Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-290 Clear

ID	Title	Severity	Tags	Detected
CVE-2024-20384	Vulnerability in cisco (CVE-2024-20384) vulnerability in cisco (CVE-2024-20384). Risk of unauthorized operations or information disclosure.	Medium	Cwe 290 Cisco Adaptive Security Appliance Software Secure Firewall Threat Defense	1 year ago
CVE-2024-20299	Vulnerability in cisco (CVE-2024-20299) vulnerability in cisco (CVE-2024-20299). Risk of unauthorized operations or information disclosure.	Medium	Cwe 290 Cisco Adaptive Security Appliance Software Secure Firewall Threat Defense	1 year ago
CVE-2024-20297	Vulnerability in cisco (CVE-2024-20297) vulnerability in cisco (CVE-2024-20297). Risk of unauthorized operations or information disclosure.	Medium	Cwe 290 Cisco Adaptive Security Appliance Software Secure Firewall Threat Defense	1 year ago
CVE-2024-30058	Microsoft Edge (Chromium-based) Spoofing Vulnerability Microsoft Edge (Chromium-based) Spoofing Vulnerability	Medium	Cwe 357 Cwe 290 Microsoft Edge Chromium	2 years ago
CVE-2024-4358 KEV	[KEV] Vulnerability in Progress telerik-report-server (CVE-2024-4358) vulnerability in Progress telerik-report-server (CVE-2024-4358). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Progress Telerik Report Server Cwe 290	2 years ago
CVE-2024-20363	Vulnerability in cisco (CVE-2024-20363) vulnerability in cisco (CVE-2024-20363). Risk of unauthorized operations or information disclosure.	Medium	Cwe 290 Cisco Secure Firewall Threat Defense Unified Threat Defense Snort Intrusion Prevention System Engine +1	2 years ago
CVE-2024-34397	Vulnerability in gnome (CVE-2024-34397) vulnerability in gnome (CVE-2024-34397). Data can be tampered with by attackers.	Medium	Cwe 290 Gnome Glib Debian +5	2 years ago
CVE-2023-36769	Microsoft OneNote Spoofing Vulnerability Microsoft OneNote Spoofing Vulnerability	Medium	Cwe 290 Microsoft Onenote	2 years ago
CVE-2023-20246	Vulnerability in snort (CVE-2023-20246) vulnerability in snort (CVE-2023-20246). Risk of unauthorized operations or information disclosure.	Medium	Cwe 290 Snort Cisco Secure Firewall Threat Defense +1	2 years ago
CVE-2023-20245	Vulnerability in cisco (CVE-2023-20245) vulnerability in cisco (CVE-2023-20245). Risk of unauthorized operations or information disclosure.	Medium	Cwe 290 Cisco Adaptive Security Appliance Software Secure Firewall Threat Defense	2 years ago
CVE-2023-20256	Vulnerability in cisco (CVE-2023-20256) vulnerability in cisco (CVE-2023-20256). Risk of unauthorized operations or information disclosure.	Medium	Cwe 290 Cisco Adaptive Security Appliance Software Secure Firewall Threat Defense	2 years ago
CVE-2023-4178	Vulnerability in neutron (CVE-2023-4178) vulnerability in neutron (CVE-2023-4178). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 290 Neutron Smart Vms	2 years ago
CVE-2023-2887	Vulnerability in cbot (CVE-2023-2887) vulnerability in cbot (CVE-2023-2887). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 290 Cbot Cbot Core +1	3 years ago
CVE-2023-23398	Microsoft Excel Spoofing Vulnerability Microsoft Excel Spoofing Vulnerability	High	Cwe 290 Microsoft 365 Apps Excel +2	3 years ago
CVE-2023-21794	Microsoft Edge (Chromium-based) Spoofing Vulnerability Microsoft Edge (Chromium-based) Spoofing Vulnerability	Medium	Cwe 290 Microsoft Edge Chromium	3 years ago
CVE-2022-24112 KEV	[KEV] Vulnerability in Apache apisix (CVE-2022-24112) vulnerability in Apache apisix (CVE-2022-24112). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apache Apisix Cwe 290	4 years ago
CVE-2021-22779	Vulnerability in schneider-electric (CVE-2021-22779) vulnerability in schneider-electric (CVE-2021-22779). Confidential information can be exposed externally.	Critical	Authentication Bypass Cwe 290 Schneider Electric Ecostruxure Control Expert +60	4 years ago
CVE-2020-28856	Vulnerability in openasset (CVE-2020-28856) vulnerability in openasset (CVE-2020-28856). Data can be tampered with by attackers.	High	Cwe 290 Openasset Digital Asset Management	4 years ago
CVE-2018-5353	Vulnerability in zohocorp (CVE-2018-5353) vulnerability in zohocorp (CVE-2018-5353). Successful exploitation can lead to full system takeover.	Critical	Cwe 290 Zohocorp Manageengine Adselfservice Plus	4 years ago
CVE-2018-5354	Vulnerability in anixis (CVE-2018-5354) vulnerability in anixis (CVE-2018-5354). Successful exploitation can lead to full system takeover.	High	Cwe 290 Anixis Password Reset Client	4 years ago
CVE-2022-23131 KEV	[KEV] Vulnerability in Zabbix frontend (CVE-2022-23131) vulnerability in Zabbix frontend (CVE-2022-23131). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Zabbix Frontend Cwe 290	4 years ago
CVE-2021-42308	Microsoft Edge (Chromium-based) Spoofing Vulnerability Microsoft Edge (Chromium-based) Spoofing Vulnerability	Low	Cwe 290 Microsoft Edge Chromium	4 years ago
CVE-2021-43220	Microsoft Edge for iOS Spoofing Vulnerability Microsoft Edge for iOS Spoofing Vulnerability	Low	Cwe 290 Microsoft Edge Ios	4 years ago
CVE-2021-34466	Windows Hello Security Feature Bypass Vulnerability Windows Hello Security Feature Bypass Vulnerability	Medium	Cwe 290 Microsoft Windows 10	5 years ago
CVE-2017-16897	Vulnerability in auth0 (CVE-2017-16897) vulnerability in auth0 (CVE-2017-16897). Successful exploitation can lead to full system takeover.	High	Cwe 290 Auth0 Passport Wsfed Saml2	8 years ago
CVE-2017-14487	Vulnerability in ohmibod (CVE-2017-14487) vulnerability in ohmibod (CVE-2017-14487). Confidential information can be exposed externally.	Critical	Cwe 290 Ohmibod Ohmibod Remote	8 years ago
CVE-2017-12096	Vulnerability in meetcircle (CVE-2017-12096) vulnerability in meetcircle (CVE-2017-12096). Risk of unauthorized operations or information disclosure.	Medium	Cwe 290 Meetcircle Circle With Disney Firmware Circle With Disney	8 years ago
CVE-2017-14375	Vulnerability in dell (CVE-2017-14375) vulnerability in dell (CVE-2017-14375). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 290 Dell Emc Unisphere +4	8 years ago
CVE-2017-14003	Vulnerability in lavalink (CVE-2017-14003) vulnerability in lavalink (CVE-2017-14003). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 290 Cwe 287 Lavalink +2	8 years ago
CVE-2017-11717	Vulnerability in metinfo-project (CVE-2017-11717) vulnerability in metinfo-project (CVE-2017-11717). Data can be tampered with by attackers.	High	Cwe 290 Metinfo Project Metinfo	9 years ago
CVE-2017-8422	Vulnerability in kde (CVE-2017-8422) vulnerability in kde (CVE-2017-8422). Successful exploitation can lead to full system takeover.	High	Cwe 290 Kde Kauth Kdelibs	9 years ago
CVE-2017-6405	Vulnerability in veritas (CVE-2017-6405) vulnerability in veritas (CVE-2017-6405). Data can be tampered with by attackers.	High	Cwe 290 Veritas Netbackup Netbackup Appliance	9 years ago

Vulnerabilities

🍪 About cookies