Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2018-3883	SQL Injection in sqli (CVE-2018-3883) SQL injection in sqli (CVE-2018-3883). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Frappe Erpnext	7 years ago
CVE-2018-3884	SQL Injection in sqli (CVE-2018-3884) SQL injection in sqli (CVE-2018-3884). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Frappe Erpnext	7 years ago
CVE-2018-3885	SQL Injection in sqli (CVE-2018-3885) SQL injection in sqli (CVE-2018-3885). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Frappe Erpnext	7 years ago
CVE-2018-10902	Vulnerability in c (CVE-2018-10902) vulnerability in c (CVE-2018-10902). Successful exploitation can lead to full system takeover.	High	C Privilege Escalation Cwe 416 Cwe 415 +10	8 years ago
CVE-2018-1154	Vulnerability in tenable (CVE-2018-1154) vulnerability in tenable (CVE-2018-1154). Successful exploitation can lead to full system takeover.	High	Tenable Security Center	8 years ago
CVE-2018-12594	Information Disclosure in reliablecontrols (CVE-2018-12594) vulnerability in reliablecontrols (CVE-2018-12594). Confidential information can be exposed externally.	High	Cwe 200 Reliablecontrols Mach Prowebcom Firmware Mach Prowebcom	8 years ago
CVE-2018-1259	XXE (XML External Entity) in broadcom (CVE-2018-1259) vulnerability in broadcom (CVE-2018-1259). Confidential information can be exposed externally.	High	Cwe 611 Broadcom Spring Data Commons Pivotal Software +3	8 years ago
CVE-2018-1258	Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauth... Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.	High	Spring Cwe 863 Pivotal Software Spring Security +47	8 years ago
CVE-2018-0227	Vulnerability in cisco (CVE-2018-0227) vulnerability in cisco (CVE-2018-0227). Data can be tampered with by attackers.	High	Cwe 295 Cisco Adaptive Security Appliance Software Secure Firewall Threat Defense	8 years ago
CVE-2018-0228	Vulnerability in dos (CVE-2018-0228) vulnerability in dos (CVE-2018-0228). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Cwe 667 Cisco +2	8 years ago
CVE-2018-0230	Vulnerability in dos (CVE-2018-0230) vulnerability in dos (CVE-2018-0230). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Cisco Secure Firewall Threat Defense +1	8 years ago
CVE-2018-0231	Vulnerability in dos (CVE-2018-0231) vulnerability in dos (CVE-2018-0231). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Cwe 787 Cisco +2	8 years ago
CVE-2018-0240	Vulnerability in dos (CVE-2018-0240) vulnerability in dos (CVE-2018-0240). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 399 Cisco Secure Firewall Threat Defense +44	8 years ago
CVE-2018-1274	Vulnerability in dos (CVE-2018-1274) vulnerability in dos (CVE-2018-1274). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770 Broadcom Spring Data Commons +3	8 years ago
CVE-2018-9988	Out-of-Bounds Read in arm (CVE-2018-9988) vulnerability in arm (CVE-2018-9988). Risk of unauthorized operations or information disclosure.	High	Cwe 125 Arm Mbed Tls Trustedfirmware +2	8 years ago
CVE-2018-9989	Out-of-Bounds Read in arm (CVE-2018-9989) vulnerability in arm (CVE-2018-9989). Risk of unauthorized operations or information disclosure.	High	Cwe 125 Arm Mbed Tls Trustedfirmware +2	8 years ago
CVE-2018-7195	Vulnerability in enhancesoft (CVE-2018-7195) vulnerability in enhancesoft (CVE-2018-7195). Successful exploitation can lead to full system takeover.	High	Enhancesoft Osticket	8 years ago
CVE-2017-12174	Vulnerability in apache (CVE-2017-12174) vulnerability in apache (CVE-2017-12174). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Apache Artemis Redhat +3	8 years ago
CVE-2018-6926	OS Command Injection in misp-project (CVE-2018-6926) OS command injection in misp-project (CVE-2018-6926). Successful exploitation can lead to full system takeover.	High	PHP Cwe 78 Misp Project Misp	8 years ago
CVE-2015-1862	The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve... The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve...	High	Cwe 362 Redhat Automatic Bug Reporting Tool Linux +2	8 years ago
CVE-2017-12626	Vulnerability in org.apache.poi:poi (CVE-2017-12626) vulnerability in org.apache.poi:poi (CVE-2017-12626). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.17` or later.	High	Apache Denial of Service Cwe 835 Poi	8 years ago
CVE-2017-17704	Vulnerability in swhouse (CVE-2017-17704) vulnerability in swhouse (CVE-2017-17704). Data can be tampered with by attackers.	High	Cwe 330 Swhouse Istar Ultra Firmware Istar Ultra	8 years ago
CVE-2017-14855	Vulnerability in dos (CVE-2017-14855) vulnerability in dos (CVE-2017-14855). Risk of unauthorized operations or information disclosure.	High	Denial of Service Redlion Hmi Panel Firmware Hmi Panel	8 years ago
CVE-2017-17997	Vulnerability in c (CVE-2017-17997) vulnerability in c (CVE-2017-17997). Risk of unauthorized operations or information disclosure.	High	C Cwe 476 Wireshark Debian +1	8 years ago
CVE-2017-17983	SQL Injection in sqli (CVE-2017-17983) SQL injection in sqli (CVE-2017-17983). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17987	Unrestricted File Upload in muslim-matrimonial-script-project (CVE-2017-17987) vulnerability in muslim-matrimonial-script-project (CVE-2017-17987). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434 Muslim Matrimonial Script Project Muslim Matrimonial Script	8 years ago
CVE-2017-17990	Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action. Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.	High	PHP Cross-Site Request Forgery Cwe 352 Iwcnetwork +1	8 years ago
CVE-2014-0120	Cross-Site Request Forgery (CSRF) in csrf (CVE-2014-0120) vulnerability in csrf (CVE-2014-0120). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Hawt Hawtio +2	8 years ago
CVE-2014-8119	Vulnerability in dos (CVE-2014-8119) vulnerability in dos (CVE-2014-8119). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Fedoraproject Fedora +4	8 years ago
CVE-2015-3302	Vulnerability in wordpress (CVE-2015-3302) vulnerability in wordpress (CVE-2015-3302). Confidential information can be exposed externally.	High	WordPress Cwe 284 Thecartpress Thecartpress Ecommerce Shopping Cart	8 years ago
CVE-2015-8008	Vulnerability in mediawiki (CVE-2015-8008) vulnerability in mediawiki (CVE-2015-8008). Confidential information can be exposed externally.	High	Cwe 284 Mediawiki Fedoraproject Fedora	8 years ago
CVE-2017-17901	Vulnerability in dos (CVE-2017-17901) vulnerability in dos (CVE-2017-17901). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Zyxel P 660Hw Firmware +1	8 years ago
CVE-2017-17973	Use-After-Free in c (CVE-2017-17973) vulnerability in c (CVE-2017-17973). Successful exploitation can lead to full system takeover.	High	C Cwe 416 Libtiff	8 years ago
CVE-2017-17916	SQL Injection in rails (CVE-2017-17916) SQL injection in rails (CVE-2017-17916). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +1	8 years ago
CVE-2017-17917	SQL Injection in rails (CVE-2017-17917) SQL injection in rails (CVE-2017-17917). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +1	8 years ago
CVE-2017-17919	SQL Injection in rails (CVE-2017-17919) SQL injection in rails (CVE-2017-17919). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +2	8 years ago
CVE-2017-17920	SQL Injection in rails (CVE-2017-17920) SQL injection in rails (CVE-2017-17920). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +2	8 years ago
CVE-2013-7400	Information Disclosure in dkd (CVE-2013-7400) vulnerability in dkd (CVE-2013-7400). Confidential information can be exposed externally.	High	Cwe 200 Dkd Direct Mail	8 years ago
CVE-2014-3651	Vulnerability in dos (CVE-2014-3651) vulnerability in dos (CVE-2014-3651). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Keycloak	8 years ago
CVE-2017-17950	Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter. Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.	High	PHP SQL Injection Cwe 89 Cells +1	8 years ago
CVE-2017-17952	Vulnerability in php-multivendor-ecommerce-project (CVE-2017-17952) vulnerability in php-multivendor-ecommerce-project (CVE-2017-17952). Data can be tampered with by attackers.	High	PHP Cwe 20 Php Multivendor Ecommerce Project Php Multivendor Ecommerce	8 years ago
CVE-2017-17960	PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php. PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.	High	PHP Cross-Site Request Forgery Cwe 352 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-15667	Vulnerability in dos (CVE-2017-15667) vulnerability in dos (CVE-2017-15667). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 20 Flexense Sysgauge	8 years ago
CVE-2017-17936	Vanguard Marketplace Digital Products PHP has CSRF via /search. Vanguard Marketplace Digital Products PHP has CSRF via /search.	High	PHP Cross-Site Request Forgery Cwe 352 Vanguard Project +1	8 years ago
CVE-2017-17939	PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php. PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.	High	PHP Cross-Site Request Forgery Cwe 352 Single Theater Booking Script Project +1	8 years ago
CVE-2017-17941	SQL Injection in sqli (CVE-2017-17941) SQL injection in sqli (CVE-2017-17941). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Single Theater Booking Script Project +1	8 years ago
CVE-2017-17942	Out-of-Bounds Read in c (CVE-2017-17942) vulnerability in c (CVE-2017-17942). Successful exploitation can lead to full system takeover.	High	C Cwe 125 Libtiff	8 years ago
CVE-2015-3637	SQL Injection in sqli (CVE-2015-3637) SQL injection in sqli (CVE-2015-3637). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Phpmybackuppro	8 years ago
CVE-2017-11695	Buffer Overflow in c (CVE-2017-11695) vulnerability in c (CVE-2017-11695). Successful exploitation can lead to full system takeover.	High	C Cwe 119 Mozilla Network Security Services	8 years ago
CVE-2017-11696	Buffer Overflow in c (CVE-2017-11696) vulnerability in c (CVE-2017-11696). Successful exploitation can lead to full system takeover.	High	C Cwe 119 Mozilla Network Security Services	8 years ago

Vulnerabilities

🍪 About cookies