Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
Filtering: Group: attack-types Clear
ID Title
CVE-2022-25022 Cross-Site Scripting (XSS) in htmly (CVE-2022-25022)
cross-site scripting in htmly (CVE-2022-25022). Risk of unauthorized operations or information disclosure.
CVE-2022-25064 OS Command Injection in tp-link (CVE-2022-25064)
OS command injection in tp-link (CVE-2022-25064). Successful exploitation can lead to full system takeover.
CVE-2021-42952 Vulnerability in zepl (CVE-2021-42952)
vulnerability in zepl (CVE-2021-42952). Successful exploitation can lead to full system takeover.
CVE-2022-25062 Vulnerability in dos (CVE-2022-25062)
vulnerability in dos (CVE-2022-25062). Risk of unauthorized operations or information disclosure.
CVE-2021-37504 Cross-Site Scripting (XSS) in hayageek (CVE-2021-37504)
cross-site scripting in hayageek (CVE-2021-37504). Risk of unauthorized operations or information disclosure.
CVE-2022-22899 Out-of-Bounds Write in dos (CVE-2022-22899)
out-of-bounds write in dos (CVE-2022-22899). Risk of unauthorized operations or information disclosure.
CVE-2022-22914 Path Traversal in path-traversal (CVE-2022-22914)
path traversal in path-traversal (CVE-2022-22914). Confidential information can be exposed externally.
CVE-2022-22916 Vulnerability in zoneland (CVE-2022-22916)
vulnerability in zoneland (CVE-2022-22916). Successful exploitation can lead to full system takeover.
CVE-2019-0752 KEV [KEV] Vulnerability in Microsoft internet-explorer (CVE-2019-0752)
vulnerability in Microsoft internet-explorer (CVE-2019-0752). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2018-8174 KEV [KEV] Out-of-Bounds Write in Microsoft windows (CVE-2018-8174)
out-of-bounds write in Microsoft windows (CVE-2018-8174). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2018-20250 KEV [KEV] Vulnerability in Rarlab winrar (CVE-2018-20250)
vulnerability in Rarlab winrar (CVE-2018-20250). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-45420 Information Disclosure in dos (CVE-2021-45420)
vulnerability in dos (CVE-2021-45420). Successful exploitation can lead to full system takeover.
CVE-2021-46355 Cross-Site Scripting (XSS) in factorfx (CVE-2021-46355)
cross-site scripting in factorfx (CVE-2021-46355). Risk of unauthorized operations or information disclosure.
CVE-2021-22787 Vulnerability in dos (CVE-2021-22787)
vulnerability in dos (CVE-2021-22787). Risk of unauthorized operations or information disclosure.
CVE-2021-22788 Out-of-Bounds Write in dos (CVE-2021-22788)
out-of-bounds write in dos (CVE-2021-22788). Risk of unauthorized operations or information disclosure.
CVE-2022-23321 Cross-Site Scripting (XSS) in xerox (CVE-2022-23321)
cross-site scripting in xerox (CVE-2022-23321). Risk of unauthorized operations or information disclosure.
CVE-2021-41442 Vulnerability in dos (CVE-2021-41442)
vulnerability in dos (CVE-2021-41442). Risk of unauthorized operations or information disclosure.
CVE-2020-0796 KEV [KEV] Buffer Overflow in Microsoft smbv3 (CVE-2020-0796)
vulnerability in Microsoft smbv3 (CVE-2020-0796). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2017-0145 KEV [KEV] Vulnerability in Microsoft smbv1 (CVE-2017-0145)
vulnerability in Microsoft smbv1 (CVE-2017-0145). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2017-0144 KEV [KEV] Vulnerability in Microsoft smbv1 (CVE-2017-0144)
vulnerability in Microsoft smbv1 (CVE-2017-0144). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2022-22709 VP9 Video Extensions Remote Code Execution Vulnerability
VP9 Video Extensions Remote Code Execution Vulnerability
CVE-2021-41441 Vulnerability in dos (CVE-2021-41441)
vulnerability in dos (CVE-2021-41441). Risk of unauthorized operations or information disclosure.
CVE-2021-42637 SSRF (Server-Side Request Forgery) in ssrf (CVE-2021-42637)
SSRF in ssrf (CVE-2021-42637). Successful exploitation can lead to full system takeover.
CVE-2020-13935 Vulnerability in org.apache.tomcat:tomcat (CVE-2020-13935)
vulnerability in org.apache.tomcat:tomcat (CVE-2020-13935). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.105` or later.
CVE-2020-13934 Vulnerability in org.apache.tomcat:tomcat (CVE-2020-13934)
vulnerability in org.apache.tomcat:tomcat (CVE-2020-13934). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.5.56` or later.
CVE-2022-23913 Vulnerability in org.apache.activemq:artemis-core-client (CVE-2022-23913)
vulnerability in org.apache.activemq:artemis-core-client (CVE-2022-23913). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.19.1` or later.
CVE-2020-7534 Cross-Site Request Forgery (CSRF) in csrf (CVE-2020-7534)
vulnerability in csrf (CVE-2020-7534). Successful exploitation can lead to full system takeover.
CVE-2021-42633 SQL Injection in sqli (CVE-2021-42633)
SQL injection in sqli (CVE-2021-42633). Risk of unauthorized operations or information disclosure.
CVE-2021-42639 Cross-Site Scripting (XSS) in printerlogic (CVE-2021-42639)
cross-site scripting in printerlogic (CVE-2021-42639). Risk of unauthorized operations or information disclosure.
CVE-2021-42638 Command Injection in printerlogic (CVE-2021-42638)
command injection in printerlogic (CVE-2021-42638). Successful exploitation can lead to full system takeover.
CVE-2021-45416 Cross-Site Scripting (XSS) in rosariosis (CVE-2021-45416)
cross-site scripting in rosariosis (CVE-2021-45416). Risk of unauthorized operations or information disclosure.
CVE-2021-42631 Unsafe Deserialization in printerlogic (CVE-2021-42631)
vulnerability in printerlogic (CVE-2021-42631). Successful exploitation can lead to full system takeover.
CVE-2021-42635 Vulnerability in printerlogic (CVE-2021-42635)
vulnerability in printerlogic (CVE-2021-42635). Successful exploitation can lead to full system takeover.
CVE-2021-44971 Vulnerability in tenda (CVE-2021-44971)
vulnerability in tenda (CVE-2021-44971). Successful exploitation can lead to full system takeover.
CVE-2021-46117 Code Injection in jpress (CVE-2021-46117)
code injection in jpress (CVE-2021-46117). Successful exploitation can lead to full system takeover.
CVE-2021-46116 Unrestricted File Upload in jpress (CVE-2021-46116)
vulnerability in jpress (CVE-2021-46116). Successful exploitation can lead to full system takeover.
CVE-2021-46114 Code Injection in jpress (CVE-2021-46114)
code injection in jpress (CVE-2021-46114). Successful exploitation can lead to full system takeover.
CVE-2021-46115 Unrestricted File Upload in c (CVE-2021-46115)
vulnerability in c (CVE-2021-46115). Successful exploitation can lead to full system takeover.
CVE-2021-46118 Code Injection in jpress (CVE-2021-46118)
code injection in jpress (CVE-2021-46118). Successful exploitation can lead to full system takeover.
CVE-2022-23302 Unsafe Deserialization in apache (CVE-2022-23302)
vulnerability in apache (CVE-2022-23302). Successful exploitation can lead to full system takeover.
CVE-2022-23307 Unsafe Deserialization in apache (CVE-2022-23307)
vulnerability in apache (CVE-2022-23307). Successful exploitation can lead to full system takeover.
CVE-2021-45422 Cross-Site Scripting (XSS) in reprisesoftware (CVE-2021-45422)
cross-site scripting in reprisesoftware (CVE-2021-45422). Risk of unauthorized operations or information disclosure.
CVE-2022-21840 Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
CVE-2022-21841 Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-1573 Vulnerability in dos (CVE-2021-1573)
vulnerability in dos (CVE-2021-1573). Risk of unauthorized operations or information disclosure.
CVE-2021-34704 Vulnerability in dos (CVE-2021-34704)
vulnerability in dos (CVE-2021-34704). Risk of unauthorized operations or information disclosure.
CVE-2019-1579 KEV [KEV] Vulnerability in Palo alto networks palo-alto-networks (CVE-2019-1579)
vulnerability in Palo alto networks palo-alto-networks (CVE-2019-1579). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2021-43677 Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability.
Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability.
CVE-2021-44832 Vulnerability in org.apache.logging.log4j:log4j-core (CVE-2021-44832)
vulnerability in org.apache.logging.log4j:log4j-core (CVE-2021-44832). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.17.1` or later.
CVE-2020-20425 Cross-Site Scripting (XSS) in s-cms (CVE-2020-20425)
cross-site scripting in s-cms (CVE-2020-20425). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →