Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2014-7860 Information Disclosure in d-link (CVE-2014-7860)
vulnerability in d-link (CVE-2014-7860). Risk of unauthorized operations or information disclosure.
CVE-2015-3206 Authentication Bypass in pykerberos (CVE-2015-3206)
authentication bypass in pykerberos (CVE-2015-3206). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.1.6` or later.
CVE-2015-4017 Vulnerability in salt (CVE-2015-4017)
vulnerability in salt (CVE-2015-4017). Data can be tampered with by attackers. Mitigation: upgrade to `2014.7.6` or later.
CVE-2014-7859 Buffer Overflow in d-link (CVE-2014-7859)
vulnerability in d-link (CVE-2014-7859). Successful exploitation can lead to full system takeover.
CVE-2015-3257 Cross-Site Scripting (XSS) in zend (CVE-2015-3257)
cross-site scripting in zend (CVE-2015-3257). Risk of unauthorized operations or information disclosure.
CVE-2015-3211 php-fpm allows local users to write to or create arbitrary files via a symlink attack.
php-fpm allows local users to write to or create arbitrary files via a symlink attack.
CVE-2015-5700 Vulnerability in tug (CVE-2015-5700)
vulnerability in tug (CVE-2015-5700). Data can be tampered with by attackers.
CVE-2015-5701 Vulnerability in tug (CVE-2015-5701)
vulnerability in tug (CVE-2015-5701). Data can be tampered with by attackers.
CVE-2014-9564 Vulnerability in ibm (CVE-2014-9564)
vulnerability in ibm (CVE-2014-9564). Risk of unauthorized operations or information disclosure.
CVE-2014-9637 Vulnerability in dos (CVE-2014-9637)
vulnerability in dos (CVE-2014-9637). Risk of unauthorized operations or information disclosure.
CVE-2015-1324 Vulnerability in canonical (CVE-2015-1324)
vulnerability in canonical (CVE-2015-1324). Successful exploitation can lead to full system takeover.
CVE-2017-13697 controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable.
controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable.
CVE-2016-5816 Vulnerability in westermo (CVE-2016-5816)
vulnerability in westermo (CVE-2016-5816). Confidential information can be exposed externally.
CVE-2017-12709 Vulnerability in westermo (CVE-2017-12709)
vulnerability in westermo (CVE-2017-12709). Risk of unauthorized operations or information disclosure.
CVE-2017-12703 Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-12703)
vulnerability in csrf (CVE-2017-12703). Successful exploitation can lead to full system takeover.
CVE-2017-13693 Information Disclosure in c (CVE-2017-13693)
vulnerability in c (CVE-2017-13693). Confidential information can be exposed externally.
CVE-2017-13694 Information Disclosure in c (CVE-2017-13694)
vulnerability in c (CVE-2017-13694). Confidential information can be exposed externally.
CVE-2017-13695 Information Disclosure in c (CVE-2017-13695)
vulnerability in c (CVE-2017-13695). Confidential information can be exposed externally.
CVE-2017-13692 Vulnerability in c (CVE-2017-13692)
vulnerability in c (CVE-2017-13692). Risk of unauthorized operations or information disclosure.
CVE-2017-13686 Vulnerability in c (CVE-2017-13686)
vulnerability in c (CVE-2017-13686). Successful exploitation can lead to full system takeover.
CVE-2015-8352 Path Traversal in path-traversal (CVE-2015-8352)
path traversal in path-traversal (CVE-2015-8352). Successful exploitation can lead to full system takeover.
CVE-2015-8355 SQL Injection in sqli (CVE-2015-8355)
SQL injection in sqli (CVE-2015-8355). Successful exploitation can lead to full system takeover.
CVE-2015-4699 Cross-Site Scripting (XSS) in cloud4wi (CVE-2015-4699)
cross-site scripting in cloud4wi (CVE-2015-4699). Risk of unauthorized operations or information disclosure.
CVE-2015-5146 Vulnerability in dos (CVE-2015-5146)
vulnerability in dos (CVE-2015-5146). Risk of unauthorized operations or information disclosure.
CVE-2015-7516 Vulnerability in dos (CVE-2015-7516)
vulnerability in dos (CVE-2015-7516). Risk of unauthorized operations or information disclosure.
CVE-2015-8308 Authentication Bypass in lxdm-project (CVE-2015-8308)
authentication bypass in lxdm-project (CVE-2015-8308). Successful exploitation can lead to full system takeover.
CVE-2015-5293 Vulnerability in redhat (CVE-2015-5293)
vulnerability in redhat (CVE-2015-5293). Confidential information can be exposed externally.
CVE-2015-1801 Buffer Overflow in dos (CVE-2015-1801)
vulnerability in dos (CVE-2015-1801). Successful exploitation can lead to full system takeover.
CVE-2015-7896 Buffer Overflow in dos (CVE-2015-7896)
vulnerability in dos (CVE-2015-7896). Risk of unauthorized operations or information disclosure.
CVE-2015-1800 Information Disclosure in samsung (CVE-2015-1800)
vulnerability in samsung (CVE-2015-1800). Confidential information can be exposed externally.
CVE-2015-7258 Vulnerability in zte (CVE-2015-7258)
vulnerability in zte (CVE-2015-7258). Successful exploitation can lead to full system takeover.
CVE-2015-7259 Vulnerability in zte (CVE-2015-7259)
vulnerability in zte (CVE-2015-7259). Successful exploitation can lead to full system takeover.
CVE-2017-12879 Cross-Site Scripting (XSS) in paessler (CVE-2017-12879)
cross-site scripting in paessler (CVE-2017-12879). Risk of unauthorized operations or information disclosure.
CVE-2017-13671 Cross-Site Scripting (XSS) in misp (CVE-2017-13671)
cross-site scripting in misp (CVE-2017-13671). Risk of unauthorized operations or information disclosure.
CVE-2017-9555 Cross-Site Scripting (XSS) in synology (CVE-2017-9555)
cross-site scripting in synology (CVE-2017-9555). Risk of unauthorized operations or information disclosure.
CVE-2017-12074 Path Traversal in path-traversal (CVE-2017-12074)
path traversal in path-traversal (CVE-2017-12074). Data can be tampered with by attackers.
CVE-2017-9511 Path Traversal in path-traversal (CVE-2017-9511)
path traversal in path-traversal (CVE-2017-9511). Confidential information can be exposed externally.
CVE-2017-9512 Information Disclosure in atlassian (CVE-2017-9512)
vulnerability in atlassian (CVE-2017-9512). Confidential information can be exposed externally.
CVE-2017-12679 SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php.
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php.
CVE-2017-13669 SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.
CVE-2017-9507 Cross-Site Scripting (XSS) in atlassian (CVE-2017-9507)
cross-site scripting in atlassian (CVE-2017-9507). Risk of unauthorized operations or information disclosure.
CVE-2017-9508 Cross-Site Scripting (XSS) in atlassian (CVE-2017-9508)
cross-site scripting in atlassian (CVE-2017-9508). Risk of unauthorized operations or information disclosure.
CVE-2017-9509 Cross-Site Scripting (XSS) in atlassian (CVE-2017-9509)
cross-site scripting in atlassian (CVE-2017-9509). Risk of unauthorized operations or information disclosure.
CVE-2017-9510 Cross-Site Scripting (XSS) in atlassian (CVE-2017-9510)
cross-site scripting in atlassian (CVE-2017-9510). Risk of unauthorized operations or information disclosure.
CVE-2017-12136 Vulnerability in dos (CVE-2017-12136)
vulnerability in dos (CVE-2017-12136). Successful exploitation can lead to full system takeover.
CVE-2017-12137 Vulnerability in c (CVE-2017-12137)
vulnerability in c (CVE-2017-12137). Successful exploitation can lead to full system takeover.
CVE-2017-13666 Vulnerability in multicorewareinc (CVE-2017-13666)
vulnerability in multicorewareinc (CVE-2017-13666). Risk of unauthorized operations or information disclosure.
CVE-2017-13648 Vulnerability in c (CVE-2017-13648)
vulnerability in c (CVE-2017-13648). Risk of unauthorized operations or information disclosure.
CVE-2017-12847 Vulnerability in nagios (CVE-2017-12847)
vulnerability in nagios (CVE-2017-12847). Data can be tampered with by attackers.
CVE-2017-13649 Vulnerability in unrealircd (CVE-2017-13649)
vulnerability in unrealircd (CVE-2017-13649). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →