Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
•added 2026/06/11 12:00 a.m.•33 views

Garlic-Hub 代码问题漏洞

Garlic-Hub is an open-source digital signage network device and content management tool developed by GarlicSignage. Versions of Garlic-Hub prior to 1.1 contained code vulnerabilities. These vulnerabilities stemmed from the uploadFromUrl endpoint, which allowed authenticated users to make arbitrar...

7.7CVSS5.5AI score0.00354EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

Russh 输入验证错误漏洞

Russh is a Rust SSH client and server library developed by Eugene as an individual contributor. In versions of Russh from 0.37.0 to 0.61.0, there was a vulnerability related to input validation errors. This vulnerability stemmed from the keyboard interaction authentication process, where a...

6.5CVSS5.4AI score0.00418EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

bit7z 路径遍历漏洞

bit7z is a file compression/uncompression tool developed by Riccardo as an individual project. Versions of bit7z prior to 4.0.12 contained a path traversal vulnerability. This vulnerability stemmed from a one-byte error in the SafeOutPathBuilder::restoreSymlink function, which could allow attacke...

3.6CVSS5.3AI score0.00147EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

Lenovo ThinkPad 加密问题漏洞

The Lenovo ThinkPad is a portable computer by the company Lenovo. The Lenovo ThinkPad has an encryption vulnerability, which stems from issues with the embedded controller firmware. This vulnerability may allow privileged local users to perform arbitrary read and write operations on privileged...

8.4CVSS5.5AI score0.00077EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

National Security Agency Ghidra 数据伪造问题漏洞

National Security Agency Ghidra is a software reverse-engineering framework developed by the National Security Agency NSA. Prior to version 12.1 of National Security Agency Ghidra, there was a data manipulation vulnerability. This vulnerability stemmed from the PKIAuthenticationModule.authenticat...

8.8CVSS5.3AI score0.0045EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

WordPress plugin Easy Image Collage 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.1AI score0.00349EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

NLnet Labs ldns 访问控制错误漏洞

NLnet Labs ldns is a DNS library developed by the Nlnet Foundation in the Netherlands, designed for easy programming of DNS tools. Versions 1.2.0 to 1.9.0 of NLnet Labs ldns contain access control vulnerability issues. This vulnerability arises from the fact that when used as a UDP resolver, the...

8.2CVSS5.3AI score0.00147EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

QNAP Systems QTS和QNAP Systems QuTS hero 操作系统命令注入漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are software products with data storage and management functions developed by QNAP Systems, a company based in Taiwan, China. Both products have an operating system command injection vulnerability. This vulnerability stems from command injection, which...

8.6CVSS6AI score0.01051EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

Splunk Cloud Platform和Splunk Enterprise 访问控制错误漏洞

Splunk Cloud Platform and Splunk Enterprise are both products of the American company Splunk. Splunk Cloud Platform is a powerful service for data collection, processing, and analysis. Splunk Enterprise is a suite of software for data collection and analysis. Vulnerabilities in access control...

9.8CVSS5.8AI score0.96939EPSS
SaveExploits7References1
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

Fission 访问控制错误漏洞

Fission is an open-source function deployment framework based on Kubernetes. Versions of Fission prior to 1.23.0 contained a access control vulnerability. This vulnerability stemmed from the storagevc component failing to perform any authentication or authorization when registering the archive CR...

8.8CVSS5.3AI score0.00657EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

ImageMagick 路径遍历漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 6.9.13-48 and 7.1.2-24 contained a path traversal vulnerability. This vulnerability stemmed from incorrec...

5.5CVSS5.3AI score0.00171EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

SQLAlchemy Admin 安全漏洞

SQLAlchemy Admin is an open-source SQLAlchemy model management interface tool developed by Smithy HQ. Versions of SQLAlchemy Admin prior to 0.25.1 contained a security vulnerability. This vulnerability stemmed from the ajaxlookup endpoint in the application.py file, which bypassed the isaccessibl...

4.3CVSS5.3AI score0.00367EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

National Security Agency Ghidra 路径遍历漏洞

National Security Agency Ghidra is a software reverse-engineering framework developed by the National Security Agency NSA. Prior to version 12.1 of National Security Agency Ghidra, there was a path traversal vulnerability. This vulnerability stemmed from SameDirDebugInfoProvider failing to valida...

4.6CVSS5.5AI score0.00186EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

ESP-IDF 缓冲区错误漏洞

ESP-IDF is an open-source development framework for Espressif’s SoCs, supported on Windows, Linux, and macOS. Versions 5.2.6, 5.3.5, 5.4.4, 5.5.3, and 6.0 of ESP-IDF contain buffer error vulnerabilities, which stem from out-of-bounds reads in the BlueDroid AVRCP vendor-command parser...

4.6CVSS5.5AI score0.00357EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

QNAP qumagie 信息泄露漏洞

QNAP Systems QuMagie is a QTS photo management application developed by QNAP Systems. There is a security vulnerability in QNAP Systems QuMagie, which stems from lack of authorization. This vulnerability may allow remote attackers to access unauthorized data or perform unauthorized operations. Th...

8.7CVSS5.9AI score0.0048EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

Nimiq 安全漏洞

Nimiq is an open-source implementation of the Albatross protocol in Rust. Versions of Nimiq prior to 1.5.0 contained a security vulnerability. This vulnerability occurred when processing RequestBatchSet messages that contained the hash of the genesis block, causing Policy::macroblockbefore to cra...

5.3CVSS5.3AI score0.00507EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

ImageMagick 缓冲区错误漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 6.9.13-47 and 7.1.2-22 contained a buffer error vulnerability. This vulnerability occurred when malicious...

5.1CVSS5.6AI score0.0016EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/10 12:00 a.m.•33 views

Dulwich 资源管理错误漏洞

Dulwich is a Python-based Git repository management interface developed by Jelmer Vernooij. Versions of Dulwich prior to 1.2.5 contained a resource management vulnerability. This vulnerability stemmed from the allocation of memory based on the destsize parameter when handling special thin package...

5.7CVSS5.3AI score0.00328EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Apache Answer 代码问题漏洞

Apache Answer is a community platform of the Apache Foundation in the United States. Versions of Apache Answer 2.0.0 and earlier had code vulnerabilities. These vulnerabilities stemmed from insufficient restrictions on the upload of dangerous types of files. Custom TIFF images might trigger...

6.5CVSS5.4AI score0.00653EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager is a content management solution developed by Adobe Inc. in the United States. It can be used to build websites, mobile applications, and forms. This solution supports mobile content management, marketing and sales activity management, and multi-site management, among...

5.4CVSS5.5AI score0.00359EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager is a content management solution developed by Adobe Inc. in the United States. It can be used to build websites, mobile applications, and forms. This solution supports mobile content management, marketing and sales activity management, and multi-site management, among...

5.4CVSS5.5AI score0.00359EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager is a content management solution developed by Adobe Inc. in the United States. It can be used to build websites, mobile applications, and forms. This solution supports mobile content management, marketing and sales activity management, and multi-site management, among...

5.4CVSS5.2AI score0.00359EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Ellucian Banner Self-Service 跨站脚本漏洞

Ellucian Banner Self-Service is a higher education self-service platform developed by the American company Ellucian. Versions of Ellucian Banner Self-Service prior to 2025-04-23 had a cross-site scripting vulnerability. This vulnerability stemmed from the course search function not being...

5.4CVSS4.9AI score0.00335EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Adobe ColdFusion 输入验证错误漏洞

Adobe ColdFusion is a rapid application development platform provided by Adobe Inc. This platform includes an integrated development environment and a scripting language. Versions of Adobe ColdFusion such as 2023.19, 2025.8, and earlier versions have a vulnerability related to input validation...

8.4CVSS5.8AI score0.00471EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

VMware Spring Framework 代码问题漏洞

VMware Spring Framework is an open-source Java and JavaEE application framework developed by VMware, Inc. This framework helps developers build high-quality applications. Versions of the VMware Spring Framework prior to 7.0.0, 6.2.0, 6.1.0, and 5.3.0 contain code vulnerabilities. These...

9.8CVSS5.7AI score0.00481EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Linux 释放后重用漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel. This vulnerability arises from the vgicitsinvalidatecache function, which incorrectly places an iteration pointer ...

9.3CVSS6.9AI score0.00204EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Microsoft Exchange Server 服务端请求伪造漏洞

Microsoft Exchange Server is a email service program provided by the American company Microsoft. It offers features such as email access, storage, forwarding, voicemail handling, and email filtering. There are code vulnerabilities in Microsoft Exchange Server. Attackers can exploit these...

5CVSS5.8AI score0.00642EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager is a content management solution developed by Adobe Inc. in the United States. It can be used to build websites, mobile applications, and forms. This solution supports mobile content management, marketing and sales activity management, and multi-site management, among...

5.4CVSS5.2AI score0.00359EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Adobe Dreamweaver Desktop 输入验证错误漏洞

Adobe Dreamweaver Desktop is a web design and development software provided by Adobe, a company based in America. Versions of Adobe Dreamweaver Desktop starting from 21.7 and earlier have a vulnerability related to input validation. This vulnerability arises due to improper input validation, whic...

6.3CVSS5.5AI score0.00263EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

FreeSWITCH 安全漏洞

FreeSWITCH is a free and open-source communication software developed by Anthony Minessale, an individual developer from the United States. This software can be used to create audio, video, and messaging-related products and applications. Prior to FreeSWITCH version 1.11.1, there were security...

7.5CVSS5.4AI score0.00533EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Siemens多款产品 代码问题漏洞

Siemens SIPROTEC 5 6MD84, among others, are relay devices produced by the German company Siemens. Several Siemens products have code vulnerabilities. These vulnerabilities stem from allowing authenticated users to upload arbitrary files via the DIGSI 5 protocol, which may lead to denial of servic...

6.9CVSS5.8AI score0.00186EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

OpenSSL 资源管理错误漏洞

OpenSSL is an open-source encryption library developed by the OpenSSL team that enables secure implementation of Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. This product supports various encryption algorithms, including symmetric ciphers, hash algorithms, and secure...

5CVSS5.8AI score0.00237EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

NETGEAR 多款产品输入验证错误漏洞

NETGEAR is a router product from the American company NETGEAR. It is a hardware device used to connect two or more networks, acting as a gateway between them. Several NETGEAR products have a vulnerability related to input validation. This vulnerability allows attackers to intercept and tamper wit...

9.1CVSS6AI score0.00681EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Microsoft Windows Push Notifications 资源管理错误漏洞

Microsoft Windows Push Notifications is a push notification service provided by Microsoft Corporation. It provides a reliable way to deliver new updates. There are security vulnerabilities associated with Microsoft Windows Push Notifications. The following products and versions are affected:...

5.5CVSS5.8AI score0.00404EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Microsoft Windows Shell 信息泄露漏洞

Microsoft Windows Shell is the graphical user interface of the Windows operating system developed by Microsoft Corporation. Key features of the Windows Shell include the desktop, taskbar, start menu, task switcher, and auto-play. There is an information leakage vulnerability present in Microsoft...

6.5CVSS5.3AI score0.00995EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Hermes Web UI 路径遍历漏洞

Hermes Web UI is a lightweight, dark-themed web interface developed by Nathan Esquenazi. Versions of Hermes Web UI prior to 0.51.269 contained a path traversal vulnerability. This vulnerability stemmed from an issue with bypassing workspace boundaries, which could allow authentication attackers t...

7.7CVSS5.4AI score0.00505EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Huawei HarmonyOS 资源管理错误漏洞

Huawei HarmonyOS is a distributed operating system developed independently by Huawei. It primarily offers seamless collaboration across devices, intelligent experiences in various scenarios, and security features. Huawei HarmonyOS has a denial-of-service vulnerability. This vulnerability stems fr...

4.3CVSS5.8AI score0.00233EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Tenda W3 缓冲区错误漏洞

The Tenda W3 is a wireless access point device produced by the Chinese company Tenda. Version 1.0.0.32204 of the Tenda W3 Wireless Router contains a security vulnerability. This vulnerability stems from multiple stack overflows in the username and password parameters within the...

7.5CVSS5.9AI score0.00553EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•33 views

Microsoft DWM Core Library 缓冲区错误漏洞

The Microsoft DWM Core Library is a core library of Microsoft Windows from the company Microsoft. The Microsoft DWM Core Library has a buffer overflow vulnerability. Attackers can exploit this vulnerability to obtain sensitive information. The following products and versions are affected: Windows...

5.5CVSS5.8AI score0.00404EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/08 12:00 a.m.•33 views

tiny-regex-c 资源管理错误漏洞

tiny-regex-c is a lightweight regular expression parsing library developed by Kokke. There is a resource management vulnerability in tiny-regex-c, which stems from improper operation of the matchstar function in the pattern processing component of the file re.c. This vulnerability may lead to...

4.8CVSS4.6AI score0.00113EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/07 12:00 a.m.•33 views

GL.iNet GL-MT3000 命令注入漏洞

GL.iNet GL-MT3000 is a portable travel router from the company GL.iNet, which supports Wi-Fi 6 and VPN functions. Version 4.4.5 of GL.iNet GL-MT3000 has a command injection vulnerability. This vulnerability stems from a problem with the function “rpcsys” in the LuCI JSON-RPC Interface component...

6.5CVSS6.4AI score0.01102EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/06/06 12:00 a.m.•33 views

TP-Link Tapo C520WS 安全漏洞

The Tapo C520WS v2 is a TP-Link network camera used for video surveillance and ONVIF device management. The Tapo C520WS v2 has a stack buffer overflow vulnerability. This vulnerability arises due to a lack of valid boundary checks when the ONVIF CreateUsers service processes XML user nodes...

6.8CVSS5.6AI score0.00276EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/06/05 12:00 a.m.•33 views

Lyrion Music Server 跨站脚本漏洞

Lyrion Music Server is an audio server software developed by the Lyrion organization. Version 9.2.0 of Lyrion Music Server contains a cross-site scripting vulnerability. This vulnerability stems from a reflective cross-site scripting vulnerability present in advanced search parameters, which may...

6.1CVSS5AI score0.00263EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•33 views

OpenStack Ironic 安全漏洞

OpenStack Ironic is an integrated OpenStack application. It is used to configure bare machines rather than virtual machines. Versions of OpenStack Ironic prior to 35.0.2 contained a security vulnerability. This vulnerability stemmed from allowing malicious project administrators or managers to re...

4.9CVSS5.2AI score0.00472EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/03 12:00 a.m.•33 views

WordPress plugin Passeum Ticketing 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

4.4CVSS5.1AI score0.00327EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/06/02 12:00 a.m.•33 views

NVIDIA NVTabular 代码问题漏洞

NVIDIA NVTabular is a component within the deep learning recommendation system framework developed by NVIDIA Corporation. NVIDIA NVTabular has code-related vulnerabilities; these vulnerabilities stem from improper deserialization of untrusted data, which may lead to code execution, data tampering...

7.8CVSS5.6AI score0.0017EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•33 views

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporation. Qualcomm Chipsets have a buffer error vulnerability, which stems from memory corruption during the processing of IOCTL calls...

7.8CVSS5.8AI score0.0007EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•33 views

sglang 安全漏洞

SGLang is a programming language and runtime system developed by SGL-project, aimed at accelerating large model inference. Version SGLang 0.5.10.post1 contains a security vulnerability. This vulnerability stems from an unknown function in the Inference HTTP Endpoint component file...

6.3CVSS4.9AI score0.00368EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•33 views

Dassault Systèmes Teamwork Cloud和Dassault Systèmes Magic Collaboration Studio 安全漏洞

Dassault Systèmes Teamwork Cloud and Dassault Systèmes Magic Collaboration Studio are both products of Dassault Systèmes, a French company. Dassault Systèmes Teamwork Cloud is a collaborative model version control and storage platform. Dassault Systèmes Magic Collaboration Studio is a cloud-based...

9.8CVSS6.1AI score0.00812EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•33 views

SourceCodester Water Billing Management System SQL注入漏洞

The SourceCodester Water Billing Management System is an open-source water billing management system developed by SourceCodester. Version 1.0 of the SourceCodester Water Billing Management System contains a SQL injection vulnerability. This vulnerability stems from incorrect parameter handling in...

5.8CVSS5.2AI score0.00262EPSS
SaveExploits0References6
Total number of security vulnerabilities5000