Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: piwigo Clear

ID	Title	Severity	Tags	Detected
CVE-2017-17827	Cross-Site Request Forgery (CSRF) in piwigo (CVE-2017-17827) vulnerability in piwigo (CVE-2017-17827). Successful exploitation can lead to full system takeover.	High	PHP Cwe 352 Piwigo	8 years ago
CVE-2017-17826	Cross-Site Scripting (XSS) in piwigo (CVE-2017-17826) cross-site scripting in piwigo (CVE-2017-17826). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Piwigo	8 years ago
CVE-2017-17825	Cross-Site Scripting (XSS) in piwigo (CVE-2017-17825) cross-site scripting in piwigo (CVE-2017-17825). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Piwigo	8 years ago
CVE-2017-17824	SQL Injection in sqli (CVE-2017-17824) SQL injection in sqli (CVE-2017-17824). Confidential information can be exposed externally.	Medium	PHP SQL Injection Cwe 89 Piwigo	8 years ago
CVE-2017-17823	SQL Injection in sqli (CVE-2017-17823) SQL injection in sqli (CVE-2017-17823). Confidential information can be exposed externally.	Medium	PHP SQL Injection Cwe 89 Piwigo	8 years ago
CVE-2017-17822	SQL Injection in sqli (CVE-2017-17822) SQL injection in sqli (CVE-2017-17822). Confidential information can be exposed externally.	Medium	PHP SQL Injection Cwe 89 Piwigo	8 years ago
CVE-2017-17775	Piwigo 2.9.2 has XSS via the name parameter in an admin.php?page=album-3-properties request. Piwigo 2.9.2 has XSS via the name parameter in an admin.php?page=album-3-properties request.	Medium	PHP Cross-Site Scripting Cwe 79 Piwigo	8 years ago
CVE-2017-17774	admin/configuration.php in Piwigo 2.9.2 has CSRF. admin/configuration.php in Piwigo 2.9.2 has CSRF.	High	PHP Cross-Site Request Forgery Cwe 352 Piwigo	8 years ago
CVE-2017-16893	SQL Injection in sqli (CVE-2017-16893) SQL injection in sqli (CVE-2017-16893). Confidential information can be exposed externally.	Medium	PHP SQL Injection Cwe 89 Piwigo	8 years ago
CVE-2016-10513	Cross-Site Scripting (XSS) in piwigo (CVE-2016-10513) cross-site scripting in piwigo (CVE-2016-10513). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Piwigo	8 years ago
CVE-2016-10514	Vulnerability in piwigo (CVE-2016-10514) vulnerability in piwigo (CVE-2016-10514). Data can be tampered with by attackers.	Medium	PHP Cwe 284 Piwigo	8 years ago
CVE-2017-10682	SQL Injection in sqli (CVE-2017-10682) SQL injection in sqli (CVE-2017-10682). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Piwigo	8 years ago
CVE-2017-10681	Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-10681) vulnerability in csrf (CVE-2017-10681). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Piwigo	8 years ago
CVE-2017-10680	Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-10680) vulnerability in csrf (CVE-2017-10680). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Piwigo	8 years ago
CVE-2017-10679	Information Disclosure in piwigo (CVE-2017-10679) vulnerability in piwigo (CVE-2017-10679). Confidential information can be exposed externally.	High	Cwe 200 Piwigo	8 years ago
CVE-2017-10678	Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-10678) vulnerability in csrf (CVE-2017-10678). Successful exploitation can lead to full system takeover.	High	Cross-Site Request Forgery Cwe 352 Piwigo	8 years ago
CVE-2017-9836	Cross-Site Scripting (XSS) in piwigo (CVE-2017-9836) cross-site scripting in piwigo (CVE-2017-9836). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Piwigo	8 years ago
CVE-2017-9464	Open Redirect in piwigo (CVE-2017-9464) vulnerability in piwigo (CVE-2017-9464). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 601 Piwigo	8 years ago
CVE-2017-9463	SQL Injection in sqli (CVE-2017-9463) SQL injection in sqli (CVE-2017-9463). Confidential information can be exposed externally.	Medium	PHP SQL Injection Cwe 89 Piwigo	8 years ago
CVE-2017-9452	Cross-Site Scripting (XSS) in piwigo (CVE-2017-9452) cross-site scripting in piwigo (CVE-2017-9452). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Piwigo	8 years ago
CVE-2017-5608	Cross-Site Scripting (XSS) in piwigo (CVE-2017-5608) cross-site scripting in piwigo (CVE-2017-5608). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Piwigo	9 years ago

Vulnerabilities

🍪 About cookies