Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2023-22515 KEV	[KEV] Vulnerability in Atlassian confluence-data-center-and-server (CVE-2023-22515) vulnerability in Atlassian confluence-data-center-and-server (CVE-2023-22515). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Atlassian Confluence Data Center And Server	2 years ago
CVE-2023-40044 KEV	[KEV] Unsafe Deserialization in Progress ws-ftp-server (CVE-2023-40044) vulnerability in Progress ws-ftp-server (CVE-2023-40044). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Progress Ws Ftp Server Cwe 502	2 years ago
CVE-2023-42824 KEV	[KEV] Vulnerability in Apple ios-and-ipados (CVE-2023-42824) vulnerability in Apple ios-and-ipados (CVE-2023-42824). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Ios And Ipados	2 years ago
CVE-2023-43261	Vulnerability in milesight (CVE-2023-43261) vulnerability in milesight (CVE-2023-43261). Confidential information can be exposed externally.	High	Cwe 532 Milesight Ur5X Firmware Ur51 +10	2 years ago
CVE-2023-42793 KEV	[KEV] Vulnerability in Jetbrains teamcity (CVE-2023-42793) vulnerability in Jetbrains teamcity (CVE-2023-42793). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Jetbrains Teamcity Cwe 288	2 years ago
CVE-2023-28229 KEV	[KEV] Vulnerability in Microsoft windows-cng-key-isolation-service (CVE-2023-28229) vulnerability in Microsoft windows-cng-key-isolation-service (CVE-2023-28229). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cng Key Isolation Service Cwe 591	2 years ago
CVE-2023-43176	Unsafe Deserialization in deserialization (CVE-2023-43176) vulnerability in deserialization (CVE-2023-43176). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 502 Afterlogic Aurora Files	2 years ago
CVE-2023-4211 KEV	[KEV] Use-After-Free in Arm :unknown: (CVE-2023-4211) vulnerability in Arm :unknown: (CVE-2023-4211). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `SoCVersion:2023-10-05` or later.	High	Arm Mali Gpu Kernel Driver Cwe 416	2 years ago
CVE-2023-5217 KEV	[KEV] Out-of-Bounds Write in Google electron (CVE-2023-5217) out-of-bounds write in Google electron (CVE-2023-5217). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `27.0.0-beta.8` or later.	High	Google Chromium Libvpx Cwe 787	2 years ago
CVE-2023-41450	Code Injection in phpkobo (CVE-2023-41450) code injection in phpkobo (CVE-2023-41450). Successful exploitation can lead to full system takeover.	High	Cwe 94 Phpkobo Ajaxnewsticker	2 years ago
CVE-2018-14667 KEV	[KEV] Code Injection in Red hat red-hat (CVE-2018-14667) code injection in Red hat red-hat (CVE-2018-14667). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Red Hat Jboss Richfaces Framework Cwe 94	2 years ago
CVE-2023-41452	Cross-Site Request Forgery (CSRF) in phpkobo (CVE-2023-41452) vulnerability in phpkobo (CVE-2023-41452). Successful exploitation can lead to full system takeover.	High	PHP Cwe 352 Phpkobo Ajaxnewsticker	2 years ago
CVE-2023-4934	Vulnerability in usta (CVE-2023-4934) vulnerability in usta (CVE-2023-4934). Successful exploitation can lead to full system takeover.	High	Authentication Bypass Cwe 639 Usta Aybs	2 years ago
CVE-2023-43856	Vulnerability in iteachyou (CVE-2023-43856) vulnerability in iteachyou (CVE-2023-43856). Confidential information can be exposed externally.	High	Java Cwe 552 Iteachyou Dreamer Cms	2 years ago
CVE-2023-43278	Cross-Site Request Forgery (CSRF) in csrf (CVE-2023-43278) vulnerability in csrf (CVE-2023-43278). Successful exploitation can lead to full system takeover.	High	PHP Cross-Site Request Forgery Cwe 352 Seacms	2 years ago
CVE-2023-42753	Out-of-Bounds Write in linux (CVE-2023-42753) out-of-bounds write in linux (CVE-2023-42753). Successful exploitation can lead to full system takeover.	High	Cwe 787 Linux Linux Kernel Redhat +3	2 years ago
CVE-2023-41991 KEV	[KEV] Vulnerability in Apple multiple-products (CVE-2023-41991) vulnerability in Apple multiple-products (CVE-2023-41991). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Multiple Products Cwe 295	2 years ago
CVE-2023-41992 KEV	[KEV] Vulnerability in Apple multiple-products (CVE-2023-41992) vulnerability in Apple multiple-products (CVE-2023-41992). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Multiple Products Cwe 754	2 years ago
CVE-2023-41993 KEV	[KEV] Vulnerability in Apple java (CVE-2023-41993) vulnerability in Apple java (CVE-2023-41993). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `1.8.0, 8.0.411` or later.	High	Apple Multiple Products Cwe 754 Bitnami +3	2 years ago
CVE-2023-41179 KEV	[KEV] Vulnerability in Trend micro trend-micro (CVE-2023-41179) vulnerability in Trend micro trend-micro (CVE-2023-41179). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Trend Micro Apex One And Worry Free Business Security	2 years ago
CVE-2023-4853	Vulnerability in dos (CVE-2023-4853) vulnerability in dos (CVE-2023-4853). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 148 Cwe 863 Quarkus +13	2 years ago
CVE-2023-38886	OS Command Injection in dolibarr (CVE-2023-38886) OS command injection in dolibarr (CVE-2023-38886). Successful exploitation can lead to full system takeover.	High	Cwe 78 Dolibarr Dolibarr Erpcrm	2 years ago
CVE-2023-38887	Unrestricted File Upload in dolibarr (CVE-2023-38887) vulnerability in dolibarr (CVE-2023-38887). Successful exploitation can lead to full system takeover.	High	Cwe 434 Dolibarr Dolibarr Erpcrm	2 years ago
CVE-2023-40933	SQL Injection in sqli (CVE-2023-40933) SQL injection in sqli (CVE-2023-40933). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Nagios Nagios Xi	2 years ago
CVE-2023-40934	SQL Injection in sqli (CVE-2023-40934) SQL injection in sqli (CVE-2023-40934). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Nagios Nagios Xi	2 years ago
CVE-2023-28434 KEV	[KEV] Privilege Escalation in minio (CVE-2023-28434) vulnerability in minio (CVE-2023-28434). Risk of unauthorized operations or information disclosure. Exploitable via ``PostPolicyBucket``. Listed in CISA KEV — actively exploited.	High	Minio Cwe 269	2 years ago
CVE-2023-41595	An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password. An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password.	High	Cwe 798 Vaxilu X Ui	2 years ago
CVE-2022-22265 KEV	[KEV] Vulnerability in Samsung mobile-devices (CVE-2022-22265) vulnerability in Samsung mobile-devices (CVE-2022-22265). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Samsung Mobile Devices Cwe 703	2 years ago
CVE-2014-8361 KEV	[KEV] Vulnerability in Realtek sdk (CVE-2014-8361) vulnerability in Realtek sdk (CVE-2014-8361). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Realtek Sdk Cwe 20	2 years ago
CVE-2017-6884 KEV	[KEV] OS Command Injection in Zyxel emg2926-routers (CVE-2017-6884) OS command injection in Zyxel emg2926-routers (CVE-2017-6884). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Zyxel Emg2926 Routers Cwe 78 Emg2926 Firmware +1	2 years ago
CVE-2021-3129 KEV	[KEV] Vulnerability in Laravel ignition (CVE-2021-3129) vulnerability in Laravel ignition (CVE-2021-3129). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Laravel Ignition	2 years ago
CVE-2023-41325	Vulnerability in trustedfirmware (CVE-2023-41325) vulnerability in trustedfirmware (CVE-2023-41325). Confidential information can be exposed externally. Exploitable via ``shdr_verify_signature``.	High	Cwe 415 Trustedfirmware Op Tee	2 years ago
CVE-2023-4664	Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege... Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege...	High	Privilege Escalation Cwe 276 Adobe Connect	2 years ago
CVE-2023-4665	Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows... Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows...	High	Privilege Escalation Cwe 279 Cwe 732 Adobe +1	2 years ago
CVE-2023-26369 KEV	[KEV] Out-of-Bounds Write in Adobe acrobat-and-reader (CVE-2023-26369) out-of-bounds write in Adobe acrobat-and-reader (CVE-2023-26369). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Adobe Acrobat And Reader Cwe 787	2 years ago
CVE-2023-35674 KEV	[KEV] Vulnerability in Android platform/frameworks/base (CVE-2023-35674) vulnerability in Android platform/frameworks/base (CVE-2023-35674). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `13:2023-09-01` or later.	High	Android Framework	2 years ago
CVE-2023-4863 KEV	[KEV] Out-of-Bounds Write in Google libwebp-sys2 (CVE-2023-4863) out-of-bounds write in Google libwebp-sys2 (CVE-2023-4863). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.1.8` or later.	High	Google Chromium Webp Cwe 787	2 years ago
CVE-2023-36761 KEV	[KEV] Vulnerability in Microsoft word (CVE-2023-36761) vulnerability in Microsoft word (CVE-2023-36761). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Word Cwe 668	2 years ago
CVE-2023-36802 KEV	[KEV] Use-After-Free in Microsoft streaming-service-proxy (CVE-2023-36802) vulnerability in Microsoft streaming-service-proxy (CVE-2023-36802). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Streaming Service Proxy Cwe 416	2 years ago
CVE-2023-41064 KEV	[KEV] Vulnerability in Apple ios (CVE-2023-41064) vulnerability in Apple ios (CVE-2023-41064). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple iOS Ipados And Macos +1	2 years ago
CVE-2023-41061 KEV	[KEV] Vulnerability in Apple ios (CVE-2023-41061) vulnerability in Apple ios (CVE-2023-41061). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple iOS Ipados And Watchos	2 years ago
CVE-2023-40271	Vulnerability in trustedfirmware (CVE-2023-40271) vulnerability in trustedfirmware (CVE-2023-40271). Data can be tampered with by attackers.	High	Cwe 697 Trustedfirmware Trusted Firmware M	2 years ago
CVE-2023-4244	Use-After-Free in privilege-escalation (CVE-2023-4244) vulnerability in privilege-escalation (CVE-2023-4244). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Cwe 416 Linux Linux Kernel +2	2 years ago
CVE-2023-33246 KEV	[KEV] Code Injection in Apache rocketmq (CVE-2023-33246) code injection in Apache rocketmq (CVE-2023-33246). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apache Rocketmq Cwe 94	2 years ago
CVE-2023-4781	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.	High	Cwe 122 Vim Debian Debian Linux +2	2 years ago
CVE-2023-3375	Unrestricted File Upload in bookreen (CVE-2023-3375) vulnerability in bookreen (CVE-2023-3375). Successful exploitation can lead to full system takeover.	High	Cwe 434 Bookreen	2 years ago
CVE-2023-4733	Use After Free in GitHub repository vim/vim prior to 9.0.1840. Use After Free in GitHub repository vim/vim prior to 9.0.1840.	High	Cwe 416 Vim Fedoraproject Fedora +2	2 years ago
CVE-2023-4750	Use After Free in GitHub repository vim/vim prior to 9.0.1857. Use After Free in GitHub repository vim/vim prior to 9.0.1857.	High	Cwe 416 Vim Fedoraproject Fedora +2	2 years ago
CVE-2023-4736	Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833. Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.	High	Cwe 426 Vim Apple macOS	3 years ago
CVE-2023-4735	Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.	High	Cwe 787 Vim Apple macOS	3 years ago

Vulnerabilities

🍪 About cookies