Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2023-21573	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability	Medium	Cross-Site Scripting Cwe 79 Microsoft Dynamics 365	3 years ago
CVE-2023-21528	Microsoft SQL Server Remote Code Execution Vulnerability Microsoft SQL Server Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Microsoft Sql Server	3 years ago
CVE-2023-21568	Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 502 Microsoft Sql Server 2019 Integration Services +1	3 years ago
CVE-2023-21564	Azure DevOps Server Cross-Site Scripting Vulnerability Azure DevOps Server Cross-Site Scripting Vulnerability	High	Cross-Site Scripting Cwe 79 Microsoft Azure Devops Server	3 years ago
CVE-2023-21570	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability	Medium	Cross-Site Scripting Cwe 79 Microsoft Dynamics 365	3 years ago
CVE-2023-21823 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2023-21823) vulnerability in Microsoft windows (CVE-2023-21823). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 190 Remote Code Execution +13	3 years ago
CVE-2023-24188	Path Traversal in path-traversal (CVE-2023-24188) path traversal in path-traversal (CVE-2023-24188). Data can be tampered with by attackers.	Critical	Path Traversal Cwe 22 Ureport Project Ureport	3 years ago
CVE-2022-4557	Vulnerability in sqli (CVE-2022-4557) vulnerability in sqli (CVE-2022-4557). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Gruparge Smartpower	3 years ago
CVE-2022-45089	SQL Injection in sqli (CVE-2022-45089) SQL injection in sqli (CVE-2022-45089). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Gruparge Smartpower Web	3 years ago
CVE-2022-45090	SQL Injection in sqli (CVE-2022-45090) SQL injection in sqli (CVE-2022-45090). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Gruparge Smartpower Web	3 years ago
CVE-2022-45086	Cross-Site Scripting (XSS) in gruparge (CVE-2022-45086) cross-site scripting in gruparge (CVE-2022-45086). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Gruparge Smartpower Web	3 years ago
CVE-2022-45087	Cross-Site Scripting (XSS) in gruparge (CVE-2022-45087) cross-site scripting in gruparge (CVE-2022-45087). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Gruparge Smartpower Web	3 years ago
CVE-2022-45091	Cross-Site Scripting (XSS) in gruparge (CVE-2022-45091) cross-site scripting in gruparge (CVE-2022-45091). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Gruparge Smartpower Web	3 years ago
CVE-2022-45085	SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-45085) SSRF in ssrf (CVE-2022-45085). Confidential information can be exposed externally.	Medium	Server-Side Request Forgery Cwe 918 Gruparge Smartpower Web	3 years ago
CVE-2015-2291 KEV	[KEV] Vulnerability in Intel ethernet-diagnostics-driver-for-windows (CVE-2015-2291) vulnerability in Intel ethernet-diagnostics-driver-for-windows (CVE-2015-2291). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Intel Ethernet Diagnostics Driver For Windows Cwe 20 C +5	3 years ago
CVE-2022-45589	SQL Injection in sqli (CVE-2022-45589) SQL injection in sqli (CVE-2022-45589). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Talend Esb Runtime	3 years ago
CVE-2021-36712	Cross-Site Scripting (XSS) in yzmcms (CVE-2021-36712) cross-site scripting in yzmcms (CVE-2021-36712). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Yzmcms	3 years ago
CVE-2023-25136	Vulnerability in openbsd (CVE-2023-25136) vulnerability in openbsd (CVE-2023-25136). Risk of unauthorized operations or information disclosure.	Medium	Remote Code Execution Cwe 415 OpenBSD Openssh +10	3 years ago
CVE-2022-46965	SQL Injection in sqli (CVE-2022-46965) SQL injection in sqli (CVE-2022-46965). Confidential information can be exposed externally.	High	SQL Injection Cwe 89 202 Ecommerce Administrative Mandate	3 years ago
CVE-2022-47770	Serenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticated SQL Injection. Serenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticated SQL Injection.	Critical	SQL Injection Cwe 89 Serinf Fast Checkin	3 years ago
CVE-2022-47768	Serenissima Informatica Fast Checkin 1.0 is vulnerable to Directory Traversal. Serenissima Informatica Fast Checkin 1.0 is vulnerable to Directory Traversal.	High	Path Traversal Cwe 22 Serinf Fast Checkin	3 years ago
CVE-2022-44897	Cross-Site Scripting (XSS) in apollotheme (CVE-2022-44897) cross-site scripting in apollotheme (CVE-2022-44897). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Apollotheme Ap Pagebuilder	3 years ago
CVE-2022-2712	Path Traversal in path-traversal (CVE-2022-2712) path traversal in path-traversal (CVE-2022-2712). Confidential information can be exposed externally.	Medium	Path Traversal Cwe 22 Eclipse Glassfish	3 years ago
CVE-2020-22452	SQL Injection in sqli (CVE-2020-22452) SQL injection in sqli (CVE-2020-22452). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpmyadmin	3 years ago
CVE-2022-4554	Cross-Site Scripting (XSS) in idyazilim (CVE-2022-4554) cross-site scripting in idyazilim (CVE-2022-4554). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Idyazilim B2B Dealer Order System	3 years ago
CVE-2023-24070	Cross-Site Scripting (XSS) in misp-project (CVE-2023-24070) cross-site scripting in misp-project (CVE-2023-24070). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Misp Project Misp	3 years ago
CVE-2022-47966 KEV	[KEV] Vulnerability in Zoho manageengine (CVE-2022-47966) vulnerability in Zoho manageengine (CVE-2022-47966). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Zoho Manageengine Java Apache +25	3 years ago
CVE-2023-24027	In MISP 2.4.167, app/webroot/js/action_table.js allows XSS via a network history name. In MISP 2.4.167, app/webroot/js/action_table.js allows XSS via a network history name.	Medium	JavaScript Cross-Site Scripting Cwe 79 Misp Project +1	3 years ago
CVE-2022-41441	Cross-Site Scripting (XSS) in reqlogic (CVE-2022-41441) cross-site scripting in reqlogic (CVE-2022-41441). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Reqlogic	3 years ago
CVE-2021-37500	Path Traversal in path-traversal (CVE-2021-37500) path traversal in path-traversal (CVE-2021-37500). Data can be tampered with by attackers.	High	Path Traversal Cwe 22 Reprisesoftware Reprise License Manager	3 years ago
CVE-2021-37498	SSRF (Server-Side Request Forgery) in ssrf (CVE-2021-37498) SSRF in ssrf (CVE-2021-37498). Risk of unauthorized operations or information disclosure.	Medium	Server-Side Request Forgery Cwe 918 Reprisesoftware Reprise License Manager	3 years ago
CVE-2021-36630	Vulnerability in dos (CVE-2021-36630) vulnerability in dos (CVE-2021-36630). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770 Ruckuswireless Sz 300 Firmware +7	3 years ago
CVE-2022-3693	Path Traversal in path-traversal (CVE-2022-3693) path traversal in path-traversal (CVE-2022-3693). Confidential information can be exposed externally.	High	Path Traversal Cwe 35 Cwe 22 Fileorbis	3 years ago
CVE-2022-3792	SQL Injection in sqli (CVE-2022-3792) SQL injection in sqli (CVE-2022-3792). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Gullseye Gullseye Terminal Operating System	3 years ago
CVE-2022-4422	SQL Injection in sqli (CVE-2022-4422) SQL injection in sqli (CVE-2022-4422). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Bulutses Bulutdesk Callcenter	3 years ago
CVE-2022-40011	Cross-Site Scripting (XSS) in typora (CVE-2022-40011) cross-site scripting in typora (CVE-2022-40011). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Typora	3 years ago
CVE-2022-47928	Cross-Site Scripting (XSS) in misp-project (CVE-2022-47928) cross-site scripting in misp-project (CVE-2022-47928). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Misp Project Misp	3 years ago
CVE-2022-40841	Cross-Site Scripting (XSS) in ndk-design (CVE-2022-40841) cross-site scripting in ndk-design (CVE-2022-40841). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Ndk Design Ndkadvancedcustomizationfields	3 years ago
CVE-2022-40435	Cross-Site Scripting (XSS) in employee-performance-evaluation-system-project (CVE-2022-40435) cross-site scripting in employee-performance-evaluation-system-project (CVE-2022-40435). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Employee Performance Evaluation System Project Employee Performance Evaluation System	3 years ago
CVE-2022-42343	SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-42343) SSRF in ssrf (CVE-2022-42343). Confidential information can be exposed externally.	Medium	Server-Side Request Forgery Cwe 918 Adobe Campaign +4	3 years ago
CVE-2022-31358	Cross-Site Scripting (XSS) in proxmox (CVE-2022-31358) cross-site scripting in proxmox (CVE-2022-31358). Successful exploitation can lead to full system takeover.	Critical	Cross-Site Scripting Cwe 79 Proxmox Virtual Environment	3 years ago
CVE-2022-44694	Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Office +1	3 years ago
CVE-2022-44695	Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Office +2	3 years ago
CVE-2022-44696	Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Office +1	3 years ago
CVE-2022-44702	Windows Terminal Remote Code Execution Vulnerability Windows Terminal Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 94 Microsoft Terminal +2	3 years ago
CVE-2022-44303	Cross-Site Scripting (XSS) in resque-scheduler-project (CVE-2022-44303) cross-site scripting in resque-scheduler-project (CVE-2022-44303). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Resque Scheduler Project +1	3 years ago
CVE-2021-32415	Vulnerability in privilege-escalation (CVE-2021-32415) vulnerability in privilege-escalation (CVE-2021-32415). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Msi Wrapper	3 years ago
CVE-2022-44960	Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44960) cross-site scripting in webtareas-project (CVE-2022-44960). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Webtareas Project +1	3 years ago
CVE-2022-44961	Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44961) cross-site scripting in webtareas-project (CVE-2022-44961). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Webtareas Project +1	3 years ago
CVE-2022-44962	Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44962) cross-site scripting in webtareas-project (CVE-2022-44962). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Webtareas Project +1	3 years ago

Vulnerabilities

🍪 About cookies