Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2017-17919 |
|
SQL Injection in rails (CVE-2017-17919)
SQL injection in rails (CVE-2017-17919). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17920 |
|
SQL Injection in rails (CVE-2017-17920)
SQL injection in rails (CVE-2017-17920). Successful exploitation can lead to full system takeover.
|
| CVE-2017-5641 |
|
Unsafe Deserialization in apache (CVE-2017-5641)
vulnerability in apache (CVE-2017-5641). Successful exploitation can lead to full system takeover.
|
| CVE-2015-7666 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2015-7666)
cross-site scripting in wordpress (CVE-2015-7666). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-7667 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2015-7667)
cross-site scripting in wordpress (CVE-2015-7667). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-7668 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2015-7668)
cross-site scripting in wordpress (CVE-2015-7668). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-7669 |
|
Path Traversal in wordpress (CVE-2015-7669)
path traversal in wordpress (CVE-2015-7669). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17869 |
|
The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter.
The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter.
|
| CVE-2011-4955 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2011-4955)
cross-site scripting in wordpress (CVE-2011-4955). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17780 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17780)
cross-site scripting in wordpress (CVE-2017-17780). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17719 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17719)
cross-site scripting in wordpress (CVE-2017-17719). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17744 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17744)
cross-site scripting in wordpress (CVE-2017-17744). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17753 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17753)
cross-site scripting in wordpress (CVE-2017-17753). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-16949 |
|
Unrestricted File Upload in wordpress (CVE-2017-16949)
vulnerability in wordpress (CVE-2017-16949). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15700 |
|
Information Disclosure in apache (CVE-2017-15700)
vulnerability in apache (CVE-2017-15700). Successful exploitation can lead to full system takeover.
|
| CVE-2017-12630 |
|
Cross-Site Scripting (XSS) in apache (CVE-2017-12630)
cross-site scripting in apache (CVE-2017-12630). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-5663 |
|
SQL Injection in apache (CVE-2017-5663)
SQL injection in apache (CVE-2017-5663). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17671 |
|
Path Traversal in apache (CVE-2017-17671)
path traversal in apache (CVE-2017-17671). Successful exploitation can lead to full system takeover.
|
| CVE-2014-3250 |
|
Vulnerability in apache (CVE-2014-3250)
vulnerability in apache (CVE-2014-3250). Confidential information can be exposed externally.
|
| CVE-2017-15708 |
|
Vulnerability in apache (CVE-2017-15708)
vulnerability in apache (CVE-2017-15708). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11296 |
|
Cross-Site Scripting (XSS) in apache (CVE-2017-11296)
cross-site scripting in apache (CVE-2017-11296). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17451 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17451)
cross-site scripting in wordpress (CVE-2017-17451). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17096 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17096)
cross-site scripting in wordpress (CVE-2017-17096). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17091 |
|
Vulnerability in wordpress (CVE-2017-17091)
vulnerability in wordpress (CVE-2017-17091). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17092 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17092)
cross-site scripting in wordpress (CVE-2017-17092). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17093 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17093)
cross-site scripting in wordpress (CVE-2017-17093). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17094 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17094)
cross-site scripting in wordpress (CVE-2017-17094). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15707 |
|
Vulnerability in apache (CVE-2017-15707)
vulnerability in apache (CVE-2017-15707). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15701 |
|
Vulnerability in c (CVE-2017-15701)
vulnerability in c (CVE-2017-15701). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15702 |
|
Vulnerability in apache (CVE-2017-15702)
vulnerability in apache (CVE-2017-15702). Successful exploitation can lead to full system takeover.
|
| CVE-2017-12631 |
|
Cross-Site Request Forgery (CSRF) in apache (CVE-2017-12631)
vulnerability in apache (CVE-2017-12631). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14377 |
|
Authentication Bypass in apache (CVE-2017-14377)
authentication bypass in apache (CVE-2017-14377). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17059 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17059)
cross-site scripting in wordpress (CVE-2017-17059). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17058 |
|
Path Traversal in wordpress (CVE-2017-17058)
path traversal in wordpress (CVE-2017-17058). Confidential information can be exposed externally.
|
| CVE-2017-17043 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17043)
cross-site scripting in wordpress (CVE-2017-17043). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1484 |
|
Information Disclosure in express (CVE-2017-1484)
vulnerability in express (CVE-2017-1484). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-16955 |
|
SQL Injection in wordpress (CVE-2017-16955)
SQL injection in wordpress (CVE-2017-16955). Successful exploitation can lead to full system takeover.
|
| CVE-2017-12608 |
|
Out-of-Bounds Write in apache (CVE-2017-12608)
out-of-bounds write in apache (CVE-2017-12608). Successful exploitation can lead to full system takeover.
|
| CVE-2017-3157 |
|
Information Disclosure in apache (CVE-2017-3157)
vulnerability in apache (CVE-2017-3157). Confidential information can be exposed externally.
|
| CVE-2017-12607 |
|
Out-of-Bounds Write in dos (CVE-2017-12607)
out-of-bounds write in dos (CVE-2017-12607). Successful exploitation can lead to full system takeover.
|
| CVE-2017-9806 |
|
Out-of-Bounds Write in dos (CVE-2017-9806)
out-of-bounds write in dos (CVE-2017-9806). Successful exploitation can lead to full system takeover.
|
| CVE-2016-6804 |
|
Vulnerability in apache (CVE-2016-6804)
vulnerability in apache (CVE-2016-6804). Successful exploitation can lead to full system takeover.
|
| CVE-2017-16894 |
|
Information Disclosure in laravel (CVE-2017-16894)
vulnerability in laravel (CVE-2017-16894). Confidential information can be exposed externally.
|
| CVE-2017-1000227 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-1000227)
cross-site scripting in wordpress (CVE-2017-1000227). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000163 |
|
Open Redirect in phoenixframework (CVE-2017-1000163)
vulnerability in phoenixframework (CVE-2017-1000163). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-16877 |
|
Path Traversal in path-traversal (CVE-2017-16877)
path traversal in path-traversal (CVE-2017-16877). Confidential information can be exposed externally.
|
| CVE-2017-16870 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2017-16870)
SSRF in wordpress (CVE-2017-16870). Successful exploitation can lead to full system takeover.
|
| CVE-2017-16871 |
|
Code Injection in wordpress (CVE-2017-16871)
code injection in wordpress (CVE-2017-16871). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000247 |
|
Vulnerability in apache (CVE-2017-1000247)
vulnerability in apache (CVE-2017-1000247). Data can be tampered with by attackers.
|
| CVE-2017-1000194 |
|
Unrestricted File Upload in apache (CVE-2017-1000194)
vulnerability in apache (CVE-2017-1000194). Successful exploitation can lead to full system takeover.
|