Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: vendors Clear

ID	Title	Severity	Tags	Detected
CVE-2023-36910	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	Critical	Remote Code Execution Cwe 190 Microsoft Windows 10 +11	3 years ago
CVE-2023-36897	Visual Studio Tools for Office Runtime Spoofing Vulnerability Visual Studio Tools for Office Runtime Spoofing Vulnerability	High	Cwe 20 Microsoft 365 Apps Office +5	3 years ago
CVE-2023-36889	Windows Group Policy Security Feature Bypass Vulnerability Windows Group Policy Security Feature Bypass Vulnerability	Medium	Cwe 284 Microsoft Windows 10 1507 Windows 10 1607 +10	3 years ago
CVE-2023-36893	Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability	Medium	Cwe 20 Microsoft 365 Apps Office +2	3 years ago
CVE-2023-36895	Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 416 Microsoft 365 Apps +2	3 years ago
CVE-2023-36896	Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Microsoft 365 Apps +3	3 years ago
CVE-2023-36865	Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 122 Microsoft 365 Apps +2	3 years ago
CVE-2023-36866	Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 190 Microsoft 365 Apps +2	3 years ago
CVE-2023-36869	Azure DevOps Server Spoofing Vulnerability Azure DevOps Server Spoofing Vulnerability	Medium	Cwe 79 Microsoft Azure Devops Server	3 years ago
CVE-2023-36877	Azure Apache Oozie Spoofing Vulnerability Azure Apache Oozie Spoofing Vulnerability	Medium	Apache Cwe 79 Microsoft Azure Hdinsight	3 years ago
CVE-2023-36881	Azure Apache Ambari Spoofing Vulnerability Azure Apache Ambari Spoofing Vulnerability	Medium	Apache Cwe 79 Microsoft Azure Hdinsight	3 years ago
CVE-2023-36882	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 416 Microsoft Windows 10 1507 +11	3 years ago
CVE-2023-35382	Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability	High	Cwe 416 Microsoft Windows 10 1809 Windows 10 21H2 +5	3 years ago
CVE-2023-35383	Microsoft Message Queuing Information Disclosure Vulnerability Microsoft Message Queuing Information Disclosure Vulnerability	High	Cwe 190 Microsoft Windows 10 1507 Windows 10 1607 +10	3 years ago
CVE-2023-35384	Windows HTML Platforms Security Feature Bypass Vulnerability Windows HTML Platforms Security Feature Bypass Vulnerability	Medium	Cwe 73 Microsoft Windows 10 1507 Windows 10 1607 +10	3 years ago
CVE-2023-35385	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	Critical	Remote Code Execution Cwe 190 Microsoft Windows 10 1507 +11	3 years ago
CVE-2023-35386	Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability	High	Cwe 125 Microsoft Windows 10 1507 Windows 10 1607 +9	3 years ago
CVE-2023-35387	Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability	High	Cwe 191 Microsoft Windows 10 1507 Windows 10 1607 +9	3 years ago
CVE-2023-35388	Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 502 Microsoft Exchange Server	3 years ago
CVE-2023-35389	Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability	Medium	Remote Code Execution Cwe 611 Microsoft Dynamics 365	3 years ago
CVE-2023-35390	.NET and Visual Studio Remote Code Execution Vulnerability .NET and Visual Studio Remote Code Execution Vulnerability	High	C# Remote Code Execution Cwe 77 Microsoft +2	3 years ago
CVE-2023-35393	Azure Apache Hive Spoofing Vulnerability Azure Apache Hive Spoofing Vulnerability	Medium	Apache Cwe 79 Microsoft Azure Hdinsight	3 years ago
CVE-2023-35394	Azure HDInsight Jupyter Notebook Spoofing Vulnerability Azure HDInsight Jupyter Notebook Spoofing Vulnerability	Medium	Cwe 79 Microsoft Azure Hdinsight	3 years ago
CVE-2023-35359	Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability	High	Cwe 23 Microsoft Windows 10 1507 Windows 10 1607 +10	3 years ago
CVE-2023-35368	Microsoft Exchange Remote Code Execution Vulnerability Microsoft Exchange Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 20 Microsoft Exchange Server	3 years ago
CVE-2023-35371	Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 415 Microsoft 365 Apps +3	3 years ago
CVE-2023-35372	Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 190 Microsoft 365 Apps +2	3 years ago
CVE-2023-35376	Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability	Medium	Denial of Service Cwe 20 Microsoft Windows 10 1507 +11	3 years ago
CVE-2023-35377	Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability	Medium	Denial of Service Cwe 20 Microsoft Windows 10 1507 +11	3 years ago
CVE-2023-35378	Windows Projected File System Elevation of Privilege Vulnerability Windows Projected File System Elevation of Privilege Vulnerability	High	Cwe 367 Cwe 362 Microsoft Windows 10 1809 +6	3 years ago
CVE-2023-35380	Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability	High	Cwe 416 Microsoft Windows 10 1507 Windows 10 1607 +10	3 years ago
CVE-2023-35381	Windows Fax Service Remote Code Execution Vulnerability Windows Fax Service Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 190 Microsoft Windows 10 1507 +11	3 years ago
CVE-2023-21709	Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft Exchange Server Elevation of Privilege Vulnerability	Critical	Cwe 307 Microsoft Exchange Server	3 years ago
CVE-2023-29328	Microsoft Teams Remote Code Execution Vulnerability Microsoft Teams Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 416 Microsoft Teams	3 years ago
CVE-2023-29330	Microsoft Teams Remote Code Execution Vulnerability Microsoft Teams Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 416 Microsoft Teams	3 years ago
CVE-2023-38157	Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability	Medium	Cwe 693 Microsoft Edge Chromium	3 years ago
CVE-2017-18368 KEV	[KEV] OS Command Injection in Zyxel p660hn-t1a-routers (CVE-2017-18368) OS command injection in Zyxel p660hn-t1a-routers (CVE-2017-18368). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Zyxel P660Hn T1A Routers Cwe 78	3 years ago
CVE-2023-38952	Vulnerability in zkteco (CVE-2023-38952) vulnerability in zkteco (CVE-2023-38952). Confidential information can be exposed externally.	High	Cwe 552 Zkteco Biotime	3 years ago
CVE-2023-38951	Path Traversal in path-traversal (CVE-2023-38951) path traversal in path-traversal (CVE-2023-38951). Successful exploitation can lead to full system takeover.	Critical	Path Traversal Cwe 22 Zkteco Biotime	3 years ago
CVE-2023-38949	Vulnerability in zkteco (CVE-2023-38949) vulnerability in zkteco (CVE-2023-38949). Data can be tampered with by attackers.	High	Zkteco Biotime	3 years ago
CVE-2023-38954	ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability. ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.	Critical	SQL Injection Cwe 89 Zkteco Bioaccess Ivs	3 years ago
CVE-2023-38955	Vulnerability in zkteco (CVE-2023-38955) vulnerability in zkteco (CVE-2023-38955). Confidential information can be exposed externally.	High	Cwe 668 Zkteco Bioaccess Ivs	3 years ago
CVE-2023-38956	Path Traversal in path-traversal (CVE-2023-38956) path traversal in path-traversal (CVE-2023-38956). Confidential information can be exposed externally.	High	Path Traversal Cwe 22 Zkteco Bioaccess Ivs	3 years ago
CVE-2023-38958	Authorization Flaw in zkteco (CVE-2023-38958) vulnerability in zkteco (CVE-2023-38958). Risk of unauthorized operations or information disclosure.	Medium	Cwe 863 Zkteco Bioaccess Ivs	3 years ago
CVE-2023-38559	Out-of-Bounds Read in c (CVE-2023-38559) vulnerability in c (CVE-2023-38559). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 125 Cwe 120 +8	3 years ago
CVE-2023-34842	Code Injection in dedecms (CVE-2023-34842) code injection in dedecms (CVE-2023-34842). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 94 Dedecms	3 years ago
CVE-2023-37647	SQL Injection in sqli (CVE-2023-37647) SQL injection in sqli (CVE-2023-37647). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Sem Cms +1	3 years ago
CVE-2023-35081 KEV	[KEV] Path Traversal in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35081) path traversal in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35081). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Ivanti Endpoint Manager Mobile Epmm Cwe 22	3 years ago
CVE-2023-37580 KEV	[KEV] Cross-Site Scripting (XSS) in Synacor zimbra-collaboration-suite-zcs (CVE-2023-37580) cross-site scripting in Synacor zimbra-collaboration-suite-zcs (CVE-2023-37580). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Synacor Zimbra Collaboration Suite Zcs Cwe 79	3 years ago
CVE-2023-26911	Vulnerability in asus (CVE-2023-26911) vulnerability in asus (CVE-2023-26911). Successful exploitation can lead to full system takeover.	High	Cwe 428 Asus Armoury Crate Setupasusservices	3 years ago

Vulnerabilities

🍪 About cookies