Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2015-7384 Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service.
Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service.
CVE-2015-7503 Vulnerability in zend (CVE-2015-7503)
vulnerability in zend (CVE-2015-7503). Confidential information can be exposed externally.
CVE-2015-8239 Vulnerability in sudo-project (CVE-2015-8239)
vulnerability in sudo-project (CVE-2015-8239). Successful exploitation can lead to full system takeover.
CVE-2015-2856 Path Traversal in path-traversal (CVE-2015-2856)
path traversal in path-traversal (CVE-2015-2856). Confidential information can be exposed externally.
CVE-2017-14943 Information Disclosure in trapezegroup (CVE-2017-14943)
vulnerability in trapezegroup (CVE-2017-14943). Confidential information can be exposed externally.
CVE-2017-5637 Vulnerability in apache (CVE-2017-5637)
vulnerability in apache (CVE-2017-5637). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.10` or later.
CVE-2017-13723 Buffer Overflow in xorg (CVE-2017-13723)
vulnerability in xorg (CVE-2017-13723). Successful exploitation can lead to full system takeover.
CVE-2017-14603 Information Disclosure in digium (CVE-2017-14603)
vulnerability in digium (CVE-2017-14603). Confidential information can be exposed externally.
CVE-2015-7842 Vulnerability in huawei (CVE-2015-7842)
vulnerability in huawei (CVE-2015-7842). Risk of unauthorized operations or information disclosure.
CVE-2017-14972 Authentication Bypass in infocus (CVE-2017-14972)
authentication bypass in infocus (CVE-2017-14972). Confidential information can be exposed externally.
CVE-2015-1429 Path Traversal in path-traversal (CVE-2015-1429)
path traversal in path-traversal (CVE-2015-1429). Confidential information can be exposed externally.
CVE-2015-2142 Cross-Site Request Forgery (CSRF) in csrf (CVE-2015-2142)
vulnerability in csrf (CVE-2015-2142). Successful exploitation can lead to full system takeover.
CVE-2015-2143 Cross-Site Request Forgery (CSRF) in csrf (CVE-2015-2143)
vulnerability in csrf (CVE-2015-2143). Successful exploitation can lead to full system takeover.
CVE-2015-2673 Vulnerability in wordpress (CVE-2015-2673)
vulnerability in wordpress (CVE-2015-2673). Successful exploitation can lead to full system takeover.
CVE-2017-15079 Path Traversal in wordpress (CVE-2017-15079)
path traversal in wordpress (CVE-2017-15079). Confidential information can be exposed externally.
CVE-2017-9272 Vulnerability in dos (CVE-2017-9272)
vulnerability in dos (CVE-2017-9272). Risk of unauthorized operations or information disclosure.
CVE-2017-13068 SQL Injection in sqli (CVE-2017-13068)
SQL injection in sqli (CVE-2017-13068). Confidential information can be exposed externally.
CVE-2017-1002153 Vulnerability in koji (CVE-2017-1002153)
vulnerability in koji (CVE-2017-1002153). Data can be tampered with by attackers. Mitigation: upgrade to `1.15.0` or later.
CVE-2014-0047 Vulnerability in docker (CVE-2014-0047)
vulnerability in docker (CVE-2014-0047). Successful exploitation can lead to full system takeover.
CVE-2015-2158 Vulnerability in c (CVE-2015-2158)
vulnerability in c (CVE-2015-2158). Successful exploitation can lead to full system takeover.
CVE-2015-2297 Vulnerability in dos (CVE-2015-2297)
vulnerability in dos (CVE-2015-2297). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`.
CVE-2015-5246 Vulnerability in theforeman (CVE-2015-5246)
vulnerability in theforeman (CVE-2015-5246). Successful exploitation can lead to full system takeover.
CVE-2017-1000254 Buffer Overflow in haxx (CVE-2017-1000254)
vulnerability in haxx (CVE-2017-1000254). Risk of unauthorized operations or information disclosure. Exploitable via ``PWD``.
CVE-2017-15056 Vulnerability in cpp (CVE-2017-15056)
vulnerability in cpp (CVE-2017-15056). Successful exploitation can lead to full system takeover.
CVE-2017-15063 Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-15063)
vulnerability in csrf (CVE-2017-15063). Successful exploitation can lead to full system takeover.
CVE-2017-12730 Vulnerability in myscada (CVE-2017-12730)
vulnerability in myscada (CVE-2017-12730). Successful exploitation can lead to full system takeover.
CVE-2017-14087 Vulnerability in trendmicro (CVE-2017-14087)
vulnerability in trendmicro (CVE-2017-14087). Data can be tampered with by attackers. Exploitable via `Host header`.
CVE-2017-14088 Buffer Overflow in privilege-escalation (CVE-2017-14088)
vulnerability in privilege-escalation (CVE-2017-14088). Successful exploitation can lead to full system takeover.
CVE-2017-14083 Vulnerability in trendmicro (CVE-2017-14083)
vulnerability in trendmicro (CVE-2017-14083). Confidential information can be exposed externally.
CVE-2017-14084 Vulnerability in trendmicro (CVE-2017-14084)
vulnerability in trendmicro (CVE-2017-14084). Successful exploitation can lead to full system takeover.
CVE-2017-14086 Vulnerability in trendmicro (CVE-2017-14086)
vulnerability in trendmicro (CVE-2017-14086). Risk of unauthorized operations or information disclosure.
CVE-2017-13992 Vulnerability in loytec (CVE-2017-13992)
vulnerability in loytec (CVE-2017-13992). Successful exploitation can lead to full system takeover.
CVE-2017-13996 Vulnerability in path-traversal (CVE-2017-13996)
vulnerability in path-traversal (CVE-2017-13996). Successful exploitation can lead to full system takeover.
CVE-2017-13998 Vulnerability in loytec (CVE-2017-13998)
vulnerability in loytec (CVE-2017-13998). Successful exploitation can lead to full system takeover.
CVE-2017-12106 Buffer Overflow in pl32 (CVE-2017-12106)
vulnerability in pl32 (CVE-2017-12106). Successful exploitation can lead to full system takeover.
CVE-2017-2880 Buffer Overflow in pl32 (CVE-2017-2880)
vulnerability in pl32 (CVE-2017-2880). Successful exploitation can lead to full system takeover.
CVE-2017-2920 Buffer Overflow in pl32 (CVE-2017-2920)
vulnerability in pl32 (CVE-2017-2920). Successful exploitation can lead to full system takeover.
CVE-2017-1201 Vulnerability in ibm (CVE-2017-1201)
vulnerability in ibm (CVE-2017-1201). Successful exploitation can lead to full system takeover.
CVE-2017-1378 Vulnerability in ibm (CVE-2017-1378)
vulnerability in ibm (CVE-2017-1378). Successful exploitation can lead to full system takeover.
CVE-2017-14353 Code Injection in hp (CVE-2017-14353)
code injection in hp (CVE-2017-14353). Successful exploitation can lead to full system takeover.
CVE-2017-12244 Vulnerability in dos (CVE-2017-12244)
vulnerability in dos (CVE-2017-12244). Risk of unauthorized operations or information disclosure.
CVE-2017-12245 Vulnerability in dos (CVE-2017-12245)
vulnerability in dos (CVE-2017-12245). Risk of unauthorized operations or information disclosure.
CVE-2017-12246 Vulnerability in dos (CVE-2017-12246)
vulnerability in dos (CVE-2017-12246). Risk of unauthorized operations or information disclosure.
CVE-2017-12263 Path Traversal in path-traversal (CVE-2017-12263)
path traversal in path-traversal (CVE-2017-12263). Confidential information can be exposed externally.
CVE-2017-12270 Buffer Overflow in dos (CVE-2017-12270)
vulnerability in dos (CVE-2017-12270). Risk of unauthorized operations or information disclosure.
CVE-2017-15033 ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.
ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.
CVE-2017-15035 Buffer Overflow in dos (CVE-2017-15035)
vulnerability in dos (CVE-2017-15035). Risk of unauthorized operations or information disclosure.
CVE-2017-15037 Out-of-Bounds Read in c (CVE-2017-15037)
vulnerability in c (CVE-2017-15037). Successful exploitation can lead to full system takeover.
CVE-2017-15017 Vulnerability in c (CVE-2017-15017)
vulnerability in c (CVE-2017-15017). Successful exploitation can lead to full system takeover.
CVE-2017-15019 Vulnerability in c (CVE-2017-15019)
vulnerability in c (CVE-2017-15019). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →