Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2015-1876 Directory traversal vulnerability in ES File Explorer 3.2.4.1.
Directory traversal vulnerability in ES File Explorer 3.2.4.1.
CVE-2015-1401 Authentication Bypass in ldap-sso-authentication-project (CVE-2015-1401)
authentication bypass in ldap-sso-authentication-project (CVE-2015-1401). Successful exploitation can lead to full system takeover.
CVE-2014-5301 Path Traversal in path-traversal (CVE-2014-5301)
path traversal in path-traversal (CVE-2014-5301). Successful exploitation can lead to full system takeover.
CVE-2014-5302 Path Traversal in path-traversal (CVE-2014-5302)
path traversal in path-traversal (CVE-2014-5302). Successful exploitation can lead to full system takeover.
CVE-2014-8871 Path Traversal in path-traversal (CVE-2014-8871)
path traversal in path-traversal (CVE-2014-8871). Confidential information can be exposed externally.
CVE-2014-8168 Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.
Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.
CVE-2014-9513 Vulnerability in debian (CVE-2014-9513)
vulnerability in debian (CVE-2014-9513). Successful exploitation can lead to full system takeover.
CVE-2014-9558 Multiple SQL injection vulnerabilities in SmartCMS v.2.
Multiple SQL injection vulnerabilities in SmartCMS v.2.
CVE-2014-0141 Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3.
Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3.
CVE-2014-4925 Cross-site scripting (XSS) vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40.
Cross-site scripting (XSS) vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40.
CVE-2014-8753 Multiple cross-site scripting (XSS) vulnerabilities in Cit-e-Net Cit-e-Access 6.
Multiple cross-site scripting (XSS) vulnerabilities in Cit-e-Net Cit-e-Access 6.
CVE-2014-9469 Cross-Site Scripting (XSS) in vbulletin (CVE-2014-9469)
cross-site scripting in vbulletin (CVE-2014-9469). Risk of unauthorized operations or information disclosure.
CVE-2014-9514 Cross-site scripting (XSS) vulnerability in BMC Footprints Service Core 11.5.
Cross-site scripting (XSS) vulnerability in BMC Footprints Service Core 11.5.
CVE-2014-9557 Multiple cross-site scripting (XSS) vulnerabilities in SmartCMS v.2.
Multiple cross-site scripting (XSS) vulnerabilities in SmartCMS v.2.
CVE-2015-0101 Cross-Site Scripting (XSS) in express (CVE-2015-0101)
cross-site scripting in express (CVE-2015-0101). Risk of unauthorized operations or information disclosure.
CVE-2014-8900 Cross-Site Request Forgery (CSRF) in csrf (CVE-2014-8900)
vulnerability in csrf (CVE-2014-8900). Successful exploitation can lead to full system takeover.
CVE-2014-8428 Vulnerability in privilege-escalation (CVE-2014-8428)
vulnerability in privilege-escalation (CVE-2014-8428). Successful exploitation can lead to full system takeover.
CVE-2015-0210 Vulnerability in w1fi (CVE-2015-0210)
vulnerability in w1fi (CVE-2015-0210). Confidential information can be exposed externally.
CVE-2015-0114 Stack-based buffer overflow in IBM V5R4, and IBM i Access for Windows 6.1 and 7.1.
Stack-based buffer overflow in IBM V5R4, and IBM i Access for Windows 6.1 and 7.1.
CVE-2014-9483 Emacs 24.4 allows remote attackers to bypass security restrictions.
Emacs 24.4 allows remote attackers to bypass security restrictions.
CVE-2012-2805 Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service.
Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service.
CVE-2014-8426 Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015.
Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015.
CVE-2014-9312 Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.
Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.
CVE-2017-13709 Vulnerability in flightgear (CVE-2017-13709)
vulnerability in flightgear (CVE-2017-13709). Data can be tampered with by attackers.
CVE-2017-13710 Vulnerability in c (CVE-2017-13710)
vulnerability in c (CVE-2017-13710). Risk of unauthorized operations or information disclosure.
CVE-2017-12595 Vulnerability in dos (CVE-2017-12595)
vulnerability in dos (CVE-2017-12595). Successful exploitation can lead to full system takeover.
CVE-2017-13707 Privilege Escalation in privilege-escalation (CVE-2017-13707)
vulnerability in privilege-escalation (CVE-2017-13707). Successful exploitation can lead to full system takeover.
CVE-2017-7693 Path Traversal in path-traversal (CVE-2017-7693)
path traversal in path-traversal (CVE-2017-7693). Confidential information can be exposed externally.
CVE-2017-12816 Vulnerability in kaspersky (CVE-2017-12816)
vulnerability in kaspersky (CVE-2017-12816). Successful exploitation can lead to full system takeover.
CVE-2017-7926 Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-7926)
vulnerability in csrf (CVE-2017-7926). Successful exploitation can lead to full system takeover.
CVE-2017-12707 Vulnerability in spidercontrol (CVE-2017-12707)
vulnerability in spidercontrol (CVE-2017-12707). Successful exploitation can lead to full system takeover.
CVE-2017-12857 Information Disclosure in polycom (CVE-2017-12857)
vulnerability in polycom (CVE-2017-12857). Successful exploitation can lead to full system takeover.
CVE-2017-9650 Unrestricted File Upload in automatedlogic (CVE-2017-9650)
vulnerability in automatedlogic (CVE-2017-9650). Successful exploitation can lead to full system takeover.
CVE-2017-12694 Path Traversal in path-traversal (CVE-2017-12694)
path traversal in path-traversal (CVE-2017-12694). Confidential information can be exposed externally.
CVE-2017-9640 Path Traversal in path-traversal (CVE-2017-9640)
path traversal in path-traversal (CVE-2017-9640). Risk of unauthorized operations or information disclosure.
CVE-2017-7930 Authentication Bypass in osisoft (CVE-2017-7930)
authentication bypass in osisoft (CVE-2017-7930). Confidential information can be exposed externally.
CVE-2017-7934 Authentication Bypass in osisoft (CVE-2017-7934)
authentication bypass in osisoft (CVE-2017-7934). Risk of unauthorized operations or information disclosure.
CVE-2015-1395 Path Traversal in path-traversal (CVE-2015-1395)
path traversal in path-traversal (CVE-2015-1395). Data can be tampered with by attackers.
CVE-2015-4180 Path Traversal in path-traversal (CVE-2015-4180)
path traversal in path-traversal (CVE-2015-4180). Confidential information can be exposed externally.
CVE-2015-4181 Path Traversal in path-traversal (CVE-2015-4181)
path traversal in path-traversal (CVE-2015-4181). Confidential information can be exposed externally.
CVE-2014-7857 Authentication Bypass in d-link (CVE-2014-7857)
authentication bypass in d-link (CVE-2014-7857). Successful exploitation can lead to full system takeover.
CVE-2014-7858 Authentication Bypass in d-link (CVE-2014-7858)
authentication bypass in d-link (CVE-2014-7858). Successful exploitation can lead to full system takeover.
CVE-2014-7860 Information Disclosure in d-link (CVE-2014-7860)
vulnerability in d-link (CVE-2014-7860). Risk of unauthorized operations or information disclosure.
CVE-2015-3206 Authentication Bypass in pykerberos (CVE-2015-3206)
authentication bypass in pykerberos (CVE-2015-3206). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.1.6` or later.
CVE-2015-3211 php-fpm allows local users to write to or create arbitrary files via a symlink attack.
php-fpm allows local users to write to or create arbitrary files via a symlink attack.
CVE-2015-5700 Vulnerability in tug (CVE-2015-5700)
vulnerability in tug (CVE-2015-5700). Data can be tampered with by attackers.
CVE-2015-5701 Vulnerability in tug (CVE-2015-5701)
vulnerability in tug (CVE-2015-5701). Data can be tampered with by attackers.
CVE-2014-9564 Vulnerability in ibm (CVE-2014-9564)
vulnerability in ibm (CVE-2014-9564). Risk of unauthorized operations or information disclosure.
CVE-2014-9637 Vulnerability in dos (CVE-2014-9637)
vulnerability in dos (CVE-2014-9637). Risk of unauthorized operations or information disclosure.
CVE-2015-1324 Vulnerability in canonical (CVE-2015-1324)
vulnerability in canonical (CVE-2015-1324). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →