Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2020-22552 Vulnerability in snap7-project (CVE-2020-22552)
vulnerability in snap7-project (CVE-2020-22552). Risk of unauthorized operations or information disclosure.
CVE-2020-17003 Buffer Overflow in microsoft (CVE-2020-17003)
vulnerability in microsoft (CVE-2020-17003). Successful exploitation can lead to full system takeover.
CVE-2020-16918 Out-of-Bounds Write in microsoft (CVE-2020-16918)
out-of-bounds write in microsoft (CVE-2020-16918). Successful exploitation can lead to full system takeover.
CVE-2020-26869 Information Disclosure in arcinfo (CVE-2020-26869)
vulnerability in arcinfo (CVE-2020-26869). Confidential information can be exposed externally.
CVE-2020-26868 Vulnerability in arcinfo (CVE-2020-26868)
vulnerability in arcinfo (CVE-2020-26868). Risk of unauthorized operations or information disclosure.
CVE-2018-5354 Vulnerability in anixis (CVE-2018-5354)
vulnerability in anixis (CVE-2018-5354). Successful exploitation can lead to full system takeover.
CVE-2020-25766 Vulnerability in misp-project (CVE-2020-25766)
vulnerability in misp-project (CVE-2020-25766). Data can be tampered with by attackers.
CVE-2020-25515 Unrestricted File Upload in simple-library-management-system-project (CVE-2020-25515)
vulnerability in simple-library-management-system-project (CVE-2020-25515). Successful exploitation can lead to full system takeover.
CVE-2020-25487 SQL Injection in sqli (CVE-2020-25487)
SQL injection in sqli (CVE-2020-25487). Successful exploitation can lead to full system takeover.
CVE-2020-25514 SQL Injection in simple-library-management-system-project (CVE-2020-25514)
SQL injection in simple-library-management-system-project (CVE-2020-25514). Successful exploitation can lead to full system takeover.
CVE-2020-23451 Cross-Site Request Forgery (CSRF) in csrf (CVE-2020-23451)
vulnerability in csrf (CVE-2020-23451). Successful exploitation can lead to full system takeover.
CVE-2020-3478 Vulnerability in cisco (CVE-2020-3478)
vulnerability in cisco (CVE-2020-3478). Data can be tampered with by attackers.
CVE-2020-15711 In MISP before 2.4.129, setting a favourite homepage was not CSRF protected.
In MISP before 2.4.129, setting a favourite homepage was not CSRF protected.
CVE-2020-3973 SQL Injection in arista (CVE-2020-3973)
SQL injection in arista (CVE-2020-3973). Successful exploitation can lead to full system takeover.
CVE-2020-14969 Vulnerability in misp-project (CVE-2020-14969)
vulnerability in misp-project (CVE-2020-14969). Confidential information can be exposed externally.
CVE-2020-7488 Vulnerability in schneider-electric (CVE-2020-7488)
vulnerability in schneider-electric (CVE-2020-7488). Confidential information can be exposed externally.
CVE-2020-11725 Vulnerability in c (CVE-2020-11725)
vulnerability in c (CVE-2020-11725). Successful exploitation can lead to full system takeover.
CVE-2020-6986 Vulnerability in omron (CVE-2020-6986)
vulnerability in omron (CVE-2020-6986). Risk of unauthorized operations or information disclosure.
CVE-2020-8893 Vulnerability in misp-project (CVE-2020-8893)
vulnerability in misp-project (CVE-2020-8893). Data can be tampered with by attackers.
CVE-2020-8892 Vulnerability in misp-project (CVE-2020-8892)
vulnerability in misp-project (CVE-2020-8892). Successful exploitation can lead to full system takeover.
CVE-2019-6856 Vulnerability in dos (CVE-2019-6856)
vulnerability in dos (CVE-2019-6856). Risk of unauthorized operations or information disclosure.
CVE-2019-6857 Vulnerability in dos (CVE-2019-6857)
vulnerability in dos (CVE-2019-6857). Risk of unauthorized operations or information disclosure.
CVE-2018-7794 Vulnerability in dos (CVE-2018-7794)
vulnerability in dos (CVE-2018-7794). Risk of unauthorized operations or information disclosure.
CVE-2019-13533 Vulnerability in omron (CVE-2019-13533)
vulnerability in omron (CVE-2019-13533). Risk of unauthorized operations or information disclosure.
CVE-2019-6829 Vulnerability in dos (CVE-2019-6829)
vulnerability in dos (CVE-2019-6829). Risk of unauthorized operations or information disclosure.
CVE-2019-14749 Vulnerability in enhancesoft (CVE-2019-14749)
vulnerability in enhancesoft (CVE-2019-14749). Successful exploitation can lead to full system takeover.
CVE-2019-6819 Vulnerability in dos (CVE-2019-6819)
vulnerability in dos (CVE-2019-6819). Risk of unauthorized operations or information disclosure.
CVE-2018-7852 Vulnerability in c (CVE-2018-7852)
vulnerability in c (CVE-2018-7852). Risk of unauthorized operations or information disclosure.
CVE-2018-7821 Vulnerability in schneider-electric (CVE-2018-7821)
vulnerability in schneider-electric (CVE-2018-7821). Risk of unauthorized operations or information disclosure.
CVE-2019-10869 Path Traversal in wordpress (CVE-2019-10869)
path traversal in wordpress (CVE-2019-10869). Successful exploitation can lead to full system takeover.
CVE-2018-8611 KEV [KEV] Vulnerability in Microsoft windows (CVE-2018-8611)
vulnerability in Microsoft windows (CVE-2018-8611). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2018-19943 KEV [KEV] Cross-Site Scripting (XSS) in Qnap network-attached-storage-nas (CVE-2018-19943)
cross-site scripting in Qnap network-attached-storage-nas (CVE-2018-19943). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2017-0147 KEV [KEV] Information Disclosure in Microsoft smbv1-server (CVE-2017-0147)
vulnerability in Microsoft smbv1-server (CVE-2017-0147). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2017-0022 KEV [KEV] Information Disclosure in Microsoft xml-core-services (CVE-2017-0022)
vulnerability in Microsoft xml-core-services (CVE-2017-0022). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2017-0005 KEV [KEV] Buffer Overflow in Microsoft windows (CVE-2017-0005)
vulnerability in Microsoft windows (CVE-2017-0005). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2017-0149 KEV [KEV] Buffer Overflow in Microsoft internet-explorer (CVE-2017-0149)
vulnerability in Microsoft internet-explorer (CVE-2017-0149). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2017-0210 KEV [KEV] Vulnerability in Microsoft internet-explorer (CVE-2017-0210)
vulnerability in Microsoft internet-explorer (CVE-2017-0210). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2017-8291 KEV [KEV] Vulnerability in Artifex ghostscript (CVE-2017-8291)
vulnerability in Artifex ghostscript (CVE-2017-8291). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2017-8543 KEV [KEV] Vulnerability in Microsoft windows (CVE-2017-8543)
vulnerability in Microsoft windows (CVE-2017-8543). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2016-0162 KEV [KEV] Information Disclosure in Microsoft internet-explorer (CVE-2016-0162)
vulnerability in Microsoft internet-explorer (CVE-2016-0162). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2016-4655 KEV [KEV] Information Disclosure in Apple ios (CVE-2016-4655)
vulnerability in Apple ios (CVE-2016-4655). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2016-4656 KEV [KEV] Vulnerability in Apple ios (CVE-2016-4656)
vulnerability in Apple ios (CVE-2016-4656). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2016-4657 KEV [KEV] Buffer Overflow in Apple ios (CVE-2016-4657)
vulnerability in Apple ios (CVE-2016-4657). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2016-6366 KEV [KEV] Buffer Overflow in Cisco adaptive-security-appliance-asa (CVE-2016-6366)
vulnerability in Cisco adaptive-security-appliance-asa (CVE-2016-6366). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2016-6367 KEV [KEV] Command Injection in Cisco adaptive-security-appliance-asa (CVE-2016-6367)
command injection in Cisco adaptive-security-appliance-asa (CVE-2016-6367). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2016-3298 KEV [KEV] Information Disclosure in Microsoft internet-explorer (CVE-2016-3298)
vulnerability in Microsoft internet-explorer (CVE-2016-3298). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-28944 Vulnerability in emcosoftware (CVE-2022-28944)
vulnerability in emcosoftware (CVE-2022-28944). Successful exploitation can lead to full system takeover.
CVE-2022-30014 Cross-Site Request Forgery (CSRF) in csrf (CVE-2022-30014)
vulnerability in csrf (CVE-2022-30014). Successful exploitation can lead to full system takeover.
CVE-2022-20821 KEV [KEV] Vulnerability in Cisco ios-xr (CVE-2022-20821)
vulnerability in Cisco ios-xr (CVE-2022-20821). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-1048 KEV [KEV] Use-After-Free in Android :linux_kernel: (CVE-2021-1048)
vulnerability in Android :linux_kernel: (CVE-2021-1048). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `:2021-11-06` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →