Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: vendors Clear

ID	Title	Severity	Tags	Detected
CVE-2017-17992	Path Traversal in path-traversal (CVE-2017-17992) path traversal in path-traversal (CVE-2017-17992). Successful exploitation can lead to full system takeover.	Critical	PHP Path Traversal Cwe 22 Iwcnetwork +1	8 years ago
CVE-2014-3630	XXE (XML External Entity) in dos (CVE-2014-3630) vulnerability in dos (CVE-2014-3630). Successful exploitation can lead to full system takeover.	Critical	Java Denial of Service Cwe 611 Lightbend +2	8 years ago
CVE-2017-17951	SQL Injection in sqli (CVE-2017-17951) SQL injection in sqli (CVE-2017-17951). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17957	PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter. PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.	Critical	PHP SQL Injection Cwe 89 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17959	SQL Injection in sqli (CVE-2017-17959) SQL injection in sqli (CVE-2017-17959). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-5641	Unsafe Deserialization in apache (CVE-2017-5641) vulnerability in apache (CVE-2017-5641). Successful exploitation can lead to full system takeover.	Critical	Java Apache Remote Code Execution Insecure Deserialization +4	8 years ago
CVE-2015-7669	Path Traversal in wordpress (CVE-2015-7669) path traversal in wordpress (CVE-2015-7669). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Path Traversal Cwe 22 +1	8 years ago
CVE-2017-9944	Vulnerability in siemens (CVE-2017-9944) vulnerability in siemens (CVE-2017-9944). Successful exploitation can lead to full system takeover.	Critical	Cwe 288 Cwe 269 Siemens 7Kt Pac1200 Data Manager Firmware +1	8 years ago
CVE-2017-17900	SQL Injection in sqli (CVE-2017-17900) SQL injection in sqli (CVE-2017-17900). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Dolibarr +1	8 years ago
CVE-2017-17906	PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter. PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.	Critical	PHP SQL Injection Cwe 89 Car Rental Script Project +1	8 years ago
CVE-2017-17928	SQL Injection in sqli (CVE-2017-17928) SQL injection in sqli (CVE-2017-17928). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Ordermanagementscript +1	8 years ago
CVE-2017-17931	PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter. PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter.	Critical	PHP SQL Injection Cwe 89 Resume Clone Script Project +1	8 years ago
CVE-2017-17892	SQL Injection in sqli (CVE-2017-17892) SQL injection in sqli (CVE-2017-17892). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Readymade Video Sharing Script Project +1	8 years ago
CVE-2017-17897	SQL Injection in sqli (CVE-2017-17897) SQL injection in sqli (CVE-2017-17897). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Dolibarr +1	8 years ago
CVE-2017-17899	SQL Injection in sqli (CVE-2017-17899) SQL injection in sqli (CVE-2017-17899). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Dolibarr +1	8 years ago
CVE-2017-17873	Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI. Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.	Critical	PHP SQL Injection Cwe 89 Vanguard Project +1	8 years ago
CVE-2017-17027	Buffer Overflow in qnap (CVE-2017-17027) vulnerability in qnap (CVE-2017-17027). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Qnap Qts	8 years ago
CVE-2017-17028	Buffer Overflow in qnap (CVE-2017-17028) vulnerability in qnap (CVE-2017-17028). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Qnap Qts	8 years ago
CVE-2017-17029	Buffer Overflow in qnap (CVE-2017-17029) vulnerability in qnap (CVE-2017-17029). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Qnap Qts	8 years ago
CVE-2017-17030	Buffer Overflow in qnap (CVE-2017-17030) vulnerability in qnap (CVE-2017-17030). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Qnap Qts	8 years ago
CVE-2017-17031	Buffer Overflow in qnap (CVE-2017-17031) vulnerability in qnap (CVE-2017-17031). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Qnap Qts	8 years ago
CVE-2017-17032	Buffer Overflow in qnap (CVE-2017-17032) vulnerability in qnap (CVE-2017-17032). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Qnap Qts	8 years ago
CVE-2017-17033	Buffer Overflow in qnap (CVE-2017-17033) vulnerability in qnap (CVE-2017-17033). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Qnap Qts	8 years ago
CVE-2017-17821	Buffer Overflow in cpp (CVE-2017-17821) vulnerability in cpp (CVE-2017-17821). Successful exploitation can lead to full system takeover.	Critical	C++ Denial of Service Cwe 119 Apple +1	8 years ago
CVE-2012-2576	SQL Injection in sqli (CVE-2012-2576) SQL injection in sqli (CVE-2012-2576). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Solarwinds Backup Profiler +2	8 years ago
CVE-2017-17794	Vulnerability in blogotext-project (CVE-2017-17794) vulnerability in blogotext-project (CVE-2017-17794). Successful exploitation can lead to full system takeover.	Critical	PHP Blogotext Project Blogotext	8 years ago
CVE-2017-17777	Authentication Bypass in paid-to-read-script-project (CVE-2017-17777) authentication bypass in paid-to-read-script-project (CVE-2017-17777). Successful exploitation can lead to full system takeover.	Critical	PHP Authentication Bypass Cwe 287 Paid To Read Script Project +1	8 years ago
CVE-2017-17779	Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter. Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.	Critical	PHP SQL Injection Cwe 89 Paid To Read Script Project +1	8 years ago
CVE-2017-15877	Vulnerability in sistemagpweb (CVE-2017-15877) vulnerability in sistemagpweb (CVE-2017-15877). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 732 Sistemagpweb Gpweb	8 years ago
CVE-2017-16949	Unrestricted File Upload in wordpress (CVE-2017-16949) vulnerability in wordpress (CVE-2017-16949). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Cwe 434 Accesspressthemes +1	8 years ago
CVE-2017-17645	Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php. Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.	Critical	PHP SQL Injection Cwe 89 Phpautoclassifiedscript +1	8 years ago
CVE-2017-17651	SQL Injection in sqli (CVE-2017-17651) SQL injection in sqli (CVE-2017-17651). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Paid To Read Script Project +1	8 years ago
CVE-2017-17730	DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php. DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php.	Critical	PHP SQL Injection Cwe 89 Dedecms	8 years ago
CVE-2017-17731	DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php. DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.	Critical	PHP SQL Injection Cwe 89 Dedecms	8 years ago
CVE-2017-17733	Vulnerability in maccms (CVE-2017-17733) vulnerability in maccms (CVE-2017-17733). Successful exploitation can lead to full system takeover.	Critical	PHP Maccms	8 years ago
CVE-2017-17717	Vulnerability in sonatype (CVE-2017-17717) vulnerability in sonatype (CVE-2017-17717). Successful exploitation can lead to full system takeover.	Critical	Cwe 327 Sonatype Nexus Repository Manager	8 years ago
CVE-2017-3191	Vulnerability in d-link (CVE-2017-3191) vulnerability in d-link (CVE-2017-3191). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 294 Cwe 20 D Link +5	8 years ago
CVE-2017-3192	Vulnerability in d-link (CVE-2017-3192) vulnerability in d-link (CVE-2017-3192). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 522 D Link Dir 130 Firmware +4	8 years ago
CVE-2017-3195	Vulnerability in commvault (CVE-2017-3195) vulnerability in commvault (CVE-2017-3195). Successful exploitation can lead to full system takeover.	Critical	Cwe 121 Cwe 119 Commvault Edge	8 years ago
CVE-2017-17671	Path Traversal in apache (CVE-2017-17671) path traversal in apache (CVE-2017-17671). Successful exploitation can lead to full system takeover.	Critical	PHP Apache Path Traversal Cwe 22 +3	8 years ago
CVE-2017-17672	Unsafe Deserialization in deserialization (CVE-2017-17672) vulnerability in deserialization (CVE-2017-17672). Successful exploitation can lead to full system takeover.	Critical	PHP Insecure Deserialization Cwe 502 Vbulletin	8 years ago
CVE-2017-17648	SQL Injection in sqli (CVE-2017-17648) SQL injection in sqli (CVE-2017-17648). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Entrepreneur Dating Script Project +1	8 years ago
CVE-2017-14589	Vulnerability in atlassian (CVE-2017-14589) vulnerability in atlassian (CVE-2017-14589). Successful exploitation can lead to full system takeover.	Critical	Java Cwe 20 Atlassian Bamboo	8 years ago
CVE-2017-14590	Vulnerability in atlassian (CVE-2017-14590) vulnerability in atlassian (CVE-2017-14590). Successful exploitation can lead to full system takeover.	Critical	Atlassian Bamboo	8 years ago
CVE-2017-17638	Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter. Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter.	Critical	PHP SQL Injection Cwe 89 Groupon Clone Script Project +1	8 years ago
CVE-2017-17639	Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter. Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter.	Critical	PHP SQL Injection Cwe 89 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17640	SQL Injection in sqli (CVE-2017-17640) SQL injection in sqli (CVE-2017-17640). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Advanced World Database Project +1	8 years ago
CVE-2017-17641	Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter. Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter.	Critical	PHP SQL Injection Cwe 89 Resume Clone Script Project +1	8 years ago
CVE-2017-17613	SQL Injection in sqli (CVE-2017-17613) SQL injection in sqli (CVE-2017-17613). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Freelance Website Script Project +1	8 years ago
CVE-2017-17617	Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter. Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.	Critical	PHP SQL Injection Cwe 89 Foodspotting Clone Script Project +1	8 years ago

Vulnerabilities

🍪 About cookies