Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
added 2021/05/26 12:00 a.m.38 views

Ubuntu Apport 后置链接漏洞

Apport is a toolkit for collecting and giving feedback on error messages information that the operating system finds useful when an application crashes. A security vulnerability exists in Ubuntu Apport that stems from Apport incorrectly handling certain information-gathering operations, which can...

7.3CVSS6AI score0.00289EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/04/28 12:00 a.m.38 views

Huawei 多款产品 注入漏洞

Huawei P30 is a smartphone from Huawei China.The Huawei P30 is vulnerable to JavaScript injection, which can be exploited by attackers to launch JavaScript injection by sending malicious application requests...

7.5CVSS5.6AI score0.00721EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/03/02 12:00 a.m.38 views

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android 11 suffers from an elevation of privilege vulnerability. The vulnerability stems from an out-of-bounds read due to improper boundary checking in nciprocrfmanagementntf in...

6.7CVSS5.8AI score0.00124EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/02/07 12:00 a.m.38 views

OpenWrt Security Vulnerabilities

OpenWrt is a Linux operating system for embedded devices. A security vulnerability exists in OpenWrt 19.07.x before 19.07.7, which stems from the fact that when IPv6 is used, a routing loop may be created that generates excessive network traffic between an affected device and the router of its...

6.5CVSS6.6AI score0.00524EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/06/11 12:00 a.m.37 views

VMware Spring Web Services 安全漏洞

VMware Spring Web Services is a SOAP Web services development framework provided by the American company VMware. There are security vulnerabilities in versions 5.0.0 to 5.0.1, 4.1.0 to 4.1.3, 4.0.0 to 4.0.18, and 3.1.0 to 3.1.8 of VMware Spring Web Services. These vulnerabilities stem from...

3.7CVSS5.4AI score0.00223EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/11 12:00 a.m.37 views

VMware Spring Web Services 代码问题漏洞

VMware Spring Web Services is a SOAP Web services development framework provided by the American company VMware. There are code vulnerabilities in versions 5.0.0 to 5.0.1, 4.1.0 to 4.1.3, 4.0.0 to 4.0.18, and 3.1.0 to 3.1.8 of VMware Spring Web Services. These vulnerabilities stem from the use of...

8.6CVSS5.4AI score0.00383EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/11 12:00 a.m.37 views

Google Chrome 输入验证错误漏洞

Google Chrome is a cross-platform web browser developed by Google, primarily used for accessing internet content. Google Chrome has a vulnerability related to input validation. This vulnerability stems from the Accessibility module’s failure to properly validate untrusted inputs. Attackers can...

8.3CVSS5.9AI score0.00246EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/06/11 12:00 a.m.37 views

IBM Security QRadar EDR 安全漏洞

IBM Security QRadar EDR is a terminal detection and response software developed by the American multinational company IBM. There are security vulnerabilities in versions 3.12 to 3.12.24 of IBM Security QRadar EDR. These vulnerabilities stem from the storage of user credentials in plain text, whic...

4.4CVSS5.3AI score0.00094EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/11 12:00 a.m.37 views

VMware Spring Web Flow 安全漏洞

VMware Spring Web Flow is a web application flow management framework developed by the American company VMware. Versions 4.0.0, 3.0.0 to 3.0.1, and 2.5.0 to 2.5.1 of VMware Spring Web Flow contain security vulnerabilities. These vulnerabilities stem from the possibility of malicious Unified EL...

6.4CVSS5.4AI score0.0023EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/11 12:00 a.m.37 views

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.115 contained a vulnerability due to race conditions in the Safe Browsing component. This vulnerability could allow remote attackers to execute a sandbox escape through malicious files after...

8.3CVSS5.6AI score0.00166EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/06/10 12:00 a.m.37 views

Cloud hypervisor 资源管理错误漏洞

Cloud Hypervisor is a virtual machine monitor developed by Cloud Hypervisor Company, designed for modern cloud workloads. Versions of Cloud Hypervisor from 21.0 to 51.2 contained a resource management vulnerability. This vulnerability stemmed from submitting two virtio-block descriptors with the...

8.9CVSS5.3AI score0.00138EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/10 12:00 a.m.37 views

VMware Spring AMQP 信任管理问题漏洞

VMware Spring AMQP is a message queue integration framework developed by VMware, Inc. There is a vulnerability related to trust management in VMware Spring AMQP. This vulnerability arises when configuring a proxy connection using RabbitConnectionFactoryBean.setUriamqps://…, without calling...

4CVSS5.3AI score0.00132EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/10 12:00 a.m.37 views

VMware Spring Data MongoDB 安全漏洞

VMware Spring Data MongoDB is a MongoDB data access framework developed by the American company VMware. There is a security vulnerability in VMware Spring Data MongoDB, which stems from insufficient validation of bound parameters in repository query methods using the @Query annotation and regular...

5.9CVSS5.3AI score0.00262EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/10 12:00 a.m.37 views

VMware Spring Security 代码问题漏洞

VMware Spring Security is a security framework provided by the American company VMware, designed to provide descriptive security protection for Spring-based applications. Versions of VMware Spring Security from 7.0.0 to 7.0.5 have code vulnerabilities. These vulnerabilities stem from attackers wh...

7.3CVSS5.5AI score0.00198EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.37 views

Tenda G0 缓冲区错误漏洞

Tenda G0 is a router produced by the Chinese company Tenda. The version 15.11.0.5 of Tenda G0 contains a security vulnerability. This vulnerability stems from a buffer overflow in the portalAuth parameter of the formPortalAuth function, which could allow attackers to cause denial-of-service attac...

7.5CVSS6.2AI score0.00397EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.37 views

Adobe ColdFusion 输入验证错误漏洞

Adobe ColdFusion is a rapid application development platform provided by Adobe Inc. This platform includes an integrated development environment and a scripting language. Versions of Adobe ColdFusion such as 2023.19, 2025.8, and earlier have code vulnerabilities. These vulnerabilities stem from...

7.4CVSS6AI score0.00457EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.37 views

Microsoft Windows Push Notifications 信息泄露漏洞

Microsoft Windows Push Notifications is a push notification service provided by Microsoft Corporation. It provides a reliable way to deliver new updates. However, Microsoft Windows Push Notifications has information leakage vulnerabilities. Attackers can exploit these vulnerabilities to obtain...

5.5CVSS5.3AI score0.00404EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.37 views

Microsoft Exchange Server 服务端请求伪造漏洞

Microsoft Exchange Server is a email service program provided by the American company Microsoft. It offers features such as email access, storage, forwarding, voicemail handling, and email filtering. There are code vulnerabilities in Microsoft Exchange Server. Attackers can exploit these...

8.8CVSS5.8AI score0.00846EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.37 views

Microsoft Office Word 缓冲区错误漏洞

Microsoft Office Word is a word processing software developed by Microsoft. There is a security vulnerability in Microsoft Office Word, which stems from an unreliable pointer dereferencing. This vulnerability may allow unauthorized attackers to execute code locally...

7.8CVSS7.1AI score0.00455EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.37 views

Microsoft Windows Program Compatibility Assistant Service 竞争条件问题漏洞

Microsoft Windows is an operating system used on personal devices by the American company Microsoft. The Microsoft Windows Program Compatibility Assistant Service has a security vulnerability. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions...

7.8CVSS5.9AI score0.00184EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.37 views

TOTOLINK EX200 安全漏洞

TOTOLINK EX200 is a 2.4G wireless N range extender from TOTOLINK Corporation. It is designed to expand the coverage of an existing Wi-Fi network. The TOTOLINK EX200 version 4.0.3c.7646 contains a security vulnerability. This vulnerability stems from a minor permission violation in the vsftpd.conf...

6.9CVSS5.7AI score0.00285EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.37 views

WordPress plugin Product Filter Widget for Elementor 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to a...

6.1CVSS5.2AI score0.00205EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.37 views

Huawei HarmonyOS 访问控制错误漏洞

Huawei HarmonyOS is a distributed operating system developed by Huawei Corporation. It is designed for comprehensive scenarios and primarily offers features such as cross-device collaboration, security protection, and intelligent services. There is an access control vulnerability in the package...

5.1CVSS5.9AI score0.00073EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.37 views

Microsoft Remote Desktop client for Windows Desktop 竞争条件问题漏洞

Microsoft Remote Desktop Client is a remote desktop client developed by Microsoft Corporation. There is a vulnerability related to competition conditions in Microsoft Remote Desktop Client. The following products and versions are affected: Remote Desktop client for Windows Desktop, Windows Server...

7.5CVSS7.5AI score0.00473EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.37 views

Adobe InDesign Desktop 缓冲区错误漏洞

Adobe InDesign Desktop is a professional desktop publishing and design software, primarily used for page layout, graphic design, and publishing in print and digital media. There is a security vulnerability in Adobe InDesign Desktop. This vulnerability stems from an improper validation of the read...

5.5CVSS5.8AI score0.00195EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.37 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager is a content management solution developed by Adobe Inc. in the United States. It can be used to build websites, mobile applications, and forms. This solution supports mobile content management, marketing and sales activity management, and multi-site management, among oth...

5.4CVSS6.1AI score0.00205EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.37 views

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a vulnerability in Google Android, which is caused by integer overflow in the Framework components. Attackers can exploit this vulnerability to gain higher privileges on the system...

8.4CVSS7.9AI score0.01714EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.37 views

Stormshield Network Security 安全漏洞

Stormshield Network Security SNS is a next-generation UTM Unified Threat Management firewall developed by the French company Stormshield. Versions 4.3.0 to 4.3.41, 4.8.0 to 4.8.15, and 5.0.0 to 5.0.5 of Stormshield Network Security contain security vulnerabilities. These vulnerabilities stem from...

5.3CVSS5AI score0.00183EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.37 views

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporated in the United States. Qualcomm Chipsets have a buffer error vulnerability, which stems from memory corruption when processing device identifier strings that exceed the expected maximum length...

7.8CVSS5.7AI score0.00075EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.37 views

9Router 授权问题漏洞

9Router is an intelligent routing and authorization AI model proxy tool developed by decolua’s individual developers. Versions of 9Router prior to 0.4.0 contained an authorization vulnerability. This vulnerability stemmed from incorrect handling of the Host parameter in the function isAuthenticat...

6.5CVSS6.4AI score0.00276EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.37 views

Capsule 安全漏洞

Capsule is an open-source Kubernetes framework developed by Project Capsule. Versions prior to Capsule 0.13.0 have security vulnerabilities. These vulnerabilities stem from the processing of TenantResource RawItems, which does not set namespaces for cluster-wide resources. This could allow tenant...

9.1CVSS5.4AI score0.0068EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/05/28 12:00 a.m.37 views

D-Link DWR-X1820 安全漏洞

The D-Link DWR-X1820 is a wireless router produced by D-Link Corporation. The D-Link DWR-X1820 has a security vulnerability. This vulnerability stems from the use of weak default passwords generated from the IMEI number, and no requirement is placed on users to change them. As a result, attackers...

6CVSS5.8AI score0.00141EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.37 views

FoxCMS 授权问题漏洞

FoxCMS is a content management system provided by FoxCMS Company in China, available for free commercial use and open source. Versions of FoxCMS 1.2.6 and earlier have a licensing issue vulnerability, which stems from a weak password recovery vulnerability in the Edit function of the Admin.php fi...

5.8CVSS5.8AI score0.00223EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.37 views

WordPress plugin SVG Support 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

4.3CVSS5.8AI score0.002EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.37 views

RELATE 跨站脚本漏洞

RELATE is a web-based course package developed by Andreas Klöckner. RELATE has a cross-site scripting vulnerability. This vulnerability stems from the getuser method in ParticipationAdmin, which uses marksafe for rendering user-controlled inputs, bypassing Django’s HTML escaping. This may lead to...

8.7CVSS5.6AI score0.0031EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.37 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper bounds checking of the watchid during debugging address monitoring in the amdkfd driver...

7.8CVSS5.8AI score0.00182EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.37 views

IBM Db2 安全漏洞

IBM Db2 is a relational database management system developed by IBM. Versions 11.5.0 to 11.5.9 and 12.1.0 to 12.1.4 of IBM Db2 contain security vulnerabilities, which stem from memory exhaustion during the execution of certain MDC table queries...

7.5CVSS5.9AI score0.00243EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.37 views

IBM Db2 安全漏洞

IBM Db2 is a relational database management system developed by IBM. Versions 11.5.0 to 11.5.9 and 12.1.0 to 12.1.4 of IBM Db2 contain security vulnerabilities. These vulnerabilities arise from specially crafted queries when autonomous transactions are enabled, which may lead to denial-of-service...

7.1CVSS5.8AI score0.00362EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.37 views

view_component 安全漏洞

viewcomponent is an open-source framework developed by ViewComponent, designed for building reusable and testable view components. There are security vulnerabilities in the viewcomponent version 3.0.0 to 4.9.0. These vulnerabilities arise from the system’s testing entry point using File.realpath ...

5.9CVSS5.8AI score0.00412EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.37 views

Twenty 安全漏洞

Twenty is an open-source CRM platform developed by Twenty. Versions 1.7.7 to 1.16.7 of Twenty contain security vulnerabilities. These vulnerabilities stem from SQL injection attacks via uncleaned timeZone parameters and PostgreSQL COPY TO PROGRAM attacks, which may allow authenticated users to...

9.9CVSS6.1AI score0.00483EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.37 views

Check Point Security Gateway 安全漏洞

Check Point Security Gateway is a series of network security gateway devices developed by the Israeli company Check Point. There is a security vulnerability in Check Point Security Gateway, which arises when the identity-aware module based on browser authentication is enabled, allowing...

7.5CVSS5.8AI score0.0475EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.37 views

Pear Archive_Tar 安全漏洞

Pear ArchiveTar is a PHP-based software developed by the PEAR team that allows for creating and extracting tar packages. Prior to version 3.08, Pear ArchiveTar had a security vulnerability. This vulnerability stemmed from the makespecialfile function, which passed the linkname of the tar header t...

9.1CVSS5.8AI score0.0043EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/19 12:00 a.m.37 views

Mozilla Firefox和Mozilla Thunderbird 访问控制错误漏洞

Mozilla Firefox and Mozilla Thunderbird are both products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. This software supports IMAP and POP email...

6.5CVSS5.8AI score0.00206EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/19 12:00 a.m.37 views

MLflow 访问控制错误漏洞

MLFlow is an open-source platform that simplifies machine learning development. It includes features for tracking experiments, packaging code for reproducible runs, and sharing and deploying models. Version 3.9.0 of MLFlow contains a security vulnerability related to access control. This...

9.6CVSS7.6AI score0.00384EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/15 12:00 a.m.37 views

Rapid7 Metasploit Pro 访问控制错误漏洞

Rapid7 Metasploit Pro is a penetration testing software developed by Rapid7, Inc. Rapid7 Metasploit Pro has a access control vulnerability. This vulnerability arises from the Metasploit PostgreSQL service attempting to load OpenSSL configuration files from a non-existent directory that is writabl...

9.3CVSS6.1AI score0.0017EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/15 12:00 a.m.37 views

Open WebUI 安全漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Versions of Open WebUI prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from the lack of authorization checks in the GET /api/tasks and POST /api/tasks/stop/taskid...

7.1CVSS5.8AI score0.0027EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.37 views

WordPress plugin LearnPress – WordPress LMS Plugin for Create and Sell Online Courses 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

4.3CVSS5.8AI score0.00423EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.37 views

HCL AION 安全漏洞

HCL AION is an AI lifecycle management platform developed by the Indian company HCL. HCL AION has a security vulnerability, which stems from the use of autocompletion features for certain input fields. This may lead to sensitive information being stored in the browser, potentially causing...

2.6CVSS5.8AI score0.00115EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.37 views

Silicon Labs RS9116 SDK 安全漏洞

Silicon Labs RS9116 SDK is an embedded development toolkit developed by Silicon Labs Corporation for wireless connectivity modules. The Silicon Labs RS9116 SDK has a security vulnerability, which stems from the time limit of HRNG when power saving mode is enabled, resulting in predictable values...

7.4CVSS5.8AI score0.00159EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.37 views

Microsoft Word 资源管理错误漏洞

Microsoft Word is a word processing software within the Office suite developed by Microsoft Corporation. There is a resource management vulnerability in Microsoft Word. Attackers can exploit this vulnerability to execute code remotely. The following products and versions are affected: Microsoft...

8.4CVSS5.9AI score0.00383EPSS
SaveExploits0References2
Total number of security vulnerabilities5000