Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2017-12071 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-12071)
SSRF in ssrf (CVE-2017-12071). Confidential information can be exposed externally.
|
| CVE-2017-11162 |
|
Path Traversal in path-traversal (CVE-2017-11162)
path traversal in path-traversal (CVE-2017-11162). Confidential information can be exposed externally.
|
| CVE-2017-11161 |
|
SQL Injection in sqli (CVE-2017-11161)
SQL injection in sqli (CVE-2017-11161). Successful exploitation can lead to full system takeover.
|
| CVE-2017-9095 |
|
XXE (XML External Entity) in divinglog (CVE-2017-9095)
vulnerability in divinglog (CVE-2017-9095). Confidential information can be exposed externally.
|
| CVE-2017-11611 |
|
Cross-Site Scripting (XSS) in wolfcms (CVE-2017-11611)
cross-site scripting in wolfcms (CVE-2017-11611). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-14219 |
|
Cross-Site Scripting (XSS) in intelbras (CVE-2017-14219)
cross-site scripting in intelbras (CVE-2017-14219). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6796 |
|
OS Command Injection in cisco (CVE-2017-6796)
OS command injection in cisco (CVE-2017-6796). Successful exploitation can lead to full system takeover.
|
| CVE-2017-12227 |
|
SQL Injection in sqli (CVE-2017-12227)
SQL injection in sqli (CVE-2017-12227). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6794 |
|
Vulnerability in cisco (CVE-2017-6794)
vulnerability in cisco (CVE-2017-6794). Successful exploitation can lead to full system takeover.
|
| CVE-2017-12217 |
|
Vulnerability in dos (CVE-2017-12217)
vulnerability in dos (CVE-2017-12217). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12218 |
|
Vulnerability in cisco (CVE-2017-12218)
vulnerability in cisco (CVE-2017-12218). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12223 |
|
Vulnerability in cisco (CVE-2017-12223)
vulnerability in cisco (CVE-2017-12223). Successful exploitation can lead to full system takeover.
|
| CVE-2017-6792 |
|
Vulnerability in cisco (CVE-2017-6792)
vulnerability in cisco (CVE-2017-6792). Data can be tampered with by attackers.
|
| CVE-2017-6795 |
|
Vulnerability in cisco (CVE-2017-6795)
vulnerability in cisco (CVE-2017-6795). Data can be tampered with by attackers.
|
| CVE-2017-12216 |
|
Information Disclosure in cisco (CVE-2017-12216)
vulnerability in cisco (CVE-2017-12216). Successful exploitation can lead to full system takeover.
|
| CVE-2017-12212 |
|
Cross-Site Scripting (XSS) in cisco (CVE-2017-12212)
cross-site scripting in cisco (CVE-2017-12212). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12220 |
|
Cross-Site Scripting (XSS) in cisco (CVE-2017-12220)
cross-site scripting in cisco (CVE-2017-12220). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12221 |
|
Cross-Site Scripting (XSS) in cisco (CVE-2017-12221)
cross-site scripting in cisco (CVE-2017-12221). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6789 |
|
Cross-Site Scripting (XSS) in cisco (CVE-2017-6789)
cross-site scripting in cisco (CVE-2017-6789). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12224 |
|
Information Disclosure in cisco (CVE-2017-12224)
vulnerability in cisco (CVE-2017-12224). Confidential information can be exposed externally.
|
| CVE-2017-6793 |
|
Information Disclosure in cisco (CVE-2017-6793)
vulnerability in cisco (CVE-2017-6793). Confidential information can be exposed externally.
|
| CVE-2017-12211 |
|
Vulnerability in cisco (CVE-2017-12211)
vulnerability in cisco (CVE-2017-12211). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6631 |
|
Vulnerability in dos (CVE-2017-6631)
vulnerability in dos (CVE-2017-6631). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6780 |
|
Vulnerability in dos (CVE-2017-6780)
vulnerability in dos (CVE-2017-6780). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12213 |
|
Authentication Bypass in cisco (CVE-2017-12213)
authentication bypass in cisco (CVE-2017-12213). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12225 |
|
Authentication Bypass in cisco (CVE-2017-12225)
authentication bypass in cisco (CVE-2017-12225). Data can be tampered with by attackers.
|
| CVE-2017-6791 |
|
Buffer Overflow in dos (CVE-2017-6791)
vulnerability in dos (CVE-2017-6791). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-4085 |
|
Path Traversal in express (CVE-2015-4085)
path traversal in express (CVE-2015-4085). Confidential information can be exposed externally.
|
| CVE-2015-3313 |
|
SQL injection vulnerability in WordPress Community Events plugin before 1.4.
SQL injection vulnerability in WordPress Community Events plugin before 1.4.
|
| CVE-2015-3314 |
|
SQL injection vulnerability in WordPress Tune Library plugin before 1.5.5.
SQL injection vulnerability in WordPress Tune Library plugin before 1.5.5.
|
| CVE-2015-4627 |
|
SQL injection vulnerability in Pragyan CMS 3.0.
SQL injection vulnerability in Pragyan CMS 3.0.
|
| CVE-2015-4724 |
|
SQL injection vulnerability in Concrete5 5.7.3.1.
SQL injection vulnerability in Concrete5 5.7.3.1.
|
| CVE-2015-5052 |
|
SQL injection vulnerability in Sefrengo before 1.6.5 beta2.
SQL injection vulnerability in Sefrengo before 1.6.5 beta2.
|
| CVE-2015-3169 |
|
Cross-site scripting (XSS) vulnerability in askbot 0.7.51-4.el6.noarch.
Cross-site scripting (XSS) vulnerability in askbot 0.7.51-4.el6.noarch.
|
| CVE-2015-4721 |
|
Multiple cross-site scripting (XSS) vulnerabilities in Concrete5 5.7.3.1.
Multiple cross-site scripting (XSS) vulnerabilities in Concrete5 5.7.3.1.
|
| CVE-2015-5060 |
|
Cross-site scripting (XSS) vulnerability in anchor-cms before 0.9-dev.
Cross-site scripting (XSS) vulnerability in anchor-cms before 0.9-dev.
|
| CVE-2015-7672 |
|
Cross-Site Scripting (XSS) in centreon (CVE-2015-7672)
cross-site scripting in centreon (CVE-2015-7672). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-8079 |
|
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db.
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db.
|
| CVE-2014-9565 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2014-9565)
vulnerability in csrf (CVE-2014-9565). Successful exploitation can lead to full system takeover.
|
| CVE-2015-4619 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2015-4619)
vulnerability in csrf (CVE-2015-4619). Successful exploitation can lead to full system takeover.
|
| CVE-2015-4697 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2015-4697)
vulnerability in wordpress (CVE-2015-4697). Successful exploitation can lead to full system takeover.
|
| CVE-2015-3222 |
|
Vulnerability in c (CVE-2015-3222)
vulnerability in c (CVE-2015-3222). Successful exploitation can lead to full system takeover.
|
| CVE-2015-4629 |
|
Vulnerability in huawei (CVE-2015-4629)
vulnerability in huawei (CVE-2015-4629). Successful exploitation can lead to full system takeover.
|
| CVE-2015-3991 |
|
Vulnerability in dos (CVE-2015-3991)
vulnerability in dos (CVE-2015-3991). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14192 |
|
Cross-Site Scripting (XSS) in finecms-project (CVE-2017-14192)
cross-site scripting in finecms-project (CVE-2017-14192). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-14193 |
|
Cross-Site Scripting (XSS) in finecms-project (CVE-2017-14193)
cross-site scripting in finecms-project (CVE-2017-14193). Risk of unauthorized operations or information disclosure. Exploitable via `Referer header`.
|
| CVE-2017-14194 |
|
Cross-Site Scripting (XSS) in finecms-project (CVE-2017-14194)
cross-site scripting in finecms-project (CVE-2017-14194). Risk of unauthorized operations or information disclosure. Exploitable via `Referer header`.
|
| CVE-2017-14195 |
|
Cross-Site Scripting (XSS) in finecms-project (CVE-2017-14195)
cross-site scripting in finecms-project (CVE-2017-14195). Risk of unauthorized operations or information disclosure. Exploitable via `Referer header`.
|
| CVE-2017-1098 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2017-1098)
cross-site scripting in ibm (CVE-2017-1098). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1189 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2017-1189)
cross-site scripting in ibm (CVE-2017-1189). Risk of unauthorized operations or information disclosure.
|