Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-295 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-27134	Authentication Bypass in apache (CVE-2026-27134) authentication bypass in apache (CVE-2026-27134). Successful exploitation can lead to full system takeover.	High	Apache Cwe 287 Cwe 295 Cwe 296 +2	6 months ago
CVE-2026-24734	Vulnerability in apache (CVE-2026-24734) vulnerability in apache (CVE-2026-24734). Data can be tampered with by attackers.	High	Apache Tomcat Cwe 20 Cwe 295 +1	6 months ago
CVE-2025-65753	Vulnerability in CVE-2025-65753 (CVE-2025-65753) vulnerability in CVE-2025-65753 (CVE-2025-65753). Successful exploitation can lead to full system takeover.	High	Cwe 295	6 months ago
CVE-2026-1530	Vulnerability in CVE-2026-1530 (CVE-2026-1530) vulnerability in CVE-2026-1530 (CVE-2026-1530). Confidential information can be exposed externally.	High	Cwe 295	6 months ago
CVE-2026-1531	Vulnerability in CVE-2026-1531 (CVE-2026-1531) vulnerability in CVE-2026-1531 (CVE-2026-1531). Confidential information can be exposed externally.	High	Cwe 295	6 months ago
CVE-2025-56231	Vulnerability in tonec (CVE-2025-56231) vulnerability in tonec (CVE-2025-56231). Confidential information can be exposed externally.	Critical	Cwe 295 Tonec Internet Download Manager	9 months ago
CVE-2025-44964	Vulnerability in bluestacks (CVE-2025-44964) vulnerability in bluestacks (CVE-2025-44964). Risk of unauthorized operations or information disclosure.	Low	Cwe 295 Bluestacks	1 year ago
CVE-2025-32989	Vulnerability in gnu (CVE-2025-32989) vulnerability in gnu (CVE-2025-32989). Risk of unauthorized operations or information disclosure.	Medium	Cwe 295 Gnu Gnutls Redhat +2	1 year ago
CVE-2025-6032	Vulnerability in CVE-2025-6032 (CVE-2025-6032) vulnerability in CVE-2025-6032 (CVE-2025-6032). Successful exploitation can lead to full system takeover.	High	Cwe 295	1 year ago
CVE-2025-24471	Vulnerability in fortinet (CVE-2025-24471) vulnerability in fortinet (CVE-2025-24471). Data can be tampered with by attackers.	Medium	Cwe 295 Fortinet Fortisase Fortios	1 year ago
CVE-2024-41334	Vulnerability in draytek (CVE-2024-41334) vulnerability in draytek (CVE-2024-41334). Successful exploitation can lead to full system takeover.	High	Cwe 295 Draytek Vigor166 Firmware Vigor166 +38	1 year ago
CVE-2024-45159	Vulnerability in trustedfirmware (CVE-2024-45159) vulnerability in trustedfirmware (CVE-2024-45159). Successful exploitation can lead to full system takeover.	Critical	Cwe 295 Trustedfirmware Mbed Tls	1 year ago
CVE-2024-41996	Vulnerability in CVE-2024-41996 (CVE-2024-41996) vulnerability in CVE-2024-41996 (CVE-2024-41996). Risk of unauthorized operations or information disclosure.	High	Cwe 295	2 years ago
CVE-2023-42425	Vulnerability in turing (CVE-2023-42425) vulnerability in turing (CVE-2023-42425). Successful exploitation can lead to full system takeover.	Critical	Cwe 295 Turing Edge Evc5Fd Firmware Edge Evc5Fd	2 years ago
CVE-2023-41991 KEV	[KEV] Vulnerability in Apple multiple-products (CVE-2023-41991) vulnerability in Apple multiple-products (CVE-2023-41991). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apple Multiple Products Cwe 295	2 years ago
CVE-2023-27823	Authentication Bypass in optoma (CVE-2023-27823) authentication bypass in optoma (CVE-2023-27823). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 287 Cwe 295 Optoma +1	3 years ago
CVE-2022-47758	Vulnerability in nanoleaf (CVE-2022-47758) vulnerability in nanoleaf (CVE-2022-47758). Successful exploitation can lead to full system takeover.	Critical	Cwe 295 Nanoleaf Nanoleaf Firmware	3 years ago
