Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2021-44596	Vulnerability in wondershare (CVE-2021-44596) vulnerability in wondershare (CVE-2021-44596). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Wondershare Drfone	4 years ago
CVE-2021-41945	Vulnerability in encode (CVE-2021-41945) vulnerability in encode (CVE-2021-41945). Confidential information can be exposed externally. Exploitable via ``httpx.URL``.	Critical	Cwe 20 Encode Httpx	4 years ago
CVE-2022-27984	SQL Injection in sqli (CVE-2022-27984) SQL injection in sqli (CVE-2022-27984). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Cuppacms	4 years ago
CVE-2022-27985	SQL Injection in sqli (CVE-2022-27985) SQL injection in sqli (CVE-2022-27985). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Cuppacms	4 years ago
CVE-2022-28093	Vulnerability in online-sports-complex-booking-system-project (CVE-2022-28093) vulnerability in online-sports-complex-booking-system-project (CVE-2022-28093). Successful exploitation can lead to full system takeover.	Critical	PHP Online Sports Complex Booking System Project Online Sports Complex Booking System	4 years ago
CVE-2022-29528	An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur. An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur.	Critical	Insecure Deserialization Cwe 502 Misp Project Misp	4 years ago
CVE-2018-7602 KEV	[KEV] Code Injection in Drupal core (CVE-2018-7602) code injection in Drupal core (CVE-2018-7602). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Drupal Core Remote Code Execution Cwe 94 +2	4 years ago
CVE-2018-20753 KEV	[KEV] Vulnerability in Kaseya virtual-systemserver-administrator-vsa (CVE-2018-20753) vulnerability in Kaseya virtual-systemserver-administrator-vsa (CVE-2018-20753). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Kaseya Virtual Systemserver Administrator Vsa Virtual System Administrator	4 years ago
CVE-2022-27262	Unrestricted File Upload in sailsjs (CVE-2022-27262) vulnerability in sailsjs (CVE-2022-27262). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Sailsjs Skipper	4 years ago
CVE-2022-28397	Unrestricted File Upload in ghost (CVE-2022-28397) vulnerability in ghost (CVE-2022-28397). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.42.1` or later.	Critical	Cwe 434 Ghost	4 years ago
CVE-2022-27260	Unrestricted File Upload in buttercms (CVE-2022-27260) vulnerability in buttercms (CVE-2022-27260). Successful exploitation can lead to full system takeover.	Critical	Cwe 434 Buttercms	4 years ago
CVE-2021-37291	SQL Injection in sqli (CVE-2021-37291) SQL injection in sqli (CVE-2021-37291). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Kevinlab +1	4 years ago
CVE-2022-26645	Unrestricted File Upload in oretnom23 (CVE-2022-26645) vulnerability in oretnom23 (CVE-2022-26645). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Cwe 434 Oretnom23 +1	4 years ago
CVE-2022-26646	Vulnerability in oretnom23 (CVE-2022-26646) vulnerability in oretnom23 (CVE-2022-26646). Successful exploitation can lead to full system takeover.	Critical	Oretnom23 Banking System	4 years ago
CVE-2021-46007	OS Command Injection in totolink (CVE-2021-46007) OS command injection in totolink (CVE-2021-46007). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Totolink Ar3100R Firmware Ar3100R	4 years ago
CVE-2021-46009	Vulnerability in totolink (CVE-2021-46009) vulnerability in totolink (CVE-2021-46009). Successful exploitation can lead to full system takeover.	Critical	Cwe 306 Totolink A3100R Firmware A3100R	4 years ago
CVE-2022-25521	UNNO v03.11.00 was discovered to contain access control issue. UNNO v03.11.00 was discovered to contain access control issue.	Critical	Cwe 798 Nuuo Network Video Recorder Firmware	4 years ago
