Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Clear
ID Title
CVE-2016-6896 Path Traversal in wordpress (CVE-2016-6896)
path traversal in wordpress (CVE-2016-6896). Risk of unauthorized operations or information disclosure.
CVE-2016-6897 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2016-6897)
vulnerability in wordpress (CVE-2016-6897). Confidential information can be exposed externally.
CVE-2016-10147 Vulnerability in c (CVE-2016-10147)
vulnerability in c (CVE-2016-10147). Risk of unauthorized operations or information disclosure.
CVE-2016-7998 Vulnerability in spip (CVE-2016-7998)
vulnerability in spip (CVE-2016-7998). Successful exploitation can lead to full system takeover.
CVE-2016-7999 SSRF (Server-Side Request Forgery) in ssrf (CVE-2016-7999)
SSRF in ssrf (CVE-2016-7999). Data can be tampered with by attackers.
CVE-2016-9844 Buffer Overflow in c (CVE-2016-9844)
vulnerability in c (CVE-2016-9844). Risk of unauthorized operations or information disclosure.
CVE-2016-7980 Cross-Site Request Forgery (CSRF) in csrf (CVE-2016-7980)
vulnerability in csrf (CVE-2016-7980). Successful exploitation can lead to full system takeover.
CVE-2016-7981 Cross-Site Scripting (XSS) in spip (CVE-2016-7981)
cross-site scripting in spip (CVE-2016-7981). Risk of unauthorized operations or information disclosure.
CVE-2016-7982 Path Traversal in path-traversal (CVE-2016-7982)
path traversal in path-traversal (CVE-2016-7982). Confidential information can be exposed externally.
CVE-2014-9913 Buffer Overflow in c (CVE-2014-9913)
vulnerability in c (CVE-2014-9913). Risk of unauthorized operations or information disclosure.
CVE-2016-2233 Buffer Overflow in c (CVE-2016-2233)
vulnerability in c (CVE-2016-2233). Risk of unauthorized operations or information disclosure.
CVE-2016-7144 Authentication Bypass in c (CVE-2016-7144)
authentication bypass in c (CVE-2016-7144). Successful exploitation can lead to full system takeover.
CVE-2016-7564 Buffer Overflow in c (CVE-2016-7564)
vulnerability in c (CVE-2016-7564). Risk of unauthorized operations or information disclosure.
CVE-2016-7799 Out-of-Bounds Read in c (CVE-2016-7799)
vulnerability in c (CVE-2016-7799). Risk of unauthorized operations or information disclosure.
CVE-2016-7906 Use-After-Free in c (CVE-2016-7906)
vulnerability in c (CVE-2016-7906). Risk of unauthorized operations or information disclosure.
CVE-2017-5517 SQL Injection in sqli (CVE-2017-5517)
SQL injection in sqli (CVE-2017-5517). Successful exploitation can lead to full system takeover.
CVE-2017-5519 SQL Injection in sqli (CVE-2017-5519)
SQL injection in sqli (CVE-2017-5519). Successful exploitation can lead to full system takeover.
CVE-2017-5520 Unrestricted File Upload in metalgenix (CVE-2017-5520)
vulnerability in metalgenix (CVE-2017-5520). Successful exploitation can lead to full system takeover.
CVE-2016-7904 Cross-Site Request Forgery (CSRF) in csrf (CVE-2016-7904)
vulnerability in csrf (CVE-2016-7904). Successful exploitation can lead to full system takeover.
CVE-2017-5480 Path Traversal in path-traversal (CVE-2017-5480)
path traversal in path-traversal (CVE-2017-5480). Confidential information can be exposed externally.
CVE-2017-5492 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2017-5492)
vulnerability in wordpress (CVE-2017-5492). Successful exploitation can lead to full system takeover.
CVE-2017-5493 Vulnerability in wordpress (CVE-2017-5493)
vulnerability in wordpress (CVE-2017-5493). Data can be tampered with by attackers.
CVE-2017-5487 Information Disclosure in wordpress (CVE-2017-5487)
vulnerability in wordpress (CVE-2017-5487). Risk of unauthorized operations or information disclosure.
CVE-2017-5488 Cross-Site Scripting (XSS) in wordpress (CVE-2017-5488)
cross-site scripting in wordpress (CVE-2017-5488). Risk of unauthorized operations or information disclosure.
CVE-2017-5490 Cross-Site Scripting (XSS) in wordpress (CVE-2017-5490)
cross-site scripting in wordpress (CVE-2017-5490). Risk of unauthorized operations or information disclosure.
CVE-2017-5491 Vulnerability in wordpress (CVE-2017-5491)
vulnerability in wordpress (CVE-2017-5491). Risk of unauthorized operations or information disclosure.
CVE-2017-2584 Information Disclosure in c (CVE-2017-2584)
vulnerability in c (CVE-2017-2584). Confidential information can be exposed externally.
CVE-2017-5474 Open Redirect in s9y (CVE-2017-5474)
vulnerability in s9y (CVE-2017-5474). Risk of unauthorized operations or information disclosure. Exploitable via `Referer header`.
CVE-2017-5475 comment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments.
comment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments.
CVE-2016-8882 Vulnerability in c (CVE-2016-8882)
vulnerability in c (CVE-2016-8882). Risk of unauthorized operations or information disclosure.
CVE-2016-8883 Vulnerability in c (CVE-2016-8883)
vulnerability in c (CVE-2016-8883). Risk of unauthorized operations or information disclosure.
CVE-2016-9807 Out-of-Bounds Read in c (CVE-2016-9807)
vulnerability in c (CVE-2016-9807). Risk of unauthorized operations or information disclosure.
CVE-2016-10141 Vulnerability in c (CVE-2016-10141)
vulnerability in c (CVE-2016-10141). Successful exploitation can lead to full system takeover.
CVE-2016-3150 Cross-Site Scripting (XSS) in barco (CVE-2016-3150)
cross-site scripting in barco (CVE-2016-3150). Risk of unauthorized operations or information disclosure.
CVE-2016-9299 Vulnerability in jenkins (CVE-2016-9299)
vulnerability in jenkins (CVE-2016-9299). Successful exploitation can lead to full system takeover.
CVE-2016-6492 Vulnerability in c (CVE-2016-6492)
vulnerability in c (CVE-2016-6492). Successful exploitation can lead to full system takeover.
CVE-2016-10009 Vulnerability in c (CVE-2016-10009)
vulnerability in c (CVE-2016-10009). Risk of unauthorized operations or information disclosure.
CVE-2016-9535 Buffer Overflow in c (CVE-2016-9535)
vulnerability in c (CVE-2016-9535). Successful exploitation can lead to full system takeover.
CVE-2015-5721 Code Injection in misp-project (CVE-2015-5721)
code injection in misp-project (CVE-2015-5721). Successful exploitation can lead to full system takeover.
CVE-2015-5720 Cross-Site Scripting (XSS) in misp-project (CVE-2015-5720)
cross-site scripting in misp-project (CVE-2015-5720). Risk of unauthorized operations or information disclosure.
CVE-2015-5719 Vulnerability in misp-project (CVE-2015-5719)
vulnerability in misp-project (CVE-2015-5719). Successful exploitation can lead to full system takeover.
CVE-2016-2183 Information Disclosure in redhat (CVE-2016-2183)
vulnerability in redhat (CVE-2016-2183). Confidential information can be exposed externally.
CVE-2015-8325 The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows loca...
The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demons...
CVE-2016-0778 Buffer Overflow in c (CVE-2016-0778)
vulnerability in c (CVE-2016-0778). Successful exploitation can lead to full system takeover.
CVE-2016-0777 Information Disclosure in c (CVE-2016-0777)
vulnerability in c (CVE-2016-0777). Confidential information can be exposed externally.
CVE-2015-6564 Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in...
Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in...
CVE-2015-6563 Vulnerability in c (CVE-2015-6563)
vulnerability in c (CVE-2015-6563). Successful exploitation can lead to full system takeover.
CVE-2015-0192 Privilege Escalation in ibm (CVE-2015-0192)
vulnerability in ibm (CVE-2015-0192). Successful exploitation can lead to full system takeover.
CVE-2015-1347 Cross-Site Scripting (XSS) in enhancesoft (CVE-2015-1347)
cross-site scripting in enhancesoft (CVE-2015-1347). Risk of unauthorized operations or information disclosure.
CVE-2015-1176 Cross-Site Scripting (XSS) in enhancesoft (CVE-2015-1176)
cross-site scripting in enhancesoft (CVE-2015-1176). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →