Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2017-4914 Unsafe Deserialization in deserialization (CVE-2017-4914)
vulnerability in deserialization (CVE-2017-4914). Successful exploitation can lead to full system takeover.
CVE-2017-1178 Cross-Site Scripting (XSS) in ibm (CVE-2017-1178)
cross-site scripting in ibm (CVE-2017-1178). Risk of unauthorized operations or information disclosure.
CVE-2017-1305 Cross-Site Scripting (XSS) in ibm (CVE-2017-1305)
cross-site scripting in ibm (CVE-2017-1305). Risk of unauthorized operations or information disclosure.
CVE-2017-7564 Vulnerability in dos (CVE-2017-7564)
vulnerability in dos (CVE-2017-7564). Risk of unauthorized operations or information disclosure.
CVE-2017-9499 Vulnerability in dos (CVE-2017-9499)
vulnerability in dos (CVE-2017-9499). Risk of unauthorized operations or information disclosure.
CVE-2017-9500 Vulnerability in dos (CVE-2017-9500)
vulnerability in dos (CVE-2017-9500). Risk of unauthorized operations or information disclosure.
CVE-2017-9501 Vulnerability in dos (CVE-2017-9501)
vulnerability in dos (CVE-2017-9501). Risk of unauthorized operations or information disclosure.
CVE-2015-7888 Path Traversal in path-traversal (CVE-2015-7888)
path traversal in path-traversal (CVE-2015-7888). Data can be tampered with by attackers.
CVE-2016-9834 Cross-Site Scripting (XSS) in sophos (CVE-2016-9834)
cross-site scripting in sophos (CVE-2016-9834). Risk of unauthorized operations or information disclosure.
CVE-2017-9470 Vulnerability in c (CVE-2017-9470)
vulnerability in c (CVE-2017-9470). Risk of unauthorized operations or information disclosure.
CVE-2017-9471 Out-of-Bounds Read in c (CVE-2017-9471)
vulnerability in c (CVE-2017-9471). Risk of unauthorized operations or information disclosure.
CVE-2017-9472 Out-of-Bounds Read in c (CVE-2017-9472)
vulnerability in c (CVE-2017-9472). Risk of unauthorized operations or information disclosure.
CVE-2017-9473 Vulnerability in c (CVE-2017-9473)
vulnerability in c (CVE-2017-9473). Risk of unauthorized operations or information disclosure.
CVE-2017-9474 Out-of-Bounds Read in c (CVE-2017-9474)
vulnerability in c (CVE-2017-9474). Risk of unauthorized operations or information disclosure.
CVE-2017-9461 Vulnerability in dos (CVE-2017-9461)
vulnerability in dos (CVE-2017-9461). Risk of unauthorized operations or information disclosure.
CVE-2017-9465 Out-of-Bounds Read in c (CVE-2017-9465)
vulnerability in c (CVE-2017-9465). Confidential information can be exposed externally.
CVE-2014-8180 Authentication Bypass in dos (CVE-2014-8180)
authentication bypass in dos (CVE-2014-8180). Risk of unauthorized operations or information disclosure.
CVE-2015-1207 Vulnerability in c (CVE-2015-1207)
vulnerability in c (CVE-2015-1207). Risk of unauthorized operations or information disclosure.
CVE-2016-3077 Buffer Overflow in dos (CVE-2016-3077)
vulnerability in dos (CVE-2016-3077). Risk of unauthorized operations or information disclosure.
CVE-2016-5004 Vulnerability in apache (CVE-2016-5004)
vulnerability in apache (CVE-2016-5004). Risk of unauthorized operations or information disclosure.
CVE-2016-9960 Vulnerability in dos (CVE-2016-9960)
vulnerability in dos (CVE-2016-9960). Risk of unauthorized operations or information disclosure.
CVE-2017-8920 Cross-Site Scripting (XSS) in cgiirc (CVE-2017-8920)
cross-site scripting in cgiirc (CVE-2017-8920). Risk of unauthorized operations or information disclosure.
CVE-2017-9451 Cross-Site Scripting (XSS) in flatcore (CVE-2017-9451)
cross-site scripting in flatcore (CVE-2017-9451). Risk of unauthorized operations or information disclosure.
CVE-2017-9452 Cross-Site Scripting (XSS) in piwigo (CVE-2017-9452)
cross-site scripting in piwigo (CVE-2017-9452). Risk of unauthorized operations or information disclosure.
CVE-2017-9449 SQL Injection in sqli (CVE-2017-9449)
SQL injection in sqli (CVE-2017-9449). Successful exploitation can lead to full system takeover.
CVE-2017-9448 Cross-Site Scripting (XSS) in bigtreecms (CVE-2017-9448)
cross-site scripting in bigtreecms (CVE-2017-9448). Risk of unauthorized operations or information disclosure.
CVE-2017-9332 Cross-Site Scripting (XSS) in pivotx (CVE-2017-9332)
cross-site scripting in pivotx (CVE-2017-9332). Risk of unauthorized operations or information disclosure.
CVE-2017-9443 SQL Injection in sqli (CVE-2017-9443)
SQL injection in sqli (CVE-2017-9443). Successful exploitation can lead to full system takeover.
CVE-2017-9420 Cross-Site Scripting (XSS) in wordpress (CVE-2017-9420)
cross-site scripting in wordpress (CVE-2017-9420). Risk of unauthorized operations or information disclosure.
CVE-2017-9441 Cross-Site Scripting (XSS) in bigtreecms (CVE-2017-9441)
cross-site scripting in bigtreecms (CVE-2017-9441). Risk of unauthorized operations or information disclosure.
CVE-2017-9444 Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-9444)
vulnerability in csrf (CVE-2017-9444). Successful exploitation can lead to full system takeover.
CVE-2017-9439 Vulnerability in c (CVE-2017-9439)
vulnerability in c (CVE-2017-9439). Risk of unauthorized operations or information disclosure.
CVE-2017-9440 Vulnerability in c (CVE-2017-9440)
vulnerability in c (CVE-2017-9440). Risk of unauthorized operations or information disclosure.
CVE-2017-9438 Vulnerability in c (CVE-2017-9438)
vulnerability in c (CVE-2017-9438). Risk of unauthorized operations or information disclosure.
CVE-2017-8438 Vulnerability in privilege-escalation (CVE-2017-8438)
vulnerability in privilege-escalation (CVE-2017-8438). Successful exploitation can lead to full system takeover.
CVE-2017-8835 SQL Injection in sqli (CVE-2017-8835)
SQL injection in sqli (CVE-2017-8835). Successful exploitation can lead to full system takeover.
CVE-2017-9435 SQL Injection in sqli (CVE-2017-9435)
SQL injection in sqli (CVE-2017-9435). Successful exploitation can lead to full system takeover.
CVE-2017-9436 TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php.
TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php.
CVE-2017-9437 SQL Injection in sqli (CVE-2017-9437)
SQL injection in sqli (CVE-2017-9437). Successful exploitation can lead to full system takeover.
CVE-2017-8439 Cross-Site Scripting (XSS) in elastic (CVE-2017-8439)
cross-site scripting in elastic (CVE-2017-8439). Risk of unauthorized operations or information disclosure.
CVE-2017-8440 Cross-Site Scripting (XSS) in elastic (CVE-2017-8440)
cross-site scripting in elastic (CVE-2017-8440). Risk of unauthorized operations or information disclosure.
CVE-2017-8838 Cross-Site Scripting (XSS) in peplink (CVE-2017-8838)
cross-site scripting in peplink (CVE-2017-8838). Risk of unauthorized operations or information disclosure.
CVE-2017-8839 Cross-Site Scripting (XSS) in peplink (CVE-2017-8839)
cross-site scripting in peplink (CVE-2017-8839). Risk of unauthorized operations or information disclosure.
CVE-2017-8836 Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-8836)
vulnerability in csrf (CVE-2017-8836). Successful exploitation can lead to full system takeover.
CVE-2017-8841 Path Traversal in path-traversal (CVE-2017-8841)
path traversal in path-traversal (CVE-2017-8841). Data can be tampered with by attackers.
CVE-2017-9430 Buffer Overflow in dos (CVE-2017-9430)
vulnerability in dos (CVE-2017-9430). Successful exploitation can lead to full system takeover.
CVE-2017-9427 SQL Injection in sqli (CVE-2017-9427)
SQL injection in sqli (CVE-2017-9427). Successful exploitation can lead to full system takeover.
CVE-2014-9983 Path Traversal in path-traversal (CVE-2014-9983)
path traversal in path-traversal (CVE-2014-9983). Data can be tampered with by attackers.
CVE-2017-9428 Path Traversal in path-traversal (CVE-2017-9428)
path traversal in path-traversal (CVE-2017-9428). Confidential information can be exposed externally.
CVE-2012-6705 Cross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field.
Cross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →