Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: products Clear

ID	Title	Severity	Tags	Detected
CVE-2017-15983	SQL Injection in sqli (CVE-2017-15983) SQL injection in sqli (CVE-2017-15983). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Geniusocean +1	8 years ago
CVE-2017-15984	Creative Management System (CMS) Lite 1.4 allows SQL Injection via the S parameter to index.php. Creative Management System (CMS) Lite 1.4 allows SQL Injection via the S parameter to index.php.	Critical	PHP SQL Injection Cwe 89 Bekirk +1	8 years ago
CVE-2017-15985	Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter. Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.	Critical	PHP SQL Injection Cwe 89 Readymadeb2Bscript +1	8 years ago
CVE-2017-15987	SQL Injection in sqli (CVE-2017-15987) SQL injection in sqli (CVE-2017-15987). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Fake Magazine Cover Script Project +1	8 years ago
CVE-2017-15988	SQL Injection in sqli (CVE-2017-15988) SQL injection in sqli (CVE-2017-15988). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Nicephpscripts +1	8 years ago
CVE-2017-15989	SQL Injection in sqli (CVE-2017-15989) SQL injection in sqli (CVE-2017-15989). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Online Exam Test Application Project +1	8 years ago
CVE-2017-15990	Unrestricted File Upload in savsofteproducts (CVE-2017-15990) vulnerability in savsofteproducts (CVE-2017-15990). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 434 Savsofteproducts Phpinventory	8 years ago
CVE-2017-15991	SQL Injection in sqli (CVE-2017-15991) SQL injection in sqli (CVE-2017-15991). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Vastal +1	8 years ago
CVE-2017-15992	Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php. Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.	Critical	PHP SQL Injection Cwe 89 Website Broker Script Project +1	8 years ago
CVE-2017-15993	Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter. Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter.	Critical	PHP SQL Injection Cwe 89 Zomato Clone Script Project +1	8 years ago
CVE-2017-16230	Cross-Site Scripting (XSS) in typecho (CVE-2017-16230) cross-site scripting in typecho (CVE-2017-16230). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Typecho	8 years ago
CVE-2012-4449	Vulnerability in apache (CVE-2012-4449) vulnerability in apache (CVE-2012-4449). Successful exploitation can lead to full system takeover.	Critical	Apache Cwe 327 Hadoop	8 years ago
CVE-2012-5636	Cross-Site Scripting (XSS) in apache (CVE-2012-5636) cross-site scripting in apache (CVE-2012-5636). Risk of unauthorized operations or information disclosure.	Medium	Apache Cross-Site Scripting Cwe 79 Wicket	8 years ago
CVE-2013-4366	Vulnerability in apache (CVE-2013-4366) vulnerability in apache (CVE-2013-4366). Successful exploitation can lead to full system takeover.	Critical	Java Apache Cwe 20 Httpclient	8 years ago
CVE-2014-0072	Vulnerability in apache (CVE-2014-0072) vulnerability in apache (CVE-2014-0072). Data can be tampered with by attackers.	High	Apache Cwe 20 Cordova File Transfer Cordova	8 years ago
CVE-2014-0073	Vulnerability in apache (CVE-2014-0073) vulnerability in apache (CVE-2014-0073). Successful exploitation can lead to full system takeover.	Critical	JavaScript Apache Cwe 264 Cordova In App Browser +1	8 years ago
CVE-2009-1197	Vulnerability in apache (CVE-2009-1197) vulnerability in apache (CVE-2009-1197). Risk of unauthorized operations or information disclosure.	Medium	Apache Cwe 20 Juddi	8 years ago
CVE-2009-1198	Cross-Site Scripting (XSS) in apache (CVE-2009-1198) cross-site scripting in apache (CVE-2009-1198). Risk of unauthorized operations or information disclosure.	Medium	Apache Cross-Site Scripting Cwe 79 Juddi	8 years ago
CVE-2012-0881	Vulnerability in apache (CVE-2012-0881) vulnerability in apache (CVE-2012-0881). Risk of unauthorized operations or information disclosure.	High	Java Apache Denial of Service Cwe 399 +1	8 years ago
CVE-2014-0115	Path Traversal in apache (CVE-2014-0115) path traversal in apache (CVE-2014-0115). Confidential information can be exposed externally.	High	Apache Path Traversal Cwe 22 Storm	8 years ago
CVE-2017-7411	Code Injection in enalean (CVE-2017-7411) code injection in enalean (CVE-2017-7411). Successful exploitation can lead to full system takeover.	High	PHP Remote Code Execution Cwe 94 Enalean +1	8 years ago
CVE-2016-3090	Vulnerability in apache (CVE-2016-3090) vulnerability in apache (CVE-2016-3090). Successful exploitation can lead to full system takeover.	High	Apache Cwe 20 Struts	8 years ago
CVE-2013-4246	Vulnerability in c (CVE-2013-4246) vulnerability in c (CVE-2013-4246). Successful exploitation can lead to full system takeover.	High	C Apache Denial of Service Cwe 284 +1	8 years ago
CVE-2014-3526	Information Disclosure in apache (CVE-2014-3526) vulnerability in apache (CVE-2014-3526). Confidential information can be exposed externally.	High	Apache Cwe 200 Wicket	8 years ago
CVE-2014-3624	Vulnerability in apache (CVE-2014-3624) vulnerability in apache (CVE-2014-3624). Successful exploitation can lead to full system takeover.	Critical	Apache Cwe 284 Traffic Server	8 years ago
CVE-2015-0224	Vulnerability in apache (CVE-2015-0224) vulnerability in apache (CVE-2015-0224). Risk of unauthorized operations or information disclosure.	High	Apache Denial of Service Cwe 19 Qpid	8 years ago
CVE-2015-0226	Vulnerability in apache (CVE-2015-0226) vulnerability in apache (CVE-2015-0226). Confidential information can be exposed externally.	High	Apache Cwe 327 Wss4J	8 years ago
CVE-2015-3249	Buffer Overflow in c (CVE-2015-3249) vulnerability in c (CVE-2015-3249). Successful exploitation can lead to full system takeover.	Critical	C Apache Denial of Service Cwe 119 +1	8 years ago
CVE-2017-16000	SQL Injection in sqli (CVE-2017-16000) SQL injection in sqli (CVE-2017-16000). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Eyesofnetwork	8 years ago
CVE-2017-15975	SQL Injection in sqli (CVE-2017-15975) SQL injection in sqli (CVE-2017-15975). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Vastal +1	8 years ago
CVE-2017-15976	SQL Injection in sqli (CVE-2017-15976) SQL injection in sqli (CVE-2017-15976). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Zeescripts +1	8 years ago
CVE-2017-15994	Vulnerability in samba (CVE-2017-15994) vulnerability in samba (CVE-2017-15994). Successful exploitation can lead to full system takeover.	Critical	Cwe 354 Samba Rsync	8 years ago
CVE-2017-15956	Vulnerability in converto-video-downloader-converter-project (CVE-2017-15956) vulnerability in converto-video-downloader-converter-project (CVE-2017-15956). Confidential information can be exposed externally.	High	PHP Cwe 20 Converto Video Downloader Converter Project Converto Video Downloader Converter	8 years ago
CVE-2017-15957	Unrestricted File Upload in ingenious-school-management-system-project (CVE-2017-15957) vulnerability in ingenious-school-management-system-project (CVE-2017-15957). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434 Ingenious School Management System Project Ingenious School Management System	8 years ago
CVE-2017-15958	D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php. D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php.	Critical	PHP SQL Injection Cwe 89 Domainzaar +1	8 years ago
CVE-2017-15960	SQL Injection in sqli (CVE-2017-15960) SQL injection in sqli (CVE-2017-15960). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Yourarticlesdirectory +1	8 years ago
CVE-2017-15961	iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php. iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php.	Critical	PHP SQL Injection Cwe 89 Iproject Management System Project +1	8 years ago
CVE-2017-15963	SQL Injection in sqli (CVE-2017-15963) SQL injection in sqli (CVE-2017-15963). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Itechscripts +1	8 years ago
CVE-2017-15966	SQL Injection in sqli (CVE-2017-15966) SQL injection in sqli (CVE-2017-15966). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Zh Yandexmap Project +1	8 years ago
CVE-2017-15968	MyBuilder Clone 1.0 allows SQL Injection via the phpsqlsearch_genxml.php subcategory parameter. MyBuilder Clone 1.0 allows SQL Injection via the phpsqlsearch_genxml.php subcategory parameter.	Critical	PHP SQL Injection Cwe 89 Contractorscripts +1	8 years ago
CVE-2017-15970	SQL Injection in sqli (CVE-2017-15970) SQL injection in sqli (CVE-2017-15970). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Phpcityportal	8 years ago
CVE-2017-15971	SQL Injection in sqli (CVE-2017-15971) SQL injection in sqli (CVE-2017-15971). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Softdatepro +1	8 years ago
CVE-2017-15972	SQL Injection in sqli (CVE-2017-15972) SQL injection in sqli (CVE-2017-15972). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Softdatepro +1	8 years ago
CVE-2017-15973	SQL Injection in sqli (CVE-2017-15973) SQL injection in sqli (CVE-2017-15973). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Sokial	8 years ago
CVE-2017-15974	tPanel 2009 allows SQL injection for Authentication Bypass via 'or 1=1 or ''=' to login.php. tPanel 2009 allows SQL injection for Authentication Bypass via 'or 1=1 or ''=' to login.php.	Critical	PHP SQL Injection Authentication Bypass Cwe 89 +2	8 years ago
CVE-2017-15946	SQL Injection in sqli (CVE-2017-15946) SQL injection in sqli (CVE-2017-15946). Successful exploitation can lead to full system takeover. Exploitable via ``tag``.	Critical	PHP SQL Injection Cwe 89 Selfget +1	8 years ago
CVE-2017-15949	SQL Injection in sqli (CVE-2017-15949) SQL injection in sqli (CVE-2017-15949). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Angry Frog +1	8 years ago
CVE-2017-15935	Code Injection in artica (CVE-2017-15935) code injection in artica (CVE-2017-15935). Successful exploitation can lead to full system takeover.	High	PHP Cwe 94 Artica Pandora Fms	8 years ago
CVE-2017-15933	SQL Injection in sqli (CVE-2017-15933) SQL injection in sqli (CVE-2017-15933). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Eyesofnetwork	8 years ago
CVE-2014-3579	XXE (XML External Entity) in apache (CVE-2014-3579) vulnerability in apache (CVE-2014-3579). Successful exploitation can lead to full system takeover.	Critical	Apache Cwe 611 Activemq Apollo	8 years ago

Vulnerabilities

🍪 About cookies