Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
•added 2024/02/19 12:00 a.m.•35 views

Brivo Access Control Systems Security Breach

Brivo Access Control Systems Brivo ACS is a family of access control systems from Brivo USA. Providing comprehensive visibility, data-driven insight, access control and open integration to improve secure operations. A security vulnerability exists in Brivo Access Control Systems versions 5.2.4...

7.1CVSS6.9AI score0.00235EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/02/15 12:00 a.m.•35 views

Algosec FireFlow Cross-Site Scripting Vulnerability

AlgoSec FireFlow is a security application from AlgoSec USA, Inc. It is used to automate the security policy change lifecycle, from submitting a change request to reviewing the changes made. A security vulnerability exists in Algosec FireFlow that stems from incorrect input validation...

6.1CVSS6.8AI score0.00282EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/10 12:00 a.m.•35 views

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13, which originates from an application that may be able to execute arbitrary code using kernel privileges...

7.8CVSS7.4AI score0.00224EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/04 12:00 a.m.•35 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a heap buffer overflow vulnerability that is caused by incorrect boundary checking in ANGLE. An attacker can exploit this vulnerability to execute arbitrary code on the system or cause the application to...

8.8CVSS8AI score0.10199EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/01/02 12:00 a.m.•35 views

RRJ Nueva Ecija Engineer Online Portal Security Vulnerability

RRJ Nueva Ecija Engineer Online Portal is an online portal for engineers from RRJ Nueva Ecija. A security vulnerability exists in RRJ Nueva Ecija Engineer Online Portal version 1.0, which originates in the file /admin/uploads/ can lead to the exposure of file and directory information...

5.3CVSS6.7AI score0.00784EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/12/13 12:00 a.m.•35 views

Adobe InDesign 代码问题漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign has a security vulnerability that can be exploited by attackers to cause a denial of service...

5.5CVSS6.6AI score0.00303EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/12/04 12:00 a.m.•35 views

WordPress plugin Welcart e-Commerce security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.1CVSS6.1AI score0.00471EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2023/11/30 12:00 a.m.•35 views

WordPress Plugin Fast Custom Social Share by CodeBard Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

5.9CVSS5.9AI score0.00386EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/10/16 12:00 a.m.•35 views

Fiber Security Breach

Fiber is an open source web framework written in the Go language. A security vulnerability exists in Fiber that stems from the presence of a cross-site request forgery CSRF vulnerability. The vulnerability can be exploited by an attacker to obtain a token instead of the user and forge malicious...

8.8CVSS6.8AI score0.00265EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/10 12:00 a.m.•35 views

Microsoft ODBC Driver Security Vulnerability

Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to remotely execute code...

7.8CVSS7.3AI score0.01034EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/10/10 12:00 a.m.•35 views

SAP Business One 安全漏洞

SAP Business One is a set of enterprise management software from SAP. The software includes functions such as financial management, operations management and human resource management. An XML external entity injection vulnerability exists in SAP Business One version 10.0. The vulnerability stems...

4.3CVSS6.9AI score0.00318EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/10/03 12:00 a.m.•35 views

Hitachi Ops Center Administrator Log Information Disclosure Vulnerability

Hitachi Ops Center Administrator is a management interface and tool for managing and monitoring Hitachi Hitachi storage devices from Hitachi, Ltd Hitachi, Japan. A log information disclosure vulnerability exists in Hitachi Ops Center Administrator versions prior to 10.9.3-00, which originates fro...

6.5CVSS5.8AI score0.00162EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/09/12 12:00 a.m.•35 views

Microsoft Windows Codecs Library Security Vulnerability

The Microsoft Windows Codecs Library is a library of features for the Microsoft Windows system from Microsoft Corporation. A security vulnerability exists in the Microsoft Windows Codecs Library. An attacker can exploit this vulnerability to remotely execute code. The following products and...

8.8CVSS6.9AI score0.00889EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/08/23 12:00 a.m.•35 views

Apache Airflow 代码问题漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. Apache Airflow has a code issue vulnerability that can be exploited by an attacker ...

8.1CVSS7AI score0.01957EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/08/08 12:00 a.m.•35 views

Diebold Nixdorf Vynamic View Console Code Issue Vulnerability

The Diebold Nixdorf Vynamic View Console is a system from Diebold Nixdorf that allows remote changes to all PC-based devices via Intel Active Management Technology AMT BIOS management. A security vulnerability exists in Diebold Nixdorf Vynamic View Console v.5.3.1 and prior versions, which...

7.8CVSS7.5AI score0.00426EPSS
SaveExploits2References4
CNNVD
CNNVD
•added 2023/08/04 12:00 a.m.•35 views

ENS Input Validation Error Vulnerability

ENS is the registrar and local resolver implementation of the Ethereum Name Service. An input validation error vulnerability exists in Ethereum Name Service version 0.0.21 and earlier, which stems from an integer overflow problem in the renew function that allows an attacker to shorten the durati...

6.5CVSS6.7AI score0.00848EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/07/21 12:00 a.m.•35 views

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge has a security vulnerability that stems from the presence of a spoofing vulnerability...

4.7CVSS5.1AI score0.00795EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/07/11 12:00 a.m.•35 views

Microsoft Outlook 安全漏洞

Microsoft Outlook is a suite of e-mail applications from Microsoft Corporation USA. A security vulnerability exists in Microsoft Office Outlook. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and editions are affected: Microsoft Office LTSC 2021 f...

6.5CVSS7.2AI score0.03398EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/07/10 12:00 a.m.•35 views

WordPress plugin PrePost SEO 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

4.8CVSS6.3AI score0.00633EPSS
SaveExploits3References4
CNNVD
CNNVD
•added 2023/07/03 12:00 a.m.•35 views

Django 安全漏洞

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes an object-oriented mapper , view system , template system and so on. A security vulnerability exists in Django versions prior to 3.2.20, 4.1.10, and 4.2.3, which...

7.5CVSS7.3AI score0.02978EPSS
SaveExploits0References14
CNNVD
CNNVD
•added 2023/05/29 12:00 a.m.•35 views

Tuleap 跨站脚本漏洞

Tuleap is open source an application lifecycle management system that facilitates agile software development, design projects, V-modeling, requirements management and IT service management. A security vulnerability in Tuleap community versions prior to 14.8.99.60, enterprise versions prior to...

4.8CVSS5.4AI score0.00473EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/05/05 12:00 a.m.•35 views

SEMCMS 代码问题漏洞

SEMCMS is a multilingual content management system CMS for foreign trade websites. A security vulnerability exists in SEMCMS v4.2, which is caused by an arbitrary file upload vulnerability in the component SEMCMSUpfile.php, which can be exploited by an attacker to execute arbitrary code by...

9.8CVSS8.9AI score0.00776EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/05/05 12:00 a.m.•35 views

MitraStar GPT-2741GNAC-N2 安全漏洞

MitraStar GPT-2741GNAC-N2 is a fiber optic access device from China-based MitraStar Technology MitraStar. A security vulnerability exists in the MitraStar GPT-2741GNAC-N2 firmware version BRg5.91.11WVK.0b32, which originates from the inclusion of Remote Code Execution RCE in the ping function...

8.8CVSS8.2AI score0.01339EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/04/25 12:00 a.m.•35 views

SolarWinds Database Performance Analyzer 路径遍历漏洞

SolarWinds Database Performance Analyzer is a set of database performance analyzers from SolarWinds Inc. in the United States. The product is used for SQL query performance monitoring, analysis and tuning, etc. A security vulnerability exists in SolarWinds Database Performance Analyzer version...

6.5CVSS6.8AI score0.01272EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/04/25 12:00 a.m.•35 views

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. PrestaShop suffers from a SQL injection vulnerability. An attacker exploiting this vulnerability can write,...

9.9CVSS8.6AI score0.01706EPSS
SaveExploits2References5
CNNVD
CNNVD
•added 2023/04/17 12:00 a.m.•36 views

OpenZeppelin 安全漏洞

OpenZeppelin is a software application. A standard for secure blockchain applications. A security vulnerability exists in OpenZeppelin Contracts prior to version 4.8.3, which stems from the fact that if conflicting functions have different signatures and incompatible ABI encodings, an agent may...

5.3CVSS5.7AI score0.00812EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/04/14 12:00 a.m.•35 views

vm2 安全漏洞

vm2 is an advanced virtual machine/sandbox for Node.js by individual developer Patrik Simek in the Czech Republic. to run untrusted code using whitelisted Node built-in modules. A security vulnerability exists in vm2 version 3.9.15 and earlier. An attacker exploits this vulnerability to bypass...

10CVSS9.2AI score0.03852EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2023/04/10 12:00 a.m.•35 views

Apache Linkis 代码问题漏洞

Apache Linkis is a library of the U.S. Apache Apache Foundation. Helps to easily connect various backend compute/storage engines. A code execution vulnerability exists in Apache Linkis 1.3.1 and earlier versions, which stems from a lack of valid filtered parameters, and can be exploited by an...

9.8CVSS8.4AI score0.0212EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/03/29 12:00 a.m.•35 views

Rocket Software UniData 和 UniVerse 安全漏洞

Rocket Software UniVerse and Rocket Software UniData are both products of Rocket Software, Inc. Rocket Software UniVerse is a suite of database management and support software now owned by Rocket Software. Software UniData is a MultiValue application platform. Rocket Software UniData is a...

8.8CVSS8.7AI score0.0084EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/03/27 12:00 a.m.•35 views

Delta Electronics InfraSuite Device Master 命令注入漏洞

Delta Electronics InfraSuite Device Master is Delta Electronics' device for simplifying and automating critical equipment monitoring. A command injection vulnerability exists in Delta Electronics InfraSuite Device Master versions prior to 1.0.5, which can be exploited by an attacker to inject...

8.8CVSS8.6AI score0.01583EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/03/24 12:00 a.m.•35 views

WordPress plugin Calculated Fields Form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin...

4.8CVSS6.6AI score0.00473EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2023/03/17 12:00 a.m.•35 views

Online Pizza Ordering System 授权问题漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. An authorization issue vulnerability exists in version 1.0 of the SourceCodester Online Pizza Ordering System, which stems from a security issue in admin/ajax.php?action=saveuser in the...

9.8CVSS6.9AI score0.00971EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/02/28 12:00 a.m.•35 views

WordPress plugin GN Publisher 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.1CVSS6.7AI score0.0126EPSS
SaveExploits3References3
CNNVD
CNNVD
•added 2023/02/18 12:00 a.m.•35 views

Simple Food Ordering System 跨站脚本漏洞

Simple Food Ordering System is a simple food ordering system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in Simple Food Ordering System version 1.0, which stems from cross-site scripting due to misuse of the parameter order...

5.4CVSS4.9AI score0.02693EPSS
SaveExploits9References6
CNNVD
CNNVD
•added 2023/02/16 12:00 a.m.•35 views

WAGO 安全漏洞

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is an electronic system designed for the operation of digital algorithms for applications in industrial environments. A security vulnerability exists in WAGO Unmanaged Switch 852-111/000-001 firmware version 01,...

9.1CVSS8.4AI score0.00888EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/02/07 12:00 a.m.•35 views

Dompdf 安全漏洞

Dompdf is an HTML to PDF converter. A security vulnerability exists in Dompdf, which stems from the fact that Dompdf does not filter for special input...

10CVSS8.3AI score0.0249EPSS
SaveExploits3References4
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•35 views

WordPress Plugin LearnPress SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin LearnPress...

9.9CVSS8.5AI score0.04269EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•35 views

Contiki-NG 缓冲区错误漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A buffer error vulnerability exists in Contiki-NG version 4.8 and prior versions, which stems from an out-of-bounds write in the BLE-L2CAP module...

8.2CVSS7.5AI score0.00353EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/01/17 12:00 a.m.•35 views

SCS Library Client 安全漏洞

SCS Library Client is a Golang client for Singularity Container Services SCS. A security vulnerability exists in SCS Library Client. An attacker can exploit the vulnerability to perform a multi-part concurrent download...

7.6CVSS5.6AI score0.00709EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/01/13 12:00 a.m.•35 views

Siemens Teamcenter Visualization 和 JT2Go 缓冲区错误漏洞

Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. Siemens JT2GO is a JT file viewer. Siemens Teamcenter Visualization and JT2Go are vulnerable to a heap buffer overflow vulnerability that could be exploited by an attacker ...

7.8CVSS7.6AI score0.00436EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/01/09 12:00 a.m.•35 views

debug 安全漏洞

debug is a small JavaScript debugging utility open-sourced by Debug.js and modeled on core Node.js debugging techniques. A security vulnerability exists in debug versions prior to 3.1.0, which stems from the function useColors in file src/node.js, where manipulation of the parameter str leads to...

7.5CVSS5.6AI score0.02046EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/01/02 12:00 a.m.•35 views

ansible-ntp 安全漏洞

ansible-ntp is managing time synchronization, NTP servers and time zones. A security vulnerability exists in ansible-ntp that stems from insufficient control over the amount of network messages...

4.3CVSS4.8AI score0.00399EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/12/20 12:00 a.m.•35 views

Apache Airflow 命令注入漏洞

Apache Airflow is an open source platform for creating, managing and monitoring workflows from the Apache Foundation. Apache Airflow is vulnerable to a command injection vulnerability that could be exploited by remote attackers to submit ad hoc requests that could execute arbitrary commands in th...

9.8CVSS8.1AI score0.0322EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/11/14 12:00 a.m.•35 views

PortlandLabs Concrete CMS 资源管理错误漏洞

PortlandLabs Concrete CMS is a team-oriented open source content management system from PortlandLabs, Inc. in the United States. A security vulnerability exists in Concrete CMS formerly concrete5 versions prior to 8.5.10 and versions 9.0.0 through 9.1.2, which stems from the fact that its...

6.5CVSS6.4AI score0.01074EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2022/11/14 12:00 a.m.•35 views

Insyde InsydeH2O 安全漏洞

The RUGGEDCOM APE1808 is a utility-level application hosting platform that allows you to deploy a range of commercial applications for edge computing and network security in harsh industrial environments. a competitive condition vulnerability exists in the Siemens RUGGEDCOM APE1808 product family...

6.4CVSS6.7AI score0.00156EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2022/10/26 12:00 a.m.•36 views

Delta Electronics InfraSuite Device Master 路径遍历漏洞

Delta Electronics InfraSuite Device Master is a device used to simplify and automate the monitoring of critical equipment from Delta Electronics Taiwan, China. A path traversal vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.01a and prior versions, which stems from allowi...

9.8CVSS8.6AI score0.20898EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/10/18 12:00 a.m.•35 views

Apache Dubbo 代码问题漏洞

Apache Dubbo is a microservice development framework that provides two key capabilities for RPC communication and microservice governance.Apache Dubbo Hession is vulnerable to deserialization, which can be exploited by attackers to execute arbitrary code on the target server...

9.8CVSS7.8AI score0.02624EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/10/18 12:00 a.m.•35 views

Canteen Management System SQL注入漏洞

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. A security vulnerability exists in Canteen Management System version 1.0, which stems from unknown code in the file login.php is affected, and manipulation of the parameter business may result in sql...

9.8CVSS8.2AI score0.00722EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/10/11 12:00 a.m.•35 views

SAP Customer Data Cloud 加密问题漏洞

SAP Customer Data Cloud is a tool from SAP Germany that provides digital customer identity and access management. It enables companies to collect, aggregate and manage customer data across multiple touch points and applications. An encryption issue vulnerability exists in SAP Customer Data Cloud...

5.2CVSS6.9AI score0.00174EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/10/07 12:00 a.m.•35 views

Apache Airflow 代码问题漏洞

Apache Airflow is an open source platform for creating, managing, and monitoring workflows from the Apache Foundation. Apache Airflow 2.4.1 and earlier versions have a code issue vulnerability that stems from the failure of deactivated users to prevent authenticated users from continuing to use t...

8.1CVSS6.9AI score0.01322EPSS
SaveExploits0References3
Total number of security vulnerabilities5000