Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
added 2026/05/05 12:00 a.m.37 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which arises from the issue of excessive out-of-bounds read accesses when the number of dentryhashtable buckets is...

9.1CVSS5.8AI score0.00399EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/02 12:00 a.m.37 views

WordPress plugin Premium Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to a...

5.4CVSS5.8AI score0.00194EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.37 views

Roxy-WI 路径遍历漏洞

Roxy-WI is an open-source web interface designed for managing Haproxy, Nginx, and Keepalived servers. Versions prior to Roxy-WI 8.2.6.4 contained a path traversal vulnerability, which stemmed from a vulnerability in the oldconfig parameter of the haproxysectionsave interface, allowing arbitrary...

8.7CVSS5.9AI score0.00428EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/04/24 12:00 a.m.37 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the recovery of race conditions in the i2c designware amdisp component. This vulnerability may lead to...

4.7CVSS5.8AI score0.00088EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/23 12:00 a.m.37 views

ntfy 代码注入漏洞

NTFY is a notification service system developed by Philipp Heckel, designed to enable cross-device message delivery through the publish-subscribe mechanism. Versions of NTFY prior to version 2.21 contained a code injection vulnerability. This vulnerability stemmed from issues with the parseAction...

9.8CVSS6.2AI score0.00272EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/21 12:00 a.m.37 views

HCL BigFix Service Management Discovery 安全漏洞

HCL BigFix Service Management Discovery is an IT asset and service dependency discovery tool developed by the Indian company HCL. HCL BigFix Service Management Discovery has a security vulnerability; this vulnerability arises from the open port 80, which allows encrypted data to be transmitted...

5.3CVSS5.8AI score0.00087EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/21 12:00 a.m.37 views

GitHub Enterprise Server 安全漏洞

GitHub Enterprise Server is an open-source application developed by GitHub in the United States. It provides a scalable and easy-to-manage platform by allowing users to set their GitHub instances as virtual devices. Prior to version 3.21 of GitHub Enterprise Server, there was a security...

5.3CVSS5.8AI score0.00296EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/21 12:00 a.m.37 views

Tekton Pipelines 参数注入漏洞

Tekton Pipelines is a cloud-native pipeline developed by Tekton Open Source. In versions 1.0.0 to 1.11.0 of Tekton Pipelines, there is a parameter injection vulnerability. This vulnerability stems from the fact that the revision parameter of the git resolver is passed directly as a positional...

8.5CVSS5.9AI score0.00788EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/04/18 12:00 a.m.37 views

Movary 安全漏洞

Movary is a film review program developed by Lee Peuker personally. Versions of Movary prior to 0.71.1 contained security vulnerabilities. These vulnerabilities stemmed from the fact that the routing definitions for the user management endpoint/settings/users did not enforce the use of only...

8.8CVSS5.8AI score0.00441EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/03/26 12:00 a.m.37 views

Netcore Power 15AX 操作系统命令注入漏洞

Netcore Power 15AX is a wireless router device produced by Netcore Corporation. Versions of Netcore Power 15AX starting with 3.0.0.6938 and earlier have a vulnerability related to operating system command injection. This vulnerability stems from incorrect handling of the parameter IpAddr in the...

9CVSS7.3AI score0.1048EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/03/26 12:00 a.m.37 views

EVerest 安全漏洞

EVerest is an open-source firmware for electric vehicle charging stations developed by EVerest. Versions prior to EVerest 2026.02.0 contained security vulnerabilities. These vulnerabilities stemmed from the length value of the setuppayload function’s trust assertion, which could lead to stack...

8.8CVSS6.2AI score0.00526EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/03/23 12:00 a.m.37 views

Salesforce Marketing Cloud Engagement 安全漏洞

Salesforce Marketing Cloud Engagement is a digital marketing automation platform offered by the American company Salesforce. A security vulnerability exists in versions of Salesforce Marketing Cloud Engagement prior to January 30, 2026. This vulnerability stems from improper parameter separators ...

9.4CVSS5.7AI score0.00413EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/20 12:00 a.m.37 views

Tenda A18 安全漏洞

The Tenda A18 is a AC1200 dual-band Wi-Fi repeater produced by the Chinese company Tenda. The Tenda A18 Pro version, at build number 02.03.02.28, contains a security vulnerability. This vulnerability stems from a stack buffer overflow in the function formfastsettingwifiset found in the...

