Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2023-44487 KEV |
|
[KEV] Vulnerability in Ietf golang.org/x/net (CVE-2023-44487)
vulnerability in Ietf golang.org/x/net (CVE-2023-44487). Risk of unauthorized operations or information disclosure. Exploitable via ``Channel``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.17.0` or later.
|
| CVE-2023-4527 |
|
Vulnerability in gnu (CVE-2023-4527)
vulnerability in gnu (CVE-2023-4527). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-19190 |
|
Out-of-Bounds Write in c (CVE-2020-19190)
out-of-bounds write in c (CVE-2020-19190). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-19189 |
|
Out-of-Bounds Write in c (CVE-2020-19189)
out-of-bounds write in c (CVE-2020-19189). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-19188 |
|
Out-of-Bounds Write in c (CVE-2020-19188)
out-of-bounds write in c (CVE-2020-19188). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-19187 |
|
Out-of-Bounds Write in c (CVE-2020-19187)
out-of-bounds write in c (CVE-2020-19187). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-19186 |
|
Out-of-Bounds Write in c (CVE-2020-19186)
out-of-bounds write in c (CVE-2020-19186). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-19185 |
|
Out-of-Bounds Write in c (CVE-2020-19185)
out-of-bounds write in c (CVE-2020-19185). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-3390 |
|
Use-After-Free in c (CVE-2023-3390)
vulnerability in c (CVE-2023-3390). Successful exploitation can lead to full system takeover.
|
| CVE-2016-8735 KEV |
|
[KEV] Vulnerability in Apache tomcat (CVE-2016-8735)
vulnerability in Apache tomcat (CVE-2016-8735). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2023-27043 |
|
Vulnerability in libpython (CVE-2023-27043)
vulnerability in libpython (CVE-2023-27043). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.8.20, 3.10.15, 3.11.10, 3.12.6, 3.9.20` or later.
|
| CVE-2023-28531 |
|
Vulnerability in openbsd (CVE-2023-28531)
vulnerability in openbsd (CVE-2023-28531). Successful exploitation can lead to full system takeover.
|
| CVE-2023-25136 |
|
Vulnerability in openbsd (CVE-2023-25136)
vulnerability in openbsd (CVE-2023-25136). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-45884 |
|
Vulnerability in c (CVE-2022-45884)
vulnerability in c (CVE-2022-45884). Successful exploitation can lead to full system takeover.
|
| CVE-2022-38023 |
|
Netlogon RPC Elevation of Privilege Vulnerability
Netlogon RPC Elevation of Privilege Vulnerability
|
| CVE-2022-37967 |
|
Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
|
| CVE-2022-37966 |
|
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
|
| CVE-2022-43945 |
|
Vulnerability in c (CVE-2022-43945)
vulnerability in c (CVE-2022-43945). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-21624 |
|
Unsafe Deserialization in c (CVE-2022-21624)
vulnerability in c (CVE-2022-21624). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-21626 |
|
Vulnerability in c (CVE-2022-21626)
vulnerability in c (CVE-2022-21626). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-35278 |
|
Cross-Site Scripting (XSS) in org.apache.activemq:artemis-server (CVE-2022-35278)
cross-site scripting in org.apache.activemq:artemis-server (CVE-2022-35278). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.24.0` or later.
|
| CVE-2022-37434 |
|
Out-of-Bounds Write in c (CVE-2022-37434)
out-of-bounds write in c (CVE-2022-37434). Successful exploitation can lead to full system takeover.
|
| CVE-2022-34169 |
|
Vulnerability in apache (CVE-2022-34169)
vulnerability in apache (CVE-2022-34169). Data can be tampered with by attackers.
|
| CVE-2022-27781 |
|
Vulnerability in haxx (CVE-2022-27781)
vulnerability in haxx (CVE-2022-27781). Risk of unauthorized operations or information disclosure. Exploitable via ``CURLOPT_CERTINFO``.
|
| CVE-2022-27775 |
|
Information Disclosure in haxx (CVE-2022-27775)
vulnerability in haxx (CVE-2022-27775). Confidential information can be exposed externally.
|
| CVE-2022-27774 |
|
Vulnerability in haxx (CVE-2022-27774)
vulnerability in haxx (CVE-2022-27774). Confidential information can be exposed externally.
|
| CVE-2022-22576 |
|
Authentication Bypass in haxx (CVE-2022-22576)
authentication bypass in haxx (CVE-2022-22576). Confidential information can be exposed externally.
|
| CVE-2021-28691 |
|
Use-After-Free in netapp (CVE-2021-28691)
vulnerability in netapp (CVE-2021-28691). Successful exploitation can lead to full system takeover.
|
| CVE-2021-23134 |
|
Use-After-Free in netapp (CVE-2021-23134)
vulnerability in netapp (CVE-2021-23134). Successful exploitation can lead to full system takeover.
|
| CVE-2021-23133 |
|
Vulnerability in c (CVE-2021-23133)
vulnerability in c (CVE-2021-23133). Successful exploitation can lead to full system takeover.
|
| CVE-2021-27364 |
|
Out-of-Bounds Read in c (CVE-2021-27364)
vulnerability in c (CVE-2021-27364). Confidential information can be exposed externally.
|
| CVE-2021-27365 |
|
Out-of-Bounds Write in netapp (CVE-2021-27365)
out-of-bounds write in netapp (CVE-2021-27365). Successful exploitation can lead to full system takeover.
|
| CVE-2022-1734 |
|
Use-After-Free in c (CVE-2022-1734)
vulnerability in c (CVE-2022-1734). Successful exploitation can lead to full system takeover.
|
| CVE-2022-25647 |
|
Unsafe Deserialization in com.google.code.gson:gson (CVE-2022-25647)
vulnerability in com.google.code.gson:gson (CVE-2022-25647). Data can be tampered with by attackers. Mitigation: upgrade to `2.8.9` or later.
|
| CVE-2022-1353 |
|
Information Disclosure in c (CVE-2022-1353)
vulnerability in c (CVE-2022-1353). Confidential information can be exposed externally.
|
| CVE-2022-1055 |
|
Use-After-Free in privilege-escalation (CVE-2022-1055)
vulnerability in privilege-escalation (CVE-2022-1055). Successful exploitation can lead to full system takeover.
|
| CVE-2022-0330 |
|
Vulnerability in linux (CVE-2022-0330)
vulnerability in linux (CVE-2022-0330). Successful exploitation can lead to full system takeover.
|
| CVE-2018-25032 |
|
Out-of-Bounds Write in nokogiri (CVE-2018-25032)
out-of-bounds write in nokogiri (CVE-2018-25032). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12617 KEV |
|
[KEV] Unrestricted File Upload in Apache tomcat (CVE-2017-12617)
vulnerability in Apache tomcat (CVE-2017-12617). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2017-12615 KEV |
|
[KEV] Unrestricted File Upload in Apache tomcat (CVE-2017-12615)
vulnerability in Apache tomcat (CVE-2017-12615). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2022-1011 |
|
Use-After-Free in privilege-escalation (CVE-2022-1011)
vulnerability in privilege-escalation (CVE-2022-1011). Successful exploitation can lead to full system takeover.
|
| CVE-2022-0778 |
|
Vulnerability in dos (CVE-2022-0778)
vulnerability in dos (CVE-2022-0778). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1938 KEV |
|
[KEV] Privilege Escalation in org.apache.tomcat.embed:tomcat-embed-core (CVE-2020-1938)
vulnerability in org.apache.tomcat.embed:tomcat-embed-core (CVE-2020-1938). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `7.0.100` or later.
|
| CVE-2021-20322 |
|
Vulnerability in linux (CVE-2021-20322)
vulnerability in linux (CVE-2021-20322). Confidential information can be exposed externally.
|
| CVE-2021-4090 |
|
Out-of-Bounds Write in c (CVE-2021-4090)
out-of-bounds write in c (CVE-2021-4090). Confidential information can be exposed externally.
|
| CVE-2020-13935 |
|
Vulnerability in org.apache.tomcat:tomcat (CVE-2020-13935)
vulnerability in org.apache.tomcat:tomcat (CVE-2020-13935). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.105` or later.
|
| CVE-2020-13934 |
|
Vulnerability in org.apache.tomcat:tomcat (CVE-2020-13934)
vulnerability in org.apache.tomcat:tomcat (CVE-2020-13934). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.5.56` or later.
|
| CVE-2022-23913 |
|
Vulnerability in org.apache.activemq:artemis-core-client (CVE-2022-23913)
vulnerability in org.apache.activemq:artemis-core-client (CVE-2022-23913). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.19.1` or later.
|
| CVE-2021-33625 |
|
Buffer Overflow in insyde (CVE-2021-33625)
vulnerability in insyde (CVE-2021-33625). Successful exploitation can lead to full system takeover.
|
| CVE-2022-23437 |
|
Vulnerability in apache (CVE-2022-23437)
vulnerability in apache (CVE-2022-23437). Risk of unauthorized operations or information disclosure.
|