Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2017-7542 |
|
Vulnerability in c (CVE-2017-7542)
vulnerability in c (CVE-2017-7542). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-3421 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2015-3421)
cross-site scripting in wordpress (CVE-2015-3421). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-3638 |
|
phpMyBackupPro before 2.5 does not validate integer input, which allows remote authenticated users to execute arbitrary PHP code by injecting scripts via the path, filename, and period parameters to s...
phpMyBackupPro before 2.5 does not validate integer input, which allows remote authenticated users to execute arbitrary PHP code by injecting scripts via the path, filename, and period parameters to scheduled.php, and making requests to injected scripts, or by injecting PHP into a PHP configuration...
|
| CVE-2015-3639 |
|
Vulnerability in phpmybackuppro (CVE-2015-3639)
vulnerability in phpmybackuppro (CVE-2015-3639). Successful exploitation can lead to full system takeover.
|
| CVE-2015-3640 |
|
Code Injection in phpmybackuppro (CVE-2015-3640)
code injection in phpmybackuppro (CVE-2015-3640). Successful exploitation can lead to full system takeover.
|
| CVE-2017-10993 |
|
Path Traversal in path-traversal (CVE-2017-10993)
path traversal in path-traversal (CVE-2017-10993). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11503 |
|
Cross-Site Scripting (XSS) in phpmailer-project (CVE-2017-11503)
cross-site scripting in phpmailer-project (CVE-2017-11503). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11500 |
|
Path Traversal in path-traversal (CVE-2017-11500)
path traversal in path-traversal (CVE-2017-11500). Data can be tampered with by attackers.
|
| CVE-2017-0378 |
|
Cross-Site Scripting (XSS) in phamm (CVE-2017-0378)
cross-site scripting in phamm (CVE-2017-0378). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11478 |
|
Vulnerability in c (CVE-2017-11478)
vulnerability in c (CVE-2017-11478). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11469 |
|
get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file_name parameter.
get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file_name parameter.
|
| CVE-2017-11470 |
|
SQL Injection in sqli (CVE-2017-11470)
SQL injection in sqli (CVE-2017-11470). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11471 |
|
SQL Injection in sqli (CVE-2017-11471)
SQL injection in sqli (CVE-2017-11471). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11474 |
|
SQL Injection in sqli (CVE-2017-11474)
SQL injection in sqli (CVE-2017-11474). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11475 |
|
SQL Injection in sqli (CVE-2017-11475)
SQL injection in sqli (CVE-2017-11475). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11472 |
|
Vulnerability in c (CVE-2017-11472)
vulnerability in c (CVE-2017-11472). Confidential information can be exposed externally.
|
| CVE-2017-11473 |
|
Vulnerability in c (CVE-2017-11473)
vulnerability in c (CVE-2017-11473). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11465 |
|
Out-of-Bounds Read in dos (CVE-2017-11465)
vulnerability in dos (CVE-2017-11465). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11464 |
|
Vulnerability in c (CVE-2017-11464)
vulnerability in c (CVE-2017-11464). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1203 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2017-1203)
cross-site scripting in ibm (CVE-2017-1203). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-9764 |
|
Cross-Site Scripting (XSS) in metinfo (CVE-2017-9764)
cross-site scripting in metinfo (CVE-2017-9764). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11444 |
|
SQL Injection in sqli (CVE-2017-11444)
SQL injection in sqli (CVE-2017-11444). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11445 |
|
SQL Injection in sqli (CVE-2017-11445)
SQL injection in sqli (CVE-2017-11445). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11446 |
|
Vulnerability in c (CVE-2017-11446)
vulnerability in c (CVE-2017-11446). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11447 |
|
Vulnerability in c (CVE-2017-11447)
vulnerability in c (CVE-2017-11447). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11448 |
|
Information Disclosure in c (CVE-2017-11448)
vulnerability in c (CVE-2017-11448). Confidential information can be exposed externally.
|
| CVE-2017-11449 |
|
Vulnerability in c (CVE-2017-11449)
vulnerability in c (CVE-2017-11449). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11450 |
|
Vulnerability in c (CVE-2017-11450)
vulnerability in c (CVE-2017-11450). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11406 |
|
Vulnerability in c (CVE-2017-11406)
vulnerability in c (CVE-2017-11406). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11407 |
|
Vulnerability in c (CVE-2017-11407)
vulnerability in c (CVE-2017-11407). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11408 |
|
Vulnerability in c (CVE-2017-11408)
vulnerability in c (CVE-2017-11408). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11409 |
|
Vulnerability in c (CVE-2017-11409)
vulnerability in c (CVE-2017-11409). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11410 |
|
Vulnerability in c (CVE-2017-11410)
vulnerability in c (CVE-2017-11410). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11411 |
|
Vulnerability in c (CVE-2017-11411)
vulnerability in c (CVE-2017-11411). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11423 |
|
Out-of-Bounds Read in c (CVE-2017-11423)
vulnerability in c (CVE-2017-11423). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11412 |
|
SQL Injection in sqli (CVE-2017-11412)
SQL injection in sqli (CVE-2017-11412). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11413 |
|
SQL Injection in sqli (CVE-2017-11413)
SQL injection in sqli (CVE-2017-11413). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11414 |
|
SQL Injection in sqli (CVE-2017-11414)
SQL injection in sqli (CVE-2017-11414). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11415 |
|
SQL Injection in sqli (CVE-2017-11415)
SQL injection in sqli (CVE-2017-11415). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11416 |
|
Fiyo CMS 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter.
Fiyo CMS 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter.
|
| CVE-2017-11417 |
|
SQL Injection in sqli (CVE-2017-11417)
SQL injection in sqli (CVE-2017-11417). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11418 |
|
SQL Injection in sqli (CVE-2017-11418)
SQL injection in sqli (CVE-2017-11418). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11419 |
|
SQL Injection in sqli (CVE-2017-11419)
SQL injection in sqli (CVE-2017-11419). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11420 |
|
Buffer Overflow in c (CVE-2017-11420)
vulnerability in c (CVE-2017-11420). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11404 |
|
Unrestricted File Upload in cmsmadesimple (CVE-2017-11404)
vulnerability in cmsmadesimple (CVE-2017-11404). Data can be tampered with by attackers.
|
| CVE-2017-11405 |
|
Unrestricted File Upload in cmsmadesimple (CVE-2017-11405)
vulnerability in cmsmadesimple (CVE-2017-11405). Data can be tampered with by attackers.
|
| CVE-2017-11403 |
|
Use-After-Free in c (CVE-2017-11403)
vulnerability in c (CVE-2017-11403). Successful exploitation can lead to full system takeover.
|
| CVE-2017-9609 |
|
Cross-Site Scripting (XSS) in blackcat-cms (CVE-2017-9609)
cross-site scripting in blackcat-cms (CVE-2017-9609). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11399 |
|
Out-of-Bounds Read in c (CVE-2017-11399)
vulnerability in c (CVE-2017-11399). Successful exploitation can lead to full system takeover.
|
| CVE-2017-10984 |
|
Out-of-Bounds Write in c (CVE-2017-10984)
out-of-bounds write in c (CVE-2017-10984). Successful exploitation can lead to full system takeover.
|