Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2017-13674 Vulnerability in privilege-escalation (CVE-2017-13674)
vulnerability in privilege-escalation (CVE-2017-13674). Successful exploitation can lead to full system takeover.
CVE-2014-8677 Code Injection in soplanning (CVE-2014-8677)
code injection in soplanning (CVE-2014-8677). Data can be tampered with by attackers.
CVE-2015-7711 Cross-Site Scripting (XSS) in atutor (CVE-2015-7711)
cross-site scripting in atutor (CVE-2015-7711). Risk of unauthorized operations or information disclosure.
CVE-2016-10508 Cross-Site Scripting (XSS) in phpthumb-project (CVE-2016-10508)
cross-site scripting in phpthumb-project (CVE-2016-10508). Risk of unauthorized operations or information disclosure.
CVE-2016-10509 SQL Injection in sqli (CVE-2016-10509)
SQL injection in sqli (CVE-2016-10509). Successful exploitation can lead to full system takeover.
CVE-2016-10510 Cross-Site Scripting (XSS) in kohanaframework (CVE-2016-10510)
cross-site scripting in kohanaframework (CVE-2016-10510). Risk of unauthorized operations or information disclosure.
CVE-2017-14076 SQL Injection in sqli (CVE-2017-14076)
SQL injection in sqli (CVE-2017-14076). Successful exploitation can lead to full system takeover.
CVE-2017-14069 SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php.
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php.
CVE-2017-14070 Cross-Site Scripting (XSS) in nexusphp (CVE-2017-14070)
cross-site scripting in nexusphp (CVE-2017-14070). Risk of unauthorized operations or information disclosure.
CVE-2017-14063 Vulnerability in csharp (CVE-2017-14063)
vulnerability in csharp (CVE-2017-14063). Data can be tampered with by attackers.
CVE-2017-14061 Vulnerability in c (CVE-2017-14061)
vulnerability in c (CVE-2017-14061). Successful exploitation can lead to full system takeover.
CVE-2017-14062 Vulnerability in c (CVE-2017-14062)
vulnerability in c (CVE-2017-14062). Successful exploitation can lead to full system takeover.
CVE-2017-14060 Vulnerability in c (CVE-2017-14060)
vulnerability in c (CVE-2017-14060). Risk of unauthorized operations or information disclosure.
CVE-2017-1444 Cross-Site Scripting (XSS) in ibm (CVE-2017-1444)
cross-site scripting in ibm (CVE-2017-1444). Risk of unauthorized operations or information disclosure.
CVE-2017-1447 Cross-Site Scripting (XSS) in ibm (CVE-2017-1447)
cross-site scripting in ibm (CVE-2017-1447). Risk of unauthorized operations or information disclosure.
CVE-2017-1449 Open Redirect in ibm (CVE-2017-1449)
vulnerability in ibm (CVE-2017-1449). Risk of unauthorized operations or information disclosure.
CVE-2017-1450 Open Redirect in ibm (CVE-2017-1450)
vulnerability in ibm (CVE-2017-1450). Risk of unauthorized operations or information disclosure.
CVE-2017-11158 Vulnerability in synology (CVE-2017-11158)
vulnerability in synology (CVE-2017-11158). Successful exploitation can lead to full system takeover.
CVE-2017-13670 Vulnerability in blackcat-cms (CVE-2017-13670)
vulnerability in blackcat-cms (CVE-2017-13670). Data can be tampered with by attackers.
CVE-2017-14048 Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-14048)
vulnerability in csrf (CVE-2017-14048). Successful exploitation can lead to full system takeover.
CVE-2017-14049 Cross-Site Scripting (XSS) in blackcat-cms (CVE-2017-14049)
cross-site scripting in blackcat-cms (CVE-2017-14049). Risk of unauthorized operations or information disclosure.
CVE-2017-14050 Unrestricted File Upload in blackcat-cms (CVE-2017-14050)
vulnerability in blackcat-cms (CVE-2017-14050). Successful exploitation can lead to full system takeover.
CVE-2017-14051 Vulnerability in c (CVE-2017-14051)
vulnerability in c (CVE-2017-14051). Risk of unauthorized operations or information disclosure.
CVE-2017-14035 CrushFTP 8.x before 8.2.0 has a serialization vulnerability.
CrushFTP 8.x before 8.2.0 has a serialization vulnerability.
CVE-2017-14036 CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS.
CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS.
CVE-2017-14037 CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability.
CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability.
CVE-2017-14038 CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability.
CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability.
CVE-2017-1440 Code Injection in ibm (CVE-2017-1440)
code injection in ibm (CVE-2017-1440). Successful exploitation can lead to full system takeover.
CVE-2017-1441 Vulnerability in ibm (CVE-2017-1441)
vulnerability in ibm (CVE-2017-1441). Confidential information can be exposed externally.
CVE-2017-1442 Cross-Site Request Forgery (CSRF) in ibm (CVE-2017-1442)
vulnerability in ibm (CVE-2017-1442). Successful exploitation can lead to full system takeover.
CVE-2017-1443 Cross-Site Scripting (XSS) in ibm (CVE-2017-1443)
cross-site scripting in ibm (CVE-2017-1443). Risk of unauthorized operations or information disclosure.
CVE-2017-1445 Cross-Site Scripting (XSS) in ibm (CVE-2017-1445)
cross-site scripting in ibm (CVE-2017-1445). Risk of unauthorized operations or information disclosure.
CVE-2017-1446 Cross-Site Scripting (XSS) in ibm (CVE-2017-1446)
cross-site scripting in ibm (CVE-2017-1446). Risk of unauthorized operations or information disclosure.
CVE-2017-14032 Authentication Bypass in arm (CVE-2017-14032)
authentication bypass in arm (CVE-2017-14032). Successful exploitation can lead to full system takeover.
CVE-2017-11157 Vulnerability in synology (CVE-2017-11157)
vulnerability in synology (CVE-2017-11157). Successful exploitation can lead to full system takeover.
CVE-2016-5001 Information Disclosure in apache (CVE-2016-5001)
vulnerability in apache (CVE-2016-5001). Confidential information can be exposed externally.
CVE-2017-12069 XXE (XML External Entity) in csharp (CVE-2017-12069)
vulnerability in csharp (CVE-2017-12069). Risk of unauthorized operations or information disclosure.
CVE-2017-12734 Vulnerability in siemens (CVE-2017-12734)
vulnerability in siemens (CVE-2017-12734). Confidential information can be exposed externally.
CVE-2017-12735 Vulnerability in siemens (CVE-2017-12735)
vulnerability in siemens (CVE-2017-12735). Confidential information can be exposed externally.
CVE-2017-9945 Vulnerability in siemens (CVE-2017-9945)
vulnerability in siemens (CVE-2017-9945). Risk of unauthorized operations or information disclosure.
CVE-2017-13780 Path Traversal in path-traversal (CVE-2017-13780)
path traversal in path-traversal (CVE-2017-13780). Confidential information can be exposed externally.
CVE-2016-4462 Vulnerability in apache (CVE-2016-4462)
vulnerability in apache (CVE-2016-4462). Successful exploitation can lead to full system takeover.
CVE-2016-6800 Cross-Site Scripting (XSS) in apache (CVE-2016-6800)
cross-site scripting in apache (CVE-2016-6800). Risk of unauthorized operations or information disclosure.
CVE-2017-3163 Path Traversal in apache (CVE-2017-3163)
path traversal in apache (CVE-2017-3163). Confidential information can be exposed externally.
CVE-2017-13774 Information Disclosure in hikvision (CVE-2017-13774)
vulnerability in hikvision (CVE-2017-13774). Successful exploitation can lead to full system takeover.
CVE-2017-13768 Vulnerability in c (CVE-2017-13768)
vulnerability in c (CVE-2017-13768). Risk of unauthorized operations or information disclosure.
CVE-2017-13769 Out-of-Bounds Read in c (CVE-2017-13769)
vulnerability in c (CVE-2017-13769). Risk of unauthorized operations or information disclosure.
CVE-2017-13778 Fiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.php via the site_name parameter.
Fiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.php via the site_name parameter.
CVE-2017-13757 Out-of-Bounds Read in c (CVE-2017-13757)
vulnerability in c (CVE-2017-13757). Risk of unauthorized operations or information disclosure.
CVE-2017-13758 Buffer Overflow in c (CVE-2017-13758)
vulnerability in c (CVE-2017-13758). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →