Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: cwe Clear

ID	Title	Severity	Tags	Detected
CVE-2017-10945	Use-After-Free in foxitsoftware (CVE-2017-10945) vulnerability in foxitsoftware (CVE-2017-10945). Successful exploitation can lead to full system takeover.	High	Cwe 416 Foxitsoftware Foxit Reader	8 years ago
CVE-2017-10946	Use-After-Free in foxitsoftware (CVE-2017-10946) vulnerability in foxitsoftware (CVE-2017-10946). Successful exploitation can lead to full system takeover.	High	Cwe 416 Foxitsoftware Foxit Reader	8 years ago
CVE-2017-10947	Use-After-Free in foxitsoftware (CVE-2017-10947) vulnerability in foxitsoftware (CVE-2017-10947). Successful exploitation can lead to full system takeover.	High	Cwe 416 Foxitsoftware Foxit Reader	8 years ago
CVE-2017-10948	Use-After-Free in foxitsoftware (CVE-2017-10948) vulnerability in foxitsoftware (CVE-2017-10948). Successful exploitation can lead to full system takeover.	High	Cwe 416 Foxitsoftware Foxit Reader	8 years ago
CVE-2017-10953	OS Command Injection in foxitsoftware (CVE-2017-10953) OS command injection in foxitsoftware (CVE-2017-10953). Successful exploitation can lead to full system takeover.	High	Cwe 78 Cwe 20 Foxitsoftware Foxit Reader	8 years ago
CVE-2017-10940	Path Traversal in joyent (CVE-2017-10940) path traversal in joyent (CVE-2017-10940). Successful exploitation can lead to full system takeover.	High	Cwe 22 Cwe 434 Joyent Triton Datacenter	8 years ago
CVE-2017-15884	Vulnerability in hashicorp (CVE-2017-15884) vulnerability in hashicorp (CVE-2017-15884). Successful exploitation can lead to full system takeover.	High	Cwe 362 Hashicorp Vagrant Vmware Fusion	8 years ago
CVE-2017-14752	Cross-Site Scripting (XSS) in mahara (CVE-2017-14752) cross-site scripting in mahara (CVE-2017-14752). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Mahara	8 years ago
CVE-2017-15273	Cross-Site Scripting (XSS) in mahara (CVE-2017-15273) cross-site scripting in mahara (CVE-2017-15273). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Mahara	8 years ago
CVE-2017-14356	SQL Injection in express (CVE-2017-14356) SQL injection in express (CVE-2017-14356). Successful exploitation can lead to full system takeover.	Critical	Express SQL Injection Cwe 89 Hp +2	8 years ago
CVE-2017-14357	Cross-Site Scripting (XSS) in express (CVE-2017-14357) cross-site scripting in express (CVE-2017-14357). Risk of unauthorized operations or information disclosure.	Medium	Express Cross-Site Scripting Cwe 79 Hp +2	8 years ago
CVE-2017-1000256	Vulnerability in redhat (CVE-2017-1000256) vulnerability in redhat (CVE-2017-1000256). Successful exploitation can lead to full system takeover.	High	Cwe 295 Redhat Libvirt Debian +1	8 years ago
CVE-2017-14358	Open Redirect in express (CVE-2017-14358) vulnerability in express (CVE-2017-14358). Risk of unauthorized operations or information disclosure.	Medium	Express Cwe 601 Hp Arcsight Enterprise Security Manager +1	8 years ago
CVE-2017-15950	Buffer Overflow in flexense (CVE-2017-15950) vulnerability in flexense (CVE-2017-15950). Successful exploitation can lead to full system takeover.	High	Cwe 119 Flexense Syncbreeze	8 years ago
CVE-2017-3934	Information Disclosure in mcafee (CVE-2017-3934) vulnerability in mcafee (CVE-2017-3934). Confidential information can be exposed externally.	Medium	Cwe 200 Mcafee Network Data Loss Prevention	8 years ago
CVE-2017-3935	Information Disclosure in mcafee (CVE-2017-3935) vulnerability in mcafee (CVE-2017-3935). Confidential information can be exposed externally.	High	Cwe 200 Mcafee Network Data Loss Prevention	8 years ago
CVE-2017-3933	Cross-Site Scripting (XSS) in mcafee (CVE-2017-3933) cross-site scripting in mcafee (CVE-2017-3933). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Mcafee Network Data Loss Prevention	8 years ago
CVE-2017-15977	Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter. Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter.	Critical	SQL Injection Cwe 89 Protectedlinks Expiring Download Links	8 years ago
CVE-2017-15978	AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter. AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter.	Critical	PHP SQL Injection Cwe 89 Arox +1	8 years ago
CVE-2017-15979	Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter. Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter.	Critical	SQL Injection Cwe 89 Odallated Shareet	8 years ago
CVE-2017-15980	US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter. US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter.	Critical	SQL Injection Cwe 89 Rowindex Us Zip Codes Database Script	8 years ago
CVE-2017-15981	SQL Injection in sqli (CVE-2017-15981) SQL injection in sqli (CVE-2017-15981). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Geniusocean +1	8 years ago
CVE-2017-15982	SQL Injection in sqli (CVE-2017-15982) SQL injection in sqli (CVE-2017-15982). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Geniusocean +1	8 years ago
CVE-2017-15983	SQL Injection in sqli (CVE-2017-15983) SQL injection in sqli (CVE-2017-15983). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Geniusocean +1	8 years ago
CVE-2017-15984	Creative Management System (CMS) Lite 1.4 allows SQL Injection via the S parameter to index.php. Creative Management System (CMS) Lite 1.4 allows SQL Injection via the S parameter to index.php.	Critical	PHP SQL Injection Cwe 89 Bekirk +1	8 years ago
CVE-2017-15985	Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter. Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.	Critical	PHP SQL Injection Cwe 89 Readymadeb2Bscript +1	8 years ago
CVE-2017-15986	CPA Lead Reward Script allows SQL Injection via the username parameter. CPA Lead Reward Script allows SQL Injection via the username parameter.	Critical	SQL Injection Cwe 89 Cpa Lead Reward Script Project Cpa Lead Reward Script	8 years ago
CVE-2017-15987	SQL Injection in sqli (CVE-2017-15987) SQL injection in sqli (CVE-2017-15987). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Fake Magazine Cover Script Project +1	8 years ago
CVE-2017-15988	SQL Injection in sqli (CVE-2017-15988) SQL injection in sqli (CVE-2017-15988). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Nicephpscripts +1	8 years ago
CVE-2017-15989	SQL Injection in sqli (CVE-2017-15989) SQL injection in sqli (CVE-2017-15989). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Online Exam Test Application Project +1	8 years ago
CVE-2017-15991	SQL Injection in sqli (CVE-2017-15991) SQL injection in sqli (CVE-2017-15991). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Vastal +1	8 years ago
CVE-2017-15992	Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php. Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.	Critical	PHP SQL Injection Cwe 89 Website Broker Script Project +1	8 years ago
CVE-2017-15993	Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter. Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter.	Critical	PHP SQL Injection Cwe 89 Zomato Clone Script Project +1	8 years ago
CVE-2016-10699	Cross-Site Scripting (XSS) in dlink (CVE-2016-10699) cross-site scripting in dlink (CVE-2016-10699). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Dlink Dsl 2740E Firmware +1	8 years ago
CVE-2017-14373	Cross-Site Scripting (XSS) in emc (CVE-2017-14373) cross-site scripting in emc (CVE-2017-14373). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Emc Rsa Authentication Manager	8 years ago
CVE-2017-15990	Unrestricted File Upload in savsofteproducts (CVE-2017-15990) vulnerability in savsofteproducts (CVE-2017-15990). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 434 Savsofteproducts Phpinventory	8 years ago
CVE-2015-9245	Vulnerability in progress (CVE-2015-9245) vulnerability in progress (CVE-2015-9245). Successful exploitation can lead to full system takeover.	Critical	Java Cwe 284 Progress Openedge	8 years ago
CVE-2017-1000255	Out-of-Bounds Write in linux (CVE-2017-1000255) out-of-bounds write in linux (CVE-2017-1000255). Data can be tampered with by attackers.	Medium	Cwe 787 Linux Linux Kernel Ibm +2	8 years ago
CVE-2014-0073	Vulnerability in apache (CVE-2014-0073) vulnerability in apache (CVE-2014-0073). Successful exploitation can lead to full system takeover.	Critical	JavaScript Apache Cwe 264 Cordova In App Browser +1	8 years ago
CVE-2013-4366	Vulnerability in apache (CVE-2013-4366) vulnerability in apache (CVE-2013-4366). Successful exploitation can lead to full system takeover.	Critical	Java Apache Cwe 20 Httpclient	8 years ago
CVE-2014-0072	Vulnerability in apache (CVE-2014-0072) vulnerability in apache (CVE-2014-0072). Data can be tampered with by attackers.	High	Apache Cwe 20 Cordova File Transfer Cordova	8 years ago
CVE-2017-14919	Vulnerability in dos (CVE-2017-14919) vulnerability in dos (CVE-2017-14919). Risk of unauthorized operations or information disclosure.	High	JavaScript Denial of Service Cwe 20 Nodejs	8 years ago
CVE-2012-5636	Cross-Site Scripting (XSS) in apache (CVE-2012-5636) cross-site scripting in apache (CVE-2012-5636). Risk of unauthorized operations or information disclosure.	Medium	Apache Cross-Site Scripting Cwe 79 Wicket	8 years ago
CVE-2017-16230	Cross-Site Scripting (XSS) in typecho (CVE-2017-16230) cross-site scripting in typecho (CVE-2017-16230). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Typecho	8 years ago
CVE-2017-15888	Cross-Site Scripting (XSS) in synology (CVE-2017-15888) cross-site scripting in synology (CVE-2017-15888). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Synology Audio Station	8 years ago
CVE-2009-1197	Vulnerability in apache (CVE-2009-1197) vulnerability in apache (CVE-2009-1197). Risk of unauthorized operations or information disclosure.	Medium	Apache Cwe 20 Juddi	8 years ago
CVE-2009-1198	Cross-Site Scripting (XSS) in apache (CVE-2009-1198) cross-site scripting in apache (CVE-2009-1198). Risk of unauthorized operations or information disclosure.	Medium	Apache Cross-Site Scripting Cwe 79 Juddi	8 years ago
CVE-2012-0881	Vulnerability in apache (CVE-2012-0881) vulnerability in apache (CVE-2012-0881). Risk of unauthorized operations or information disclosure.	High	Java Apache Denial of Service Cwe 399 +1	8 years ago
CVE-2014-0115	Path Traversal in apache (CVE-2014-0115) path traversal in apache (CVE-2014-0115). Confidential information can be exposed externally.	High	Apache Path Traversal Cwe 22 Storm	8 years ago
CVE-2017-15920	Vulnerability in watchdogdevelopment (CVE-2017-15920) vulnerability in watchdogdevelopment (CVE-2017-15920). Risk of unauthorized operations or information disclosure.	High	Cwe 476 Watchdogdevelopment Anti Malware Online Security Pro	8 years ago

Vulnerabilities

🍪 About cookies