Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: products Clear

ID	Title	Severity	Tags	Detected
CVE-2017-17717	Vulnerability in sonatype (CVE-2017-17717) vulnerability in sonatype (CVE-2017-17717). Successful exploitation can lead to full system takeover.	Critical	Cwe 327 Sonatype Nexus Repository Manager	8 years ago
CVE-2017-3195	Vulnerability in commvault (CVE-2017-3195) vulnerability in commvault (CVE-2017-3195). Successful exploitation can lead to full system takeover.	Critical	Cwe 121 Cwe 119 Commvault Edge	8 years ago
CVE-2017-3196	Buffer Overflow in rawether-project (CVE-2017-3196) vulnerability in rawether-project (CVE-2017-3196). Successful exploitation can lead to full system takeover.	High	Cwe 119 Rawether Project Rawether Microsoft +1	8 years ago
CVE-2017-17693	Vulnerability in techno-portfolio-management-panel-project (CVE-2017-17693) vulnerability in techno-portfolio-management-panel-project (CVE-2017-17693). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 862 Techno Portfolio Management Panel Project Techno Portfolio Management Panel	8 years ago
CVE-2017-17694	Cross-Site Scripting (XSS) in techno-portfolio-management-panel-project (CVE-2017-17694) cross-site scripting in techno-portfolio-management-panel-project (CVE-2017-17694). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Techno Portfolio Management Panel Project +1	8 years ago
CVE-2017-17695	SQL Injection in sqli (CVE-2017-17695) SQL injection in sqli (CVE-2017-17695). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Techno Portfolio Management Panel Project +1	8 years ago
CVE-2017-17696	Information Disclosure in techno-portfolio-management-panel-project (CVE-2017-17696) vulnerability in techno-portfolio-management-panel-project (CVE-2017-17696). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 200 Techno Portfolio Management Panel Project Techno Portfolio Management Panel	8 years ago
CVE-2017-5663	SQL Injection in apache (CVE-2017-5663) SQL injection in apache (CVE-2017-5663). Successful exploitation can lead to full system takeover.	High	Apache Cwe 89 Fineract	8 years ago
CVE-2017-17680	Vulnerability in c (CVE-2017-17680) vulnerability in c (CVE-2017-17680). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 772 Imagemagick +2	8 years ago
CVE-2017-17681	Vulnerability in c (CVE-2017-17681) vulnerability in c (CVE-2017-17681). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 835 Imagemagick +2	8 years ago
CVE-2017-17682	Vulnerability in c (CVE-2017-17682) vulnerability in c (CVE-2017-17682). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 400 Imagemagick +4	8 years ago
CVE-2017-17671	Path Traversal in apache (CVE-2017-17671) path traversal in apache (CVE-2017-17671). Successful exploitation can lead to full system takeover.	Critical	PHP Apache Path Traversal Cwe 22 +3	8 years ago
CVE-2017-17672	Unsafe Deserialization in deserialization (CVE-2017-17672) vulnerability in deserialization (CVE-2017-17672). Successful exploitation can lead to full system takeover.	Critical	PHP Insecure Deserialization Cwe 502 Vbulletin	8 years ago
CVE-2017-7738	Information Disclosure in fortinet (CVE-2017-7738) vulnerability in fortinet (CVE-2017-7738). Successful exploitation can lead to full system takeover.	High	Cwe 200 Fortinet Fortios	8 years ago
CVE-2017-11305	Vulnerability in adobe (CVE-2017-11305) vulnerability in adobe (CVE-2017-11305). Data can be tampered with by attackers.	Medium	Adobe Flash Player Apple Mac Os X +13	8 years ago
CVE-2017-17648	SQL Injection in sqli (CVE-2017-17648) SQL injection in sqli (CVE-2017-17648). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Entrepreneur Dating Script Project +1	8 years ago
CVE-2017-17638	Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter. Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter.	Critical	PHP SQL Injection Cwe 89 Groupon Clone Script Project +1	8 years ago
CVE-2017-17639	Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter. Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter.	Critical	PHP SQL Injection Cwe 89 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17640	SQL Injection in sqli (CVE-2017-17640) SQL injection in sqli (CVE-2017-17640). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Advanced World Database Project +1	8 years ago
CVE-2017-17641	Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter. Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter.	Critical	PHP SQL Injection Cwe 89 Resume Clone Script Project +1	8 years ago
CVE-2017-17613	SQL Injection in sqli (CVE-2017-17613) SQL injection in sqli (CVE-2017-17613). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Freelance Website Script Project +1	8 years ago
CVE-2017-17615	Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter. Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.	High	PHP SQL Injection Cwe 89 Facebook Clone Script Project +1	8 years ago
CVE-2017-17617	Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter. Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.	Critical	PHP SQL Injection Cwe 89 Foodspotting Clone Script Project +1	8 years ago
CVE-2017-17618	Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter. Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.	Critical	PHP SQL Injection Cwe 89 Kickstarter Clone Script Project +1	8 years ago
CVE-2017-17622	Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter. Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.	Critical	PHP SQL Injection Cwe 89 Online Exam Test Application Script Project +1	8 years ago
CVE-2017-17623	SQL Injection in sqli (CVE-2017-17623) SQL injection in sqli (CVE-2017-17623). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Opensource Classified Ads Script Project +1	8 years ago
CVE-2017-17624	SQL Injection in sqli (CVE-2017-17624) SQL injection in sqli (CVE-2017-17624). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17626	SQL Injection in sqli (CVE-2017-17626) SQL injection in sqli (CVE-2017-17626). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Readymade Php Classified Script Project +1	8 years ago
CVE-2017-17627	SQL Injection in sqli (CVE-2017-17627) SQL injection in sqli (CVE-2017-17627). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Readymade Video Sharing Script Project +1	8 years ago
CVE-2017-17629	SQL Injection in sqli (CVE-2017-17629) SQL injection in sqli (CVE-2017-17629). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Secure E Commerce Script Project +1	8 years ago
CVE-2017-17631	SQL Injection in sqli (CVE-2017-17631) SQL injection in sqli (CVE-2017-17631). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Multireligion Responsive Matrimonial Project +1	8 years ago
CVE-2017-17632	SQL Injection in sqli (CVE-2017-17632) SQL injection in sqli (CVE-2017-17632). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Responsive Events And Movie Ticket Booking Script Project +1	8 years ago
CVE-2017-17633	SQL Injection in sqli (CVE-2017-17633) SQL injection in sqli (CVE-2017-17633). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Multiplex Movie Theater Booking Script Project +1	8 years ago
CVE-2017-17634	Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter. Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.	Critical	PHP SQL Injection Cwe 89 Single Theater Booking Script Project +1	8 years ago
CVE-2017-17635	SQL Injection in sqli (CVE-2017-17635) SQL injection in sqli (CVE-2017-17635). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Mlm Forex Market Plan Script Project +1	8 years ago
CVE-2017-17636	MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter. MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.	Critical	PHP SQL Injection Cwe 89 Mlm Forced Matrix Project +1	8 years ago
CVE-2017-17637	Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter. Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.	Critical	PHP SQL Injection Cwe 89 Car Rental Script Project +1	8 years ago
CVE-2017-17586	SQL Injection in sqli (CVE-2017-17586) SQL injection in sqli (CVE-2017-17586). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Olx Clone Project +1	8 years ago
CVE-2017-17587	SQL Injection in c (CVE-2017-17587) SQL injection in c (CVE-2017-17587). Successful exploitation can lead to full system takeover.	Critical	PHP C SQL Injection Cwe 89 +2	8 years ago
CVE-2017-17588	SQL Injection in sqli (CVE-2017-17588) SQL injection in sqli (CVE-2017-17588). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Imdb Clone Project +1	8 years ago
CVE-2017-17589	SQL Injection in sqli (CVE-2017-17589) SQL injection in sqli (CVE-2017-17589). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Thumbtack Clone Project +1	8 years ago
CVE-2017-17591	Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter. Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.	Critical	PHP SQL Injection Cwe 89 Realestate Crowdfunding Script Project +1	8 years ago
CVE-2017-17592	Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter. Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.	Critical	PHP SQL Injection Cwe 89 Website Auction Marketplace Project +1	8 years ago
CVE-2017-17593	Unrestricted File Upload in simple-chatting-system-project (CVE-2017-17593) vulnerability in simple-chatting-system-project (CVE-2017-17593). Data can be tampered with by attackers.	High	PHP Cwe 434 Simple Chatting System Project Simple Chatting System	8 years ago
CVE-2017-17594	DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter. DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.	Critical	PHP SQL Injection Cwe 89 Domainsale Php Script Project +1	8 years ago
CVE-2017-17596	Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter. Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.	Critical	PHP SQL Injection Cwe 89 Entrepreneur Job Portal Script Project +1	8 years ago
CVE-2017-17597	Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter. Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.	Critical	PHP SQL Injection Cwe 89 Nearbuy Clone Script Project +1	8 years ago
CVE-2017-17598	Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter. Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.	Critical	PHP SQL Injection Cwe 89 Affiliate Mlm Script Project +1	8 years ago
CVE-2017-17599	SQL Injection in sqli (CVE-2017-17599) SQL injection in sqli (CVE-2017-17599). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Advance Online Learning Management Script Project +1	8 years ago
CVE-2017-17600	Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter. Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.	Critical	PHP SQL Injection Cwe 89 Basic B2B Script Project +1	8 years ago

Vulnerabilities

🍪 About cookies