Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2022-40055	Vulnerability in gxgroup (CVE-2022-40055) vulnerability in gxgroup (CVE-2022-40055). Successful exploitation can lead to full system takeover.	Critical	Cwe 307 Gxgroup Gpon Ont Titanium 2122A Firmware Gpon Ont Titanium 2122A	3 years ago
CVE-2022-33106	Vulnerability in wijungle (CVE-2022-33106) vulnerability in wijungle (CVE-2022-33106). Successful exploitation can lead to full system takeover.	Critical	Cwe 307 Wijungle U250 Firmware U250	3 years ago
CVE-2022-35156	SQL Injection in sqli (CVE-2022-35156) SQL injection in sqli (CVE-2022-35156). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpgurukul +1	3 years ago
CVE-2022-40030	SQL Injection in sqli (CVE-2022-40030) SQL injection in sqli (CVE-2022-40030). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Simple Task Managing System Project +1	3 years ago
CVE-2022-0495	SQL Injection in sqli (CVE-2022-0495) SQL injection in sqli (CVE-2022-0495). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89 Parantezteknoloji Koha Library Automation	3 years ago
CVE-2022-2315	SQL Injection in sqli (CVE-2022-2315) SQL injection in sqli (CVE-2022-2315). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89 Databank Accreditation Trackingpresentation Module	3 years ago
CVE-2022-38619	SQL Injection in sqli (CVE-2022-38619) SQL injection in sqli (CVE-2022-38619). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Bpcbt Smartvista Front End	3 years ago
CVE-2022-2177	SQL Injection in sqli (CVE-2022-2177) SQL injection in sqli (CVE-2022-2177). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89 Kayrasoft	3 years ago
CVE-2022-36536	Vulnerability in syncovery (CVE-2022-36536) vulnerability in syncovery (CVE-2022-36536). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 330 Syncovery Linux +1	3 years ago
CVE-2022-37257	Vulnerability in stealjs (CVE-2022-37257) vulnerability in stealjs (CVE-2022-37257). Successful exploitation can lead to full system takeover.	Critical	JavaScript Cwe 1321 Stealjs Steal	3 years ago
CVE-2022-26258 KEV	[KEV] OS Command Injection in D-link dir-820l (CVE-2022-26258) OS command injection in D-link dir-820l (CVE-2022-26258). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	D Link Dir 820L Cwe 78 Remote Code Execution +2	3 years ago
CVE-2022-36640	Vulnerability in influxdata (CVE-2022-36640) vulnerability in influxdata (CVE-2022-36640). Successful exploitation can lead to full system takeover.	Critical	Cwe 276 Influxdata Influxdb	3 years ago
CVE-2022-36202	Vulnerability in doctors-appointment-system-project (CVE-2022-36202) vulnerability in doctors-appointment-system-project (CVE-2022-36202). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 639 Doctors Appointment System Project Doctors Appointment System	3 years ago
CVE-2022-37176	Vulnerability in tendacn (CVE-2022-37176) vulnerability in tendacn (CVE-2022-37176). Successful exploitation can lead to full system takeover.	Critical	Tendacn Ac6 Firmware Ac6	3 years ago
CVE-2022-32993	Vulnerability in totolink (CVE-2022-32993) vulnerability in totolink (CVE-2022-32993). Successful exploitation can lead to full system takeover.	Critical	Totolink A7000R Firmware A7000R	3 years ago
CVE-2022-38555	Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name. Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name.	Critical	Cwe 787 Linksys E1200 Firmware E1200	3 years ago
CVE-2022-37053	TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php. TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.	Critical	PHP Cwe 94 Trendnet Tew733Gr Firmware +1	3 years ago
CVE-2021-42627	Vulnerability in dlink (CVE-2021-42627) vulnerability in dlink (CVE-2021-42627). Successful exploitation can lead to full system takeover.	Critical	Dlink Dir 615 Firmware Dir 615 Dir 615 J1 Firmware +5	3 years ago
CVE-2021-42232	OS Command Injection in tp-link (CVE-2021-42232) OS command injection in tp-link (CVE-2021-42232). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Tp Link Archer A7 Firmware Archer A7	3 years ago
CVE-2022-35201	Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability. Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.	Critical	Remote Code Execution Tenda Ac18 Firmware Ac18	3 years ago
CVE-2022-36262	Code Injection in taogogo (CVE-2022-36262) code injection in taogogo (CVE-2022-36262). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 94 Taogogo Taocms	3 years ago
CVE-2022-35293	Vulnerability in sap (CVE-2022-35293) vulnerability in sap (CVE-2022-35293). Confidential information can be exposed externally.	Critical	Cwe 862 Sap Enable Now Manager	3 years ago
CVE-2021-33643	Out-of-Bounds Read in feep (CVE-2021-33643) vulnerability in feep (CVE-2021-33643). Confidential information can be exposed externally.	Critical	Cwe 125 Feep Libtar Openatom +3	3 years ago
CVE-2022-31321	Vulnerability in dos (CVE-2022-31321) vulnerability in dos (CVE-2022-31321). Confidential information can be exposed externally.	Critical	Denial of Service Cwe 20 Boltcms Bolt	3 years ago
CVE-2022-1277	Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability. Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability.	Critical	SQL Injection Cwe 89 Inavitas Solar Log	3 years ago
CVE-2021-41556	Out-of-Bounds Read in cpp (CVE-2021-41556) vulnerability in cpp (CVE-2021-41556). Successful exploitation can lead to full system takeover.	Critical	C++ Cwe 125 Squirrel Lang Squirrel +2	3 years ago
CVE-2022-35131	Cross-Site Scripting (XSS) in joplinapp (CVE-2022-35131) cross-site scripting in joplinapp (CVE-2022-35131). Successful exploitation can lead to full system takeover.	Critical	Cwe 79 Joplinapp Joplin	3 years ago
CVE-2022-35409	Out-of-Bounds Read in arm (CVE-2022-35409) vulnerability in arm (CVE-2022-35409). Confidential information can be exposed externally.	Critical	Cwe 125 Arm Mbed Tls Trustedfirmware +2	3 years ago
CVE-2022-32224	Unsafe Deserialization in activerecord (CVE-2022-32224) vulnerability in activerecord (CVE-2022-32224). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.2.8.1` or later.	Critical	Remote Code Execution SQL Injection Cwe 502 Activerecord Project +1	3 years ago
CVE-2022-33047	OTFCC v0.10.4 was discovered to contain a heap buffer overflow after free via otfccbuild.c. OTFCC v0.10.4 was discovered to contain a heap buffer overflow after free via otfccbuild.c.	Critical	C Cwe 787 Otfcc Project Otfcc	4 years ago
CVE-2022-32385	Out-of-Bounds Write in tendacn (CVE-2022-32385) out-of-bounds write in tendacn (CVE-2022-32385). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Tendacn Ac23 Ac2100 Firmware Ac23 Ac2100	4 years ago
CVE-2022-32386	Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan. Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan.	Critical	Cwe 787 Tendacn Ac23 Ac2100 Firmware Ac23 Ac2100	4 years ago
CVE-2022-34835	Out-of-Bounds Write in denx (CVE-2022-34835) out-of-bounds write in denx (CVE-2022-34835). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Denx U Boot	4 years ago
CVE-2021-45024	XXE (XML External Entity) in rocketsoftware (CVE-2021-45024) vulnerability in rocketsoftware (CVE-2021-45024). Successful exploitation can lead to full system takeover.	Critical	Cwe 611 Rocketsoftware Ags Zena	4 years ago
CVE-2022-24562	Vulnerability in iobit (CVE-2022-24562) vulnerability in iobit (CVE-2022-24562). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 306 Iobit Iotransfer	4 years ago
CVE-2022-31384	SQL Injection in sqli (CVE-2022-31384) SQL injection in sqli (CVE-2022-31384). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpgurukul +1	4 years ago
CVE-2022-31383	SQL Injection in sqli (CVE-2022-31383) SQL injection in sqli (CVE-2022-31383). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpgurukul +1	4 years ago
CVE-2022-31382	SQL Injection in sqli (CVE-2022-31382) SQL injection in sqli (CVE-2022-31382). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpgurukul +1	4 years ago
CVE-2021-42675	Unrestricted File Upload in kreado (CVE-2021-42675) vulnerability in kreado (CVE-2021-42675). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 434 Kreado +1	4 years ago
CVE-2022-32511	Unsafe Deserialization in jmespath (CVE-2022-32511) vulnerability in jmespath (CVE-2022-32511). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.6.1` or later.	Critical	Ruby Jmespath Fedoraproject Fedora	4 years ago
CVE-2021-42875	OS Command Injection in totolink (CVE-2021-42875) OS command injection in totolink (CVE-2021-42875). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Totolink Ex1200T Firmware Ex1200T	4 years ago
CVE-2022-29704	BrowsBox CMS v4.0 was discovered to contain a SQL injection vulnerability. BrowsBox CMS v4.0 was discovered to contain a SQL injection vulnerability.	Critical	SQL Injection Cwe 89 Browsbox Brows Box	4 years ago
CVE-2022-30490	SQL Injection in sqli (CVE-2022-30490) SQL injection in sqli (CVE-2022-30490). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Badminton Center Management System Project +1	4 years ago
CVE-2022-28945	Path Traversal in path-traversal (CVE-2022-28945) path traversal in path-traversal (CVE-2022-28945). Successful exploitation can lead to full system takeover.	Critical	Path Traversal Cwe 22 Webbank Webcube	4 years ago
CVE-2022-24239	Unrestricted File Upload in aceware (CVE-2022-24239) vulnerability in aceware (CVE-2022-24239). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Aceware Aceweb Online Portal	4 years ago
CVE-2022-24240	SQL Injection in sqli (CVE-2022-24240) SQL injection in sqli (CVE-2022-24240). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Aceware Aceweb Online Portal	4 years ago
CVE-2021-42872	OS Command Injection in totolink (CVE-2021-42872) OS command injection in totolink (CVE-2021-42872). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Totolink Ex1200T Firmware Ex1200T	4 years ago
CVE-2020-7489	Vulnerability in schneider-electric (CVE-2020-7489) vulnerability in schneider-electric (CVE-2020-7489). Successful exploitation can lead to full system takeover.	Critical	Cwe 74 Schneider Electric Ecostruxure Machine Expert Somachine Basic +6	4 years ago
CVE-2021-41653	Code Injection in tp-link (CVE-2021-41653) code injection in tp-link (CVE-2021-41653). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 94 Tp Link Tl Wr840N Firmware +1	4 years ago
CVE-2020-25368	OS Command Injection in dlink (CVE-2020-25368) OS command injection in dlink (CVE-2020-25368). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Dlink Dir 823G Firmware Dir 823G	4 years ago

Vulnerabilities

🍪 About cookies