Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

Microsoft Windows NTLM 日志信息泄露漏洞

Microsoft Windows is an operating system used on personal devices by the American company Microsoft. Microsoft Windows NTLM has a vulnerability that allows for information leakage. Attackers can exploit this vulnerability to obtain sensitive information. The following products and versions are...

7.5CVSS6.6AI score0.00922EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

Microsoft Windows Shell 信息泄露漏洞

Microsoft Windows Shell is the graphical user interface of the Windows operating system developed by Microsoft Corporation. Key elements of the Windows Shell include the desktop, taskbar, start menu, task switcher, and autoplay features. There is an information leakage vulnerability present in...

5.5CVSS5.3AI score0.00479EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

Microsoft Function Discovery Service (fdwsd.dll) 竞争条件问题漏洞

The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are competition-related vulnerabilities in the Microsoft Function Discovery Service fdwsd.dll. The following products and versions are affected: Windows 11 Version 26H1 for ARM64-based System...

7CVSS5.8AI score0.00202EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

Dolibarr ERP CRM 安全漏洞

Dolibarr ERP CRM is an open-source enterprise and sales management system developed by Dolibarr. Versions of Dolibarr ERP CRM prior to 23.0.2 contain security vulnerabilities. These vulnerabilities stem from unauthorized permissions granted to unknown functions in the...

6.5CVSS6.5AI score0.00209EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

Evoluted PHP Directory Listing Script 跨站脚本漏洞

Evoluted PHP Directory Listing Script is a PHP-based directory indexing and file browsing script developed by the British company Evoluted. Versions of Evoluted PHP Directory Listing Script 4.0.5 and earlier contained a cross-site scripting vulnerability. This vulnerability stemmed from the dir...

5.4CVSS5.2AI score0.00327EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

Mozilla Focus for iOS和Mozilla Klar for iOS 安全漏洞

Mozilla Focus for iOS and Mozilla Klar for iOS are mobile web browsers designed with privacy protection in mind by the American Mozilla Foundation. Both browsers have cross-site scripting vulnerabilities. These vulnerabilities arise due to improper input validation during the Webkit navigation...

7.5CVSS5.8AI score0.00216EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

Microsoft Windows Ancillary Function Driver for WinSock 缓冲区错误漏洞

The Microsoft Windows Ancillary Function Driver for WinSock is a supplementary function driver for Winsock by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit these vulnerabilities to gain...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

Microsoft Windows Telephony Server 缓冲区错误漏洞

Microsoft Windows Telephony Server is a component of the American company Microsoft. It supports the Telephone Application Programming Interface TAPI, allowing computer programs to communicate with shared telephone services. There is a buffer error vulnerability present in Microsoft Windows...

5.5CVSS5.6AI score0.00404EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

Adobe InDesign Desktop 安全漏洞

Adobe InDesign Desktop is a professional desktop publishing application, primarily used for page layout design in print and digital media. Adobe InDesign Desktop has a buffer overflow vulnerability that stems from improper handling of malicious files during user interactions. Attackers can exploi...

7.8CVSS6.5AI score0.00337EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

Adobe ColdFusion 输入验证错误漏洞

Adobe ColdFusion is a rapid application development platform provided by Adobe Inc. This platform includes an integrated development environment and a scripting language. Versions of Adobe ColdFusion such as 2023.19, 2025.8, and earlier versions have a vulnerability related to input validation...

8.1CVSS5.3AI score0.00866EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

WordPress plugin MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.4CVSS5.3AI score0.00419EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

Microsoft Windows UI Automation Manager (uiamanager.dll) 竞争条件问题漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There is a vulnerability related to the Microsoft Windows UI Automation Manager uiamanager.dll. Attackers can exploit this vulnerability to gain higher privileges. The following products and...

7CVSS5.9AI score0.00202EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

Microsoft Exchange Server 授权问题漏洞

Microsoft Exchange Server is a email service program provided by the American company Microsoft. It offers features such as email access, storage, forwarding, voicemail handling, and email filtering. There are vulnerabilities related to authorization in Microsoft Exchange Server. Attackers can...

8.1CVSS5.3AI score0.00863EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

Microsoft Windows Kernel 缓冲区错误漏洞

The Microsoft Windows Kernel is the kernel of the Windows operating system developed by Microsoft Corporation. There are security vulnerabilities in the Microsoft Windows Kernel. Attackers can exploit these vulnerabilities to execute code. The following products and versions are affected: Windows...

9.8CVSS6.1AI score0.00974EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

VMware Spring HATEOAS 访问控制错误漏洞

VMware Spring HATEOAS is a REST API hypermedia development framework provided by the American company VMware. Vulnerabilities in access control exist in versions 1.5.0 to 1.5.6, 2.3.0 to 2.3.4, 2.4.0 to 2.4.1, 2.5.0 to 2.5.2, and 3.0.0 to 3.0.3 of VMware Spring HATEOAS. This vulnerability stems...

7.5CVSS5.3AI score0.00426EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•34 views

SAP NetWeaver Application Server Java 安全漏洞

SAP NetWeaver Application Server Java is an application server provided by the German company SAP, which offers a Java runtime environment. This product is primarily used for developing and running Java EE applications. SAP NetWeaver Application Server Java has a security vulnerability that stems...

9CVSS5.3AI score0.00626EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/08 12:00 a.m.•34 views

SourceCodester Inventory System 安全漏洞

The SourceCodester Inventory System is an open-source inventory system developed by SourceCodester. Version 1.0 of the SourceCodester Inventory System contains a security vulnerability. This vulnerability stems from the operation of the ROLE parameter in the Account Creation Handler component...

6.5CVSS6.4AI score0.00261EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/07 12:00 a.m.•34 views

GL.iNet GL-MT3000 命令注入漏洞

GL.iNet GL-MT3000 is a portable travel router from the company GL.iNet, which supports Wi-Fi 6 and VPN functions. Versions of GL.iNet GL-MT3000 with a version number of 4.4.5 or earlier have a command injection vulnerability. This vulnerability stems from incorrect operations with the parameter...

5.8CVSS5.1AI score0.01582EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/06/05 12:00 a.m.•34 views

Code-Projects Vehicle Management System 代码问题漏洞

The Code-Projects Vehicle Management System is an open-source vehicle management system developed by Code-Projects. Version 1.0 of the Code-Projects Vehicle Management System has code-related vulnerabilities. These vulnerabilities stem from improper handling of parameters in the newdriver.php fil...

7.5CVSS7.3AI score0.00366EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/06/05 12:00 a.m.•34 views

SourceCodester Ship Ferry Ticket Reservation System 授权问题漏洞

The SourceCodester Ship Ferry Ticket Reservation System is an open-source booking system developed by SourceCodester. Version 1.0 of the SourceCodester Ship Ferry Ticket Reservation System has a vulnerability related to authorization issues. This vulnerability arises from improper handling of the...

6.5CVSS6.4AI score0.0027EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/06/05 12:00 a.m.•34 views

Linqi 安全漏洞

Linqi is an English speaking practice platform developed by the German company Linqi. It combines human language interaction with AI-based feedback. Linqi has a security vulnerability, which stems from hard-coded encryption keys and weak algorithms for generating initialization vectors. This allo...

8.5CVSS5.3AI score0.00073EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•34 views

Zephyr 安全漏洞

Zephyr is an open-source, scalable real-time operating system RTOS developed by Zephyr. There is a security vulnerability in Zephyr, which stems from the fact that the tlssessionstore and tlssessionrestore functions in the TLS socket connection path do not validate the addrlen value. This leads t...

8.8CVSS5.8AI score0.00467EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•34 views

Node Version Manager 安全漏洞

Node Version Manager is an open-source node version manager developed by nvm.sh. Versions of Node Version Manager prior to 0.40.4 contain security vulnerabilities. These vulnerabilities stem from the ability to execute arbitrary commands from the configured image version string. The functions...

7.5CVSS5.9AI score0.04997EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•34 views

WordPress plugin Popup Builder 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

5.4CVSS5.3AI score0.00171EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•34 views

GNCC GP5 信息泄露漏洞

GNCC GP5 is a 2K indoor security camera produced by GNCC Corporation. The GNCC GP5 v7.1.76 version contains a security vulnerability. This vulnerability arises from the fact that the “Reset to Factory Settings” function fails to remove sensitive encrypted data from the JFFS2 configuration...

4.6CVSS5.9AI score0.00207EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/02 12:00 a.m.•34 views

Klaw 访问控制错误漏洞

Klaw is an open-source operating system tool developed by Aiven Open. Versions of Klaw prior to 2.10.4 contained a vulnerability related to access control, which could lead to password hash leaks due to improper access control practices...

6.9CVSS5.3AI score0.00421EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/02 12:00 a.m.•34 views

Prefect 安全漏洞

Prefect is a workflow orchestration tool developed by Prefect OpenSource, enabling developers to build, monitor data pipelines, and respond to changes in those pipelines. Version 3.6.19 of Prefect contains a security vulnerability. This vulnerability stems from improper handling of URL paths for...

7.5CVSS5.3AI score0.00628EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•34 views

DeepAI 安全漏洞

DeepAI is a generative artificial intelligence platform developed by DeepAI Inc. in the United States. There is a security vulnerability in DeepAI. This vulnerability stems from the endpoint https://api.deepai.org/changeuseremail, which accepts POST requests without CSRF protection. This could...

5CVSS5.4AI score0.00158EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•34 views

sglang 安全漏洞

SGLang is a programming language and runtime system developed by SGL-project, aimed at accelerating large model inference. Version SGLang 0.5.10.post1 contains a security vulnerability. This vulnerability stems from an unknown function in the Inference HTTP Endpoint component file...

6.3CVSS4.9AI score0.00368EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•34 views

Qualcomm Chipsets 代码问题漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporation. Qualcomm Chipsets have code-related vulnerabilities, which stem from memory corruption during memory copy operations due to null pointers...

7.8CVSS5.5AI score0.00075EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•34 views

CodeAstro Ingredients Stock Management System SQL注入漏洞

The CodeAstro Ingredients Stock Management System is a inventory management system developed by CodeAstro Inc. Version 1.0 of the CodeAstro Ingredients Stock Management System has a SQL injection vulnerability. This vulnerability arises from incorrect operations with the parameter txtsearchcatego...

6.5CVSS6.6AI score0.002EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/05/31 12:00 a.m.•34 views

TRENDnet TEW-432BRP 命令注入漏洞

TRENDnet TEW-432BRP is a dual-band wireless router produced by the TRENDnet company. The TRENDnet TEW-432BRP 3.10B20 version has a command injection vulnerability. This vulnerability stems from the parameter sysCmd in the formSysCmd function within the goform/formSysCmd file, which allows for...

6.5CVSS6.6AI score0.0105EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/29 12:00 a.m.•34 views

FastGPT 代码问题漏洞

FastGPT is an open-source knowledge base question-answering system based on large language models developed by Labring. Versions of FastGPT prior to 4.15.0-beta1 contained code vulnerabilities. These vulnerabilities were caused by server-side request forgery, allowing authenticated attackers to...

7.7CVSS6AI score0.00361EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•34 views

Nautobot 安全漏洞

Nautobot is a web-based automation platform developed by the Nautobot team. Versions of Nautobot prior to 2.4.33 and 3.1.2 contained security vulnerabilities. These vulnerabilities stemmed from users who had permission to add/modify GitRepository records being able to directly set the currenthead...

7.1CVSS5.8AI score0.00498EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•34 views

Zed 安全漏洞

Zed is a code editor developed by Zed Industries. Versions of Zed prior to 0.227.1 contained a security vulnerability. This vulnerability stemmed from the abuse of the core.fsmonitor Git configuration option when opening folders containing malicious.git/config files. This allowed attackers to...

8.6CVSS6.2AI score0.00261EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•34 views

Oracle Internet Procurement Connector 安全漏洞

The Oracle Internet Procurement Connector is a corporate procurement system integration and data exchange component developed by Oracle, a company in the United States. Versions 12.2.3 to 12.2.15 of the Oracle Internet Procurement Connector contain security vulnerabilities. These vulnerabilities...

9.1CVSS5.8AI score0.00425EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•34 views

Canonical Ubuntu Linux 安全漏洞

Canonical Ubuntu Linux is a Linux operating system developed by the British company Canonical. The Canonical Ubuntu Linux 6.8 version contained a security vulnerability. This vulnerability stemmed from the AppArmor AFINET/AFINET6 socket mediation code, where uninitialized variables might have bee...

3.3CVSS5.8AI score0.00132EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•34 views

Canonical Ubuntu Linux 安全漏洞

Canonical Ubuntu Linux is a Linux operating system developed by the British company Canonical. The Canonical Ubuntu Linux versions 6.8, 6.17, and 7.0 have security vulnerabilities. These vulnerabilities stem from an incorrect calculation of the internal buffer size, which may lead to out-of-bound...

7.8CVSS5.9AI score0.00154EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•34 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from inconsistent fsck operations during the block migration of f2fs FGGC nodes. This vulnerability ma...

7.1CVSS5.8AI score0.00169EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•35 views

TP-Link多款产品 安全漏洞

TP-Link Tapo L535E are products of the TP-Link company from China. The TP-Link Tapo L535E is a smart color-adjustable LED bulb. The TP-Link Tapo P300 is a smart Wi-Fi multi-port plug-in device. The TP-Link Tapo D100C is a smart video doorbell with a wireless doorbell buzzer. Several TP-Link...

7.3CVSS5.9AI score0.00129EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•34 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of prohibition for private IOCTL commands in the atomic ISP driver, potentially leading ...

7.8CVSS5.8AI score0.00179EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•34 views

MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECT24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymbCONNECT24 is an internal...

7.1CVSS5.9AI score0.00379EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•34 views

go-ipld-prime 安全漏洞

go-ipld-prime is an implementation of the IPLD open-source specification interface. Versions of go-ipld-prime prior to 0.23.0 contained security vulnerabilities. These vulnerabilities stemmed from the DAG-CBOR and DAG-JSON decoders having no depth limit when decoding nested mappings or lists, whi...

6.2CVSS5.8AI score0.00156EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•34 views

Synology DiskStation Manager(DSM) 代码问题漏洞

Synology DiskStation Manager DSM is an operating system developed by Synology Inc. It is used for managing data, files, photos, music, and other information on network storage servers. Versions of DSM prior to 7.2.2.6-72806-5 and 7.3.1.8-86003-1 contained code vulnerabilities. These vulnerabiliti...

8.1CVSS6.7AI score0.00533EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•34 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the GMAC4 split header in net/stmmac. When this split header is enabled, the hardware does not fi...

5.8AI score0.0016EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•34 views

Gradio 安全漏洞

Gradio is an open-source Python library developed by Google. It provides a user-friendly web interface for demonstrating machine learning models. Prior to version 6.15.0, Gradio had a security vulnerability. This vulnerability stemmed from the use of shared module-level HTTP clients, which allowe...

7.6CVSS5.8AI score0.0047EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•34 views

TOTOLINK CA750-PoE 操作系统命令注入漏洞

TOTOLINK CA750-PoE is a wireless network access device developed by TOTOLINK Corporation. Version 6.2c.510 of TOTOLINK CA750-PoE contains a vulnerability related to operating system command injection. This vulnerability arises from improper handling of the fwUrl/magicid parameters in the...

6.5CVSS6.6AI score0.01768EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•34 views

Check Point Quantum Security Gateway 安全漏洞

Check Point Quantum Security Gateway is a series of enterprise-level security gateway devices developed by the Israeli company Check Point. There is a security vulnerability in Check Point Quantum Security Gateway. This vulnerability stems from the improper handling of unexpected IKE fragment...

8.1CVSS5.8AI score0.00404EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/25 12:00 a.m.•34 views

MLflow 安全漏洞

MLflow is an open source platform from MLflow that simplifies machine learning development, including tracking experiments, packaging code into repeatable runs, and sharing and deploying models. A security vulnerability exists in MLflow 3.10.1.dev0 and prior versions, which stems from the...

9CVSS7.6AI score0.00536EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/05/24 12:00 a.m.•34 views

H3C Magic B0 安全漏洞

H3C Magic B0 is a small wireless router produced by H3C Corporation. The H3C Magic B0 100R002 and earlier versions have security vulnerabilities. These vulnerabilities stem from improper handling of parameters in the function EditBasicSSID5G within the file/goform/aspForm. This may lead to a remo...

9CVSS7.6AI score0.00805EPSS
SaveExploits0References5
Total number of security vulnerabilities5000