Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2017-17774	admin/configuration.php in Piwigo 2.9.2 has CSRF. admin/configuration.php in Piwigo 2.9.2 has CSRF.	High	PHP Cross-Site Request Forgery Cwe 352 Piwigo	8 years ago
CVE-2017-17719	Cross-Site Scripting (XSS) in wordpress (CVE-2017-17719) cross-site scripting in wordpress (CVE-2017-17719). Risk of unauthorized operations or information disclosure.	Medium	PHP WordPress Cross-Site Scripting Cwe 79 +2	8 years ago
CVE-2017-17744	Cross-Site Scripting (XSS) in wordpress (CVE-2017-17744) cross-site scripting in wordpress (CVE-2017-17744). Risk of unauthorized operations or information disclosure.	Medium	PHP WordPress Cross-Site Scripting Cwe 79 +2	8 years ago
CVE-2017-17753	Cross-Site Scripting (XSS) in wordpress (CVE-2017-17753) cross-site scripting in wordpress (CVE-2017-17753). Risk of unauthorized operations or information disclosure.	Medium	PHP WordPress Cross-Site Scripting Cwe 79 +2	8 years ago
CVE-2013-6465	Cross-Site Scripting (XSS) in redhat (CVE-2013-6465) cross-site scripting in redhat (CVE-2013-6465). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Redhat Jbpm	8 years ago
CVE-2017-15049	OS Command Injection in zoom (CVE-2017-15049) OS command injection in zoom (CVE-2017-15049). Successful exploitation can lead to full system takeover.	High	Cwe 78 Zoom	8 years ago
CVE-2017-15048	Buffer Overflow in zoom (CVE-2017-15048) vulnerability in zoom (CVE-2017-15048). Successful exploitation can lead to full system takeover.	High	Cwe 119 Zoom	8 years ago
CVE-2017-17088	Buffer Overflow in dos (CVE-2017-17088) vulnerability in dos (CVE-2017-17088). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.	High	Denial of Service Cwe 119 Flexense Syncbreeze	8 years ago
CVE-2017-16786	Information Disclosure in meinbergglobal (CVE-2017-16786) vulnerability in meinbergglobal (CVE-2017-16786). Confidential information can be exposed externally.	Medium	Cwe 200 Meinbergglobal Lantime Firmware Lantime M100 +8	8 years ago
CVE-2017-17757	OS Command Injection in tp-link (CVE-2017-17757) OS command injection in tp-link (CVE-2017-17757). Successful exploitation can lead to full system takeover.	High	Cwe 78 Tp Link Tl Wvr450L Firmware Tl Wvr450L +28	8 years ago
CVE-2017-17758	OS Command Injection in tp-link (CVE-2017-17758) OS command injection in tp-link (CVE-2017-17758). Successful exploitation can lead to full system takeover.	High	Cwe 78 Tp Link Tl Wvr450L Firmware Tl Wvr450L +28	8 years ago
CVE-2017-17105	OS Command Injection in zivif (CVE-2017-17105) OS command injection in zivif (CVE-2017-17105). Successful exploitation can lead to full system takeover.	Critical	Cwe 78 Zivif Pr115 204 P Rs Firmware Pr115 204 P Rs	8 years ago
CVE-2017-17107	Vulnerability in zivif (CVE-2017-17107) vulnerability in zivif (CVE-2017-17107). Successful exploitation can lead to full system takeover.	Critical	Cwe 798 Zivif Pr115 204 P Rs Firmware Pr115 204 P Rs	8 years ago
CVE-2017-15876	Unrestricted File Upload in sistemagpweb (CVE-2017-15876) vulnerability in sistemagpweb (CVE-2017-15876). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434 Sistemagpweb Gpweb	8 years ago
CVE-2017-16949	Unrestricted File Upload in wordpress (CVE-2017-16949) vulnerability in wordpress (CVE-2017-16949). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Cwe 434 Accesspressthemes +1	8 years ago
CVE-2017-15877	Vulnerability in sistemagpweb (CVE-2017-15877) vulnerability in sistemagpweb (CVE-2017-15877). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 732 Sistemagpweb Gpweb	8 years ago
CVE-2017-17106	Vulnerability in zivif (CVE-2017-17106) vulnerability in zivif (CVE-2017-17106). Successful exploitation can lead to full system takeover.	Critical	Cwe 522 Zivif Pr115 204 P Rs Firmware Pr115 204 P Rs	8 years ago
CVE-2017-15875	SQL Injection in sqli (CVE-2017-15875) SQL injection in sqli (CVE-2017-15875). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Sistemagpweb Gpweb	8 years ago
CVE-2017-15700	Information Disclosure in apache (CVE-2017-15700) vulnerability in apache (CVE-2017-15700). Successful exploitation can lead to full system takeover.	High	Apache Cwe 200 Sling Authentication Service	8 years ago
CVE-2017-15104	Vulnerability in heketi-project (CVE-2017-15104) vulnerability in heketi-project (CVE-2017-15104). Successful exploitation can lead to full system takeover.	High	Cwe 552 Cwe 200 Heketi Project Heketi +2	8 years ago
CVE-2017-15103	OS Command Injection in c (CVE-2017-15103) OS command injection in c (CVE-2017-15103). Successful exploitation can lead to full system takeover.	High	C Privilege Escalation Cwe 78 Cwe 20 +4	8 years ago
CVE-2017-17721	SQL Injection in csharp (CVE-2017-17721) SQL injection in csharp (CVE-2017-17721). Successful exploitation can lead to full system takeover.	Critical	C# SQL Injection Cwe 89 Zuuse +1	8 years ago
CVE-2017-14583	Vulnerability in dos (CVE-2017-14583) vulnerability in dos (CVE-2017-14583). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 20 Netapp Clustered Data Ontap	8 years ago
CVE-2017-12630	Cross-Site Scripting (XSS) in apache (CVE-2017-12630) cross-site scripting in apache (CVE-2017-12630). Risk of unauthorized operations or information disclosure.	Medium	Apache Cwe 79 Drill	8 years ago
CVE-2017-17643	FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/. FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/.	Critical	SQL Injection Cwe 89 Lynda Clone Project Lynda Clone	8 years ago
CVE-2017-17645	Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php. Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.	Critical	PHP SQL Injection Cwe 89 Phpautoclassifiedscript +1	8 years ago
CVE-2017-17651	SQL Injection in sqli (CVE-2017-17651) SQL injection in sqli (CVE-2017-17651). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Paid To Read Script Project +1	8 years ago
CVE-2017-17649	Code Injection in readymade-video-sharing-script-project (CVE-2017-17649) code injection in readymade-video-sharing-script-project (CVE-2017-17649). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 94 Readymade Video Sharing Script Project Readymade Video Sharing Script	8 years ago
CVE-2017-17741	Out-of-Bounds Read in c (CVE-2017-17741) vulnerability in c (CVE-2017-17741). Confidential information can be exposed externally.	Medium	C Cwe 125 Linux Linux Kernel +2	8 years ago
CVE-2017-17737	Cross-Site Scripting (XSS) in brightsign (CVE-2017-17737) cross-site scripting in brightsign (CVE-2017-17737). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Brightsign 4K242 Firmware +1	8 years ago
CVE-2017-17740	Buffer Overflow in c (CVE-2017-17740) vulnerability in c (CVE-2017-17740). Risk of unauthorized operations or information disclosure.	High	C Denial of Service Cwe 119 Openldap +6	8 years ago
CVE-2017-17734	CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in sessions. CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in sessions.	Critical	Cwe 200 Cmsmadesimple Cms Made Simple	8 years ago
CVE-2017-17735	CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in cookies. CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in cookies.	Critical	Cwe 200 Cmsmadesimple Cms Made Simple	8 years ago
