Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2017-17967 |
|
Vulnerability in dos (CVE-2017-17967)
vulnerability in dos (CVE-2017-17967). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17950 |
|
Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.
Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.
|
| CVE-2017-17951 |
|
SQL Injection in sqli (CVE-2017-17951)
SQL injection in sqli (CVE-2017-17951). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17957 |
|
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.
|
| CVE-2017-17959 |
|
SQL Injection in sqli (CVE-2017-17959)
SQL injection in sqli (CVE-2017-17959). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17948 |
|
Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request.
Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request.
|
| CVE-2017-17949 |
|
Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter.
Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter.
|
| CVE-2017-17953 |
|
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.
|
| CVE-2017-17954 |
|
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.
|
| CVE-2017-17955 |
|
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.
|
| CVE-2017-17956 |
|
Cross-Site Scripting (XSS) in php-multivendor-ecommerce-project (CVE-2017-17956)
cross-site scripting in php-multivendor-ecommerce-project (CVE-2017-17956). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17958 |
|
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.
|
| CVE-2017-17960 |
|
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.
|
| CVE-2017-15667 |
|
Vulnerability in dos (CVE-2017-15667)
vulnerability in dos (CVE-2017-15667). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-5641 |
|
Unsafe Deserialization in apache (CVE-2017-5641)
vulnerability in apache (CVE-2017-5641). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15892 |
|
Cross-Site Scripting (XSS) in synology (CVE-2017-15892)
cross-site scripting in synology (CVE-2017-15892). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15886 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-15886)
SSRF in ssrf (CVE-2017-15886). Confidential information can be exposed externally.
|
| CVE-2017-17941 |
|
SQL Injection in sqli (CVE-2017-17941)
SQL injection in sqli (CVE-2017-17941). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17937 |
|
Vanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search.
Vanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search.
|
| CVE-2017-17938 |
|
PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter.
PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter.
|
| CVE-2017-17940 |
|
PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php.
PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php.
|
| CVE-2017-17936 |
|
Vanguard Marketplace Digital Products PHP has CSRF via /search.
Vanguard Marketplace Digital Products PHP has CSRF via /search.
|
| CVE-2017-17939 |
|
PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
|
| CVE-2017-17932 |
|
Buffer Overflow in dos (CVE-2017-17932)
vulnerability in dos (CVE-2017-17932). Successful exploitation can lead to full system takeover.
|
| CVE-2015-3637 |
|
SQL Injection in sqli (CVE-2015-3637)
SQL injection in sqli (CVE-2015-3637). Successful exploitation can lead to full system takeover.
|
| CVE-2015-7324 |
|
Cross-Site Scripting (XSS) in stackideas (CVE-2015-7324)
cross-site scripting in stackideas (CVE-2015-7324). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-7666 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2015-7666)
cross-site scripting in wordpress (CVE-2015-7666). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-7667 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2015-7667)
cross-site scripting in wordpress (CVE-2015-7667). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-7668 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2015-7668)
cross-site scripting in wordpress (CVE-2015-7668). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-7669 |
|
Path Traversal in wordpress (CVE-2015-7669)
path traversal in wordpress (CVE-2015-7669). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11697 |
|
Buffer Overflow in c (CVE-2017-11697)
vulnerability in c (CVE-2017-11697). Successful exploitation can lead to full system takeover.
|
| CVE-2017-9608 |
|
Vulnerability in dos (CVE-2017-9608)
vulnerability in dos (CVE-2017-9608). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-16768 |
|
Cross-Site Scripting (XSS) in synology (CVE-2017-16768)
cross-site scripting in synology (CVE-2017-16768). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-7154 |
|
Vulnerability in dos (CVE-2017-7154)
vulnerability in dos (CVE-2017-7154). Confidential information can be exposed externally.
|
| CVE-2017-7155 |
|
Buffer Overflow in dos (CVE-2017-7155)
vulnerability in dos (CVE-2017-7155). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7156 |
|
Buffer Overflow in dos (CVE-2017-7156)
vulnerability in dos (CVE-2017-7156). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7157 |
|
Buffer Overflow in dos (CVE-2017-7157)
vulnerability in dos (CVE-2017-7157). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7159 |
|
Buffer Overflow in dos (CVE-2017-7159)
vulnerability in dos (CVE-2017-7159). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7160 |
|
Buffer Overflow in dos (CVE-2017-7160)
vulnerability in dos (CVE-2017-7160). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7162 |
|
Buffer Overflow in dos (CVE-2017-7162)
vulnerability in dos (CVE-2017-7162). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7163 |
|
Buffer Overflow in dos (CVE-2017-7163)
vulnerability in dos (CVE-2017-7163). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17914 |
|
Vulnerability in c (CVE-2017-17914)
vulnerability in c (CVE-2017-17914). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17935 |
|
Out-of-Bounds Read in c (CVE-2017-17935)
vulnerability in c (CVE-2017-17935). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17900 |
|
SQL Injection in sqli (CVE-2017-17900)
SQL injection in sqli (CVE-2017-17900). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17906 |
|
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.
PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.
|
| CVE-2017-17928 |
|
SQL Injection in sqli (CVE-2017-17928)
SQL injection in sqli (CVE-2017-17928). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17931 |
|
PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter.
PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter.
|
| CVE-2017-17904 |
|
Cross-Site Scripting (XSS) in fortunescripts (CVE-2017-17904)
cross-site scripting in fortunescripts (CVE-2017-17904). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17907 |
|
Cross-Site Scripting (XSS) in car-rental-script-project (CVE-2017-17907)
cross-site scripting in car-rental-script-project (CVE-2017-17907). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17909 |
|
PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter.
PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter.
|