Lucene search
+L

1693 matches found

CNNVD
CNNVD
added 2025/01/21 12:0 a.m.3 views

Oracle MySQL Server 安全漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL's MySQL Server. An attacker can exploit this vulnerability to cause MySQL Server to hang or crash...

4.1CVSS6AI score0.00283EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/21 12:0 a.m.4 views

Oracle MySQL Server 安全漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL's MySQL Server. An attacker can exploit this vulnerability to cause MySQL Server to hang or crash...

6.5CVSS6AI score0.0102EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/21 12:0 a.m.4 views

Oracle MySQL Server 安全漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL's MySQL Server. An attacker can exploit this vulnerability to cause MySQL Server to hang or crash...

4.9CVSS6AI score0.01047EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/21 12:0 a.m.4 views

Oracle MySQL 安全漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL's MySQL Server. An attacker can exploit this vulnerability to cause MySQL Server to hang or crash...

6.5CVSS6AI score0.01EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/01/17 12:0 a.m.50 views

Microsoft Windows Installer elevation of privilege vulnerability (CNVD-2025-02836)

Microsoft Windows Installer is a component of the Windows operating system from Microsoft USA. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate privileges...

7.8CVSS7.5AI score0.00606EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/01/17 12:0 a.m.29 views

Google Chrome Security Bypass Vulnerability (CNVD-2025-05089)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in versions of Google Chrome prior to 132.0.6834.83, which can be exploited by attackers to bypass security restrictions...

6.5CVSS6.3AI score0.00339EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:0 a.m.31 views

Google Chrome Security Bypass Vulnerability (CNVD-2025-06037)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...

6.5CVSS6.8AI score0.00339EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:0 a.m.19 views

Microsoft Graphics Component elevation of privilege vulnerability (CNVD-2025-02131)

Microsoft Graphics Component is a graphics driver component of Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. An attacker could exploit the vulnerability to elevate privileges...

7.8CVSS8.4AI score0.00493EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/16 11:15 p.m.16 views

CVE-2024-56144

librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameters Replace $DEVICEID with your specific $DEVICEID value:/device/$DEVICEID/edit - param: display. Librenms versions up to 24.11.0 allow remote attackers to inject...

5.4CVSS0.00378EPSS
SaveExploits1References1
CVE
CVE
added 2025/01/14 2:9 p.m.49 views

CVE-2024-36506

CVE-2024-36506 denotes an improper verification of the source of a communication channel (CWE-940) in FortiClientEMS. Affected products/versions per the provided documents include FortiClientEMS 6.4.0 through 7.0.x, 7.2.0 through 7.2.4, and 7.4.0. The issue may allow a remote attacker to bypass t...

5.3CVSS4.2AI score0.00496EPSS
SaveExploits0References1Affected Software2
NVD
NVD
added 2025/01/14 1:15 a.m.11 views

CVE-2024-57617

An issue in the dameraulevenshtein component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS0.00571EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.6 views

Microsoft Office 代码问题漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Common components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code issue vulnerability exists in Microsoft Office. An attacker exploiting this vulnerability cou...

7.8CVSS7AI score0.00917EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/14 12:0 a.m.18 views

PT-2025-1267 · Microsoft +5 · Edge +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.83 Microsoft Edge affected versions not specified Description: The issue is related to an out of bounds read in the Metrics component, which could allow a remote attacker to potentially exploit heap...

10CVSS6.6AI score0.20547EPSS
SaveExploits28References265
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.7 views

Microsoft Windows Installer 安全漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft USA. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate privileges...

7.8CVSS6.7AI score0.00538EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.10 views

Microsoft Excel 代码问题漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code issue vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to bypass certain functionality...

7.8CVSS6.8AI score0.01565EPSS
SaveExploits0References3
CVE
CVE
added 2025/01/11 2:24 a.m.45 views

CVE-2024-42168

CVE-2024-42168 affects HCL DRYiCE/MyXalytics. The vulnerability is described as out-of-band resource load (HTTP), where an attacker can host a malicious web server and cause the application to fetch and process that content. Affected component/process is not explicitly detailed beyond the HTTP-ba...

9.4CVSS8.7AI score0.00365EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/11 2:24 a.m.10 views

CVE-2024-42168 HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability

HCL MyXalytics is affected by out-of-band resource load HTTP vulnerability. An attacker can deploy a web server that returns malicious content, and then induce the application to retrieve and process that content...

8.9CVSS6.8AI score0.00365EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/08 4:19 p.m.10 views

CVE-2025-20167 Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied...

5.4CVSS5.3AI score0.00286EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/01/08 4:19 p.m.14 views

CVE-2025-20166 Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied...

5.4CVSS5.3AI score0.0037EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/08 12:0 a.m.7 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A security vulnerability exists in Huawei HarmonyOS and...

7.5CVSS6.7AI score0.00151EPSS
SaveExploits0References2
Rows per page
Query Builder