Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2021-41840 |
|
Vulnerability in c (CVE-2021-41840)
vulnerability in c (CVE-2021-41840). Successful exploitation can lead to full system takeover.
|
| CVE-2021-45416 |
|
Cross-Site Scripting (XSS) in rosariosis (CVE-2021-45416)
cross-site scripting in rosariosis (CVE-2021-45416). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-46115 |
|
Unrestricted File Upload in c (CVE-2021-46115)
vulnerability in c (CVE-2021-46115). Successful exploitation can lead to full system takeover.
|
| CVE-2022-23437 |
|
Vulnerability in apache (CVE-2022-23437)
vulnerability in apache (CVE-2022-23437). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-25296 KEV |
|
[KEV] OS Command Injection in nagios (CVE-2021-25296)
OS command injection in nagios (CVE-2021-25296). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-25297 KEV |
|
[KEV] OS Command Injection in nagios (CVE-2021-25297)
OS command injection in nagios (CVE-2021-25297). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-25298 KEV |
|
[KEV] OS Command Injection in nagios (CVE-2021-25298)
OS command injection in nagios (CVE-2021-25298). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2019-2725 KEV |
|
[KEV] Vulnerability in Oracle weblogic-server (CVE-2019-2725)
vulnerability in Oracle weblogic-server (CVE-2019-2725). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2021-44832 |
|
Vulnerability in org.apache.logging.log4j:log4j-core (CVE-2021-44832)
vulnerability in org.apache.logging.log4j:log4j-core (CVE-2021-44832). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.17.1` or later.
|
| CVE-2021-45485 |
|
Vulnerability in c (CVE-2021-45485)
vulnerability in c (CVE-2021-45485). Confidential information can be exposed externally.
|
| CVE-2020-20426 |
|
Cross-Site Scripting (XSS) in s-cms (CVE-2020-20426)
cross-site scripting in s-cms (CVE-2020-20426). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-44733 |
|
Vulnerability in c (CVE-2021-44733)
vulnerability in c (CVE-2021-44733). Successful exploitation can lead to full system takeover.
|
| CVE-2021-42216 |
|
A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php.
A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php.
|
| CVE-2021-43890 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2021-43890)
vulnerability in Microsoft windows (CVE-2021-43890). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2018-10228 |
|
Cross-Site Scripting (XSS) in limesurvey (CVE-2018-10228)
cross-site scripting in limesurvey (CVE-2018-10228). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-43687 |
|
Cross-Site Scripting (XSS) in chamilo (CVE-2021-43687)
cross-site scripting in chamilo (CVE-2021-43687). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-41164 |
|
CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The...
CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed HTML bypassing content sanitization, which could result i...
|
| CVE-2021-22204 KEV |
|
[KEV] Vulnerability in Perl exiftool (CVE-2021-22204)
vulnerability in Perl exiftool (CVE-2021-22204). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-3572 |
|
Vulnerability in pypa (CVE-2021-3572)
vulnerability in pypa (CVE-2021-3572). Data can be tampered with by attackers.
|
| CVE-2020-3452 KEV |
|
[KEV] Vulnerability in Cisco adaptive-security-appliance-asa-and-firepower-threat-defense-ftd (CVE-2020-3452)
vulnerability in Cisco adaptive-security-appliance-asa-and-firepower-threat-defense-ftd (CVE-2020-3452). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2021-30116 KEV |
|
[KEV] Vulnerability in Kaseya virtual-systemserver-administrator-vsa (CVE-2021-30116)
vulnerability in Kaseya virtual-systemserver-administrator-vsa (CVE-2021-30116). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2021-25877 |
|
Code Injection in youphptube (CVE-2021-25877)
code injection in youphptube (CVE-2021-25877). Successful exploitation can lead to full system takeover.
|
| CVE-2021-41183 |
|
Cross-Site Scripting (XSS) in c (CVE-2021-41183)
cross-site scripting in c (CVE-2021-41183). Data can be tampered with by attackers.
|
| CVE-2021-35606 |
|
Vulnerability in c (CVE-2021-35606)
vulnerability in c (CVE-2021-35606). Confidential information can be exposed externally.
|
| CVE-2021-42252 |
|
Vulnerability in c (CVE-2021-42252)
vulnerability in c (CVE-2021-42252). Successful exploitation can lead to full system takeover.
|
| CVE-2021-37223 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2021-37223)
SSRF in ssrf (CVE-2021-37223). Confidential information can be exposed externally.
|
| CVE-2021-41864 |
|
Vulnerability in c (CVE-2021-41864)
vulnerability in c (CVE-2021-41864). Successful exploitation can lead to full system takeover.
|
| CVE-2021-40690 |
|
Information Disclosure in apache (CVE-2021-40690)
vulnerability in apache (CVE-2021-40690). Confidential information can be exposed externally.
|
| CVE-2021-40639 |
|
Vulnerability in jflyfox (CVE-2021-40639)
vulnerability in jflyfox (CVE-2021-40639). Confidential information can be exposed externally.
|
| CVE-2021-40490 |
|
Vulnerability in c (CVE-2021-40490)
vulnerability in c (CVE-2021-40490). Successful exploitation can lead to full system takeover.
|
| CVE-2021-34485 |
|
.NET Core and Visual Studio Information Disclosure Vulnerability
.NET Core and Visual Studio Information Disclosure Vulnerability
|
| CVE-2021-34532 |
|
Vulnerability in Microsoft.AspNetCore.Authentication.JwtBearer (CVE-2021-34532)
vulnerability in Microsoft.AspNetCore.Authentication.JwtBearer (CVE-2021-34532). Confidential information can be exposed externally. Exploitable via ``csproj``. Mitigation: upgrade to `2.1.29` or later.
|
| CVE-2021-26423 |
|
.NET Core and Visual Studio Denial of Service Vulnerability
.NET Core and Visual Studio Denial of Service Vulnerability
|
| CVE-2021-2421 |
|
Vulnerability in c (CVE-2021-2421)
vulnerability in c (CVE-2021-2421). Confidential information can be exposed externally.
|
| CVE-2021-2351 |
|
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unau...
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Su...
|
| CVE-2021-34477 |
|
Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability
Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability
|
| CVE-2020-20585 |
|
SQL Injection in c (CVE-2020-20585)
SQL injection in c (CVE-2020-20585). Confidential information can be exposed externally.
|
| CVE-2020-22168 |
|
SQL Injection in sqli (CVE-2020-22168)
SQL injection in sqli (CVE-2020-22168). Confidential information can be exposed externally.
|
| CVE-2021-34202 |
|
Out-of-Bounds Write in c (CVE-2021-34202)
out-of-bounds write in c (CVE-2021-34202). Successful exploitation can lead to full system takeover.
|
| CVE-2020-26679 |
|
Vulnerability in vfairs (CVE-2020-26679)
vulnerability in vfairs (CVE-2020-26679). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-33425 |
|
Cross-Site Scripting (XSS) in openwrt (CVE-2021-33425)
cross-site scripting in openwrt (CVE-2021-33425). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-21843 |
|
Out-of-Bounds Write in c (CVE-2020-21843)
out-of-bounds write in c (CVE-2020-21843). Successful exploitation can lead to full system takeover.
|
| CVE-2020-21834 |
|
A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164.
A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164.
|
| CVE-2020-21839 |
|
Vulnerability in c (CVE-2020-21839)
vulnerability in c (CVE-2020-21839). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-21840 |
|
Out-of-Bounds Write in c (CVE-2020-21840)
out-of-bounds write in c (CVE-2020-21840). Successful exploitation can lead to full system takeover.
|
| CVE-2020-21827 |
|
Out-of-Bounds Write in c (CVE-2020-21827)
out-of-bounds write in c (CVE-2020-21827). Successful exploitation can lead to full system takeover.
|
| CVE-2020-21814 |
|
Out-of-Bounds Write in c (CVE-2020-21814)
out-of-bounds write in c (CVE-2020-21814). Successful exploitation can lead to full system takeover.
|
| CVE-2020-21815 |
|
Vulnerability in c (CVE-2020-21815)
vulnerability in c (CVE-2020-21815). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-21816 |
|
Out-of-Bounds Write in c (CVE-2020-21816)
out-of-bounds write in c (CVE-2020-21816). Successful exploitation can lead to full system takeover.
|
| CVE-2020-21817 |
|
Vulnerability in c (CVE-2020-21817)
vulnerability in c (CVE-2020-21817). Risk of unauthorized operations or information disclosure.
|