Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2017-6880	Buffer Overflow in dos (CVE-2017-6880) vulnerability in dos (CVE-2017-6880). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 119 Cerberus Cerberus Ftp Server	9 years ago
CVE-2014-8705	Vulnerability in wondercms (CVE-2014-8705) vulnerability in wondercms (CVE-2014-8705). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 20 Wondercms	9 years ago
CVE-2014-8704	Path Traversal in path-traversal (CVE-2014-8704) path traversal in path-traversal (CVE-2014-8704). Successful exploitation can lead to full system takeover.	Critical	PHP Path Traversal Cwe 22 Wondercms	9 years ago
CVE-2014-9852	Vulnerability in c (CVE-2014-9852) vulnerability in c (CVE-2014-9852). Successful exploitation can lead to full system takeover.	Critical	C Cwe 913 Imagemagick Opensuse +6	9 years ago
CVE-2014-8708	Pluck CMS 4.7.2 allows remote attackers to execute arbitrary code via the blog form feature. Pluck CMS 4.7.2 allows remote attackers to execute arbitrary code via the blog form feature.	Critical	Cwe 264 Pluck Cms Pluck	9 years ago
CVE-2017-6969	Out-of-Bounds Read in gnu (CVE-2017-6969) vulnerability in gnu (CVE-2017-6969). Confidential information can be exposed externally.	Critical	Cwe 125 Gnu Binutils	9 years ago
CVE-2015-8981	Buffer Overflow in cpp (CVE-2015-8981) vulnerability in cpp (CVE-2015-8981). Successful exploitation can lead to full system takeover.	Critical	C++ Cwe 119 Podofo Project Podofo	9 years ago
CVE-2017-6023	Vulnerability in fatek (CVE-2017-6023) vulnerability in fatek (CVE-2017-6023). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 121 Cwe 119 Fatek +5	9 years ago
CVE-2017-3831	Vulnerability in express (CVE-2017-3831) vulnerability in express (CVE-2017-3831). Successful exploitation can lead to full system takeover.	Critical	Express Cwe 264 Cwe 287 Cisco +8	9 years ago
CVE-2016-5239	Vulnerability in imagemagick (CVE-2016-5239) vulnerability in imagemagick (CVE-2016-5239). Successful exploitation can lead to full system takeover.	Critical	Cwe 284 Imagemagick	9 years ago
CVE-2017-5522	Buffer Overflow in dos (CVE-2017-5522) vulnerability in dos (CVE-2017-5522). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 119 Debian Debian Linux +2	9 years ago
CVE-2016-7955	Vulnerability in alienvault (CVE-2016-7955) vulnerability in alienvault (CVE-2016-7955). Successful exploitation can lead to full system takeover. Exploitable via `User-Agent header`.	Critical	Cwe 264 Alienvault Ossim Unified Security Management	9 years ago
CVE-2016-10195	Out-of-Bounds Read in c (CVE-2016-10195) vulnerability in c (CVE-2016-10195). Successful exploitation can lead to full system takeover.	Critical	C Cwe 125 Libevent Project Libevent +2	9 years ago
CVE-2017-5358	Buffer Overflow in easycom-aura (CVE-2017-5358) vulnerability in easycom-aura (CVE-2017-5358). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 119 Easycom Aura Easycom For Php	9 years ago
CVE-2017-5496	Information Disclosure in sawmill (CVE-2017-5496) vulnerability in sawmill (CVE-2017-5496). Successful exploitation can lead to full system takeover.	Critical	Cwe 200 Sawmill	9 years ago
CVE-2016-10166	Vulnerability in c (CVE-2016-10166) vulnerability in c (CVE-2016-10166). Successful exploitation can lead to full system takeover.	Critical	C Cwe 191 Libgd	9 years ago
CVE-2016-8027	SQL Injection in sqli (CVE-2016-8027) SQL injection in sqli (CVE-2016-8027). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Mcafee Epolicy Orchestrator	9 years ago
CVE-2014-9921	Vulnerability in mcafee (CVE-2014-9921) vulnerability in mcafee (CVE-2014-9921). Successful exploitation can lead to full system takeover.	Critical	Cwe 264 Mcafee Cloud Analysis And Deconstructive Services	9 years ago
CVE-2016-10188	Use-After-Free in dos (CVE-2016-10188) vulnerability in dos (CVE-2016-10188). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 416 Bitlbee	9 years ago
CVE-2017-5668	Vulnerability in dos (CVE-2017-5668) vulnerability in dos (CVE-2017-5668). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 476 Bitlbee Bitlbee Libpurple	9 years ago
CVE-2013-4659	Buffer Overflow in asus (CVE-2013-4659) vulnerability in asus (CVE-2013-4659). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Asus Rt Ac66U Firmware Rt Ac66U +3	9 years ago
CVE-2017-5929	Unsafe Deserialization in qos (CVE-2017-5929) vulnerability in qos (CVE-2017-5929). Successful exploitation can lead to full system takeover.	Critical	Cwe 502 Qos Logback Redhat +2	9 years ago
CVE-2017-5619	Authentication Bypass in zammad (CVE-2017-5619) authentication bypass in zammad (CVE-2017-5619). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Zammad	9 years ago
CVE-2017-5674	Information Disclosure in embedthis (CVE-2017-5674) vulnerability in embedthis (CVE-2017-5674). Successful exploitation can lead to full system takeover.	Critical	Cwe 200 Embedthis Goahead	9 years ago
CVE-2017-6080	Cross-Site Request Forgery (CSRF) in zammad (CVE-2017-6080) vulnerability in zammad (CVE-2017-6080). Successful exploitation can lead to full system takeover.	Critical	Cwe 352 Zammad	9 years ago
CVE-2017-5624	Privilege Escalation in privilege-escalation (CVE-2017-5624) vulnerability in privilege-escalation (CVE-2017-5624). Successful exploitation can lead to full system takeover.	Critical	Privilege Escalation Cwe 269 Oneplus Oxygenos +2	9 years ago
CVE-2017-2785	Buffer Overflow in pharos (CVE-2017-2785) vulnerability in pharos (CVE-2017-2785). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 119 Pharos Popup	9 years ago
CVE-2017-2787	Buffer Overflow in pharos (CVE-2017-2787) vulnerability in pharos (CVE-2017-2787). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 119 Pharos Popup	9 years ago
CVE-2017-2788	Buffer Overflow in pharos (CVE-2017-2788) vulnerability in pharos (CVE-2017-2788). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 119 Pharos Popup	9 years ago
CVE-2017-6506	Buffer Overflow in azure-dex (CVE-2017-6506) vulnerability in azure-dex (CVE-2017-6506). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 119 Azure Dex Data Expert Ultimate	9 years ago
CVE-2017-6465	Buffer Overflow in ftpshell (CVE-2017-6465) vulnerability in ftpshell (CVE-2017-6465). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 119 Ftpshell Ftpshell Client	9 years ago
CVE-2017-6526	Authentication Bypass in dnatools (CVE-2017-6526) authentication bypass in dnatools (CVE-2017-6526). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Dnatools Dnalims	9 years ago
CVE-2017-6548	Buffer Overflow in asus (CVE-2017-6548) vulnerability in asus (CVE-2017-6548). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Asus Rt Ac53 Firmware Rt Ac53	9 years ago
CVE-2017-6558	Vulnerability in iball (CVE-2017-6558) vulnerability in iball (CVE-2017-6558). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 798 Iball Ib Wra150N Firmware +1	9 years ago
CVE-2017-5178	Vulnerability in schneider-electric (CVE-2017-5178) vulnerability in schneider-electric (CVE-2017-5178). Successful exploitation can lead to full system takeover.	Critical	Cwe 1188 Schneider Electric Tableau Desktop Tableau Server +1	9 years ago
CVE-2016-7780	SQL Injection in sqli (CVE-2016-7780) SQL injection in sqli (CVE-2016-7780). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Exponentcms +1	9 years ago
CVE-2016-7781	SQL Injection in sqli (CVE-2016-7781) SQL injection in sqli (CVE-2016-7781). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Exponentcms +1	9 years ago
CVE-2016-7782	SQL Injection in sqli (CVE-2016-7782) SQL injection in sqli (CVE-2016-7782). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Exponentcms +1	9 years ago
CVE-2016-7783	SQL Injection in sqli (CVE-2016-7783) SQL injection in sqli (CVE-2016-7783). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Exponentcms +1	9 years ago
CVE-2016-7784	SQL Injection in sqli (CVE-2016-7784) SQL injection in sqli (CVE-2016-7784). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Exponentcms +1	9 years ago
CVE-2016-7788	SQL Injection in sqli (CVE-2016-7788) SQL injection in sqli (CVE-2016-7788). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Exponentcms +1	9 years ago
CVE-2016-7789	SQL Injection in sqli (CVE-2016-7789) SQL injection in sqli (CVE-2016-7789). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Exponentcms +1	9 years ago
CVE-2016-9019	SQL Injection in sqli (CVE-2016-9019) SQL injection in sqli (CVE-2016-9019). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Exponentcms +1	9 years ago
CVE-2016-9020	SQL Injection in sqli (CVE-2016-9020) SQL injection in sqli (CVE-2016-9020). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Exponentcms +1	9 years ago
CVE-2016-9087	SQL Injection in sqli (CVE-2016-9087) SQL injection in sqli (CVE-2016-9087). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Exponentcms +1	9 years ago
CVE-2016-8863	Buffer Overflow in c (CVE-2016-8863) vulnerability in c (CVE-2016-8863). Successful exploitation can lead to full system takeover.	Critical	C Denial of Service Cwe 119 Libupnp Project +3	9 years ago
CVE-2017-3159	Unsafe Deserialization in apache (CVE-2017-3159) vulnerability in apache (CVE-2017-3159). Successful exploitation can lead to full system takeover.	Critical	Java Apache Cwe 502 Camel	9 years ago
CVE-2016-7145	Authentication Bypass in c (CVE-2016-7145) authentication bypass in c (CVE-2016-7145). Successful exploitation can lead to full system takeover.	Critical	C Cwe 287 Nefarious2 Project Nefarious2	9 years ago
CVE-2017-6416	Buffer Overflow in flexense (CVE-2017-6416) vulnerability in flexense (CVE-2017-6416). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Flexense Sysgauge	9 years ago
CVE-2016-7406	Vulnerability in dropbear-ssh-project (CVE-2016-7406) vulnerability in dropbear-ssh-project (CVE-2016-7406). Successful exploitation can lead to full system takeover.	Critical	Cwe 20 Dropbear Ssh Project Dropbear Ssh	9 years ago

Vulnerabilities

🍪 About cookies