Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2017-15966	SQL Injection in sqli (CVE-2017-15966) SQL injection in sqli (CVE-2017-15966). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Zh Yandexmap Project +1	8 years ago
CVE-2017-15967	SQL Injection in sqli (CVE-2017-15967) SQL injection in sqli (CVE-2017-15967). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Mailing Manager Mailing List Manager Pro	8 years ago
CVE-2017-15968	MyBuilder Clone 1.0 allows SQL Injection via the phpsqlsearch_genxml.php subcategory parameter. MyBuilder Clone 1.0 allows SQL Injection via the phpsqlsearch_genxml.php subcategory parameter.	Critical	PHP SQL Injection Cwe 89 Contractorscripts +1	8 years ago
CVE-2017-15969	SQL Injection in sqli (CVE-2017-15969) SQL injection in sqli (CVE-2017-15969). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Pilotgroup Allsharevideo	8 years ago
CVE-2017-15970	SQL Injection in sqli (CVE-2017-15970) SQL injection in sqli (CVE-2017-15970). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpcityportal	8 years ago
CVE-2017-15971	SQL Injection in sqli (CVE-2017-15971) SQL injection in sqli (CVE-2017-15971). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Softdatepro +1	8 years ago
CVE-2017-15972	SQL Injection in sqli (CVE-2017-15972) SQL injection in sqli (CVE-2017-15972). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Softdatepro +1	8 years ago
CVE-2017-15973	SQL Injection in sqli (CVE-2017-15973) SQL injection in sqli (CVE-2017-15973). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Sokial	8 years ago
CVE-2017-15974	tPanel 2009 allows SQL injection for Authentication Bypass via 'or 1=1 or ''=' to login.php. tPanel 2009 allows SQL injection for Authentication Bypass via 'or 1=1 or ''=' to login.php.	Critical	PHP SQL Injection Authentication Bypass Cwe 89 +2	8 years ago
CVE-2017-15946	SQL Injection in sqli (CVE-2017-15946) SQL injection in sqli (CVE-2017-15946). Successful exploitation can lead to full system takeover. Exploitable via ``tag``.	Critical	PHP SQL Injection Cwe 89 Selfget +1	8 years ago
CVE-2014-3579	XXE (XML External Entity) in apache (CVE-2014-3579) vulnerability in apache (CVE-2014-3579). Successful exploitation can lead to full system takeover.	Critical	Apache Cwe 611 Activemq Apollo	8 years ago
CVE-2014-3600	XXE (XML External Entity) in apache (CVE-2014-3600) vulnerability in apache (CVE-2014-3600). Successful exploitation can lead to full system takeover.	Critical	Apache Cwe 611 Activemq	8 years ago
CVE-2016-5003	Unsafe Deserialization in apache (CVE-2016-5003) vulnerability in apache (CVE-2016-5003). Successful exploitation can lead to full system takeover.	Critical	Java Apache Cwe 502 Ws Xmlrpc	8 years ago
CVE-2017-5053	Out-of-Bounds Read in google (CVE-2017-5053) vulnerability in google (CVE-2017-5053). Successful exploitation can lead to full system takeover.	Critical	Cwe 125 Google Chrome Apple +10	8 years ago
CVE-2012-1622	Vulnerability in apache (CVE-2012-1622) vulnerability in apache (CVE-2012-1622). Successful exploitation can lead to full system takeover.	Critical	Apache Ofbiz	8 years ago
CVE-2014-2023	SQL Injection in sqli (CVE-2014-2023) SQL injection in sqli (CVE-2014-2023). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Tapatalk	8 years ago
CVE-2017-15366	Vulnerability in ndocsoftware (CVE-2017-15366) vulnerability in ndocsoftware (CVE-2017-15366). Successful exploitation can lead to full system takeover.	Critical	Cwe 532 Ndocsoftware Ndoc	8 years ago
CVE-2017-15919	SQL Injection in wordpress (CVE-2017-15919) SQL injection in wordpress (CVE-2017-15919). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress SQL Injection Cwe 89 +2	8 years ago
CVE-2017-15907	SQL Injection in sqli (CVE-2017-15907) SQL injection in sqli (CVE-2017-15907). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpcollab	8 years ago
CVE-2017-15909	Vulnerability in dlink (CVE-2017-15909) vulnerability in dlink (CVE-2017-15909). Successful exploitation can lead to full system takeover.	Critical	Cwe 798 Dlink Dgs 1500 Firmware Dgs 1500	8 years ago
CVE-2015-5171	Vulnerability in cloudfoundry (CVE-2015-5171) vulnerability in cloudfoundry (CVE-2015-5171). Successful exploitation can lead to full system takeover.	Critical	Cwe 613 Cloudfoundry Cf Release Pivotal Software +2	8 years ago
CVE-2015-5172	Vulnerability in cloudfoundry (CVE-2015-5172) vulnerability in cloudfoundry (CVE-2015-5172). Successful exploitation can lead to full system takeover.	Critical	Cwe 640 Cloudfoundry Cf Release Pivotal Software +2	8 years ago
CVE-2017-14695	Path Traversal in salt (CVE-2017-14695) path traversal in salt (CVE-2017-14695). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `80d90307b07b3703428ecbb7c8bb468e28a9ae6d, 2016.3.8, 2016.11.8, 2017.7.2` or later.	Critical	Path Traversal Cwe 22 Saltstack Salt	8 years ago
CVE-2017-15222	Vulnerability in nftp-project (CVE-2017-15222) vulnerability in nftp-project (CVE-2017-15222). Successful exploitation can lead to full system takeover.	Critical	Cwe 120 Nftp Project Nftp	8 years ago
