Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: vendors Clear

ID	Title	Severity	Tags	Detected
CVE-2017-17792	Cross-Site Scripting (XSS) in blogotext-project (CVE-2017-17792) cross-site scripting in blogotext-project (CVE-2017-17792). Risk of unauthorized operations or information disclosure.	Medium	PHP JavaScript Cross-Site Scripting Cwe 79 +2	8 years ago
CVE-2017-17793	Information Disclosure in blogotext-project (CVE-2017-17793) vulnerability in blogotext-project (CVE-2017-17793). Confidential information can be exposed externally.	High	PHP Cwe 200 Blogotext Project Blogotext	8 years ago
CVE-2017-17794	Vulnerability in blogotext-project (CVE-2017-17794) vulnerability in blogotext-project (CVE-2017-17794). Successful exploitation can lead to full system takeover.	Critical	PHP Blogotext Project Blogotext	8 years ago
CVE-2017-17774	admin/configuration.php in Piwigo 2.9.2 has CSRF. admin/configuration.php in Piwigo 2.9.2 has CSRF.	High	PHP Cross-Site Request Forgery Cwe 352 Piwigo	8 years ago
CVE-2017-17775	Piwigo 2.9.2 has XSS via the name parameter in an admin.php?page=album-3-properties request. Piwigo 2.9.2 has XSS via the name parameter in an admin.php?page=album-3-properties request.	Medium	PHP Cross-Site Scripting Cwe 79 Piwigo	8 years ago
CVE-2017-17776	Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter. Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter.	Medium	PHP Cwe 200 Paid To Read Script Project Paid To Read Script	8 years ago
CVE-2017-17777	Authentication Bypass in paid-to-read-script-project (CVE-2017-17777) authentication bypass in paid-to-read-script-project (CVE-2017-17777). Successful exploitation can lead to full system takeover.	Critical	PHP Authentication Bypass Cwe 287 Paid To Read Script Project +1	8 years ago
CVE-2017-17778	Cross-Site Scripting (XSS) in paid-to-read-script-project (CVE-2017-17778) cross-site scripting in paid-to-read-script-project (CVE-2017-17778). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Paid To Read Script Project +1	8 years ago
CVE-2017-17779	Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter. Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.	Critical	PHP SQL Injection Cwe 89 Paid To Read Script Project +1	8 years ago
CVE-2017-17780	Cross-Site Scripting (XSS) in wordpress (CVE-2017-17780) cross-site scripting in wordpress (CVE-2017-17780). Risk of unauthorized operations or information disclosure.	Medium	PHP WordPress Cross-Site Scripting Cwe 79 +9	8 years ago
CVE-2017-17719	Cross-Site Scripting (XSS) in wordpress (CVE-2017-17719) cross-site scripting in wordpress (CVE-2017-17719). Risk of unauthorized operations or information disclosure.	Medium	PHP WordPress Cross-Site Scripting Cwe 79 +2	8 years ago
CVE-2017-17744	Cross-Site Scripting (XSS) in wordpress (CVE-2017-17744) cross-site scripting in wordpress (CVE-2017-17744). Risk of unauthorized operations or information disclosure.	Medium	PHP WordPress Cross-Site Scripting Cwe 79 +2	8 years ago
CVE-2017-17753	Cross-Site Scripting (XSS) in wordpress (CVE-2017-17753) cross-site scripting in wordpress (CVE-2017-17753). Risk of unauthorized operations or information disclosure.	Medium	PHP WordPress Cross-Site Scripting Cwe 79 +2	8 years ago
CVE-2017-17757	OS Command Injection in tp-link (CVE-2017-17757) OS command injection in tp-link (CVE-2017-17757). Successful exploitation can lead to full system takeover.	High	Cwe 78 Tp Link Tl Wvr450L Firmware Tl Wvr450L +28	8 years ago
CVE-2017-17758	OS Command Injection in tp-link (CVE-2017-17758) OS command injection in tp-link (CVE-2017-17758). Successful exploitation can lead to full system takeover.	High	Cwe 78 Tp Link Tl Wvr450L Firmware Tl Wvr450L +28	8 years ago
