Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: products Clear

ID	Title	Severity	Tags	Detected
CVE-2022-41105	Microsoft Excel Information Disclosure Vulnerability Microsoft Excel Information Disclosure Vulnerability	Medium	Microsoft 365 Apps Office Office Long Term Servicing Channel	3 years ago
CVE-2022-41106	Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Excel +4	3 years ago
CVE-2022-41107	Microsoft Office Graphics Remote Code Execution Vulnerability Microsoft Office Graphics Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Office +1	3 years ago
CVE-2022-41078	Microsoft Exchange Server Spoofing Vulnerability Microsoft Exchange Server Spoofing Vulnerability	High	Microsoft Exchange Server	3 years ago
CVE-2022-41079	Microsoft Exchange Server Spoofing Vulnerability Microsoft Exchange Server Spoofing Vulnerability	High	Microsoft Exchange Server	3 years ago
CVE-2022-41060	Microsoft Word Information Disclosure Vulnerability Microsoft Word Information Disclosure Vulnerability	Medium	Microsoft 365 Apps Office Office Long Term Servicing Channel +5	3 years ago
CVE-2022-41061	Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 94 Microsoft 365 Apps +7	3 years ago
CVE-2022-41063	Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Excel +4	3 years ago
CVE-2022-41062	Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft SharePoint Server Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Sharepoint Enterprise Server Sharepoint Foundation +1	3 years ago
CVE-2022-41064	.NET Framework Information Disclosure Vulnerability .NET Framework Information Disclosure Vulnerability	Medium	C# Microsoft Net Framework Windows Server 2022 +10	3 years ago
CVE-2022-38023	Netlogon RPC Elevation of Privilege Vulnerability Netlogon RPC Elevation of Privilege Vulnerability	High	Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +8	3 years ago
CVE-2022-37967	Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability	High	Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +8	3 years ago
CVE-2022-37966	Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability	High	Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +8	3 years ago
CVE-2022-43321	Cross-Site Scripting (XSS) in shopwind (CVE-2022-43321) cross-site scripting in shopwind (CVE-2022-43321). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Shopwind	3 years ago
CVE-2022-41091 KEV	[KEV] Authorization Flaw in Microsoft windows (CVE-2022-41091) vulnerability in Microsoft windows (CVE-2022-41091). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	Medium	Microsoft Windows Cwe 863 Windows 10 1507 +11	3 years ago
CVE-2022-41073 KEV	[KEV] Out-of-Bounds Write in Microsoft windows (CVE-2022-41073) out-of-bounds write in Microsoft windows (CVE-2022-41073). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 787 Windows 10 1507 +15	3 years ago
CVE-2022-41125 KEV	[KEV] Out-of-Bounds Write in Microsoft windows (CVE-2022-41125) out-of-bounds write in Microsoft windows (CVE-2022-41125). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 787 Windows 10 1507 +13	3 years ago
CVE-2022-41128 KEV	[KEV] Out-of-Bounds Write in Microsoft windows (CVE-2022-41128) out-of-bounds write in Microsoft windows (CVE-2022-41128). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 787 Remote Code Execution +16	3 years ago
CVE-2021-25337 KEV	[KEV] Privilege Escalation in Samsung mobile-devices (CVE-2021-25337) vulnerability in Samsung mobile-devices (CVE-2021-25337). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Samsung Mobile Devices Cwe 269	3 years ago
CVE-2021-25369 KEV	[KEV] Information Disclosure in Samsung mobile-devices (CVE-2021-25369) vulnerability in Samsung mobile-devices (CVE-2021-25369). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Samsung Mobile Devices Cwe 200	3 years ago
CVE-2021-25370 KEV	[KEV] Use-After-Free in Samsung mobile-devices (CVE-2021-25370) vulnerability in Samsung mobile-devices (CVE-2021-25370). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Samsung Mobile Devices Cwe 416	3 years ago
CVE-2022-40840	Cross-Site Scripting (XSS) in ndk-design (CVE-2022-40840) cross-site scripting in ndk-design (CVE-2022-40840). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Ndk Design +1	3 years ago
CVE-2022-3723 KEV	[KEV] Vulnerability in Google chromium-v8 (CVE-2022-3723) vulnerability in Google chromium-v8 (CVE-2022-3723). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Google Chromium V8 Cwe 122 Cwe 843	3 years ago
CVE-2022-42827 KEV	[KEV] Vulnerability in Apple ios-and-ipados (CVE-2022-42827) vulnerability in Apple ios-and-ipados (CVE-2022-42827). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Ios And Ipados Cwe 20 Cwe 787	3 years ago
CVE-2018-19323 KEV	[KEV] Vulnerability in Gigabyte multiple-products (CVE-2018-19323) vulnerability in Gigabyte multiple-products (CVE-2018-19323). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Gigabyte Multiple Products Aorus Graphics Engine Gigabyte App Center +2	3 years ago
CVE-2018-19322 KEV	[KEV] Vulnerability in Gigabyte multiple-products (CVE-2018-19322) vulnerability in Gigabyte multiple-products (CVE-2018-19322). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Gigabyte Multiple Products Cwe 749 Aorus Graphics Engine +3	3 years ago
CVE-2018-19321 KEV	[KEV] Vulnerability in Gigabyte multiple-products (CVE-2018-19321) vulnerability in Gigabyte multiple-products (CVE-2018-19321). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Gigabyte Multiple Products Aorus Graphics Engine App Center +2	3 years ago
CVE-2018-19320 KEV	[KEV] Vulnerability in Gigabyte multiple-products (CVE-2018-19320) vulnerability in Gigabyte multiple-products (CVE-2018-19320). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Gigabyte Multiple Products Aorus Graphics Engine App Center +2	3 years ago
CVE-2020-3433 KEV	[KEV] Vulnerability in Cisco anyconnect-secure (CVE-2020-3433) vulnerability in Cisco anyconnect-secure (CVE-2020-3433). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Cisco Anyconnect Secure Cwe 427 Anyconnect Secure Mobility Client	3 years ago
CVE-2020-3153 KEV	[KEV] Vulnerability in Cisco anyconnect-secure (CVE-2020-3153) vulnerability in Cisco anyconnect-secure (CVE-2020-3153). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.	Medium	Cisco Anyconnect Secure Cwe 427 Anyconnect Secure Mobility Client	3 years ago
CVE-2022-31366	Unrestricted File Upload in eve-ng (CVE-2022-31366) vulnerability in eve-ng (CVE-2022-31366). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434 Eve Ng	3 years ago
CVE-2021-3493 KEV	[KEV] Vulnerability in Linux kernel (CVE-2021-3493) vulnerability in Linux kernel (CVE-2021-3493). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Linux Kernel Cwe 862	3 years ago
CVE-2022-41352 KEV	[KEV] Path Traversal in Synacor zimbra-collaboration-suite-zcs (CVE-2022-41352) path traversal in Synacor zimbra-collaboration-suite-zcs (CVE-2022-41352). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Synacor Zimbra Collaboration Suite Zcs Cwe 22	3 years ago
CVE-2022-38901	Cross-Site Scripting (XSS) in liferay (CVE-2022-38901) cross-site scripting in liferay (CVE-2022-38901). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Liferay +2	3 years ago
CVE-2022-42112	Cross-Site Scripting (XSS) in liferay (CVE-2022-42112) cross-site scripting in liferay (CVE-2022-42112). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Digital Experience Platform +2	3 years ago
CVE-2022-42113	Cross-Site Scripting (XSS) in liferay (CVE-2022-42113) cross-site scripting in liferay (CVE-2022-42113). Risk of unauthorized operations or information disclosure. Exploitable via ``redirect``.	Medium	Cross-Site Scripting Cwe 79 Liferay Dxp +1	3 years ago
CVE-2022-42114	Cross-Site Scripting (XSS) in liferay (CVE-2022-42114) cross-site scripting in liferay (CVE-2022-42114). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Dxp +1	3 years ago
CVE-2022-42115	Cross-Site Scripting (XSS) in liferay (CVE-2022-42115) cross-site scripting in liferay (CVE-2022-42115). Risk of unauthorized operations or information disclosure. Exploitable via ``Label``.	Medium	Cross-Site Scripting Cwe 79 Liferay Liferay Portal	3 years ago
CVE-2022-42116	Cross-Site Scripting (XSS) in liferay (CVE-2022-42116) cross-site scripting in liferay (CVE-2022-42116). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Dxp +1	3 years ago
CVE-2022-42117	Cross-Site Scripting (XSS) in liferay (CVE-2022-42117) cross-site scripting in liferay (CVE-2022-42117). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Liferay Dxp +1	3 years ago
CVE-2022-38902	Cross-Site Scripting (XSS) in liferay (CVE-2022-38902) cross-site scripting in liferay (CVE-2022-38902). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Liferay +2	3 years ago
CVE-2022-40047	Cross-Site Scripting (XSS) in flatpress (CVE-2022-40047) cross-site scripting in flatpress (CVE-2022-40047). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Flatpress	3 years ago
CVE-2022-40684 KEV	[KEV] Authentication Bypass in Fortinet multiple-products (CVE-2022-40684) authentication bypass in Fortinet multiple-products (CVE-2022-40684). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Fortinet Multiple Products Cwe 288 Authentication Bypass +4	3 years ago
CVE-2022-41033 KEV	[KEV] Vulnerability in Microsoft windows-com-event-system-service (CVE-2022-41033) vulnerability in Microsoft windows-com-event-system-service (CVE-2022-41033). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Com Event System Service Cwe 843	3 years ago
CVE-2022-20920	Vulnerability in cisco (CVE-2022-20920) vulnerability in cisco (CVE-2022-20920). Risk of unauthorized operations or information disclosure.	High	Cwe 755 Cisco iOS Ios Xe	3 years ago
CVE-2022-42724	Information Disclosure in misp-project (CVE-2022-42724) vulnerability in misp-project (CVE-2022-42724). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 863 Misp Project Misp	3 years ago
CVE-2022-35156	SQL Injection in sqli (CVE-2022-35156) SQL injection in sqli (CVE-2022-35156). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpgurukul +1	3 years ago
CVE-2022-41082 KEV	[KEV] Unsafe Deserialization in Microsoft exchange-server (CVE-2022-41082) vulnerability in Microsoft exchange-server (CVE-2022-41082). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Exchange Server Cwe 502	3 years ago
CVE-2022-41040 KEV	[KEV] SSRF (Server-Side Request Forgery) in Microsoft exchange-server (CVE-2022-41040) SSRF in Microsoft exchange-server (CVE-2022-41040). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Exchange Server Cwe 918	3 years ago
CVE-2022-36804 KEV	[KEV] OS Command Injection in Atlassian bitbucket-server-and-data-center (CVE-2022-36804) OS command injection in Atlassian bitbucket-server-and-data-center (CVE-2022-36804). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Atlassian Bitbucket Server And Data Center Cwe 78 Cwe 88 +1	3 years ago

Vulnerabilities

🍪 About cookies