Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: products Clear
ID Title
CVE-2017-12174 Vulnerability in apache (CVE-2017-12174)
vulnerability in apache (CVE-2017-12174). Risk of unauthorized operations or information disclosure.
CVE-2018-6926 OS Command Injection in misp-project (CVE-2018-6926)
OS command injection in misp-project (CVE-2018-6926). Successful exploitation can lead to full system takeover.
CVE-2017-12626 Vulnerability in org.apache.poi:poi (CVE-2017-12626)
vulnerability in org.apache.poi:poi (CVE-2017-12626). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.17` or later.
CVE-2017-17983 SQL Injection in sqli (CVE-2017-17983)
SQL injection in sqli (CVE-2017-17983). Successful exploitation can lead to full system takeover.
CVE-2017-17987 Unrestricted File Upload in muslim-matrimonial-script-project (CVE-2017-17987)
vulnerability in muslim-matrimonial-script-project (CVE-2017-17987). Successful exploitation can lead to full system takeover.
CVE-2017-17990 Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.
Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.
CVE-2017-17919 SQL Injection in rails (CVE-2017-17919)
SQL injection in rails (CVE-2017-17919). Successful exploitation can lead to full system takeover.
CVE-2017-17920 SQL Injection in rails (CVE-2017-17920)
SQL injection in rails (CVE-2017-17920). Successful exploitation can lead to full system takeover.
CVE-2017-17950 Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.
Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.
CVE-2017-17952 Vulnerability in php-multivendor-ecommerce-project (CVE-2017-17952)
vulnerability in php-multivendor-ecommerce-project (CVE-2017-17952). Data can be tampered with by attackers.
CVE-2017-17960 PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.
CVE-2017-17936 Vanguard Marketplace Digital Products PHP has CSRF via /search.
Vanguard Marketplace Digital Products PHP has CSRF via /search.
CVE-2017-17939 PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
CVE-2017-17941 SQL Injection in sqli (CVE-2017-17941)
SQL injection in sqli (CVE-2017-17941). Successful exploitation can lead to full system takeover.
CVE-2016-6914 Vulnerability in ui (CVE-2016-6914)
vulnerability in ui (CVE-2016-6914). Successful exploitation can lead to full system takeover.
CVE-2017-7156 Buffer Overflow in dos (CVE-2017-7156)
vulnerability in dos (CVE-2017-7156). Successful exploitation can lead to full system takeover.
CVE-2017-7157 Buffer Overflow in dos (CVE-2017-7157)
vulnerability in dos (CVE-2017-7157). Successful exploitation can lead to full system takeover.
CVE-2017-7160 Buffer Overflow in dos (CVE-2017-7160)
vulnerability in dos (CVE-2017-7160). Successful exploitation can lead to full system takeover.
CVE-2017-7162 Buffer Overflow in dos (CVE-2017-7162)
vulnerability in dos (CVE-2017-7162). Successful exploitation can lead to full system takeover.
CVE-2017-17905 PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.
PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.
CVE-2017-17908 PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general.
PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general.
CVE-2017-17930 Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-17930)
vulnerability in csrf (CVE-2017-17930). Successful exploitation can lead to full system takeover.
CVE-2017-17891 Readymade Video Sharing Script has CSRF via user-profile-edit.php.
Readymade Video Sharing Script has CSRF via user-profile-edit.php.
CVE-2017-17898 Information Disclosure in dolibarr (CVE-2017-17898)
vulnerability in dolibarr (CVE-2017-17898). Confidential information can be exposed externally.
CVE-2017-17879 Out-of-Bounds Read in c (CVE-2017-17879)
vulnerability in c (CVE-2017-17879). Successful exploitation can lead to full system takeover.
CVE-2017-17880 Out-of-Bounds Read in c (CVE-2017-17880)
vulnerability in c (CVE-2017-17880). Successful exploitation can lead to full system takeover.
CVE-2017-17874 Unrestricted File Upload in vanguard-project (CVE-2017-17874)
vulnerability in vanguard-project (CVE-2017-17874). Successful exploitation can lead to full system takeover.
