Sign in Sign up
JA · EN · FR
SecPulse

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Categories
All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Tag groups
All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Popular tags (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
ID Title
CVE-2017-15944 KEV [KEV] Vulnerability in Palo alto networks palo-alto-networks (CVE-2017-15944)
vulnerability in Palo alto networks palo-alto-networks (CVE-2017-15944). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-36526 Authentication Bypass in dlink (CVE-2022-36526)
authentication bypass in dlink (CVE-2022-36526). Data can be tampered with by attackers.
CVE-2022-36524 Authentication Bypass in dlink (CVE-2022-36524)
authentication bypass in dlink (CVE-2022-36524). Confidential information can be exposed externally.
CVE-2022-27925 KEV [KEV] Path Traversal in Synacor zimbra-collaboration-suite-zcs (CVE-2022-27925)
path traversal in Synacor zimbra-collaboration-suite-zcs (CVE-2022-27925). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2022-20866 Vulnerability in cisco (CVE-2022-20866)
vulnerability in cisco (CVE-2022-20866). Confidential information can be exposed externally.
CVE-2022-36124 Vulnerability in apache-avro (CVE-2022-36124)
vulnerability in apache-avro (CVE-2022-36124). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.14.0` or later.
CVE-2022-34713 KEV [KEV] Vulnerability in Microsoft windows (CVE-2022-34713)
vulnerability in Microsoft windows (CVE-2022-34713). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-30333 KEV [KEV] Path Traversal in Rarlab unrar (CVE-2022-30333)
path traversal in Rarlab unrar (CVE-2022-30333). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.
CVE-2022-2356 Unrestricted File Upload in wordpress (CVE-2022-2356)
vulnerability in wordpress (CVE-2022-2356). Successful exploitation can lead to full system takeover.
CVE-2022-27924 KEV [KEV] Vulnerability in Synacor zimbra-collaboration-suite-zcs (CVE-2022-27924)
vulnerability in Synacor zimbra-collaboration-suite-zcs (CVE-2022-27924). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.
CVE-2022-37315 graphql-go (aka GraphQL for Go) through 0.8.0 has infinite recursion in the type definition parser.
graphql-go (aka GraphQL for Go) through 0.8.0 has infinite recursion in the type definition parser.
CVE-2022-26138 KEV [KEV] Vulnerability in Atlassian confluence (CVE-2022-26138)
vulnerability in Atlassian confluence (CVE-2022-26138). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-24992 Path Traversal in path-traversal (CVE-2022-24992)
path traversal in path-traversal (CVE-2022-24992). Confidential information can be exposed externally.
CVE-2022-29709 SQL Injection in sqli (CVE-2022-29709)
SQL injection in sqli (CVE-2022-29709). Confidential information can be exposed externally.
CVE-2022-34169 Vulnerability in apache (CVE-2022-34169)
vulnerability in apache (CVE-2022-34169). Data can be tampered with by attackers.
CVE-2022-32450 Vulnerability in anydesk (CVE-2022-32450)
vulnerability in anydesk (CVE-2022-32450). Data can be tampered with by attackers.
CVE-2021-42923 Vulnerability in showmypc (CVE-2021-42923)
vulnerability in showmypc (CVE-2021-42923). Successful exploitation can lead to full system takeover.
CVE-2022-32119 Unrestricted File Upload in arox (CVE-2022-32119)
vulnerability in arox (CVE-2022-32119). Successful exploitation can lead to full system takeover.
CVE-2022-30024 Vulnerability in tp-link (CVE-2022-30024)
vulnerability in tp-link (CVE-2022-30024). Successful exploitation can lead to full system takeover.
CVE-2022-32114 Unrestricted File Upload in strapi (CVE-2022-32114)
vulnerability in strapi (CVE-2022-32114). Successful exploitation can lead to full system takeover.
CVE-2021-36667 OS Command Injection in druva (CVE-2021-36667)
OS command injection in druva (CVE-2021-36667). Successful exploitation can lead to full system takeover.
CVE-2021-36665 Unsafe Deserialization in druva (CVE-2021-36665)
vulnerability in druva (CVE-2021-36665). Successful exploitation can lead to full system takeover.
CVE-2021-36666 Vulnerability in druva (CVE-2021-36666)
vulnerability in druva (CVE-2021-36666). Successful exploitation can lead to full system takeover.
CVE-2021-36668 Vulnerability in druva (CVE-2021-36668)
vulnerability in druva (CVE-2021-36668). Successful exploitation can lead to full system takeover.
CVE-2022-22047 KEV [KEV] Vulnerability in Microsoft windows (CVE-2022-22047)
vulnerability in Microsoft windows (CVE-2022-22047). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-24139 Vulnerability in iobit (CVE-2022-24139)
vulnerability in iobit (CVE-2022-24139). Successful exploitation can lead to full system takeover.
CVE-2022-24138 Vulnerability in iobit (CVE-2022-24138)
vulnerability in iobit (CVE-2022-24138). Successful exploitation can lead to full system takeover.
CVE-2022-33971 Vulnerability in dos (CVE-2022-33971)
vulnerability in dos (CVE-2022-33971). Successful exploitation can lead to full system takeover.
CVE-2022-34151 Vulnerability in omron (CVE-2022-34151)
vulnerability in omron (CVE-2022-34151). Successful exploitation can lead to full system takeover.
CVE-2022-32384 Out-of-Bounds Write in tendacn (CVE-2022-32384)
out-of-bounds write in tendacn (CVE-2022-32384). Successful exploitation can lead to full system takeover.
CVE-2022-25898 Vulnerability in kjur (CVE-2022-25898)
vulnerability in kjur (CVE-2022-25898). Risk of unauthorized operations or information disclosure.
CVE-2022-26925 KEV [KEV] Vulnerability in Microsoft windows (CVE-2022-26925)
vulnerability in Microsoft windows (CVE-2022-26925). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-30533 KEV [KEV] Authorization Flaw in Google chromium-popupblocker (CVE-2021-30533)
vulnerability in Google chromium-popupblocker (CVE-2021-30533). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-4034 KEV [KEV] Out-of-Bounds Write in Red hat red-hat (CVE-2021-4034)
out-of-bounds write in Red hat red-hat (CVE-2021-4034). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2021-30983 KEV [KEV] Buffer Overflow in Apple ios-and-ipados (CVE-2021-30983)
vulnerability in Apple ios-and-ipados (CVE-2021-30983). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-3837 KEV [KEV] Out-of-Bounds Write in Apple multiple-products (CVE-2020-3837)
out-of-bounds write in Apple multiple-products (CVE-2020-3837). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-9907 KEV [KEV] Out-of-Bounds Write in Apple multiple-products (CVE-2020-9907)
out-of-bounds write in Apple multiple-products (CVE-2020-9907). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-8605 KEV [KEV] Use-After-Free in Apple multiple-products (CVE-2019-8605)
vulnerability in Apple multiple-products (CVE-2019-8605). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2018-4344 KEV [KEV] Buffer Overflow in Apple multiple-products (CVE-2018-4344)
vulnerability in Apple multiple-products (CVE-2018-4344). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-21046 Privilege Escalation in privilege-escalation (CVE-2020-21046)
vulnerability in privilege-escalation (CVE-2020-21046). Successful exploitation can lead to full system takeover.
CVE-2022-21952 Vulnerability in dos (CVE-2022-21952)
vulnerability in dos (CVE-2022-21952). Risk of unauthorized operations or information disclosure.
CVE-2021-45025 Vulnerability in rocketsoftware (CVE-2021-45025)
vulnerability in rocketsoftware (CVE-2021-45025). Confidential information can be exposed externally.
CVE-2022-26173 Cross-Site Request Forgery (CSRF) in csrf (CVE-2022-26173)
vulnerability in csrf (CVE-2022-26173). Successful exploitation can lead to full system takeover.
CVE-2022-30023 OS Command Injection in tenda (CVE-2022-30023)
OS command injection in tenda (CVE-2022-30023). Successful exploitation can lead to full system takeover.
CVE-2022-24946 Vulnerability in dos (CVE-2022-24946)
vulnerability in dos (CVE-2022-24946). Risk of unauthorized operations or information disclosure.
CVE-2022-30190 KEV [KEV] Vulnerability in Microsoft windows (CVE-2022-30190)
vulnerability in Microsoft windows (CVE-2022-30190). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2022-32981 Vulnerability in linux (CVE-2022-32981)
vulnerability in linux (CVE-2022-32981). Successful exploitation can lead to full system takeover.
CVE-2022-30075 Vulnerability in tp-link (CVE-2022-30075)
vulnerability in tp-link (CVE-2022-30075). Successful exploitation can lead to full system takeover.
CVE-2021-38163 KEV [KEV] Vulnerability in Sap netweaver (CVE-2021-38163)
vulnerability in Sap netweaver (CVE-2021-38163). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2016-2386 KEV [KEV] SQL Injection in Sap netweaver (CVE-2016-2386)
SQL injection in Sap netweaver (CVE-2016-2386). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →