Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2017-9363 Unsafe Deserialization in soffid (CVE-2017-9363)
vulnerability in soffid (CVE-2017-9363). Successful exploitation can lead to full system takeover.
CVE-2017-9360 WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php.
WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php.
CVE-2017-9361 WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php.
WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php.
CVE-2017-9366 Cross-Site Scripting (XSS) in epesi (CVE-2017-9366)
cross-site scripting in epesi (CVE-2017-9366). Risk of unauthorized operations or information disclosure.
CVE-2017-9365 Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-9365)
vulnerability in csrf (CVE-2017-9365). Successful exploitation can lead to full system takeover.
CVE-2017-7384 Cross-Site Scripting (XSS) in flipbuilder (CVE-2017-7384)
cross-site scripting in flipbuilder (CVE-2017-7384). Risk of unauthorized operations or information disclosure.
CVE-2015-5473 Path Traversal in path-traversal (CVE-2015-5473)
path traversal in path-traversal (CVE-2015-5473). Successful exploitation can lead to full system takeover.
CVE-2017-7999 Vulnerability in dos (CVE-2017-7999)
vulnerability in dos (CVE-2017-7999). Risk of unauthorized operations or information disclosure.
CVE-2017-9060 Vulnerability in c (CVE-2017-9060)
vulnerability in c (CVE-2017-9060). Risk of unauthorized operations or information disclosure.
CVE-2017-3127 Cross-Site Scripting (XSS) in fortinet (CVE-2017-3127)
cross-site scripting in fortinet (CVE-2017-3127). Risk of unauthorized operations or information disclosure.
CVE-2017-9331 Cross-Site Scripting (XSS) in epesi (CVE-2017-9331)
cross-site scripting in epesi (CVE-2017-9331). Risk of unauthorized operations or information disclosure.
CVE-2017-9336 The WP Editor.MD plugin 1.6 for WordPress has a stored XSS vulnerability in the content of a post.
The WP Editor.MD plugin 1.6 for WordPress has a stored XSS vulnerability in the content of a post.
CVE-2017-9337 Cross-Site Scripting (XSS) in wordpress (CVE-2017-9337)
cross-site scripting in wordpress (CVE-2017-9337). Risk of unauthorized operations or information disclosure.
CVE-2017-9334 Vulnerability in dos (CVE-2017-9334)
vulnerability in dos (CVE-2017-9334). Risk of unauthorized operations or information disclosure.
CVE-2017-8782 Vulnerability in c (CVE-2017-8782)
vulnerability in c (CVE-2017-8782). Risk of unauthorized operations or information disclosure.
CVE-2017-9304 Vulnerability in c (CVE-2017-9304)
vulnerability in c (CVE-2017-9304). Risk of unauthorized operations or information disclosure.
CVE-2017-9305 Cross-Site Scripting (XSS) in tiki (CVE-2017-9305)
cross-site scripting in tiki (CVE-2017-9305). Risk of unauthorized operations or information disclosure.
CVE-2017-9306 Cross-Site Scripting (XSS) in syspass (CVE-2017-9306)
cross-site scripting in syspass (CVE-2017-9306). Risk of unauthorized operations or information disclosure.
CVE-2017-9307 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-9307)
SSRF in ssrf (CVE-2017-9307). Confidential information can be exposed externally.
CVE-2017-7502 Vulnerability in dos (CVE-2017-7502)
vulnerability in dos (CVE-2017-7502). Risk of unauthorized operations or information disclosure.
CVE-2017-2311 Vulnerability in dos (CVE-2017-2311)
vulnerability in dos (CVE-2017-2311). Risk of unauthorized operations or information disclosure.
CVE-2017-2305 Authorization Flaw in privilege-escalation (CVE-2017-2305)
vulnerability in privilege-escalation (CVE-2017-2305). Successful exploitation can lead to full system takeover.
CVE-2017-2301 Vulnerability in dos (CVE-2017-2301)
vulnerability in dos (CVE-2017-2301). Risk of unauthorized operations or information disclosure.
CVE-2017-2302 Vulnerability in dos (CVE-2017-2302)
vulnerability in dos (CVE-2017-2302). Risk of unauthorized operations or information disclosure.
CVE-2017-2303 Vulnerability in dos (CVE-2017-2303)
vulnerability in dos (CVE-2017-2303). Risk of unauthorized operations or information disclosure.
CVE-2017-2307 Cross-Site Scripting (XSS) in juniper (CVE-2017-2307)
cross-site scripting in juniper (CVE-2017-2307). Risk of unauthorized operations or information disclosure.
CVE-2016-10378 SQL Injection in sqli (CVE-2016-10378)
SQL injection in sqli (CVE-2016-10378). Successful exploitation can lead to full system takeover.
CVE-2016-10379 SQL Injection in sqli (CVE-2016-10379)
SQL injection in sqli (CVE-2016-10379). Successful exploitation can lead to full system takeover.
CVE-2017-9299 Cross-Site Scripting (XSS) in otrs (CVE-2017-9299)
cross-site scripting in otrs (CVE-2017-9299). Risk of unauthorized operations or information disclosure.
CVE-2017-9300 Buffer Overflow in dos (CVE-2017-9300)
vulnerability in dos (CVE-2017-9300). Successful exploitation can lead to full system takeover.
CVE-2017-9301 Out-of-Bounds Read in dos (CVE-2017-9301)
vulnerability in dos (CVE-2017-9301). Successful exploitation can lead to full system takeover.
CVE-2017-9302 Vulnerability in dos (CVE-2017-9302)
vulnerability in dos (CVE-2017-9302). Risk of unauthorized operations or information disclosure.
CVE-2017-9298 Cross-Site Scripting (XSS) in hitachi (CVE-2017-9298)
cross-site scripting in hitachi (CVE-2017-9298). Risk of unauthorized operations or information disclosure.
CVE-2017-9289 Cross-Site Scripting (XSS) in note-project (CVE-2017-9289)
cross-site scripting in note-project (CVE-2017-9289). Risk of unauthorized operations or information disclosure.
CVE-2017-9292 Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782.
Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782.
CVE-2017-9288 Cross-Site Scripting (XSS) in wordpress (CVE-2017-9288)
cross-site scripting in wordpress (CVE-2017-9288). Risk of unauthorized operations or information disclosure.
CVE-2017-9261 Vulnerability in c (CVE-2017-9261)
vulnerability in c (CVE-2017-9261). Risk of unauthorized operations or information disclosure.
CVE-2017-9262 Vulnerability in c (CVE-2017-9262)
vulnerability in c (CVE-2017-9262). Risk of unauthorized operations or information disclosure.
CVE-2017-9263 Vulnerability in c (CVE-2017-9263)
vulnerability in c (CVE-2017-9263). Risk of unauthorized operations or information disclosure. Exploitable via ``ofp_print_role_status_message``.
CVE-2017-9250 Vulnerability in c (CVE-2017-9250)
vulnerability in c (CVE-2017-9250). Risk of unauthorized operations or information disclosure.
CVE-2017-9249 Cross-Site Scripting (XSS) in allen-disk-project (CVE-2017-9249)
cross-site scripting in allen-disk-project (CVE-2017-9249). Risk of unauthorized operations or information disclosure.
CVE-2017-9251 Cross-Site Scripting (XSS) in finecms-project (CVE-2017-9251)
cross-site scripting in finecms-project (CVE-2017-9251). Risk of unauthorized operations or information disclosure.
CVE-2017-9252 Cross-Site Scripting (XSS) in finecms-project (CVE-2017-9252)
cross-site scripting in finecms-project (CVE-2017-9252). Risk of unauthorized operations or information disclosure.
CVE-2017-9243 Cross-Site Scripting (XSS) in aries-networks (CVE-2017-9243)
cross-site scripting in aries-networks (CVE-2017-9243). Risk of unauthorized operations or information disclosure.
CVE-2017-7296 Cross-Site Scripting (XSS) in contiki-os (CVE-2017-7296)
cross-site scripting in contiki-os (CVE-2017-7296). Risk of unauthorized operations or information disclosure.
CVE-2017-9232 Vulnerability in privilege-escalation (CVE-2017-9232)
vulnerability in privilege-escalation (CVE-2017-9232). Successful exploitation can lead to full system takeover.
CVE-2017-7295 Use-After-Free in c (CVE-2017-7295)
vulnerability in c (CVE-2017-7295). Risk of unauthorized operations or information disclosure.
CVE-2017-9242 Vulnerability in c (CVE-2017-9242)
vulnerability in c (CVE-2017-9242). Risk of unauthorized operations or information disclosure.
CVE-2017-3129 Cross-Site Scripting (XSS) in fortinet (CVE-2017-3129)
cross-site scripting in fortinet (CVE-2017-3129). Risk of unauthorized operations or information disclosure.
CVE-2017-7339 Cross-Site Scripting (XSS) in fortinet (CVE-2017-7339)
cross-site scripting in fortinet (CVE-2017-7339). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →