Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2016-2566	SQL Injection in sqli (CVE-2016-2566) SQL injection in sqli (CVE-2016-2566). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Samsung Galaxy S6 Firmware +1	9 years ago
CVE-2014-7920	Vulnerability in google (CVE-2014-7920) vulnerability in google (CVE-2014-7920). Successful exploitation can lead to full system takeover.	Critical	Cwe 264 Google Android	9 years ago
CVE-2014-7921	Vulnerability in google (CVE-2014-7921) vulnerability in google (CVE-2014-7921). Successful exploitation can lead to full system takeover.	Critical	Cwe 264 Google Android	9 years ago
CVE-2016-10324	Buffer Overflow in c (CVE-2016-10324) vulnerability in c (CVE-2016-10324). Successful exploitation can lead to full system takeover.	Critical	C Cwe 119 Gnu Osip	9 years ago
CVE-2015-8271	Vulnerability in c (CVE-2015-8271) vulnerability in c (CVE-2015-8271). Successful exploitation can lead to full system takeover.	Critical	C Cwe 123 Rtmpdump Project Rtmpdump	9 years ago
CVE-2015-8282	SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account. SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account.	Critical	Cwe 255 Seawell Networks Spectrum Sdc	9 years ago
CVE-2016-2555	SQL Injection in sqli (CVE-2016-2555) SQL injection in sqli (CVE-2016-2555). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Atutor	9 years ago
CVE-2016-4800	Vulnerability in eclipse (CVE-2016-4800) vulnerability in eclipse (CVE-2016-4800). Successful exploitation can lead to full system takeover.	Critical	Cwe 284 Eclipse Jetty Microsoft +1	9 years ago
CVE-2016-6143	Vulnerability in sap (CVE-2016-6143) vulnerability in sap (CVE-2016-6143). Successful exploitation can lead to full system takeover.	Critical	Cwe 284 Sap Hana	9 years ago
CVE-2015-6674	Buffer Overflow in inspircd (CVE-2015-6674) vulnerability in inspircd (CVE-2015-6674). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Inspircd Debian Debian Linux	9 years ago
CVE-2017-7628	SQL Injection in sqli (CVE-2017-7628) SQL injection in sqli (CVE-2017-7628). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Smart Related Articles Project +1	9 years ago
CVE-2015-7564	SQL Injection in c (CVE-2015-7564) SQL injection in c (CVE-2015-7564). Successful exploitation can lead to full system takeover.	Critical	PHP C SQL Injection Cwe 89 +1	9 years ago
CVE-2016-4337	SQL Injection in csharp (CVE-2016-4337) SQL injection in csharp (CVE-2016-4337). Successful exploitation can lead to full system takeover.	Critical	PHP C# SQL Injection Cwe 89 +2	9 years ago
CVE-2017-7279	Vulnerability in unitrends (CVE-2017-7279) vulnerability in unitrends (CVE-2017-7279). Successful exploitation can lead to full system takeover.	Critical	Cwe 565 Unitrends Enterprise Backup	9 years ago
CVE-2017-7280	Vulnerability in unitrends (CVE-2017-7280) vulnerability in unitrends (CVE-2017-7280). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 20 Unitrends +1	9 years ago
CVE-2016-6808	Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42. Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42.	Critical	Apache Tomcat Cwe 119 Tomcat Jk Connector	9 years ago
CVE-2017-7722	Command Injection in solarwinds (CVE-2017-7722) command injection in solarwinds (CVE-2017-7722). Successful exploitation can lead to full system takeover.	Critical	Cwe 77 Solarwinds Log Event Manager	9 years ago
CVE-2017-7719	SQL Injection in wordpress (CVE-2017-7719) SQL injection in wordpress (CVE-2017-7719). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress SQL Injection Cwe 89 +2	9 years ago
CVE-2017-3059	Use-After-Free in adobe (CVE-2017-3059) vulnerability in adobe (CVE-2017-3059). Successful exploitation can lead to full system takeover.	Critical	Cwe 416 Adobe Flash Player Microsoft +9	9 years ago
CVE-2017-3060	Out-of-Bounds Read in adobe (CVE-2017-3060) vulnerability in adobe (CVE-2017-3060). Successful exploitation can lead to full system takeover.	Critical	Cwe 125 Adobe Flash Player Microsoft +9	9 years ago
CVE-2017-3061	Buffer Overflow in adobe (CVE-2017-3061) vulnerability in adobe (CVE-2017-3061). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Adobe Flash Player Microsoft +9	9 years ago
CVE-2017-3062	Use-After-Free in adobe (CVE-2017-3062) vulnerability in adobe (CVE-2017-3062). Successful exploitation can lead to full system takeover.	Critical	Cwe 416 Adobe Flash Player Microsoft +9	9 years ago
CVE-2017-3063	Use-After-Free in adobe (CVE-2017-3063) vulnerability in adobe (CVE-2017-3063). Successful exploitation can lead to full system takeover.	Critical	Cwe 416 Adobe Flash Player Microsoft +9	9 years ago
CVE-2017-3037	Buffer Overflow in adobe (CVE-2017-3037) vulnerability in adobe (CVE-2017-3037). Successful exploitation can lead to full system takeover.	Critical	JavaScript Cwe 119 Adobe Acrobat +7	9 years ago
CVE-2017-2989	Vulnerability in adobe (CVE-2017-2989) vulnerability in adobe (CVE-2017-2989). Confidential information can be exposed externally.	Critical	Cwe 20 Adobe Campaign	9 years ago
CVE-2016-7547	Vulnerability in trendmicro (CVE-2016-7547) vulnerability in trendmicro (CVE-2016-7547). Successful exploitation can lead to full system takeover.	Critical	Cwe 361 Trendmicro Threat Discovery Appliance	9 years ago
CVE-2016-7552	Path Traversal in path-traversal (CVE-2016-7552) path traversal in path-traversal (CVE-2016-7552). Successful exploitation can lead to full system takeover.	Critical	Path Traversal Denial of Service Cwe 22 Trendmicro +1	9 years ago
CVE-2017-7588	Authentication Bypass in brother (CVE-2017-7588) authentication bypass in brother (CVE-2017-7588). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Brother Mfc Firmware Mfc 8710Dw +31	9 years ago
CVE-2017-7695	Unrestricted File Upload in bigtreecms (CVE-2017-7695) vulnerability in bigtreecms (CVE-2017-7695). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 434 Bigtreecms Bigtree Cms	9 years ago
CVE-2017-7689	Command Injection in schneider-electric (CVE-2017-7689) command injection in schneider-electric (CVE-2017-7689). Successful exploitation can lead to full system takeover.	Critical	Cwe 77 Schneider Electric Homelynk Controller Lss100100 Firmware Homelynk Controller Lss100100	9 years ago
CVE-2017-7691	Code Injection in sap (CVE-2017-7691) code injection in sap (CVE-2017-7691). Successful exploitation can lead to full system takeover.	Critical	Cwe 94 Sap Trex	9 years ago
CVE-2013-6647	A use-after-free in AnimationController::endAnimationUpdate in Google Chrome. A use-after-free in AnimationController::endAnimationUpdate in Google Chrome.	Critical	Cwe 416 Google Chrome	9 years ago
CVE-2016-1908	Authentication Bypass in openbsd (CVE-2016-1908) authentication bypass in openbsd (CVE-2016-1908). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 OpenBSD Openssh Debian +10	9 years ago
CVE-2016-0779	Unsafe Deserialization in apache (CVE-2016-0779) vulnerability in apache (CVE-2016-0779). Successful exploitation can lead to full system takeover.	Critical	Apache Cwe 502 Tomee	9 years ago
CVE-2017-7462	Path Traversal in intellinet-network (CVE-2017-7462) path traversal in intellinet-network (CVE-2017-7462). Successful exploitation can lead to full system takeover.	Critical	Cwe 22 Cwe 798 Intellinet Network Nfc 30Ir Firmware +1	9 years ago
CVE-2017-7625	Code Injection in fiyo (CVE-2017-7625) code injection in fiyo (CVE-2017-7625). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 94 Fiyo Fiyo Cms	9 years ago
CVE-2015-7826	Vulnerability in botan-project (CVE-2015-7826) vulnerability in botan-project (CVE-2015-7826). Successful exploitation can lead to full system takeover.	Critical	Cwe 295 Botan Project Botan	9 years ago
CVE-2016-10311	Buffer Overflow in dos (CVE-2016-10311) vulnerability in dos (CVE-2016-10311). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 119 Sap Netweaver	9 years ago
CVE-2016-6878	Vulnerability in botan-project (CVE-2016-6878) vulnerability in botan-project (CVE-2016-6878). Successful exploitation can lead to full system takeover.	Critical	Cwe 20 Botan Project Botan	9 years ago
CVE-2017-5983	Unsafe Deserialization in dos (CVE-2017-5983) vulnerability in dos (CVE-2017-5983). Successful exploitation can lead to full system takeover.	Critical	Java Denial of Service Cwe 502 Atlassian +1	9 years ago
CVE-2017-7239	Vulnerability in dos (CVE-2017-7239) vulnerability in dos (CVE-2017-7239). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 74 Ninka Project Ninka	9 years ago
CVE-2016-10321	Vulnerability in web2py (CVE-2016-10321) vulnerability in web2py (CVE-2016-10321). Successful exploitation can lead to full system takeover.	Critical	Cwe 254 Web2Py	9 years ago
CVE-2016-5053	Vulnerability in osram (CVE-2016-5053) vulnerability in osram (CVE-2016-5053). Successful exploitation can lead to full system takeover.	Critical	Cwe 306 Osram Lightify Home	9 years ago
CVE-2016-5065	Command Injection in sierrawireless (CVE-2016-5065) command injection in sierrawireless (CVE-2016-5065). Successful exploitation can lead to full system takeover.	Critical	Cwe 77 Sierrawireless Aleos Firmware Gx 440	9 years ago
CVE-2016-5066	Vulnerability in sierrawireless (CVE-2016-5066) vulnerability in sierrawireless (CVE-2016-5066). Successful exploitation can lead to full system takeover.	Critical	Cwe 255 Sierrawireless Aleos Firmware Gx 440	9 years ago
CVE-2016-5068	Authentication Bypass in sierrawireless (CVE-2016-5068) authentication bypass in sierrawireless (CVE-2016-5068). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Sierrawireless Aleos Firmware Gx 440	9 years ago
CVE-2016-5069	Vulnerability in sierrawireless (CVE-2016-5069) vulnerability in sierrawireless (CVE-2016-5069). Successful exploitation can lead to full system takeover.	Critical	Cwe 613 Sierrawireless Aleos Firmware Gx 440	9 years ago
CVE-2016-5070	Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext. Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext.	Critical	Cwe 255 Sierrawireless Aleos Firmware Gx 440	9 years ago
CVE-2016-5074	CloudView NMS before 2.10a has a format string issue exploitable over SNMP. CloudView NMS before 2.10a has a format string issue exploitable over SNMP.	Critical	Cwe 134 Cloudviewnms Cloudview Nms	9 years ago
CVE-2015-2881	Vulnerability in gynoii (CVE-2015-2881) vulnerability in gynoii (CVE-2015-2881). Successful exploitation can lead to full system takeover.	Critical	Cwe 798 Gynoii Gcw 1010 Gcw 1020 +1	9 years ago

Vulnerabilities

🍪 About cookies