Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-306 Clear
ID Title
CVE-2022-21587 KEV [KEV] Vulnerability in Oracle e-business-suite (CVE-2022-21587)
vulnerability in Oracle e-business-suite (CVE-2022-21587). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-26501 KEV [KEV] Vulnerability in Veeam backup-replication (CVE-2022-26501)
vulnerability in Veeam backup-replication (CVE-2022-26501). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-26925 KEV [KEV] Vulnerability in Microsoft windows (CVE-2022-26925)
vulnerability in Microsoft windows (CVE-2022-26925). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-21952 Vulnerability in dos (CVE-2022-21952)
vulnerability in dos (CVE-2022-21952). Risk of unauthorized operations or information disclosure.
CVE-2022-24562 Vulnerability in iobit (CVE-2022-24562)
vulnerability in iobit (CVE-2022-24562). Successful exploitation can lead to full system takeover.
CVE-2022-22576 Authentication Bypass in haxx (CVE-2022-22576)
authentication bypass in haxx (CVE-2022-22576). Confidential information can be exposed externally.
CVE-2021-33259 Vulnerability in d-link (CVE-2021-33259)
vulnerability in d-link (CVE-2021-33259). Risk of unauthorized operations or information disclosure.
CVE-2021-3825 Vulnerability in pardus (CVE-2021-3825)
vulnerability in pardus (CVE-2021-3825). Successful exploitation can lead to full system takeover.
CVE-2020-27285 Vulnerability in redlion (CVE-2020-27285)
vulnerability in redlion (CVE-2020-27285). Confidential information can be exposed externally.
CVE-2022-1388 KEV [KEV] Vulnerability in F5 big-ip (CVE-2022-1388)
vulnerability in F5 big-ip (CVE-2022-1388). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-27376 Vulnerability in drtrustusa (CVE-2020-27376)
vulnerability in drtrustusa (CVE-2020-27376). Successful exploitation can lead to full system takeover.
CVE-2021-46006 Vulnerability in totolink (CVE-2021-46006)
vulnerability in totolink (CVE-2021-46006). Data can be tampered with by attackers.
CVE-2021-46009 Vulnerability in totolink (CVE-2021-46009)
vulnerability in totolink (CVE-2021-46009). Successful exploitation can lead to full system takeover.
CVE-2022-26143 KEV [KEV] Vulnerability in Mitel micollab (CVE-2022-26143)
vulnerability in Mitel micollab (CVE-2022-26143). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-23345 BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.
CVE-2021-45420 Information Disclosure in dos (CVE-2021-45420)
vulnerability in dos (CVE-2021-45420). Successful exploitation can lead to full system takeover.
CVE-2017-10271 KEV [KEV] Vulnerability in Oracle weblogic-server (CVE-2017-10271)
vulnerability in Oracle weblogic-server (CVE-2017-10271). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-13927 KEV [KEV] Vulnerability in Apache airflows-experimental-api (CVE-2020-13927)
vulnerability in Apache airflows-experimental-api (CVE-2020-13927). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-37415 KEV [KEV] Vulnerability in Zoho manageengine-servicedesk-plus-sdp (CVE-2021-37415)
vulnerability in Zoho manageengine-servicedesk-plus-sdp (CVE-2021-37415). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-44077 KEV [KEV] Vulnerability in Zoho manageengine-servicedesk-plus-sdp-supportcenter-plus (CVE-2021-44077)
vulnerability in Zoho manageengine-servicedesk-plus-sdp-supportcenter-plus (CVE-2021-44077). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-5591 KEV [KEV] Vulnerability in Fortinet fortios (CVE-2019-5591)
vulnerability in Fortinet fortios (CVE-2019-5591). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2020-6287 KEV [KEV] Vulnerability in Sap netweaver (CVE-2020-6287)
vulnerability in Sap netweaver (CVE-2020-6287). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-6207 KEV [KEV] Vulnerability in Sap solution-manager (CVE-2020-6207)
vulnerability in Sap solution-manager (CVE-2020-6207). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-20021 KEV [KEV] Privilege Escalation in Sonicwall email-security (CVE-2021-20021)
vulnerability in Sonicwall email-security (CVE-2021-20021). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2019-9082 KEV [KEV] Vulnerability in thinkphp (CVE-2019-9082)
vulnerability in thinkphp (CVE-2019-9082). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-3952 KEV [KEV] Vulnerability in Vmware vcenter-server (CVE-2020-3952)
vulnerability in Vmware vcenter-server (CVE-2020-3952). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-15798 Vulnerability in siemens (CVE-2020-15798)
vulnerability in siemens (CVE-2020-15798). Successful exploitation can lead to full system takeover.
CVE-2019-1895 Vulnerability in cisco (CVE-2019-1895)
vulnerability in cisco (CVE-2019-1895). Successful exploitation can lead to full system takeover.
CVE-2019-6820 Vulnerability in schneider-electric (CVE-2019-6820)
vulnerability in schneider-electric (CVE-2019-6820). Risk of unauthorized operations or information disclosure.
CVE-2019-9201 Vulnerability in phoenixcontact (CVE-2019-9201)
vulnerability in phoenixcontact (CVE-2019-9201). Successful exploitation can lead to full system takeover.
CVE-2018-17924 Vulnerability in rockwellautomation (CVE-2018-17924)
vulnerability in rockwellautomation (CVE-2018-17924). Risk of unauthorized operations or information disclosure.
CVE-2017-18001 Vulnerability in trustwave (CVE-2017-18001)
vulnerability in trustwave (CVE-2017-18001). Successful exploitation can lead to full system takeover.
CVE-2017-17746 Vulnerability in tp-link (CVE-2017-17746)
vulnerability in tp-link (CVE-2017-17746). Successful exploitation can lead to full system takeover.
CVE-2017-17747 Vulnerability in dos (CVE-2017-17747)
vulnerability in dos (CVE-2017-17747). Risk of unauthorized operations or information disclosure.
CVE-2017-3184 Vulnerability in dos (CVE-2017-3184)
vulnerability in dos (CVE-2017-3184). Successful exploitation can lead to full system takeover.
CVE-2017-12155 Vulnerability in tripleo-heat-templates (CVE-2017-12155)
vulnerability in tripleo-heat-templates (CVE-2017-12155). Confidential information can be exposed externally. Exploitable via ``ceph.client.openstack.keyring``. Mitigation: upgrade to `7.0.6` or later.
CVE-2017-16241 Vulnerability in amag (CVE-2017-16241)
vulnerability in amag (CVE-2017-16241). Data can be tampered with by attackers.
CVE-2017-8155 Vulnerability in huawei (CVE-2017-8155)
vulnerability in huawei (CVE-2017-8155). Successful exploitation can lead to full system takeover.
CVE-2017-8156 Vulnerability in huawei (CVE-2017-8156)
vulnerability in huawei (CVE-2017-8156). Successful exploitation can lead to full system takeover.
CVE-2017-2708 Vulnerability in huawei (CVE-2017-2708)
vulnerability in huawei (CVE-2017-2708). Risk of unauthorized operations or information disclosure.
CVE-2017-1523 Vulnerability in ibm (CVE-2017-1523)
vulnerability in ibm (CVE-2017-1523). Confidential information can be exposed externally.
CVE-2017-5637 Vulnerability in apache (CVE-2017-5637)
vulnerability in apache (CVE-2017-5637). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.10` or later.
CVE-2017-12822 Vulnerability in sentinel (CVE-2017-12822)
vulnerability in sentinel (CVE-2017-12822). Confidential information can be exposed externally.
CVE-2017-13997 Vulnerability in schneider-electric (CVE-2017-13997)
vulnerability in schneider-electric (CVE-2017-13997). Successful exploitation can lead to full system takeover.
CVE-2017-14350 Vulnerability in hp (CVE-2017-14350)
vulnerability in hp (CVE-2017-14350). Successful exploitation can lead to full system takeover.
CVE-2017-1483 Vulnerability in ibm (CVE-2017-1483)
vulnerability in ibm (CVE-2017-1483). Risk of unauthorized operations or information disclosure.
CVE-2017-14417 Vulnerability in dlink (CVE-2017-14417)
vulnerability in dlink (CVE-2017-14417). Successful exploitation can lead to full system takeover.
CVE-2017-12733 Vulnerability in opwglobal (CVE-2017-12733)
vulnerability in opwglobal (CVE-2017-12733). Successful exploitation can lead to full system takeover.
CVE-2017-12440 Vulnerability in aodh (CVE-2017-12440)
vulnerability in aodh (CVE-2017-12440). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.0.1` or later.
CVE-2017-6872 Vulnerability in siemens (CVE-2017-6872)
vulnerability in siemens (CVE-2017-6872). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →