Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
Filtering: Group: products Clear
ID Title
CVE-2021-21972 KEV [KEV] Path Traversal in Vmware vcenter-server (CVE-2021-21972)
path traversal in Vmware vcenter-server (CVE-2021-21972). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2021-21985 KEV [KEV] SSRF (Server-Side Request Forgery) in Vmware vcenter-server (CVE-2021-21985)
SSRF in Vmware vcenter-server (CVE-2021-21985). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2021-30116 KEV [KEV] Vulnerability in Kaseya virtual-systemserver-administrator-vsa (CVE-2021-30116)
vulnerability in Kaseya virtual-systemserver-administrator-vsa (CVE-2021-30116). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2019-19781 KEV [KEV] Path Traversal in Citrix application-delivery-controller-adc (CVE-2019-19781)
path traversal in Citrix application-delivery-controller-adc (CVE-2019-19781). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2019-11634 KEV [KEV] Vulnerability in Citrix workspace-application-and-receiver-for-windows (CVE-2019-11634)
vulnerability in Citrix workspace-application-and-receiver-for-windows (CVE-2019-11634). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2021-38647 KEV [KEV] Vulnerability in Microsoft open-management-infrastructure-omi (CVE-2021-38647)
vulnerability in Microsoft open-management-infrastructure-omi (CVE-2021-38647). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2021-20016 KEV [KEV] SQL Injection in Sonicwall sslvpn-sma100 (CVE-2021-20016)
SQL injection in Sonicwall sslvpn-sma100 (CVE-2021-20016). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2020-24913 SQL Injection in c (CVE-2020-24913)
SQL injection in c (CVE-2020-24913). Successful exploitation can lead to full system takeover.
CVE-2020-24914 Unsafe Deserialization in qcubed (CVE-2020-24914)
vulnerability in qcubed (CVE-2020-24914). Successful exploitation can lead to full system takeover.
CVE-2021-27078 Vulnerability in microsoft (CVE-2021-27078)
vulnerability in microsoft (CVE-2021-27078). Successful exploitation can lead to full system takeover.
CVE-2021-26412 Vulnerability in microsoft (CVE-2021-26412)
vulnerability in microsoft (CVE-2021-26412). Successful exploitation can lead to full system takeover.
CVE-2017-14491 Out-of-Bounds Write in platform/external/dnsmasq (CVE-2017-14491)
out-of-bounds write in platform/external/dnsmasq (CVE-2017-14491). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `11:2021-03-01` or later.
CVE-2020-0901 Buffer Overflow in microsoft (CVE-2020-0901)
vulnerability in microsoft (CVE-2020-0901). Successful exploitation can lead to full system takeover.
CVE-2020-10683 XXE (XML External Entity) in dom4j-project (CVE-2020-10683)
vulnerability in dom4j-project (CVE-2020-10683). Successful exploitation can lead to full system takeover.
CVE-2020-9548 Unsafe Deserialization in fasterxml (CVE-2020-9548)
vulnerability in fasterxml (CVE-2020-9548). Successful exploitation can lead to full system takeover.
CVE-2020-9546 Unsafe Deserialization in apache (CVE-2020-9546)
vulnerability in apache (CVE-2020-9546). Successful exploitation can lead to full system takeover.
CVE-2019-17571 Unsafe Deserialization in log4j:log4j (CVE-2019-17571)
vulnerability in log4j:log4j (CVE-2019-17571). Successful exploitation can lead to full system takeover.
CVE-2019-19634 Unrestricted File Upload in verot/class.upload.php (CVE-2019-19634)
vulnerability in verot/class.upload.php (CVE-2019-19634). Successful exploitation can lead to full system takeover.
CVE-2019-19576 Unrestricted File Upload in verot/class.upload.php (CVE-2019-19576)
vulnerability in verot/class.upload.php (CVE-2019-19576). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.0.4` or later.
CVE-2018-16988 Vulnerability in buffalo (CVE-2018-16988)
vulnerability in buffalo (CVE-2018-16988). Successful exploitation can lead to full system takeover.
CVE-2018-12649 Vulnerability in misp-project (CVE-2018-12649)
vulnerability in misp-project (CVE-2018-12649). Successful exploitation can lead to full system takeover.
CVE-2017-17992 Path Traversal in path-traversal (CVE-2017-17992)
path traversal in path-traversal (CVE-2017-17992). Successful exploitation can lead to full system takeover.
CVE-2017-17951 SQL Injection in sqli (CVE-2017-17951)
SQL injection in sqli (CVE-2017-17951). Successful exploitation can lead to full system takeover.
CVE-2017-17957 PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.
CVE-2017-17959 SQL Injection in sqli (CVE-2017-17959)
SQL injection in sqli (CVE-2017-17959). Successful exploitation can lead to full system takeover.
CVE-2017-5641 Unsafe Deserialization in apache (CVE-2017-5641)
vulnerability in apache (CVE-2017-5641). Successful exploitation can lead to full system takeover.
CVE-2015-7669 Path Traversal in wordpress (CVE-2015-7669)
path traversal in wordpress (CVE-2015-7669). Successful exploitation can lead to full system takeover.
CVE-2017-17900 SQL Injection in sqli (CVE-2017-17900)
SQL injection in sqli (CVE-2017-17900). Successful exploitation can lead to full system takeover.
CVE-2017-17906 PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.
CVE-2017-17928 SQL Injection in sqli (CVE-2017-17928)
SQL injection in sqli (CVE-2017-17928). Successful exploitation can lead to full system takeover.
CVE-2017-17931 PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter.
PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter.
CVE-2017-17892 SQL Injection in sqli (CVE-2017-17892)
SQL injection in sqli (CVE-2017-17892). Successful exploitation can lead to full system takeover.
CVE-2017-17897 SQL Injection in sqli (CVE-2017-17897)
SQL injection in sqli (CVE-2017-17897). Successful exploitation can lead to full system takeover.
CVE-2017-17899 SQL Injection in sqli (CVE-2017-17899)
SQL injection in sqli (CVE-2017-17899). Successful exploitation can lead to full system takeover.
CVE-2017-17873 Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.
Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.
CVE-2017-17027 Buffer Overflow in qnap (CVE-2017-17027)
vulnerability in qnap (CVE-2017-17027). Successful exploitation can lead to full system takeover.
CVE-2017-17028 Buffer Overflow in qnap (CVE-2017-17028)
vulnerability in qnap (CVE-2017-17028). Successful exploitation can lead to full system takeover.
CVE-2017-17029 Buffer Overflow in qnap (CVE-2017-17029)
vulnerability in qnap (CVE-2017-17029). Successful exploitation can lead to full system takeover.
CVE-2017-17030 Buffer Overflow in qnap (CVE-2017-17030)
vulnerability in qnap (CVE-2017-17030). Successful exploitation can lead to full system takeover.
CVE-2017-17031 Buffer Overflow in qnap (CVE-2017-17031)
vulnerability in qnap (CVE-2017-17031). Successful exploitation can lead to full system takeover.
CVE-2017-17032 Buffer Overflow in qnap (CVE-2017-17032)
vulnerability in qnap (CVE-2017-17032). Successful exploitation can lead to full system takeover.
CVE-2017-17033 Buffer Overflow in qnap (CVE-2017-17033)
vulnerability in qnap (CVE-2017-17033). Successful exploitation can lead to full system takeover.
CVE-2017-17794 Vulnerability in blogotext-project (CVE-2017-17794)
vulnerability in blogotext-project (CVE-2017-17794). Successful exploitation can lead to full system takeover.
CVE-2017-17777 Authentication Bypass in paid-to-read-script-project (CVE-2017-17777)
authentication bypass in paid-to-read-script-project (CVE-2017-17777). Successful exploitation can lead to full system takeover.
CVE-2017-17779 Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.
Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.
CVE-2017-15877 Vulnerability in sistemagpweb (CVE-2017-15877)
vulnerability in sistemagpweb (CVE-2017-15877). Successful exploitation can lead to full system takeover.
CVE-2017-16949 Unrestricted File Upload in wordpress (CVE-2017-16949)
vulnerability in wordpress (CVE-2017-16949). Successful exploitation can lead to full system takeover.
CVE-2017-17645 Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.
Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.
CVE-2017-17651 SQL Injection in sqli (CVE-2017-17651)
SQL injection in sqli (CVE-2017-17651). Successful exploitation can lead to full system takeover.
CVE-2017-17730 DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php.
DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →