Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2015-4523	Vulnerability in dos (CVE-2015-4523) vulnerability in dos (CVE-2015-4523). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 264 Symantec Malware Analysis Appliance +1	8 years ago
CVE-2015-7877	SQL Injection in drupal (CVE-2015-7877) SQL injection in drupal (CVE-2015-7877). Successful exploitation can lead to full system takeover.	Critical	Drupal SQL Injection Cwe 89 User Dashboard Project +1	8 years ago
CVE-2017-7649	Authentication Bypass in eclipse (CVE-2017-7649) authentication bypass in eclipse (CVE-2017-7649). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Eclipse Kura	8 years ago
CVE-2017-14238	SQL Injection in sqli (CVE-2017-14238) SQL injection in sqli (CVE-2017-14238). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Dolibarr	8 years ago
CVE-2017-14242	SQL Injection in sqli (CVE-2017-14242) SQL injection in sqli (CVE-2017-14242). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Dolibarr	8 years ago
CVE-2017-14247	SQL Injection in sqli (CVE-2017-14247) SQL injection in sqli (CVE-2017-14247). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Eyesofnetwork	8 years ago
CVE-2017-14252	SQL Injection in sqli (CVE-2017-14252) SQL injection in sqli (CVE-2017-14252). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Eyesofnetwork	8 years ago
CVE-2017-14265	Buffer Overflow in cpp (CVE-2017-14265) vulnerability in cpp (CVE-2017-14265). Successful exploitation can lead to full system takeover.	Critical	C++ Denial of Service Cwe 119 Libraw	8 years ago
CVE-2017-14269	Information Disclosure in ee (CVE-2017-14269) vulnerability in ee (CVE-2017-14269). Successful exploitation can lead to full system takeover.	Critical	Cwe 200 Ee 4Gee Wifi Mbb Firmware 4Gee Wifi Mbb	8 years ago
CVE-2017-14230	Vulnerability in c (CVE-2017-14230) vulnerability in c (CVE-2017-14230). Confidential information can be exposed externally.	Critical	C Denial of Service Cwe 20 Cyrus +1	8 years ago
CVE-2017-12731	SQL Injection in sqli (CVE-2017-12731) SQL injection in sqli (CVE-2017-12731). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Opwglobal Sitesentinel Isite Atg Firmware +5	8 years ago
CVE-2017-12733	Vulnerability in opwglobal (CVE-2017-12733) vulnerability in opwglobal (CVE-2017-12733). Successful exploitation can lead to full system takeover.	Critical	Cwe 306 Opwglobal Sitesentinel Isite Atg Firmware Sitesentinel Isite Atg +4	8 years ago
CVE-2017-11161	SQL Injection in sqli (CVE-2017-11161) SQL injection in sqli (CVE-2017-11161). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Synology +1	8 years ago
CVE-2015-3313	SQL injection vulnerability in WordPress Community Events plugin before 1.4. SQL injection vulnerability in WordPress Community Events plugin before 1.4.	Critical	WordPress SQL Injection Cwe 89 Community Events Project +1	8 years ago
CVE-2015-3991	Vulnerability in dos (CVE-2015-3991) vulnerability in dos (CVE-2015-3991). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 19 Strongswan	8 years ago
CVE-2015-4627	SQL injection vulnerability in Pragyan CMS 3.0. SQL injection vulnerability in Pragyan CMS 3.0.	Critical	SQL Injection Cwe 89 Pragyan Cms Project Pragyan Cms	8 years ago
CVE-2015-4629	Vulnerability in huawei (CVE-2015-4629) vulnerability in huawei (CVE-2015-4629). Successful exploitation can lead to full system takeover.	Critical	Cwe 264 Huawei E5756S Firmware E5756S	8 years ago
CVE-2015-5052	SQL injection vulnerability in Sefrengo before 1.6.5 beta2. SQL injection vulnerability in Sefrengo before 1.6.5 beta2.	Critical	SQL Injection Cwe 89 Sefrengo	8 years ago
CVE-2017-14147	Authentication Bypass in fiberhome (CVE-2017-14147) authentication bypass in fiberhome (CVE-2017-14147). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Fiberhome Adsl An1020 25 Firmware Adsl An1020 25	8 years ago
CVE-2017-9834	SQL Injection in wordpress (CVE-2017-9834) SQL injection in wordpress (CVE-2017-9834). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress SQL Injection Cwe 89 +2	8 years ago
CVE-2015-3442	Authentication Bypass in soreco (CVE-2015-3442) authentication bypass in soreco (CVE-2015-3442). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Soreco Xpertline	8 years ago
CVE-2016-10405	Vulnerability in d-link (CVE-2016-10405) vulnerability in d-link (CVE-2016-10405). Successful exploitation can lead to full system takeover.	Critical	Cwe 384 D Link Dir 600L Firmware Dlink +1	8 years ago
CVE-2017-13771	Vulnerability in lexmark (CVE-2017-13771) vulnerability in lexmark (CVE-2017-13771). Successful exploitation can lead to full system takeover.	Critical	Cwe 522 Lexmark Scan To Network	8 years ago
CVE-2017-9458	XXE (XML External Entity) in ssrf (CVE-2017-9458) vulnerability in ssrf (CVE-2017-9458). Successful exploitation can lead to full system takeover.	Critical	Server-Side Request Forgery Denial of Service Cwe 611 Cwe 918 +2	8 years ago
CVE-2015-5959	Information Disclosure in froxlor (CVE-2015-5959) vulnerability in froxlor (CVE-2015-5959). Successful exploitation can lead to full system takeover.	Critical	Cwe 200 Froxlor	8 years ago
CVE-2015-7241	XML External Entity (XXE) vulnerability in SAP Netweaver before 7.01. XML External Entity (XXE) vulnerability in SAP Netweaver before 7.01.	Critical	Cwe 611 Sap Netweaver	8 years ago
CVE-2016-3086	Information Disclosure in apache (CVE-2016-3086) vulnerability in apache (CVE-2016-3086). Successful exploitation can lead to full system takeover.	Critical	Apache Cwe 200 Hadoop	8 years ago
CVE-2017-14145	SQL Injection in sqli (CVE-2017-14145) SQL injection in sqli (CVE-2017-14145). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Helpdezk	8 years ago
CVE-2017-14135	OS Command Injection in dreambox (CVE-2017-14135) OS command injection in dreambox (CVE-2017-14135). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Dreambox Opendreambox	8 years ago
CVE-2017-14138	Vulnerability in c (CVE-2017-14138) vulnerability in c (CVE-2017-14138). Successful exploitation can lead to full system takeover.	Critical	C Cwe 772 Imagemagick	8 years ago
CVE-2017-14127	OS Command Injection in technicolor (CVE-2017-14127) OS command injection in technicolor (CVE-2017-14127). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Technicolor Td5336 Firmware Td5336	8 years ago
CVE-2017-14122	Out-of-Bounds Read in c (CVE-2017-14122) vulnerability in c (CVE-2017-14122). Confidential information can be exposed externally.	Critical	C Cwe 125 Rarlab Unrar +2	8 years ago
CVE-2017-14100	OS Command Injection in digium (CVE-2017-14100) OS command injection in digium (CVE-2017-14100). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Digium Asterisk Certified Asterisk	8 years ago
CVE-2017-12873	Vulnerability in simplesamlphp (CVE-2017-12873) vulnerability in simplesamlphp (CVE-2017-12873). Successful exploitation can lead to full system takeover.	Critical	Cwe 384 Simplesamlphp Debian Debian Linux	8 years ago
CVE-2015-7746	Authentication Bypass in netapp (CVE-2015-7746) authentication bypass in netapp (CVE-2015-7746). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Netapp Data Ontap	8 years ago
CVE-2017-12868	Vulnerability in simplesamlphp (CVE-2017-12868) vulnerability in simplesamlphp (CVE-2017-12868). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 384 Simplesamlphp	8 years ago
CVE-2017-3897	Code Injection in mcafee (CVE-2017-3897) code injection in mcafee (CVE-2017-3897). Successful exploitation can lead to full system takeover.	Critical	Cwe 94 Mcafee Livesafe Security Scan Plus	8 years ago
CVE-2015-7700	Vulnerability in c (CVE-2015-7700) vulnerability in c (CVE-2015-7700). Successful exploitation can lead to full system takeover.	Critical	C Cwe 415 Pngcrush Project Pngcrush	8 years ago
CVE-2017-0899	Vulnerability in rubygems (CVE-2017-0899) vulnerability in rubygems (CVE-2017-0899). Successful exploitation can lead to full system takeover.	Critical	Cwe 150 Cwe 94 RubyGems Debian +8	8 years ago
CVE-2017-14076	SQL Injection in sqli (CVE-2017-14076) SQL injection in sqli (CVE-2017-14076). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Nexusphp	8 years ago
CVE-2017-14069	SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php. SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php.	Critical	PHP SQL Injection Cwe 89 Nexusphp	8 years ago
CVE-2017-14064	Buffer Overflow in c (CVE-2017-14064) vulnerability in c (CVE-2017-14064). Successful exploitation can lead to full system takeover.	Critical	Ruby C Cwe 119 Ruby Lang +11	8 years ago
CVE-2017-14061	Vulnerability in c (CVE-2017-14061) vulnerability in c (CVE-2017-14061). Successful exploitation can lead to full system takeover.	Critical	C Denial of Service Cwe 190 Gnu +1	8 years ago
CVE-2017-14062	Vulnerability in c (CVE-2017-14062) vulnerability in c (CVE-2017-14062). Successful exploitation can lead to full system takeover.	Critical	C Denial of Service Cwe 190 Gnu +3	8 years ago
CVE-2017-13708	Buffer Overflow in vxsearch (CVE-2017-13708) vulnerability in vxsearch (CVE-2017-13708). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Vxsearch Vx Search	8 years ago
CVE-2017-14035	CrushFTP 8.x before 8.2.0 has a serialization vulnerability. CrushFTP 8.x before 8.2.0 has a serialization vulnerability.	Critical	Cwe 502 Crushftp	8 years ago
CVE-2017-12698	Authentication Bypass in advantech (CVE-2017-12698) authentication bypass in advantech (CVE-2017-12698). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Authentication Bypass Cwe 287 Advantech +1	8 years ago
CVE-2017-12706	Vulnerability in advantech (CVE-2017-12706) vulnerability in advantech (CVE-2017-12706). Successful exploitation can lead to full system takeover.	Critical	Cwe 121 Cwe 119 Advantech Webaccess	8 years ago
CVE-2017-12708	Buffer Overflow in advantech (CVE-2017-12708) vulnerability in advantech (CVE-2017-12708). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Advantech Webaccess	8 years ago
CVE-2013-7426	Insecure Temporary file vulnerability in /tmp/kamailio_fifo in kamailio 4.0.1. Insecure Temporary file vulnerability in /tmp/kamailio_fifo in kamailio 4.0.1.	Critical	Cwe 434 Kamailio	8 years ago

Vulnerabilities

🍪 About cookies