ECShop 4.1.0 - SQL Injection

ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information. id: CVE-2021-41460 info: name: ECShop 4.1.0 - SQL Injection author: SleepingBag945 severity: high description: | ECShop 4.1.0 has SQL injection vulnerability, which can be exploited ...

Microsoft .NET Framework Denial-of-Service Vulnerability (CNVD-2026-28483)

Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation in the United States. It is also a development platform used to build applications for Windows, Windows Store, Windows Phone, Windows Server, and Microsoft Azure. This platform includes...

CNVD-2020-68596

creationtimestamp| type| source ---|---|--- 2026-06-30 09:59:21+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0d0328a-e74e-461d-a0a1-f90ac8b8bc2f...

CNVD-2022-42853

creationtimestamp| type| source ---|---|--- 2026-06-30 09:59:09+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1e019033-82b8-43dc-b006-b9dee0ddc0d8 2026-07-18 18:00:04+00:00| published-proof-of-concept| https://t.me/CVEhub/354 2026-07-19 00:00:10+00:00|...

CNVD-2020-46552

creationtimestamp| type| source ---|---|--- 2026-06-30 09:59:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/05a4eb33-7961-4868-a569-180aeae34a0a...

CNVD-2021-09650

creationtimestamp| type| source ---|---|--- 2026-06-30 09:58:41+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dea6508f-2af2-4f92-972a-8c9d819f605a...

CNVD-2021-33202

creationtimestamp| type| source ---|---|--- 2026-06-30 09:58:28+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9c80c80f-845a-4857-a0f9-1107c1471ddd...

CNVD-2018-24942

creationtimestamp| type| source ---|---|--- 2026-06-30 09:22:33+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c75dcbed-3692-4979-9aa5-17c25efd12a9...

Multiple Mozilla product information leakage vulnerabilities (CNVD-2026-26880)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Multiple Mozilla product logic processing errors (CNVD-2026-26881)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Apache HTTP Server buffer overflow vulnerability (CNVD-2026-23635)

Apache HTTP Server is an open-source web server developed by the Apache Foundation in the United States. This server is known for its speed, reliability, and ability to be expanded through simple APIs. There is a buffer overflow vulnerability present in Apache HTTP Server, but detailed informatio...

OpenClaw has an unspecified vulnerability (CNVD-2026-19026)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw has a security vulnerability that can be exploited by an attacker to suppress legitimate events on different accounts by matching the eventname and messageid parameters...

Oracle MySQL Server InnoDB Component Denial of Service Vulnerability (CNVD-2026-18576)

Oracle MySQL Server is an open source relational database management system with an InnoDB component that provides transaction-safe storage engine functionality. A denial of service vulnerability exists in the InnoDB component of Oracle MySQL Server. The vulnerability stems from a flaw in the...

Microsoft Desktop Windows Manager Resource Management Error Vulnerability (CNVD-2026-18596)

Microsoft Desktop Windows Manager is a desktop window manager from Microsoft USA. A security vulnerability exists in Microsoft Desktop Windows Manager. An attacker could exploit the vulnerability to elevate privileges...

Microsoft Azure Monitor Agent Input Validation Error Vulnerability (CNVD-2026-18593)

Microsoft Azure Monitor Agent is a monitoring agent program from Microsoft USA. A security vulnerability exists in Microsoft Azure Monitor Agent. An attacker can exploit the vulnerability to elevate privileges...

Microsoft Azure Monitor Agent Code Issue Vulnerability (CNVD-2026-18594)

Microsoft Azure Monitor Agent is a monitoring agent program from Microsoft USA. A security vulnerability exists in Microsoft Azure Monitor Agent. An attacker can exploit the vulnerability to elevate privileges...

Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2026-19432)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A spoofing...

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17624)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability caused by incorrect boundary checking in the qos.asp script, which can be exploited by an attacker to cause a denial of service...

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17656)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability caused by incorrect bounds checking of parameters in the /xwglref.asp endpoint, which can be exploited by an attacker to cause a denial of service...

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17696)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability stems from improper handling of the name parameter in the /usbpaswd.asp endpoint, which can be exploited by an attacker to cause a denial of service...