Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
•added 2023/10/03 12:00 a.m.•35 views

Hitachi Ops Center Administrator Log Information Disclosure Vulnerability

Hitachi Ops Center Administrator is a management interface and tool for managing and monitoring Hitachi Hitachi storage devices from Hitachi, Ltd Hitachi, Japan. A log information disclosure vulnerability exists in Hitachi Ops Center Administrator versions prior to 10.9.3-00, which originates fro...

6.5CVSS5.8AI score0.00162EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/08/23 12:00 a.m.•35 views

Apache Airflow 代码问题漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. Apache Airflow has a code issue vulnerability that can be exploited by an attacker ...

8.1CVSS7AI score0.01957EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/08/08 12:00 a.m.•35 views

Diebold Nixdorf Vynamic View Console Code Issue Vulnerability

The Diebold Nixdorf Vynamic View Console is a system from Diebold Nixdorf that allows remote changes to all PC-based devices via Intel Active Management Technology AMT BIOS management. A security vulnerability exists in Diebold Nixdorf Vynamic View Console v.5.3.1 and prior versions, which...

7.8CVSS7.5AI score0.00426EPSS
SaveExploits2References4
CNNVD
CNNVD
•added 2023/08/04 12:00 a.m.•35 views

ENS Input Validation Error Vulnerability

ENS is the registrar and local resolver implementation of the Ethereum Name Service. An input validation error vulnerability exists in Ethereum Name Service version 0.0.21 and earlier, which stems from an integer overflow problem in the renew function that allows an attacker to shorten the durati...

6.5CVSS6.7AI score0.00848EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/07/21 12:00 a.m.•35 views

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge has a security vulnerability that stems from the presence of a spoofing vulnerability...

4.7CVSS5.1AI score0.00795EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/07/11 12:00 a.m.•35 views

Microsoft Outlook 安全漏洞

Microsoft Outlook is a suite of e-mail applications from Microsoft Corporation USA. A security vulnerability exists in Microsoft Office Outlook. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and editions are affected: Microsoft Office LTSC 2021 f...

6.5CVSS7.2AI score0.03398EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/07/10 12:00 a.m.•35 views

WordPress plugin PrePost SEO 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

4.8CVSS6.3AI score0.00633EPSS
SaveExploits3References4
CNNVD
CNNVD
•added 2023/07/03 12:00 a.m.•35 views

Django 安全漏洞

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes an object-oriented mapper , view system , template system and so on. A security vulnerability exists in Django versions prior to 3.2.20, 4.1.10, and 4.2.3, which...

7.5CVSS7.3AI score0.02978EPSS
SaveExploits0References14
CNNVD
CNNVD
•added 2023/05/29 12:00 a.m.•35 views

Tuleap 跨站脚本漏洞

Tuleap is open source an application lifecycle management system that facilitates agile software development, design projects, V-modeling, requirements management and IT service management. A security vulnerability in Tuleap community versions prior to 14.8.99.60, enterprise versions prior to...

4.8CVSS5.4AI score0.00473EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/05/05 12:00 a.m.•35 views

SEMCMS 代码问题漏洞

SEMCMS is a multilingual content management system CMS for foreign trade websites. A security vulnerability exists in SEMCMS v4.2, which is caused by an arbitrary file upload vulnerability in the component SEMCMSUpfile.php, which can be exploited by an attacker to execute arbitrary code by...

9.8CVSS8.9AI score0.00776EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/05/05 12:00 a.m.•35 views

MitraStar GPT-2741GNAC-N2 安全漏洞

MitraStar GPT-2741GNAC-N2 is a fiber optic access device from China-based MitraStar Technology MitraStar. A security vulnerability exists in the MitraStar GPT-2741GNAC-N2 firmware version BRg5.91.11WVK.0b32, which originates from the inclusion of Remote Code Execution RCE in the ping function...

8.8CVSS8.2AI score0.01339EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/04/25 12:00 a.m.•35 views

SolarWinds Database Performance Analyzer 路径遍历漏洞

SolarWinds Database Performance Analyzer is a set of database performance analyzers from SolarWinds Inc. in the United States. The product is used for SQL query performance monitoring, analysis and tuning, etc. A security vulnerability exists in SolarWinds Database Performance Analyzer version...

6.5CVSS6.8AI score0.01272EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/04/25 12:00 a.m.•35 views

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. PrestaShop suffers from a SQL injection vulnerability. An attacker exploiting this vulnerability can write,...

9.9CVSS8.6AI score0.01706EPSS
SaveExploits2References5
CNNVD
CNNVD
•added 2023/04/17 12:00 a.m.•36 views

OpenZeppelin 安全漏洞

OpenZeppelin is a software application. A standard for secure blockchain applications. A security vulnerability exists in OpenZeppelin Contracts prior to version 4.8.3, which stems from the fact that if conflicting functions have different signatures and incompatible ABI encodings, an agent may...

5.3CVSS5.7AI score0.00812EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/04/14 12:00 a.m.•35 views

vm2 安全漏洞

vm2 is an advanced virtual machine/sandbox for Node.js by individual developer Patrik Simek in the Czech Republic. to run untrusted code using whitelisted Node built-in modules. A security vulnerability exists in vm2 version 3.9.15 and earlier. An attacker exploits this vulnerability to bypass...

10CVSS9.2AI score0.03852EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2023/04/10 12:00 a.m.•35 views

Apache Linkis 代码问题漏洞

Apache Linkis is a library of the U.S. Apache Apache Foundation. Helps to easily connect various backend compute/storage engines. A code execution vulnerability exists in Apache Linkis 1.3.1 and earlier versions, which stems from a lack of valid filtered parameters, and can be exploited by an...

9.8CVSS8.4AI score0.0212EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/04/04 12:00 a.m.•35 views

etcd 授权问题漏洞

etcd is a key-value storage system for distributed systems written in the Go language. A security vulnerability exists in Etcd-io version v.3.4.10. A remote attacker could exploit the vulnerability to elevate privileges via the debugging feature...

9.8CVSS7AI score0.01618EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2023/03/29 12:00 a.m.•35 views

Rocket Software UniData 和 UniVerse 安全漏洞

Rocket Software UniVerse and Rocket Software UniData are both products of Rocket Software, Inc. Rocket Software UniVerse is a suite of database management and support software now owned by Rocket Software. Software UniData is a MultiValue application platform. Rocket Software UniData is a...

8.8CVSS8.7AI score0.0084EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/03/27 12:00 a.m.•35 views

Delta Electronics InfraSuite Device Master 命令注入漏洞

Delta Electronics InfraSuite Device Master is Delta Electronics' device for simplifying and automating critical equipment monitoring. A command injection vulnerability exists in Delta Electronics InfraSuite Device Master versions prior to 1.0.5, which can be exploited by an attacker to inject...

8.8CVSS8.6AI score0.01583EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/03/24 12:00 a.m.•35 views

WordPress plugin Calculated Fields Form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin...

4.8CVSS6.6AI score0.00473EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2023/03/17 12:00 a.m.•35 views

Online Pizza Ordering System 授权问题漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. An authorization issue vulnerability exists in version 1.0 of the SourceCodester Online Pizza Ordering System, which stems from a security issue in admin/ajax.php?action=saveuser in the...

9.8CVSS6.9AI score0.00971EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/02/28 12:00 a.m.•35 views

WordPress plugin GN Publisher 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.1CVSS6.7AI score0.0126EPSS
SaveExploits3References3
CNNVD
CNNVD
•added 2023/02/18 12:00 a.m.•35 views

Simple Food Ordering System 跨站脚本漏洞

Simple Food Ordering System is a simple food ordering system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in Simple Food Ordering System version 1.0, which stems from cross-site scripting due to misuse of the parameter order...

5.4CVSS4.9AI score0.02693EPSS
SaveExploits9References6
CNNVD
CNNVD
•added 2023/02/16 12:00 a.m.•35 views

WAGO 安全漏洞

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is an electronic system designed for the operation of digital algorithms for applications in industrial environments. A security vulnerability exists in WAGO Unmanaged Switch 852-111/000-001 firmware version 01,...

9.1CVSS8.4AI score0.00888EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/02/07 12:00 a.m.•35 views

Dompdf 安全漏洞

Dompdf is an HTML to PDF converter. A security vulnerability exists in Dompdf, which stems from the fact that Dompdf does not filter for special input...

10CVSS8.3AI score0.0249EPSS
SaveExploits3References4
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•35 views

WordPress Plugin LearnPress SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin LearnPress...

9.9CVSS8.5AI score0.04269EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•35 views

Contiki-NG 缓冲区错误漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A buffer error vulnerability exists in Contiki-NG version 4.8 and prior versions, which stems from an out-of-bounds write in the BLE-L2CAP module...

8.2CVSS7.5AI score0.00353EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/01/17 12:00 a.m.•35 views

SCS Library Client 安全漏洞

SCS Library Client is a Golang client for Singularity Container Services SCS. A security vulnerability exists in SCS Library Client. An attacker can exploit the vulnerability to perform a multi-part concurrent download...

7.6CVSS5.6AI score0.00709EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/01/13 12:00 a.m.•35 views

Siemens Teamcenter Visualization 和 JT2Go 缓冲区错误漏洞

Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. Siemens JT2GO is a JT file viewer. Siemens Teamcenter Visualization and JT2Go are vulnerable to a heap buffer overflow vulnerability that could be exploited by an attacker ...

7.8CVSS7.6AI score0.00436EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/01/09 12:00 a.m.•35 views

debug 安全漏洞

debug is a small JavaScript debugging utility open-sourced by Debug.js and modeled on core Node.js debugging techniques. A security vulnerability exists in debug versions prior to 3.1.0, which stems from the function useColors in file src/node.js, where manipulation of the parameter str leads to...

7.5CVSS5.6AI score0.02046EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/01/02 12:00 a.m.•35 views

ansible-ntp 安全漏洞

ansible-ntp is managing time synchronization, NTP servers and time zones. A security vulnerability exists in ansible-ntp that stems from insufficient control over the amount of network messages...

4.3CVSS4.8AI score0.00399EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/12/20 12:00 a.m.•35 views

Apache Airflow 命令注入漏洞

Apache Airflow is an open source platform for creating, managing and monitoring workflows from the Apache Foundation. Apache Airflow is vulnerable to a command injection vulnerability that could be exploited by remote attackers to submit ad hoc requests that could execute arbitrary commands in th...

9.8CVSS8.1AI score0.0322EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/11/14 12:00 a.m.•35 views

PortlandLabs Concrete CMS 资源管理错误漏洞

PortlandLabs Concrete CMS is a team-oriented open source content management system from PortlandLabs, Inc. in the United States. A security vulnerability exists in Concrete CMS formerly concrete5 versions prior to 8.5.10 and versions 9.0.0 through 9.1.2, which stems from the fact that its...

6.5CVSS6.4AI score0.01074EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2022/11/14 12:00 a.m.•35 views

Insyde InsydeH2O 安全漏洞

The RUGGEDCOM APE1808 is a utility-level application hosting platform that allows you to deploy a range of commercial applications for edge computing and network security in harsh industrial environments. a competitive condition vulnerability exists in the Siemens RUGGEDCOM APE1808 product family...

6.4CVSS6.7AI score0.00156EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2022/10/26 12:00 a.m.•36 views

Delta Electronics InfraSuite Device Master 路径遍历漏洞

Delta Electronics InfraSuite Device Master is a device used to simplify and automate the monitoring of critical equipment from Delta Electronics Taiwan, China. A path traversal vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.01a and prior versions, which stems from allowi...

9.8CVSS8.6AI score0.20898EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/10/18 12:00 a.m.•35 views

Apache Dubbo 代码问题漏洞

Apache Dubbo is a microservice development framework that provides two key capabilities for RPC communication and microservice governance.Apache Dubbo Hession is vulnerable to deserialization, which can be exploited by attackers to execute arbitrary code on the target server...

9.8CVSS7.8AI score0.02624EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/10/18 12:00 a.m.•35 views

Canteen Management System SQL注入漏洞

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. A security vulnerability exists in Canteen Management System version 1.0, which stems from unknown code in the file login.php is affected, and manipulation of the parameter business may result in sql...

9.8CVSS8.2AI score0.00722EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/10/11 12:00 a.m.•35 views

SAP Customer Data Cloud 加密问题漏洞

SAP Customer Data Cloud is a tool from SAP Germany that provides digital customer identity and access management. It enables companies to collect, aggregate and manage customer data across multiple touch points and applications. An encryption issue vulnerability exists in SAP Customer Data Cloud...

5.2CVSS6.9AI score0.00172EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/10/07 12:00 a.m.•35 views

Apache Airflow 代码问题漏洞

Apache Airflow is an open source platform for creating, managing, and monitoring workflows from the Apache Foundation. Apache Airflow 2.4.1 and earlier versions have a code issue vulnerability that stems from the failure of deactivated users to prevent authenticated users from continuing to use t...

8.1CVSS6.9AI score0.01322EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/09/27 12:00 a.m.•35 views

Wazuh 安全漏洞

Wazuh is an Wazuh open source application. Wazuh 3.6.1 and later, 3.13.5 and earlier, 4.0.0 and later, 4.2.7 and earlier, and 4.3.0 and later, 4.3.7 and earlier are vulnerable to a code execution vulnerability that stems from Active Response endpoint fails to properly filter the special elements ...

8.8CVSS7.8AI score0.01575EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/09/16 12:00 a.m.•35 views

WordPress plugin Migration, Backup, Staging 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exists in th...

4.9CVSS5.4AI score0.25286EPSS
SaveExploits3References5
CNNVD
CNNVD
•added 2022/09/13 12:00 a.m.•35 views

Microsoft .NET Framework 安全漏洞

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a development platform. The platform includes the C and Visual Basic programming languages, a public language runtime library, and an extensive class library. A security vulnerability...

7.8CVSS7.6AI score0.01559EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/09/13 12:00 a.m.•35 views

Siemens RUGGEDCOM Series 资源管理错误漏洞

Siemens RuggedCom ROS is an operating system used in the RuggedCom family of switches from Siemens, Germany. Siemens RUGGEDCOM ROS suffers from a denial-of-service vulnerability that could be exploited by an attacker to create a denial-of-service condition that lasts until the end of the attack...

7.5CVSS6.7AI score0.01457EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2022/08/29 12:00 a.m.•35 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a security vulnerability that stems from a flaw in its netrdsallocsgs that allows unprivileged local users to crash their computers...

6.2CVSS6.7AI score0.00363EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2022/08/16 12:00 a.m.•35 views

Apache Airflow 安全漏洞

Apache Airflow is an open source platform for creating, managing and monitoring workflows from the Apache Foundation. The platform is scalable and dynamically monitored, etc. A remote code execution vulnerability exists in versions of Apache Airflow prior to 3.0.0. The vulnerability stems from th...

8.8CVSS8.3AI score0.01857EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/08/04 12:00 a.m.•35 views

Contiki-NG 安全漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A security vulnerability exists in Contiki-NG 4.7 and earlier versions, which stems from a buffer overflow that could be caused when an attacker copies an IPv6 address prefix in the...

8.1CVSS8AI score0.01287EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/07/21 12:00 a.m.•35 views

Node.js 安全漏洞

Node.js is an open source, cross-platform JavaScript runtime environment. A security vulnerability exists in Node.js version 16.5.4 and versions prior to 17.1.3 in the 17.x series, which stems from the fact that an incorrectly formatted MKV file may cause the file type detector to fall into an...

5.5CVSS6.1AI score0.00406EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2022/07/18 12:00 a.m.•35 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is China Foxit Foxit company a PDF reader. Foxit PDF Reader suffers from a resource management error vulnerability that stems from a specific flaw in the handling of Doc objects, which can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS5.9AI score0.01923EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/07/11 12:00 a.m.•35 views

H3C SSL VPN 跨站脚本漏洞

H3C SSL VPN is a secure session layer VPN from China's Xinhua San H3C. A cross-site scripting vulnerability exists in H3C SSL VPN 2022-07-10 and prior versions, which can be exploited by remote attackers to allow wnm/login/login.json svpnlang cross-site scripting attacks...

6.1CVSS5.3AI score0.02948EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/07/08 12:00 a.m.•35 views

Known 跨站脚本漏洞

Known is a social publishing platform open-sourced by Known in the United States. A security vulnerability exists in Known v1.3.1 and below, which stems from an issue with the isSVG function that allows an attacker to execute arbitrary code via a crafted SVG file...

6.1CVSS6.8AI score0.01369EPSS
SaveExploits1References4
Total number of security vulnerabilities5000