Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Title	Severity	Tags	Detected
CVE-2017-17609	Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter. Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter.	Critical	SQL Injection Cwe 89 Chartered Accountant Booking Script Project Chartered Accountant Booking Script	8 years ago
CVE-2017-17610	SQL Injection in sqli (CVE-2017-17610) SQL injection in sqli (CVE-2017-17610). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 E Commerce Mlm Software Project +1	8 years ago
CVE-2017-17611	Doctor Search Script 1.0 has SQL Injection via the /list city parameter. Doctor Search Script 1.0 has SQL Injection via the /list city parameter.	Critical	SQL Injection Cwe 89 Doctor Search Script Project Doctor Search Script	8 years ago
CVE-2017-17570	SQL Injection in sqli (CVE-2017-17570) SQL injection in sqli (CVE-2017-17570). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Expedia Clone Project +1	8 years ago
CVE-2017-17571	FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter. FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.	Critical	SQL Injection Cwe 89 Foodpanda Clone Project Foodpanda Clone	8 years ago
CVE-2017-17572	FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari. FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.	Critical	SQL Injection Cwe 89 Amazon Clone Project Amazon Clone	8 years ago
CVE-2017-17573	SQL Injection in sqli (CVE-2017-17573) SQL injection in sqli (CVE-2017-17573). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Fortunescripts +1	8 years ago
CVE-2017-17574	FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter. FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.	Critical	PHP SQL Injection Cwe 89 Care Clone Project +1	8 years ago
CVE-2017-17575	SQL Injection in sqli (CVE-2017-17575) SQL injection in sqli (CVE-2017-17575). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Groupon Clone Project +1	8 years ago
CVE-2017-17576	SQL Injection in sqli (CVE-2017-17576) SQL injection in sqli (CVE-2017-17576). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Gigs Script Project +1	8 years ago
CVE-2017-17577	SQL Injection in sqli (CVE-2017-17577) SQL injection in sqli (CVE-2017-17577). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Trademe Clone Project +1	8 years ago
CVE-2017-17578	FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter. FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.	Critical	PHP SQL Injection Cwe 89 Crowdfunding Script Project +1	8 years ago
CVE-2017-17579	FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter. FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.	Critical	PHP SQL Injection Cwe 89 Freelancer Clone Project +1	8 years ago
CVE-2017-17580	SQL Injection in sqli (CVE-2017-17580) SQL injection in sqli (CVE-2017-17580). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Linkedin Clone Project +1	8 years ago
CVE-2017-17581	FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter. FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.	Critical	PHP SQL Injection Cwe 89 Quibids Clone Project +1	8 years ago
CVE-2017-17582	FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter. FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.	Critical	SQL Injection Cwe 89 Grubhub Clone Project Grubhub Clone	8 years ago
CVE-2017-17583	FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter. FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.	Critical	SQL Injection Cwe 89 Shutterstock Clone Project Shutterstock Clone	8 years ago
CVE-2017-17584	SQL Injection in sqli (CVE-2017-17584) SQL injection in sqli (CVE-2017-17584). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Makemytrip Clone Project +1	8 years ago
CVE-2017-17585	FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter. FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.	Critical	PHP SQL Injection Cwe 89 Monster Clone Project +1	8 years ago
CVE-2017-11899	Vulnerability in microsoft (CVE-2017-11899) vulnerability in microsoft (CVE-2017-11899). Successful exploitation can lead to full system takeover.	Critical	Microsoft Windows 10 Windows Server 2016	8 years ago
CVE-2017-17560	Authentication Bypass in westerndigital (CVE-2017-17560) authentication bypass in westerndigital (CVE-2017-17560). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 287 Westerndigital My Cloud Pr4100 Firmware +1	8 years ago
CVE-2017-16684	Authentication Bypass in sap (CVE-2017-16684) authentication bypass in sap (CVE-2017-16684). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Sap Business Intelligence Promotion Management Application	8 years ago
CVE-2017-15896	Vulnerability in nodejs (CVE-2017-15896) vulnerability in nodejs (CVE-2017-15896). Confidential information can be exposed externally.	Critical	JavaScript Nodejs	8 years ago
CVE-2017-15940	Command Injection in paloaltonetworks (CVE-2017-15940) command injection in paloaltonetworks (CVE-2017-15940). Successful exploitation can lead to full system takeover.	Critical	Cwe 77 Paloaltonetworks Pan Os	8 years ago
CVE-2017-17110	SQL Injection in techno-portfolio-management-panel-project (CVE-2017-17110) SQL injection in techno-portfolio-management-panel-project (CVE-2017-17110). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 89 Techno Portfolio Management Panel Project Techno Portfolio Management Panel	8 years ago
CVE-2017-17111	SQL Injection in scubez (CVE-2017-17111) SQL injection in scubez (CVE-2017-17111). Successful exploitation can lead to full system takeover.	Critical	PHP Cwe 89 Scubez Posty Readymade Classifieds	8 years ago
CVE-2017-15708	Vulnerability in apache (CVE-2017-15708) vulnerability in apache (CVE-2017-15708). Successful exploitation can lead to full system takeover.	Critical	Java Apache Remote Code Execution Cwe 74 +4	8 years ago
CVE-2017-17499	Use-After-Free in cpp (CVE-2017-17499) vulnerability in cpp (CVE-2017-17499). Successful exploitation can lead to full system takeover.	Critical	C++ Cwe 416 Imagemagick Canonical +3	8 years ago
CVE-2017-17484	Buffer Overflow in c (CVE-2017-17484) vulnerability in c (CVE-2017-17484). Successful exploitation can lead to full system takeover.	Critical	C C++ Denial of Service Cwe 119 +2	8 years ago
CVE-2017-3112	Out-of-Bounds Read in redhat (CVE-2017-3112) vulnerability in redhat (CVE-2017-3112). Successful exploitation can lead to full system takeover.	Critical	Cwe 125 Redhat Enterprise Linux Desktop Enterprise Linux Server +13	8 years ago
CVE-2017-3114	Out-of-Bounds Read in redhat (CVE-2017-3114) vulnerability in redhat (CVE-2017-3114). Successful exploitation can lead to full system takeover.	Critical	Cwe 125 Redhat Enterprise Linux Desktop Enterprise Linux Server +13	8 years ago
CVE-2017-16398	Use-After-Free in adobe (CVE-2017-16398) vulnerability in adobe (CVE-2017-16398). Successful exploitation can lead to full system takeover.	Critical	JavaScript Cwe 416 Adobe Acrobat +3	8 years ago
CVE-2017-11213	Out-of-Bounds Read in redhat (CVE-2017-11213) vulnerability in redhat (CVE-2017-11213). Successful exploitation can lead to full system takeover.	Critical	Cwe 125 Redhat Enterprise Linux Desktop Enterprise Linux Server +13	8 years ago
CVE-2017-11215	Use-After-Free in redhat (CVE-2017-11215) vulnerability in redhat (CVE-2017-11215). Successful exploitation can lead to full system takeover.	Critical	Cwe 416 Redhat Enterprise Linux Desktop Enterprise Linux Server +13	8 years ago
CVE-2017-11225	Use-After-Free in redhat (CVE-2017-11225) vulnerability in redhat (CVE-2017-11225). Successful exploitation can lead to full system takeover.	Critical	Cwe 416 Redhat Enterprise Linux Desktop Enterprise Linux Server +13	8 years ago
CVE-2017-11291	SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-11291) SSRF in ssrf (CVE-2017-11291). Confidential information can be exposed externally.	Critical	Server-Side Request Forgery Cwe 918 Adobe Connect	8 years ago
CVE-2017-11293	Buffer Overflow in adobe (CVE-2017-11293) vulnerability in adobe (CVE-2017-11293). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Adobe Acrobat Acrobat Dc +2	8 years ago
CVE-2017-11294	Buffer Overflow in adobe (CVE-2017-11294) vulnerability in adobe (CVE-2017-11294). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Adobe Shockwave Microsoft +1	8 years ago
CVE-2017-11295	Buffer Overflow in adobe (CVE-2017-11295) vulnerability in adobe (CVE-2017-11295). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Adobe Dng Converter	8 years ago
CVE-2017-11302	Buffer Overflow in adobe (CVE-2017-11302) vulnerability in adobe (CVE-2017-11302). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Adobe Indesign	8 years ago
CVE-2017-11303	Buffer Overflow in adobe (CVE-2017-11303) vulnerability in adobe (CVE-2017-11303). Successful exploitation can lead to full system takeover.	Critical	Cwe 119 Adobe Photoshop	8 years ago
CVE-2017-11304	Use-After-Free in adobe (CVE-2017-11304) vulnerability in adobe (CVE-2017-11304). Successful exploitation can lead to full system takeover.	Critical	Cwe 416 Adobe Photoshop	8 years ago
CVE-2017-17479	Out-of-Bounds Write in c (CVE-2017-17479) out-of-bounds write in c (CVE-2017-17479). Successful exploitation can lead to full system takeover.	Critical	C Remote Code Execution Denial of Service Cwe 787 +2	8 years ago
CVE-2017-17480	Out-of-Bounds Write in c (CVE-2017-17480) out-of-bounds write in c (CVE-2017-17480). Successful exploitation can lead to full system takeover.	Critical	C Remote Code Execution Denial of Service Cwe 787 +6	8 years ago
CVE-2017-10906	Vulnerability in fluentd (CVE-2017-10906) vulnerability in fluentd (CVE-2017-10906). Successful exploitation can lead to full system takeover.	Critical	Fluentd Redhat Openstack	8 years ago
CVE-2017-17464	Vulnerability in k7computing (CVE-2017-17464) vulnerability in k7computing (CVE-2017-17464). Successful exploitation can lead to full system takeover.	Critical	Cwe 476 K7Computing Antivirus	8 years ago
CVE-2017-17465	Vulnerability in k7computing (CVE-2017-17465) vulnerability in k7computing (CVE-2017-17465). Successful exploitation can lead to full system takeover.	Critical	Cwe 476 K7Computing Antivirus	8 years ago
CVE-2017-17458	OS Command Injection in mercurial (CVE-2017-17458) OS command injection in mercurial (CVE-2017-17458). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.4.1` or later.	Critical	Cwe 78 Mercurial Debian Debian Linux	8 years ago
CVE-2017-17430	Authentication Bypass in sangoma (CVE-2017-17430) authentication bypass in sangoma (CVE-2017-17430). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 Sangoma Netbordervega Session Firmware Netbordervega Session	8 years ago
CVE-2017-17055	OS Command Injection in articatech (CVE-2017-17055) OS command injection in articatech (CVE-2017-17055). Successful exploitation can lead to full system takeover.	Critical	PHP Cross-Site Scripting Cwe 78 Articatech +1	8 years ago

Vulnerabilities

🍪 About cookies