CVE-2023-20963 KEV	[KEV] Vulnerability in Android platform/frameworks/base (CVE-2023-20963) vulnerability in Android platform/frameworks/base (CVE-2023-20963). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `13:2023-03-01` or later.	High	Android Framework Cwe 295	3 years ago
CVE-2022-45597	Vulnerability in componentspace (CVE-2022-45597) vulnerability in componentspace (CVE-2022-45597). Successful exploitation can lead to full system takeover.	Critical	Cwe 295 Componentspace SAML	3 years ago
CVE-2022-42131	Vulnerability in liferay (CVE-2022-42131) vulnerability in liferay (CVE-2022-42131). Risk of unauthorized operations or information disclosure.	Medium	Cwe 295 Liferay Digital Experience Platform Liferay Portal	3 years ago
CVE-2022-26923 KEV	[KEV] Vulnerability in Microsoft active-directory (CVE-2022-26923) vulnerability in Microsoft active-directory (CVE-2022-26923). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Active Directory Cwe 295	4 years ago
CVE-2022-27782	Vulnerability in haxx (CVE-2022-27782) vulnerability in haxx (CVE-2022-27782). Data can be tampered with by attackers.	High	Cwe 840 Cwe 295 Haxx Curl +4	4 years ago
CVE-2020-0601 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2020-0601) vulnerability in Microsoft windows (CVE-2020-0601). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 295	4 years ago
CVE-2021-22926	Vulnerability in haxx (CVE-2021-22926) vulnerability in haxx (CVE-2021-22926). Risk of unauthorized operations or information disclosure. Exploitable via ``CURLOPT_SSLCERT``.	High	Cwe 840 Cwe 295 Haxx Curl +29	5 years ago
CVE-2020-1113	Vulnerability in microsoft (CVE-2020-1113) vulnerability in microsoft (CVE-2020-1113). Data can be tampered with by attackers.	Medium	Cwe 295 Microsoft Windows 10 Windows 7 +6	6 years ago
CVE-2020-9488	Vulnerability in org.apache.logging.log4j:log4j (CVE-2020-9488) vulnerability in org.apache.logging.log4j:log4j (CVE-2020-9488). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.2` or later.	Low	Apache Cwe 295 Log4J Oracle +47	6 years ago
CVE-2018-0227	Vulnerability in cisco (CVE-2018-0227) vulnerability in cisco (CVE-2018-0227). Data can be tampered with by attackers.	High	Cwe 295 Cisco Adaptive Security Appliance Software Secure Firewall Threat Defense	8 years ago
CVE-2015-4100	Vulnerability in puppet (CVE-2015-4100) vulnerability in puppet (CVE-2015-4100). Confidential information can be exposed externally.	Medium	Cwe 295 Puppet Puppet Enterprise	8 years ago
CVE-2017-17718	The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation. The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.	Medium	Ruby Cwe 295 Net Ldap Project Net Ldap	8 years ago
CVE-2017-17716	Vulnerability in gitlab (CVE-2017-17716) vulnerability in gitlab (CVE-2017-17716). Confidential information can be exposed externally.	Medium	Cwe 295 Gitlab	8 years ago
CVE-2017-3190	Vulnerability in axs (CVE-2017-3190) vulnerability in axs (CVE-2017-3190). Successful exploitation can lead to full system takeover.	High	Cwe 295 Axs Flash Seats	8 years ago
CVE-2017-3194	Vulnerability in pandora (CVE-2017-3194) vulnerability in pandora (CVE-2017-3194). Successful exploitation can lead to full system takeover.	High	Cwe 295 Cwe 200 Pandora	8 years ago
CVE-2014-3250	Vulnerability in apache (CVE-2014-3250) vulnerability in apache (CVE-2014-3250). Confidential information can be exposed externally.	Medium	Apache Cwe 295 Puppet Http Server +2	8 years ago
CVE-2016-1252	Vulnerability in debian (CVE-2016-1252) vulnerability in debian (CVE-2016-1252). Data can be tampered with by attackers.	Medium	Cwe 295 Debian Advanced Package Tool Debian Linux +2	8 years ago
CVE-2017-15114	Vulnerability in redhat (CVE-2017-15114) vulnerability in redhat (CVE-2017-15114). Successful exploitation can lead to full system takeover.	High	Cwe 295 Redhat Openstack Platform	8 years ago
CVE-2017-8213	Vulnerability in huawei (CVE-2017-8213) vulnerability in huawei (CVE-2017-8213). Risk of unauthorized operations or information disclosure.	Medium	Cwe 295 Huawei Smc20 Firmware Smc20	8 years ago
CVE-2017-15528	Vulnerability in norton (CVE-2017-15528) vulnerability in norton (CVE-2017-15528). Risk of unauthorized operations or information disclosure.	Low	Cwe 295 Norton Install Norton Security	8 years ago
CVE-2017-1000209	Vulnerability in nv-websocket-client-project (CVE-2017-1000209) vulnerability in nv-websocket-client-project (CVE-2017-1000209). Confidential information can be exposed externally.	Medium	Java Cwe 295 Nv Websocket Client Project Nv Websocket Client	8 years ago
CVE-2014-2845	Vulnerability in c (CVE-2014-2845) vulnerability in c (CVE-2014-2845). Confidential information can be exposed externally.	Medium	C Cwe 295 Cyberduck Microsoft +1	8 years ago
CVE-2017-11770	Vulnerability in csharp (CVE-2017-11770) vulnerability in csharp (CVE-2017-11770). Risk of unauthorized operations or information disclosure.	High	C# Denial of Service Cwe 295 Microsoft +1	8 years ago
CVE-2017-9758	Vulnerability in savitech-ic (CVE-2017-9758) vulnerability in savitech-ic (CVE-2017-9758). Confidential information can be exposed externally.	High	Cwe 295 Savitech Ic Savitech Driver	8 years ago
CVE-2017-2913	Vulnerability in meetcircle (CVE-2017-2913) vulnerability in meetcircle (CVE-2017-2913). Data can be tampered with by attackers.	Medium	Cwe 295 Meetcircle Circle With Disney Firmware Circle With Disney	8 years ago
CVE-2017-1000256	Vulnerability in redhat (CVE-2017-1000256) vulnerability in redhat (CVE-2017-1000256). Successful exploitation can lead to full system takeover.	High	Cwe 295 Redhat Libvirt Debian +1	8 years ago
CVE-2017-7080	Vulnerability in apple (CVE-2017-7080) vulnerability in apple (CVE-2017-7080). Data can be tampered with by attackers.	High	Cwe 295 Apple Iphone Os Mac Os X +2	8 years ago
CVE-2017-6144	Vulnerability in f5 (CVE-2017-6144) vulnerability in f5 (CVE-2017-6144). Confidential information can be exposed externally.	High	Cwe 295 F5 Big Ip Policy Enforcement Manager	8 years ago
CVE-2014-3706	Vulnerability in redhat (CVE-2014-3706) vulnerability in redhat (CVE-2014-3706). Confidential information can be exposed externally.	Medium	Cwe 295 Redhat Enterprise Mrg	8 years ago
CVE-2014-7242	Vulnerability in ms-ins (CVE-2014-7242) vulnerability in ms-ins (CVE-2014-7242). Confidential information can be exposed externally.	Medium	Cwe 295 Ms Ins Sumaho Sumaho Driving Capability Diagnosis	8 years ago
CVE-2017-13083	Vulnerability in akeo (CVE-2017-13083) vulnerability in akeo (CVE-2017-13083). Data can be tampered with by attackers.	Medium	Cwe 295 Cwe 345 Cwe 347 Cwe 494 +2	8 years ago
CVE-2017-10620	Vulnerability in juniper (CVE-2017-10620) vulnerability in juniper (CVE-2017-10620). Data can be tampered with by attackers.	High	Cwe 295 Juniper Junos Srx100 +19	8 years ago
CVE-2015-6358	Vulnerability in cisco (CVE-2015-6358) vulnerability in cisco (CVE-2015-6358). Confidential information can be exposed externally.	Medium	Cwe 295 Cisco Rv320 Firmware Rv320 +46	8 years ago

Vulnerabilities

🍪 About cookies