Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2017-15215 |
|
Cross-Site Scripting (XSS) in shaarli-project (CVE-2017-15215)
cross-site scripting in shaarli-project (CVE-2017-15215). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15188 |
|
Cross-Site Scripting (XSS) in eyesofnetwork (CVE-2017-15188)
cross-site scripting in eyesofnetwork (CVE-2017-15188). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15194 |
|
include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.
include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.
|
| CVE-2017-15219 |
|
Cross-Site Scripting (XSS) in dotcms (CVE-2017-15219)
cross-site scripting in dotcms (CVE-2017-15219). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15217 |
|
ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c.
ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c.
|
| CVE-2017-15218 |
|
ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png.c.
ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png.c.
|
| CVE-2016-10513 |
|
Cross-Site Scripting (XSS) in piwigo (CVE-2016-10513)
cross-site scripting in piwigo (CVE-2016-10513). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-10514 |
|
Vulnerability in piwigo (CVE-2016-10514)
vulnerability in piwigo (CVE-2016-10514). Data can be tampered with by attackers.
|
| CVE-2017-12623 |
|
XXE (XML External Entity) in apache (CVE-2017-12623)
vulnerability in apache (CVE-2017-12623). Confidential information can be exposed externally.
|
| CVE-2015-8239 |
|
Vulnerability in sudo-project (CVE-2015-8239)
vulnerability in sudo-project (CVE-2015-8239). Successful exploitation can lead to full system takeover.
|
| CVE-2017-5637 |
|
Vulnerability in apache (CVE-2017-5637)
vulnerability in apache (CVE-2017-5637). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.10` or later.
|
| CVE-2014-0030 |
|
XXE (XML External Entity) in apache (CVE-2014-0030)
vulnerability in apache (CVE-2014-0030). Successful exploitation can lead to full system takeover.
|
| CVE-2015-2142 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2015-2142)
vulnerability in csrf (CVE-2015-2142). Successful exploitation can lead to full system takeover.
|
| CVE-2015-2144 |
|
Cross-Site Scripting (XSS) in phpbugtracker-project (CVE-2015-2144)
cross-site scripting in phpbugtracker-project (CVE-2015-2144). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-2146 |
|
SQL Injection in sqli (CVE-2015-2146)
SQL injection in sqli (CVE-2015-2146). Successful exploitation can lead to full system takeover.
|
| CVE-2015-2673 |
|
Vulnerability in wordpress (CVE-2015-2673)
vulnerability in wordpress (CVE-2015-2673). Successful exploitation can lead to full system takeover.
|
| CVE-2015-1206 |
|
Buffer Overflow in dos (CVE-2015-1206)
vulnerability in dos (CVE-2015-1206). Risk of unauthorized operations or information disclosure.
|
| CVE-2014-7240 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2014-7240)
cross-site scripting in wordpress (CVE-2014-7240). Risk of unauthorized operations or information disclosure.
|
| CVE-2014-8492 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2014-8492)
cross-site scripting in wordpress (CVE-2014-8492). Risk of unauthorized operations or information disclosure.
|
| CVE-2014-8758 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2014-8758)
cross-site scripting in wordpress (CVE-2014-8758). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15063 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-15063)
vulnerability in csrf (CVE-2017-15063). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14087 |
|
Vulnerability in trendmicro (CVE-2017-14087)
vulnerability in trendmicro (CVE-2017-14087). Data can be tampered with by attackers. Exploitable via `Host header`.
|
| CVE-2017-14088 |
|
Buffer Overflow in privilege-escalation (CVE-2017-14088)
vulnerability in privilege-escalation (CVE-2017-14088). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14089 |
|
Buffer Overflow in trendmicro (CVE-2017-14089)
vulnerability in trendmicro (CVE-2017-14089). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14083 |
|
Vulnerability in trendmicro (CVE-2017-14083)
vulnerability in trendmicro (CVE-2017-14083). Confidential information can be exposed externally.
|
| CVE-2017-14084 |
|
Vulnerability in trendmicro (CVE-2017-14084)
vulnerability in trendmicro (CVE-2017-14084). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14086 |
|
Vulnerability in trendmicro (CVE-2017-14086)
vulnerability in trendmicro (CVE-2017-14086). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-14085 |
|
Information Disclosure in trendmicro (CVE-2017-14085)
vulnerability in trendmicro (CVE-2017-14085). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12258 |
|
Vulnerability in cisco (CVE-2017-12258)
vulnerability in cisco (CVE-2017-12258). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15032 |
|
ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
|
| CVE-2017-15033 |
|
ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.
ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.
|
| CVE-2017-12270 |
|
Buffer Overflow in dos (CVE-2017-12270)
vulnerability in dos (CVE-2017-12270). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12269 |
|
Cross-Site Scripting (XSS) in cisco (CVE-2017-12269)
cross-site scripting in cisco (CVE-2017-12269). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15017 |
|
Vulnerability in c (CVE-2017-15017)
vulnerability in c (CVE-2017-15017). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15015 |
|
Vulnerability in c (CVE-2017-15015)
vulnerability in c (CVE-2017-15015). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15016 |
|
Vulnerability in c (CVE-2017-15016)
vulnerability in c (CVE-2017-15016). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000119 |
|
Unrestricted File Upload in octobercms (CVE-2017-1000119)
vulnerability in octobercms (CVE-2017-1000119). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000102 |
|
Cross-Site Scripting (XSS) in jenkins (CVE-2017-1000102)
cross-site scripting in jenkins (CVE-2017-1000102). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000103 |
|
Cross-Site Scripting (XSS) in jenkins (CVE-2017-1000103)
cross-site scripting in jenkins (CVE-2017-1000103). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000104 |
|
Privilege Escalation in jenkins (CVE-2017-1000104)
vulnerability in jenkins (CVE-2017-1000104). Confidential information can be exposed externally.
|
| CVE-2017-1000105 |
|
Vulnerability in jenkins (CVE-2017-1000105)
vulnerability in jenkins (CVE-2017-1000105). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000106 |
|
Authentication Bypass in jenkins (CVE-2017-1000106)
authentication bypass in jenkins (CVE-2017-1000106). Data can be tampered with by attackers.
|
| CVE-2017-1000107 |
|
Vulnerability in jenkins (CVE-2017-1000107)
vulnerability in jenkins (CVE-2017-1000107). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000108 |
|
Information Disclosure in jenkins (CVE-2017-1000108)
vulnerability in jenkins (CVE-2017-1000108). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000109 |
|
Cross-Site Scripting (XSS) in jenkins (CVE-2017-1000109)
cross-site scripting in jenkins (CVE-2017-1000109). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000110 |
|
Authentication Bypass in jenkins (CVE-2017-1000110)
authentication bypass in jenkins (CVE-2017-1000110). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000113 |
|
Information Disclosure in jenkins (CVE-2017-1000113)
vulnerability in jenkins (CVE-2017-1000113). Confidential information can be exposed externally.
|
| CVE-2017-1000114 |
|
Information Disclosure in c (CVE-2017-1000114)
vulnerability in c (CVE-2017-1000114). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000117 |
|
Open Redirect in git-scm (CVE-2017-1000117)
vulnerability in git-scm (CVE-2017-1000117). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000118 |
|
Buffer Overflow in dos (CVE-2017-1000118)
vulnerability in dos (CVE-2017-1000118). Risk of unauthorized operations or information disclosure.
|