Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2017-3457 |
|
Vulnerability in c (CVE-2017-3457)
vulnerability in c (CVE-2017-3457). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-3458 |
|
Vulnerability in c (CVE-2017-3458)
vulnerability in c (CVE-2017-3458). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-3459 |
|
Vulnerability in c (CVE-2017-3459)
vulnerability in c (CVE-2017-3459). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-3460 |
|
Vulnerability in c (CVE-2017-3460)
vulnerability in c (CVE-2017-3460). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-3461 |
|
Vulnerability in c (CVE-2017-3461)
vulnerability in c (CVE-2017-3461). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-3462 |
|
Vulnerability in c (CVE-2017-3462)
vulnerability in c (CVE-2017-3462). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-3463 |
|
Vulnerability in c (CVE-2017-3463)
vulnerability in c (CVE-2017-3463). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-3470 |
|
Vulnerability in c (CVE-2017-3470)
vulnerability in c (CVE-2017-3470). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-3475 |
|
Vulnerability in c (CVE-2017-3475)
vulnerability in c (CVE-2017-3475). Risk of unauthorized operations or information disclosure.
|
| CVE-2011-3438 |
|
Buffer Overflow in dos (CVE-2011-3438)
vulnerability in dos (CVE-2011-3438). Successful exploitation can lead to full system takeover.
|
| CVE-2016-6916 |
|
Vulnerability in c (CVE-2016-6916)
vulnerability in c (CVE-2016-6916). Successful exploitation can lead to full system takeover.
|
| CVE-2017-3230 |
|
Vulnerability in c (CVE-2017-3230)
vulnerability in c (CVE-2017-3230). Data can be tampered with by attackers.
|
| CVE-2017-3254 |
|
Vulnerability in c (CVE-2017-3254)
vulnerability in c (CVE-2017-3254). Confidential information can be exposed externally.
|
| CVE-2017-3304 |
|
Vulnerability in c (CVE-2017-3304)
vulnerability in c (CVE-2017-3304). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-3306 |
|
Vulnerability in c (CVE-2017-3306)
vulnerability in c (CVE-2017-3306). Confidential information can be exposed externally.
|
| CVE-2017-3307 |
|
Vulnerability in c (CVE-2017-3307)
vulnerability in c (CVE-2017-3307). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-3308 |
|
Vulnerability in c (CVE-2017-3308)
vulnerability in c (CVE-2017-3308). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-3309 |
|
Vulnerability in c (CVE-2017-3309)
vulnerability in c (CVE-2017-3309). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-3076 |
|
Buffer Overflow in pillow (CVE-2016-3076)
vulnerability in pillow (CVE-2016-3076). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.2` or later.
|
| CVE-2017-2322 |
|
Vulnerability in dos (CVE-2017-2322)
vulnerability in dos (CVE-2017-2322). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-7568 |
|
SQL Injection in sqli (CVE-2015-7568)
SQL injection in sqli (CVE-2015-7568). Successful exploitation can lead to full system takeover.
|
| CVE-2015-7569 |
|
SQL Injection in sqli (CVE-2015-7569)
SQL injection in sqli (CVE-2015-7569). Successful exploitation can lead to full system takeover.
|
| CVE-2017-5191 |
|
Cross-Site Scripting (XSS) in netiq (CVE-2017-5191)
cross-site scripting in netiq (CVE-2017-5191). Risk of unauthorized operations or information disclosure. Exploitable via `Referer header`.
|
| CVE-2017-7723 |
|
XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body.
XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body.
|
| CVE-2017-8102 |
|
Cross-Site Scripting (XSS) in s9y (CVE-2017-8102)
cross-site scripting in s9y (CVE-2017-8102). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-8103 |
|
Cross-Site Scripting (XSS) in mybb (CVE-2017-8103)
cross-site scripting in mybb (CVE-2017-8103). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-7570 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2015-7570)
SSRF in ssrf (CVE-2015-7570). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-3691 |
|
Cross-Site Request Forgery (CSRF) in kallithea (CVE-2016-3691)
vulnerability in kallithea (CVE-2016-3691). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.3.2` or later.
|
| CVE-2017-8099 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2017-8099)
vulnerability in wordpress (CVE-2017-8099). Data can be tampered with by attackers.
|
| CVE-2017-8100 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2017-8100)
vulnerability in wordpress (CVE-2017-8100). Data can be tampered with by attackers.
|
| CVE-2017-8101 |
|
There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request.
There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request.
|
| CVE-2015-7245 |
|
Path Traversal in path-traversal (CVE-2015-7245)
path traversal in path-traversal (CVE-2015-7245). Confidential information can be exposed externally.
|
| CVE-2016-4313 |
|
Path Traversal in path-traversal (CVE-2016-4313)
path traversal in path-traversal (CVE-2016-4313). Successful exploitation can lead to full system takeover.
|
| CVE-2017-8104 |
|
In MyBB before 1.8.11, the smilie module allows Directory Traversal via the pathfolder parameter.
In MyBB before 1.8.11, the smilie module allows Directory Traversal via the pathfolder parameter.
|
| CVE-2017-1000357 |
|
Vulnerability in dos (CVE-2017-1000357)
vulnerability in dos (CVE-2017-1000357). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-2313 |
|
Vulnerability in dos (CVE-2017-2313)
vulnerability in dos (CVE-2017-2313). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-2315 |
|
Vulnerability in dos (CVE-2017-2315)
vulnerability in dos (CVE-2017-2315). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-2316 |
|
Buffer Overflow in dos (CVE-2017-2316)
vulnerability in dos (CVE-2017-2316). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-2317 |
|
Information Disclosure in dos (CVE-2017-2317)
vulnerability in dos (CVE-2017-2317). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-2323 |
|
Vulnerability in c (CVE-2017-2323)
vulnerability in c (CVE-2017-2323). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-2324 |
|
Command Injection in c (CVE-2017-2324)
command injection in c (CVE-2017-2324). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-2325 |
|
Buffer Overflow in dos (CVE-2017-2325)
vulnerability in dos (CVE-2017-2325). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-2327 |
|
Vulnerability in dos (CVE-2017-2327)
vulnerability in dos (CVE-2017-2327). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-2330 |
|
Vulnerability in dos (CVE-2017-2330)
vulnerability in dos (CVE-2017-2330). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-2333 |
|
Vulnerability in dos (CVE-2017-2333)
vulnerability in dos (CVE-2017-2333). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-2331 |
|
Vulnerability in juniper (CVE-2017-2331)
vulnerability in juniper (CVE-2017-2331). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-8085 |
|
Cross-Site Scripting (XSS) in exponentcms (CVE-2017-8085)
cross-site scripting in exponentcms (CVE-2017-8085). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-7944 |
|
Cross-Site Scripting (XSS) in xoops (CVE-2017-7944)
cross-site scripting in xoops (CVE-2017-7944). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-7852 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-7852)
vulnerability in csrf (CVE-2017-7852). Successful exploitation can lead to full system takeover.
|
| CVE-2017-8082 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-8082)
vulnerability in csrf (CVE-2017-8082). Risk of unauthorized operations or information disclosure.
|