Lucene search
K

17 matches found

CNVD
CNVD
added 2026/03/31 12:0 a.m.3 views

Unspecified vulnerability in Apple macOS Tahoe (CNVD-2026-19040)

Apple macOS Tahoe is an operating system from the American company Apple. Apple macOS Tahoe contains a security vulnerability that can be exploited by attackers to cause an application to access sensitive user data...

5.5CVSS5.8AI score0.00038EPSS
Exploits0
CNNVD
CNNVD
added 2025/11/03 12:0 a.m.1 views

PHPGurukul News Portal 安全漏洞

News Portal is a news portal. News Portal has a hard-coded vulnerability that stems from the use of a fixed encryption key for the handling of the SECRETKEY parameter in the file /onps/settings.py. An attacker could exploit this vulnerability to obtain sensitive system information...

8.1CVSS5.1AI score0.00067EPSS
Exploits1References5
CNVD
CNVD
added 2025/09/18 12:0 a.m.3 views

Apple macOS Sonoma Logic Issue Vulnerability

Apple macOS Sonoma is an operating system launched on June 5, 2023 by Apple. Apple macOS Sonoma has a logic problem vulnerability that can be exploited by an attacker to cause an application to access sensitive user data...

5.5CVSS6.5AI score0.00026EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/06 12:0 a.m.2 views

PT-2025-36380

Name of the Vulnerable Software and Affected Versions: ASP affected versions not specified Description: The use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment TEE driver, potentially leading to loss of confidentiality...

2.8CVSS6.2AI score0.00019EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2020-14650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to...

5.3CVSS6.7AI score0.00146EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/07/29 12:0 a.m.1 views

Juju 安全漏洞

Juju is an open source application orchestration engine from Canonical Juju Open Source. A security vulnerability exists in Juju. An attacker exploiting the vulnerability could access sensitive data...

8.8CVSS6.3AI score0.00127EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/05/13 11:0 p.m.27 views

CVE-2024-27816

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker may be able to access user data...

7.1AI score0.00039EPSS
Exploits0References4
NVD
NVD
added 2023/11/21 3:15 p.m.14 views

CVE-2023-49060

An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the referrerpolicy attribute. This vulnerability affects Firefox for iOS 120...

9.8CVSS0.00461EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/10/24 12:0 a.m.0 views

Apple watchOS 安全漏洞

Apple watchOS is an operating system for smartwatches from Apple. A security vulnerability exists in Apple watchOS. An attacker could exploit this vulnerability to gain access to sensitive user information...

5.5CVSS6.9AI score0.00072EPSS
Exploits0References9
CNNVD
CNNVD
added 2022/01/20 12:0 a.m.2 views

Microweber 信息泄露漏洞

Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. microweber has an information disclosure vulnerability, which stems from errors in the...

7.5CVSS5.7AI score0.18624EPSS
Exploits1References3
Prion
Prion
added 2020/09/18 3:15 p.m.13 views

Cross site scripting

An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only data in the Export API, an attacker can access data as a user for the duration of the browser session after previously explicitly authenticating with the API...

4CVSS6.3AI score0.00153EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2020/07/16 12:0 a.m.1 views

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-41755)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the MySQL Server 8.0.20 and prior versions of Server: Security: Privileges component of Oracle MySQL. An attacker...

7.2CVSS7.8AI score0.00681EPSS
Exploits0References1
CNVD
CNVD
added 2020/04/17 12:0 a.m.2 views

IBM UrbanCode Deploy Information Disclosure Vulnerability (CNVD-2020-24013)

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

4.3CVSS6.4AI score0.00118EPSS
Exploits0
CNVD
CNVD
added 2019/07/02 12:0 a.m.1 views

Logitech Unifying Device Information Disclosure Vulnerability (CNVD-2019-34836)

Logitech Unifying is a USB type signal receiver from Logitech, Switzerland. An information disclosure vulnerability exists in the Logitech Unifying device. An attacker could exploit the vulnerability to obtain sensitive information about an affected component...

6.5CVSS6.1AI score0.00086EPSS
Exploits1References1
CNVD
CNVD
added 2017/07/26 12:0 a.m.1 views

Unspecified Information Disclosure Vulnerability in IBM TRIRIGA Application Platform

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...

6.5CVSS6.2AI score0.00261EPSS
Exploits0References1
CNVD
CNVD
added 2016/11/09 12:0 a.m.1 views

Microsoft Windows Media Base Memory Corruption Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A memory corruption vulnerability exists when the Windows media base fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could install programs; view,...

9.3CVSS6.7AI score0.20184EPSS
Exploits0References1
CNVD
CNVD
added 2016/09/19 12:0 a.m.1 views

SAP HANA Information Disclosure Vulnerability (CNVD-2016-08066)

SAP HANA is a real-time data analytics platform. SAP HANA has an information disclosure vulnerability. Allowing an attacker can exploit the vulnerability to gain access to sensitive information...

6.5AI score
Exploits0References1
Rows per page
Query Builder