Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2014-9907 Vulnerability in c (CVE-2014-9907)
vulnerability in c (CVE-2014-9907). Risk of unauthorized operations or information disclosure.
CVE-2016-7515 Out-of-Bounds Read in c (CVE-2016-7515)
vulnerability in c (CVE-2016-7515). Risk of unauthorized operations or information disclosure.
CVE-2016-7519 Out-of-Bounds Read in c (CVE-2016-7519)
vulnerability in c (CVE-2016-7519). Risk of unauthorized operations or information disclosure.
CVE-2016-7522 Out-of-Bounds Read in c (CVE-2016-7522)
vulnerability in c (CVE-2016-7522). Risk of unauthorized operations or information disclosure.
CVE-2016-7528 Out-of-Bounds Read in c (CVE-2016-7528)
vulnerability in c (CVE-2016-7528). Risk of unauthorized operations or information disclosure.
CVE-2016-7529 Out-of-Bounds Read in c (CVE-2016-7529)
vulnerability in c (CVE-2016-7529). Risk of unauthorized operations or information disclosure.
CVE-2016-7531 Out-of-Bounds Write in c (CVE-2016-7531)
out-of-bounds write in c (CVE-2016-7531). Risk of unauthorized operations or information disclosure.
CVE-2016-7533 Out-of-Bounds Read in c (CVE-2016-7533)
vulnerability in c (CVE-2016-7533). Risk of unauthorized operations or information disclosure.
CVE-2016-7537 Out-of-Bounds Read in c (CVE-2016-7537)
vulnerability in c (CVE-2016-7537). Risk of unauthorized operations or information disclosure.
CVE-2017-7849 Vulnerability in dos (CVE-2017-7849)
vulnerability in dos (CVE-2017-7849). Risk of unauthorized operations or information disclosure.
CVE-2017-7948 Vulnerability in dos (CVE-2017-7948)
vulnerability in dos (CVE-2017-7948). Successful exploitation can lead to full system takeover.
CVE-2017-7946 Use-After-Free in c (CVE-2017-7946)
vulnerability in c (CVE-2017-7946). Risk of unauthorized operations or information disclosure.
CVE-2017-7939 Out-of-Bounds Read in c (CVE-2017-7939)
vulnerability in c (CVE-2017-7939). Risk of unauthorized operations or information disclosure.
CVE-2017-7897 Cross-Site Scripting (XSS) in mantisbt (CVE-2017-7897)
cross-site scripting in mantisbt (CVE-2017-7897). Risk of unauthorized operations or information disclosure.
CVE-2017-7896 Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS.
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS.
CVE-2017-5661 XXE (XML External Entity) in apache (CVE-2017-5661)
vulnerability in apache (CVE-2017-5661). Confidential information can be exposed externally.
CVE-2017-5662 XXE (XML External Entity) in apache (CVE-2017-5662)
vulnerability in apache (CVE-2017-5662). Confidential information can be exposed externally.
CVE-2017-7645 Vulnerability in c (CVE-2017-7645)
vulnerability in c (CVE-2017-7645). Risk of unauthorized operations or information disclosure.
CVE-2016-3036 Buffer Overflow in dos (CVE-2016-3036)
vulnerability in dos (CVE-2016-3036). Risk of unauthorized operations or information disclosure.
CVE-2016-3038 Cross-Site Scripting (XSS) in ibm (CVE-2016-3038)
cross-site scripting in ibm (CVE-2016-3038). Risk of unauthorized operations or information disclosure.
CVE-2017-1160 Cross-Site Scripting (XSS) in ibm (CVE-2017-1160)
cross-site scripting in ibm (CVE-2017-1160). Risk of unauthorized operations or information disclosure.
CVE-2015-8256 Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.
Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.
CVE-2016-7551 Vulnerability in dos (CVE-2016-7551)
vulnerability in dos (CVE-2016-7551). Risk of unauthorized operations or information disclosure.
CVE-2016-4871 Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service.
Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service.
CVE-2016-4865 Cross-Site Scripting (XSS) in cybozu (CVE-2016-4865)
cross-site scripting in cybozu (CVE-2016-4865). Risk of unauthorized operations or information disclosure.
CVE-2016-4866 Cross-Site Scripting (XSS) in cybozu (CVE-2016-4866)
cross-site scripting in cybozu (CVE-2016-4866). Risk of unauthorized operations or information disclosure.
CVE-2016-4870 Cross-Site Scripting (XSS) in cybozu (CVE-2016-4870)
cross-site scripting in cybozu (CVE-2016-4870). Risk of unauthorized operations or information disclosure.
CVE-2017-7891 sourcebans-pp (SourceBans++) 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter.
sourcebans-pp (SourceBans++) 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter.
CVE-2017-7885 Vulnerability in c (CVE-2017-7885)
vulnerability in c (CVE-2017-7885). Confidential information can be exposed externally.
CVE-2017-7881 Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-7881)
vulnerability in csrf (CVE-2017-7881). Successful exploitation can lead to full system takeover. Exploitable via `Referer header`.
CVE-2017-7717 SQL Injection in sqli (CVE-2017-7717)
SQL injection in sqli (CVE-2017-7717). Successful exploitation can lead to full system takeover.
CVE-2017-7878 SQL Injection in sqli (CVE-2017-7878)
SQL injection in sqli (CVE-2017-7878). Successful exploitation can lead to full system takeover.
CVE-2017-7879 SQL Injection in sqli (CVE-2017-7879)
SQL injection in sqli (CVE-2017-7879). Confidential information can be exposed externally.
CVE-2017-7871 Cross-Site Scripting (XSS) in tdm-project (CVE-2017-7871)
cross-site scripting in tdm-project (CVE-2017-7871). Risk of unauthorized operations or information disclosure.
CVE-2017-7877 CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.
CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.
CVE-2017-7696 Vulnerability in dos (CVE-2017-7696)
vulnerability in dos (CVE-2017-7696). Risk of unauthorized operations or information disclosure.
CVE-2016-3104 Vulnerability in dos (CVE-2016-3104)
vulnerability in dos (CVE-2016-3104). Risk of unauthorized operations or information disclosure.
CVE-2016-5309 Out-of-Bounds Read in dos (CVE-2016-5309)
vulnerability in dos (CVE-2016-5309). Risk of unauthorized operations or information disclosure.
CVE-2016-5310 Out-of-Bounds Write in dos (CVE-2016-5310)
out-of-bounds write in dos (CVE-2016-5310). Risk of unauthorized operations or information disclosure.
CVE-2016-8602 Vulnerability in c (CVE-2016-8602)
vulnerability in c (CVE-2016-8602). Successful exploitation can lead to full system takeover.
CVE-2016-4875 Cross-Site Scripting (XSS) in assist-project (CVE-2016-4875)
cross-site scripting in assist-project (CVE-2016-4875). Risk of unauthorized operations or information disclosure.
CVE-2016-4888 Cross-Site Scripting (XSS) in zohocorp (CVE-2016-4888)
cross-site scripting in zohocorp (CVE-2016-4888). Risk of unauthorized operations or information disclosure.
CVE-2017-7188 Cross-Site Scripting (XSS) in zurmo (CVE-2017-7188)
cross-site scripting in zurmo (CVE-2017-7188). Risk of unauthorized operations or information disclosure.
CVE-2016-7051 XXE (XML External Entity) in ssrf (CVE-2016-7051)
vulnerability in ssrf (CVE-2016-7051). Data can be tampered with by attackers.
CVE-2016-5312 Path Traversal in path-traversal (CVE-2016-5312)
path traversal in path-traversal (CVE-2016-5312). Confidential information can be exposed externally.
CVE-2016-8927 Cross-Site Scripting (XSS) in ibm (CVE-2016-8927)
cross-site scripting in ibm (CVE-2016-8927). Risk of unauthorized operations or information disclosure.
CVE-2015-8356 SQL Injection in sqli (CVE-2015-8356)
SQL injection in sqli (CVE-2015-8356). Successful exploitation can lead to full system takeover.
CVE-2017-7408 Vulnerability in dos (CVE-2017-7408)
vulnerability in dos (CVE-2017-7408). Risk of unauthorized operations or information disclosure.
CVE-2017-7456 Vulnerability in dos (CVE-2017-7456)
vulnerability in dos (CVE-2017-7456). Risk of unauthorized operations or information disclosure.
CVE-2016-6818 SQL Injection in sqli (CVE-2016-6818)
SQL injection in sqli (CVE-2016-6818). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →