VYPR

CVEs

405,034 total · page 6204 of 8,101

AllCriticalHighKEV
  • CVE-2017-17582CriDec 13, 2017
    FS
    Grubhub Clone
    risk 0.67cvss 9.8epss 0.03

    FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.

  • CVE-2017-17581CriDec 13, 2017
    FS
    Quibids Clone
    risk 0.67cvss 9.8epss 0.03

    FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.

  • CVE-2017-17580CriDec 13, 2017
    FS
    Linkedin Clone
    risk 0.67cvss 9.8epss 0.03

    FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.php id parameter.

  • CVE-2017-17579CriDec 13, 2017
    FS
    Freelancer Clone
    risk 0.67cvss 9.8epss 0.03

    FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.

  • CVE-2017-17578CriDec 13, 2017
    FS
    Crowdfunding Script
    risk 0.67cvss 9.8epss 0.03

    FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.

  • CVE-2017-17577CriDec 13, 2017
    FS
    Trademe Clone
    risk 0.67cvss 9.8epss 0.03

    FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id parameter.

  • CVE-2017-17576CriDec 13, 2017
    FS Gigs Script
    FS Gigs Script
    risk 0.67cvss 9.8epss 0.03

    FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or service-provider.php ser parameter.

  • CVE-2017-17575CriDec 13, 2017
    Groupon Clone Project
    Groupon Clone
    risk 0.67cvss 9.8epss 0.03

    FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.

  • CVE-2017-17574CriDec 13, 2017
    FS Care
    Clone
    risk 0.67cvss 9.8epss 0.03

    FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.

  • CVE-2017-17573CriDec 13, 2017
    FS
    Ebay Clone
    risk 0.67cvss 9.8epss 0.03

    FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id parameter.

  • CVE-2017-17572CriDec 13, 2017
    FS
    Amazon Clone
    risk 0.67cvss 9.8epss 0.03

    FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.

  • CVE-2017-17571CriDec 13, 2017
    FS
    Foodpanda Clone
    risk 0.67cvss 9.8epss 0.03

    FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.

  • CVE-2017-17570CriDec 13, 2017
    FS
    Expedia Clone
    risk 0.67cvss 9.8epss 0.03

    FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php fl_orig or fl_dest parameter.

  • CVE-2017-17569MedDec 13, 2017
    Scubez
    Posty Readymade Classifieds
    risk 0.40cvss 6.1epss 0.01

    Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.

  • CVE-2017-17568HigDec 13, 2017
    Scubez
    Posty Readymade Classifieds
    risk 0.49cvss 7.5epss 0.01

    Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct request.

  • CVE-2017-17567HigDec 13, 2017
    Scubez
    Posty Readymade Classifieds
    risk 0.49cvss 7.5epss 0.01

    Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.

  • CVE-2017-17538HigDec 13, 2017
    Mikrotik
    MikroTik
    risk 0.52cvss 7.5epss 0.08

    MikroTik v6.40.5 devices allow remote attackers to cause a denial of service via a flood of ICMP packets.

  • CVE-2017-5534HigDec 13, 2017
    TIBCO Software
    Tibbr
    risk 0.57cvss 8.8epss 0.01

    The tibbr user profiles components of tibbr Community, and tibbr Enterprise expose a weakness in an improperly sandboxed third-party component. Affected releases are TIBCO Software Inc. tibbr Community 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.2.1 and below;…

  • CVE-2017-5530HigDec 13, 2017
    Tibbr
    tibbr Community
    risk 0.53cvss 8.1epss 0.01

    The tibbr web server components of tibbr Community, and tibbr Enterprise contain SAML protocol handling errors which may allow authorized users to impersonate other users, and therefore escalate their access privileges. Affected releases are tibbr Community 5.2.1 and below;…

  • CVE-2017-4942MedDec 13, 2017
    VMware
    Airwatch
    risk 0.32cvss 4.9epss 0.02

    VMware AirWatch Console (AWC) contains a Broken Access Control vulnerability. Successful exploitation of this issue could result in end-user device details being disclosed to an unauthorized administrator.

  • CVE-2017-14362HigDec 13, 2017
    Microfocus
    Project And Portfolio Management
    risk 0.47cvss 7.3epss 0.01

    Cross-Site Request Forgery vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Cross-Site Forgery attack.

  • CVE-2017-14361HigDec 13, 2017
    Microfocus
    Project And Portfolio Management
    risk 0.48cvss 7.4epss 0.01

    Man-In-The-Middle vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Man-in-the-middle attack.

  • CVE-2017-13099HigDec 13, 2017
    WolfSSL
    Wolfssl
    risk 0.54cvss 7.5epss 0.27

    wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable wolfSSL application. This vulnerability is referred to as "ROBOT."

  • CVE-2017-13098HigDec 13, 2017
    Legion Of The Bouncy Castle Inc.
    Bc Java
    risk 0.47cvss 7.5epss 0.24

    BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a…

  • CVE-2017-17566HigDec 12, 2017
    Xen
    Xen
    risk 0.51cvss 7.8epss 0.00

    An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) or gain host OS privileges in shadow mode by mapping a certain auxiliary page.

  • CVE-2017-17565MedDec 12, 2017
    Xen
    Xen
    risk 0.36cvss 5.6epss 0.00

    An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) if shadow mode and log-dirty mode are in place, because of an incorrect assertion related to M2P.

  • CVE-2017-17564HigDec 12, 2017
    Xen
    Xen
    risk 0.51cvss 7.8epss 0.00

    An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging incorrect error handling for reference counting in shadow mode.

  • CVE-2017-17563HigDec 12, 2017
    Xen
    Xen
    risk 0.51cvss 7.8epss 0.00

    An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging an incorrect mask for reference-count overflow checking in shadow mode.

  • CVE-2017-11939MedDec 12, 2017
    Microsoft
    Office
    risk 0.43cvss 6.5epss 0.06

    Microsoft Office 2016 Click-to-Run (C2R) allows an information disclosure vulnerability due to the way Microsoft Office enforces DRM copy/paste permissions, aka "Microsoft Office Information Disclosure Vulnerability".

  • CVE-2017-11936HigDec 12, 2017
    Microsoft
    Sharepoint Enterprise Server 2016
    risk 0.58cvss 8.8epss 0.04

    Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability".

  • CVE-2017-11935HigDec 12, 2017
    Microsoft
    Office
    risk 0.52cvss 7.8epss 0.19

    Microsoft Office 2016 Click-to-Run (C2R) allows a remote code execution vulnerability due to the way files are handled in memory, aka "Microsoft Excel Remote Code Execution Vulnerability".

  • CVE-2017-11934MedDec 12, 2017
    Microsoft
    Office
    risk 0.37cvss 5.5epss 0.13

    Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microsoft Office Information Disclosure Vulnerability".

  • CVE-2017-11932HigDec 12, 2017
    Microsoft
    Exchange Server
    risk 0.53cvss 8.1epss 0.06

    Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way Outlook Web Access (OWA) validates web requests, aka "Microsoft Exchange Spoofing Vulnerability".

  • CVE-2017-11930HigDec 12, 2017
    Microsoft
    Internet Explorer
    risk 0.49cvss 7.5epss 0.09

    ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the…

  • CVE-2017-11927MedDec 12, 2017
    Microsoft
    Windows Server 2008
    risk 0.43cvss 6.5epss 0.10

    Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an information vulnerability due to the way the Windows its:// protocol…

  • CVE-2017-11919MedDec 12, 2017
    Microsoft
    Internet Explorer
    risk 0.35cvss 5.3epss 0.06

    ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016, and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and…

  • CVE-2017-11918HigDec 12, 2017
    Microsoft
    Edge
    risk 0.57cvss 7.5epss 0.63

    ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…

  • CVE-2017-11916HigDec 12, 2017
    Microsoft
    Chakracore
    risk 0.42cvss 7.5epss 0.06

    ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889,…

  • CVE-2017-11914HigDec 12, 2017
    Microsoft
    Edge
    risk 0.50cvss 7.5epss 0.63

    ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".…

  • CVE-2017-11913HigDec 12, 2017
    Microsoft
    Internet Explorer
    risk 0.49cvss 7.5epss 0.09

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current…

  • CVE-2017-11912HigDec 12, 2017
    Microsoft
    Internet Explorer
    risk 0.49cvss 7.5epss 0.08

    ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an…

  • CVE-2017-11911HigDec 12, 2017
    Microsoft
    Chakracore
    risk 0.50cvss 7.5epss 0.65

    ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE…

  • CVE-2017-11910HigDec 12, 2017
    Microsoft
    Chakracore
    risk 0.42cvss 7.5epss 0.09

    ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".…

  • CVE-2017-11909HigDec 12, 2017
    Microsoft
    Chakracore
    risk 0.50cvss 7.5epss 0.65

    ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE…

  • CVE-2017-11908HigDec 12, 2017
    Microsoft
    Chakracore
    risk 0.42cvss 7.5epss 0.09

    ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886,…

  • CVE-2017-11907HigDec 12, 2017
    Microsoft
    Internet Explorer
    risk 0.57cvss 7.5epss 0.65

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to…

  • CVE-2017-11906MedDec 12, 2017
    Microsoft
    Internet Explorer
    risk 0.39cvss 5.3epss 0.25

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the…

  • CVE-2017-11905HigDec 12, 2017
    Microsoft
    Edge
    risk 0.42cvss 7.5epss 0.09

    ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…

  • CVE-2017-11903HigDec 12, 2017
    Microsoft
    Internet Explorer
    risk 0.55cvss 7.5epss 0.47

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to…

  • CVE-2017-11901HigDec 12, 2017
    Microsoft
    Internet Explorer
    risk 0.49cvss 7.5epss 0.08

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how…