9CVSS7.4AI score0.00507EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/03/12 12:00 a.m.37 views

Backstage 代码问题漏洞

Backstage is an open-source application developed by Backstage. It serves as an open platform for building developer portals. Versions of Backstage prior to 0.27.1 contained code-related vulnerabilities. These vulnerabilities stemmed from server-side request forgeing when the experimental client ...

7.5CVSS5.8AI score0.00293EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/12 12:00 a.m.37 views

GPAC 安全漏洞

GPAC is an open-source multimedia framework developed by GPAC. The GPAC 26.03-DEV version contains a security vulnerability, which stems from a stack buffer overflow in the txtinprocesstexml function within the TeXML File Parser component...

5.3CVSS6.2AI score0.00127EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/03/11 12:00 a.m.37 views

Splunk Enterprise 信息泄露漏洞

Splunk Enterprise is a data collection and analysis software developed by the American company Splunk. Versions of Splunk Enterprise prior to 10.2.0, 10.0.3 prior to version 10.0.3, 9.4.9 prior to version 9.3.10, as well as versions of Splunk Cloud Platform prior to 10.2.2510.5, 10.1.2507.16 prio...

6.5CVSS5.8AI score0.00228EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/05 12:00 a.m.37 views

RustDesk 安全漏洞

RustDesk is a remote access and control software developed by RustDesk personal developers. It is primarily written in Rust and can be used to maintain computers and other devices remotely. Versions of RustDesk 1.4.5 and earlier contain security vulnerabilities. These vulnerabilities stem from la...

9.3CVSS5.8AI score0.00455EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/03/03 12:00 a.m.37 views

WatchGuard Fireware OS 安全漏洞

WatchGuard Fireware OS is a software operated by the American company WatchGuard, running on Firebox devices. Versions 12.7 to 12.11.7 and 2025.1 to 2026.1.1 of WatchGuard Fireware OS contain security vulnerabilities. These vulnerabilities stem from reflective cross-site scripting in the Fireware...

6.1CVSS5.8AI score0.00206EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/27 12:00 a.m.37 views

hex_core 安全漏洞

hexcore is a hexadecimal implementation library developed by Hex Open Source. Vulnerabilities exist in versions of hexcore prior to 0.12.1, hex prior to 2.3.2, and rebar3 prior to 3.27.0. These vulnerabilities stem from uncontrolled resource consumption and insecure data deserialization, which ma...

7.5CVSS5.8AI score0.00576EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/02/24 12:00 a.m.37 views

Zyxel EX3301-T0 操作系统命令注入漏洞

The Zyxel EX3301-T0 is a security routing gateway produced by the Chinese company Zyxel. Versions of the Zyxel EX3301-T0 prior to 5.50ABVY.7C0 contained a vulnerability related to operating system command injection. This vulnerability stemmed from the log file download function, where command...

8.8CVSS7.5AI score0.01422EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/19 12:00 a.m.37 views

Trivy Action 操作系统命令注入漏洞

Trivy Action is a container vulnerability scanning tool developed by Aqua Security. Versions of Trivy Action prior to 0.33.1 contain an operating system command injection vulnerability. This vulnerability arises from improper handling of input during the process of exporting environment variables...

8.1CVSS6.1AI score0.01349EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/12 12:00 a.m.37 views

Mersenne Research Prime95 安全漏洞

Mersenne Research Prime95 is an open-source software developed by Mersenne Research, running on Windows operating systems. Version 29.8 build 6 of Mersenne Research Prime95 contains a security vulnerability. This vulnerability stems from a buffer overflow in the user ID input field, which could...

9.8CVSS6.3AI score0.0047EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/05 12:00 a.m.37 views

JIZHICMS 代码问题漏洞

JIZHICMS is an open-source content management system developed by JIZHI Corporation in China. Version 1.6.7 of JIZHICMS contains code vulnerabilities; these vulnerabilities stem from a file download vulnerability present in the administrator plugin update endpoint. This vulnerability could allow...

8.8CVSS6AI score0.00714EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/02/04 12:00 a.m.37 views

Wagtail 安全漏洞

Wagtail is an open-source content management system CMS developed by Wagtail. Vulnerabilities exist in versions prior to Wagtail 6.3.6, 7.0.4, 7.1.3, 7.2.2, and 7.3. These vulnerabilities stem from the lack of permission checks on preview endpoints, which could allow unauthorized access to any...

5.1CVSS6AI score0.00365EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/01/06 12:00 a.m.37 views

Extreme Aerohive HiveOS 安全漏洞

Extreme Aerohive HiveOS is a specialized operating system from Extreme, Inc. A security vulnerability exists in Extreme Aerohive HiveOS, which stems from a denial of service vulnerability in NetConfig UI that could make the web interface unavailable...

8.7CVSS6.6AI score0.00546EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.37 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an attempt to leave despite not joining the OCB state, which could lead to driver obfuscation...

6.1AI score0.00198EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/21 12:00 a.m.37 views

WordPress plugin TempTool 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS6.3AI score0.0021EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/08 12:00 a.m.37 views

ALTCHA 安全漏洞

ALTCHA is a self-hosted CAPTCHA software from ALTCHA Open Source. A security vulnerability exists in ALTCHA that stems from a cryptanalysis flaw that could lead to the recovery of random numbers through mathematical derivation...

9.1CVSS6.4AI score0.0022EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/02 12:00 a.m.37 views

CIRCUTOR SGE-PLC1000和CIRCUTOR SGE-PLC50 安全漏洞

The CIRCUTOR SGE-PLC1000 and CIRCUTOR SGE-PLC50 are both a network concentrator from CIRCUTOR Spain. A security vulnerability exists in the CIRCUTOR SGE-PLC1000 and CIRCUTOR SGE-PLC50 version v9.0.2, which stems from the SetUserPassword function not clearing the newPassword parameter, which could...

9.8CVSS6.9AI score0.00372EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/24 12:00 a.m.37 views

Tuya多款产品 安全漏洞

Tuya Android SDK and others are products of Tuya China.Tuya Android SDK is a software development kit.Tuya iOS SDK is a software development kit.Tuya Smart App is a smart app. A security vulnerability exists in several Tuya products, which stems from an unvalidated state parameter in the OAuth...

8.8CVSS6.5AI score0.00171EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/24 12:00 a.m.37 views

TVT NVMS-9000 安全漏洞

The TVT NVMS-9000 is a digital video recorder from China-based Tongwei TVT. A security vulnerability exists in the TVT NVMS-9000 version prior to 1.3.4, which stems from an authentication bypass in the NVMS-9000 control protocol that could lead to the disclosure of sensitive information...

8.7CVSS6.5AI score0.00859EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/11/18 12:00 a.m.37 views

DB Electronica Mozart FM Transmitter 安全漏洞

DB Electronica Mozart FM Transmitter is a line of professional-grade FM radio transmitters from DB Electronica, Italy. A security vulnerability exists in the DB Electronica Mozart FM Transmitter WEBMOZZI-00287 version, which originates from the presence of reflective cross-site scripting in the...

5.4CVSS6.9AI score0.00278EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/11/18 12:00 a.m.37 views

WordPress plugin Enable SVG, WebP, and ICO Upload 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blogs on PHP and MySQL-based servers. A co...

8.8CVSS6.8AI score0.00643EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/10/14 12:00 a.m.37 views

Microsoft Remote Desktop Protocol Client 资源管理错误漏洞

Microsoft Remote Desktop Protocol Client is a client software application for connecting to remote desktops from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Remote Desktop Protocol Client, which can be exploited by an attacker to remotely execute code...

7CVSS9.2AI score0.00351EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/23 12:00 a.m.37 views

WordPress plugin Core 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS6.1AI score0.00266EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/17 12:00 a.m.37 views

esm.sh 安全漏洞

esm.sh is a content delivery network open-sourced by esm.sh. A security vulnerability exists in esm.sh version 136 and earlier, which stems from improper handling of the X-Zone-Id HTTP header and could lead to a path traversal attack...

6.9CVSS8.9AI score0.03031EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2025/09/15 12:00 a.m.37 views

mcp-kubernetes-server 安全漏洞

mcp-kubernetes-server is a Model Context Protocol server for Pengfei Ni Personal Developer. A security vulnerability exists in mcp-kubernetes-server version 0.1.11 and earlier, which stems from the use of the shell=True parameter and could lead to an OS command injection attack...

9.8CVSS7AI score0.01203EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/05 12:00 a.m.37 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unrestricted id mapping change that could lead to elevation of privilege...

7.8CVSS6.1AI score0.00152EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/18 12:00 a.m.37 views

Shaarli 安全漏洞

Shaarli is a suite of website cloning tools. A security vulnerability exists in Shaarli versions prior to 0.15.0, which stems from an input string that is not properly cleaned and is susceptible to reflective cross-site scripting attacks...

7.1CVSS6.1AI score0.00234EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/12 12:00 a.m.37 views

Microsoft Office 资源管理错误漏洞

Microsoft Office is an office software suite product from the U.S.-based Microsoft Corporation Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and others. A resource management error vulnerability exists in Microsoft Office. An attacker...

8.4CVSS6.5AI score0.00567EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/06 12:00 a.m.37 views

FPDI 安全漏洞

FPDI is an open source PDF reader software from Setasign GmbH & Co. KG. A security vulnerability exists in FPDI version 2.6.2 and prior versions, which originates from memory exhaustion when processing user-supplied PDF files and could lead to a denial-of-service attack...

6CVSS6.3AI score0.00306EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/05 12:00 a.m.37 views

Claude Code 路径遍历漏洞

Claude Code is an open source proxy coding tool from Anthropic. A path traversal vulnerability exists in versions of Claude Code prior to 0.2.111, which stems from path validation using prefix matching instead of canonical path comparison, which could lead to directory restriction bypass...

9.1CVSS6.5AI score0.01357EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/24 12:00 a.m.37 views

novel-plus 安全漏洞

novel-plus is a novel reading software by xxy individual developer. A security vulnerability exists in novel-plus 5.1.3 and earlier versions, which stems from the mishandling of the parameter sort/order in the user management module, which may lead to an SQL injection attack...

8.8CVSS6.8AI score0.00441EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/06/10 12:00 a.m.37 views

Microsoft Office 安全漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute...

8.4CVSS7.8AI score0.00768EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/01 12:00 a.m.37 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to release a buffer during a synthetic event test, which could lead to a memory leak...

5.5CVSS6.5AI score0.00193EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/04/22 12:00 a.m.37 views

Zyxel USG FLEX 安全漏洞

Zyxel USG FLEX is a firewall from China Hopkins Zyxel. Offering flexible VPN options IPsec, SSL or L2TP, it provides flexible and secure remote access for remote work and management. A security vulnerability exists in Zyxel USG FLEX versions prior to V1.32, which stems from improper privilege...

6.7CVSS6.6AI score0.00203EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2025/04/15 12:00 a.m.37 views

Growatt Cloud Applications 安全漏洞

Growatt Cloud Applications is a monitoring platform from Growatt, a Chinese company. A security vulnerability exists in Growatt Cloud Applications version 3.6.0 and earlier, which stems from a verified attacker being able to obtain arbitrary plant names via plant IDs...

6.9CVSS6.7AI score0.00296EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/10 12:00 a.m.37 views

MediaWiki 安全漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the Wikimedia USA Foundation. The product can be used to deploy internal knowledge management and content management systems. MediaWiki has a security vulnerability that stems from the exposure of sensitive information ...

2.3CVSS6.2AI score0.00417EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/27 12:00 a.m.37 views

Amazon tough 安全漏洞

Amazon tough is a Rust client library for The Update Framework TUF repository from Amazon.com, USA. A security vulnerability exists in Amazon tough versions prior to 0.20.0 that stems from the client failing to detect a rollback of a delegated target during a target rollback, which could cause th...

5.7CVSS6.5AI score0.0032EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/10/22 12:00 a.m.37 views

Liferay Portal和Liferay DXP 跨站请求伪造漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS, and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DX...

8.8CVSS7.1AI score0.00355EPSS
SaveExploits0References2
Total number of security vulnerabilities5000