnerability in dos (CVE-2017-14855). Risk of unauthorized operations or information disclosure.	High	Denial of Service Redlion Hmi Panel Firmware Hmi Panel	8 years ago
CVE-2017-17997	Vulnerability in c (CVE-2017-17997) vulnerability in c (CVE-2017-17997). Risk of unauthorized operations or information disclosure.	High	C Cwe 476 Wireshark Debian +1	8 years ago
CVE-2017-17983	SQL Injection in sqli (CVE-2017-17983) SQL injection in sqli (CVE-2017-17983). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17987	Unrestricted File Upload in muslim-matrimonial-script-project (CVE-2017-17987) vulnerability in muslim-matrimonial-script-project (CVE-2017-17987). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434 Muslim Matrimonial Script Project Muslim Matrimonial Script	8 years ago
CVE-2017-17990	Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action. Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.	High	PHP Cross-Site Request Forgery Cwe 352 Iwcnetwork +1	8 years ago
CVE-2014-0120	Cross-Site Request Forgery (CSRF) in csrf (CVE-2014-0120) vulnerability in csrf (CVE-2014-0120). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Hawt Hawtio +2	8 years ago
CVE-2014-8119	Vulnerability in dos (CVE-2014-8119) vulnerability in dos (CVE-2014-8119). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Fedoraproject Fedora +4	8 years ago
CVE-2015-3302	Vulnerability in wordpress (CVE-2015-3302) vulnerability in wordpress (CVE-2015-3302). Confidential information can be exposed externally.	High	WordPress Cwe 284 Thecartpress Thecartpress Ecommerce Shopping Cart	8 years ago
CVE-2015-8008	Vulnerability in mediawiki (CVE-2015-8008) vulnerability in mediawiki (CVE-2015-8008). Confidential information can be exposed externally.	High	Cwe 284 Mediawiki Fedoraproject Fedora	8 years ago
CVE-2017-17901	Vulnerability in dos (CVE-2017-17901) vulnerability in dos (CVE-2017-17901). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Zyxel P 660Hw Firmware +1	8 years ago
CVE-2017-17973	Use-After-Free in c (CVE-2017-17973) vulnerability in c (CVE-2017-17973). Successful exploitation can lead to full system takeover.	High	C Cwe 416 Libtiff	8 years ago
CVE-2017-17916	SQL Injection in rails (CVE-2017-17916) SQL injection in rails (CVE-2017-17916). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +1	8 years ago
CVE-2017-17917	SQL Injection in rails (CVE-2017-17917) SQL injection in rails (CVE-2017-17917). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +1	8 years ago
CVE-2017-17919	SQL Injection in rails (CVE-2017-17919) SQL injection in rails (CVE-2017-17919). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +2	8 years ago
CVE-2017-17920	SQL Injection in rails (CVE-2017-17920) SQL injection in rails (CVE-2017-17920). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +2	8 years ago
CVE-2013-7400	Information Disclosure in dkd (CVE-2013-7400) vulnerability in dkd (CVE-2013-7400). Confidential information can be exposed externally.	High	Cwe 200 Dkd Direct Mail	8 years ago
CVE-2014-3651	Vulnerability in dos (CVE-2014-3651) vulnerability in dos (CVE-2014-3651). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Keycloak	8 years ago
CVE-2017-17950	Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter. Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.	High	PHP SQL Injection Cwe 89 Cells +1	8 years ago
CVE-2017-17952	Vulnerability in php-multivendor-ecommerce-project (CVE-2017-17952) vulnerability in php-multivendor-ecommerce-project (CVE-2017-17952). Data can be tampered with by attackers.	High	PHP Cwe 20 Php Multivendor Ecommerce Project Php Multivendor Ecommerce	8 years ago
CVE-2017-17960	PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php. PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.	High	PHP Cross-Site Request Forgery Cwe 352 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-15667	Vulnerability in dos (CVE-2017-15667) vulnerability in dos (CVE-2017-15667). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Flexense Sysgauge	8 years ago
CVE-2017-17936	Vanguard Marketplace Digital Products PHP has CSRF via /search. Vanguard Marketplace Digital Products PHP has CSRF via /search.	High	PHP Cross-Site Request Forgery Cwe 352 Vanguard Project +1	8 years ago
CVE-2017-17939	PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php. PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.	High	PHP Cross-Site Request Forgery Cwe 352 Single Theater Booking Script Project +1	8 years ago
CVE-2017-17941	SQL Injection in sqli (CVE-2017-17941) SQL injection in sqli (CVE-2017-17941). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Single Theater Booking Script Project +1	8 years ago
CVE-2017-17942	Out-of-Bounds Read in c (CVE-2017-17942) vulnerability in c (CVE-2017-17942). Successful exploitation can lead to full system takeover.	High	C Cwe 125 Libtiff	8 years ago
CVE-2015-3637	SQL Injection in sqli (CVE-2015-3637) SQL injection in sqli (CVE-2015-3637). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Phpmybackuppro	8 years ago
CVE-2017-11695	Buffer Overflow in c (CVE-2017-11695) vulnerability in c (CVE-2017-11695). Successful exploitation can lead to full system takeover.	High	C Cwe 119 Mozilla Network Security Services	8 years ago
CVE-2017-11696	Buffer Overflow in c (CVE-2017-11696) vulnerability in c (CVE-2017-11696). Successful exploitation can lead to full system takeover.	High	C Cwe 119 Mozilla Network Security Services	8 years ago
CVE-2017-11697	Buffer Overflow in c (CVE-2017-11697) vulnerability in c (CVE-2017-11697). Successful exploitation can lead to full system takeover.	High	C Denial of Service Cwe 119 Mozilla +1	8 years ago
CVE-2017-11698	Buffer Overflow in c (CVE-2017-11698) vulnerability in c (CVE-2017-11698). Successful exploitation can lead to full system takeover.	High	C Cwe 119 Mozilla Network Security Services	8 years ago
CVE-2016-6914	Vulnerability in ui (CVE-2016-6914) vulnerability in ui (CVE-2016-6914). Successful exploitation can lead to full system takeover.	High	Cwe 276 Ui Unifi Video Microsoft +1	8 years ago
CVE-2017-13056	Vulnerability in tracker-software (CVE-2017-13056) vulnerability in tracker-software (CVE-2017-13056). Successful exploitation can lead to full system takeover.	High	Cwe 20 Tracker Software Pdf Xchange Viewer	8 years ago
CVE-2017-7155	Buffer Overflow in dos (CVE-2017-7155) vulnerability in dos (CVE-2017-7155). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Apple Mac Os X	8 years ago
CVE-2017-7156	Buffer Overflow in dos (CVE-2017-7156) vulnerability in dos (CVE-2017-7156). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Apple Safari +7	8 years ago
CVE-2017-7157	Buffer Overflow in dos (CVE-2017-7157) vulnerability in dos (CVE-2017-7157). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Apple Safari +7	8 years ago
CVE-2017-7159	Buffer Overflow in dos (CVE-2017-7159) vulnerability in dos (CVE-2017-7159). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Apple Mac Os X	8 years ago
CVE-2017-7160	Buffer Overflow in dos (CVE-2017-7160) vulnerability in dos (CVE-2017-7160). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Apple Safari +9	8 years ago
CVE-2017-7162	Buffer Overflow in dos (CVE-2017-7162) vulnerability in dos (CVE-2017-7162). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Apple Iphone Os +3	8 years ago
CVE-2017-7163	Buffer Overflow in dos (CVE-2017-7163) vulnerability in dos (CVE-2017-7163). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Apple Mac Os X	8 years ago
CVE-2017-17903	FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel. FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.	High	Cross-Site Request Forgery Cwe 352 Fortunescripts Lynda Clone	8 years ago
CVE-2017-17905	PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php. PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.	High	PHP Cross-Site Request Forgery Cwe 352 Car Rental Script Project +1	8 years ago
CVE-2017-17908	PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general. PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general.	High	PHP Cross-Site Request Forgery Cwe 352 Responsive Realestate Script Project +1	8 years ago

Vulnerabilities

🍪 About cookies