Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2019-9201	Vulnerability in phoenixcontact (CVE-2019-9201) vulnerability in phoenixcontact (CVE-2019-9201). Successful exploitation can lead to full system takeover.	Critical	Cwe 306 Phoenixcontact Ilc 131 Eth Firmware Ilc 131 Eth +14	7 years ago
CVE-2018-18861	Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command. Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command.	Critical	Remote Code Execution Cwe 119 Pcman Ftp Server	7 years ago
CVE-2018-9206	Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0	Critical	Cwe 434 Jquery File Upload Project Jquery File Upload	7 years ago
CVE-2018-10627	Information Disclosure in echelon (CVE-2018-10627) vulnerability in echelon (CVE-2018-10627). Successful exploitation can lead to full system takeover.	Critical	Cwe 200 Echelon Smartserver 1 Firmware Smartserver 1 +4	8 years ago
CVE-2018-8855	Vulnerability in echelon (CVE-2018-8855) vulnerability in echelon (CVE-2018-8855). Successful exploitation can lead to full system takeover.	Critical	Cwe 319 Echelon Smartserver 1 Firmware Smartserver 1 +6	8 years ago
CVE-2018-8859	Authentication Bypass in echelon (CVE-2018-8859) authentication bypass in echelon (CVE-2018-8859). Successful exploitation can lead to full system takeover.	Critical	Cwe 288 Cwe 287 Echelon Smartserver 1 Firmware +7	8 years ago
CVE-2018-12649	Vulnerability in misp-project (CVE-2018-12649) vulnerability in misp-project (CVE-2018-12649). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 307 Misp Project Misp	8 years ago
CVE-2018-0101	Vulnerability in cisco (CVE-2018-0101) vulnerability in cisco (CVE-2018-0101). Successful exploitation can lead to full system takeover.	Critical	Cwe 415 Cisco Adaptive Security Appliance Software Secure Firewall Threat Defense	8 years ago
CVE-2017-8046	Vulnerability in spring (CVE-2017-8046) vulnerability in spring (CVE-2017-8046). Successful exploitation can lead to full system takeover.	Critical	Java Spring Cwe 20 Vmware +3	8 years ago
CVE-2017-18001	Vulnerability in trustwave (CVE-2017-18001) vulnerability in trustwave (CVE-2017-18001). Successful exploitation can lead to full system takeover.	Critical	Cwe 306 Trustwave Secure Web Gateway	8 years ago
CVE-2017-17992	Path Traversal in path-traversal (CVE-2017-17992) path traversal in path-traversal (CVE-2017-17992). Successful exploitation can lead to full system takeover.	Critical	PHP Path Traversal Cwe 22 Iwcnetwork +1	8 years ago
CVE-2014-0121	Authentication Bypass in hawt (CVE-2014-0121) authentication bypass in hawt (CVE-2014-0121). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Hawt Hawtio Redhat +1	8 years ago
CVE-2014-3630	XXE (XML External Entity) in dos (CVE-2014-3630) vulnerability in dos (CVE-2014-3630). Successful exploitation can lead to full system takeover.	Critical	Java Denial of Service Cwe 611 Lightbend +2	8 years ago
CVE-2014-9515	Unsafe Deserialization in dozer-project (CVE-2014-9515) vulnerability in dozer-project (CVE-2014-9515). Successful exploitation can lead to full system takeover.	Critical	Cwe 502 Dozer Project Dozer	8 years ago
CVE-2017-17974	Vulnerability in basystems (CVE-2017-17974) vulnerability in basystems (CVE-2017-17974). Successful exploitation can lead to full system takeover.	Critical	Basystems Bas920 Firmware Bas920 Isc2000 Firmware +1	8 years ago
CVE-2017-17968	Buffer Overflow in xi-soft (CVE-2017-17968) vulnerability in xi-soft (CVE-2017-17968). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Xi Soft Nettransport Download Manager	8 years ago
CVE-2014-4914	SQL Injection in sqli (CVE-2014-4914) SQL injection in sqli (CVE-2014-4914). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Zend Zend Framework +2	8 years ago
CVE-2017-17951	SQL Injection in sqli (CVE-2017-17951) SQL injection in sqli (CVE-2017-17951). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17957	PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter. PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.	Critical	PHP SQL Injection Cwe 89 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17959	SQL Injection in sqli (CVE-2017-17959) SQL injection in sqli (CVE-2017-17959). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-5641	Unsafe Deserialization in apache (CVE-2017-5641) vulnerability in apache (CVE-2017-5641). Successful exploitation can lead to full system takeover.	Critical	Java Apache Remote Code Execution Insecure Deserialization +4	8 years ago
CVE-2017-17932	Buffer Overflow in dos (CVE-2017-17932) vulnerability in dos (CVE-2017-17932). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 119 Allmediaserver	8 years ago
CVE-2014-8389	OS Command Injection in airlive (CVE-2014-8389) OS command injection in airlive (CVE-2014-8389). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Airlive Bu 3026 Firmware Bu 3026 +8	8 years ago
CVE-2015-6237	Authentication Bypass in tripwire (CVE-2015-6237) authentication bypass in tripwire (CVE-2015-6237). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Tripwire Ip360	8 years ago
CVE-2015-7669	Path Traversal in wordpress (CVE-2015-7669) path traversal in wordpress (CVE-2015-7669). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Path Traversal Cwe 22 +1	8 years ago
CVE-2017-9944	Vulnerability in siemens (CVE-2017-9944) vulnerability in siemens (CVE-2017-9944). Successful exploitation can lead to full system takeover.	Critical	Cwe 288 Cwe 269 Siemens 7Kt Pac1200 Data Manager Firmware +1	8 years ago
CVE-2017-17900	SQL Injection in sqli (CVE-2017-17900) SQL injection in sqli (CVE-2017-17900). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Dolibarr +1	8 years ago
CVE-2017-17906	PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter. PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.	Critical	PHP SQL Injection Cwe 89 Car Rental Script Project +1	8 years ago
CVE-2017-17928	SQL Injection in sqli (CVE-2017-17928) SQL injection in sqli (CVE-2017-17928). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Ordermanagementscript +1	8 years ago
CVE-2017-17931	PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter. PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter.	Critical	PHP SQL Injection Cwe 89 Resume Clone Script Project +1	8 years ago
CVE-2017-17877	Vulnerability in valvesoftware (CVE-2017-17877) vulnerability in valvesoftware (CVE-2017-17877). Successful exploitation can lead to full system takeover.	Critical	Valvesoftware Steam Link Firmware Steam Link	8 years ago
CVE-2017-17878	Vulnerability in valvesoftware (CVE-2017-17878) vulnerability in valvesoftware (CVE-2017-17878). Successful exploitation can lead to full system takeover.	Critical	Cwe 327 Valvesoftware Steam Link Firmware Steam Link	8 years ago
CVE-2017-17892	SQL Injection in sqli (CVE-2017-17892) SQL injection in sqli (CVE-2017-17892). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Readymade Video Sharing Script Project +1	8 years ago
CVE-2017-17895	Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI. Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.	Critical	SQL Injection Cwe 89 Basic Job Site Script Project Basic Job Site Script	8 years ago
CVE-2017-17897	SQL Injection in sqli (CVE-2017-17897) SQL injection in sqli (CVE-2017-17897). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Dolibarr +1	8 years ago
CVE-2017-17899	SQL Injection in sqli (CVE-2017-17899) SQL injection in sqli (CVE-2017-17899). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Dolibarr +1	8 years ago
CVE-2017-17870	SQL Injection in sqli (CVE-2017-17870) SQL injection in sqli (CVE-2017-17870). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Jbuildozer	8 years ago
CVE-2017-17871	SQL Injection in sqli (CVE-2017-17871) SQL injection in sqli (CVE-2017-17871). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Jextn Jextn Question And Answer	8 years ago
CVE-2017-17872	SQL Injection in sqli (CVE-2017-17872) SQL injection in sqli (CVE-2017-17872). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Jextn Jextn Video Gallery	8 years ago
CVE-2017-17873	Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI. Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.	Critical	PHP SQL Injection Cwe 89 Vanguard Project +1	8 years ago
CVE-2017-17875	SQL Injection in sqli (CVE-2017-17875) SQL injection in sqli (CVE-2017-17875). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Jextn Jextn Faq Pro	8 years ago
CVE-2017-17849	Buffer Overflow in getgosoft (CVE-2017-17849) vulnerability in getgosoft (CVE-2017-17849). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Getgosoft Getgo Download Manager	8 years ago
CVE-2017-16727	Vulnerability in moxa (CVE-2017-16727) vulnerability in moxa (CVE-2017-16727). Confidential information can be exposed externally.	Critical	Cwe 255 Cwe 521 Moxa Nport W2150A Firmware +3	8 years ago
CVE-2015-7224	Authentication Bypass in puppet (CVE-2015-7224) authentication bypass in puppet (CVE-2015-7224). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Puppet Puppetlabs Mysql	8 years ago
CVE-2017-17027	Buffer Overflow in qnap (CVE-2017-17027) vulnerability in qnap (CVE-2017-17027). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Qnap Qts	8 years ago
CVE-2017-17028	Buffer Overflow in qnap (CVE-2017-17028) vulnerability in qnap (CVE-2017-17028). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Qnap Qts	8 years ago
CVE-2017-17029	Buffer Overflow in qnap (CVE-2017-17029) vulnerability in qnap (CVE-2017-17029). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Qnap Qts	8 years ago
CVE-2017-17030	Buffer Overflow in qnap (CVE-2017-17030) vulnerability in qnap (CVE-2017-17030). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Qnap Qts	8 years ago
CVE-2017-17031	Buffer Overflow in qnap (CVE-2017-17031) vulnerability in qnap (CVE-2017-17031). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Qnap Qts	8 years ago
CVE-2017-17032	Buffer Overflow in qnap (CVE-2017-17032) vulnerability in qnap (CVE-2017-17032). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Qnap Qts	8 years ago

Vulnerabilities

🍪 About cookies