Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2024-38045	Windows TCP/IP Remote Code Execution Vulnerability Windows TCP/IP Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Microsoft Windows 10 1809 +9	1 year ago
CVE-2024-37338	Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 125 Microsoft Sql 2016 Azure Connect Feature Pack +4	1 year ago
CVE-2024-37339	Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 822 Microsoft Sql 2016 Azure Connect Feature Pack +4	1 year ago
CVE-2024-37340	Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 822 Microsoft Sql 2016 Azure Connect Feature Pack +4	1 year ago
CVE-2024-37335	Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Microsoft Sql 2016 Azure Connect Feature Pack +4	1 year ago
CVE-2024-26186	Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 416 Microsoft Sql 2016 Azure Connect Feature Pack +4	1 year ago
CVE-2024-26191	Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Microsoft Sql 2016 Azure Connect Feature Pack +4	1 year ago
CVE-2024-21416	Windows TCP/IP Remote Code Execution Vulnerability Windows TCP/IP Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Microsoft Windows 10 1809 +9	1 year ago
CVE-2024-6445	Path Traversal in path-traversal (CVE-2024-6445) path traversal in path-traversal (CVE-2024-6445). Confidential information can be exposed externally.	High	Path Traversal Cwe 22 Dataflowx Datadiodex	1 year ago
CVE-2024-8418	Vulnerability in dos (CVE-2024-8418) vulnerability in dos (CVE-2024-8418). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Containers Aardvark Dns	1 year ago
CVE-2024-6119	Vulnerability in dos (CVE-2024-6119) vulnerability in dos (CVE-2024-6119). Risk of unauthorized operations or information disclosure. Exploitable via ``otherName``.	High	Denial of Service Cwe 843 Openssl Netapp +30	1 year ago
CVE-2023-29929	Out-of-Bounds Write in dos (CVE-2023-29929) out-of-bounds write in dos (CVE-2023-29929). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 787	2 years ago
CVE-2024-6508	Vulnerability in csrf (CVE-2024-6508) vulnerability in csrf (CVE-2024-6508). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 331	2 years ago
CVE-2021-31196 KEV	[KEV] Vulnerability in Microsoft exchange-server (CVE-2021-31196) vulnerability in Microsoft exchange-server (CVE-2021-31196). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Exchange Server Remote Code Execution	2 years ago
CVE-2024-38884	Authorization Flaw in horizoncloud (CVE-2024-38884) vulnerability in horizoncloud (CVE-2024-38884). Successful exploitation can lead to full system takeover.	High	Authentication Bypass Cwe 863 Cwe 592 Horizoncloud +1	2 years ago
CVE-2024-37857	SQL Injection in sqli (CVE-2024-37857) SQL injection in sqli (CVE-2024-37857). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Oretnom23 +1	2 years ago
CVE-2024-41628	Path Traversal in path-traversal (CVE-2024-41628) path traversal in path-traversal (CVE-2024-41628). Confidential information can be exposed externally.	High	Path Traversal Cwe 22	2 years ago
CVE-2024-21527	SSRF (Server-Side Request Forgery) in ssrf (CVE-2024-21527) SSRF in ssrf (CVE-2024-21527). Confidential information can be exposed externally.	High	Server-Side Request Forgery Cwe 918	2 years ago
CVE-2024-4944	Command Injection in privilege-escalation (CVE-2024-4944) command injection in privilege-escalation (CVE-2024-4944). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 77 Watchguard Mobile Vpn With Ssl +2	2 years ago
CVE-2024-5974	A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with... A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with...	High	Cwe 120 Watchguard Fireware Firebox M200 +51	2 years ago
CVE-2024-5971	A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not s... A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource co...	High	Java Denial of Service Cwe 674 TLS/SSL	2 years ago
CVE-2024-6409	Vulnerability in CVE-2024-6409 (CVE-2024-6409) vulnerability in CVE-2024-6409 (CVE-2024-6409). Risk of unauthorized operations or information disclosure.	High	Remote Code Execution Cwe 364	2 years ago
CVE-2024-5154	Path Traversal in path-traversal (CVE-2024-5154) path traversal in path-traversal (CVE-2024-5154). Confidential information can be exposed externally.	High	Path Traversal Cwe 22 Kubernetes CRI-O +3	2 years ago
CVE-2024-35249	Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 502 Microsoft Dynamics 365 Business Central	2 years ago
CVE-2024-35252	Azure Storage Movement Client Library Denial of Service Vulnerability Azure Storage Movement Client Library Denial of Service Vulnerability	High	Denial of Service Cwe 1104 Microsoft Azure Storage Data Movement Library	2 years ago
CVE-2024-30104	Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 59 Microsoft 365 Apps +2	2 years ago
CVE-2024-30101	Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 416 Microsoft 365 Apps +2	2 years ago
CVE-2024-30103	Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 184 Microsoft 365 Apps +3	2 years ago
CVE-2024-30095	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Cwe 787 Microsoft +14	2 years ago
CVE-2024-30097	Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 415 Microsoft Windows 10 1507 +11	2 years ago
CVE-2024-30094	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Microsoft Windows 10 1507 +13	2 years ago
CVE-2024-30083	Windows Standards-Based Storage Management Service Denial of Service Vulnerability Windows Standards-Based Storage Management Service Denial of Service Vulnerability	High	Denial of Service Cwe 121 Microsoft Windows Server 2012 +3	2 years ago
CVE-2024-30074	Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Microsoft Windows Server 2008	2 years ago
CVE-2024-30075	Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Microsoft Windows Server 2008	2 years ago
CVE-2024-30077	Windows OLE Remote Code Execution Vulnerability Windows OLE Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Microsoft Windows 10 1507 +13	2 years ago
CVE-2024-30078	Windows Wi-Fi Driver Remote Code Execution Vulnerability Windows Wi-Fi Driver Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 20 Microsoft Windows 10 1507 +13	2 years ago
CVE-2024-30072	Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 190 Microsoft Windows 11 22H2 +2	2 years ago
CVE-2024-30070	DHCP Server Service Denial of Service Vulnerability DHCP Server Service Denial of Service Vulnerability	High	Denial of Service Cwe 191 Microsoft Windows Server 2012 +2	2 years ago
CVE-2024-30062	Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 416 Microsoft Windows Server 2012 +3	2 years ago
CVE-2024-1086 KEV	[KEV] Use-After-Free in Linux kernel (CVE-2024-1086) vulnerability in Linux kernel (CVE-2024-1086). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Linux Kernel Cwe 416 Privilege Escalation +31	2 years ago
CVE-2024-3727	Vulnerability in path-traversal (CVE-2024-3727) vulnerability in path-traversal (CVE-2024-3727). Successful exploitation can lead to full system takeover.	High	Path Traversal Cwe 354	2 years ago
CVE-2024-33601	Vulnerability in dos (CVE-2024-33601) vulnerability in dos (CVE-2024-33601). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 617 Gnu Glibc +21	2 years ago
CVE-2024-1139	A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a re... A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a repository pull secret.	High	Cwe 200 Credential Leak Authentication Bypass Ocp	2 years ago
CVE-2024-20353 KEV	[KEV] Vulnerability in Cisco adaptive-security-appliance-asa-and-firepower-threat-defense-ftd (CVE-2024-20353) vulnerability in Cisco adaptive-security-appliance-asa-and-firepower-threat-defense-ftd (CVE-2024-20353). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Cisco Adaptive Security Appliance Asa And Firepower Threat Defense Ftd Cwe 835 Denial of Service +2	2 years ago
CVE-2024-26898	Use-After-Free in dos (CVE-2024-26898) vulnerability in dos (CVE-2024-26898). Successful exploitation can lead to full system takeover. Exploitable via ``skbtxq``.	High	Denial of Service Cwe 416 Linux Linux Kernel	2 years ago
CVE-2024-26257	Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 415 Microsoft 365 Apps +1	2 years ago
CVE-2024-28714	SQL Injection in sqli (CVE-2024-28714) SQL injection in sqli (CVE-2024-28714). Confidential information can be exposed externally.	High	SQL Injection Cwe 89 Crmeb Crmeb Java	2 years ago
CVE-2023-52494	Out-of-Bounds Write in dos (CVE-2023-52494) out-of-bounds write in dos (CVE-2023-52494). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 787 Linux Linux Kernel	2 years ago
CVE-2024-27289	pgx is a PostgreSQL driver and toolkit for Go. Prior to version 4.18.2, SQL injection can occur when all of the following conditions are met: the non-default simple protocol is used; a placeholder for... pgx is a PostgreSQL driver and toolkit for Go. Prior to version 4.18.2, SQL injection can occur when all of the following conditions are met: the non-default simple protocol is used; a placeholder for a numeric value must be immediately preceded by a minus; there must be a second placeholder for a s...	High	SQL Injection Cwe 89 Jackc Pgx +1	2 years ago
CVE-2023-33677	SQL Injection in sqli (CVE-2023-33677) SQL injection in sqli (CVE-2023-33677). Confidential information can be exposed externally.	High	SQL Injection Cwe 89 Oretnom23 Lost And Found Information System	2 years ago

Vulnerabilities

🍪 About cookies