Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2017-9509 Cross-Site Scripting (XSS) in atlassian (CVE-2017-9509)
cross-site scripting in atlassian (CVE-2017-9509). Risk of unauthorized operations or information disclosure.
CVE-2017-9510 Cross-Site Scripting (XSS) in atlassian (CVE-2017-9510)
cross-site scripting in atlassian (CVE-2017-9510). Risk of unauthorized operations or information disclosure.
CVE-2017-12134 Vulnerability in c (CVE-2017-12134)
vulnerability in c (CVE-2017-12134). Successful exploitation can lead to full system takeover.
CVE-2017-12135 Vulnerability in dos (CVE-2017-12135)
vulnerability in dos (CVE-2017-12135). Successful exploitation can lead to full system takeover.
CVE-2017-12136 Vulnerability in dos (CVE-2017-12136)
vulnerability in dos (CVE-2017-12136). Successful exploitation can lead to full system takeover.
CVE-2017-13658 Vulnerability in c (CVE-2017-13658)
vulnerability in c (CVE-2017-13658). Risk of unauthorized operations or information disclosure.
CVE-2017-9506 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-9506)
SSRF in ssrf (CVE-2017-9506). Risk of unauthorized operations or information disclosure.
CVE-2017-12971 Cross-Site Scripting (XSS) in apache2triad (CVE-2017-12971)
cross-site scripting in apache2triad (CVE-2017-12971). Risk of unauthorized operations or information disclosure.
CVE-2017-12970 Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-12970)
vulnerability in csrf (CVE-2017-12970). Successful exploitation can lead to full system takeover.
CVE-2017-12809 Vulnerability in dos (CVE-2017-12809)
vulnerability in dos (CVE-2017-12809). Risk of unauthorized operations or information disclosure.
CVE-2017-13137 The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php.
The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php.
CVE-2017-12844 Cross-Site Scripting (XSS) in icewarp (CVE-2017-12844)
cross-site scripting in icewarp (CVE-2017-12844). Risk of unauthorized operations or information disclosure.
CVE-2017-13138 Cross-Site Scripting (XSS) in wordpress (CVE-2017-13138)
cross-site scripting in wordpress (CVE-2017-13138). Risk of unauthorized operations or information disclosure.
CVE-2017-12791 Path Traversal in salt (CVE-2017-12791)
path traversal in salt (CVE-2017-12791). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2016.11.7, 2017.7.1` or later.
CVE-2017-13140 Buffer Overflow in c (CVE-2017-13140)
vulnerability in c (CVE-2017-13140). Risk of unauthorized operations or information disclosure.
CVE-2017-13131 Vulnerability in c (CVE-2017-13131)
vulnerability in c (CVE-2017-13131). Risk of unauthorized operations or information disclosure.
CVE-2017-13132 Vulnerability in c (CVE-2017-13132)
vulnerability in c (CVE-2017-13132). Risk of unauthorized operations or information disclosure.
CVE-2017-13133 Vulnerability in c (CVE-2017-13133)
vulnerability in c (CVE-2017-13133). Risk of unauthorized operations or information disclosure.
CVE-2017-13134 Out-of-Bounds Read in c (CVE-2017-13134)
vulnerability in c (CVE-2017-13134). Risk of unauthorized operations or information disclosure.
CVE-2017-5208 Vulnerability in dos (CVE-2017-5208)
vulnerability in dos (CVE-2017-5208). Successful exploitation can lead to full system takeover.
CVE-2015-5258 Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3.
Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3.
CVE-2014-6189 Cross-Site Scripting (XSS) in ibm (CVE-2014-6189)
cross-site scripting in ibm (CVE-2014-6189). Risk of unauthorized operations or information disclosure.
CVE-2017-7557 Authentication Bypass in csrf (CVE-2017-7557)
authentication bypass in csrf (CVE-2017-7557). Successful exploitation can lead to full system takeover.
CVE-2017-13058 Vulnerability in c (CVE-2017-13058)
vulnerability in c (CVE-2017-13058). Risk of unauthorized operations or information disclosure.
CVE-2017-13059 Vulnerability in c (CVE-2017-13059)
vulnerability in c (CVE-2017-13059). Risk of unauthorized operations or information disclosure.
CVE-2017-13060 Vulnerability in c (CVE-2017-13060)
vulnerability in c (CVE-2017-13060). Risk of unauthorized operations or information disclosure.
