Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2025-26570 Cross-Site Request Forgery (CSRF) in csrf (CVE-2025-26570)
vulnerability in csrf (CVE-2025-26570). Risk of unauthorized operations or information disclosure.
CVE-2024-57727 KEV [KEV] Path Traversal in Simplehelp path-traversal (CVE-2024-57727)
path traversal in Simplehelp path-traversal (CVE-2024-57727). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2024-12133 Vulnerability in dos (CVE-2024-12133)
vulnerability in dos (CVE-2024-12133). Risk of unauthorized operations or information disclosure.
CVE-2025-21692 Vulnerability in c (CVE-2025-21692)
vulnerability in c (CVE-2025-21692). Successful exploitation can lead to full system takeover.
CVE-2024-11831 Cross-Site Scripting (XSS) in CVE-2024-11831 (CVE-2024-11831)
cross-site scripting in CVE-2024-11831 (CVE-2024-11831). Risk of unauthorized operations or information disclosure.
CVE-2024-57523 Cross-Site Request Forgery (CSRF) in csrf (CVE-2024-57523)
vulnerability in csrf (CVE-2024-57523). Data can be tampered with by attackers.
CVE-2024-21413 KEV [KEV] Vulnerability in Microsoft office-outlook (CVE-2024-21413)
vulnerability in Microsoft office-outlook (CVE-2024-21413). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2020-29574 KEV [KEV] SQL Injection in Sophos cyberoamos (CVE-2020-29574)
SQL injection in Sophos cyberoamos (CVE-2020-29574). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2024-57598 Vulnerability in cpp (CVE-2024-57598)
vulnerability in cpp (CVE-2024-57598). Risk of unauthorized operations or information disclosure.
CVE-2025-20205 Cross-Site Scripting (XSS) in cisco (CVE-2025-20205)
cross-site scripting in cisco (CVE-2025-20205). Risk of unauthorized operations or information disclosure.
CVE-2025-22205 Path Traversal in path-traversal (CVE-2025-22205)
path traversal in path-traversal (CVE-2025-22205). Confidential information can be exposed externally.
CVE-2024-48417 Cross-Site Scripting (XSS) in edimax (CVE-2024-48417)
cross-site scripting in edimax (CVE-2024-48417). Risk of unauthorized operations or information disclosure.
CVE-2024-57041 Cross-Site Scripting (XSS) in nodebb (CVE-2024-57041)
cross-site scripting in nodebb (CVE-2024-57041). Risk of unauthorized operations or information disclosure.
CVE-2025-23006 KEV [KEV] Unsafe Deserialization in Sonicwall sma1000-appliances (CVE-2025-23006)
vulnerability in Sonicwall sma1000-appliances (CVE-2025-23006). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2024-10539 Cross-Site Scripting (XSS) in CVE-2024-10539 (CVE-2024-10539)
cross-site scripting in CVE-2024-10539 (CVE-2024-10539). Risk of unauthorized operations or information disclosure.
CVE-2024-55488 Cross-Site Scripting (XSS) in umbraco (CVE-2024-55488)
cross-site scripting in umbraco (CVE-2024-55488). Risk of unauthorized operations or information disclosure.
CVE-2025-0604 Authentication Bypass in CVE-2025-0604 (CVE-2025-0604)
authentication bypass in CVE-2025-0604 (CVE-2025-0604). Risk of unauthorized operations or information disclosure.
CVE-2024-24443 Vulnerability in dos (CVE-2024-24443)
vulnerability in dos (CVE-2024-24443). Risk of unauthorized operations or information disclosure.
CVE-2024-24451 Vulnerability in dos (CVE-2024-24451)
vulnerability in dos (CVE-2024-24451). Risk of unauthorized operations or information disclosure.
CVE-2024-24442 Vulnerability in dos (CVE-2024-24442)
vulnerability in dos (CVE-2024-24442). Risk of unauthorized operations or information disclosure.
CVE-2024-24444 Vulnerability in dos (CVE-2024-24444)
vulnerability in dos (CVE-2024-24444). Risk of unauthorized operations or information disclosure.
CVE-2024-24445 Vulnerability in dos (CVE-2024-24445)
vulnerability in dos (CVE-2024-24445). Risk of unauthorized operations or information disclosure.
CVE-2024-57370 Cross-Site Scripting (XSS) in CVE-2024-57370 (CVE-2024-57370)
cross-site scripting in CVE-2024-57370 (CVE-2024-57370). Risk of unauthorized operations or information disclosure.
CVE-2024-48885 Path Traversal in path-traversal (CVE-2024-48885)
path traversal in path-traversal (CVE-2024-48885). Risk of unauthorized operations or information disclosure.
CVE-2024-42911 Code Injection in CVE-2024-42911 (CVE-2024-42911)
code injection in CVE-2024-42911 (CVE-2024-42911). Confidential information can be exposed externally.
CVE-2025-0474 SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-0474)
SSRF in ssrf (CVE-2025-0474). Confidential information can be exposed externally.
CVE-2025-21402 Microsoft Office OneNote Remote Code Execution Vulnerability
Microsoft Office OneNote Remote Code Execution Vulnerability
CVE-2025-21361 Microsoft Outlook Remote Code Execution Vulnerability
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2025-21338 GDI+ Remote Code Execution Vulnerability
GDI+ Remote Code Execution Vulnerability
CVE-2024-12088 Path Traversal in path-traversal (CVE-2024-12088)
path traversal in path-traversal (CVE-2024-12088). Data can be tampered with by attackers.
CVE-2024-12087 Path Traversal in path-traversal (CVE-2024-12087)
path traversal in path-traversal (CVE-2024-12087). Data can be tampered with by attackers.
CVE-2024-12747 Vulnerability in privilege-escalation (CVE-2024-12747)
vulnerability in privilege-escalation (CVE-2024-12747). Confidential information can be exposed externally.
CVE-2024-52963 Out-of-Bounds Write in dos (CVE-2024-52963)
out-of-bounds write in dos (CVE-2024-52963). Risk of unauthorized operations or information disclosure.
CVE-2024-48884 Path Traversal in path-traversal (CVE-2024-48884)
path traversal in path-traversal (CVE-2024-48884). Risk of unauthorized operations or information disclosure.
CVE-2024-11734 Vulnerability in dos (CVE-2024-11734)
vulnerability in dos (CVE-2024-11734). Risk of unauthorized operations or information disclosure.
CVE-2024-55591 KEV [KEV] Vulnerability in Fortinet fortios-and-fortiproxy (CVE-2024-55591)
vulnerability in Fortinet fortios-and-fortiproxy (CVE-2024-55591). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2025-0282 KEV [KEV] Vulnerability in Ivanti connect-secure (CVE-2025-0282)
vulnerability in Ivanti connect-secure (CVE-2025-0282). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2024-50659 Cross-Site Scripting (XSS) in ipublishmedia (CVE-2024-50659)
cross-site scripting in ipublishmedia (CVE-2024-50659). Risk of unauthorized operations or information disclosure.
CVE-2024-55008 Vulnerability in dos (CVE-2024-55008)
vulnerability in dos (CVE-2024-55008). Risk of unauthorized operations or information disclosure.
CVE-2024-48245 SQL Injection in sqli (CVE-2024-48245)
SQL injection in sqli (CVE-2024-48245). Successful exploitation can lead to full system takeover.
CVE-2024-46242 Vulnerability in dos (CVE-2024-46242)
vulnerability in dos (CVE-2024-46242). Risk of unauthorized operations or information disclosure.
CVE-2024-55550 KEV [KEV] Path Traversal in Mitel micollab (CVE-2024-55550)
path traversal in Mitel micollab (CVE-2024-55550). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-41713 KEV [KEV] Path Traversal in Mitel micollab (CVE-2024-41713)
path traversal in Mitel micollab (CVE-2024-41713). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2024-51111 Cross-Site Scripting (XSS) in pnetlab (CVE-2024-51111)
cross-site scripting in pnetlab (CVE-2024-51111). Risk of unauthorized operations or information disclosure.
CVE-2024-48197 Cross-Site Scripting (XSS) in CVE-2024-48197 (CVE-2024-48197)
cross-site scripting in CVE-2024-48197 (CVE-2024-48197). Risk of unauthorized operations or information disclosure.
CVE-2024-45497 Vulnerability in dos (CVE-2024-45497)
vulnerability in dos (CVE-2024-45497). Risk of unauthorized operations or information disclosure.
CVE-2024-8950 SQL Injection in sqli (CVE-2024-8950)
SQL injection in sqli (CVE-2024-8950). Successful exploitation can lead to full system takeover.
CVE-2024-12582 Vulnerability in dos (CVE-2024-12582)
vulnerability in dos (CVE-2024-12582). Risk of unauthorized operations or information disclosure.
CVE-2024-10244 SQL Injection in sqli (CVE-2024-10244)
SQL injection in sqli (CVE-2024-10244). Successful exploitation can lead to full system takeover.
CVE-2024-8972 SQL Injection in sqli (CVE-2024-8972)
SQL injection in sqli (CVE-2024-8972). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →