Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•33 views

FlexRIC 安全漏洞

FlexRIC is an open-source RAN intelligent controller developed by Mosaic5G. The FlexRIC v2.0.0 version contains a security vulnerability. This vulnerability arises from trusting the xappid field in the trust E42 message without binding it to the sender’s SCTP association. As a result, remote...

7.5CVSS5.4AI score0.00568EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/05/29 12:00 a.m.•33 views

FastGPT 安全漏洞

FastGPT is an open-source knowledge base question-answering system based on large language models developed by Labring. Versions of FastGPT prior to 4.15.0-beta1 contained a security vulnerability. This vulnerability stemmed from the JavaScript sandbox worker’s use of regular expressions. It test...

6.3CVSS5.9AI score0.00427EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/29 12:00 a.m.•33 views

GitHub CLI 安全漏洞

GitHub CLI is an open-source command-line interface for GitHub. Prior to version 2.93.0 of GitHub CLI, there was a security vulnerability. This vulnerability stemmed from incorrect authorization headers in API requests to the TUF repository via the gh attestation, gh release verify, and gh releas...

7.4CVSS5.8AI score0.00446EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/29 12:00 a.m.•33 views

FastGPT 代码问题漏洞

FastGPT is an open-source knowledge base question-answering system based on large language models developed by Labring. Versions of FastGPT prior to 4.15.0-beta1 contained code vulnerabilities. These vulnerabilities were caused by server-side request forgery, allowing authenticated attackers to...

7.7CVSS6AI score0.00361EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/29 12:00 a.m.•33 views

Network Optix Nx Witness VMS 安全漏洞

Network Optix Nx Witness VMS is a video management system developed by the American company Network Optix. Versions of Network Optix Nx Witness VMS prior to version 6.1.2 contained security vulnerabilities. These vulnerabilities were caused by incorrect CORS configurations in the REST API, which...

7.5CVSS5.9AI score0.00242EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•33 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the fact that the SPI/RSPI controller releases underlying resources such as DMA without properly...

5.8AI score0.00162EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•33 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a race condition in the handling of ICReq requests and queue removal in nvmet-tcp. This...

9.8CVSS5.8AI score0.00583EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•33 views

Acer NitroSense 安全漏洞

Acer NitroSense is a gaming device performance management software developed by Acer of Taiwan, China. Versions of Acer NitroSense prior to 3.01.3052 contained security vulnerabilities. These vulnerabilities stemmed from the PSAdminAgent service creating named pipes with weak access control lists...

8.5CVSS5.9AI score0.00146EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•33 views

UTT HiPER 1250GW 安全漏洞

UTT HiPER 1250GW is a wireless gateway device developed by UTT Corporation. Versions of UTT HiPER 1250GW prior to 3.2.7-210907-180535 contained security vulnerabilities. These vulnerabilities were caused by the strcpy function in the Web Management Interface component/goform/formGroupConfig file,...

9CVSS7.5AI score0.00792EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•33 views

pam_usb 安全漏洞

pamusb is a Linux hardware authentication tool developed by McDope’s individual developer, based on USB devices. Versions of pamusb prior to 0.9.0 contain security vulnerabilities; these vulnerabilities stem from the lack of mandatory verification of the system-side pad file, which could allow...

7.1CVSS5.8AI score0.00165EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•33 views

free5GC 安全漏洞

free5GC is an open-source project for the 5th generation 5G mobile core network. Versions of free5GC prior to 4.2.2 contained security vulnerabilities. These vulnerabilities stemmed from the lack of inbound OAuth2/Bearer-token authorization when the NEF module mounted the 3gpp-traffic-influence...

9.4CVSS5.8AI score0.0053EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•33 views

gitoxide 安全漏洞

GitOxide is a Git implementation written in Rust by Sebastian Thiel. Versions of GitOxide prior to 0.82.0 contained a security vulnerability, which stemmed from improper validation of the update field in.gitmodules. This vulnerability could allow attackers to bypass the...

8.5CVSS6AI score0.00359EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•33 views

mistune 跨站脚本漏洞

Mistune is a fast and powerful Python Markdown parser developed by Hsiaoming Yang. Versions of Mistune prior to 3.2.1 contained a cross-site scripting vulnerability. This vulnerability stemmed from the Image directive plugin using regular expressions that only matched prefixes to validate the wid...

6.1CVSS5.8AI score0.00271EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•33 views

NVIDIA Isaac Launchable 安全漏洞

NVIDIA Isaac Launchable is a cloud-based one-click deployment solution provided by NVIDIA Corporation. NVIDIA Isaac Launchable has a security vulnerability, which stems from the transmission of sensitive information in plain text. This vulnerability may lead to code execution, privilege escalatio...

9.8CVSS5.8AI score0.00655EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•33 views

Joomla! CMS 访问控制错误漏洞

Joomla! CMS is a content management system developed under the open source Joomla! framework. The Joomla! CMS has a vulnerability related to access control, which stems from improper access checks. As a result, users with low privileges can edit the task types of existing scheduling programs...

6.4CVSS5.8AI score0.00258EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•33 views

FastNetMon 安全漏洞

FastNetMon is a high-performance DDoS detector/sensor developed by Pavel Odintsov, based on multiple packet capture engines. Versions of FastNetMon prior to 1.2.9 contain security vulnerabilities. These vulnerabilities stem from a lack of boundary checks in the Data template branch of the NetFlow...

6.5CVSS5.8AI score0.00438EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/25 12:00 a.m.•33 views

PuTTY 安全漏洞

PuTTY is a suite of free Telnet, Rlogin and SSH client software from the individual developer Simon Tatham. The software is primarily used for remote administration of Linux systems. A security vulnerability exists in PuTTY versions prior to 0.84, which stems from an assertion failure in ECDSA...

3.7CVSS5.8AI score0.00353EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/20 12:00 a.m.•33 views

Trilium Notes 跨站脚本漏洞

Trilium Notes is a hierarchical note application developed by Zadam, a personal developer. It focuses on building large-scale personal knowledge bases. Versions of Trilium Notes prior to 0.102.1 contained a cross-site scripting vulnerability. This vulnerability stemmed from deficiencies such as...

6.8CVSS6.3AI score0.00364EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/20 12:00 a.m.•33 views

Taiko AG1000-01A SMS Alert Gateway 信任管理问题漏洞

The Taiko AG1000-01A SMS Alert Gateway is an industrial communication gateway device developed by Taiko Company in Singapore. It supports SMS-based alert notifications and remote event messaging. Both the Rev 7.3 and Rev 8 versions of the Taiko AG1000-01A SMS Alert Gateway contain vulnerabilities...

9.8CVSS5.9AI score0.00666EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/19 12:00 a.m.•33 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of boundary checks on the number of servers added to each node. A malicious client can send th...

5.8AI score0.00162EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/19 12:00 a.m.•33 views

Keycloak 输入验证错误漏洞

Keycloak is an open-source identity and access management solution developed by Keycloak itself. Keycloak has a vulnerability related to input validation. This vulnerability stems from differences in the URL validation logic during redirection operations, which may allow attackers to bypass...

8.1CVSS5.8AI score0.00499EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/15 12:00 a.m.•33 views

Open WebUI 跨站脚本漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Versions of Open WebUI prior to 0.9.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from stored-xss attacks, which could allow users with model creation permissions to...

7.3CVSS7.4AI score0.00372EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/05/15 12:00 a.m.•33 views

Silicon Simplicity SDK 安全特征问题漏洞

The Silicon Simplicity SDK is an embedded software development platform provided by Silicon Corporation in the United States. It is used to build IoT products based on our 2-series and upcoming 3-series wireless and MCU devices. The Silicon Simplicity SDK has a security feature vulnerability, whi...

4.1CVSS5.8AI score0.00146EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/15 12:00 a.m.•33 views

Open WebUI 代码问题漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Versions of Open WebUI prior to 0.9.0 had code-related vulnerabilities. These vulnerabilities stemmed from the lack of proper handling when managing role changes or deleting users, which resulted in...

8.1CVSS5.8AI score0.00393EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/05/13 12:00 a.m.•33 views

Cowlib 安全漏洞

Cowlib is a web protocol message parsing and building library developed by Nine Nines. Versions of Cowlib from 0.1.0 to 2.16.1 contained security vulnerabilities. These vulnerabilities were due to improper handling of highly compressed data. The cowspdy:inflate/2 function did not limit the output...

8.2CVSS5.8AI score0.00637EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/13 12:00 a.m.•33 views

GitHub Copilot CLI 安全漏洞

GitHub Copilot CLI is a terminal AI programming assistant open sourced by GitHub. Versions of GitHub Copilot CLI prior to version 1.0.43 contained a security vulnerability. This vulnerability stemmed from malicious bare git repositories nested within project directories. When the agent performed...

8.5CVSS6AI score0.00384EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2026/05/13 12:00 a.m.•33 views

MISP modules 信任管理问题漏洞

MISP modules are scalable threat intelligence platform modules developed under the open-source MISP Project. They support import, export, expansion, and automated workflows. Prior to version 3.0.7, there were vulnerabilities related to trust management in MISP modules. These vulnerabilities stemm...

5.8CVSS5.9AI score0.0013EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/13 12:00 a.m.•33 views

crypt-argon2 安全漏洞

Crypt-Argon2 is a password hashing and verification tool developed by Leon Timmermans. Versions of Crypt-Argon2 from 0.017 to 0.031 contained security vulnerabilities. These vulnerabilities stemmed from the use of argon2verify, which executed heap overflow reads with empty code inputs, potentiall...

5.3CVSS6AI score0.00512EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•33 views

Microsoft Windows Admin Center 安全漏洞

Microsoft Windows Admin Center is a browser-based, locally deployed application developed by Microsoft. This tool is primarily used for managing servers and clusters. There are security vulnerabilities in Microsoft Windows Admin Center. Attackers can exploit these vulnerabilities to gain higher...

8.3CVSS5.8AI score0.00628EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•33 views

Microsoft Win32k 资源管理错误漏洞

Microsoft Win32k is a system file used by Microsoft for multi-user management in Windows operating systems. There is a resource management vulnerability in Microsoft Windows Win32K-ICOMP. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/11 12:00 a.m.•33 views

Apple多款产品 安全漏洞

Apple iOS, among others, are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system designed for Mac computers. Apple iPadOS is an operating system for iPad tablets. Several of Apple’s products have...

7.5CVSS5.8AI score0.00543EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/08 12:00 a.m.•33 views

SEPPmail Secure Email Gateway 安全漏洞

SEPPmail Secure Email Gateway is an email security gateway developed by the German company SEPPmail. Versions of SEPPmail Secure Email Gateway prior to version 15.0.2.1 contained security vulnerabilities. These vulnerabilities stemmed from the use of the eval function in the new GINA UI, allowing...

9.3CVSS6.3AI score0.00735EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/08 12:00 a.m.•33 views

New API 数据伪造问题漏洞

The New API is an interface software developed by QuantumNous. Versions of the New API prior to 0.12.10 had a data manipulation vulnerability. This vulnerability stems from defects in the Stripe webhook handler, which could allow unauthorized attackers to forge webhook events and arbitrarily...

8.2CVSS5.7AI score0.00751EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/05/07 12:00 a.m.•33 views

Admidio 代码问题漏洞

Admidio is a set of open-source member management systems developed by the Admidio team. This system supports features such as member lists, event management, message boards, photo albums, and downloads. Versions of Admidio prior to 5.0.9 had code vulnerabilities. These vulnerabilities stemmed fr...

5.2CVSS5.9AI score0.00367EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/06 12:00 a.m.•33 views

Apache::Session::Generate::ModUniqueId 安全漏洞

Apache::Session::Generate::ModUniqueId is a session ID generation module developed by RRWO’s individual developers. There are security vulnerabilities in the version 1.54 to 1.94 of Apache::Session::Generate::ModUniqueId. These vulnerabilities stem from the use of the UNIQUEID environment variabl...

9.1CVSS5.8AI score0.00487EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/06 12:00 a.m.•33 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an out-of-bounds write operation in the ocfs2writeendinline function. This vulnerability may lead...

7.8CVSS5.9AI score0.00171EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/06 12:00 a.m.•33 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a race condition between the driveroverrideshow function and the driveroverridestore function in...

4.7CVSS5.8AI score0.00099EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/05 12:00 a.m.•33 views

CoreDNS 安全漏洞

CoreDNS is a DNS server within the CoreDNS community. Versions of CoreDNS prior to 1.14.3 contained a security vulnerability. This vulnerability stemmed from the tsig plugin’s trust transfer writer, which relied on TsigStatus for verification instead of performing its own validation. This allowed...

8.7CVSS5.8AI score0.00525EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/05/05 12:00 a.m.•33 views

WordPress plugin Loco Translate 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

4.9CVSS5.8AI score0.0064EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/05 12:00 a.m.•33 views

Sandboxie-Plus 安全漏洞

Sandboxie-Plus is a sandbox isolation software developed by Sandboxie-Plus Inc. Versions of Sandboxie-Plus 1.17.2 and earlier contained security vulnerabilities. These vulnerabilities were caused by a stack buffer overflow in the RunSbieCtrl processor of the SbieIniServer module, which could lead...

7.8CVSS6.1AI score0.00155EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/05/04 12:00 a.m.•33 views

Notesnook 跨站脚本漏洞

Notesnook is an end-to-end encrypted note application developed by Streetwriters. Versions of Notesnook for Web/Desktop prior to 3.3.15, as well as versions for iOS/Android prior to 3.3.20, had a cross-site scripting vulnerability. This vulnerability stemmed from the lack of HTML escaping for...

9.6CVSS6AI score0.00848EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/04 12:00 a.m.•33 views

OpenC3 COSMOS 安全漏洞

OpenC3 COSMOS is an open-source application developed by OpenC3. Vulnerabilities exist in versions of OpenC3 COSMOS prior to 6.10.5 and 7.0.0-rc3. These vulnerabilities stem from design flaws in the savetoolconfig function, allowing the ability to save tool configuration files at any position...

4.3CVSS5.9AI score0.00411EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/05/03 12:00 a.m.•33 views

Open5GS 安全漏洞

Open5GS is an open-source implementation of 5G Core and EPC in C language, which serves as the core network for LTE/NR networks. Versions of Open5GS 2.7.7 and earlier contain security vulnerabilities. These vulnerabilities stem from the operation of the ogsdbisubscriptiondata function in the...

5.3CVSS5.8AI score0.00471EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/30 12:00 a.m.•33 views

Traefik 数据伪造问题漏洞

Traefik is an open-source reverse proxy and load balancing tool developed by Traefik. Versions prior to Traefik 2.11.43, 3.6.14, and 3.7.0-rc.2 contained a data manipulation vulnerability. This vulnerability stems from the ForwardAuth middleware, which has a authentication bypass vulnerability wh...

10CVSS5.7AI score0.00309EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/04/29 12:00 a.m.•33 views

CRM Sistemas MegaCMS SQL注入漏洞

CRM Sistemas MegaCMS is a content management system provided by CRM Sistemas, which offers features for creating and managing website content. Version 12.0.0 of CRM Sistemas MegaCMS has a SQL injection vulnerability. This vulnerability stems from insufficient validation and cleaning of user input...

10CVSS6.1AI score0.00453EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•33 views

Notes MCP server 路径遍历漏洞

Notes MCP Server is a text content collaboration management tool developed by Edvard Lindelof. Versions of Notes MCP Server prior to 0.1.4 contained a path traversal vulnerability. This vulnerability stemmed from incorrect handling of parameters rootdir and path in the notesmcp.py file, which cou...

7.5CVSS7.1AI score0.00587EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/24 12:00 a.m.•33 views

Better Auth 安全漏洞

Better Auth is an open-source TypeScript framework for authentication. Versions of Better Auth prior to 1.6.5 contained a security vulnerability. This vulnerability stemmed from the clientPrivileges option recording creation operations. However, the OAuth client did not call the hook before...

7.1CVSS5.8AI score0.00369EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/24 12:00 a.m.•33 views

BridgeHead FileStore 安全漏洞

BridgeHead FileStore is a medical data-oriented file storage and long-term archiving management system developed by BridgeHead Corporation in Canada. Previous versions of BridgeHead FileStore 24A contained security vulnerabilities. These vulnerabilities stemmed from the Apache Axis2 management...

9.8CVSS6.1AI score0.01051EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/23 12:00 a.m.•33 views

DOMPurify 跨站脚本漏洞

DOMPurify is a JavaScript-based tool developed by Cure53’s individual developer, designed for working with the DOM Document Object Model in HTML, MathML, and SVG. Versions 3.0.1 to 3.3.3 of DOMPurify contain cross-site scripting vulnerabilities. These vulnerabilities stem from XSS attacks that...

6.9CVSS5.8AI score0.00346EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/23 12:00 a.m.•33 views

Rocket.Chat SQL注入漏洞

Rocket.Chat is a chat software developed by the Rocket.Chat company. Versions prior to 8.3.0, 8.2.1, 8.1.2, 8.0.3, 7.13.5, 7.12.6, 7.11.6, and 7.10.9 have a SQL injection vulnerability. This vulnerability stems from NoSQL injection and could lead to the takeover of the first user account with a...

9.8CVSS5.9AI score0.00561EPSS
SaveExploits0References1
Total number of security vulnerabilities5000