Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2017-2211	Vulnerability in gsi (CVE-2017-2211) vulnerability in gsi (CVE-2017-2211). Successful exploitation can lead to full system takeover.	High	Cwe 426 Gsi Patchjgd	9 years ago
CVE-2017-2212	Vulnerability in gsi (CVE-2017-2212) vulnerability in gsi (CVE-2017-2212). Successful exploitation can lead to full system takeover.	High	Cwe 426 Gsi Tky2Jgd	9 years ago
CVE-2016-4902	Vulnerability in jpki (CVE-2016-4902) vulnerability in jpki (CVE-2016-4902). Successful exploitation can lead to full system takeover.	High	Cwe 426 Jpki The Public Certification Service For Individuals The Public Certification Service For Individuals For Windows 7 +1	9 years ago
CVE-2016-4907	Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors. Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors.	High	Cross-Site Request Forgery Cwe 352 Cybozu Garoon	9 years ago
CVE-2016-7803	SQL Injection in sqli (CVE-2016-7803) SQL injection in sqli (CVE-2016-7803). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Cybozu Garoon	9 years ago
CVE-2016-7807	Vulnerability in iodata (CVE-2016-7807) vulnerability in iodata (CVE-2016-7807). Confidential information can be exposed externally.	High	Cwe 284 Iodata Wfs Sr01 Firmware Wfs Sr01	9 years ago
CVE-2016-7809	Cross-Site Request Forgery (CSRF) in csrf (CVE-2016-7809) vulnerability in csrf (CVE-2016-7809). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Corega Cg Wlr300Nx Firmware +1	9 years ago
CVE-2016-7811	Vulnerability in corega (CVE-2016-7811) vulnerability in corega (CVE-2016-7811). Successful exploitation can lead to full system takeover.	High	Cwe 284 Corega Cg Wlr300Nx Firmware Cg Wlr300Nx	9 years ago
CVE-2016-7814	Information Disclosure in iodata (CVE-2016-7814) vulnerability in iodata (CVE-2016-7814). Confidential information can be exposed externally.	High	Cwe 200 Iodata Ts Wrlp Firmware Ts Wrlp +2	9 years ago
CVE-2016-7818	Vulnerability in japan-pension-service (CVE-2016-7818) vulnerability in japan-pension-service (CVE-2016-7818). Successful exploitation can lead to full system takeover.	High	Cwe 264 Japan Pension Service Device Data Encryption Program Specification Check Program +2	9 years ago
CVE-2016-7819	OS Command Injection in iodata (CVE-2016-7819) OS command injection in iodata (CVE-2016-7819). Successful exploitation can lead to full system takeover.	High	Cwe 78 Iodata Ts Wrlp Firmware Ts Wrlp +2	9 years ago
CVE-2016-7820	Buffer Overflow in dos (CVE-2016-7820) vulnerability in dos (CVE-2016-7820). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Iodata Ts Wrlp Firmware +3	9 years ago
CVE-2016-7822	Cross-Site Request Forgery (CSRF) in csrf (CVE-2016-7822) vulnerability in csrf (CVE-2016-7822). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Buffalotech Wnc01Wh Firmware +1	9 years ago
CVE-2015-1379	Vulnerability in dos (CVE-2015-1379) vulnerability in dos (CVE-2015-1379). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Dest Unreach Socat	9 years ago
CVE-2015-1786	Cross-Site Request Forgery (CSRF) in csrf (CVE-2015-1786) vulnerability in csrf (CVE-2015-1786). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Zend Zend Framework	9 years ago
CVE-2015-3634	Information Disclosure in wordpress (CVE-2015-3634) vulnerability in wordpress (CVE-2015-3634). Confidential information can be exposed externally.	High	WordPress Cwe 200 Slideshow Project Slideshow	9 years ago
CVE-2015-3913	Vulnerability in dos (CVE-2015-3913) vulnerability in dos (CVE-2015-3913). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Huawei S2300 Firmware +43	9 years ago
CVE-2016-6098	Vulnerability in ibm (CVE-2016-6098) vulnerability in ibm (CVE-2016-6098). Confidential information can be exposed externally.	High	Cwe 284 Ibm Security Key Lifecycle Manager Tivoli Key Lifecycle Manager	9 years ago
CVE-2016-9698	XXE (XML External Entity) in dos (CVE-2016-9698) vulnerability in dos (CVE-2016-9698). Confidential information can be exposed externally.	High	Denial of Service Cwe 611 Ibm Rational Rhapsody Design Manager	9 years ago
CVE-2016-9991	Cross-Site Request Forgery (CSRF) in ibm (CVE-2016-9991) vulnerability in ibm (CVE-2016-9991). Successful exploitation can lead to full system takeover.	High	Cwe 352 Ibm Sterling Selling And Fulfillment Foundation	9 years ago
CVE-2017-1319	Vulnerability in ibm (CVE-2017-1319) vulnerability in ibm (CVE-2017-1319). Confidential information can be exposed externally.	High	Cwe 326 Ibm Tivoli Federated Identity Manager	9 years ago
CVE-2014-7919	Vulnerability in cpp (CVE-2014-7919) vulnerability in cpp (CVE-2014-7919). Risk of unauthorized operations or information disclosure.	High	C++ Denial of Service Cwe 476 Google +1	9 years ago
CVE-2016-6594	Vulnerability in bluecoat (CVE-2016-6594) vulnerability in bluecoat (CVE-2016-6594). Data can be tampered with by attackers.	High	Cwe 254 Bluecoat Advanced Secure Gateway Cacheflow +1	9 years ago
CVE-2016-3099	Vulnerability in redhat (CVE-2016-3099) vulnerability in redhat (CVE-2016-3099). Data can be tampered with by attackers.	High	Cwe 327 Redhat Enterprise Linux Desktop Enterprise Linux Hpc Node +2	9 years ago
CVE-2016-4992	Information Disclosure in redhat (CVE-2016-4992) vulnerability in redhat (CVE-2016-4992). Confidential information can be exposed externally.	High	Cwe 200 Redhat Enterprise Linux Desktop Enterprise Linux Hpc Node +2	9 years ago
CVE-2016-5416	Information Disclosure in redhat (CVE-2016-5416) vulnerability in redhat (CVE-2016-5416). Confidential information can be exposed externally.	High	Cwe 200 Redhat Enterprise Linux Desktop Enterprise Linux Hpc Node +2	9 years ago
CVE-2014-3498	Vulnerability in ansible (CVE-2014-3498) vulnerability in ansible (CVE-2014-3498). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8ed6350e65c82292a631f08845dfaacffe7f07f5, 1.6.6` or later.	High	Cwe 20 Redhat Ansible	9 years ago
CVE-2016-3091	Cloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service. Cloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service.	High	Denial of Service Cwe 19 Cloud Foundry Diego	9 years ago
CVE-2016-3108	Vulnerability in pulpproject (CVE-2016-3108) vulnerability in pulpproject (CVE-2016-3108). Confidential information can be exposed externally.	High	Cwe 59 Pulpproject Pulp	9 years ago
CVE-2016-3112	Vulnerability in pulpproject (CVE-2016-3112) vulnerability in pulpproject (CVE-2016-3112). Confidential information can be exposed externally.	High	Cwe 284 Pulpproject Pulp	9 years ago
CVE-2016-4457	CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate. CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate.	High	Cwe 310 Redhat Cloudforms Management Engine	9 years ago
CVE-2016-4471	ManageIQ in CloudForms before 4.1 allows remote authenticated users to execute arbitrary code. ManageIQ in CloudForms before 4.1 allows remote authenticated users to execute arbitrary code.	High	Cwe 264 Redhat Cloudforms	9 years ago
CVE-2015-2251	Information Disclosure in huawei (CVE-2015-2251) vulnerability in huawei (CVE-2015-2251). Confidential information can be exposed externally.	High	JavaScript Cwe 200 Huawei Oceanstor Uds Firmware +1	9 years ago
CVE-2015-2252	Code Injection in huawei (CVE-2015-2252) code injection in huawei (CVE-2015-2252). Successful exploitation can lead to full system takeover.	High	Cwe 94 Huawei Oceanstor Uds Firmware Oceanstor Uds	9 years ago
CVE-2015-2800	Authentication Bypass in dos (CVE-2015-2800) authentication bypass in dos (CVE-2015-2800). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 287 Huawei S5700 Firmware +13	9 years ago
CVE-2017-8108	Vulnerability in cisofy (CVE-2017-8108) vulnerability in cisofy (CVE-2017-8108). Successful exploitation can lead to full system takeover.	High	Cwe 59 Cisofy Lynis	9 years ago
CVE-2017-9022	Vulnerability in dos (CVE-2017-9022) vulnerability in dos (CVE-2017-9022). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Strongswan Debian +3	9 years ago
CVE-2017-9023	Vulnerability in dos (CVE-2017-9023) vulnerability in dos (CVE-2017-9023). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 835 Strongswan	9 years ago
CVE-2017-9517	atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV. atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV.	High	Cross-Site Request Forgery Cwe 352 Atmail	9 years ago
CVE-2017-9518	Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-9518) vulnerability in csrf (CVE-2017-9518). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Atmail	9 years ago
CVE-2017-9519	atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account. atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account.	High	Cross-Site Request Forgery Cwe 352 Atmail	9 years ago
CVE-2017-4908	Buffer Overflow in dos (CVE-2017-4908) vulnerability in dos (CVE-2017-4908). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Vmware Horizon View +1	9 years ago
CVE-2017-4909	Buffer Overflow in dos (CVE-2017-4909) vulnerability in dos (CVE-2017-4909). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Vmware Horizon View +1	9 years ago
CVE-2017-4910	Out-of-Bounds Read in dos (CVE-2017-4910) vulnerability in dos (CVE-2017-4910). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 125 Vmware Horizon View +1	9 years ago
CVE-2017-4911	Out-of-Bounds Write in dos (CVE-2017-4911) out-of-bounds write in dos (CVE-2017-4911). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 787 Vmware Horizon View +1	9 years ago
CVE-2017-4912	Out-of-Bounds Read in dos (CVE-2017-4912) vulnerability in dos (CVE-2017-4912). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 125 Vmware Horizon View +1	9 years ago
CVE-2017-4913	Vulnerability in dos (CVE-2017-4913) vulnerability in dos (CVE-2017-4913). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 190 Vmware Horizon View +1	9 years ago
CVE-2017-6638	Vulnerability in cisco (CVE-2017-6638) vulnerability in cisco (CVE-2017-6638). Successful exploitation can lead to full system takeover.	High	Cwe 264 Cwe 20 Cisco Anyconnect Secure Mobility Client	9 years ago
CVE-2017-6648	Vulnerability in dos (CVE-2017-6648) vulnerability in dos (CVE-2017-6648). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 399 Cisco Telepresence Ce Software +1	9 years ago
CVE-2017-7180	Vulnerability in privilege-escalation (CVE-2017-7180) vulnerability in privilege-escalation (CVE-2017-7180). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 428 Eduiq Net Monitor For Employees	9 years ago

Vulnerabilities

🍪 About cookies