Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
added 2026/06/10 12:00 a.m.45 views

OpenVPN ovpn-dco-win 安全漏洞

OpenVPN ovpn-dco-win is a virtual network adapter for Windows developed by OpenVPN. There are security vulnerabilities in versions 2.0.0 to 2.8.3 of OpenVPN ovpn-dco-win. These vulnerabilities stem from errors in buffer size calculations by the epoch key generator, which may allow remotely...

6.5CVSS5.8AI score0.00338EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.45 views

Microsoft azure kubernetes service 路径遍历漏洞

Microsoft Azure Kubernetes Service is a service provided by Microsoft Corporation for deploying, managing, and scaling containerized applications. Microsoft Azure Kubernetes Service has a path traversal vulnerability. Attackers can exploit this vulnerability to execute code remotely...

8.8CVSS6AI score0.00336EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.45 views

Webmin 安全漏洞

Webmin is a set of web-based system management tools for Unix-like operating systems, developed by the Webmin community. Versions of Webmin prior to 2.640 contained a security vulnerability, which stemmed from the insecure construction of the attachment save file name in the mailboxes/detachall.c...

9.4CVSS5.8AI score0.00396EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/15 12:00 a.m.45 views

Bouncy Castle Java 安全漏洞

Bouncy Castle Java is an open-source encryption algorithm developed by Legion of the Bouncy Castle Inc. Versions of Bouncy Castle Java prior to 1.84 contained security vulnerabilities. These vulnerabilities stemmed from unlimited resource allocation, which could lead to exhaustion of pre-authoriz...

8.7CVSS5.8AI score0.00758EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/02/12 12:00 a.m.45 views

Arduino App Lab 操作系统命令注入漏洞

Arduino App Lab is an integrated development environment for developing Arduino applications, based on the open-source Arduino framework. Versions of Arduino App Lab prior to 0.4.0 contained a vulnerability related to operating system command injection. This vulnerability stemmed from insufficien...

6.8CVSS6AI score0.00151EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/13 12:00 a.m.45 views

ZOHO多款产品 安全漏洞

ZOHO Password Manager Pro PMP and so on are products of ZOHO USA company.ZOHO Password Manager Pro is a password manager.ZOHO ManageEngine Access Manager Plus is the ZOHO ManageEngine PAM360 is a complete PAM software. A security vulnerability exists in several ZOHO products, which stems from an...

8.1CVSS5.8AI score0.00736EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.45 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a missing memory copy in the RISC-V architecture kasaninit, which could lead to page faults...

6AI score0.00222EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/07/27 12:00 a.m.45 views

CampCodes Courier Management System 注入漏洞

CampCodes Courier Management System is a courier management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Courier Management System version 1.0, which originates from a SQL injection due to a misbehavior of parameter s in file /parcellist.php...

8.8CVSS7AI score0.00498EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/06/18 12:00 a.m.45 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a missing node reference release that could lead to a reference count leak...

5.5CVSS6.3AI score0.00217EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/06/18 12:00 a.m.45 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from powerpc rtas not handling the MSR HV bit correctly, which could lead to a crash...

5.5CVSS6AI score0.00179EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/21 12:00 a.m.45 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not disabling MSGSPLICEPAGES...

5.5CVSS6.6AI score0.00591EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/12 12:00 a.m.45 views

Microsoft Windows Package Manager 安全漏洞

Microsoft Windows Package Manager is a comprehensive package manager solution from Microsoft Corporation USA. A system or set of tools used to automate the installation, upgrade, configuration, and use of software. Most package managers are designed to discover and install developer tools. A...

6.2CVSS6.2AI score0.00682EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/12 12:00 a.m.45 views

Citrix Systems NetScaler Gateway和NetScaler ADC 安全漏洞

Citrix Systems NetScaler Gateway Citrix Systems Gateway and Citrix Systems NetScaler ADC are both products of Citrix Systems, Inc.Citrix Systems NetScaler Gateway is a secure remote access solution. The solution provides administrators with application-level and data-level controls to enable user...

8.1CVSS6.3AI score0.0042EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/11 12:00 a.m.45 views

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab versions 12.5 up to and including...

9.6CVSS9.3AI score0.00892EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/10/10 12:00 a.m.45 views

WordPress plugin TI WooCommerce Wishlist 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS7.2AI score0.00389EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.45 views

Triangle MicroWorks SCADA Data Gateway 安全漏洞

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. An information disclosure vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which can be exploited by attackers to obtain sensitive information...

5.3CVSS6.1AI score0.0058EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/17 12:00 a.m.45 views

Honeywell Experion Server 安全漏洞

Honeywell Experion Server is a high-performance industrial control system server from Honeywell, primarily used in the Experion Process Knowledge System PKS platform. A security vulnerability exists in Honeywell Experion Server, which stems from the fact that the server's receipt of a malformed...

8.1CVSS7.7AI score0.00746EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/02/27 12:00 a.m.45 views

Rails Security Vulnerabilities

Rails is a Ruby-based open source web application framework from the Rails team. A security vulnerability exists in Rails versions prior to 7.1.0 through 7.1.3.1, which stems from a Regular Expression Denial of Service ReDoS vulnerability in the Accept header parsing routine of Action Dispatch...

7.5CVSS6.7AI score0.01498EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.45 views

WordPress plugin WP Fastest Cache SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

7.5CVSS9.3AI score0.73708EPSS
SaveExploits11References4
CNNVD
CNNVD
added 2023/08/10 12:00 a.m.45 views

OpenZeppelin Security Vulnerability

OpenZeppelin is a software application. A standard for secure blockchain applications. A security vulnerability exists in OpenZeppelin Contracts version 4.0.0 through versions prior to 4.9.3, which stems from the signer address being appended to all calls originating from the transponder...

5.3CVSS6.7AI score0.00743EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/05/22 12:00 a.m.45 views

WordPress Plugin Side Cart Woocommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS7.8AI score0.00273EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/04/03 12:00 a.m.45 views

Hitachi Vantara Pentaho Business Analytics Server 代码注入漏洞

Hitachi Vantara Pentaho Business Analytics Server is a modern data blending, integration, and business analytics platform from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi Vantara Pentaho Business Analytics Server that stems from not allowing system administrators to...

8.8CVSS6.8AI score0.00555EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/03/28 12:00 a.m.45 views

WordPress plugin Unlimited Elements For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

5.9CVSS4.9AI score0.00392EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/03/15 12:00 a.m.45 views

AVEVA Plant SCADA Access Anywhere 授权问题漏洞

AVEVA Plant SCADA Access Anywhere is a reliable, flexible and high-performance Supervisory Control and Data Acquisition SCADA software solution for industrial process customers from AVEVA. The true value and power of Plant SCADA can be accessed in any compatible web browser. An authorization issu...

9.8CVSS8.4AI score0.00678EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/01/17 12:00 a.m.45 views

OpenStack 安全漏洞

OpenStack is a cloud platform management program of the National Aeronautics and Space Administration NASA in the U.S. Swift is one of the storage projects used to store permanent static data. A security vulnerability exists in OpenStack that stems from the fact that by providing a specially...

6.5CVSS6.7AI score0.01009EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2023/01/16 12:00 a.m.45 views

Froxlor 命令注入漏洞

Froxlor is a lightweight server management software from the Froxlor team. A command injection vulnerability exists in Froxlor versions prior to 2.0.8, which stems from the presence of command injection...

8.8CVSS7.2AI score0.97653EPSS
SaveExploits8References6
CNNVD
CNNVD
added 2023/01/14 12:00 a.m.45 views

Publify 输入验证错误漏洞

Publify is a simple but full-featured web publishing software. versions of Publify prior to 9.2.10 are vulnerable to an input validation error, which stems from the presence of an integer overflow issue. No detailed vulnerability details are currently available...

