Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2020-3167	OS Command Injection in cisco (CVE-2020-3167) OS command injection in cisco (CVE-2020-3167). Successful exploitation can lead to full system takeover.	High	Cwe 78 Cisco Secure Firewall Threat Defense Adaptive Security Appliance Software +25	6 years ago
CVE-2011-4088	ABRT might allow attackers to obtain sensitive information from crash reports. ABRT might allow attackers to obtain sensitive information from crash reports.	High	Cwe 200 Redhat Automatic Bug Reporting Tool Fedoraproject +4	6 years ago
CVE-2019-19378	Out-of-Bounds Write in c (CVE-2019-19378) out-of-bounds write in c (CVE-2019-19378). Successful exploitation can lead to full system takeover.	High	C Cwe 787 Linux Linux Kernel	6 years ago
CVE-2019-13721	Use-After-Free in google (CVE-2019-13721) vulnerability in google (CVE-2019-13721). Successful exploitation can lead to full system takeover.	High	Cwe 416 Cwe 787 Google Chrome	6 years ago
CVE-2019-6852	Information Disclosure in schneider-electric (CVE-2019-6852) vulnerability in schneider-electric (CVE-2019-6852). Confidential information can be exposed externally.	High	Cwe 200 Schneider Electric Bmx P34X Firmware Bmx P34X +18	6 years ago
CVE-2019-18197	Use-After-Free in nokogiri (CVE-2019-18197) vulnerability in nokogiri (CVE-2019-18197). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.10.5` or later.	High	C Cwe 416 Cwe 908 Xmlsoft +7	6 years ago
CVE-2019-13529	Cross-Site Request Forgery (CSRF) in sma (CVE-2019-13529) vulnerability in sma (CVE-2019-13529). Successful exploitation can lead to full system takeover.	High	Cwe 352 Sma Sunny Webbox Firmware Sunny Webbox	6 years ago
CVE-2019-15256	Vulnerability in dos (CVE-2019-15256) vulnerability in dos (CVE-2019-15256). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 399 Cwe 400 Cisco +24	6 years ago
CVE-2019-12698	Vulnerability in dos (CVE-2019-12698) vulnerability in dos (CVE-2019-12698). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cisco Adaptive Security Appliance +12	6 years ago
CVE-2019-12699	Vulnerability in cisco (CVE-2019-12699) vulnerability in cisco (CVE-2019-12699). Successful exploitation can lead to full system takeover.	High	Cwe 20 Cwe 78 Cisco Firepower 9300 Firmware +6	6 years ago
CVE-2019-12673	Buffer Overflow in dos (CVE-2019-12673) vulnerability in dos (CVE-2019-12673). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 119 Cwe 20 Cisco +13	6 years ago
CVE-2019-12674	Vulnerability in cisco (CVE-2019-12674) vulnerability in cisco (CVE-2019-12674). Successful exploitation can lead to full system takeover.	High	Cwe 216 Cwe 116 Cisco Secure Firewall Threat Defense +16	6 years ago
CVE-2019-12675	Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and... Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. These vulnerabilities are due to insuff...	High	Cwe 216 Cwe 116 Cisco Secure Firewall Threat Defense +17	6 years ago
CVE-2019-12676	Vulnerability in dos (CVE-2019-12676) vulnerability in dos (CVE-2019-12676). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Cisco Adaptive Security Appliance +12	6 years ago
CVE-2019-12678	Vulnerability in dos (CVE-2019-12678) vulnerability in dos (CVE-2019-12678). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 191 Cisco Adaptive Security Appliance +12	6 years ago
CVE-2019-10978	Buffer Overflow in redlion (CVE-2019-10978) vulnerability in redlion (CVE-2019-10978). Successful exploitation can lead to full system takeover.	High	Cwe 119 Redlion Crimson	6 years ago
CVE-2019-10984	Vulnerability in redlion (CVE-2019-10984) vulnerability in redlion (CVE-2019-10984). Successful exploitation can lead to full system takeover.	High	Cwe 465 Redlion Crimson	6 years ago
CVE-2019-10996	Use-After-Free in redlion (CVE-2019-10996) vulnerability in redlion (CVE-2019-10996). Successful exploitation can lead to full system takeover.	High	Cwe 416 Redlion Crimson	6 years ago
CVE-2019-12627	Vulnerability in cisco (CVE-2019-12627) vulnerability in cisco (CVE-2019-12627). Confidential information can be exposed externally.	High	Cwe 284 Cisco Secure Firewall Threat Defense Amp 7150 +27	7 years ago
CVE-2019-10086	Unsafe Deserialization in apache (CVE-2019-10086) vulnerability in apache (CVE-2019-10086). Risk of unauthorized operations or information disclosure.	High	Java Apache Cwe 502 Commons Beanutils +64	7 years ago
CVE-2019-13106	Out-of-Bounds Write in denx (CVE-2019-13106) out-of-bounds write in denx (CVE-2019-13106). Successful exploitation can lead to full system takeover.	High	Cwe 787 Denx U Boot Opensuse +1	7 years ago
CVE-2019-13104	Buffer Overflow in denx (CVE-2019-13104) vulnerability in denx (CVE-2019-13104). Successful exploitation can lead to full system takeover.	High	Cwe 191 Cwe 787 Denx U Boot +2	7 years ago
CVE-2019-13103	Vulnerability in dos (CVE-2019-13103) vulnerability in dos (CVE-2019-13103). Data can be tampered with by attackers.	High	Denial of Service Cwe 674 Denx U Boot	7 years ago
CVE-2019-1068 KEV	[KEV] Vulnerability in Microsoft sql-server (CVE-2019-1068) vulnerability in Microsoft sql-server (CVE-2019-1068). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Remote Code Execution Cwe 20 Microsoft Sql Server +2	7 years ago
CVE-2019-1010294	Vulnerability in trustedfirmware (CVE-2019-1010294) vulnerability in trustedfirmware (CVE-2019-1010294). Confidential information can be exposed externally.	High	Cwe 189 Trustedfirmware Op Tee	7 years ago
CVE-2017-14852	An insecure communication was found between a user and the Orpak SiteOmat management console for... An insecure communication was found between a user and the Orpak SiteOmat management console for...	High	Cwe 310 Cwe 311 Orpak Siteomat +3	7 years ago
CVE-2017-14853	The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attac... The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attacker is able to run shell commands and receive valid output from the device.	High	Cwe 94 Orpak Siteomat Remote Code Execution	7 years ago
CVE-2019-6820	Vulnerability in schneider-electric (CVE-2019-6820) vulnerability in schneider-electric (CVE-2019-6820). Risk of unauthorized operations or information disclosure.	High	Cwe 306 Schneider Electric Modicon M100 Firmware Modicon M100 +22	7 years ago
CVE-2019-1714	Vulnerability in cisco (CVE-2019-1714) vulnerability in cisco (CVE-2019-1714). Data can be tampered with by attackers.	High	Cwe 255 Cisco Secure Firewall Threat Defense Adaptive Security Appliance Software +16	7 years ago
CVE-2019-1703	Vulnerability in dos (CVE-2019-1703) vulnerability in dos (CVE-2019-1703). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cwe 770 Cisco +5	7 years ago
CVE-2019-1704	Vulnerability in dos (CVE-2019-1704) vulnerability in dos (CVE-2019-1704). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cisco Secure Firewall Threat Defense	7 years ago
CVE-2019-1708	Vulnerability in dos (CVE-2019-1708) vulnerability in dos (CVE-2019-1708). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 404 Cwe 401 Cisco +10	7 years ago
CVE-2019-1694	Vulnerability in dos (CVE-2019-1694) vulnerability in dos (CVE-2019-1694). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Cisco Adaptive Security Appliance Software +13	7 years ago
CVE-2019-1696	Vulnerability in dos (CVE-2019-1696) vulnerability in dos (CVE-2019-1696). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cisco Secure Firewall Management Center +1	7 years ago
CVE-2018-15388	Vulnerability in dos (CVE-2018-15388) vulnerability in dos (CVE-2018-15388). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cisco Adaptive Security Appliance Software +13	7 years ago
CVE-2018-15462	Vulnerability in dos (CVE-2018-15462) vulnerability in dos (CVE-2018-15462). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 399 Cwe 770 Cisco +1	7 years ago
CVE-2019-1687	Vulnerability in dos (CVE-2019-1687) vulnerability in dos (CVE-2019-1687). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Cisco Adaptive Security Appliance Software +13	7 years ago
CVE-2019-11687	Vulnerability in nema (CVE-2019-11687) vulnerability in nema (CVE-2019-11687). Successful exploitation can lead to full system takeover.	High	Cwe 20 Nema Dicom Standard	7 years ago
CVE-2019-10953	Vulnerability in abb (CVE-2019-10953) vulnerability in abb (CVE-2019-10953). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Cwe 770 Abb Pm554 Tp Eth Firmware +23	7 years ago
CVE-2018-16561	Vulnerability in siemens (CVE-2018-16561) vulnerability in siemens (CVE-2018-16561). Risk of unauthorized operations or information disclosure.	High	Cwe 20 Siemens Simatic S7 300 Firmware Simatic S7 300 +6	7 years ago
CVE-2019-6575	Vulnerability in dos (CVE-2019-6575) vulnerability in dos (CVE-2019-6575). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 248 Cwe 755 Siemens +43	7 years ago
CVE-2019-1669	Vulnerability in dos (CVE-2019-1669) vulnerability in dos (CVE-2019-1669). Data can be tampered with by attackers.	High	Denial of Service Cwe 693 Cisco Secure Firewall Threat Defense	7 years ago
CVE-2017-15031	Information Disclosure in trustedfirmware (CVE-2017-15031) vulnerability in trustedfirmware (CVE-2017-15031). Confidential information can be exposed externally.	High	Cwe 200 Trustedfirmware Trusted Firmware A	7 years ago
CVE-2018-17924	Vulnerability in rockwellautomation (CVE-2018-17924) vulnerability in rockwellautomation (CVE-2018-17924). Risk of unauthorized operations or information disclosure.	High	Cwe 306 Rockwellautomation Micrologix 1400 Firmware Micrologix 1400 +30	7 years ago
CVE-2018-6439	Vulnerability in broadcom (CVE-2018-6439) vulnerability in broadcom (CVE-2018-6439). Successful exploitation can lead to full system takeover.	High	Broadcom Fabric Operating System	7 years ago
CVE-2018-15454	Vulnerability in dos (CVE-2018-15454) vulnerability in dos (CVE-2018-15454). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Cisco Adaptive Security Appliance Software +1	7 years ago
CVE-2018-15756	Vulnerability in spring (CVE-2018-15756) vulnerability in spring (CVE-2018-15756). Risk of unauthorized operations or information disclosure.	High	JavaScript Spring Denial of Service Vmware +42	7 years ago
CVE-2018-15383	Vulnerability in dos (CVE-2018-15383) vulnerability in dos (CVE-2018-15383). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cwe 770 Cisco +3	7 years ago
CVE-2018-0453	Vulnerability in cisco (CVE-2018-0453) vulnerability in cisco (CVE-2018-0453). Successful exploitation can lead to full system takeover.	High	Cwe 264 Cwe 78 Cisco Secure Firewall Threat Defense	7 years ago
CVE-2018-3882	SQL Injection in sqli (CVE-2018-3882) SQL injection in sqli (CVE-2018-3882). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Frappe Erpnext	7 years ago

Vulnerabilities

🍪 About cookies