CVE-2017-13061 Vulnerability in c (CVE-2017-13061)
vulnerability in c (CVE-2017-13061). Risk of unauthorized operations or information disclosure.
CVE-2017-13062 Vulnerability in c (CVE-2017-13062)
vulnerability in c (CVE-2017-13062). Risk of unauthorized operations or information disclosure.
CVE-2017-7421 Cross-Site Scripting (XSS) in microfocus (CVE-2017-7421)
cross-site scripting in microfocus (CVE-2017-7421). Risk of unauthorized operations or information disclosure.
CVE-2017-7422 Cross-Site Scripting (XSS) in microfocus (CVE-2017-7422)
cross-site scripting in microfocus (CVE-2017-7422). Risk of unauthorized operations or information disclosure.
CVE-2017-7424 Path Traversal in path-traversal (CVE-2017-7424)
path traversal in path-traversal (CVE-2017-7424). Confidential information can be exposed externally.
CVE-2017-7420 Authentication Bypass in microfocus (CVE-2017-7420)
authentication bypass in microfocus (CVE-2017-7420). Successful exploitation can lead to full system takeover.
CVE-2017-12981 SQL Injection in sqli (CVE-2017-12981)
SQL injection in sqli (CVE-2017-12981). Successful exploitation can lead to full system takeover.
CVE-2017-12978 Cross-Site Scripting (XSS) in cacti (CVE-2017-12978)
cross-site scripting in cacti (CVE-2017-12978). Risk of unauthorized operations or information disclosure.
CVE-2017-12979 Cross-Site Scripting (XSS) in dokuwiki (CVE-2017-12979)
cross-site scripting in dokuwiki (CVE-2017-12979). Risk of unauthorized operations or information disclosure.
CVE-2017-12980 Cross-Site Scripting (XSS) in dokuwiki (CVE-2017-12980)
cross-site scripting in dokuwiki (CVE-2017-12980). Risk of unauthorized operations or information disclosure.
CVE-2017-12984 Cross-Site Scripting (XSS) in phpmywind (CVE-2017-12984)
cross-site scripting in phpmywind (CVE-2017-12984). Risk of unauthorized operations or information disclosure.
CVE-2017-12982 Buffer Overflow in c (CVE-2017-12982)
vulnerability in c (CVE-2017-12982). Risk of unauthorized operations or information disclosure.
CVE-2017-12983 Buffer Overflow in c (CVE-2017-12983)
vulnerability in c (CVE-2017-12983). Successful exploitation can lead to full system takeover.
CVE-2017-12977 SQL Injection in wordpress (CVE-2017-12977)
SQL injection in wordpress (CVE-2017-12977). Successful exploitation can lead to full system takeover.
CVE-2017-12966 Buffer Overflow in c (CVE-2017-12966)
vulnerability in c (CVE-2017-12966). Risk of unauthorized operations or information disclosure.
CVE-2017-10661 Use-After-Free in c (CVE-2017-10661)
vulnerability in c (CVE-2017-10661). Successful exploitation can lead to full system takeover.
CVE-2017-11323 Buffer Overflow in dos (CVE-2017-11323)
vulnerability in dos (CVE-2017-11323). Successful exploitation can lead to full system takeover.
CVE-2017-12967 Out-of-Bounds Read in c (CVE-2017-12967)
vulnerability in c (CVE-2017-12967). Risk of unauthorized operations or information disclosure.
CVE-2017-12955 Buffer Overflow in cpp (CVE-2017-12955)
vulnerability in cpp (CVE-2017-12955). Successful exploitation can lead to full system takeover.
CVE-2017-12956 Out-of-Bounds Read in cpp (CVE-2017-12956)
vulnerability in cpp (CVE-2017-12956). Risk of unauthorized operations or information disclosure.
CVE-2017-12957 Out-of-Bounds Read in cpp (CVE-2017-12957)
vulnerability in cpp (CVE-2017-12957). Risk of unauthorized operations or information disclosure.
CVE-2017-12958 Out-of-Bounds Read in c (CVE-2017-12958)
vulnerability in c (CVE-2017-12958). Risk of unauthorized operations or information disclosure.
CVE-2017-12959 Vulnerability in c (CVE-2017-12959)
vulnerability in c (CVE-2017-12959). Risk of unauthorized operations or information disclosure.
CVE-2017-12960 Vulnerability in c (CVE-2017-12960)
vulnerability in c (CVE-2017-12960). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →