Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2017-11475 |
|
SQL Injection in sqli (CVE-2017-11475)
SQL injection in sqli (CVE-2017-11475). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11466 |
|
Unrestricted File Upload in path-traversal (CVE-2017-11466)
vulnerability in path-traversal (CVE-2017-11466). Successful exploitation can lead to full system takeover.
|
| CVE-2016-5394 |
|
Cross-Site Scripting (XSS) in apache (CVE-2016-5394)
cross-site scripting in apache (CVE-2016-5394). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-6798 |
|
XXE (XML External Entity) in apache (CVE-2016-6798)
vulnerability in apache (CVE-2016-6798). Successful exploitation can lead to full system takeover.
|
| CVE-2016-7507 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2016-7507)
vulnerability in csrf (CVE-2016-7507). Successful exploitation can lead to full system takeover.
|
| CVE-2016-7509 |
|
Cross-Site Scripting (XSS) in glpi-project (CVE-2016-7509)
cross-site scripting in glpi-project (CVE-2016-7509). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-9764 |
|
Cross-Site Scripting (XSS) in metinfo (CVE-2017-9764)
cross-site scripting in metinfo (CVE-2017-9764). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11444 |
|
SQL Injection in sqli (CVE-2017-11444)
SQL injection in sqli (CVE-2017-11444). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11445 |
|
SQL Injection in sqli (CVE-2017-11445)
SQL injection in sqli (CVE-2017-11445). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11446 |
|
Vulnerability in c (CVE-2017-11446)
vulnerability in c (CVE-2017-11446). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11447 |
|
Vulnerability in c (CVE-2017-11447)
vulnerability in c (CVE-2017-11447). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11448 |
|
Information Disclosure in c (CVE-2017-11448)
vulnerability in c (CVE-2017-11448). Confidential information can be exposed externally.
|
| CVE-2017-11449 |
|
Vulnerability in c (CVE-2017-11449)
vulnerability in c (CVE-2017-11449). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11450 |
|
Vulnerability in c (CVE-2017-11450)
vulnerability in c (CVE-2017-11450). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11412 |
|
SQL Injection in sqli (CVE-2017-11412)
SQL injection in sqli (CVE-2017-11412). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11413 |
|
SQL Injection in sqli (CVE-2017-11413)
SQL injection in sqli (CVE-2017-11413). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11414 |
|
SQL Injection in sqli (CVE-2017-11414)
SQL injection in sqli (CVE-2017-11414). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11415 |
|
SQL Injection in sqli (CVE-2017-11415)
SQL injection in sqli (CVE-2017-11415). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11416 |
|
Fiyo CMS 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter.
Fiyo CMS 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter.
|
| CVE-2017-11417 |
|
SQL Injection in sqli (CVE-2017-11417)
SQL injection in sqli (CVE-2017-11417). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11418 |
|
SQL Injection in sqli (CVE-2017-11418)
SQL injection in sqli (CVE-2017-11418). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11419 |
|
SQL Injection in sqli (CVE-2017-11419)
SQL injection in sqli (CVE-2017-11419). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11404 |
|
Unrestricted File Upload in cmsmadesimple (CVE-2017-11404)
vulnerability in cmsmadesimple (CVE-2017-11404). Data can be tampered with by attackers.
|
| CVE-2017-11405 |
|
Unrestricted File Upload in cmsmadesimple (CVE-2017-11405)
vulnerability in cmsmadesimple (CVE-2017-11405). Data can be tampered with by attackers.
|
| CVE-2017-9609 |
|
Cross-Site Scripting (XSS) in blackcat-cms (CVE-2017-9609)
cross-site scripting in blackcat-cms (CVE-2017-9609). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-9933 |
|
Information Disclosure in joomla (CVE-2017-9933)
vulnerability in joomla (CVE-2017-9933). Confidential information can be exposed externally.
|
| CVE-2017-9934 |
|
Cross-Site Scripting (XSS) in csrf (CVE-2017-9934)
cross-site scripting in csrf (CVE-2017-9934). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-3742 |
|
Information Disclosure in lenovo (CVE-2017-3742)
vulnerability in lenovo (CVE-2017-3742). Confidential information can be exposed externally.
|
| CVE-2017-7685 |
|
Vulnerability in apache (CVE-2017-7685)
vulnerability in apache (CVE-2017-7685). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-7688 |
|
Apache OpenMeetings 1.0.0 updates user password in insecure manner.