9.8CVSS7.8AI score0.30778EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/12/18 12:00 a.m.45 views

ctrlo lenio 安全漏洞

lenio is an open source facility management system from ctrlo. A security vulnerability exists in ctrlo lenio, which stems from unknown code in the views/task.tt file of its Task Handler component that operates on the parameters site.org.name/check.name/task.tasktype allowing an attacker to...

6.1CVSS5.7AI score0.00385EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/12/13 12:00 a.m.45 views

pgAdmin 代码注入漏洞

pgAdmin 4 is a reliable and comprehensive database design and management software for PostgreSQL. A remote code execution vulnerability exists in pgAdmin 4. The vulnerability is required in Windows environments where, due to lax privilege checks by the developer, an attacker can exploit the...

8.8CVSS8.6AI score0.79933EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/12/08 12:00 a.m.45 views

Containous Traefik 信任管理问题漏洞

Containous Traefik is a reverse proxy and load balancer from US-based Containous. A trust management issue vulnerability exists in Containous Traefik versions prior to 2.9.6, which stems from a potential issue when managing TLS connections, where routers configured with an incorrectly formatted...

8.1CVSS6.8AI score0.00488EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/11/23 12:00 a.m.45 views

Digital Alert Systems DASDEC EAS 跨站脚本漏洞

Digital Alert Systems DASDEC EAS is a digital alert system from Digital Alert Systems in the United States. A cross-site scripting vulnerability exists in all current versions of Digital Alert Systems DASDEC, which stems from a lack of effective filtering and escaping of user-supplied data on an...

5.4CVSS5.9AI score0.00341EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/11/16 12:00 a.m.45 views

Hoosk CMS 代码问题漏洞

Hoosk CMS is a lightweight content management system. Hoosk CMS v1.8.0 suffers from an arbitrary file upload vulnerability that stems from its /attachments component failing to validate uploaded files. An attacker can exploit the vulnerability to remotely execute code...

9.8CVSS7.2AI score0.00935EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/11/08 12:00 a.m.45 views

Netwrix Auditor 代码问题漏洞

Netwrix Auditor is a suite of IT auditing software from US-based Netwrix. The software features user behavior analysis, proactive detection of security threats, and alerts on threat types. A security vulnerability exists in Netwrix Auditor User Activity Video Recording. An attacker can exploit th...

9.8CVSS9AI score0.36009EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/10/25 12:00 a.m.45 views

WordPress plugin Form Maker by 10Web SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

7.2CVSS7.2AI score0.01026EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2022/10/10 12:00 a.m.45 views

WordPress plugin Taskbuilder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Taskbuilder plugin versions prior to 1.0.8 have a cross-site scripting vulnerability that stems fro...

5.4CVSS5.9AI score0.00491EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2022/09/16 12:00 a.m.45 views

Google TensorFlow 安全漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google. A security vulnerability exists in Google TensorFlow, which stems from an assertion failure given by Unbatch when it receives a non-scalar input id, which could trigger a denial-of-service attack. T...

7.5CVSS7.4AI score0.00411EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/07/18 12:00 a.m.45 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is a PDF reader from Foxit China.A remote code execution vulnerability exists in Foxit PDF Reader Annotation, which can be exploited by attackers to execute code in the context of the current process...

7.8CVSS6.6AI score0.01138EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/07/08 12:00 a.m.45 views

Roxy-WI 操作系统命令注入漏洞

Roxy-WI is an open source web interface for managing Haproxy, Nginx and Keepalived servers. A security vulnerability exists in Roxy-WI versions prior to 6.1.1.0, which can be exploited by a remote attacker to execute remote code via a system command that can be run remotely via the...

10CVSS9AI score0.90387EPSS
SaveExploits15References9
CNNVD
CNNVD
added 2022/06/28 12:00 a.m.45 views

Red Hat search-api 资源管理错误漏洞

Red Hat search-api is a software component from Red Hat that allows developers to seamlessly introduce search functionality into websites and applications. It provides back-end tools for indexing documents, querying various types of data, managing cluster configurations, viewing search analytics,...

6.5CVSS6.5AI score0.00838EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2022/06/28 12:00 a.m.45 views

Red Hat Keycloak 跨站脚本漏洞

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A security vulnerability exists in Red Hat Keycloak that stems from an application having incorrect input validation. An attacker could exploit...

3.8CVSS5.9AI score0.00592EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/05/12 12:00 a.m.45 views

Cambium Networks cnMaestro 操作系统命令注入漏洞

Cambium Networks cnMaestro is a cloud-based or native software platform from Cambium Networks for secure end-to-end network control. Cambium Networks cnMaestro suffers from an operating system command injection vulnerability. An attacker could exploit this vulnerability to upload specially crafte...

9.3CVSS7.5AI score0.00784EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/03/25 12:00 a.m.45 views

CheckMK Raw Edition 安全漏洞

tribe29 CheckMK Raw Edition is a comprehensive and flexible IT monitoring system from tribe29, Germany. A security vulnerability exists in CheckMK Raw Edition that originates from a successful exploit that requires the use of valid credentials or a user with the administrator role to hijack a...

8.8CVSS7.8AI score0.03692EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2021/10/04 12:00 a.m.45 views

Cobbler 安全漏洞

Cobbler is a Linux installation server that allows for quick setup of network installation environments.Cobbler is vulnerable to authorization issues in versions prior to 3.3.0.The vulnerability stems from a lack of authentication measures or insufficient authentication strength in the network...

7.5CVSS5.7AI score0.01406EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/07/09 12:00 a.m.45 views

Kaseya VSA 跨站脚本漏洞

Kaseya VSA is the RMM Remote Monitoring and Management software commonly used by Kaseya's Managed Service Providers MSPs in the United States to manage their customers' networks. A cross-site scripting vulnerability exists in Kaseya VSA, which can be exploited by an attacker to execute client-sid...

5.4CVSS5.5AI score0.52687EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/06/08 12:00 a.m.45 views

Schneider Electric IGSS 缓冲区错误漏洞

The Schneider Electric Interactive Graphical SCADA System IGSS is an advanced SCADA system for monitoring and controlling industrial processes. An out-of-bounds write vulnerability exists in the Definition module of Interactive Graphical SCADA System IGSS versions 15.0.0.21140 and earlier. The...

7.8CVSS6.2AI score0.01172EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/04/23 12:00 a.m.45 views

jquery-plugin-query-object 安全漏洞

jquery-plugin-query-object is an application. It is used for query string modification and creation in jQuery. A security vulnerability exists in jquery-plugin-query-object 2.2.3, which stems from an improperly controlled modification of the object prototype property that allows a malicious user ...

8.8CVSS7.8AI score0.04186EPSS
SaveExploits2References6
CNNVD
CNNVD
added 2026/06/11 12:00 a.m.44 views

WordPress plugin WP Logo Showcase Responsive Slider and Carousel 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS8.3AI score0.00188EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/11 12:00 a.m.44 views

Guzzle 输入验证错误漏洞

Guzzle is a PHP HTTP client developed by the guzzlehttp developer. It allows for easy sending of HTTP requests and seamless integration with web services. Prior to version 2.10.2, Guzzle had an input validation vulnerability. This vulnerability stemmed from allowing ASCII control characters,...

5.3CVSS5.4AI score0.0019EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.44 views

HP Poly Voice 安全漏洞

HP Poly Voice is a voice communication software developed by the American company Hewlett-Packard HP. There is a security vulnerability in HP Poly Voice, which stems from a buffer overflow issue when administrators enable interactive connection establishment. This vulnerability may lead to remote...

9.2CVSS6.3AI score0.24469EPSS
SaveExploits3References1
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.44 views

Roundcube Webmail SQL注入漏洞

Roundcube Webmail is Roundcube open source a browser-based open source IMAP client, which supports address book management, message search, spell checking and so on. Roundcube Webmail 1.6.x versions prior to 1.6.16 and 1.7.x versions prior to 1.7.1 SQL injection vulnerability , the vulnerability...

8.1CVSS5.9AI score0.00764EPSS
SaveExploits0References5
Total number of security vulnerabilities5000