Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
added 2026/06/09 12:00 a.m.38 views

Microsoft Windows RDP 缓冲区错误漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. Microsoft Windows has a buffer error vulnerability. Attackers can exploit this vulnerability to obtain sensitive information. The following products and versions are affected: Windows App Client f...

7.5CVSS6AI score0.00871EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/04 12:00 a.m.38 views

GNCC GP5 信任管理问题漏洞

GNCC GP5 is a 2K indoor security camera produced by GNCC Corporation. The GNCC GP5 v7.1.76 version contains a security vulnerability. This vulnerability stems from the practice of storing sensitive wireless network information as plain text in the serial console during regular operations, which m...

4.6CVSS5.9AI score0.0014EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/06/03 12:00 a.m.38 views

FOSSBilling 输入验证错误漏洞

FOSSBilling is an open-source billing and customer management platform for hosting service providers and digital service providers. Versions of FOSSBilling prior to 0.8.0 contained a vulnerability related to input validation errors. This vulnerability stemmed from the redirection module not...

4.8CVSS5.3AI score0.00259EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/06/02 12:00 a.m.38 views

authentik 数据伪造问题漏洞

Authentik is an open-source identity provisioning application developed by Authentik. Versions of Authentik before 2025.12.5 and 2026.2.3 had a data manipulation vulnerability. This vulnerability stemmed from the SAML response processor not verifying the Conditions element in assertions, which...

7.5CVSS5.3AI score0.00169EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.38 views

sendportal 代码注入漏洞

SendPortal is a self-hosted email marketing management tool developed by Mattel. Versions of SendPortal 3.0.1 and earlier had a code injection vulnerability. This vulnerability stemmed from incorrect handling of the content parameter by the Campaign Handler component in the /webview/ file, which...

5.1CVSS4.6AI score0.00203EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/05/30 12:00 a.m.38 views

Yot CMS SQL注入漏洞

Yot CMS is a content management system developed by Yot Corporation. Version 3.3.1 of Yot CMS has a SQL injection vulnerability. This vulnerability stems from the use of parameters named aid and cid, which can allow unauthorized attackers to execute arbitrary SQL queries by injecting malicious...

8.8CVSS6.1AI score0.0027EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/28 12:00 a.m.38 views

OpenReplay 安全漏洞

OpenReplay is an open-source, developer-friendly, and self-hosted session replay software. Versions of OpenReplay prior to 1.26.0 contained security vulnerabilities. These vulnerabilities stemmed from cross-tenant IDOR vulnerabilities in the feature-flag and assist-stats routing mechanisms. Due t...

5.3CVSS5.8AI score0.00207EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.38 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from the reuse of GPU components after they were released, which could allow remote attackers to execute arbitrary co...

7.5CVSS6.2AI score0.00255EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.38 views

FacturaScripts 信息泄露漏洞

FacturaScripts is an open-source ERP software developed by Carlos Garcia, a Spanish developer. Versions of FacturaScripts prior to v2026 contained a vulnerability related to information leakage. This vulnerability stemmed from unvalidated information during the installation of controllers, allowi...

5.3CVSS5.8AI score0.00552EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/24 12:00 a.m.38 views

WineHQ Wine 安全漏洞

WineHQ Wine is an open-source compatibility layer software developed by WineHQ, capable of running Windows applications on Unix-like systems. There is a security vulnerability in WineHQ, which stems from a.desktop file registered as an EXE file MIME processor. This vulnerability may allow EXE fil...

7.3CVSS5.8AI score0.00179EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/22 12:00 a.m.38 views

PCManFM-Qt 安全漏洞

PCManFM-Qt is an open-source file manager based on Qt, developed by LXQt. Versions of PCManFM-Qt 1.1.0 and later contain security vulnerabilities. These vulnerabilities arise when regular file paths are passed as URIs to the org.freedesktop.FileManager1.ShowFolders D-Bus method call. In such case...

9.3CVSS5.8AI score0.00181EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/22 12:00 a.m.38 views

Dell PowerFlex Manager 安全漏洞

Dell PowerFlex Manager is a software-defined infrastructure deployment and lifecycle management platform developed by the American company Dell. Versions of Dell PowerFlex Manager prior to 4.6.2 contain security vulnerabilities. These vulnerabilities stem from the exposure of directory list...

7.5CVSS5.8AI score0.00127EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/19 12:00 a.m.38 views

TYPO3 Extension Content Element Selector 代码问题漏洞

TYPO3 Extension Content Element Selector is an open-source extension for TYPO3 that allows users to select content elements. This extension has a code vulnerability that stems from the extension directly passing cookies controlled by the attacker to the PHP’s unserialize function without proper...

9.2CVSS6.1AI score0.02625EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/15 12:00 a.m.38 views

Open WebUI 安全漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI that is open source. Versions of Open WebUI prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from FolderForm using modelconfig = ConfigDictextra=allow, which allowed arbitrary fields to ...

5CVSS5.9AI score0.00287EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.38 views

Hono 安全漏洞

Hono is a web framework written in TypeScript for the Hono community. Versions of Hono prior to 4.12.18 contained security vulnerabilities. These vulnerabilities stemmed from improper validation of the JWT NumericDate field in the hono/utils/jwt directory, allowing non-compliant declaration value...

3.8CVSS5.8AI score0.00216EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.38 views

Netty 输入验证错误漏洞

Netty is a non-blocking I/O client-server framework developed by the Netty community. It is primarily used for developing Java network applications, such as protocol servers and clients. Versions of Netty prior to 4.2.13.Final and 4.1.133.Final contained a vulnerability related to input validatio...

9.1CVSS6.9AI score0.01006EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.38 views

Netty 环境问题漏洞

Netty is a non-blocking I/O client-server framework from the Netty community. It is primarily used for developing Java network applications, such as protocol servers and clients. Versions of Netty prior to 4.2.13.Final and 4.1.133.Final contained environmental issues. These issues stemmed from...

9.1CVSS6.9AI score0.00838EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.38 views

Hoppscotch 访问控制错误漏洞

Hoppscotch is an open-source API development ecosystem created by Hoppscotch. Versions of Hoppscotch from 2026.2.0 to 2026.4.0 contained a access control vulnerability. This vulnerability stemmed from the GET /v1/onboarding/config endpoint, which still exposed all infrastructure secrets in plain...

7.5CVSS5.8AI score0.0024EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.38 views

Microsoft Windows TCP/IP 安全漏洞

Microsoft Windows TCP/IP is a component provided by Microsoft Corporation that offers TCP/IP configuration functions for Windows. There are security vulnerabilities associated with Microsoft Windows TCP/IP. The following products and versions are affected: Windows 10 Version 1809 for 32-bit...

7.8CVSS5.8AI score0.01838EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.38 views

Microsoft Windows TCP/IP 资源管理错误漏洞

Microsoft Windows TCP/IP is a component provided by Microsoft Corporation that offers TCP/IP configuration functions for Windows. There is a resource management vulnerability in Microsoft Windows TCP/IP. The following products and versions are affected: Windows 10 Version 1809 for 32-bit systems,...

8.1CVSS5.8AI score0.00789EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.38 views

amf 缓冲区错误漏洞

AMF is an open-source library under Apache License, developed by Free5GC. Versions of AMF prior to 2.1.1 contain a buffer error vulnerability, which stems from issues with the NGAP Message Handler component. This vulnerability may lead to memory corruption...

5.3CVSS6AI score0.00309EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.38 views

Microsoft Win32k 竞争条件问题漏洞

Microsoft Win32k is a system file used by Microsoft for multi-user management in Windows. There are competitive conditions vulnerabilities associated with Microsoft Win32k. The following products and versions are affected: Windows Server 2019 Server Core installation, Windows Server 2022, Windows...

7CVSS5.8AI score0.0019EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/10 12:00 a.m.38 views

Canias ERP 授权问题漏洞

Canias ERP is a comprehensive management system developed by the Swiss company Canias, covering enterprise resource planning and business process management. Version 8.03 of Canias ERP contains an authorization vulnerability. This vulnerability stems from the parameter clientVersion in the Login...

6.9CVSS6.1AI score0.00403EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/09 12:00 a.m.38 views

Kirby 安全漏洞

Kirby is a set of open-source content management systems based on files. Versions of Kirby prior to 4.9.0 and 5.4.0 have security vulnerabilities, which stem from the lack of permission control over access to site, user, and role information...

7.1CVSS5.8AI score0.00231EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.38 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure of vgicallocateprivateirqslocked in the KVM ARM64 virtual GIC, causing it to exit...

5.5CVSS5.8AI score0.00121EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/07 12:00 a.m.38 views

OpenEXR 缓冲区错误漏洞

OpenEXR is an open standard for high dynamic range image HDR file format, open-sourced by the Academy Software Foundation. Versions of OpenEXR from 3.0.0 to 3.2.9, 3.3.0 to 3.3.11, and 3.4.0 to 3.4.11 contain a buffer error vulnerability. This vulnerability arises from the IDManifest::init...

9.1CVSS6AI score0.00465EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.38 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of a key size check in Bluetooth L2CAP. This vulnerability may lead to unexpected...

8.1CVSS5.8AI score0.00177EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/05 12:00 a.m.38 views

Code-MCP 路径遍历漏洞

Code-MCP is an AI-integrated tool for terminal and file operations developed by Steven Yu. Versions of Code-MCP 4cfc4643541a110c906d93635b391bf7e357f4a8 and earlier have a path traversal vulnerability. This vulnerability stems from a problem with the MCP File Handler component in the issafepath...

7.5CVSS7.1AI score0.00418EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/05 12:00 a.m.38 views

Code-MCP 注入漏洞

Code-MCP is an AI-integrated tool for terminal and file operations developed by Steven Yu. Code-MCP has a vulnerability that stems from the operation of the MCP Tool component in the gitoperation function located in the src/codemcp/server.py file. This vulnerability may lead to command injection...

7.5CVSS7.1AI score0.01339EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/04 12:00 a.m.38 views

NetBox 安全漏洞

NetBox is a tool developed by the NetBox community, based on Django and PostgreSQL, for IP address management IPAM and data center infrastructure management DCIM. There were security vulnerabilities in versions 4.3.5 to 4.5.4 of NetBox. These vulnerabilities stemmed from remote code execution in...

8.8CVSS6.7AI score0.00782EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/01 12:00 a.m.38 views

mem0 输入验证错误漏洞

mem0 is an efficient memory algorithm benchmarking tool open-sourced by Mem0. An input validation error vulnerability exists in mem0 1.0.11 and earlier versions, which stems from improper manipulation of the pickle.load/pickle.dump functions in the mem0/vectorstores/faiss.py file, which could lea...

6.5CVSS6.5AI score0.00315EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/01 12:00 a.m.38 views

Code-Projects Gym Management System 注入漏洞

Code-Projects Gym Management System is an open-source gym management system developed by Code-Projects. Version 1.0 of the Code-Projects Gym Management System has a vulnerability related to SQL injection, which arises from incorrect handling of parameters in the file admin/editexercises.php,...

5.8CVSS5.8AI score0.00206EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/23 12:00 a.m.38 views

SpiceJet Online Booking System 访问控制错误漏洞

The SpiceJet Online Booking System is an online ticketing system provided by the Indian company SpiceJet. It supports flight search, booking, and order management. The SpiceJet Online Booking System has a security vulnerability related to access control. This vulnerability stems from improper...

8.7CVSS5.8AI score0.00497EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/21 12:00 a.m.38 views

HCL BigFix Service Management Discovery 安全漏洞

HCL BigFix Service Management Discovery is an IT asset and service dependency discovery tool developed by the Indian company HCL. HCL BigFix Service Management Discovery has a security vulnerability; this vulnerability arises from the open port 80, which allows encrypted data to be transmitted...

5.3CVSS5.8AI score0.00087EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/18 12:00 a.m.38 views

SAIL 安全漏洞

SAIL is an open-source image decoding library developed by SAIL. SAIL has a security vulnerability, which stems from inconsistencies in pixel format parsing and byte swapping code within the XWD encoder/decoder. This vulnerability may lead to out-of-bound memory access...

9.8CVSS5.9AI score0.00332EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/17 12:00 a.m.38 views

Dell PowerProtect Data Domain(Dell PowerProtect DD) 安全漏洞

Dell PowerProtect Data Domain Dell PowerProtect DD is a set of hardware devices developed by the American company Dell, used for data protection, backup, storage, and de-duplication. There is a security vulnerability in Dell PowerProtect Data Domain Dell PowerProtect DD, which stems from improper...

8.8CVSS5.8AI score0.00222EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/17 12:00 a.m.38 views

HashiCorp Vault和HashiCorp Vault Enterprise 安全漏洞

HashiCorp Vault and HashiCorp Vault Enterprise are products developed by HashiCorp, a company based in the United States. HashiCorp Vault is a private key access management tool. HashiCorp Vault Enterprise is an enterprise information archiving platform. There were security vulnerabilities in...

8.1CVSS5.8AI score0.00376EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/15 12:00 a.m.38 views

SpiceDB 安全漏洞

SpiceDB is a fine-grained permission database developed by the Authzed team. Versions of SpiceDB from 1.49.0 to 1.51.0 contain security vulnerabilities. These vulnerabilities stem from containing plaintext passwords, which may lead to credential leakage...

6CVSS5.8AI score0.00166EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/14 12:00 a.m.38 views

Microsoft Windows Kerberos 授权问题漏洞

Microsoft Windows Kerberos is a software developed by Microsoft for authentication in network clusters. As a network authentication protocol, Kerberos aims to provide robust authentication services for client/server applications through a key system. There are authorization vulnerabilities in...

8CVSS5.8AI score0.00409EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2026/04/09 12:00 a.m.38 views

Hydrosystem Control System 日志信息泄露漏洞

Hydrosystem Control System is an industrial water treatment and fluid control monitoring system developed by the American company Hydrosystem. Versions of Hydrosystem Control System prior to 9.8.5 contained a log information leakage vulnerability. This vulnerability stemmed from the storage of...

6.9CVSS5.8AI score0.00259EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/08 12:00 a.m.38 views

GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. There is a security vulnerability in GitLab, which stems from improper...

2.7CVSS5.9AI score0.00348EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/04/06 12:00 a.m.38 views

GLPI SQL注入漏洞

GLPI is an open-source IT and asset management software developed by GLPI. This software provides a comprehensive IT resource management interface, allowing you to create databases for managing various IT assets such as computers, monitors, servers, printers, network devices, telephones, and even...

9.8CVSS5.9AI score0.08261EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/02 12:00 a.m.38 views

Apache Traffic Server 安全漏洞

Apache Traffic Server ATS is a scalable HTTP proxy and caching server developed by the Apache Foundation in the United States. There are security vulnerabilities in Apache Traffic Server versions 9.2.12 and earlier, as well as 10.1.1 and earlier versions. These vulnerabilities stem from an error ...

7.5CVSS5.8AI score0.00428EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/02 12:00 a.m.38 views

MCP Go SDK 安全漏洞

MCP Go SDK is an open-source development toolkit for the Model Context Protocol. Versions of MCP Go SDK prior to 1.4.0 contained security vulnerabilities. These vulnerabilities stemmed from the default lack of DNS rebinding protection, allowing malicious websites to bypass the same-origin policy...

8.1CVSS5.8AI score0.00455EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/03/31 12:00 a.m.38 views

slippers 跨站脚本漏洞

Slippers is a Django template language enhancement tool developed by Mitchel Cabuloy. Versions of Slippers prior to 0.6.3 contained a cross-site scripting vulnerability. This vulnerability stemmed from template tags that did not escape context variables, which could lead to cross-site scripting...

6.1CVSS5.6AI score0.00227EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/03/31 12:00 a.m.38 views

artifex mupdf 安全漏洞

Artifex MuPDF is a rich-text editor developed by individual developers. Unlike standard text editors, programmers can download free rich-text editors and embed them on their own websites or programs of course, paid versions offer more powerful features. This makes it convenient for users to edit...

7.8CVSS6.4AI score0.00213EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/25 12:00 a.m.38 views

Drupal UI Icons 安全漏洞

Drupal UI Icons is a content management system module provided by the Drupal company that offers interface icon display and management functions. Versions of Drupal UI Icons prior to 1.0.1 and 1.1.1 contained security vulnerabilities, which were caused by improper input handling and could lead to...

6.1CVSS5.6AI score0.00149EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/23 12:00 a.m.38 views

WWBN AVideo 路径遍历漏洞

WWBN AVideo is a video platform building system developed by the WWBN team using PHP. Versions of WWBN AVideo prior to 26.0 contained a path traversal vulnerability. This vulnerability stemmed from the lack of path traversal protection for the name parameter in the pluginRunDatabaseScript.json.ph...

7.2CVSS6.1AI score0.00493EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/03/22 12:00 a.m.38 views

Xlinesoft ASPRunner.NET 安全漏洞

XLineSoft Xlinesoft ASPRunner.NET is a web application development tool provided by the American company XLineSoft. Version 10.1 of Xlinesoft ASPRunner.NET contains a security vulnerability. This vulnerability stems from a denial-of-service vulnerability in table name fields, which could allow...

6.9CVSS5.8AI score0.00133EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/03/12 12:00 a.m.38 views

TinaCMS 路径遍历漏洞

TinaCMS is an open-source headless CMS developed by Tina for Markdown, MDX, and JSON formats. Versions of TinaCMS prior to 2.1.2 contained a path traversal vulnerability. This vulnerability stemmed from the use of path.join to combine paths without verifying that the resolved path remained within...

6.3CVSS5.8AI score0.00426EPSS
SaveExploits1References1
Total number of security vulnerabilities5000