Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: vendors Clear

ID	Title	Severity	Tags	Detected
CVE-2017-17634	Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter. Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.	Critical	PHP SQL Injection Cwe 89 Single Theater Booking Script Project +1	8 years ago
CVE-2017-17635	SQL Injection in sqli (CVE-2017-17635) SQL injection in sqli (CVE-2017-17635). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Mlm Forex Market Plan Script Project +1	8 years ago
CVE-2017-17636	MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter. MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.	Critical	PHP SQL Injection Cwe 89 Mlm Forced Matrix Project +1	8 years ago
CVE-2017-17637	Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter. Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.	Critical	PHP SQL Injection Cwe 89 Car Rental Script Project +1	8 years ago
CVE-2017-17586	SQL Injection in sqli (CVE-2017-17586) SQL injection in sqli (CVE-2017-17586). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Olx Clone Project +1	8 years ago
CVE-2017-17587	SQL Injection in c (CVE-2017-17587) SQL injection in c (CVE-2017-17587). Successful exploitation can lead to full system takeover.	Critical	PHP C SQL Injection Cwe 89 +2	8 years ago
CVE-2017-17588	SQL Injection in sqli (CVE-2017-17588) SQL injection in sqli (CVE-2017-17588). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Imdb Clone Project +1	8 years ago
CVE-2017-17589	SQL Injection in sqli (CVE-2017-17589) SQL injection in sqli (CVE-2017-17589). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Thumbtack Clone Project +1	8 years ago
CVE-2017-17591	Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter. Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.	Critical	PHP SQL Injection Cwe 89 Realestate Crowdfunding Script Project +1	8 years ago
CVE-2017-17592	Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter. Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.	Critical	PHP SQL Injection Cwe 89 Website Auction Marketplace Project +1	8 years ago
CVE-2017-17593	Unrestricted File Upload in simple-chatting-system-project (CVE-2017-17593) vulnerability in simple-chatting-system-project (CVE-2017-17593). Data can be tampered with by attackers.	High	PHP Cwe 434 Simple Chatting System Project Simple Chatting System	8 years ago
CVE-2017-17594	DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter. DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.	Critical	PHP SQL Injection Cwe 89 Domainsale Php Script Project +1	8 years ago
CVE-2017-17596	Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter. Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.	Critical	PHP SQL Injection Cwe 89 Entrepreneur Job Portal Script Project +1	8 years ago
CVE-2017-17597	Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter. Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.	Critical	PHP SQL Injection Cwe 89 Nearbuy Clone Script Project +1	8 years ago
CVE-2017-17598	Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter. Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.	Critical	PHP SQL Injection Cwe 89 Affiliate Mlm Script Project +1	8 years ago
CVE-2017-17599	SQL Injection in sqli (CVE-2017-17599) SQL injection in sqli (CVE-2017-17599). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Advance Online Learning Management Script Project +1	8 years ago
CVE-2017-17600	Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter. Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.	Critical	PHP SQL Injection Cwe 89 Basic B2B Script Project +1	8 years ago
CVE-2017-17602	SQL Injection in sqli (CVE-2017-17602) SQL injection in sqli (CVE-2017-17602). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Advance B2B Script Project +1	8 years ago
CVE-2017-17603	SQL Injection in sqli (CVE-2017-17603) SQL injection in sqli (CVE-2017-17603). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Advanced Real Estate Script Project +1	8 years ago
CVE-2017-17604	SQL Injection in sqli (CVE-2017-17604) SQL injection in sqli (CVE-2017-17604). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Entrepreneur Bus Booking Script Project +1	8 years ago
CVE-2017-17605	Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter. Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.	Critical	PHP SQL Injection Cwe 89 Consumer Complaints Clone Script Project +1	8 years ago
CVE-2017-17610	SQL Injection in sqli (CVE-2017-17610) SQL injection in sqli (CVE-2017-17610). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 E Commerce Mlm Software Project +1	8 years ago
CVE-2017-17567	SQL Injection in sqli (CVE-2017-17567) SQL injection in sqli (CVE-2017-17567). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89 Scubez +1	8 years ago
CVE-2017-17568	Vulnerability in scubez (CVE-2017-17568) vulnerability in scubez (CVE-2017-17568). Confidential information can be exposed externally.	High	PHP Cwe 732 Scubez Posty Readymade Classifieds	8 years ago
CVE-2017-17569	Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter. Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Scubez +1	8 years ago
CVE-2017-17570	SQL Injection in sqli (CVE-2017-17570) SQL injection in sqli (CVE-2017-17570). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Expedia Clone Project +1	8 years ago
CVE-2017-17573	SQL Injection in sqli (CVE-2017-17573) SQL injection in sqli (CVE-2017-17573). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Fortunescripts +1	8 years ago
CVE-2017-17574	FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter. FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.	Critical	PHP SQL Injection Cwe 89 Care Clone Project +1	8 years ago
CVE-2017-17575	SQL Injection in sqli (CVE-2017-17575) SQL injection in sqli (CVE-2017-17575). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Groupon Clone Project +1	8 years ago
CVE-2017-17576	SQL Injection in sqli (CVE-2017-17576) SQL injection in sqli (CVE-2017-17576). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Gigs Script Project +1	8 years ago
CVE-2017-17577	SQL Injection in sqli (CVE-2017-17577) SQL injection in sqli (CVE-2017-17577). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Trademe Clone Project +1	8 years ago
CVE-2017-17578	FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter. FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.	Critical	PHP SQL Injection Cwe 89 Crowdfunding Script Project +1	8 years ago
CVE-2017-17579	FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter. FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.	Critical	PHP SQL Injection Cwe 89 Freelancer Clone Project +1	8 years ago
CVE-2017-17580	SQL Injection in sqli (CVE-2017-17580) SQL injection in sqli (CVE-2017-17580). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Linkedin Clone Project +1	8 years ago
CVE-2017-17581	FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter. FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.	Critical	PHP SQL Injection Cwe 89 Quibids Clone Project +1	8 years ago
CVE-2017-17584	SQL Injection in sqli (CVE-2017-17584) SQL injection in sqli (CVE-2017-17584). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Makemytrip Clone Project +1	8 years ago
CVE-2017-17585	FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter. FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.	Critical	PHP SQL Injection Cwe 89 Monster Clone Project +1	8 years ago
CVE-2017-17538	Vulnerability in dos (CVE-2017-17538) vulnerability in dos (CVE-2017-17538). Risk of unauthorized operations or information disclosure.	High	Denial of Service Mikrotik Router Firmware Router	8 years ago
CVE-2017-4942	Vulnerability in vmware (CVE-2017-4942) vulnerability in vmware (CVE-2017-4942). Confidential information can be exposed externally.	Medium	Vmware Airwatch Console	8 years ago
CVE-2017-5530	Vulnerability in tibco (CVE-2017-5530) vulnerability in tibco (CVE-2017-5530). Confidential information can be exposed externally.	High	Tibco Tibbr	8 years ago
CVE-2017-5534	Vulnerability in tibco (CVE-2017-5534) vulnerability in tibco (CVE-2017-5534). Successful exploitation can lead to full system takeover.	High	Tibco Tibbr	8 years ago
CVE-2017-13099	Vulnerability in wolfssl (CVE-2017-13099) vulnerability in wolfssl (CVE-2017-13099). Confidential information can be exposed externally.	High	Cwe 203 Wolfssl Siemens Scalance W1750D Firmware +3	8 years ago
CVE-2017-13098	Vulnerability in bouncycastle (CVE-2017-13098) vulnerability in bouncycastle (CVE-2017-13098). Confidential information can be exposed externally.	High	Java Cwe 203 Bouncycastle Bc Java	8 years ago
CVE-2017-11935	Buffer Overflow in microsoft (CVE-2017-11935) vulnerability in microsoft (CVE-2017-11935). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 119 Microsoft Office	8 years ago
CVE-2017-11936	Vulnerability in microsoft (CVE-2017-11936) vulnerability in microsoft (CVE-2017-11936). Successful exploitation can lead to full system takeover.	High	Cwe 20 Microsoft Sharepoint Enterprise Server	8 years ago
CVE-2017-11939	Information Disclosure in microsoft (CVE-2017-11939) vulnerability in microsoft (CVE-2017-11939). Confidential information can be exposed externally.	Medium	Cwe 200 Microsoft Office	8 years ago
CVE-2017-11888	Buffer Overflow in microsoft (CVE-2017-11888) vulnerability in microsoft (CVE-2017-11888). Successful exploitation can lead to full system takeover.	High	Cwe 119 Microsoft Edge Windows 10 +1	8 years ago
CVE-2017-11889	Buffer Overflow in microsoft (CVE-2017-11889) vulnerability in microsoft (CVE-2017-11889). Successful exploitation can lead to full system takeover.	High	Cwe 119 Microsoft Chakracore Edge +2	8 years ago
CVE-2017-11890	Buffer Overflow in microsoft (CVE-2017-11890) vulnerability in microsoft (CVE-2017-11890). Successful exploitation can lead to full system takeover.	High	Cwe 119 Microsoft Internet Explorer Windows 10 +6	8 years ago
CVE-2017-11893	Buffer Overflow in microsoft (CVE-2017-11893) vulnerability in microsoft (CVE-2017-11893). Successful exploitation can lead to full system takeover.	High	Cwe 119 Microsoft Edge Windows 10 +2	8 years ago

Vulnerabilities

🍪 About cookies