Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2017-14119 |
|
OS Command Injection in eyesofnetwork (CVE-2017-14119)
OS command injection in eyesofnetwork (CVE-2017-14119). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14121 |
|
Vulnerability in c (CVE-2017-14121)
vulnerability in c (CVE-2017-14121). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-14122 |
|
Out-of-Bounds Read in c (CVE-2017-14122)
vulnerability in c (CVE-2017-14122). Confidential information can be exposed externally.
|
| CVE-2017-14099 |
|
Information Disclosure in c (CVE-2017-14099)
vulnerability in c (CVE-2017-14099). Confidential information can be exposed externally.
|
| CVE-2017-12871 |
|
Vulnerability in simplesamlphp (CVE-2017-12871)
vulnerability in simplesamlphp (CVE-2017-12871). Confidential information can be exposed externally.
|
| CVE-2017-12691 |
|
Vulnerability in c (CVE-2017-12691)
vulnerability in c (CVE-2017-12691). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12692 |
|
Vulnerability in c (CVE-2017-12692)
vulnerability in c (CVE-2017-12692). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12693 |
|
Vulnerability in c (CVE-2017-12693)
vulnerability in c (CVE-2017-12693). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-14107 |
|
Vulnerability in c (CVE-2017-14107)
vulnerability in c (CVE-2017-14107). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-14106 |
|
Vulnerability in c (CVE-2017-14106)
vulnerability in c (CVE-2017-14106). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12868 |
|
Vulnerability in simplesamlphp (CVE-2017-12868)
vulnerability in simplesamlphp (CVE-2017-12868). Successful exploitation can lead to full system takeover.
|
| CVE-2017-12869 |
|
Vulnerability in simplesamlphp (CVE-2017-12869)
vulnerability in simplesamlphp (CVE-2017-12869). Data can be tampered with by attackers.
|
| CVE-2017-13711 |
|
Use-After-Free in c (CVE-2017-13711)
vulnerability in c (CVE-2017-13711). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-14103 |
|
Use-After-Free in c (CVE-2017-14103)
vulnerability in c (CVE-2017-14103). Successful exploitation can lead to full system takeover.
|
| CVE-2014-8677 |
|
Code Injection in soplanning (CVE-2014-8677)
code injection in soplanning (CVE-2014-8677). Data can be tampered with by attackers.
|
| CVE-2015-7711 |
|
Cross-Site Scripting (XSS) in atutor (CVE-2015-7711)
cross-site scripting in atutor (CVE-2015-7711). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-7700 |
|
Vulnerability in c (CVE-2015-7700)
vulnerability in c (CVE-2015-7700). Successful exploitation can lead to full system takeover.
|
| CVE-2016-10508 |
|
Cross-Site Scripting (XSS) in phpthumb-project (CVE-2016-10508)
cross-site scripting in phpthumb-project (CVE-2016-10508). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-10509 |
|
SQL Injection in sqli (CVE-2016-10509)
SQL injection in sqli (CVE-2016-10509). Successful exploitation can lead to full system takeover.
|
| CVE-2016-10510 |
|
Cross-Site Scripting (XSS) in kohanaframework (CVE-2016-10510)
cross-site scripting in kohanaframework (CVE-2016-10510). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-14076 |
|
SQL Injection in sqli (CVE-2017-14076)
SQL injection in sqli (CVE-2017-14076). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14069 |
|
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php.
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php.
|
| CVE-2017-14070 |
|
Cross-Site Scripting (XSS) in nexusphp (CVE-2017-14070)
cross-site scripting in nexusphp (CVE-2017-14070). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-14064 |
|
Buffer Overflow in c (CVE-2017-14064)
vulnerability in c (CVE-2017-14064). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14063 |
|
Vulnerability in csharp (CVE-2017-14063)
vulnerability in csharp (CVE-2017-14063). Data can be tampered with by attackers.
|
| CVE-2017-14061 |
|
Vulnerability in c (CVE-2017-14061)
vulnerability in c (CVE-2017-14061). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14062 |
|
Vulnerability in c (CVE-2017-14062)
vulnerability in c (CVE-2017-14062). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14054 |
|
Vulnerability in c (CVE-2017-14054)
vulnerability in c (CVE-2017-14054). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-14055 |
|
Vulnerability in c (CVE-2017-14055)
vulnerability in c (CVE-2017-14055). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-14056 |
|
Vulnerability in c (CVE-2017-14056)
vulnerability in c (CVE-2017-14056). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-14058 |
|
Vulnerability in c (CVE-2017-14058)
vulnerability in c (CVE-2017-14058). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-14060 |
|
Vulnerability in c (CVE-2017-14060)
vulnerability in c (CVE-2017-14060). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1444 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2017-1444)
cross-site scripting in ibm (CVE-2017-1444). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1447 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2017-1447)
cross-site scripting in ibm (CVE-2017-1447). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-13670 |
|
Vulnerability in blackcat-cms (CVE-2017-13670)
vulnerability in blackcat-cms (CVE-2017-13670). Data can be tampered with by attackers.
|
| CVE-2017-14048 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-14048)
vulnerability in csrf (CVE-2017-14048). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14049 |
|
Cross-Site Scripting (XSS) in blackcat-cms (CVE-2017-14049)
cross-site scripting in blackcat-cms (CVE-2017-14049). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-14050 |
|
Unrestricted File Upload in blackcat-cms (CVE-2017-14050)
vulnerability in blackcat-cms (CVE-2017-14050). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14051 |
|
Vulnerability in c (CVE-2017-14051)
vulnerability in c (CVE-2017-14051). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-14039 |
|
Out-of-Bounds Write in c (CVE-2017-14039)
out-of-bounds write in c (CVE-2017-14039). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14040 |
|
Out-of-Bounds Write in c (CVE-2017-14040)
out-of-bounds write in c (CVE-2017-14040). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14041 |
|
Out-of-Bounds Write in c (CVE-2017-14041)
out-of-bounds write in c (CVE-2017-14041). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14042 |
|
Buffer Overflow in c (CVE-2017-14042)
vulnerability in c (CVE-2017-14042). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1443 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2017-1443)
cross-site scripting in ibm (CVE-2017-1443). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1445 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2017-1445)
cross-site scripting in ibm (CVE-2017-1445). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1446 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2017-1446)
cross-site scripting in ibm (CVE-2017-1446). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12069 |
|
XXE (XML External Entity) in csharp (CVE-2017-12069)
vulnerability in csharp (CVE-2017-12069). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-13780 |
|
Path Traversal in path-traversal (CVE-2017-13780)
path traversal in path-traversal (CVE-2017-13780). Confidential information can be exposed externally.
|
| CVE-2016-6800 |
|
Cross-Site Scripting (XSS) in apache (CVE-2016-6800)
cross-site scripting in apache (CVE-2016-6800). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-13778 |
|
Fiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.php via the site_name parameter.
Fiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.php via the site_name parameter.
|