CVE-2017-13876 Buffer Overflow in dos (CVE-2017-13876)
vulnerability in dos (CVE-2017-13876). Successful exploitation can lead to full system takeover.
CVE-2017-13866 Buffer Overflow in dos (CVE-2017-13866)
vulnerability in dos (CVE-2017-13866). Successful exploitation can lead to full system takeover.
CVE-2017-13870 Buffer Overflow in dos (CVE-2017-13870)
vulnerability in dos (CVE-2017-13870). Successful exploitation can lead to full system takeover.
CVE-2017-13861 Buffer Overflow in dos (CVE-2017-13861)
vulnerability in dos (CVE-2017-13861). Successful exploitation can lead to full system takeover.
CVE-2017-13862 Buffer Overflow in dos (CVE-2017-13862)
vulnerability in dos (CVE-2017-13862). Successful exploitation can lead to full system takeover.
CVE-2017-13867 Buffer Overflow in dos (CVE-2017-13867)
vulnerability in dos (CVE-2017-13867). Successful exploitation can lead to full system takeover.
CVE-2017-13856 Buffer Overflow in dos (CVE-2017-13856)
vulnerability in dos (CVE-2017-13856). Successful exploitation can lead to full system takeover.
CVE-2017-17829 SQL Injection in sqli (CVE-2017-17829)
SQL injection in sqli (CVE-2017-17829). Successful exploitation can lead to full system takeover.
CVE-2017-17827 Cross-Site Request Forgery (CSRF) in piwigo (CVE-2017-17827)
vulnerability in piwigo (CVE-2017-17827). Successful exploitation can lead to full system takeover.
CVE-2017-4933 Out-of-Bounds Write in vmware (CVE-2017-4933)
out-of-bounds write in vmware (CVE-2017-4933). Successful exploitation can lead to full system takeover.
CVE-2017-4941 Buffer Overflow in vmware (CVE-2017-4941)
vulnerability in vmware (CVE-2017-4941). Successful exploitation can lead to full system takeover.
CVE-2017-4943 Out-of-Bounds Write in privilege-escalation (CVE-2017-4943)
out-of-bounds write in privilege-escalation (CVE-2017-4943). Successful exploitation can lead to full system takeover.
CVE-2017-17793 Information Disclosure in blogotext-project (CVE-2017-17793)
vulnerability in blogotext-project (CVE-2017-17793). Confidential information can be exposed externally.
CVE-2017-17774 admin/configuration.php in Piwigo 2.9.2 has CSRF.
admin/configuration.php in Piwigo 2.9.2 has CSRF.
CVE-2017-11562 Vulnerability in mt4 (CVE-2017-11562)
vulnerability in mt4 (CVE-2017-11562). Successful exploitation can lead to full system takeover.
CVE-2017-15876 Unrestricted File Upload in sistemagpweb (CVE-2017-15876)
vulnerability in sistemagpweb (CVE-2017-15876). Successful exploitation can lead to full system takeover.
CVE-2017-15700 Information Disclosure in apache (CVE-2017-15700)
vulnerability in apache (CVE-2017-15700). Successful exploitation can lead to full system takeover.
CVE-2017-17727 Unrestricted File Upload in dedecms (CVE-2017-17727)
vulnerability in dedecms (CVE-2017-17727). Successful exploitation can lead to full system takeover.
CVE-2017-3196 Buffer Overflow in rawether-project (CVE-2017-3196)
vulnerability in rawether-project (CVE-2017-3196). Successful exploitation can lead to full system takeover.
CVE-2017-17695 SQL Injection in sqli (CVE-2017-17695)
SQL injection in sqli (CVE-2017-17695). Successful exploitation can lead to full system takeover.
CVE-2017-5663 SQL Injection in apache (CVE-2017-5663)
SQL injection in apache (CVE-2017-5663). Successful exploitation can lead to full system takeover.
CVE-2017-7738 Information Disclosure in fortinet (CVE-2017-7738)
vulnerability in fortinet (CVE-2017-7738). Successful exploitation can lead to full system takeover.
CVE-2017-17615 Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →