Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
added 2024/08/19 12:00 a.m.32 views

Miniscript 安全漏洞

Miniscript is a Rust Bitcoin open source library for working with Miniscript. A security vulnerability exists in versions of Miniscript prior to 12.2.0 that stems from a failure to properly track the depth of a tree, thereby consuming the stack...

7.5CVSS6.5AI score0.00633EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/07/23 12:00 a.m.33 views

WordPress plugin Redux Framework 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.2CVSS5.8AI score0.01028EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/07/11 12:00 a.m.32 views

NATS Server Security Vulnerability

NATS Server is an open source messaging system. The system is primarily used for cloud-native applications, IoT messaging, and microservices architectures. NATS.io A security vulnerability exists in NATS Server versions prior to 2.8.2 and Streaming Server versions prior to 0.24.6, which stems fro...

6.3CVSS6.7AI score0.00478EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/07/08 12:00 a.m.32 views

IPWorks SSH Security Vulnerability

IPWorks SSH is a library from nsoftware that integrates SSH Secure Shell security features, allowing developers to easily integrate SSH security into Internet applications. A security vulnerability exists in IPWorks SSH that stems from the possibility of being induced to issue unintended file...

9.8CVSS6.8AI score0.81474EPSS
SaveExploits3References2
CNNVD
CNNVD
added 2024/06/06 12:00 a.m.32 views

Number withdrawn

PyTorch is a Python package in the PyTorch open source. This CVE number has been withdrawn...

6.8AI score
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.32 views

Siemens Solid Edge 安全漏洞

Siemens Solid Edge is a 3D CAD software from Siemens Germany. The software can be used for part design, assembly design, sheet metal design, welding design and other industries. Siemens Solid Edge suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute co...

7.8CVSS7.6AI score0.00299EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/21 12:00 a.m.32 views

Flowise 安全漏洞

Flowise is a tool for easily building LLM applications. A security vulnerability exists in Flowise version 1.6.5 that stems from the presence of an authentication bypass vulnerability...

7.6CVSS7AI score0.59867EPSS
SaveExploits4References4
CNNVD
CNNVD
added 2024/03/21 12:00 a.m.32 views

Campcodes Online Marriage Registration System SQL注入漏洞

Online Marriage Registration System is a website builder that supports online marriage registration. A SQL injection vulnerability exists in Campcodes Online Marriage Registration System version 1.0, which originates from a SQL injection vulnerability in the searchdata parameter of the...

6.5CVSS7AI score0.00496EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/02/21 12:00 a.m.32 views

GitLab Access Control Error Vulnerability

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. GitLab suffers from an Access Control Error vulnerability that stems from the...

7.7CVSS7.1AI score0.00455EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/02/06 12:00 a.m.32 views

Allegro Authorization Issues Vulnerability

Allegro is a cross-platform library open-sourced by Allegro primarily for video game and multimedia programming. A security vulnerability exists in Allegro AI ClearML that stems from a lack of authentication, which allows remote attackers to arbitrarily access, create, modify, and delete files...

9.8CVSS6.9AI score0.00981EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/12/13 12:00 a.m.32 views

Adobe InDesign 代码问题漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign has a security vulnerability that can be exploited by attackers to cause a denial of service...

5.5CVSS6.6AI score0.00303EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/12/13 12:00 a.m.32 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.7AI score0.00562EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/10 12:00 a.m.32 views

Security Vulnerabilities in Various Telit Products

Telit Cinterion BGS5 and so on are products of Telit Communications Telit.Telit Cinterion BGS5 is a mobile communication module.Telit Cinterion EHS5/6/8 and so on are products of Telit Cinterion.Telit Cinterion EHS5/6/8 is an edge device module.Telit Cinterion PDS5/6/8 is an edge device...

3.3CVSS6AI score0.00214EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/06 12:00 a.m.32 views

WordPress Plugin Templately Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

4.8CVSS6AI score0.0062EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2023/10/16 12:00 a.m.32 views

Fiber Security Breach

Fiber is an open source web framework written in the Go language. A security vulnerability exists in Fiber that stems from the presence of a cross-site request forgery CSRF vulnerability. The vulnerability can be exploited by an attacker to obtain a token instead of the user and forge malicious...

8.8CVSS6.8AI score0.00265EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/31 12:00 a.m.33 views

Graylog 数据伪造问题漏洞

Graylog is a centralized log management solution from Graylog USA. The product supports capturing, storing, and analyzing logs in real time, among other things. Graylog suffers from a data forgery issue vulnerability that stems from vulnerability to DNS cache poisoning attacks...

5.3CVSS5.7AI score0.00295EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/08/28 12:00 a.m.32 views

Jupyter Server 输入验证错误漏洞

Jupyter Server is an application used by the Jupyter organization to provide back-end services for Jupyter Web applications. An input validation error vulnerability exists in versions of Jupyter Server prior to 2.7.2, which stems from the presence of an open redirection vulnerability that could...

6.1CVSS6.2AI score0.00591EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/08/08 12:00 a.m.32 views

Microsoft ASP.NET Core Security Vulnerability

Microsoft ASP.NET Core is a framework of cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web applications, Internet of Things applications, and mobile backends. ASP.NET has a security vulnerability. An attacker could exploit the...

8.8CVSS6.6AI score0.76714EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/08/05 12:00 a.m.32 views

WordPress plugin WPFactory WPFactory Helper Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.1AI score0.00406EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/07/21 12:00 a.m.32 views

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge has a security vulnerability that stems from the presence of a spoofing vulnerability...

4.7CVSS5.1AI score0.00795EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/19 12:00 a.m.32 views

HashiCorp Nomad 安全漏洞

HashiCorp Nomad is a simple and flexible scheduler and orchestrator from HashiCorp USA. for managing containerized and non-containerized applications at scale, both locally and in the cloud. A security vulnerability exists in HashiCorp Nomad and Nomad Enterpris that stems from the ACL token ID of...

3.4CVSS4.8AI score0.00595EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.32 views

Keeper Security Keeper Password Manager 安全漏洞

Keeper Security Keeper Password Manager is a password management system from Keeper Security. A security vulnerability exists in Keeper Security Keeper Password Manager version 16.10.2, which originates from a vulnerability that allows a local attacker to gain access to sensitive information via...

5.5CVSS5.7AI score0.00781EPSS
SaveExploits3References7
CNNVD
CNNVD
added 2023/07/11 12:00 a.m.32 views

Microsoft SPNEGO Extended Negotiation 安全漏洞

Microsoft SPNEGO Extended Negotiation is a SPNEGO extension from Microsoft Corporation USA. A security vulnerability exists in Microsoft SPNEGO Extended Negotiation. An attacker could exploit this vulnerability to cause a denial of service on the system. The following products and editions are...

7.5CVSS7.7AI score0.01861EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/05/29 12:00 a.m.32 views

Tuleap 跨站脚本漏洞

Tuleap is open source an application lifecycle management system that facilitates agile software development, design projects, V-modeling, requirements management and IT service management. A security vulnerability in Tuleap community versions prior to 14.8.99.60, enterprise versions prior to...

4.8CVSS5.4AI score0.00473EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/05/05 12:00 a.m.32 views

SEMCMS 代码问题漏洞

SEMCMS is a multilingual content management system CMS for foreign trade websites. A security vulnerability exists in SEMCMS v4.2, which is caused by an arbitrary file upload vulnerability in the component SEMCMSUpfile.php, which can be exploited by an attacker to execute arbitrary code by...

9.8CVSS8.9AI score0.00776EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/05/03 12:00 a.m.32 views

Acronis Cyber Backup和Acronis Cyber Protect 安全漏洞

Acronis Cyber Backup and Acronis Cyber Protect are both products of Singapore Acronis Acronis.Acronis Cyber Backup is a data backup product. You can backup virtual machines and hosts, support for windows, linux backup, using AcronisInstantRestore to provide extremely fast recovery performance, an...

9.3CVSS8.2AI score0.05325EPSS
SaveExploits5References3
CNNVD
CNNVD
added 2023/04/26 12:00 a.m.32 views

Drupal core 输入验证错误漏洞

Drupal core is a free, open source content management system developed in PHP by the Drupal community. A security vulnerability exists in Drupal core that stems from incorrect input validation. An attacker exploiting the vulnerability could alter sensitive data...

7.5CVSS7.3AI score0.00568EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/11 12:00 a.m.32 views

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is a large commercial database system from Microsoft that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. The following products and editions are affected: Microsoft SQL Server 2008 for 32-bit Systems Service Pack 4 QFE, Microsoft SQL...

7.3CVSS7.7AI score0.00871EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/04 12:00 a.m.32 views

markdown-pdf 跨站脚本漏洞

npm markdown-pdf is the United States npm a Markdown file will be converted to PDF node module. A security vulnerability exists in markdown-pdf version 11.0.0, which stems from an application that does not validate user-entered Markdown content, resulting in an attacker being able to obtain local...

8.2CVSS7.9AI score0.00597EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/03/21 12:00 a.m.32 views

VISAM VBASE 代码问题漏洞

VISAM VBASE is a data acquisition and monitoring system from VISAM Germany. A code issue vulnerability exists in VISAM VBASE Automation Base versions prior to 11.7.5 that stems from the presence of an information leak...

5.5CVSS5.7AI score0.00255EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/02/16 12:00 a.m.32 views

ArgoCD 安全漏洞

ArgoCD is a software application. A declarative GitOps continuous delivery tool for Kubernetes. It continuously monitors running applications and compares the current live state with the desired target state e.g., configuration in a Git repository, automatically synchronizing and deploying...

9.1CVSS8.2AI score0.00671EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/12/19 12:00 a.m.32 views

Silverware Games SilverwareGames.io 跨站脚本漏洞

Silverware Games SilverwareGames.io is an online gaming website from Silverware Games, Inc. Silverware Games SilverwareGames.io suffers from a cross-site scripting vulnerability that originates from allowing custom HTML attributes to be added to iframe tags...

6.3CVSS5.4AI score0.00334EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/10/17 12:00 a.m.32 views

WordPress Plugin WP Custom Cursors SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exists i...

7.2CVSS7.2AI score0.00986EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2022/10/11 12:00 a.m.32 views

SAP Customer Data Cloud 加密问题漏洞

SAP Customer Data Cloud is a tool from SAP Germany that provides digital customer identity and access management. It enables companies to collect, aggregate and manage customer data across multiple touch points and applications. An encryption issue vulnerability exists in SAP Customer Data Cloud...

5.2CVSS6.9AI score0.00166EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/09/23 12:00 a.m.32 views

Apache Pulsar 输入验证错误漏洞

Apache Pulsar is an Apache Foundation distributed messaging platform for cloud environments that integrates messaging, storage, and lightweight functional computing. The software supports multi-tenancy, persistent storage, multi-room cross-regional data replication, with strong consistency, high...

6.5CVSS6.8AI score0.013EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/09/16 12:00 a.m.32 views

Google TensorFlow 安全漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google, Inc. in the United States. Google TensorFlow suffers from a security vulnerability that stems from FractionalMaxPoolGrad validating its inputs by asserting a failure instead of returning an error. T...

7.5CVSS7.6AI score0.0042EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/09/13 12:00 a.m.32 views

Microsoft .NET Framework 安全漏洞

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a development platform. The platform includes the C and Visual Basic programming languages, a public language runtime library, and an extensive class library. A security vulnerability...

7.8CVSS7.6AI score0.01368EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/08/25 12:00 a.m.32 views

VTK 代码问题漏洞

VTK is an open source software system for image processing, 3D graphics, body drawing and visualization. VTK suffers from a code issue vulnerability that stems from its IO/Infovis/vtkXMLTreeReader.cxx component not checking the return value of the libxml2 API "xmlDocGetRootElement" and attempting...

7.5CVSS5.7AI score0.01258EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/08/08 12:00 a.m.32 views

WordPress plugin WP DS Blog Map 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

4.8CVSS5AI score0.00583EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2022/08/01 12:00 a.m.32 views

shescape 注入漏洞

shescape is open source a simple shell escaping program package for JavaScript . Use it to escape user-controlled input to shell commands to prevent shell injection. An injection vulnerability exists in versions prior to Shescape 1.5.8, which can be exploited by an attacker to omit all arguments...

9.8CVSS8.4AI score0.01353EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/07/27 12:00 a.m.32 views

Jenkins Openstack Heat Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

4.3CVSS5.2AI score0.00563EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/07/21 12:00 a.m.32 views

Node.js 安全漏洞

Node.js is an open source, cross-platform JavaScript runtime environment. A security vulnerability exists in Node.js version 16.5.4 and versions prior to 17.1.3 in the 17.x series, which stems from the fact that an incorrectly formatted MKV file may cause the file type detector to fall into an...

5.5CVSS6.1AI score0.00402EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2022/07/12 12:00 a.m.32 views

Microsoft Windows 代码问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A code issue vulnerability exists in the Microsoft Windows Client/Server Runtime Subsystem. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

7.8CVSS8.1AI score0.17087EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/06/14 12:00 a.m.32 views

Microsoft Windows Local Security Authority Subsystem Service 安全漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

7.8CVSS7.6AI score0.01389EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/05/20 12:00 a.m.32 views

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. An input validation error vulnerability exists in TensorFlow versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, which stems from the fact that tf.rawops.SparseTensorToCSRSparseMatrix does not ful...

5.5CVSS5.7AI score0.00317EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2022/05/03 12:00 a.m.32 views

Fortinet FortiOS 安全漏洞

Fortinet FortiOS is a dedicated security operating system for the FortiGate network security platform from Fortinet, Inc. Fortinet FortiOS versions 6.4.8 and earlier and 7.0.3 and earlier are vulnerable to an access control error that could be exploited by an authenticated attacker with a...

6.3CVSS5.7AI score0.00581EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/03/25 12:00 a.m.32 views

Maccms 跨站脚本漏洞

Maccms is a PHP-based film and television content management system CMS. maccms v10 version of the cross-site scripting vulnerability, the vulnerability stems from the wd parameter in /admin.php/admin/ulog/index.html lack of user-supplied data and output data validation filter, an attacker can us...

6.1CVSS5.2AI score0.00555EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/11 12:00 a.m.32 views

Yokogawa Exaopc 安全漏洞

Yokogawa Electric is a server of Yokogawa Electric Yokogawa, Japan. A security vulnerability exists in CAMS for HIS Log Server in Yokogawa Electric. The vulnerability stems from CAMS for HIS Log Server not properly enabling log output. The following products and versions are affected: CENTUM CS...

8.1CVSS7.7AI score0.00804EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/03/10 12:00 a.m.32 views

SPIP 安全漏洞

SPIP is a Web-based content publishing system. The system is primarily used for online collaboration. A security vulnerability exists in SPIP versions prior to 3.2.14 and 4.x through 4.0.5 that could allow an attacker to remotely execute arbitrary code...

8.8CVSS8.2AI score0.03063EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2022/02/09 12:00 a.m.32 views

XWiki Platform 安全漏洞

Xwiki Platform is a Wiki platform used to create Web collaboration applications from the French company Xwiki. XWiki Platform has an access control error vulnerability that stems from the application not properly restricting access to resources from unauthorized roles, which could be exploited by...

5.5CVSS5.6AI score0.00684EPSS
SaveExploits0References4
Total number of security vulnerabilities5000