SecvalisbySYSDEVOPS.EU

CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.09.25)

AllCriticalHighMediumLowActively exploited133,307 results

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2017-17620
Critical

Lawyer Search Script version 1.1 has a SQL Injection vulnerability via the city parameter in the /lawyer-list endpoint.

CVE-2017-17619
Critical

Laundry Booking Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.

CVE-2017-17618
Critical

Kickstarter Clone Script 2.0 has a SQL Injection vulnerability via the projid parameter in the investcalc.php file.

CVE-2017-17617
Critical

Foodspotting Clone Script version 1.0 has an SQL Injection vulnerability via the q parameter in quicksearch.php.

CVE-2017-17616
Critical

Event Search Script 1.0 has a SQL Injection vulnerability via the city parameter in the /event-list path.

CVE-2017-17615
High

Facebook Clone Script version 1.0 has a SQL Injection vulnerability via the id parameter in the friend-profile.php file.

CVE-2017-17614
Critical

Food Order Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.

CVE-2017-17613
Critical

Freelance Website Script version 2.0.6 has a SQL Injection vulnerability via the pr_id parameter in jobdetails.php or the catid parameter in searchbycat_list.php.

CVE-2017-17612
Critical

Hot Scripts Clone version 3.1 has a SQL Injection vulnerability via the /categories subctid or mctid parameter.

CVE-2017-17611
Critical

Doctor Search Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.

CVE-2017-17610
Critical

E-commerce MLM Software version 1.0 is vulnerable to SQL Injection via the pid parameter in service_detail.php, eventid parameter in event_detail.php, or newid parameter in news_detail.php.

CVE-2017-17609
Critical

Chartered Accountant Booking Script version 1.0 has an SQL Injection vulnerability via the city parameter in the /service-list endpoint.

CVE-2017-17608
Critical

Child Care Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.

CVE-2017-17607
Critical

CMS Auditor Website version 1.0 has a SQL Injection vulnerability via the PATH_INFO parameter in the /news-detail path.

CVE-2017-17606
Critical

Co-work Space Search Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.

CVE-2017-17605
Critical

Consumer Complaints Clone Script 1.0 has a SQL Injection vulnerability via the id parameter in the other-user-profile.php file.

CVE-2017-17604
Critical

Entrepreneur Bus Booking Script version 3.0.4 has an SQL Injection vulnerability via the sourcebus parameter in the booker_details.php file.

CVE-2017-17603
Critical

The Advanced Real Estate Script version 4.0.7 has a SQL Injection vulnerability via the projectmain, proj_type, searchtext, sell_price, or maxprice parameters in the search-results.php file.

CVE-2017-17602
Critical

Advance B2B Script version 2.1.3 is vulnerable to SQL Injection via the show_id parameter in tradeshow-list-detail.php and the pid parameter in view-product.php.

CVE-2017-17601
Critical

Cab Booking Script version 1.0 has a SQL Injection vulnerability via the city parameter in the /service-list endpoint.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS