Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2017-1000079 Linux foundation ONOS 1.9.0 is vulnerable to a DoS.
Linux foundation ONOS 1.9.0 is vulnerable to a DoS.
CVE-2017-10605 Vulnerability in dos (CVE-2017-10605)
vulnerability in dos (CVE-2017-10605). Risk of unauthorized operations or information disclosure.
CVE-2017-1000056 Vulnerability in privilege-escalation (CVE-2017-1000056)
vulnerability in privilege-escalation (CVE-2017-1000056). Successful exploitation can lead to full system takeover.
CVE-2017-1000048 Vulnerability in dos (CVE-2017-1000048)
vulnerability in dos (CVE-2017-1000048). Risk of unauthorized operations or information disclosure.
CVE-2017-1000061 XXE (XML External Entity) in dos (CVE-2017-1000061)
vulnerability in dos (CVE-2017-1000061). Confidential information can be exposed externally.
CVE-2017-1000053 Unsafe Deserialization in deserialization (CVE-2017-1000053)
vulnerability in deserialization (CVE-2017-1000053). Successful exploitation can lead to full system takeover.
CVE-2017-1000034 Unsafe Deserialization in deserialization (CVE-2017-1000034)
vulnerability in deserialization (CVE-2017-1000034). Successful exploitation can lead to full system takeover.
CVE-2017-1000062 Path Traversal in path-traversal (CVE-2017-1000062)
path traversal in path-traversal (CVE-2017-1000062). Confidential information can be exposed externally.
CVE-2017-1000060 EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root
EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root
CVE-2017-1000033 Cross-Site Scripting (XSS) in wordpress (CVE-2017-1000033)
cross-site scripting in wordpress (CVE-2017-1000033). Risk of unauthorized operations or information disclosure.
CVE-2017-1000035 Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack
Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack
CVE-2017-1000038 Cross-Site Scripting (XSS) in wordpress (CVE-2017-1000038)
cross-site scripting in wordpress (CVE-2017-1000038). Risk of unauthorized operations or information disclosure.
CVE-2017-1000051 Cross-Site Scripting (XSS) in xwiki (CVE-2017-1000051)
cross-site scripting in xwiki (CVE-2017-1000051). Risk of unauthorized operations or information disclosure.
CVE-2017-1000054 Cross-Site Scripting (XSS) in rocketchat (CVE-2017-1000054)
cross-site scripting in rocketchat (CVE-2017-1000054). Risk of unauthorized operations or information disclosure.
CVE-2017-1000058 Cross-Site Scripting (XSS) in chevereto (CVE-2017-1000058)
cross-site scripting in chevereto (CVE-2017-1000058). Risk of unauthorized operations or information disclosure.
CVE-2017-1000059 Cross-Site Scripting (XSS) in livehelperchat (CVE-2017-1000059)
cross-site scripting in livehelperchat (CVE-2017-1000059). Risk of unauthorized operations or information disclosure.
CVE-2017-1000063 Cross-Site Scripting (XSS) in kitto-project (CVE-2017-1000063)
cross-site scripting in kitto-project (CVE-2017-1000063). Risk of unauthorized operations or information disclosure.
CVE-2017-1000047 Path Traversal in path-traversal (CVE-2017-1000047)
path traversal in path-traversal (CVE-2017-1000047). Successful exploitation can lead to full system takeover.
CVE-2017-1000004 SQL Injection in sqli (CVE-2017-1000004)
SQL injection in sqli (CVE-2017-1000004). Successful exploitation can lead to full system takeover.
CVE-2017-1000031 SQL Injection in sqli (CVE-2017-1000031)
SQL injection in sqli (CVE-2017-1000031). Successful exploitation can lead to full system takeover.
CVE-2017-1000005 Cross-Site Scripting (XSS) in phpminiadmin-project (CVE-2017-1000005)
cross-site scripting in phpminiadmin-project (CVE-2017-1000005). Risk of unauthorized operations or information disclosure.
CVE-2017-1000006 Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.
Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.
CVE-2017-1000011 Cross-Site Scripting (XSS) in mywebsql (CVE-2017-1000011)
cross-site scripting in mywebsql (CVE-2017-1000011). Risk of unauthorized operations or information disclosure.
CVE-2017-1000012 Cross-Site Scripting (XSS) in mysqldumper (CVE-2017-1000012)
cross-site scripting in mysqldumper (CVE-2017-1000012). Risk of unauthorized operations or information disclosure.
CVE-2017-1000023 Cross-Site Scripting (XSS) in logicaldoc (CVE-2017-1000023)
cross-site scripting in logicaldoc (CVE-2017-1000023). Risk of unauthorized operations or information disclosure.
CVE-2017-1000032 Cross-Site Scripting (XSS) in cacti (CVE-2017-1000032)
cross-site scripting in cacti (CVE-2017-1000032). Risk of unauthorized operations or information disclosure.
CVE-2017-1000008 Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-1000008)
vulnerability in csrf (CVE-2017-1000008). Successful exploitation can lead to full system takeover.
CVE-2017-1000026 Path Traversal in path-traversal (CVE-2017-1000026)
path traversal in path-traversal (CVE-2017-1000026). Data can be tampered with by attackers.
CVE-2017-1000028 Path Traversal in path-traversal (CVE-2017-1000028)
path traversal in path-traversal (CVE-2017-1000028). Confidential information can be exposed externally.
CVE-2017-1000020 Authentication Bypass in ecos (CVE-2017-1000020)
authentication bypass in ecos (CVE-2017-1000020). Successful exploitation can lead to full system takeover.
CVE-2017-1000003 Privilege Escalation in privilege-escalation (CVE-2017-1000003)
vulnerability in privilege-escalation (CVE-2017-1000003). Successful exploitation can lead to full system takeover.
CVE-2017-1000022 Vulnerability in privilege-escalation (CVE-2017-1000022)
vulnerability in privilege-escalation (CVE-2017-1000022). Successful exploitation can lead to full system takeover.
CVE-2017-1000014 phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality
CVE-2017-1000018 Vulnerability in dos (CVE-2017-1000018)
vulnerability in dos (CVE-2017-1000018). Risk of unauthorized operations or information disclosure.
CVE-2017-1000002 Path Traversal in path-traversal (CVE-2017-1000002)
path traversal in path-traversal (CVE-2017-1000002). Successful exploitation can lead to full system takeover.
CVE-2017-0152 Buffer Overflow in microsoft (CVE-2017-0152)
vulnerability in microsoft (CVE-2017-0152). Successful exploitation can lead to full system takeover.
CVE-2017-0028 Buffer Overflow in microsoft (CVE-2017-0028)
vulnerability in microsoft (CVE-2017-0028). Successful exploitation can lead to full system takeover.
CVE-2016-6312 Vulnerability in apache (CVE-2016-6312)
vulnerability in apache (CVE-2016-6312). Risk of unauthorized operations or information disclosure.
CVE-2016-6793 Unsafe Deserialization in apache (CVE-2016-6793)
vulnerability in apache (CVE-2016-6793). Data can be tampered with by attackers.
CVE-2016-10398 Vulnerability in google (CVE-2016-10398)
vulnerability in google (CVE-2016-10398). Successful exploitation can lead to full system takeover.
CVE-2017-9788 Vulnerability in apache (CVE-2017-9788)
vulnerability in apache (CVE-2017-9788). Confidential information can be exposed externally. Exploitable via `Authorization header`.
CVE-2016-8951 Authentication Bypass in dos (CVE-2016-8951)
authentication bypass in dos (CVE-2016-8951). Risk of unauthorized operations or information disclosure.
CVE-2017-9787 Vulnerability in apache (CVE-2017-9787)
vulnerability in apache (CVE-2017-9787). Risk of unauthorized operations or information disclosure.
CVE-2016-6019 Cross-Site Scripting (XSS) in ibm (CVE-2016-6019)
cross-site scripting in ibm (CVE-2016-6019). Risk of unauthorized operations or information disclosure.
CVE-2016-8952 Cross-Site Scripting (XSS) in ibm (CVE-2016-8952)
cross-site scripting in ibm (CVE-2016-8952). Risk of unauthorized operations or information disclosure.
CVE-2017-11200 SQL Injection in sqli (CVE-2017-11200)
SQL injection in sqli (CVE-2017-11200). Successful exploitation can lead to full system takeover.
CVE-2017-11198 Cross-Site Scripting (XSS) in finecms-project (CVE-2017-11198)
cross-site scripting in finecms-project (CVE-2017-11198). Risk of unauthorized operations or information disclosure.
CVE-2017-11201 Cross-Site Scripting (XSS) in finecms-project (CVE-2017-11201)
cross-site scripting in finecms-project (CVE-2017-11201). Risk of unauthorized operations or information disclosure.
CVE-2017-11202 Cross-Site Scripting (XSS) in finecms-project (CVE-2017-11202)
cross-site scripting in finecms-project (CVE-2017-11202). Risk of unauthorized operations or information disclosure.
CVE-2017-11174 SQL Injection in sqli (CVE-2017-11174)
SQL injection in sqli (CVE-2017-11174). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →