Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2017-12174 |
|
Vulnerability in apache (CVE-2017-12174)
vulnerability in apache (CVE-2017-12174). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-6926 |
|
OS Command Injection in misp-project (CVE-2018-6926)
OS command injection in misp-project (CVE-2018-6926). Successful exploitation can lead to full system takeover.
|
| CVE-2017-12626 |
|
Vulnerability in org.apache.poi:poi (CVE-2017-12626)
vulnerability in org.apache.poi:poi (CVE-2017-12626). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.17` or later.
|
| CVE-2017-17983 |
|
SQL Injection in sqli (CVE-2017-17983)
SQL injection in sqli (CVE-2017-17983). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17987 |
|
Unrestricted File Upload in muslim-matrimonial-script-project (CVE-2017-17987)
vulnerability in muslim-matrimonial-script-project (CVE-2017-17987). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17990 |
|
Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.
Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.
|
| CVE-2017-17919 |
|
SQL Injection in rails (CVE-2017-17919)
SQL injection in rails (CVE-2017-17919). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17920 |
|
SQL Injection in rails (CVE-2017-17920)
SQL injection in rails (CVE-2017-17920). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17950 |
|
Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.
Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.
|
| CVE-2017-17952 |
|
Vulnerability in php-multivendor-ecommerce-project (CVE-2017-17952)
vulnerability in php-multivendor-ecommerce-project (CVE-2017-17952). Data can be tampered with by attackers.
|
| CVE-2017-17960 |
|
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.
|
| CVE-2017-17936 |
|
Vanguard Marketplace Digital Products PHP has CSRF via /search.
Vanguard Marketplace Digital Products PHP has CSRF via /search.
|
| CVE-2017-17939 |
|
PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
|
| CVE-2017-17941 |
|
SQL Injection in sqli (CVE-2017-17941)
SQL injection in sqli (CVE-2017-17941). Successful exploitation can lead to full system takeover.
|
| CVE-2016-6914 |
|
Vulnerability in ui (CVE-2016-6914)
vulnerability in ui (CVE-2016-6914). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7156 |
|
Buffer Overflow in dos (CVE-2017-7156)
vulnerability in dos (CVE-2017-7156). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7157 |
|
Buffer Overflow in dos (CVE-2017-7157)
vulnerability in dos (CVE-2017-7157). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7160 |
|
Buffer Overflow in dos (CVE-2017-7160)
vulnerability in dos (CVE-2017-7160). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7162 |
|
Buffer Overflow in dos (CVE-2017-7162)
vulnerability in dos (CVE-2017-7162). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17905 |
|
PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.
PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.
|
| CVE-2017-17908 |
|
PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general.
PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general.
|
| CVE-2017-17930 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-17930)
vulnerability in csrf (CVE-2017-17930). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17891 |
|
Readymade Video Sharing Script has CSRF via user-profile-edit.php.
Readymade Video Sharing Script has CSRF via user-profile-edit.php.
|
| CVE-2017-17898 |
|
Information Disclosure in dolibarr (CVE-2017-17898)
vulnerability in dolibarr (CVE-2017-17898). Confidential information can be exposed externally.
|
| CVE-2017-17879 |
|
Out-of-Bounds Read in c (CVE-2017-17879)
vulnerability in c (CVE-2017-17879). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17880 |
|
Out-of-Bounds Read in c (CVE-2017-17880)
vulnerability in c (CVE-2017-17880). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17874 |
|
Unrestricted File Upload in vanguard-project (CVE-2017-17874)
vulnerability in vanguard-project (CVE-2017-17874). Successful exploitation can lead to full system takeover.
|
| CVE-2017-13876 |
|
Buffer Overflow in dos (CVE-2017-13876)
vulnerability in dos (CVE-2017-13876). Successful exploitation can lead to full system takeover.
|
| CVE-2017-13866 |
|
Buffer Overflow in dos (CVE-2017-13866)
vulnerability in dos (CVE-2017-13866). Successful exploitation can lead to full system takeover.
|
| CVE-2017-13870 |
|
Buffer Overflow in dos (CVE-2017-13870)
vulnerability in dos (CVE-2017-13870). Successful exploitation can lead to full system takeover.
|
| CVE-2017-13861 |
|
Buffer Overflow in dos (CVE-2017-13861)
vulnerability in dos (CVE-2017-13861). Successful exploitation can lead to full system takeover.
|
| CVE-2017-13862 |
|
Buffer Overflow in dos (CVE-2017-13862)
vulnerability in dos (CVE-2017-13862). Successful exploitation can lead to full system takeover.
|
| CVE-2017-13867 |
|
Buffer Overflow in dos (CVE-2017-13867)
vulnerability in dos (CVE-2017-13867). Successful exploitation can lead to full system takeover.
|
| CVE-2017-13856 |
|
Buffer Overflow in dos (CVE-2017-13856)
vulnerability in dos (CVE-2017-13856). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17829 |
|
SQL Injection in sqli (CVE-2017-17829)
SQL injection in sqli (CVE-2017-17829). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17827 |
|
Cross-Site Request Forgery (CSRF) in piwigo (CVE-2017-17827)
vulnerability in piwigo (CVE-2017-17827). Successful exploitation can lead to full system takeover.
|
| CVE-2017-4933 |
|
Out-of-Bounds Write in vmware (CVE-2017-4933)
out-of-bounds write in vmware (CVE-2017-4933). Successful exploitation can lead to full system takeover.
|
| CVE-2017-4941 |
|
Buffer Overflow in vmware (CVE-2017-4941)
vulnerability in vmware (CVE-2017-4941). Successful exploitation can lead to full system takeover.
|
| CVE-2017-4943 |
|
Out-of-Bounds Write in privilege-escalation (CVE-2017-4943)
out-of-bounds write in privilege-escalation (CVE-2017-4943). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17793 |
|
Information Disclosure in blogotext-project (CVE-2017-17793)
vulnerability in blogotext-project (CVE-2017-17793). Confidential information can be exposed externally.
|
| CVE-2017-17774 |
|
admin/configuration.php in Piwigo 2.9.2 has CSRF.
admin/configuration.php in Piwigo 2.9.2 has CSRF.
|
| CVE-2017-11562 |
|
Vulnerability in mt4 (CVE-2017-11562)
vulnerability in mt4 (CVE-2017-11562). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15876 |
|
Unrestricted File Upload in sistemagpweb (CVE-2017-15876)
vulnerability in sistemagpweb (CVE-2017-15876). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15700 |
|
Information Disclosure in apache (CVE-2017-15700)
vulnerability in apache (CVE-2017-15700). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17727 |
|
Unrestricted File Upload in dedecms (CVE-2017-17727)
vulnerability in dedecms (CVE-2017-17727). Successful exploitation can lead to full system takeover.
|
| CVE-2017-3196 |
|
Buffer Overflow in rawether-project (CVE-2017-3196)
vulnerability in rawether-project (CVE-2017-3196). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17695 |
|
SQL Injection in sqli (CVE-2017-17695)
SQL injection in sqli (CVE-2017-17695). Successful exploitation can lead to full system takeover.
|
| CVE-2017-5663 |
|
SQL Injection in apache (CVE-2017-5663)
SQL injection in apache (CVE-2017-5663). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7738 |
|
Information Disclosure in fortinet (CVE-2017-7738)
vulnerability in fortinet (CVE-2017-7738). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17615 |
|
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.
|