Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2017-1000079 |
|
Linux foundation ONOS 1.9.0 is vulnerable to a DoS.
Linux foundation ONOS 1.9.0 is vulnerable to a DoS.
|
| CVE-2017-10605 |
|
Vulnerability in dos (CVE-2017-10605)
vulnerability in dos (CVE-2017-10605). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000056 |
|
Vulnerability in privilege-escalation (CVE-2017-1000056)
vulnerability in privilege-escalation (CVE-2017-1000056). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000048 |
|
Vulnerability in dos (CVE-2017-1000048)
vulnerability in dos (CVE-2017-1000048). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000061 |
|
XXE (XML External Entity) in dos (CVE-2017-1000061)
vulnerability in dos (CVE-2017-1000061). Confidential information can be exposed externally.
|
| CVE-2017-1000053 |
|
Unsafe Deserialization in deserialization (CVE-2017-1000053)
vulnerability in deserialization (CVE-2017-1000053). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000034 |
|
Unsafe Deserialization in deserialization (CVE-2017-1000034)
vulnerability in deserialization (CVE-2017-1000034). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000062 |
|
Path Traversal in path-traversal (CVE-2017-1000062)
path traversal in path-traversal (CVE-2017-1000062). Confidential information can be exposed externally.
|
| CVE-2017-1000060 |
|
EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root
EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root
|
| CVE-2017-1000033 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-1000033)
cross-site scripting in wordpress (CVE-2017-1000033). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000035 |
|
Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack
Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack
|
| CVE-2017-1000038 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-1000038)
cross-site scripting in wordpress (CVE-2017-1000038). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000051 |
|
Cross-Site Scripting (XSS) in xwiki (CVE-2017-1000051)
cross-site scripting in xwiki (CVE-2017-1000051). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000054 |
|
Cross-Site Scripting (XSS) in rocketchat (CVE-2017-1000054)
cross-site scripting in rocketchat (CVE-2017-1000054). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000058 |
|
Cross-Site Scripting (XSS) in chevereto (CVE-2017-1000058)
cross-site scripting in chevereto (CVE-2017-1000058). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000059 |
|
Cross-Site Scripting (XSS) in livehelperchat (CVE-2017-1000059)
cross-site scripting in livehelperchat (CVE-2017-1000059). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000063 |
|
Cross-Site Scripting (XSS) in kitto-project (CVE-2017-1000063)
cross-site scripting in kitto-project (CVE-2017-1000063). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000047 |
|
Path Traversal in path-traversal (CVE-2017-1000047)
path traversal in path-traversal (CVE-2017-1000047). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000004 |
|
SQL Injection in sqli (CVE-2017-1000004)
SQL injection in sqli (CVE-2017-1000004). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000031 |
|
SQL Injection in sqli (CVE-2017-1000031)
SQL injection in sqli (CVE-2017-1000031). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000005 |
|
Cross-Site Scripting (XSS) in phpminiadmin-project (CVE-2017-1000005)
cross-site scripting in phpminiadmin-project (CVE-2017-1000005). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000006 |
|
Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.
Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.
|
| CVE-2017-1000011 |
|
Cross-Site Scripting (XSS) in mywebsql (CVE-2017-1000011)
cross-site scripting in mywebsql (CVE-2017-1000011). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000012 |
|
Cross-Site Scripting (XSS) in mysqldumper (CVE-2017-1000012)
cross-site scripting in mysqldumper (CVE-2017-1000012). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000023 |
|
Cross-Site Scripting (XSS) in logicaldoc (CVE-2017-1000023)
cross-site scripting in logicaldoc (CVE-2017-1000023). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000032 |
|
Cross-Site Scripting (XSS) in cacti (CVE-2017-1000032)
cross-site scripting in cacti (CVE-2017-1000032). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000008 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-1000008)
vulnerability in csrf (CVE-2017-1000008). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000026 |
|
Path Traversal in path-traversal (CVE-2017-1000026)
path traversal in path-traversal (CVE-2017-1000026). Data can be tampered with by attackers.
|
| CVE-2017-1000028 |
|
Path Traversal in path-traversal (CVE-2017-1000028)
path traversal in path-traversal (CVE-2017-1000028). Confidential information can be exposed externally.
|
| CVE-2017-1000020 |
|
Authentication Bypass in ecos (CVE-2017-1000020)
authentication bypass in ecos (CVE-2017-1000020). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000003 |
|
Privilege Escalation in privilege-escalation (CVE-2017-1000003)
vulnerability in privilege-escalation (CVE-2017-1000003). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000022 |
|
Vulnerability in privilege-escalation (CVE-2017-1000022)
vulnerability in privilege-escalation (CVE-2017-1000022). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000014 |
|
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality
|
| CVE-2017-1000018 |
|
Vulnerability in dos (CVE-2017-1000018)
vulnerability in dos (CVE-2017-1000018). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000002 |
|
Path Traversal in path-traversal (CVE-2017-1000002)
path traversal in path-traversal (CVE-2017-1000002). Successful exploitation can lead to full system takeover.
|
| CVE-2017-0152 |
|
Buffer Overflow in microsoft (CVE-2017-0152)
vulnerability in microsoft (CVE-2017-0152). Successful exploitation can lead to full system takeover.
|
| CVE-2017-0028 |
|
Buffer Overflow in microsoft (CVE-2017-0028)
vulnerability in microsoft (CVE-2017-0028). Successful exploitation can lead to full system takeover.
|
| CVE-2016-6312 |
|
Vulnerability in apache (CVE-2016-6312)
vulnerability in apache (CVE-2016-6312). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-6793 |
|
Unsafe Deserialization in apache (CVE-2016-6793)
vulnerability in apache (CVE-2016-6793). Data can be tampered with by attackers.
|
| CVE-2016-10398 |
|
Vulnerability in google (CVE-2016-10398)
vulnerability in google (CVE-2016-10398). Successful exploitation can lead to full system takeover.
|
| CVE-2017-9788 |
|
Vulnerability in apache (CVE-2017-9788)
vulnerability in apache (CVE-2017-9788). Confidential information can be exposed externally. Exploitable via `Authorization header`.
|
| CVE-2016-8951 |
|
Authentication Bypass in dos (CVE-2016-8951)
authentication bypass in dos (CVE-2016-8951). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-9787 |
|
Vulnerability in apache (CVE-2017-9787)
vulnerability in apache (CVE-2017-9787). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-6019 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2016-6019)
cross-site scripting in ibm (CVE-2016-6019). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-8952 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2016-8952)
cross-site scripting in ibm (CVE-2016-8952). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11200 |
|
SQL Injection in sqli (CVE-2017-11200)
SQL injection in sqli (CVE-2017-11200). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11198 |
|
Cross-Site Scripting (XSS) in finecms-project (CVE-2017-11198)
cross-site scripting in finecms-project (CVE-2017-11198). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11201 |
|
Cross-Site Scripting (XSS) in finecms-project (CVE-2017-11201)
cross-site scripting in finecms-project (CVE-2017-11201). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11202 |
|
Cross-Site Scripting (XSS) in finecms-project (CVE-2017-11202)
cross-site scripting in finecms-project (CVE-2017-11202). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11174 |
|
SQL Injection in sqli (CVE-2017-11174)
SQL injection in sqli (CVE-2017-11174). Successful exploitation can lead to full system takeover.
|