CVE-2010-2861 KEV	[KEV] Path Traversal in Adobe coldfusion (CVE-2010-2861) path traversal in Adobe coldfusion (CVE-2010-2861). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Adobe Coldfusion Cwe 22 Path Traversal	4 years ago
CVE-2018-1273 KEV	[KEV] Code Injection in Vmware tanzu vmware-tanzu (CVE-2018-1273) code injection in Vmware tanzu vmware-tanzu (CVE-2018-1273). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Vmware Tanzu Spring Data Commons Cwe 94 Remote Code Execution +8	4 years ago
CVE-2018-11138 KEV	[KEV] OS Command Injection in Quest kace-system-management-appliance (CVE-2018-11138) OS command injection in Quest kace-system-management-appliance (CVE-2018-11138). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Quest Kace System Management Appliance Cwe 78 PHP	4 years ago
CVE-2019-15107 KEV	[KEV] OS Command Injection in webmin (CVE-2019-15107) OS command injection in webmin (CVE-2019-15107). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Webmin Cwe 78	4 years ago
CVE-2021-42237 KEV	[KEV] Unsafe Deserialization in Sitecore xp (CVE-2021-42237) vulnerability in Sitecore xp (CVE-2021-42237). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Sitecore Xp Cwe 502 Insecure Deserialization +1	4 years ago
CVE-2022-24292	Vulnerability in dos (CVE-2022-24292) vulnerability in dos (CVE-2022-24292). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Denial of Service Hp Laserjet Pro M453 M454 W1Y40A Firmware +135	4 years ago
CVE-2022-24293	Vulnerability in dos (CVE-2022-24293) vulnerability in dos (CVE-2022-24293). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Denial of Service Hp Laserjet Pro M453 M454 W1Y40A Firmware +135	4 years ago
CVE-2021-45756	Vulnerability in asus (CVE-2021-45756) vulnerability in asus (CVE-2021-45756). Successful exploitation can lead to full system takeover.	Critical	Cwe 120 Asus Rt Ac68U Firmware Rt Ac68U +2	4 years ago
CVE-2022-25578	Code Injection in taogogo (CVE-2022-25578) code injection in taogogo (CVE-2022-25578). Successful exploitation can lead to full system takeover.	Critical	Cwe 94 Taogogo Taocms	4 years ago
CVE-2021-45834	Unrestricted File Upload in opendocman (CVE-2021-45834) vulnerability in opendocman (CVE-2021-45834). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 434 Opendocman	4 years ago
CVE-2021-44087	Vulnerability in attendance-and-payroll-system-project (CVE-2021-44087) vulnerability in attendance-and-payroll-system-project (CVE-2021-44087). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution Attendance And Payroll System Project Attendance And Payroll System	4 years ago
CVE-2021-44088	SQL Injection in sqli (CVE-2021-44088) SQL injection in sqli (CVE-2021-44088). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Attendance And Payroll System Project Attendance And Payroll System	4 years ago
CVE-2021-44620	Command Injection in totolink (CVE-2021-44620) command injection in totolink (CVE-2021-44620). Successful exploitation can lead to full system takeover.	Critical	Cwe 77 Totolink A3100R Firmware A3100R	4 years ago
CVE-2022-23383	Authentication Bypass in yzmcms (CVE-2022-23383) authentication bypass in yzmcms (CVE-2022-23383). Confidential information can be exposed externally.	Critical	Cwe 287 Yzmcms	4 years ago
CVE-2022-0715	Authentication Bypass in schneider-electric (CVE-2022-0715) authentication bypass in schneider-electric (CVE-2022-0715). Data can be tampered with by attackers.	Critical	Cwe 287 Cwe 345 Schneider Electric Smt Series 1015 Ups Firmware +65	4 years ago
CVE-2022-26486 KEV	[KEV] Use-After-Free in Mozilla firefox (CVE-2022-26486) vulnerability in Mozilla firefox (CVE-2022-26486). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Mozilla Firefox Cwe 416 Firefox Focus +2	4 years ago
CVE-2024-22051	Vulnerability in commonmarker (CVE-2024-22051) vulnerability in commonmarker (CVE-2024-22051). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.23.4` or later.	Critical	Remote Code Execution Cwe 190 Github Cmark Gfm +2	4 years ago
CVE-2022-25089	Printix Secure Cloud Print Management 1.3.1035.0 incorrectly uses Privileged APIs. Printix Secure Cloud Print Management 1.3.1035.0 incorrectly uses Privileged APIs.	Critical	Cwe 269 Kofax Printix	4 years ago
CVE-2012-0507 KEV	[KEV] Vulnerability in Oracle java-se (CVE-2012-0507) vulnerability in Oracle java-se (CVE-2012-0507). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Oracle Java Se Java Denial of Service +10	4 years ago
CVE-2012-1723 KEV	[KEV] Vulnerability in Oracle java-se (CVE-2012-1723) vulnerability in Oracle java-se (CVE-2012-1723). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Oracle Java Se Java Cwe 284 +9	4 years ago
CVE-2012-4681 KEV	[KEV] Vulnerability in Oracle java-se (CVE-2012-4681) vulnerability in Oracle java-se (CVE-2012-4681). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	Critical	Oracle Java Se Java Cwe 284 +7	4 years ago
CVE-2016-1019 KEV	[KEV] Vulnerability in Adobe flash-player (CVE-2016-1019) vulnerability in Adobe flash-player (CVE-2016-1019). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Adobe Flash Player Denial of Service Flash Player Desktop Runtime +15	4 years ago
CVE-2020-1938 KEV	[KEV] Privilege Escalation in org.apache.tomcat.embed:tomcat-embed-core (CVE-2020-1938) vulnerability in org.apache.tomcat.embed:tomcat-embed-core (CVE-2020-1938). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `7.0.100` or later.	Critical	Apache Tomcat Remote Code Execution Geode +25	4 years ago
CVE-2022-25060	OS Command Injection in tp-link (CVE-2022-25060) OS command injection in tp-link (CVE-2022-25060). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Tp Link Tl Wr840N Firmware Tl Wr840N	4 years ago
CVE-2022-25064	OS Command Injection in tp-link (CVE-2022-25064) OS command injection in tp-link (CVE-2022-25064). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 78 Tp Link Tl Wr840N Firmware +1	4 years ago
CVE-2022-25061	OS Command Injection in tp-link (CVE-2022-25061) OS command injection in tp-link (CVE-2022-25061). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Tp Link Tl Wr840N Firmware Tl Wr840N	4 years ago
CVE-2021-42952	Vulnerability in zepl (CVE-2021-42952) vulnerability in zepl (CVE-2021-42952). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Zepl	4 years ago
CVE-2022-0664	Vulnerability in netmaker (CVE-2022-0664) vulnerability in netmaker (CVE-2022-0664). Successful exploitation can lead to full system takeover.	Critical	Cwe 321 Netmaker	4 years ago
CVE-2022-22916	Vulnerability in zoneland (CVE-2022-22916) vulnerability in zoneland (CVE-2022-22916). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Zoneland O2Oa	4 years ago
CVE-2022-23304	Vulnerability in w1fi (CVE-2022-23304) vulnerability in w1fi (CVE-2022-23304). Successful exploitation can lead to full system takeover.	Critical	Cwe 203 W1Fi Hostapd Wpa Supplicant +2	4 years ago
CVE-2022-23303	Vulnerability in w1fi (CVE-2022-23303) vulnerability in w1fi (CVE-2022-23303). Successful exploitation can lead to full system takeover.	Critical	Cwe 203 W1Fi Hostapd Wpa Supplicant +2	4 years ago
CVE-2021-45420	Information Disclosure in dos (CVE-2021-45420) vulnerability in dos (CVE-2021-45420). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Denial of Service Cwe 200 Cwe 306 +4	4 years ago
CVE-2020-0796 KEV	[KEV] Buffer Overflow in Microsoft smbv3 (CVE-2020-0796) vulnerability in Microsoft smbv3 (CVE-2020-0796). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Microsoft Smbv3 Cwe 119 Remote Code Execution +4	4 years ago

Vulnerabilities

🍪 About cookies