CVE-2017-11562	Vulnerability in mt4 (CVE-2017-11562) vulnerability in mt4 (CVE-2017-11562). Successful exploitation can lead to full system takeover.	High	PHP Cwe 384 Mt4 Senhasegura	8 years ago
CVE-2017-15876	Unrestricted File Upload in sistemagpweb (CVE-2017-15876) vulnerability in sistemagpweb (CVE-2017-15876). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434 Sistemagpweb Gpweb	8 years ago
CVE-2017-15877	Vulnerability in sistemagpweb (CVE-2017-15877) vulnerability in sistemagpweb (CVE-2017-15877). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 732 Sistemagpweb Gpweb	8 years ago
CVE-2017-16949	Unrestricted File Upload in wordpress (CVE-2017-16949) vulnerability in wordpress (CVE-2017-16949). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Cwe 434 Accesspressthemes +1	8 years ago
CVE-2017-15700	Information Disclosure in apache (CVE-2017-15700) vulnerability in apache (CVE-2017-15700). Successful exploitation can lead to full system takeover.	High	Apache Cwe 200 Sling Authentication Service	8 years ago
CVE-2017-12630	Cross-Site Scripting (XSS) in apache (CVE-2017-12630) cross-site scripting in apache (CVE-2017-12630). Risk of unauthorized operations or information disclosure.	Medium	Apache Cwe 79 Drill	8 years ago
CVE-2017-17645	Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php. Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.	Critical	PHP SQL Injection Cwe 89 Phpautoclassifiedscript +1	8 years ago
CVE-2017-17649	Code Injection in readymade-video-sharing-script-project (CVE-2017-17649) code injection in readymade-video-sharing-script-project (CVE-2017-17649). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 94 Readymade Video Sharing Script Project Readymade Video Sharing Script	8 years ago
CVE-2017-17651	SQL Injection in sqli (CVE-2017-17651) SQL injection in sqli (CVE-2017-17651). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Paid To Read Script Project +1	8 years ago
CVE-2017-17741	Out-of-Bounds Read in c (CVE-2017-17741) vulnerability in c (CVE-2017-17741). Confidential information can be exposed externally.	Medium	C Cwe 125 Linux Linux Kernel +2	8 years ago
CVE-2017-17740	Buffer Overflow in c (CVE-2017-17740) vulnerability in c (CVE-2017-17740). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 119 Openldap +6	8 years ago
CVE-2017-17727	Unrestricted File Upload in dedecms (CVE-2017-17727) vulnerability in dedecms (CVE-2017-17727). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434 Dedecms	8 years ago
CVE-2017-17730	DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php. DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php.	Critical	PHP SQL Injection Cwe 89 Dedecms	8 years ago
CVE-2017-17731	DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php. DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.	Critical	PHP SQL Injection Cwe 89 Dedecms	8 years ago
CVE-2017-17733	Vulnerability in maccms (CVE-2017-17733) vulnerability in maccms (CVE-2017-17733). Successful exploitation can lead to full system takeover.	Critical	PHP Maccms	8 years ago
CVE-2017-16997	Vulnerability in c (CVE-2017-16997) vulnerability in c (CVE-2017-16997). Successful exploitation can lead to full system takeover.	High	C Cwe 426 Gnu Glibc +4	8 years ago
CVE-2017-17716	Vulnerability in gitlab (CVE-2017-17716) vulnerability in gitlab (CVE-2017-17716). Confidential information can be exposed externally.	Medium	Cwe 295 Gitlab	8 years ago
CVE-2017-17717	Vulnerability in sonatype (CVE-2017-17717) vulnerability in sonatype (CVE-2017-17717). Successful exploitation can lead to full system takeover.	Critical	Cwe 327 Sonatype Nexus Repository Manager	8 years ago
CVE-2017-17715	Path Traversal in path-traversal (CVE-2017-17715) path traversal in path-traversal (CVE-2017-17715). Successful exploitation can lead to full system takeover.	High	Java Path Traversal Cwe 22 Telegram +1	8 years ago
CVE-2017-3191	Vulnerability in d-link (CVE-2017-3191) vulnerability in d-link (CVE-2017-3191). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 294 Cwe 20 D Link +5	8 years ago
CVE-2017-3192	Vulnerability in d-link (CVE-2017-3192) vulnerability in d-link (CVE-2017-3192). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 522 D Link Dir 130 Firmware +4	8 years ago
CVE-2017-3195	Vulnerability in commvault (CVE-2017-3195) vulnerability in commvault (CVE-2017-3195). Successful exploitation can lead to full system takeover.	Critical	Cwe 121 Cwe 119 Commvault Edge	8 years ago
CVE-2017-3196	Buffer Overflow in rawether-project (CVE-2017-3196) vulnerability in rawether-project (CVE-2017-3196). Successful exploitation can lead to full system takeover.	High	Cwe 119 Rawether Project Rawether Microsoft +1	8 years ago
CVE-2017-17712	Vulnerability in c (CVE-2017-17712) vulnerability in c (CVE-2017-17712). Successful exploitation can lead to full system takeover.	High	C Cwe 362 Linux Linux Kernel	8 years ago
CVE-2017-14184	Information Disclosure in fortinet (CVE-2017-14184) vulnerability in fortinet (CVE-2017-14184). Successful exploitation can lead to full system takeover.	High	Cwe 200 Fortinet Forticlient Forticlient Sslvpn Client	8 years ago
CVE-2017-12373	Information Disclosure in cisco (CVE-2017-12373) vulnerability in cisco (CVE-2017-12373). Confidential information can be exposed externally.	Medium	Cwe 200 Cwe 203 Cisco Adaptive Security Appliance 5505 Firmware +9	8 years ago
CVE-2017-17693	Vulnerability in techno-portfolio-management-panel-project (CVE-2017-17693) vulnerability in techno-portfolio-management-panel-project (CVE-2017-17693). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 862 Techno Portfolio Management Panel Project Techno Portfolio Management Panel	8 years ago
CVE-2017-17694	Cross-Site Scripting (XSS) in techno-portfolio-management-panel-project (CVE-2017-17694) cross-site scripting in techno-portfolio-management-panel-project (CVE-2017-17694). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Techno Portfolio Management Panel Project +1	8 years ago
CVE-2017-17695	SQL Injection in sqli (CVE-2017-17695) SQL injection in sqli (CVE-2017-17695). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Techno Portfolio Management Panel Project +1	8 years ago
CVE-2017-17696	Information Disclosure in techno-portfolio-management-panel-project (CVE-2017-17696) vulnerability in techno-portfolio-management-panel-project (CVE-2017-17696). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 200 Techno Portfolio Management Panel Project Techno Portfolio Management Panel	8 years ago
CVE-2017-7344	Vulnerability in privilege-escalation (CVE-2017-7344) vulnerability in privilege-escalation (CVE-2017-7344). Successful exploitation can lead to full system takeover.	High	Privilege Escalation Fortinet Forticlient	8 years ago
CVE-2017-17531	Vulnerability in c (CVE-2017-17531) vulnerability in c (CVE-2017-17531). Successful exploitation can lead to full system takeover.	High	C Cwe 74 Gnu Global	8 years ago
CVE-2017-5663	SQL Injection in apache (CVE-2017-5663) SQL injection in apache (CVE-2017-5663). Successful exploitation can lead to full system takeover.	High	Apache Cwe 89 Fineract	8 years ago
CVE-2017-17680	Vulnerability in c (CVE-2017-17680) vulnerability in c (CVE-2017-17680). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 772 Imagemagick +2	8 years ago
CVE-2017-17681	Vulnerability in c (CVE-2017-17681) vulnerability in c (CVE-2017-17681). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 835 Imagemagick +2	8 years ago

Vulnerabilities

🍪 About cookies