Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2018-3885	SQL Injection in sqli (CVE-2018-3885) SQL injection in sqli (CVE-2018-3885). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Frappe Erpnext	7 years ago
CVE-2018-10902	Vulnerability in c (CVE-2018-10902) vulnerability in c (CVE-2018-10902). Successful exploitation can lead to full system takeover.	High	C Privilege Escalation Cwe 416 Cwe 415 +10	8 years ago
CVE-2018-1155	Cross-Site Scripting (XSS) in tenable (CVE-2018-1155) cross-site scripting in tenable (CVE-2018-1155). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Tenable +1	8 years ago
CVE-2018-1002206	Path Traversal in path-traversal (CVE-2018-1002206) path traversal in path-traversal (CVE-2018-1002206). Data can be tampered with by attackers.	Medium	Path Traversal Cwe 22 Adamhathcock Sharpcompress	8 years ago
CVE-2018-11039	Vulnerability in spring (CVE-2018-11039) vulnerability in spring (CVE-2018-11039). Confidential information can be exposed externally.	Medium	Spring Cross-Site Scripting Vmware Spring Framework +34	8 years ago
CVE-2018-11562	Cross-Site Scripting (XSS) in misp-project (CVE-2018-11562) cross-site scripting in misp-project (CVE-2018-11562). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Misp Project Misp	8 years ago
CVE-2018-1258	Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauth... Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.	High	Spring Cwe 863 Pivotal Software Spring Security +47	8 years ago
CVE-2018-0228	Vulnerability in dos (CVE-2018-0228) vulnerability in dos (CVE-2018-0228). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Cwe 667 Cisco +2	8 years ago
CVE-2018-0230	Vulnerability in dos (CVE-2018-0230) vulnerability in dos (CVE-2018-0230). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cisco Secure Firewall Threat Defense +1	8 years ago
CVE-2018-0231	Vulnerability in dos (CVE-2018-0231) vulnerability in dos (CVE-2018-0231). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Cwe 787 Cisco +2	8 years ago
CVE-2018-0240	Vulnerability in dos (CVE-2018-0240) vulnerability in dos (CVE-2018-0240). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 399 Cisco Secure Firewall Threat Defense +44	8 years ago
CVE-2018-1274	Vulnerability in dos (CVE-2018-1274) vulnerability in dos (CVE-2018-1274). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770 Broadcom Spring Data Commons +3	8 years ago
CVE-2018-7192	Cross-Site Scripting (XSS) in enhancesoft (CVE-2018-7192) cross-site scripting in enhancesoft (CVE-2018-7192). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Enhancesoft +1	8 years ago
CVE-2018-7193	Cross-Site Scripting (XSS) in enhancesoft (CVE-2018-7193) cross-site scripting in enhancesoft (CVE-2018-7193). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Enhancesoft +1	8 years ago
CVE-2018-7196	Cross-Site Scripting (XSS) in enhancesoft (CVE-2018-7196) cross-site scripting in enhancesoft (CVE-2018-7196). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Enhancesoft +1	8 years ago
CVE-2015-1862	The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve... The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve...	High	Cwe 362 Redhat Automatic Bug Reporting Tool Linux +2	8 years ago
CVE-2017-12626	Vulnerability in org.apache.poi:poi (CVE-2017-12626) vulnerability in org.apache.poi:poi (CVE-2017-12626). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.17` or later.	High	Apache Denial of Service Cwe 835 Poi	8 years ago
CVE-2017-18006	Cross-Site Scripting (XSS) in extensis (CVE-2017-18006) cross-site scripting in extensis (CVE-2017-18006). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Extensis Portfolio Netpublish	8 years ago
CVE-2017-18004	Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint. Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.	Medium	Cross-Site Scripting Cwe 79 Zurmo Zurmo Crm	8 years ago
CVE-2016-10704	Cross-Site Scripting (XSS) in magento (CVE-2016-10704) cross-site scripting in magento (CVE-2016-10704). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Magento	8 years ago
CVE-2017-17089	Cross-Site Scripting (XSS) in webmin (CVE-2017-17089) cross-site scripting in webmin (CVE-2017-17089). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Webmin	8 years ago
CVE-2017-14855	Vulnerability in dos (CVE-2017-14855) vulnerability in dos (CVE-2017-14855). Risk of unauthorized operations or information disclosure.	High	Denial of Service Redlion Hmi Panel Firmware Hmi Panel	8 years ago
CVE-2017-12810	PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel. PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel.	Medium	PHP Cross-Site Scripting Cwe 79 Stivasoft +1	8 years ago
CVE-2017-12811	PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item. PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item.	Medium	Cross-Site Scripting Cwe 79 Stivasoft Phpjabbers Star Rating Script	8 years ago
CVE-2017-12812	Cross-Site Scripting (XSS) in stivasoft (CVE-2017-12812) cross-site scripting in stivasoft (CVE-2017-12812). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Stivasoft Phpjabbers Night Club Booking Software	8 years ago
CVE-2017-12813	PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section. PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section.	Medium	Cross-Site Scripting Cwe 79 Stivasoft Phpjabbers File Sharing Script	8 years ago
CVE-2017-17983	SQL Injection in sqli (CVE-2017-17983) SQL injection in sqli (CVE-2017-17983). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17981	PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter. PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17984	PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter. PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17985	PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter. PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17986	PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter. PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17988	Cross-Site Scripting (XSS) in muslim-matrimonial-script-project (CVE-2017-17988) cross-site scripting in muslim-matrimonial-script-project (CVE-2017-17988). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17989	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17989) cross-site scripting in iwcnetwork (CVE-2017-17989). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17991	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17991) cross-site scripting in iwcnetwork (CVE-2017-17991). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17993	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17993) cross-site scripting in iwcnetwork (CVE-2017-17993). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17994	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17994) cross-site scripting in iwcnetwork (CVE-2017-17994). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17995	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17995) cross-site scripting in iwcnetwork (CVE-2017-17995). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17982	PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php. PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php.	Medium	PHP Cross-Site Request Forgery Cwe 352 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17990	Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action. Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.	High	PHP Cross-Site Request Forgery Cwe 352 Iwcnetwork +1	8 years ago
CVE-2017-17992	Path Traversal in path-traversal (CVE-2017-17992) path traversal in path-traversal (CVE-2017-17992). Successful exploitation can lead to full system takeover.	Critical	PHP Path Traversal Cwe 22 Iwcnetwork +1	8 years ago
CVE-2017-17975	Use-After-Free in c (CVE-2017-17975) vulnerability in c (CVE-2017-17975). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 416 Linux +1	8 years ago
CVE-2014-3630	XXE (XML External Entity) in dos (CVE-2014-3630) vulnerability in dos (CVE-2014-3630). Successful exploitation can lead to full system takeover.	Critical	Java Denial of Service Cwe 611 Lightbend +2	8 years ago
CVE-2014-8119	Vulnerability in dos (CVE-2014-8119) vulnerability in dos (CVE-2014-8119). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Fedoraproject Fedora +4	8 years ago
CVE-2017-17901	Vulnerability in dos (CVE-2017-17901) vulnerability in dos (CVE-2017-17901). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Zyxel P 660Hw Firmware +1	8 years ago
CVE-2014-0120	Cross-Site Request Forgery (CSRF) in csrf (CVE-2014-0120) vulnerability in csrf (CVE-2014-0120). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Hawt Hawtio +2	8 years ago
CVE-2017-17933	Cross-Site Scripting (XSS) in netwin (CVE-2017-17933) cross-site scripting in netwin (CVE-2017-17933). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Netwin Surgeftp	8 years ago
CVE-2017-17971	Cross-Site Scripting (XSS) in dolibarr (CVE-2017-17971) cross-site scripting in dolibarr (CVE-2017-17971). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Dolibarr +1	8 years ago
CVE-2017-17916	SQL Injection in rails (CVE-2017-17916) SQL injection in rails (CVE-2017-17916). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +1	8 years ago
CVE-2017-17917	SQL Injection in rails (CVE-2017-17917) SQL injection in rails (CVE-2017-17917). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +1	8 years ago
CVE-2017-17919	SQL Injection in rails (CVE-2017-17919) SQL injection in rails (CVE-2017-17919). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +2	8 years ago

Vulnerabilities

🍪 About cookies