Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2017-7275 Buffer Overflow in c (CVE-2017-7275)
vulnerability in c (CVE-2017-7275). Risk of unauthorized operations or information disclosure.
CVE-2017-7273 Vulnerability in c (CVE-2017-7273)
vulnerability in c (CVE-2017-7273). Successful exploitation can lead to full system takeover.
CVE-2017-7274 Vulnerability in c (CVE-2017-7274)
vulnerability in c (CVE-2017-7274). Risk of unauthorized operations or information disclosure.
CVE-2015-8762 Vulnerability in dos (CVE-2015-8762)
vulnerability in dos (CVE-2015-8762). Risk of unauthorized operations or information disclosure.
CVE-2016-4912 Vulnerability in c (CVE-2016-4912)
vulnerability in c (CVE-2016-4912). Risk of unauthorized operations or information disclosure.
CVE-2017-6463 Vulnerability in dos (CVE-2017-6463)
vulnerability in dos (CVE-2017-6463). Risk of unauthorized operations or information disclosure.
CVE-2017-6464 Vulnerability in dos (CVE-2017-6464)
vulnerability in dos (CVE-2017-6464). Risk of unauthorized operations or information disclosure.
CVE-2017-7183 Vulnerability in dos (CVE-2017-7183)
vulnerability in dos (CVE-2017-7183). Risk of unauthorized operations or information disclosure.
CVE-2017-7191 Use-After-Free in dos (CVE-2017-7191)
vulnerability in dos (CVE-2017-7191). Successful exploitation can lead to full system takeover.
CVE-2015-8010 Cross-Site Scripting (XSS) in icinga (CVE-2015-8010)
cross-site scripting in icinga (CVE-2015-8010). Risk of unauthorized operations or information disclosure.
CVE-2017-7271 Cross-Site Scripting (XSS) in yii-software (CVE-2017-7271)
cross-site scripting in yii-software (CVE-2017-7271). Risk of unauthorized operations or information disclosure.
CVE-2017-7272 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-7272)
SSRF in ssrf (CVE-2017-7272). Data can be tampered with by attackers.
CVE-2015-8310 Cross-Site Scripting (XSS) in cherrymusic (CVE-2015-8310)
cross-site scripting in cherrymusic (CVE-2015-8310). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `62dec34a1ea0741400dd6b6c660d303dcd651e86, 0.36.0` or later.
CVE-2017-6878 Cross-Site Scripting (XSS) in metinfo (CVE-2017-6878)
cross-site scripting in metinfo (CVE-2017-6878). Risk of unauthorized operations or information disclosure.
CVE-2015-8309 Path Traversal in cherrymusic (CVE-2015-8309)
path traversal in cherrymusic (CVE-2015-8309). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `62dec34a1ea0741400dd6b6c660d303dcd651e86, 0.36.0` or later.
CVE-2017-5899 Path Traversal in path-traversal (CVE-2017-5899)
path traversal in path-traversal (CVE-2017-5899). Successful exploitation can lead to full system takeover.
CVE-2015-8026 Buffer Overflow in dos (CVE-2015-8026)
vulnerability in dos (CVE-2015-8026). Successful exploitation can lead to full system takeover.
CVE-2016-9922 Vulnerability in c (CVE-2016-9922)
vulnerability in c (CVE-2016-9922). Risk of unauthorized operations or information disclosure.
CVE-2017-5850 Vulnerability in dos (CVE-2017-5850)
vulnerability in dos (CVE-2017-5850). Risk of unauthorized operations or information disclosure.
CVE-2017-5931 Vulnerability in c (CVE-2017-5931)
vulnerability in c (CVE-2017-5931). Successful exploitation can lead to full system takeover.
CVE-2017-5973 Vulnerability in c (CVE-2017-5973)
vulnerability in c (CVE-2017-5973). Risk of unauthorized operations or information disclosure.
CVE-2017-6013 Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter.
Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter.
CVE-2017-6002 Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-6002)
vulnerability in csrf (CVE-2017-6002). Successful exploitation can lead to full system takeover.
CVE-2017-6003 Cross-Site Scripting (XSS) in dotcms (CVE-2017-6003)
cross-site scripting in dotcms (CVE-2017-6003). Risk of unauthorized operations or information disclosure.
CVE-2017-6066 Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-6066)
vulnerability in csrf (CVE-2017-6066). Successful exploitation can lead to full system takeover.
CVE-2017-6067 Symphony 2.6.9 has XSS in publish/notes/edit/##/saved/ via the bottom form field.
Symphony 2.6.9 has XSS in publish/notes/edit/##/saved/ via the bottom form field.
CVE-2017-6068 Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-6068)
vulnerability in csrf (CVE-2017-6068). Successful exploitation can lead to full system takeover.
CVE-2017-6069 Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-6069)
vulnerability in csrf (CVE-2017-6069). Successful exploitation can lead to full system takeover.
CVE-2017-2641 In Moodle 2.x and 3.x, SQL injection can occur via user preferences.
In Moodle 2.x and 3.x, SQL injection can occur via user preferences.
CVE-2017-2644 In Moodle 3.x, XSS can occur via evidence of prior learning.
In Moodle 3.x, XSS can occur via evidence of prior learning.
CVE-2017-2645 In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.
CVE-2017-7263 Out-of-Bounds Read in c (CVE-2017-7263)
vulnerability in c (CVE-2017-7263). Successful exploitation can lead to full system takeover.
CVE-2017-7264 Use-After-Free in c (CVE-2017-7264)
vulnerability in c (CVE-2017-7264). Risk of unauthorized operations or information disclosure.
CVE-2017-7262 Vulnerability in dos (CVE-2017-7262)
vulnerability in dos (CVE-2017-7262). Risk of unauthorized operations or information disclosure.
CVE-2017-7261 Vulnerability in c (CVE-2017-7261)
vulnerability in c (CVE-2017-7261). Risk of unauthorized operations or information disclosure.
CVE-2016-10266 Vulnerability in c (CVE-2016-10266)
vulnerability in c (CVE-2016-10266). Risk of unauthorized operations or information disclosure.
CVE-2016-10267 Vulnerability in c (CVE-2016-10267)
vulnerability in c (CVE-2016-10267). Risk of unauthorized operations or information disclosure.
CVE-2016-10268 Vulnerability in c (CVE-2016-10268)
vulnerability in c (CVE-2016-10268). Successful exploitation can lead to full system takeover.
CVE-2016-10269 Out-of-Bounds Read in c (CVE-2016-10269)
vulnerability in c (CVE-2016-10269). Successful exploitation can lead to full system takeover.
CVE-2016-10270 Out-of-Bounds Read in c (CVE-2016-10270)
vulnerability in c (CVE-2016-10270). Successful exploitation can lead to full system takeover.
CVE-2016-10271 Buffer Overflow in c (CVE-2016-10271)
vulnerability in c (CVE-2016-10271). Successful exploitation can lead to full system takeover.
CVE-2016-10272 Buffer Overflow in c (CVE-2016-10272)
vulnerability in c (CVE-2016-10272). Successful exploitation can lead to full system takeover.
CVE-2017-5507 Vulnerability in c (CVE-2017-5507)
vulnerability in c (CVE-2017-5507). Risk of unauthorized operations or information disclosure.
CVE-2017-5508 Buffer Overflow in dos (CVE-2017-5508)
vulnerability in dos (CVE-2017-5508). Risk of unauthorized operations or information disclosure.
CVE-2017-7243 Vulnerability in dos (CVE-2017-7243)
vulnerability in dos (CVE-2017-7243). Risk of unauthorized operations or information disclosure.
CVE-2017-7255 Cross-Site Scripting (XSS) in cmsmadesimple (CVE-2017-7255)
cross-site scripting in cmsmadesimple (CVE-2017-7255). Risk of unauthorized operations or information disclosure.
CVE-2017-7256 Cross-Site Scripting (XSS) in cmsmadesimple (CVE-2017-7256)
cross-site scripting in cmsmadesimple (CVE-2017-7256). Risk of unauthorized operations or information disclosure.
CVE-2017-7257 Cross-Site Scripting (XSS) in cmsmadesimple (CVE-2017-7257)
cross-site scripting in cmsmadesimple (CVE-2017-7257). Risk of unauthorized operations or information disclosure.
CVE-2017-7240 Path Traversal in path-traversal (CVE-2017-7240)
path traversal in path-traversal (CVE-2017-7240). Confidential information can be exposed externally. Exploitable via `GET /../../../../../../../../../../../../etc/shadow`.
CVE-2016-10129 Vulnerability in dos (CVE-2016-10129)
vulnerability in dos (CVE-2016-10129). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →