Lucene search
K

8 matches found

CNNVD
CNNVD
added 2026/05/19 12:0 a.m.10 views

OpenHarmony 安全漏洞

OpenHarmony is an open-source project for a Harmony operating system developed by the OpenAtom Foundation in China. Versions of OpenHarmony 6.0 and earlier contain security vulnerabilities, and attackers can exploit these vulnerabilities to cause information leaks...

5.5CVSS5.8AI score0.00103EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2026/05/05 2:50 p.m.8 views

CVE-2026-6907

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. django.middleware.cache.UpdateCacheMiddleware erroneously caches requests where the Vary header contained an asterisk ''. This can lead to private data being stored and served. Earlier, unsupported Django series such as 5.0.x,...

5.3CVSS5.7AI score0.00272EPSS
Exploits0
Cvelist
Cvelist
added 2025/09/05 8:26 p.m.8 views

CVE-2025-10059 MongoDB Server router will crash when incorrect lsid is set on a sharded query

An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument lsid is provided in a case when it is not applicable. This affects MongoDB Server v6.0 versions prior to 6.0.x, MongoDB Server v7.0 versions prior to 7.0.18 a...

6.5CVSS0.00254EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/09/05 12:0 a.m.3 views

MongoDB Server 安全漏洞

MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server versions prior to v6.0.x, prior to v7.0.18, and...

6.5CVSS6.2AI score0.00254EPSS
Exploits0References3
OSV
OSV
added 2020/01/10 3:15 p.m.2 views

DEBIAN-CVE-2020-1765

An improper control of parameters allows the spoofing of the from fields of the following screens: AgentTicketCompose, AgentTicketForward, AgentTicketBounce and AgentTicketEmailOutbound. This issue affects: OTRS Community Edition 5.0.x version 5.0.39 and prior versions; 6.0.x version 6.0.24 and...

5.3CVSS5.5AI score0.01499EPSS
Exploits0References1
OSV
OSV
added 2017/07/24 9:29 p.m.2 views

CVE-2017-1287

IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web...

5.4CVSS5.6AI score0.00558EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2017/05/15 12:0 a.m.2 views

PT-2017-9775 · Apache · Apache Qpid Broker For Java

Name of the Vulnerable Software and Affected Versions: Apache Qpid Broker for Java versions 6.0.x through 6.0.5 Apache Qpid Broker for Java versions 6.1.x through 6.1.0 Description: The Apache Qpid Broker for Java can be configured to use different AuthenticationProviders to handle user...

7.5CVSS5.9AI score0.06181EPSS
Exploits1References8
CNVD
CNVD
added 2015/11/05 12:0 a.m.3 views

Android Arbitrary Code Execution Vulnerability (CNVD-2015-07369)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. An arbitrary code execution vulnerability exists in Android versions 5.x prior to 5.1.1 LMY48X and 6.0 prior to 2015. It allows remote attackers to execute arbitrary code...

10CVSS7.8AI score0.02359EPSS
Exploits0References1
Rows per page
Query Builder