Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-20 Clear

ID	Title	Severity	Tags	Detected
CVE-2025-50489	Vulnerability in phpgurukul (CVE-2025-50489) vulnerability in phpgurukul (CVE-2025-50489). Risk of unauthorized operations or information disclosure.	High	PHP Cwe 20 Phpgurukul Student Result Management System	1 year ago
CVE-2025-50490	Vulnerability in phpgurukul (CVE-2025-50490) vulnerability in phpgurukul (CVE-2025-50490). Risk of unauthorized operations or information disclosure.	High	PHP Cwe 20 Phpgurukul Student Result Management System	1 year ago
CVE-2025-50493	Vulnerability in phpgurukul (CVE-2025-50493) vulnerability in phpgurukul (CVE-2025-50493). Risk of unauthorized operations or information disclosure.	High	PHP Cwe 20 Phpgurukul Doctor Appointment Management System	1 year ago
CVE-2025-50494	Vulnerability in phpgurukul (CVE-2025-50494) vulnerability in phpgurukul (CVE-2025-50494). Risk of unauthorized operations or information disclosure.	High	PHP Cwe 20 Phpgurukul Car Washing Management System	1 year ago
CVE-2025-6558 KEV	[KEV] Vulnerability in Google chromium (CVE-2025-6558) vulnerability in Google chromium (CVE-2025-6558). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Google Chromium Cwe 20	1 year ago
CVE-2025-5992	Vulnerability in dos (CVE-2025-5992) vulnerability in dos (CVE-2025-5992). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.4` or later.		Denial of Service Cwe 20	1 year ago
CVE-2025-53471	Vulnerability in CVE-2025-53471 (CVE-2025-53471) vulnerability in CVE-2025-53471 (CVE-2025-53471). Data can be tampered with by attackers.	Medium	Cwe 20	1 year ago
CVE-2025-44526	Vulnerability in dos (CVE-2025-44526) vulnerability in dos (CVE-2025-44526). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 20 Cwe 284 Realtek +2	1 year ago
CVE-2025-5455	Vulnerability in dos (CVE-2025-5455) vulnerability in dos (CVE-2025-5455). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.15.19` or later.		Denial of Service Cwe 20	1 year ago
CVE-2025-46836	Vulnerability in c (CVE-2025-46836) vulnerability in c (CVE-2025-46836). Risk of unauthorized operations or information disclosure. Exploitable via ``interface.c``.	Medium	C Privilege Escalation Cwe 20 Cwe 121	1 year ago
CVE-2025-29821	Vulnerability in microsoft (CVE-2025-29821) vulnerability in microsoft (CVE-2025-29821). Confidential information can be exposed externally.	Medium	Cwe 20 Microsoft Dynamics 365 Business Central 2023 Dynamics 365 Business Central 2024 +1	1 year ago
CVE-2025-0178	Vulnerability in watchguard (CVE-2025-0178) vulnerability in watchguard (CVE-2025-0178). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.	Medium	JavaScript Cwe 20 Watchguard Fireware +27	1 year ago
CVE-2024-21413 KEV	[KEV] Vulnerability in Microsoft office-outlook (CVE-2024-21413) vulnerability in Microsoft office-outlook (CVE-2024-21413). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Microsoft Office Outlook Cwe 20 Remote Code Execution +4	1 year ago
CVE-2025-1022	Vulnerability in CVE-2025-1022 (CVE-2025-1022) vulnerability in CVE-2025-1022 (CVE-2025-1022). Confidential information can be exposed externally.	High	Cwe 20	1 year ago
CVE-2025-0938	Vulnerability in CVE-2025-0938 (CVE-2025-0938) vulnerability in CVE-2025-0938 (CVE-2025-0938). Risk of unauthorized operations or information disclosure. Exploitable via ``urllib.parse.urlsplit``.		Python Cwe 20	1 year ago
CVE-2024-21549	Vulnerability in CVE-2024-21549 (CVE-2024-21549) vulnerability in CVE-2024-21549 (CVE-2024-21549). Confidential information can be exposed externally.	High	PHP Cwe 20	1 year ago
CVE-2024-52337	Vulnerability in CVE-2024-52337 (CVE-2024-52337) vulnerability in CVE-2024-52337 (CVE-2024-52337). Data can be tampered with by attackers.	Medium	Cwe 20	1 year ago
CVE-2024-12401	Vulnerability in github.com/cert-manager/cert-manager (CVE-2024-12401) vulnerability in github.com/cert-manager/cert-manager (CVE-2024-12401). Risk of unauthorized operations or information disclosure. Exploitable via ``pem.Decode``. Mitigation: upgrade to `1.16.2` or later.	Medium	Denial of Service Cwe 20	1 year ago
CVE-2024-11079	Vulnerability in ansible-core (CVE-2024-11079) vulnerability in ansible-core (CVE-2024-11079). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.16.14rc1` or later.	Medium	Cwe 20	1 year ago
CVE-2024-20495	Vulnerability in dos (CVE-2024-20495) vulnerability in dos (CVE-2024-20495). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Cisco Adaptive Security Appliance Software +1	1 year ago
CVE-2024-43455	Windows Remote Desktop Licensing Service Spoofing Vulnerability Windows Remote Desktop Licensing Service Spoofing Vulnerability	High	Cwe 20 Microsoft Windows Server 2008 Windows Server 2012 +4	1 year ago
CVE-2024-38245	Kernel Streaming Service Driver Elevation of Privilege Vulnerability Kernel Streaming Service Driver Elevation of Privilege Vulnerability	High	Cwe 20 Microsoft Windows 10 1507 Windows 10 1607 +13	1 year ago
CVE-2024-38241	Kernel Streaming Service Driver Elevation of Privilege Vulnerability Kernel Streaming Service Driver Elevation of Privilege Vulnerability	High	Cwe 20 Microsoft Windows 10 1507 Windows 10 1607 +11	1 year ago
CVE-2024-38243	Kernel Streaming Service Driver Elevation of Privilege Vulnerability Kernel Streaming Service Driver Elevation of Privilege Vulnerability	High	Cwe 20 Microsoft Windows 10 1507 Windows 10 1607 +11	1 year ago
CVE-2024-38244	Kernel Streaming Service Driver Elevation of Privilege Vulnerability Kernel Streaming Service Driver Elevation of Privilege Vulnerability	High	Cwe 20 Microsoft Windows 10 1507 Windows 10 1607 +11	1 year ago
CVE-2024-38234	Windows Networking Denial of Service Vulnerability Windows Networking Denial of Service Vulnerability	Medium	Denial of Service Cwe 20 Microsoft Windows 10 1507 +14	1 year ago
CVE-2024-38230	Windows Standards-Based Storage Management Service Denial of Service Vulnerability Windows Standards-Based Storage Management Service Denial of Service Vulnerability	Medium	Denial of Service Cwe 20 Microsoft Windows Server 2012 +3	1 year ago
CVE-2024-38194	Vulnerability in microsoft (CVE-2024-38194) vulnerability in microsoft (CVE-2024-38194). Confidential information can be exposed externally.	High	Cwe 20 Microsoft Azure Web Apps	1 year ago
CVE-2024-38216	Azure Stack Hub Elevation of Privilege Vulnerability Azure Stack Hub Elevation of Privilege Vulnerability	High	Cwe 20 Microsoft Azure Stack Hub	1 year ago
CVE-2024-38046	PowerShell Elevation of Privilege Vulnerability PowerShell Elevation of Privilege Vulnerability	High	Cwe 20 Microsoft Windows 10 1507 Windows 10 1607 +11	1 year ago
CVE-2024-37965	Microsoft SQL Server Elevation of Privilege Vulnerability Microsoft SQL Server Elevation of Privilege Vulnerability	High	Cwe 20 Microsoft Sql Server 2016 Sql Server 2017 +2	1 year ago
CVE-2016-3714 KEV	[KEV] Vulnerability in imagemagick (CVE-2016-3714) vulnerability in imagemagick (CVE-2016-3714). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Imagemagick Cwe 20	1 year ago
CVE-2024-42531	Vulnerability in CVE-2024-42531 (CVE-2024-42531) vulnerability in CVE-2024-42531 (CVE-2024-42531). Successful exploitation can lead to full system takeover.	Critical	Cwe 20	2 years ago
CVE-2022-23817	Vulnerability in privilege-escalation (CVE-2022-23817) vulnerability in privilege-escalation (CVE-2022-23817). Risk of unauthorized operations or information disclosure.		Privilege Escalation Cwe 20 Cwe 120	2 years ago
CVE-2023-31339	Vulnerability in dos (CVE-2023-31339) vulnerability in dos (CVE-2023-31339). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 20 Cwe 125 Amd +43	2 years ago
CVE-2024-38189 KEV	[KEV] Vulnerability in Microsoft project (CVE-2024-38189) vulnerability in Microsoft project (CVE-2024-38189). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Project Cwe 20	2 years ago
CVE-2024-30087	Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability	High	Cwe 20 Microsoft Windows 10 1507 Windows 10 1607 +12	2 years ago
CVE-2024-30078	Windows Wi-Fi Driver Remote Code Execution Vulnerability Windows Wi-Fi Driver Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 20 Microsoft Windows 10 1507 +13	2 years ago
CVE-2024-23669	Vulnerability in fortinet (CVE-2024-23669) vulnerability in fortinet (CVE-2024-23669). Confidential information can be exposed externally.	Medium	Cwe 20 Cwe 863 Fortinet Fortiwebmanager	2 years ago
CVE-2024-23668	Vulnerability in fortinet (CVE-2024-23668) vulnerability in fortinet (CVE-2024-23668). Successful exploitation can lead to full system takeover.	High	Cwe 20 Fortinet Fortiwebmanager	2 years ago
CVE-2024-2199	Vulnerability in dos (CVE-2024-2199) vulnerability in dos (CVE-2024-2199). Risk of unauthorized operations or information disclosure. Exploitable via ``userPassword``.	Medium	Denial of Service Cwe 20	2 years ago
CVE-2024-30040 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2024-30040) vulnerability in Microsoft windows (CVE-2024-30040). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 20	2 years ago
CVE-2024-3400 KEV	[KEV] Vulnerability in Palo alto networks palo-alto-networks (CVE-2024-3400) vulnerability in Palo alto networks palo-alto-networks (CVE-2024-3400). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Palo Alto Networks Pan Os Cwe 20 Cwe 77	2 years ago
CVE-2024-21374	Microsoft Teams for Android Information Disclosure Vulnerability Microsoft Teams for Android Information Disclosure Vulnerability	Medium	Cwe 20 Microsoft Teams	2 years ago
CVE-2024-21304	Trusted Compute Base Elevation of Privilege Vulnerability Trusted Compute Base Elevation of Privilege Vulnerability	Medium	Cwe 20 Microsoft Windows 10 1809 Windows 10 21H2 +6	2 years ago
CVE-2024-21315	Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability	High	Cwe 20 Microsoft Defender For Endpoint Windows Server 2022 23H2 +12	2 years ago
CVE-2024-20684	Windows Hyper-V Denial of Service Vulnerability Windows Hyper-V Denial of Service Vulnerability	Medium	Denial of Service Cwe 20 Microsoft Windows 11 21H2 +4	2 years ago
CVE-2023-6879	Vulnerability in aomedia (CVE-2023-6879) vulnerability in aomedia (CVE-2023-6879). Successful exploitation can lead to full system takeover.	Critical	Cwe 20 Cwe 787 Aomedia Fedoraproject +1	2 years ago
CVE-2023-41266 KEV	[KEV] Path Traversal in Qlik sense (CVE-2023-41266) path traversal in Qlik sense (CVE-2023-41266). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.	High	Qlik Sense Cwe 20 Path Traversal +2	2 years ago
CVE-2023-49081	Vulnerability in aiohttp (CVE-2023-49081) vulnerability in aiohttp (CVE-2023-49081). Risk of unauthorized operations or information disclosure.	High	Python Cwe 20 Aiohttp	2 years ago

Vulnerabilities

🍪 About cookies