Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2017-17635	SQL Injection in sqli (CVE-2017-17635) SQL injection in sqli (CVE-2017-17635). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Mlm Forex Market Plan Script Project +1	8 years ago
CVE-2017-17636	MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter. MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.	Critical	PHP SQL Injection Cwe 89 Mlm Forced Matrix Project +1	8 years ago
CVE-2017-17637	Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter. Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.	Critical	PHP SQL Injection Cwe 89 Car Rental Script Project +1	8 years ago
CVE-2017-17586	SQL Injection in sqli (CVE-2017-17586) SQL injection in sqli (CVE-2017-17586). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Olx Clone Project +1	8 years ago
CVE-2017-17587	SQL Injection in c (CVE-2017-17587) SQL injection in c (CVE-2017-17587). Successful exploitation can lead to full system takeover.	Critical	PHP C SQL Injection Cwe 89 +2	8 years ago
CVE-2017-17588	SQL Injection in sqli (CVE-2017-17588) SQL injection in sqli (CVE-2017-17588). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Imdb Clone Project +1	8 years ago
CVE-2017-17589	SQL Injection in sqli (CVE-2017-17589) SQL injection in sqli (CVE-2017-17589). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Thumbtack Clone Project +1	8 years ago
CVE-2017-17590	FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter. FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.	Critical	SQL Injection Cwe 89 Stackoverflow Clone Project Stackoverflow Clone	8 years ago
CVE-2017-17591	Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter. Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.	Critical	PHP SQL Injection Cwe 89 Realestate Crowdfunding Script Project +1	8 years ago
CVE-2017-17592	Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter. Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.	Critical	PHP SQL Injection Cwe 89 Website Auction Marketplace Project +1	8 years ago
CVE-2017-17594	DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter. DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.	Critical	PHP SQL Injection Cwe 89 Domainsale Php Script Project +1	8 years ago
CVE-2017-17595	Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter. Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.	Critical	SQL Injection Cwe 89 Beauty Parlour Booking Script Project Beauty Parlour Booking Script	8 years ago
CVE-2017-17596	Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter. Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.	Critical	PHP SQL Injection Cwe 89 Entrepreneur Job Portal Script Project +1	8 years ago
CVE-2017-17597	Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter. Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.	Critical	PHP SQL Injection Cwe 89 Nearbuy Clone Script Project +1	8 years ago
CVE-2017-17598	Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter. Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.	Critical	PHP SQL Injection Cwe 89 Affiliate Mlm Script Project +1	8 years ago
CVE-2017-17599	SQL Injection in sqli (CVE-2017-17599) SQL injection in sqli (CVE-2017-17599). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Advance Online Learning Management Script Project +1	8 years ago
CVE-2017-17600	Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter. Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.	Critical	PHP SQL Injection Cwe 89 Basic B2B Script Project +1	8 years ago
CVE-2017-17601	Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter. Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.	Critical	SQL Injection Cwe 89 Cab Booking Script Project Cab Booking Script	8 years ago
CVE-2017-17602	SQL Injection in sqli (CVE-2017-17602) SQL injection in sqli (CVE-2017-17602). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Advance B2B Script Project +1	8 years ago
CVE-2017-17603	SQL Injection in sqli (CVE-2017-17603) SQL injection in sqli (CVE-2017-17603). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Advanced Real Estate Script Project +1	8 years ago
CVE-2017-17604	SQL Injection in sqli (CVE-2017-17604) SQL injection in sqli (CVE-2017-17604). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Entrepreneur Bus Booking Script Project +1	8 years ago
CVE-2017-17605	Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter. Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.	Critical	PHP SQL Injection Cwe 89 Consumer Complaints Clone Script Project +1	8 years ago
CVE-2017-17606	Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter. Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter.	Critical	SQL Injection Cwe 89 Co Work Space Search Script Project Co Work Space Search Script	8 years ago
CVE-2017-17607	CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail. CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.	Critical	SQL Injection Cwe 89 Cms Auditor Website Project Cms Auditor Website	8 years ago
CVE-2017-17608	Child Care Script 1.0 has SQL Injection via the /list city parameter. Child Care Script 1.0 has SQL Injection via the /list city parameter.	Critical	SQL Injection Cwe 89 Kindergarten Elementary School Listing Script Project Kindergarten Elementary School Listing Script	8 years ago
CVE-2017-17609	Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter. Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter.	Critical	SQL Injection Cwe 89 Chartered Accountant Booking Script Project Chartered Accountant Booking Script	8 years ago
CVE-2017-17610	SQL Injection in sqli (CVE-2017-17610) SQL injection in sqli (CVE-2017-17610). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 E Commerce Mlm Software Project +1	8 years ago
CVE-2017-17611	Doctor Search Script 1.0 has SQL Injection via the /list city parameter. Doctor Search Script 1.0 has SQL Injection via the /list city parameter.	Critical	SQL Injection Cwe 89 Doctor Search Script Project Doctor Search Script	8 years ago
CVE-2017-17567	SQL Injection in sqli (CVE-2017-17567) SQL injection in sqli (CVE-2017-17567). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89 Scubez +1	8 years ago
CVE-2017-17570	SQL Injection in sqli (CVE-2017-17570) SQL injection in sqli (CVE-2017-17570). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Expedia Clone Project +1	8 years ago
CVE-2017-17571	FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter. FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.	Critical	SQL Injection Cwe 89 Foodpanda Clone Project Foodpanda Clone	8 years ago
CVE-2017-17572	FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari. FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.	Critical	SQL Injection Cwe 89 Amazon Clone Project Amazon Clone	8 years ago
CVE-2017-17573	SQL Injection in sqli (CVE-2017-17573) SQL injection in sqli (CVE-2017-17573). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Fortunescripts +1	8 years ago
CVE-2017-17574	FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter. FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.	Critical	PHP SQL Injection Cwe 89 Care Clone Project +1	8 years ago
CVE-2017-17575	SQL Injection in sqli (CVE-2017-17575) SQL injection in sqli (CVE-2017-17575). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Groupon Clone Project +1	8 years ago
CVE-2017-17576	SQL Injection in sqli (CVE-2017-17576) SQL injection in sqli (CVE-2017-17576). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Gigs Script Project +1	8 years ago
CVE-2017-17577	SQL Injection in sqli (CVE-2017-17577) SQL injection in sqli (CVE-2017-17577). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Trademe Clone Project +1	8 years ago
CVE-2017-17578	FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter. FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.	Critical	PHP SQL Injection Cwe 89 Crowdfunding Script Project +1	8 years ago
CVE-2017-17579	FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter. FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.	Critical	PHP SQL Injection Cwe 89 Freelancer Clone Project +1	8 years ago
CVE-2017-17580	SQL Injection in sqli (CVE-2017-17580) SQL injection in sqli (CVE-2017-17580). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Linkedin Clone Project +1	8 years ago
CVE-2017-17581	FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter. FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.	Critical	PHP SQL Injection Cwe 89 Quibids Clone Project +1	8 years ago
CVE-2017-17582	FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter. FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.	Critical	SQL Injection Cwe 89 Grubhub Clone Project Grubhub Clone	8 years ago
CVE-2017-17583	FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter. FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.	Critical	SQL Injection Cwe 89 Shutterstock Clone Project Shutterstock Clone	8 years ago
CVE-2017-17584	SQL Injection in sqli (CVE-2017-17584) SQL injection in sqli (CVE-2017-17584). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Makemytrip Clone Project +1	8 years ago
CVE-2017-17585	FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter. FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.	Critical	PHP SQL Injection Cwe 89 Monster Clone Project +1	8 years ago
CVE-2017-17569	Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter. Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Scubez +1	8 years ago
CVE-2017-17538	Vulnerability in dos (CVE-2017-17538) vulnerability in dos (CVE-2017-17538). Risk of unauthorized operations or information disclosure.	High	Denial of Service Mikrotik Router Firmware Router	8 years ago
CVE-2017-17563	Buffer Overflow in dos (CVE-2017-17563) vulnerability in dos (CVE-2017-17563). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 119 Xen	8 years ago
CVE-2017-17564	Vulnerability in dos (CVE-2017-17564) vulnerability in dos (CVE-2017-17564). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 388 Xen	8 years ago
CVE-2017-17565	Vulnerability in dos (CVE-2017-17565) vulnerability in dos (CVE-2017-17565). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 20 Xen	8 years ago

Vulnerabilities

🍪 About cookies