Apache OpenMeetings 1.0.0 updates user password in insecure manner.
|
| CVE-2017-7683 |
|
Information Disclosure in apache (CVE-2017-7683)
vulnerability in apache (CVE-2017-7683). Confidential information can be exposed externally.
|
| CVE-2017-7663 |
|
Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0.
Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0.
|
| CVE-2017-7664 |
|
Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.
Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.
|
| CVE-2017-7666 |
|
Cross-Site Scripting (XSS) in apache (CVE-2017-7666)
cross-site scripting in apache (CVE-2017-7666). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7673 |
|
Vulnerability in apache (CVE-2017-7673)
vulnerability in apache (CVE-2017-7673). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7680 |
|
Vulnerability in apache (CVE-2017-7680)
vulnerability in apache (CVE-2017-7680). Data can be tampered with by attackers.
|
| CVE-2017-7681 |
|
SQL Injection in apache (CVE-2017-7681)
SQL injection in apache (CVE-2017-7681). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7682 |
|
Vulnerability in apache (CVE-2017-7682)
vulnerability in apache (CVE-2017-7682). Data can be tampered with by attackers.
|
| CVE-2017-7684 |
|
Vulnerability in apache (CVE-2017-7684)
vulnerability in apache (CVE-2017-7684). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-3080 |
|
Vulnerability in adobe (CVE-2017-3080)
vulnerability in adobe (CVE-2017-3080). Confidential information can be exposed externally.
|
| CVE-2017-3099 |
|
Out-of-Bounds Write in adobe (CVE-2017-3099)
out-of-bounds write in adobe (CVE-2017-3099). Successful exploitation can lead to full system takeover.
|
| CVE-2017-3100 |
|
Out-of-Bounds Write in adobe (CVE-2017-3100)
out-of-bounds write in adobe (CVE-2017-3100). Confidential information can be exposed externally.
|
| CVE-2017-2337 |
|
Cross-Site Scripting (XSS) in juniper (CVE-2017-2337)
cross-site scripting in juniper (CVE-2017-2337). Successful exploitation can lead to full system takeover.
|
| CVE-2017-2338 |
|
Cross-Site Scripting (XSS) in juniper (CVE-2017-2338)
cross-site scripting in juniper (CVE-2017-2338). Successful exploitation can lead to full system takeover.
|
| CVE-2017-2339 |
|
Cross-Site Scripting (XSS) in juniper (CVE-2017-2339)
cross-site scripting in juniper (CVE-2017-2339). Successful exploitation can lead to full system takeover.
|
| CVE-2017-2335 |
|
Cross-Site Scripting (XSS) in juniper (CVE-2017-2335)
cross-site scripting in juniper (CVE-2017-2335). Successful exploitation can lead to full system takeover.
|
| CVE-2017-2336 |
|
Cross-Site Scripting (XSS) in juniper (CVE-2017-2336)
cross-site scripting in juniper (CVE-2017-2336). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11347 |
|
Vulnerability in metinfo (CVE-2017-11347)
vulnerability in metinfo (CVE-2017-11347). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11354 |
|
SQL Injection in sqli (CVE-2017-11354)
SQL injection in sqli (CVE-2017-11354). Successful exploitation can lead to full system takeover.
|
| CVE-2017-11362 |
|
Buffer Overflow in c (CVE-2017-11362)
vulnerability in c (CVE-2017-11362). Successful exploitation can lead to full system takeover.
|