Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: vendors Clear

ID	Title	Severity	Tags	Detected
CVE-2018-6926	OS Command Injection in misp-project (CVE-2018-6926) OS command injection in misp-project (CVE-2018-6926). Successful exploitation can lead to full system takeover.	High	PHP Cwe 78 Misp Project Misp	8 years ago
CVE-2017-12626	Vulnerability in org.apache.poi:poi (CVE-2017-12626) vulnerability in org.apache.poi:poi (CVE-2017-12626). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.17` or later.	High	Apache Denial of Service Cwe 835 Poi	8 years ago
CVE-2017-5753	Vulnerability in intel (CVE-2017-5753) vulnerability in intel (CVE-2017-5753). Confidential information can be exposed externally.	Medium	Cwe 203 Intel Atom C Atom E +397	8 years ago
CVE-2017-5754	Information Disclosure in intel (CVE-2017-5754) vulnerability in intel (CVE-2017-5754). Confidential information can be exposed externally.	Medium	Cwe 200 Intel Atom C Atom E +208	8 years ago
CVE-2017-8046	Vulnerability in spring (CVE-2017-8046) vulnerability in spring (CVE-2017-8046). Successful exploitation can lead to full system takeover.	Critical	Java Spring Cwe 20 Vmware +3	8 years ago
CVE-2017-17089	Cross-Site Scripting (XSS) in webmin (CVE-2017-17089) cross-site scripting in webmin (CVE-2017-17089). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Webmin	8 years ago
CVE-2017-12810	PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel. PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel.	Medium	PHP Cross-Site Scripting Cwe 79 Stivasoft +1	8 years ago
CVE-2017-17981	PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter. PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17982	PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php. PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php.	Medium	PHP Cross-Site Request Forgery Cwe 352 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17983	SQL Injection in sqli (CVE-2017-17983) SQL injection in sqli (CVE-2017-17983). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17984	PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter. PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17985	PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter. PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17986	PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter. PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17987	Unrestricted File Upload in muslim-matrimonial-script-project (CVE-2017-17987) vulnerability in muslim-matrimonial-script-project (CVE-2017-17987). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434 Muslim Matrimonial Script Project Muslim Matrimonial Script	8 years ago
CVE-2017-17988	Cross-Site Scripting (XSS) in muslim-matrimonial-script-project (CVE-2017-17988) cross-site scripting in muslim-matrimonial-script-project (CVE-2017-17988). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17989	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17989) cross-site scripting in iwcnetwork (CVE-2017-17989). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17990	Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action. Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.	High	PHP Cross-Site Request Forgery Cwe 352 Iwcnetwork +1	8 years ago
CVE-2017-17991	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17991) cross-site scripting in iwcnetwork (CVE-2017-17991). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17992	Path Traversal in path-traversal (CVE-2017-17992) path traversal in path-traversal (CVE-2017-17992). Successful exploitation can lead to full system takeover.	Critical	PHP Path Traversal Cwe 22 Iwcnetwork +1	8 years ago
CVE-2017-17993	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17993) cross-site scripting in iwcnetwork (CVE-2017-17993). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17994	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17994) cross-site scripting in iwcnetwork (CVE-2017-17994). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17995	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17995) cross-site scripting in iwcnetwork (CVE-2017-17995). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17975	Use-After-Free in c (CVE-2017-17975) vulnerability in c (CVE-2017-17975). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 416 Linux +1	8 years ago
CVE-2013-4578	Vulnerability in oracle (CVE-2013-4578) vulnerability in oracle (CVE-2013-4578). Risk of unauthorized operations or information disclosure.	Medium	Java Cwe 74 Oracle Jdk +1	8 years ago
CVE-2014-3630	XXE (XML External Entity) in dos (CVE-2014-3630) vulnerability in dos (CVE-2014-3630). Successful exploitation can lead to full system takeover.	Critical	Java Denial of Service Cwe 611 Lightbend +2	8 years ago
CVE-2015-3302	Vulnerability in wordpress (CVE-2015-3302) vulnerability in wordpress (CVE-2015-3302). Confidential information can be exposed externally.	High	WordPress Cwe 284 Thecartpress Thecartpress Ecommerce Shopping Cart	8 years ago
CVE-2017-17901	Vulnerability in dos (CVE-2017-17901) vulnerability in dos (CVE-2017-17901). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 400 Zyxel P 660Hw Firmware +1	8 years ago
CVE-2017-17971	Cross-Site Scripting (XSS) in dolibarr (CVE-2017-17971) cross-site scripting in dolibarr (CVE-2017-17971). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Dolibarr +1	8 years ago
CVE-2017-17916	SQL Injection in rails (CVE-2017-17916) SQL injection in rails (CVE-2017-17916). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +1	8 years ago
CVE-2017-17917	SQL Injection in rails (CVE-2017-17917) SQL injection in rails (CVE-2017-17917). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +1	8 years ago
CVE-2017-17919	SQL Injection in rails (CVE-2017-17919) SQL injection in rails (CVE-2017-17919). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +2	8 years ago
CVE-2017-17920	SQL Injection in rails (CVE-2017-17920) SQL injection in rails (CVE-2017-17920). Successful exploitation can lead to full system takeover.	High	Ruby Ruby on Rails SQL Injection Cwe 89 +2	8 years ago
CVE-2016-3695	Vulnerability in c (CVE-2016-3695) vulnerability in c (CVE-2016-3695). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 74 Linux +3	8 years ago
CVE-2017-17949	Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter. Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Cells +1	8 years ago
CVE-2017-17950	Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter. Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.	High	PHP SQL Injection Cwe 89 Cells +1	8 years ago
CVE-2017-17951	SQL Injection in sqli (CVE-2017-17951) SQL injection in sqli (CVE-2017-17951). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17952	Vulnerability in php-multivendor-ecommerce-project (CVE-2017-17952) vulnerability in php-multivendor-ecommerce-project (CVE-2017-17952). Data can be tampered with by attackers.	High	PHP Cwe 20 Php Multivendor Ecommerce Project Php Multivendor Ecommerce	8 years ago
CVE-2017-17953	PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter. PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17954	PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter. PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17955	PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter. PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17956	Cross-Site Scripting (XSS) in php-multivendor-ecommerce-project (CVE-2017-17956) cross-site scripting in php-multivendor-ecommerce-project (CVE-2017-17956). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17957	PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter. PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.	Critical	PHP SQL Injection Cwe 89 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17958	PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter. PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17959	SQL Injection in sqli (CVE-2017-17959) SQL injection in sqli (CVE-2017-17959). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17960	PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php. PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.	High	PHP Cross-Site Request Forgery Cwe 352 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-5641	Unsafe Deserialization in apache (CVE-2017-5641) vulnerability in apache (CVE-2017-5641). Successful exploitation can lead to full system takeover.	Critical	Java Apache Remote Code Execution Insecure Deserialization +4	8 years ago
CVE-2017-17936	Vanguard Marketplace Digital Products PHP has CSRF via /search. Vanguard Marketplace Digital Products PHP has CSRF via /search.	High	PHP Cross-Site Request Forgery Cwe 352 Vanguard Project +1	8 years ago
CVE-2017-17937	Vanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search. Vanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search.	Medium	PHP Cross-Site Scripting Cwe 79 Vanguard Project +1	8 years ago
CVE-2017-17938	PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter. PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Single Theater Booking Script Project +1	8 years ago
CVE-2017-17939	PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php. PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.	High	PHP Cross-Site Request Forgery Cwe 352 Single Theater Booking Script Project +1	8 years ago

Vulnerabilities

🍪 About cookies