Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: attack-types Clear

ID	Title	Severity	Tags	Detected
CVE-2017-9834	SQL Injection in wordpress (CVE-2017-9834) SQL injection in wordpress (CVE-2017-9834). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress SQL Injection Cwe 89 +2	8 years ago
CVE-2017-9458	XXE (XML External Entity) in ssrf (CVE-2017-9458) vulnerability in ssrf (CVE-2017-9458). Successful exploitation can lead to full system takeover.	Critical	Server-Side Request Forgery Denial of Service Cwe 611 Cwe 918 +2	8 years ago
CVE-2017-14145	SQL Injection in sqli (CVE-2017-14145) SQL injection in sqli (CVE-2017-14145). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Helpdezk	8 years ago
CVE-2017-14076	SQL Injection in sqli (CVE-2017-14076) SQL injection in sqli (CVE-2017-14076). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Nexusphp	8 years ago
CVE-2017-14069	SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php. SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php.	Critical	PHP SQL Injection Cwe 89 Nexusphp	8 years ago
CVE-2017-14061	Vulnerability in c (CVE-2017-14061) vulnerability in c (CVE-2017-14061). Successful exploitation can lead to full system takeover.	Critical	C Denial of Service Cwe 190 Gnu +1	8 years ago
CVE-2017-14062	Vulnerability in c (CVE-2017-14062) vulnerability in c (CVE-2017-14062). Successful exploitation can lead to full system takeover.	Critical	C Denial of Service Cwe 190 Gnu +3	8 years ago
CVE-2017-12698	Authentication Bypass in advantech (CVE-2017-12698) authentication bypass in advantech (CVE-2017-12698). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Authentication Bypass Cwe 287 Advantech +1	8 years ago
CVE-2017-12865	Buffer Overflow in c (CVE-2017-12865) vulnerability in c (CVE-2017-12865). Successful exploitation can lead to full system takeover.	Critical	C Denial of Service Cwe 119 Intel +3	8 years ago
CVE-2015-7517	SQL Injection in wordpress (CVE-2015-7517) SQL injection in wordpress (CVE-2015-7517). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress SQL Injection Cwe 89 +2	8 years ago
CVE-2017-10842	SQL Injection in sqli (CVE-2017-10842) SQL injection in sqli (CVE-2017-10842). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Basercms	8 years ago
CVE-2017-13715	Vulnerability in c (CVE-2017-13715) vulnerability in c (CVE-2017-13715). Successful exploitation can lead to full system takeover.	Critical	C Denial of Service Cwe 665 Linux +1	8 years ago
CVE-2014-9558	Multiple SQL injection vulnerabilities in SmartCMS v.2. Multiple SQL injection vulnerabilities in SmartCMS v.2.	Critical	SQL Injection Cwe 89 Smartcms	8 years ago
CVE-2014-8428	Vulnerability in privilege-escalation (CVE-2014-8428) vulnerability in privilege-escalation (CVE-2014-8428). Successful exploitation can lead to full system takeover.	Critical	Privilege Escalation Cwe 264 Barracuda Load Balancer	8 years ago
CVE-2017-13707	Privilege Escalation in privilege-escalation (CVE-2017-13707) vulnerability in privilege-escalation (CVE-2017-13707). Successful exploitation can lead to full system takeover.	Critical	Privilege Escalation Cwe 269 Axcient Replibit	8 years ago
CVE-2015-8352	Path Traversal in path-traversal (CVE-2015-8352) path traversal in path-traversal (CVE-2015-8352). Successful exploitation can lead to full system takeover.	Critical	PHP Path Traversal Cwe 22 Zen Cart	8 years ago
CVE-2015-1801	Buffer Overflow in dos (CVE-2015-1801) vulnerability in dos (CVE-2015-1801). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 119 Samsung Galaxy S4 Firmware +1	8 years ago
CVE-2017-12679	SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php. SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php.	Critical	PHP SQL Injection Cwe 89 Nexusphp	8 years ago
CVE-2017-13669	SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php. SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.	Critical	PHP SQL Injection Cwe 89 Nexusphp	8 years ago
CVE-2017-13137	The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php. The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php.	Critical	PHP WordPress SQL Injection Cwe 89 +2	8 years ago
CVE-2017-12791	Path Traversal in salt (CVE-2017-12791) path traversal in salt (CVE-2017-12791). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2016.11.7, 2017.7.1` or later.	Critical	Path Traversal Cwe 22 Saltstack Salt	8 years ago
CVE-2017-7420	Authentication Bypass in microfocus (CVE-2017-7420) authentication bypass in microfocus (CVE-2017-7420). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 287 Microfocus Enterprise Developer +2	8 years ago
CVE-2017-12981	SQL Injection in sqli (CVE-2017-12981) SQL injection in sqli (CVE-2017-12981). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Nexusphp	8 years ago
CVE-2007-5341	Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8. Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.	Critical	Remote Code Execution Cwe 119 Mozilla Firefox	8 years ago
CVE-2017-12776	SQL Injection in sqli (CVE-2017-12776) SQL injection in sqli (CVE-2017-12776). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Nexusphp Project +1	8 years ago
CVE-2017-12943	Path Traversal in path-traversal (CVE-2017-12943) path traversal in path-traversal (CVE-2017-12943). Successful exploitation can lead to full system takeover.	Critical	PHP Path Traversal Cwe 22 Dlink +2	8 years ago
CVE-2017-12939	Vulnerability in unity3d (CVE-2017-12939) vulnerability in unity3d (CVE-2017-12939). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 20 Unity3D Unity Editor +2	8 years ago
CVE-2017-12908	SQL Injection in sqli (CVE-2017-12908) SQL injection in sqli (CVE-2017-12908). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Nexusphp Project +1	8 years ago
CVE-2017-12909	SQL Injection in sqli (CVE-2017-12909) SQL injection in sqli (CVE-2017-12909). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Nexusphp Project +1	8 years ago
CVE-2017-12910	SQL Injection in sqli (CVE-2017-12910) SQL injection in sqli (CVE-2017-12910). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Nexusphp Project +1	8 years ago
CVE-2015-3616	SQL Injection in sqli (CVE-2015-3616) SQL injection in sqli (CVE-2015-3616). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Fortinet Fortimanager Firmware +6	8 years ago
CVE-2017-8658	Buffer Overflow in microsoft (CVE-2017-8658) vulnerability in microsoft (CVE-2017-8658). Successful exploitation can lead to full system takeover.	Critical	JavaScript Remote Code Execution Cwe 119 Microsoft +1	8 years ago
CVE-2015-2311	Vulnerability in dos (CVE-2015-2311) vulnerability in dos (CVE-2015-2311). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 191 Capnproto	8 years ago
CVE-2015-0780	SQL Injection in sqli (CVE-2015-0780) SQL injection in sqli (CVE-2015-0780). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Novell Zenworks Configuration Management	8 years ago
CVE-2015-0782	SQL Injection in sqli (CVE-2015-0782) SQL injection in sqli (CVE-2015-0782). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Novell Zenworks Configuration Management	8 years ago
CVE-2015-0781	Path Traversal in path-traversal (CVE-2015-0781) path traversal in path-traversal (CVE-2015-0781). Successful exploitation can lead to full system takeover.	Critical	Path Traversal Cwe 22 Novell Zenworks Configuration Management	8 years ago
CVE-2015-2310	Vulnerability in c (CVE-2015-2310) vulnerability in c (CVE-2015-2310). Confidential information can be exposed externally.	Critical	C Denial of Service Cwe 190 Capnproto	8 years ago
CVE-2017-11153	Unsafe Deserialization in deserialization (CVE-2017-11153) vulnerability in deserialization (CVE-2017-11153). Successful exploitation can lead to full system takeover.	Critical	PHP Insecure Deserialization Cwe 502 Synology +1	8 years ago
CVE-2015-7853	Vulnerability in dos (CVE-2015-7853) vulnerability in dos (CVE-2015-7853). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 120 Ntp Netapp +5	8 years ago
CVE-2017-12650	SQL Injection in wordpress (CVE-2017-12650) SQL injection in wordpress (CVE-2017-12650). Successful exploitation can lead to full system takeover.	Critical	WordPress SQL Injection Cwe 89 Loginizer	8 years ago
CVE-2017-12567	SQL Injection in sqli (CVE-2017-12567) SQL injection in sqli (CVE-2017-12567). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Quest Kace Asset Management Appliance +2	8 years ago
CVE-2017-12562	Buffer Overflow in c (CVE-2017-12562) vulnerability in c (CVE-2017-12562). Successful exploitation can lead to full system takeover.	Critical	C Denial of Service Cwe 119 Libsndfile Project +3	8 years ago
CVE-2017-10816	SQL Injection in sqli (CVE-2017-10816) SQL injection in sqli (CVE-2017-10816). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Intercom Malion	8 years ago
CVE-2017-11721	Buffer Overflow in dos (CVE-2017-11721) vulnerability in dos (CVE-2017-11721). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 119 Ioquake3	8 years ago
CVE-2017-11383	SQL Injection in sqli (CVE-2017-11383) SQL injection in sqli (CVE-2017-11383). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution SQL Injection Cwe 89 Trendmicro +1	8 years ago
CVE-2017-11384	SQL Injection in sqli (CVE-2017-11384) SQL injection in sqli (CVE-2017-11384). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution SQL Injection Cwe 89 Trendmicro +1	8 years ago
CVE-2017-11385	SQL Injection in sqli (CVE-2017-11385) SQL injection in sqli (CVE-2017-11385). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution SQL Injection Cwe 89 Trendmicro +1	8 years ago
CVE-2017-11386	SQL Injection in sqli (CVE-2017-11386) SQL injection in sqli (CVE-2017-11386). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution SQL Injection Cwe 89 Trendmicro +1	8 years ago
CVE-2017-11389	Path Traversal in path-traversal (CVE-2017-11389) path traversal in path-traversal (CVE-2017-11389). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Path Traversal Cwe 22 Trendmicro +1	8 years ago
CVE-2017-11494	SQL Injection in sqli (CVE-2017-11494) SQL injection in sqli (CVE-2017-11494). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Sol Connect Solconnect Iset Mpp Meter Firmware +1	8 years ago

Vulnerabilities

🍪 About cookies