CVE-2017-17739	Path Traversal in path-traversal (CVE-2017-17739) path traversal in path-traversal (CVE-2017-17739). Successful exploitation can lead to full system takeover.	Critical	Path Traversal Cwe 22 Brightsign 4K242 Firmware +1	8 years ago
CVE-2017-17730	DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php. DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php.	Critical	PHP SQL Injection Cwe 89 Dedecms	8 years ago
CVE-2017-17731	DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php. DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.	Critical	PHP SQL Injection Cwe 89 Dedecms	8 years ago
CVE-2017-17727	Unrestricted File Upload in dedecms (CVE-2017-17727) vulnerability in dedecms (CVE-2017-17727). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434 Dedecms	8 years ago
CVE-2017-16997	Vulnerability in c (CVE-2017-16997) vulnerability in c (CVE-2017-16997). Successful exploitation can lead to full system takeover.	High	C Cwe 426 Gnu Glibc +4	8 years ago
CVE-2017-17718	The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation. The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.	Medium	Ruby Cwe 295 Net Ldap Project Net Ldap	8 years ago
CVE-2017-17716	Vulnerability in gitlab (CVE-2017-17716) vulnerability in gitlab (CVE-2017-17716). Confidential information can be exposed externally.	Medium	Cwe 295 Gitlab	8 years ago
CVE-2017-16950	Cross-Site Scripting (XSS) in urbackup (CVE-2017-16950) cross-site scripting in urbackup (CVE-2017-16950). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Urbackup Urbackup Server	8 years ago
CVE-2017-17713	SQL Injection in sqli (CVE-2017-17713) SQL injection in sqli (CVE-2017-17713). Successful exploitation can lead to full system takeover. Exploitable via `User-Agent header`.	Critical	SQL Injection Cwe 89 Boxug Trape	8 years ago
CVE-2017-17714	Cross-Site Scripting (XSS) in boxug (CVE-2017-17714) cross-site scripting in boxug (CVE-2017-17714). Risk of unauthorized operations or information disclosure. Exploitable via `User-Agent header`.	Medium	Cross-Site Scripting Cwe 79 Boxug Trape	8 years ago
CVE-2017-14134	Cross-Site Scripting (XSS) in maplesoft (CVE-2017-14134) cross-site scripting in maplesoft (CVE-2017-14134). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Maplesoft Maple Ta	8 years ago
CVE-2017-17715	Path Traversal in path-traversal (CVE-2017-17715) path traversal in path-traversal (CVE-2017-17715). Successful exploitation can lead to full system takeover.	High	Java Path Traversal Cwe 22 Telegram +1	8 years ago
CVE-2017-3191	Vulnerability in d-link (CVE-2017-3191) vulnerability in d-link (CVE-2017-3191). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 294 Cwe 20 D Link +5	8 years ago
CVE-2017-3192	Vulnerability in d-link (CVE-2017-3192) vulnerability in d-link (CVE-2017-3192). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 522 D Link Dir 130 Firmware +4	8 years ago
CVE-2017-3190	Vulnerability in axs (CVE-2017-3190) vulnerability in axs (CVE-2017-3190). Successful exploitation can lead to full system takeover.	High	Cwe 295 Axs Flash Seats	8 years ago
CVE-2017-3194	Vulnerability in pandora (CVE-2017-3194) vulnerability in pandora (CVE-2017-3194). Successful exploitation can lead to full system takeover.	High	Cwe 295 Cwe 200 Pandora	8 years ago
CVE-2017-3193	Vulnerability in dlink (CVE-2017-3193) vulnerability in dlink (CVE-2017-3193). Successful exploitation can lead to full system takeover.	High	Cwe 121 Cwe 119 Dlink Dir 850L Firmware +1	8 years ago

Vulnerabilities

🍪 About cookies