Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: rce Clear

ID	Title	Severity	Tags	Detected
CVE-2021-42950	Vulnerability in zepl (CVE-2021-42950) vulnerability in zepl (CVE-2021-42950). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Zepl	4 years ago
CVE-2020-1938 KEV	[KEV] Privilege Escalation in org.apache.tomcat.embed:tomcat-embed-core (CVE-2020-1938) vulnerability in org.apache.tomcat.embed:tomcat-embed-core (CVE-2020-1938). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `7.0.100` or later.	Critical	Apache Tomcat Remote Code Execution Geode +25	4 years ago
CVE-2021-42951	Vulnerability in algorithmia (CVE-2021-42951) vulnerability in algorithmia (CVE-2021-42951). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Algorithmia Msol	4 years ago
CVE-2022-25064	OS Command Injection in tp-link (CVE-2022-25064) OS command injection in tp-link (CVE-2022-25064). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 78 Tp Link Tl Wr840N Firmware +1	4 years ago
CVE-2021-42952	Vulnerability in zepl (CVE-2021-42952) vulnerability in zepl (CVE-2021-42952). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Zepl	4 years ago
CVE-2022-22916	Vulnerability in zoneland (CVE-2022-22916) vulnerability in zoneland (CVE-2022-22916). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Zoneland O2Oa	4 years ago
CVE-2019-0752 KEV	[KEV] Vulnerability in Microsoft internet-explorer (CVE-2019-0752) vulnerability in Microsoft internet-explorer (CVE-2019-0752). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Internet Explorer Cwe 843 Remote Code Execution +13	4 years ago
CVE-2018-8174 KEV	[KEV] Out-of-Bounds Write in Microsoft windows (CVE-2018-8174) out-of-bounds write in Microsoft windows (CVE-2018-8174). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 787 Remote Code Execution +10	4 years ago
CVE-2021-45420	Information Disclosure in dos (CVE-2021-45420) vulnerability in dos (CVE-2021-45420). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Denial of Service Cwe 200 Cwe 306 +4	4 years ago
CVE-2020-0796 KEV	[KEV] Buffer Overflow in Microsoft smbv3 (CVE-2020-0796) vulnerability in Microsoft smbv3 (CVE-2020-0796). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Microsoft Smbv3 Cwe 119 Remote Code Execution +4	4 years ago
CVE-2017-0145 KEV	[KEV] Vulnerability in Microsoft smbv1 (CVE-2017-0145) vulnerability in Microsoft smbv1 (CVE-2017-0145). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Smbv1 Cwe 20 Remote Code Execution +28	4 years ago
CVE-2017-0144 KEV	[KEV] Vulnerability in Microsoft smbv1 (CVE-2017-0144) vulnerability in Microsoft smbv1 (CVE-2017-0144). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Smbv1 Cwe 20 Remote Code Execution +28	4 years ago
CVE-2022-22709	VP9 Video Extensions Remote Code Execution Vulnerability VP9 Video Extensions Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Vp9 Video Extensions	4 years ago
CVE-2021-42638	Command Injection in printerlogic (CVE-2021-42638) command injection in printerlogic (CVE-2021-42638). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 77 Printerlogic Web Stack +4	4 years ago
CVE-2021-42631	Unsafe Deserialization in printerlogic (CVE-2021-42631) vulnerability in printerlogic (CVE-2021-42631). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 502 Printerlogic Virtual Appliance +5	4 years ago
CVE-2021-42635	Vulnerability in printerlogic (CVE-2021-42635) vulnerability in printerlogic (CVE-2021-42635). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 798 Printerlogic Web Stack +4	4 years ago
CVE-2021-44971	Vulnerability in tenda (CVE-2021-44971) vulnerability in tenda (CVE-2021-44971). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Authentication Bypass Cwe 697 Tenda +4	4 years ago
CVE-2021-46117	Code Injection in jpress (CVE-2021-46117) code injection in jpress (CVE-2021-46117). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 94 Jpress	4 years ago
CVE-2021-46116	Unrestricted File Upload in jpress (CVE-2021-46116) vulnerability in jpress (CVE-2021-46116). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 434 Jpress	4 years ago
CVE-2021-46114	Code Injection in jpress (CVE-2021-46114) code injection in jpress (CVE-2021-46114). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 94 Jpress	4 years ago
CVE-2021-46115	Unrestricted File Upload in c (CVE-2021-46115) vulnerability in c (CVE-2021-46115). Successful exploitation can lead to full system takeover.	High	C Remote Code Execution Cwe 434 Jpress	4 years ago
CVE-2021-46118	Code Injection in jpress (CVE-2021-46118) code injection in jpress (CVE-2021-46118). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 94 Jpress	4 years ago
CVE-2022-23302	Unsafe Deserialization in apache (CVE-2022-23302) vulnerability in apache (CVE-2022-23302). Successful exploitation can lead to full system takeover.	High	Apache Remote Code Execution Insecure Deserialization Cwe 502 +30	4 years ago
CVE-2022-21840	Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Excel Office +5	4 years ago
CVE-2022-21841	Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Office +1	4 years ago
CVE-2019-1579 KEV	[KEV] Vulnerability in Palo alto networks palo-alto-networks (CVE-2019-1579) vulnerability in Palo alto networks palo-alto-networks (CVE-2019-1579). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Palo Alto Networks Pan Os Cwe 134 Remote Code Execution +1	4 years ago
CVE-2021-44832	Vulnerability in org.apache.logging.log4j:log4j-core (CVE-2021-44832) vulnerability in org.apache.logging.log4j:log4j-core (CVE-2021-44832). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.17.1` or later.	Medium	Java Apache Remote Code Execution Cwe 20 +27	4 years ago
CVE-2021-43256	Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Excel +5	4 years ago
CVE-2021-43875	Microsoft Office Graphics Remote Code Execution Vulnerability Microsoft Office Graphics Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Office +1	4 years ago
CVE-2021-4104	Unsafe Deserialization in apache (CVE-2021-4104) vulnerability in apache (CVE-2021-4104). Successful exploitation can lead to full system takeover.	High	Apache Remote Code Execution Insecure Deserialization Cwe 502 +49	4 years ago
CVE-2021-44149	An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0. The OPTEE-OS CSU driver for NXP i.MX6UL SoC devices lacks security access configuration for wakeup-related registers, resu... An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0. The OPTEE-OS CSU driver for NXP i.MX6UL SoC devices lacks security access configuration for wakeup-related registers, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operat...	High	Trustedfirmware Op Tee Nxp Imx 6Ultralite +3	4 years ago
CVE-2021-43221	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability	Medium	Remote Code Execution Cwe 94 Microsoft Edge Chromium	4 years ago
CVE-2021-42321 KEV	[KEV] Vulnerability in Microsoft exchange (CVE-2021-42321) vulnerability in Microsoft exchange (CVE-2021-42321). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Exchange Cwe 184 Cwe 502 +2	4 years ago
CVE-2021-43208	3D Viewer Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-43209. 3D Viewer Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-43209.	High	Remote Code Execution Cwe 94 Microsoft 3D Viewer	4 years ago
CVE-2021-43209	3D Viewer Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-43208. 3D Viewer Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-43208.	High	Remote Code Execution Microsoft 3D Viewer	4 years ago
CVE-2021-42316	Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Dynamics 365	4 years ago
CVE-2021-42296	Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 94 Microsoft 365 Apps +1	4 years ago
CVE-2021-42298	Microsoft Defender Remote Code Execution Vulnerability Microsoft Defender Remote Code Execution Vulnerability	High	Remote Code Execution Cwe 94 Microsoft Malware Protection Engine	4 years ago
CVE-2021-42275	Microsoft COM for Windows Remote Code Execution Vulnerability Microsoft COM for Windows Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Windows 10 Windows 11 +8	4 years ago
CVE-2021-42276	Microsoft Windows Media Foundation Remote Code Execution Vulnerability Microsoft Windows Media Foundation Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Windows 10 Windows 11 +3	4 years ago
CVE-2021-41378	Windows NTFS Remote Code Execution Vulnerability Windows NTFS Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Windows 10 Windows 11 +3	4 years ago
CVE-2021-41368	Microsoft Access Remote Code Execution Vulnerability Microsoft Access Remote Code Execution Vulnerability	Medium	Remote Code Execution Microsoft 365 Apps Office +1	4 years ago
CVE-2021-40442	Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft 365 Apps Excel +5	4 years ago
CVE-2021-38666	Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability	High	Remote Code Execution Microsoft Windows 10 Windows 11 +8	4 years ago
CVE-2021-26443	Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability	Critical	Remote Code Execution Microsoft Windows 10 Windows 11 +3	4 years ago
CVE-2021-38647 KEV	[KEV] Vulnerability in Microsoft open-management-infrastructure-omi (CVE-2021-38647) vulnerability in Microsoft open-management-infrastructure-omi (CVE-2021-38647). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Microsoft Open Management Infrastructure Omi Cwe 1390 Remote Code Execution +11	4 years ago
CVE-2021-34473 KEV	[KEV] SSRF (Server-Side Request Forgery) in Microsoft exchange-server (CVE-2021-34473) SSRF in Microsoft exchange-server (CVE-2021-34473). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.	Critical	Microsoft Exchange Server Cwe 918 Remote Code Execution	4 years ago
CVE-2021-34527 KEV	[KEV] Privilege Escalation in Microsoft windows (CVE-2021-34527) vulnerability in Microsoft windows (CVE-2021-34527). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 269 Remote Code Execution +17	4 years ago
CVE-2021-40444 KEV	[KEV] Path Traversal in Microsoft mshtml (CVE-2021-40444) path traversal in Microsoft mshtml (CVE-2021-40444). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Mshtml Cwe 22 Remote Code Execution +17	4 years ago
CVE-2021-27085 KEV	[KEV] Vulnerability in Microsoft internet-explorer (CVE-2021-27085) vulnerability in Microsoft internet-explorer (CVE-2021-27085). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.	High	Microsoft Internet Explorer Remote Code Execution Windows 10 1803 +5	4 years ago

Vulnerabilities

🍪 About cookies