Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
•added 2025/11/18 12:00 a.m.•34 views

Windu CMS 跨站请求伪造漏洞

Windu CMS Windu CMS is a lightweight web content management system CMS from Windu. A cross-site request forgery vulnerability exists in Windu CMS version 4.1, which stems from insufficient cross-site request forgery protection and could lead to malicious file uploads...

6.8CVSS6.4AI score0.00176EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•34 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a remote device sending an invalid connection request during a BT connectable LE scan, which could result in a transient denial of service...

6.5CVSS6.7AI score0.00116EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•34 views

WordPress plugin多款产品 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL-based...

8.8CVSS7.4AI score0.00611EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/10/20 12:00 a.m.•34 views

NetBird VPN 安全漏洞

NetBird VPN is an open source proxy software from NetBird. A security vulnerability exists in NetBird VPN that stems from the failure to remove or change the default administrator account password created by ZITADEL during installation...

9.3CVSS6.6AI score0.0042EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/17 12:00 a.m.•34 views

Eclipse ThreadX NetX Duo 安全漏洞

Eclipse ThreadX NetX Duo is an IPv4 and IPv6 dual network stack for Eclipse ThreadX open source. A security vulnerability exists in Eclipse ThreadX NetX Duo versions prior to 6.4.4, which stems from the processing of IPv4 packets with a timestamp option that can lead to out-of-bounds reads...

6.9CVSS6.6AI score0.00331EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/10 12:00 a.m.•34 views

JeeWMS 安全漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. A security vulnerability exists in JeeWMS version 20250820, which stems from the exportXls function not handling input correctly, which could lead to an SQL injection attack...

9.4CVSS7.7AI score0.00328EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/10/03 12:00 a.m.•34 views

Redis 代码注入漏洞

Redis is an open source, ANSI C, network-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis, Inc. that provides APIs in multiple languages. A code injection vulnerability exists in Redis 8.2.1 and earlier versions, which originates from allowing an...

7.3CVSS9.2AI score0.00727EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/10/01 12:00 a.m.•34 views

IBM Transformation Extender Advanced 代码问题漏洞

IBM Transformation Extender Advanced is a data transformation, validation and standardization tool software from International Business Machines IBM. A code issue vulnerability exists in IBM Transformation Extender Advanced version 10.0.1 that stems from a failure to disable a session after loggi...

8.8CVSS6.6AI score0.00219EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/24 12:00 a.m.•34 views

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when a PLMN is selected...

9.8CVSS6.9AI score0.004EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/30 12:00 a.m.•34 views

O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA version 10.0-410 and earlier, which originates from cross-site scripting due to incorrect manipulation of parameters in the file /xportalassembledesigner/jaxrs/page...

5.4CVSS4.4AI score0.00412EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/08/28 12:00 a.m.•34 views

Weaver E-Mobile Mobile Management Platform 安全漏洞

Weaver E-Mobile Mobile Management Platform is an enterprise mobility management platform from China's Weaver. A security vulnerability exists in Weaver E-Mobile Mobile Management Platform version 20250813 and prior versions, which is caused by cross-site scripting due to incorrect manipulation of...

5.1CVSS4.4AI score0.00258EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/08/12 12:00 a.m.•34 views

Siemens多款产品 代码问题漏洞

Siemens SIMATIC STEP and Siemens SIMATIC S7-PLCSIM V17 are both products of Siemens, Germany.Siemens SIMATIC STEP is a comprehensive engineering tool for configuring and programming SIMATIC controllers.Siemens SIMATIC S7-PLCSIM V17 is a PLC program simulation software. PLCSIM V17 is a PLC program...

8.5CVSS6.9AI score0.00185EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/08/12 12:00 a.m.•34 views

Microsoft Office 资源管理错误漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code execution vulnerability exists in Microsoft Office, which is caused due to a post-release usage...

8.4CVSS7.8AI score0.00567EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/07/15 12:00 a.m.•34 views

NETGEAR XR300 安全漏洞

The NETGEAR XR300 is the entry-level Nighthawk Pro Gaming series wireless router from NETGEAR. The NETGEAR XR300 suffers from a stack buffer overflow vulnerability that stems from a stack buffer overflow in the HTTPD service when processing a POST request from the usbdevice.cgi endpoint, no detai...

6.5CVSS7.2AI score0.0029EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/06/27 12:00 a.m.•34 views

WordPress plugin Simple Payment 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS6.6AI score0.0048EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/06/25 12:00 a.m.•34 views

Cisco ISE和Cisco ISE-PIC 注入漏洞

Cisco ISE and Cisco ISE-PIC are both products of the U.S. Cisco Cisco.Cisco ISE is the identity services engine introduced by Cisco, mainly used for network access control and security management.Cisco ISE-PIC is the passive identity connector of the Cisco Identity Services Engine, which is mainl...

10CVSS8.1AI score0.9723EPSS
SaveExploits10References2
CNNVD
CNNVD
•added 2025/06/10 12:00 a.m.•34 views

Microsoft Windows SMB Server 访问控制错误漏洞

Microsoft Windows SMB Server is a network file sharing protocol from Microsoft USA. It allows applications on a computer to read and write files and request services from server programs on a computer network. An access control error vulnerability exists in Microsoft Windows SMB Server. An attack...

8.8CVSS9AI score0.82699EPSS
SaveExploits7References3
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•34 views

WordPress plugin Submission DOM tracking for Contact Form 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

5.9CVSS6AI score0.00265EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/04 12:00 a.m.•34 views

Checkmate 安全漏洞

Checkmate is an open source, self-hosted tool from BlueWave Open Source designed to track and monitor server hardware, uptime, response time and events in real-time with beautiful visualizations. A security vulnerability exists in Checkmate 2.0.2 and earlier versions, which stems from the fact th...

8.1CVSS6.6AI score0.00479EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/09 12:00 a.m.•34 views

WordPress plugin Buddypress Humanity 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site request...

9.8CVSS8.6AI score0.00392EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2025/03/22 12:00 a.m.•34 views

WordPress plugin Export and Import Users and Customers 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in WordPress...

7.6CVSS8.7AI score0.0041EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/02/20 12:00 a.m.•34 views

Sitecore Experience Manager和Experience Platform 安全漏洞

Sitecore Experience Platform XP and Sitecore Experience Manager XM are both products of Sitecore, a Danish company.Sitecore Experience Platform is a suite of customer digital experience platforms.Sitecore Sitecore Experience Platform is a customer digital experience platform, and Sitecore...

5.3CVSS8.1AI score0.65003EPSS
SaveExploits4References3
CNNVD
CNNVD
•added 2025/02/13 12:00 a.m.•34 views

Mercedes-Benz NTG 安全漏洞

Mercedes-Benz NTG is an automobile from Mercedes-Benz Germany. A security vulnerability exists in Mercedes-Benz NTG 6 that originates from a heap buffer overflow in the User-Data import/export function. An attacker exploiting this vulnerability could cause the User-Data service to crash...

4.6CVSS7.7AI score0.00338EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/05 12:00 a.m.•34 views

F5 iControl REST和F5 BIG-IP TMOS Shell 操作系统命令注入漏洞

F5 iControl REST and F5 BIG-IP TMOS Shell are both products of F5 Corporation, U.S.A. F5 iControl REST is a development framework. and F5 BIG-IP TMOS Shell is a command line. An operating system command injection vulnerability exists in F5 iControl REST and F5 BIG-IP TMOS Shell that stems from th...

8.8CVSS7.6AI score0.0715EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•34 views

D-Link DIR-816 安全漏洞

The D-Link DIR-816A2 is a router from China's AUO D-Link. An information disclosure vulnerability exists in the D-Link DIR-816A2, which stems from insufficient protection of sensitive information in the component dstatus.asp, and can be exploited by an attacker to obtain sensitive information...

6.5CVSS6.2AI score0.00468EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/01/06 12:00 a.m.•34 views

Suricata 安全漏洞

Suricata is a network IDS, IPS and NSM engine from the Open Information Security Foundation. A security vulnerability exists in Suricata versions prior to 7.0.8 that stems from the fact that TCP streams with TCP emergency data out-of-band data may cause Suricata to analyze the data differently th...

7.5CVSS6.3AI score0.00543EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/24 12:00 a.m.•34 views

Hanwha Vision NVR 安全漏洞

Hanwha Vision NVR is a series of network video recorder devices from Hanwha Vision, a South Korean company. A security vulnerability exists in Hanwha Vision NVR that stems from a NULL pointer reference issue when handling specific URL parameters, which can cause the NVR to reboot when an attacker...

6.9CVSS6.3AI score0.0078EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•34 views

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal that stems from improper input neutralization during page generation, resulting in a cross-site scripting vulnerability...

5.4CVSS6AI score0.00336EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•34 views

Microsoft Lightweight Directory Access Protocol 输入验证错误漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that runs on a layer above the TCP/IP stack. An input validation error vulnerability exists in Microsoft Lightweight Directory Access Protocol. An attacker exploiting this...

9.8CVSS9.5AI score0.71877EPSS
SaveExploits3References1
CNNVD
CNNVD
•added 2024/11/29 12:00 a.m.•34 views

SiYuan 安全漏洞

SiYuan is a privacy-first personal knowledge management system from SiYuan open source. A security vulnerability exists in SiYuan version 3.1.11, which stems from the ids array parameter of the /batchGetBlockAttrs file containing a SQL injection vulnerability...

9.8CVSS7.8AI score0.00537EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/11/13 12:00 a.m.•34 views

Intel DSA 访问控制错误漏洞

Intel DSA is a driver update tool from Intel Intel. It can detect user drivers, update the installed drivers to the latest version, support intel series of graphics cards, audio, network cards and chipset drivers, i-card users must have. An Access Control Error vulnerability exists in Intel DSA...

7.8CVSS6.5AI score0.00162EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/08 12:00 a.m.•34 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a potential error problem caused by misuse of the smpprocessorid function...

5.5CVSS6.5AI score0.00192EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/10/31 12:00 a.m.•34 views

Beckhoff TwinCAT 操作系统命令注入漏洞

Beckhoff TwinCAT is a software system from Beckhoff, Germany, consisting of a real-time environment and a real-time system for executing control programs in a development environment. The system is mainly used for PLC Programmable Logic Controller programming, diagnostics and system configuration...

6.5CVSS7.3AI score0.00189EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/24 12:00 a.m.•34 views

GitLab Enterprise Edition(EE)和GitLab Community Edition(CE) 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition EE and GitLab Community...

6.5CVSS6.2AI score0.00523EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/10/20 12:00 a.m.•34 views

WordPress plugin Social Auto Poster 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

8.8CVSS6.7AI score0.00196EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/10/18 12:00 a.m.•34 views

WordPress plugin RSS Feed Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.9AI score0.00322EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/10/16 12:00 a.m.•34 views

Apache Solr 安全漏洞

Apache Solr is the United States Apache Apache Foundation of a search server based on Lucene a full-text search engine. The product supports level search , vertical search , highlighting search results and so on. An authentication error vulnerability exists in Apache Solr that stems from the...

9.8CVSS7AI score0.91714EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/10/16 12:00 a.m.•34 views

openSUSE Leap 安全漏洞

openSUSE Leap is a new openSUSE build and a new hybrid Linux distribution from SUSE Germany. A security vulnerability exists in openSUSE Leap that stems from an attacker's ability to place special files into the actual package source, allowing the attacker to change the victim's osc configuration...

5.5CVSS6.4AI score0.00209EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/10/11 12:00 a.m.•34 views

angular-base64-upload 安全漏洞

angular-base64-upload is a library by the individual developers of Adones Pitogo. A security vulnerability exists in angular-base64-upload prior to version 0.1.21, which stems from vulnerability to an unauthenticated remote code execution attack via demo/server.php...

9.8CVSS7.7AI score0.45097EPSS
SaveExploits5References5
CNNVD
CNNVD
•added 2024/08/26 12:00 a.m.•34 views

WordPress plugin Brave Popup Builder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS6.4AI score0.00183EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/08/21 12:00 a.m.•34 views

Docusign API 安全漏洞

The Docusign API is a secure and extensible API from Docusign. A security vulnerability exists in Docusign API version 8.142.14. An attacker has exploited this vulnerability to cause the Docusign account to be completely compromised...

8.1CVSS6.7AI score0.005EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/07/10 12:00 a.m.•34 views

Juniper Networks Junos OS Security Vulnerability

Juniper Networks Junos OS is a Juniper Networks USA network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that originates from a heap-based...

8.7CVSS7AI score0.00424EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/06/21 12:00 a.m.•34 views

Actual Analyzer Security Vulnerability

Actual Analyzer is a PHP tool for monitoring website traffic from Actual Analyzer, Inc. A security vulnerability exists in Actual Analyzer that stems from the use of untrusted input for some of the input data passed to the eval operation, which allows code execution via shell metacharacters...

9.8CVSS7.5AI score0.10012EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2024/06/08 12:00 a.m.•34 views

WordPress plugin Rife Free security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS6.8AI score0.00261EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/05/17 12:00 a.m.•34 views

WordPress plugin The Plus Addons for Elementor Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

9.8CVSS8.7AI score0.00567EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/05/16 12:00 a.m.•34 views

编号撤回

wandb is a tool for visualizing and tracking machine learning experiments. This CVE number has been withdrawn...

7.6AI score
SaveExploits0References2
CNNVD
CNNVD
•added 2024/05/14 12:00 a.m.•34 views

NVIDIA ChatRTX 安全漏洞

NVIDIA ChatRTX is a content personalization chatbot from NVIDIA, USA. A security vulnerability exists in NVIDIA ChatRTX. An attacker exploited the vulnerability to alter the execution process by sending user input, which could lead to mismanagement of privileges issues...

7.5CVSS6.7AI score0.00191EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/05/08 12:00 a.m.•34 views

WordPress plugin Mesmerize Companion 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

6.4CVSS5.8AI score0.00333EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/04/24 12:00 a.m.•34 views

Xpdf 缓冲区错误漏洞

Xpdf is a free PDF viewer and toolkit from Xpdf, Inc. that includes a text extractor, image converter, HTML converter, and more. A security vulnerability exists in Xpdf versions 4.05 and earlier, which stems from a vulnerability that allows an attacker to trigger an out-of-bounds array write...

5.5CVSS6.9AI score0.0018EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/03/27 12:00 a.m.•34 views

Opswat Metadefender Core 安全漏洞

OPSWAT MetaDefender Core OPSWAT MDCore is a multi-engine anti-malware software from OPSWAT, Inc. It prevents the upload of malicious files on web applications that bypass sandboxing and other detection-based security solutions. A security vulnerability exists in Opswat Metadefender Core versions...

6.1CVSS6.4AI score0.00308EPSS
SaveExploits0References2
Total number of security vulnerabilities5000