Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
•added 2026/04/13 12:00 a.m.•34 views

Nocobase 安全漏洞

Nocobase is an open-source low-code platform developed by NocoBase. Versions of Nocobase 2.0.23 and earlier contained security vulnerabilities. These vulnerabilities were caused by improper use of the createSafeConsole function in the...

7.5CVSS7.1AI score0.00498EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/04/10 12:00 a.m.•34 views

wolfSSL(CyaSSL) 安全漏洞

wolfSSL CyaSSL is a small, portable embedded SSL programming library developed by the American company wolfSSL, aimed at developers working with embedded systems. wolfSSL CyaSSL has security vulnerabilities; one of these vulnerabilities stems from heap out-of-bound reading during PKCS7 parsing,...

5.4CVSS5.8AI score0.00237EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•34 views

openstatus 代码注入漏洞

OpenStatus is an open-source status page and availability monitoring platform developed by OpenStatus. OpenStatus has a code injection vulnerability, which stems from the operation of the callbackURL parameter in the Onboarding endpoint component...

5.3CVSS5.7AI score0.00486EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/04/06 12:00 a.m.•34 views

FeehiCMS 安全漏洞

FeehiCMS is a PHP-based CMS website building system developed by Liufee’s individual developers. The FeehiCMS v2.1.1 version contains a security vulnerability. This vulnerability stems from a storage-type XSS issue with the Name parameter of the category module, which may allow for the execution ...

5.4CVSS6AI score0.00232EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/04/06 12:00 a.m.•34 views

Pi-Hole Adminlte 跨站脚本漏洞

Pi-Hole Adminlte is a control panel used for collecting more data. Versions of Pi-Hole Adminlte from 6.0 to 6.5 had a cross-site scripting vulnerability. This vulnerability occurred due to the direct insertion of configuration values into HTML attributes without escaping, which could lead to HTML...

6.1CVSS5.7AI score0.00374EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/31 12:00 a.m.•34 views

WWBN AVideo 访问控制错误漏洞

WWBN AVideo is a video platform building system developed by the WWBN team using PHP. Versions of WWBN AVideo prior to 26.0 contained an access control vulnerability. This vulnerability stemmed from an error in the installation script install/deleteSystemdPrivate.php, where incorrect PHP operator...

7.3CVSS5.8AI score0.00409EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/03/31 12:00 a.m.•34 views

Dolibarr 安全漏洞

Dolibarr is an open-source application developed by Dolibarr developers. It helps manage activities within user organizations. Dolibarr versions 22.0.4 and earlier contained security vulnerabilities. These vulnerabilities stemmed from a local file inclusion vulnerability in the core AJAX...

6.5CVSS5.8AI score0.01468EPSS
SaveExploits3References2
CNNVD
CNNVD
•added 2026/03/30 12:00 a.m.•34 views

Tautulli 代码问题漏洞

Tautulli is an open-source application developed by Tautulli for monitoring Plex Media Server. Versions of Tautulli prior to 2.17.0 had code vulnerabilities. These vulnerabilities stemmed from insufficient validation and restrictions on the img parameter in the /pmsimageproxy endpoint, which coul...

5.3CVSS5.9AI score0.00384EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•34 views

WordPress plugin OOPSpam Anti-Spam 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.6AI score0.00251EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/24 12:00 a.m.•34 views

salvo 安全漏洞

Salvo is a web framework developed by Salvo OpenSource. Versions of Salvo prior to 0.89.3 contained security vulnerabilities. These vulnerabilities stemmed from the lack of enforcement of payload size limits in the form data parsing mechanism, which could lead to memory exhaustion and service...

8.7CVSS5.8AI score0.00515EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/03/17 12:00 a.m.•34 views

MongoDB Server 安全漏洞

MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which can be triggered when...

8.8CVSS5.8AI score0.0055EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/16 12:00 a.m.•34 views

Runtipi 安全漏洞

Runtipi is an open-source family server orchestrator developed by Runtipi. Versions of Runtipi prior to 4.8.1 contained security vulnerabilities. These vulnerabilities stemmed from the/api/auth/verify-totp endpoint, which did not enforce any rate limits or account locking mechanisms. This allowed...

8.8CVSS5.8AI score0.00512EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/10 12:00 a.m.•34 views

FileBrowser Quantum 跨站脚本漏洞

FileBrowser Quantum is a file manager developed by Graham Steffaniak. Versions of FileBrowser Quantum prior to 1.3.1-beta and 1.2.2-stable contained a cross-site scripting vulnerability. This vulnerability stemmed from the lack of context-aware escaping when rendering shared metadata fields, whic...

8.9CVSS7.1AI score0.0036EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/03/07 12:00 a.m.•34 views

Checkmate 信息泄露漏洞

Checkmate is an open-source, self-hosted tool developed by BlueWave. It aims to provide visually appealing real-time tracking and monitoring of server hardware, uptime, response times, and events. Versions of Checkmate prior to 3.4.0 contained a security vulnerability related to information...

5.3CVSS5.8AI score0.00407EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/06 12:00 a.m.•34 views

SVGO 安全漏洞

SVGO is an open-source SVG file optimization tool. Versions of SVGO prior to 2.1.0, 2.8.1, 3.0.0, 3.3.3, and 4.0.1 have security vulnerabilities due to insufficient protection against entity expansion when processing XML custom entities, which may lead to denial-of-service attacks...

7.5CVSS7.1AI score0.00931EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/06 12:00 a.m.•34 views

ePower 代码问题漏洞

ePower is an electric vehicle charging station system owned by the Irish company ePower. ePower has a code vulnerability that stems from the predictable nature of session identifiers and the ability for multiple endpoints to use the same identifier to connect, which may lead to session hijacking ...

8.6CVSS5.8AI score0.00386EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/05 12:00 a.m.•34 views

EPSON ESC/POS 访问控制错误漏洞

EPSON ESC/POS is a protocol used by the Japanese company EPSON for controlling POS printers. EPSON ESC/POS has a vulnerability related to access control. This vulnerability stems from the lack of user authentication and command authorization mechanisms, no control over network communication sourc...

9.8CVSS5.8AI score0.00447EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/05 12:00 a.m.•34 views

Calendar 跨站脚本漏洞

Calendar is an event management module developed by HumHub, offering a comprehensive solution for events within companies or organizations. Versions of Calendar prior to 1.8.11 contained a cross-site scripting vulnerability. This vulnerability stemmed from the existence of storage-type cross-site...

6.9CVSS5.6AI score0.00263EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/03/05 12:00 a.m.•34 views

WordPress plugin ListingPro 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.6AI score0.00251EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/04 12:00 a.m.•34 views

WordPress plugin JS Help Desk – AI-Powered Support & Ticketing System SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.5CVSS5.8AI score0.01317EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/03 12:00 a.m.•34 views

@tootallnate/once 安全漏洞

@tootallnate/once is a JavaScript code library developed by Nathan Rajlich personally. Versions of @tootallnate/once prior to version 3.0.1 contained security vulnerabilities. These vulnerabilities stemmed from errors in the control flow scope when using the AbortSignal option. After the signal i...

4.8CVSS5.9AI score0.00156EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•34 views

Mozilla Firefox和Mozilla Thunderbird 安全漏洞

Mozilla Firefox and Mozilla Thunderbird are both products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. This software supports IMAP and POP email...

9.8CVSS7.3AI score0.00573EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/19 12:00 a.m.•34 views

go-ethereum 安全漏洞

go-ethereum is an open-source Ethereum protocol library developed by ethereum. Versions of go-ethereum prior to 1.17.0 contained security vulnerabilities; these vulnerabilities allowed attackers to cause high memory usage by sending specially crafted P2P messages...

7.5CVSS5.8AI score0.00619EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/02/16 12:00 a.m.•34 views

Dassault Systèmes SOLIDWORKS eDrawings 安全漏洞

Dassault Systèmes SOLIDWORKS eDrawings is a collaboration tool provided by Dassault Systèmes, a French company, for viewing, sharing, and annotating 2D/3D design files. There are security vulnerabilities in the SOLIDWORKS eDrawings SOLIDWORKS Desktop 2025 version up to the SOLIDWORKS Desktop 2026...

7.8CVSS7.3AI score0.00202EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/10 12:00 a.m.•34 views

GIMP 安全漏洞

GIMP is an open-source bitmap image editor developed by the GIMP team. GIMP has a security vulnerability that can lead to a denial-of-service attack due to specially crafted PSP image files...

5.5CVSS7.1AI score0.00494EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/02/06 12:00 a.m.•34 views

WordPress plugin WP Duplicate 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

8.8CVSS6.3AI score0.00999EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2026/02/06 12:00 a.m.•34 views

OpenSTAManager 安全漏洞

OpenSTAManager is an open-source management software for technical assistance and billing developed by Devcode. Versions of OpenSTAManager prior to v2.9.8 contained security vulnerabilities. These vulnerabilities stemmed from insufficient validation of the iddocumenti GET parameters in the Prima...

8.7CVSS5.9AI score0.00365EPSS
SaveExploits3References1
CNNVD
CNNVD
•added 2026/01/29 12:00 a.m.•34 views

D-Link DWR-M961 has a command injection vulnerability

The D-Link DWR-M961 is a router produced by D-Link Corporation. Version 1.1.47 of the D-Link DWR-M961 contains a command injection vulnerability. This vulnerability arises from incorrect handling of the parameter fotaurl in the file /boafrm/formLtefotaUpgradeQuectel, which may lead to command...

8.8CVSS6.6AI score0.01885EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/01/29 12:00 a.m.•34 views

Monkey Server security vulnerabilities

Monkey Server is an open-source HTTP server developed by Monkey I/O. There is a security vulnerability in Monkey Server, which stems from an out-of-bounds read in the mkmimetypefind function, potentially leading to a denial-of-service attack...

7.5CVSS5.8AI score0.01108EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/01/28 12:00 a.m.•34 views

Podman Desktop Authorization Issue Vulnerability

Podman Desktop is an open-source container management tool developed by podman-desktop. Versions of Podman Desktop prior to 1.25.1 contained an authorization vulnerability. This vulnerability stemmed from the isAccessAllowed function returning true unconditionally, which could lead to...

9.3CVSS5.8AI score0.00306EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/01/27 12:00 a.m.•34 views

ibaPDA security vulnerabilities

ibaPDA is an industrial process data acquisition and analysis system developed by the German company iba. There is a security vulnerability in ibaPDA, which allows unauthorized operations on the file system under certain conditions. This vulnerability may affect the confidentiality, integrity, or...

10CVSS5.8AI score0.00435EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/21 12:00 a.m.•34 views

Sandboxie Plus code issue and vulnerabilities

Sandboxie Plus is an open-source Windows sandboxing tool developed by Sandboxie Plus. Version 0.7.2 of Sandboxie Plus has a code vulnerability; this vulnerability stems from a service path in the SbieSvc service that lacks quotation marks, which may allow local attackers to execute code with...

8.5CVSS6AI score0.00148EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/14 12:00 a.m.•34 views

Sonatype Nexus Repository 安全漏洞

Sonatype Nexus Repository is a repository manager from Sonatype, Inc. that is used for managing, storing, and distributing software, among other things. A security vulnerability exists in Sonatype Nexus Repository 3 3.0.0 and later versions, which stems from improper validation of proxy repositor...

6.2CVSS7.1AI score0.00305EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•34 views

TYPO3 CMS 安全漏洞

TYPO3 CMS is a content management system from TYPO3 open source. A security vulnerability exists in TYPO3 CMS that stems from the utilization of the defVals parameter that can bypass field-level access checks and may result in the insertion of arbitrary data into exclusion fields prohibited by a...

6.5CVSS5.9AI score0.00317EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•34 views

RuoYi-Vue-Plus 安全漏洞

RuoYi-Vue-Plus is a development framework from the Chinese organization dromara. A security vulnerability exists in RuoYi-Vue-Plus 5.5.1 and earlier versions, which stems from unfiltered user input and could lead to arbitrary file reading and writing...

9.4CVSS6.7AI score0.00715EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/01/02 12:00 a.m.•34 views

Yonyou KSOA SQL注入漏洞

Yonyou KSOA is an enterprise management software from China's UFIDA Yonyou company. A SQL injection vulnerability exists in Yonyou KSOA version 9.0, which originates from the incorrect operation of the parameter zpjhid in the file /kp/PrintZPYG.jsp, which could lead to a SQL injection attack...

9.8CVSS7.8AI score0.00392EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/25 12:00 a.m.•34 views

VictoriaMetrics 安全漏洞

VictoriaMetrics is a time series database open-sourced by VictoriaMetrics. A security vulnerability exists in VictoriaMetrics versions 1.0.0 through 1.110.23 prior, 1.111.0 through 1.122.8 prior, and 1.123.0 through 1.129.1 prior, which stems from a request size limit being ignored by the snappy...

2.7CVSS6.2AI score0.00341EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/11/18 12:00 a.m.•34 views

Windu CMS 跨站请求伪造漏洞

Windu CMS Windu CMS is a lightweight web content management system CMS from Windu. A cross-site request forgery vulnerability exists in Windu CMS version 4.1, which stems from insufficient cross-site request forgery protection and could lead to malicious file uploads...

6.8CVSS6.4AI score0.00176EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•34 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a remote device sending an invalid connection request during a BT connectable LE scan, which could result in a transient denial of service...

6.5CVSS6.7AI score0.00116EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•34 views

WordPress plugin多款产品 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL-based...

8.8CVSS7.4AI score0.00611EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/10/20 12:00 a.m.•34 views

NetBird VPN 安全漏洞

NetBird VPN is an open source proxy software from NetBird. A security vulnerability exists in NetBird VPN that stems from the failure to remove or change the default administrator account password created by ZITADEL during installation...

9.3CVSS6.6AI score0.0042EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/17 12:00 a.m.•34 views

Eclipse ThreadX NetX Duo 安全漏洞

Eclipse ThreadX NetX Duo is an IPv4 and IPv6 dual network stack for Eclipse ThreadX open source. A security vulnerability exists in Eclipse ThreadX NetX Duo versions prior to 6.4.4, which stems from the processing of IPv4 packets with a timestamp option that can lead to out-of-bounds reads...

6.9CVSS6.6AI score0.00331EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/10 12:00 a.m.•34 views

JeeWMS 安全漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. A security vulnerability exists in JeeWMS version 20250820, which stems from the exportXls function not handling input correctly, which could lead to an SQL injection attack...

9.4CVSS7.7AI score0.00328EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/10/01 12:00 a.m.•34 views

IBM Transformation Extender Advanced 代码问题漏洞

IBM Transformation Extender Advanced is a data transformation, validation and standardization tool software from International Business Machines IBM. A code issue vulnerability exists in IBM Transformation Extender Advanced version 10.0.1 that stems from a failure to disable a session after loggi...

8.8CVSS6.6AI score0.00219EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/24 12:00 a.m.•34 views

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when a PLMN is selected...

9.8CVSS6.9AI score0.004EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/28 12:00 a.m.•34 views

Weaver E-Mobile Mobile Management Platform 安全漏洞

Weaver E-Mobile Mobile Management Platform is an enterprise mobility management platform from China's Weaver. A security vulnerability exists in Weaver E-Mobile Mobile Management Platform version 20250813 and prior versions, which is caused by cross-site scripting due to incorrect manipulation of...

5.1CVSS4.4AI score0.00258EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/08/18 12:00 a.m.•34 views

Portabilis i‑Diário 安全漏洞

Portabilis i-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A security vulnerability exists in Portabilis i-Diário 1.5.0 and earlier versions, which stems from an improperly restricted interface layer that can be remotely triggered by a...

5.3CVSS6.7AI score0.00315EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/08/12 12:00 a.m.•34 views

Siemens多款产品 代码问题漏洞

Siemens SIMATIC STEP and Siemens SIMATIC S7-PLCSIM V17 are both products of Siemens, Germany.Siemens SIMATIC STEP is a comprehensive engineering tool for configuring and programming SIMATIC controllers.Siemens SIMATIC S7-PLCSIM V17 is a PLC program simulation software. PLCSIM V17 is a PLC program...

8.5CVSS6.9AI score0.00185EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/07/15 12:00 a.m.•34 views

NETGEAR XR300 安全漏洞

The NETGEAR XR300 is the entry-level Nighthawk Pro Gaming series wireless router from NETGEAR. The NETGEAR XR300 suffers from a stack buffer overflow vulnerability that stems from a stack buffer overflow in the HTTPD service when processing a POST request from the usbdevice.cgi endpoint, no detai...

6.5CVSS7.2AI score0.0029EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/07/10 12:00 a.m.•34 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a queue update issue in octeontx2-pf, which could result in a system warning...

5.5CVSS8.2AI score0.00176EPSS
SaveExploits0References6
Total number of security vulnerabilities5000