Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•34 views

Canonical Ubuntu Linux 安全漏洞

Canonical Ubuntu Linux is a Linux operating system developed by the British company Canonical. The Canonical Ubuntu Linux versions 6.8, 6.17, and 7.0 have security vulnerabilities. These vulnerabilities stem from an incorrect calculation of the internal buffer size, which may lead to out-of-bound...

7.8CVSS5.9AI score0.00154EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•34 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from inconsistent fsck operations during the block migration of f2fs FGGC nodes. This vulnerability ma...

7.1CVSS5.8AI score0.00169EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•35 views

TP-Link多款产品 安全漏洞

TP-Link Tapo L535E are products of the TP-Link company from China. The TP-Link Tapo L535E is a smart color-adjustable LED bulb. The TP-Link Tapo P300 is a smart Wi-Fi multi-port plug-in device. The TP-Link Tapo D100C is a smart video doorbell with a wireless doorbell buzzer. Several TP-Link...

7.3CVSS5.9AI score0.00129EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•34 views

MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECT24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymbCONNECT24 is an internal...

7.1CVSS5.9AI score0.00379EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•34 views

go-ipld-prime 安全漏洞

go-ipld-prime is an implementation of the IPLD open-source specification interface. Versions of go-ipld-prime prior to 0.23.0 contained security vulnerabilities. These vulnerabilities stemmed from the DAG-CBOR and DAG-JSON decoders having no depth limit when decoding nested mappings or lists, whi...

6.2CVSS5.8AI score0.00156EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•34 views

Synology DiskStation Manager(DSM) 代码问题漏洞

Synology DiskStation Manager DSM is an operating system developed by Synology Inc. It is used for managing data, files, photos, music, and other information on network storage servers. Versions of DSM prior to 7.2.2.6-72806-5 and 7.3.1.8-86003-1 contained code vulnerabilities. These vulnerabiliti...

8.1CVSS6.7AI score0.00533EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•34 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the GMAC4 split header in net/stmmac. When this split header is enabled, the hardware does not fi...

5.8AI score0.0016EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•34 views

Gradio 安全漏洞

Gradio is an open-source Python library developed by Google. It provides a user-friendly web interface for demonstrating machine learning models. Prior to version 6.15.0, Gradio had a security vulnerability. This vulnerability stemmed from the use of shared module-level HTTP clients, which allowe...

7.6CVSS5.8AI score0.0047EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•34 views

TOTOLINK CA750-PoE 操作系统命令注入漏洞

TOTOLINK CA750-PoE is a wireless network access device developed by TOTOLINK Corporation. Version 6.2c.510 of TOTOLINK CA750-PoE contains a vulnerability related to operating system command injection. This vulnerability arises from improper handling of the fwUrl/magicid parameters in the...

6.5CVSS6.6AI score0.01768EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•34 views

Check Point Quantum Security Gateway 安全漏洞

Check Point Quantum Security Gateway is a series of enterprise-level security gateway devices developed by the Israeli company Check Point. There is a security vulnerability in Check Point Quantum Security Gateway. This vulnerability stems from the improper handling of unexpected IKE fragment...

8.1CVSS5.8AI score0.00404EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/25 12:00 a.m.•34 views

MLflow 安全漏洞

MLflow is an open source platform from MLflow that simplifies machine learning development, including tracking experiments, packaging code into repeatable runs, and sharing and deploying models. A security vulnerability exists in MLflow 3.10.1.dev0 and prior versions, which stems from the...

9CVSS7.6AI score0.00536EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/05/24 12:00 a.m.•34 views

H3C Magic B0 安全漏洞

H3C Magic B0 is a small wireless router produced by H3C Corporation. The H3C Magic B0 100R002 and earlier versions have security vulnerabilities. These vulnerabilities stem from improper handling of parameters in the function EditBasicSSID5G within the file/goform/aspForm. This may lead to a remo...

9CVSS7.6AI score0.00805EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/22 12:00 a.m.•34 views

Ubiquiti UniFi OS Server 安全漏洞

The Ubiquiti UniFi OS Server is a server platform developed by the Ubiquiti company, designed for managing UniFi networks and security devices. The Ubiquiti UniFi OS Server has a security vulnerability that stems from path traversal attacks. This vulnerability may allow malicious actors with...

7.7CVSS5.8AI score0.00592EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/21 12:00 a.m.•34 views

LiteSpeed User-End cPanel Plugin 安全漏洞

The LiteSpeed User-End cPanel Plugin is an integrated management plugin for LiteSpeed server users, developed by LiteSpeed Corporation and designed to work within the cPanel environment. Versions of the LiteSpeed User-End cPanel Plugin prior to version 2.4.5 contained security vulnerabilities...

10CVSS6AI score0.01011EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/05/21 12:00 a.m.•34 views

Trend Micro Apex One和TrendAI Vision One Endpoint Security - Standard Endpoint Protection 安全漏洞

Trend Micro Apex One and TrendAI Vision One Endpoint Security – Standard Endpoint Protection are products of Trend Micro, a US-based company. Trend Micro Apex One is a terminal protection software. TrendAI Vision One Endpoint Security – Standard Endpoint Protection is an enterprise terminal...

7.8CVSS6.7AI score0.00126EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/21 12:00 a.m.•34 views

Trend Micro Apex One和TrendAI Vision One Endpoint Security - Standard Endpoint Protection 访问控制错误漏洞

Trend Micro Apex One and TrendAI Vision One Endpoint Security – Standard Endpoint Protection are products of Trend Micro, a US-based company. Trend Micro Apex One is a terminal protection software. TrendAI Vision One Endpoint Security – Standard Endpoint Protection is an enterprise terminal...

7.8CVSS6.7AI score0.00104EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/21 12:00 a.m.•34 views

WordPress plugin Divi Form Builder 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

9.8CVSS5.8AI score0.00528EPSS
SaveExploits6References1
CNNVD
CNNVD
•added 2026/05/21 12:00 a.m.•34 views

Netatalk 安全漏洞

Netatalk is an open-source software developed by Netatalk. It provides AFP file server functionality for Classic Mac OS and macOS on Unix-like operating systems. Versions 2.1.0 to 4.4.2 of Netatalk contain security vulnerabilities. These vulnerabilities stem from the use of bitwise OR operations...

3.7CVSS5.8AI score0.0039EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/20 12:00 a.m.•34 views

WordPress plugin NextGEN Gallery SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...

9.3CVSS5.9AI score0.00369EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/20 12:00 a.m.•34 views

NVIDIA DGX OS 安全漏洞

NVIDIA DGX OS is a Linux operating system and cluster management environment for the DGX AI server platform developed by NVIDIA Corporation in the United States. NVIDIA DGX OS contains security vulnerabilities. These vulnerabilities arise from cloning base images during factory configuration...

8.1CVSS5.9AI score0.00598EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/19 12:00 a.m.•34 views

Scalar 安全漏洞

Scalar is an interactive API documentation and testing tool developed by Scalar OpenSource. Version 0.1.13 of Scalar contains a security vulnerability. This vulnerability stems from the scalarurl query parameter on the Scalar Proxy endpoint, which involves server-side request forgeing. This could...

9.8CVSS5.8AI score0.00625EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/15 12:00 a.m.•34 views

AMD Chipset 安全漏洞

The AMD Chipset is a series of chips developed by American semiconductor company AMD. The AMD Chipset contains security vulnerabilities; these vulnerabilities stem from the use of uninitialized resources, which may allow attackers to access uninitialized kernel memory, resulting in losses related...

6.9CVSS5.8AI score0.00104EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/15 12:00 a.m.•34 views

Open WebUI 访问控制错误漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Versions of Open WebUI prior to 0.9.5 contained a security vulnerability related to access control. This vulnerability stemmed from the lack of authentication for the GET /api/v1/retrieval endpoint,...

5.3CVSS5.8AI score0.00808EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/05/15 12:00 a.m.•34 views

Cockpit CMS 跨站脚本漏洞

Cockpit CMS is an open-source headless content management system developed by Cockpit. Versions of Cockpit CMS 2.14.0 and earlier had a cross-site scripting vulnerability. This vulnerability stemmed from the use of the $interpolate function in template strings within the Display template options,...

5.4CVSS5.8AI score0.00138EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/14 12:00 a.m.•34 views

SOGo SQL注入漏洞

SOGo is a highly fast and scalable modern collaboration suite open source by Alinto. It offers calendar management, address book management, a fully functional webmail client, as well as features for resource sharing and permission handling. Versions of SOGo prior to 5.12.7 had an SQL injection...

7.1CVSS5.8AI score0.00368EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/14 12:00 a.m.•34 views

WordPress plugin My Calendar – Accessible Event Manager 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.8AI score0.00473EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/13 12:00 a.m.•34 views

IObit Uninstaller 代码问题漏洞

IObit Uninstaller is a Windows software tool designed for forced uninstallation by IObit Corporation. Version 9.5.0.15 of IObit Uninstaller has a code vulnerability. This vulnerability stems from an issue with unreferenced service paths within the IObitUnSvr service, which may allow local attacke...

8.5CVSS5.9AI score0.0012EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/13 12:00 a.m.•34 views

Next.js 代码问题漏洞

Next.js is a React framework open source by Vercel. Versions of Next.js from 13.4.13 to 15.5.16, as well as versions before 16.2.5, have code vulnerabilities. These vulnerabilities stem from the use of the built-in Node.js server for hosting. When a custom WebSocket upgrade request is made, it ma...

8.6CVSS5.9AI score0.01895EPSS
SaveExploits11References1
CNNVD
CNNVD
•added 2026/05/13 12:00 a.m.•34 views

WordPress plugin Broadstreet 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

4.4CVSS5.8AI score0.0019EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•34 views

Microsoft Word 安全漏洞

Microsoft Word is a word processing software within the Office suite developed by Microsoft Corporation. There are security vulnerabilities in Microsoft Word. Attackers can exploit these vulnerabilities to execute code remotely. The following products and versions are affected: Microsoft Office...

8.4CVSS6.2AI score0.00364EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•34 views

Microsoft Windows Kernel Mode Drivers 资源管理错误漏洞

Microsoft Windows Kernel Mode Drivers are the kernel mode drivers of Windows from Microsoft. There is a resource management vulnerability in Microsoft Windows Kernel Mode Drivers. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected:...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•34 views

Microsoft Win32k 输入验证错误漏洞

Microsoft Win32k is a system file used for multi-user management in Windows by Microsoft Corporation. There is an input validation vulnerability present in Microsoft Win32k. The following products and versions are affected: Windows 10 Version 1809 for 32-bit systems, Windows 10 Version 1809 for...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/10 12:00 a.m.•34 views

ProjectSend 跨站脚本漏洞

ProjectSend cFTP is an open-source set of self-hosted applications based on PHP and MySQL by ProjectSend. Version r1295 of ProjectSend contains a cross-site scripting vulnerability. This vulnerability stems from a stored-cross-site scripting vulnerability in the files-edit.php file, which could...

6.4CVSS5.7AI score0.00204EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/08 12:00 a.m.•34 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the spirockchip-sfc component calling spiunregistercontroller in the remove callback, resulting in doub...

7.8CVSS5.8AI score0.00173EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/06 12:00 a.m.•34 views

Masa CMS 跨站请求伪造漏洞

Masa CMS is a digital experience platform organized by Masa CMS. Versions of Masa CMS 7.5.2 and earlier contained a cross-site request forgeing vulnerability. This vulnerability stemmed from the cTrash.empty function not verifying the anti-CSRF token, which could allow attackers to induce...

7.2CVSS5.7AI score0.00214EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/04 12:00 a.m.•34 views

D-Link DIR-605L 信任管理问题漏洞

The D-Link DIR-605L is a wireless router produced by D-Link Corporation. The D-Link DIR-605L in the Hardware Revision A1 version has a trust management vulnerability. This vulnerability stems from a hard-coded telnet backdoor, which allows unauthorized attackers on the local network to obtain roo...

8.8CVSS5.8AI score0.00469EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/05/03 12:00 a.m.•34 views

COCO Annotator 路径遍历漏洞

COCO Annotator is a web-based image annotation tool developed by Justin Brooks. It aims to provide versatility and efficient image annotation. Versions of COCO Annotator 0.11.1 and earlier contained a path traversal vulnerability. This vulnerability stemmed from an unknown function in the Data...

5.3CVSS5.8AI score0.00517EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/03 12:00 a.m.•34 views

crmeb_java 访问控制错误漏洞

crmebjava is an open-source e-commerce system developed by CRMEB. Versions of crmebjava 1.3.4 and earlier contained a access control vulnerability. This vulnerability stemmed from unknown code in the Admin Upload component, specifically in the...

5.8CVSS5.9AI score0.00376EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/01 12:00 a.m.•34 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the smb2getea function’s memset operation, where the remaining space after the EA alignment is no...

9.8CVSS5.9AI score0.00721EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/27 12:00 a.m.•34 views

Apache MINA 代码问题漏洞

Apache MINA is a web application framework developed by the Apache Foundation in the United States. This product is primarily used for developing high-performance and highly scalable web applications. There were code vulnerabilities in versions 2.0.0 to 2.0.27, 2.1.0 to 2.1.10, and 2.2.0 to 2.2.5...

9.8CVSS6.7AI score0.00752EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/23 12:00 a.m.•34 views

OpenTelemetry .NET 安全漏洞

OpenTelemetry .NET is the .NET client of OpenTelemetry developed by OpenTelemetry Inc. There is a security vulnerability in OpenTelemetry .NET, which stems from the implementation details of baggage, B3, and Jaeger handling code. This vulnerability may lead to excessive memory allocation during...

5.3CVSS5.8AI score0.00568EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/23 12:00 a.m.•34 views

DOMPurify 跨站脚本漏洞

DOMPurify is a JavaScript-based tool developed by Cure53’s individual developer, designed for working with the DOM Document Object Model in HTML, MathML, and SVG. Versions 3.0.1 to 3.3.3 of DOMPurify contain cross-site scripting vulnerabilities. These vulnerabilities stem from XSS attacks that...

6.9CVSS5.8AI score0.00346EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/23 12:00 a.m.•34 views

Flowise 安全漏洞

Flowise is an open-source tool developed by FlowiseAI, designed for easily building LLM applications. Prior versions of Flowise, up to 3.1.0, contained a security vulnerability. This vulnerability stemmed from the text-to-speech generation endpoint accepting direct credentials IDs, allowing...

8.2CVSS5.7AI score0.00396EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/04/21 12:00 a.m.•34 views

Home Assistant 代码注入漏洞

Home Assistant is an open-source family automation management system developed by Home Assistant. This system is primarily used to control household automation devices. Versions of Home Assistant prior to 1.0.0 had a code injection vulnerability. This vulnerability stemmed from the use of unlimit...

5.6CVSS5.9AI score0.00145EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/18 12:00 a.m.•34 views

Movary 安全漏洞

Movary is a film review program developed by Lee Peuker personally. Versions of Movary prior to 0.71.1 contained security vulnerabilities. These vulnerabilities stemmed from the /settings/jellyfin/server-url-verify endpoint, which allowed user-controlled URLs to initiate server-side HTTP requests...

7.7CVSS5.8AI score0.00459EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/04/17 12:00 a.m.•34 views

Anviz CX2 Lite 安全漏洞

The Anviz CX2 Lite is a smart terminal device from the American company Anviz, featuring integrated facial recognition and access control functions. The Anviz CX2 Lite has a security vulnerability; this vulnerability stems from the fact that management sessions are conducted via HTTP. This may...

6.5CVSS5.8AI score0.00306EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/16 12:00 a.m.•34 views

Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is an operating system developed by the American company Dell. It provides a horizontally scalable NAS solution through the PowerScale OneFS operating system. Versions of Dell PowerScale OneFS prior to 9.12.0.0 contained a security vulnerability; this vulnerability stemmed...

6.6CVSS5.8AI score0.00141EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/13 12:00 a.m.•34 views

Nocobase 安全漏洞

Nocobase is an open-source low-code platform developed by NocoBase. Versions of Nocobase 2.0.23 and earlier contained security vulnerabilities. These vulnerabilities were caused by improper use of the createSafeConsole function in the...

7.5CVSS7.1AI score0.00498EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/04/10 12:00 a.m.•34 views

wolfSSL(CyaSSL) 安全漏洞

wolfSSL CyaSSL is a small, portable embedded SSL programming library developed by the American company wolfSSL, aimed at developers working with embedded systems. wolfSSL CyaSSL has security vulnerabilities; one of these vulnerabilities stems from heap out-of-bound reading during PKCS7 parsing,...

5.4CVSS5.8AI score0.00237EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•34 views

openstatus 代码注入漏洞

OpenStatus is an open-source status page and availability monitoring platform developed by OpenStatus. OpenStatus has a code injection vulnerability, which stems from the operation of the callbackURL parameter in the Onboarding endpoint component...

5.3CVSS5.7AI score0.00486EPSS
SaveExploits0References7
Total number of security vulnerabilities5000