CVE-2014-1203	Command Injection in eyou (CVE-2014-1203) command injection in eyou (CVE-2014-1203). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 77 Eyou	8 years ago
CVE-2017-15081	In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php. In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php.	Critical	PHP SQL Injection Cwe 89 Phpsugar +1	8 years ago
CVE-2012-4570	SQL Injection in sqli (CVE-2012-4570) SQL injection in sqli (CVE-2012-4570). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Letodms Project +1	8 years ago
CVE-2014-3741	Command Injection in node-printer-project (CVE-2014-3741) command injection in node-printer-project (CVE-2014-3741). Successful exploitation can lead to full system takeover.	Critical	JavaScript Cwe 77 Node Printer Project Node Printer	8 years ago
CVE-2017-15379	SQL Injection in softwarepublico (CVE-2017-15379) SQL injection in softwarepublico (CVE-2017-15379). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 89 Softwarepublico E Sic	8 years ago
CVE-2017-15381	SQL Injection in sqli (CVE-2017-15381) SQL injection in sqli (CVE-2017-15381). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Softwarepublico +1	8 years ago
CVE-2017-15580	Unrestricted File Upload in osticket (CVE-2017-15580) vulnerability in osticket (CVE-2017-15580). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 434 Osticket	8 years ago
CVE-2017-12796	Unsafe Deserialization in openmrs (CVE-2017-12796) vulnerability in openmrs (CVE-2017-12796). Successful exploitation can lead to full system takeover.	Critical	Cwe 502 Openmrs	8 years ago
CVE-2017-7121	Vulnerability in dos (CVE-2017-7121) vulnerability in dos (CVE-2017-7121). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 20 Apple Mac Os X	8 years ago
CVE-2017-7122	Vulnerability in dos (CVE-2017-7122) vulnerability in dos (CVE-2017-7122). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 20 Apple Mac Os X	8 years ago
CVE-2017-7123	Vulnerability in dos (CVE-2017-7123) vulnerability in dos (CVE-2017-7123). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 20 Apple Mac Os X	8 years ago
CVE-2017-7124	Vulnerability in dos (CVE-2017-7124) vulnerability in dos (CVE-2017-7124). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 20 Apple Mac Os X	8 years ago
CVE-2017-7125	Vulnerability in dos (CVE-2017-7125) vulnerability in dos (CVE-2017-7125). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 20 Apple Mac Os X	8 years ago
CVE-2017-7126	Vulnerability in dos (CVE-2017-7126) vulnerability in dos (CVE-2017-7126). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 20 Apple Mac Os X	8 years ago
CVE-2017-7128	Buffer Overflow in dos (CVE-2017-7128) vulnerability in dos (CVE-2017-7128). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 119 Apple Iphone Os +3	8 years ago
CVE-2017-7129	Buffer Overflow in dos (CVE-2017-7129) vulnerability in dos (CVE-2017-7129). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 119 Apple Iphone Os +3	8 years ago
CVE-2017-7130	Buffer Overflow in dos (CVE-2017-7130) vulnerability in dos (CVE-2017-7130). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 119 Apple Iphone Os +3	8 years ago
CVE-2017-7103	Buffer Overflow in dos (CVE-2017-7103) vulnerability in dos (CVE-2017-7103). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 119 Apple Iphone Os +2	8 years ago
CVE-2017-7105	Buffer Overflow in dos (CVE-2017-7105) vulnerability in dos (CVE-2017-7105). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 119 Apple Iphone Os +2	8 years ago
CVE-2017-7108	Buffer Overflow in dos (CVE-2017-7108) vulnerability in dos (CVE-2017-7108). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 119 Apple Iphone Os +2	8 years ago
CVE-2017-7110	Buffer Overflow in dos (CVE-2017-7110) vulnerability in dos (CVE-2017-7110). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 119 Apple Iphone Os +2	8 years ago
CVE-2017-7112	Buffer Overflow in dos (CVE-2017-7112) vulnerability in dos (CVE-2017-7112). Successful exploitation can lead to full system takeover.	Critical	Denial of Service Cwe 119 Apple Iphone Os +2	8 years ago
CVE-2017-15804	Buffer Overflow in c (CVE-2017-15804) vulnerability in c (CVE-2017-15804). Successful exploitation can lead to full system takeover.	Critical	C Cwe 119 Gnu Glibc	8 years ago
CVE-2011-1935	Vulnerability in c (CVE-2011-1935) vulnerability in c (CVE-2011-1935). Successful exploitation can lead to full system takeover.	Critical	C Tcpdump Libpcap	8 years ago
CVE-2017-15670	Buffer Overflow in c (CVE-2017-15670) vulnerability in c (CVE-2017-15670). Successful exploitation can lead to full system takeover.	Critical	C Cwe 119 Gnu Glibc	8 years ago
CVE-2017-6165	Vulnerability in f5 (CVE-2017-6165) vulnerability in f5 (CVE-2017-6165). Successful exploitation can lead to full system takeover.	Critical	Cwe 532 F5 Big Ip Access Policy Manager Big Ip Advanced Firewall Manager +10	8 years ago

Vulnerabilities

🍪 About cookies