Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
•added 2025/07/11 12:00 a.m.•33 views

Juniper Networks Junos OS和Juniper Networks Junos OS Evolved 资源管理错误漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK...

8.7CVSS6.5AI score0.00441EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/07/01 12:00 a.m.•33 views

CampCodes Employee Management System 注入漏洞

CampCodes Employee Management System is an employee management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Employee Management System version 1.0, which is caused by an incorrect manipulation of the mailuid parameter in the file /process/eprocess.php, resulti...

9.8CVSS7.9AI score0.00566EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/06/25 12:00 a.m.•33 views

Brother Industries Multiple driver installers for Windows 安全漏洞

Brother Industries Multiple driver installers for Windows is a driver software from Brother Industries, Japan. A security vulnerability exists in Brother Industries Multiple driver installers for Windows, which can be exploited by an unauthenticated attacker to generate a default administrator...

9.8CVSS8.3AI score0.15533EPSS
SaveExploits0References13
CNNVD
CNNVD
•added 2025/06/24 12:00 a.m.•33 views

Moodle 授权问题漏洞

Moodle is a free e-learning software platform open-sourced by Moodle, also known as a course management system, learning management system or virtual learning environment. An authorization issue vulnerability exists in Moodle versions 3.x through 3.11.18, which stems from a session fixation...

4.2CVSS6.6AI score0.00325EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/06/18 12:00 a.m.•33 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from unchecked kzalloc and devmkzalloc return values, which could lead to a null pointer dereference...

5.5CVSS7.9AI score0.00149EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/05/19 12:00 a.m.•33 views

Fuji Electric V-SFT 缓冲区错误漏洞

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. Fuji Electric V-SFT suffers from a buffer overflow vulnerability that originates in the settemptypedefault function in VS6MemInIF, which can be exploited by an attacker to cause a crash, information disclosure, and...

8.4CVSS7.3AI score0.00222EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/24 12:00 a.m.•33 views

WordPress plugin GTDB Guitar Tuners 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.5AI score0.00262EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/18 12:00 a.m.•33 views

PHPGurukul Men Salon Management System 注入漏洞

PHPGurukul Men Salon Management System is a men's salon management system from PHPGurukul. An injection vulnerability exists in PHPGurukul Men Salon Management System version 1.0, which originates from SQL injection due to the manipulation of multiple parameters in file /admin/contact-us.php...

8.8CVSS6.9AI score0.00526EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•33 views

WordPress plugin Theme File Duplicator 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

9.9CVSS8.9AI score0.00537EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•34 views

MongoDB Server 安全漏洞

MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . A denial of service vulnerability exists in MongoDB Server. The vulnerability...

6.5CVSS6.8AI score0.00398EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/02/13 12:00 a.m.•33 views

Lexmark 安全漏洞

Lexmark is a series of printers from Lexmark, a US company. A security vulnerability exists in Lexmark that stems from a type confusion issue that could cause an attacker to execute arbitrary code...

7.3CVSS7AI score0.00456EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/11 12:00 a.m.•33 views

Adobe Commerce 访问控制错误漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a security feature bypass...

6.5CVSS6.7AI score0.00766EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/02/07 12:00 a.m.•33 views

WordPress plugin A/B Image Optimizer 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversa...

9.8CVSS8.9AI score0.0204EPSS
SaveExploits4References1
CNNVD
CNNVD
•added 2025/01/08 12:00 a.m.•33 views

WordPress plugin MDTF SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

6.5CVSS8.8AI score0.00517EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/24 12:00 a.m.•33 views

Hanwha Vision NVR 安全漏洞

Hanwha Vision NVR is a series of network video recorder devices from Hanwha Vision, a South Korean company. A security vulnerability exists in the Hanwha Vision NVR that originates from an attacker being able to create log files in a directory one level higher than the directory where the NVR log...

5.1CVSS7.4AI score0.01116EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/26 12:00 a.m.•33 views

EditorConfig 安全漏洞

EditorConfig is an application of EditorConfig open source. Makes it easy to maintain correct coding style when switching between different text editors and different projects. A security vulnerability exists in EditorConfig that stems from the possibility of multiple overflows when the input...

4.8CVSS6.5AI score0.00204EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/11/20 12:00 a.m.•33 views

Querydsl 安全漏洞

Querydsl is a framework from the Querydsl open source that supports building type-safe SQL-like queries for multiple backends. A security vulnerability exists in Querydsl version 5.1.0 that stems from allowing SQL or HQL injection in orderBy in JPAQuery...

7.5AI score0.00408EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•33 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is caused by type confusion in V8. An attacker can exploit the vulnerability to execute arbitrary code on the system...

8.8CVSS8AI score0.00419EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/10/22 12:00 a.m.•33 views

Jamf Pro 安全漏洞

Jamf Pro is an Apple device management solution from Jamf USA. A security vulnerability exists in Jamf Pro that stems from a flaw in the Jamf Remote Assist tool that allows a local, unprivileged user to elevate their privileges to root privileges on MacOS systems...

5.2CVSS6.6AI score0.00143EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/10/20 12:00 a.m.•33 views

WordPress plugin LiteSpeed Cache 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS9.3AI score0.82335EPSS
SaveExploits7References7
CNNVD
CNNVD
•added 2024/10/08 12:00 a.m.•33 views

Siemens JT2GO 安全漏洞

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with available JT, VFZ, CGM and TIF data. Siemens JT2Go suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.6AI score0.00191EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/10/01 12:00 a.m.•33 views

uPlot 安全漏洞

uPlot is a fast, memory-efficient Canvas 2D-based chart for drawing time series, lines, areas, ohlc, and bars from leeoniya personal developer. A security vulnerability exists in uPlot versions prior to 1.6.31, which stems from a lack of checking whether attributes resolve to object prototypes...

8.2CVSS7.9AI score0.00705EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/09/23 12:00 a.m.•33 views

Entrust Instant Financial Issuance 安全漏洞

Entrust Instant Financial Issuance Entrust Cardwizard is an instant financial card issuance solution from Entrust Corporation, USA. A security vulnerability exists in Entrust Instant Financial Issuance that stems from the configuration file WebAPI.cfg.xml left behind after installation without...

5.9CVSS6.2AI score0.00197EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/09/10 12:00 a.m.•33 views

WordPress plugin Community by PeepSo – Social Network, Membership, Registration, User Profiles 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin...

4.8CVSS5.6AI score0.00336EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/08/29 12:00 a.m.•33 views

WordPress plugin Viral Signup 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.8CVSS6.7AI score0.00373EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/08/21 12:00 a.m.•33 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue in the sched/core component in dupusercpusptr...

7.8CVSS6.5AI score0.00249EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/08/01 12:00 a.m.•33 views

WordPress plugin PowerPack for Beaver Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.7AI score0.00418EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/07/31 12:00 a.m.•33 views

Homebrew 安全漏洞

Homebrew is a package manager in the Homebrew open source. A security vulnerability exists in Homebrew versions prior to 4.2.20, which stems from os/linux/elf.rb's use of ldd to load ELF files obtained from untrusted sources. An attacker can achieve code execution via an ELF file with a custom...

8.3CVSS7.3AI score0.00647EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/07/15 12:00 a.m.•33 views

Openfind Mail2000 Cross-Site Scripting Vulnerability

Openfind Mail2000 is a Web-based email system from China's Openfind. A cross-site scripting vulnerability exists in Openfind Mail2000, which originates from not properly validating email attachments, allowing an unauthenticated, remote attacker to inject JavaScript code into the attachments and...

6.1CVSS6.2AI score0.00502EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/07/09 12:00 a.m.•33 views

Microsoft SQL Server Security Vulnerability

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

8.8CVSS7.3AI score0.01675EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/06/20 12:00 a.m.•33 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the incorrect use of portid by the ASoC:codecs:wcd938x module...

9.8CVSS6.5AI score0.00459EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/06/18 12:00 a.m.•33 views

WordPress plugin Divi security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.4CVSS5.8AI score0.00263EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/05/17 12:00 a.m.•33 views

Submariner Operator 安全漏洞

Submariner Operator is a Submariner open source for installing Submariner components on Kubernetes clusters. A security vulnerability exists in Submariner Operator, which stems from unnecessary role-based access control privileges that allow a privileged attacker to steal service account tokens a...

6.6CVSS6.4AI score0.00507EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/05/09 12:00 a.m.•33 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a memory misreference vulnerability that is due to free usage in Visuals. An attacker can exploit this vulnerability to execute arbitrary code on a system...

9.6CVSS9.3AI score0.08348EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/05/06 12:00 a.m.•33 views

HSC Cybersecurity HC Mailinspector 路径遍历漏洞

HSC Cybersecurity HC Mailinspector is a cloud email security solution from HSC Cybersecurity. A path traversal vulnerability exists in HSC Cybersecurity HC Mailinspector versions 5.2.17-3 through v.5.2.18, which stems from an unauthenticated path traversal vulnerability in /public/loader.php, whe...

8.6CVSS9AI score0.06699EPSS
SaveExploits5References2
CNNVD
CNNVD
•added 2024/05/06 12:00 a.m.•33 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when an IOCTL call is interrupted by a signal...

8.4CVSS6.7AI score0.00156EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/05/03 12:00 a.m.•33 views

Sante DICOM Viewer Pro 安全漏洞

Santesoft Sante DICOM Viewer Pro is a powerful viewer, anonymizer, converter and PACS client from Santesoft Cyprus. Works with DICOM files of all models and manufacturers. A security vulnerability exists in Sante DICOM Viewer Pro, which stems from a lack of proper validation of user-supplied data...

8.8CVSS8AI score0.00916EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/05/01 12:00 a.m.•33 views

LOGINT LoMag Inventory Management 安全漏洞

LOGINT LoMag Inventory Management is an inventory management system from LOGINT. A security vulnerability exists in LOGINT LoMag Inventory Management v1.0.20.120 and earlier versions, which stems from a vulnerability that could allow a local attacker to obtain sensitive information via the...

8.1CVSS6.1AI score0.0087EPSS
SaveExploits4References2
CNNVD
CNNVD
•added 2024/04/26 12:00 a.m.•33 views

ASUS RT-N12 安全漏洞

ASUS RT-N12 is a router from Asus China. A security vulnerability exists in the ASUS RT-N12 that originates from storing credentials in clear text, which could allow a local attacker to gain unauthorized access and modify router settings...

6.1CVSS6.7AI score0.00146EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/04/10 12:00 a.m.•33 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 123.0.6312.122, which originated from a vulnerability that allows remote attackers to corrupt GPU processes and perform sandbox escapes via specific UI gesture...

9.6CVSS8.9AI score0.00848EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/04/10 12:00 a.m.•33 views

WordPress Plugin Wholesale for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in...

7.5CVSS8.3AI score0.00442EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•33 views

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute code. T...

8.8CVSS8.8AI score0.024EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/03/29 12:00 a.m.•33 views

WordPress Plugin Zotpress SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Zotpress is vulnerabl...

8.8CVSS8.7AI score0.00594EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/20 12:00 a.m.•33 views

Microsoft Xbox Gaming Services 安全漏洞

Microsoft Xbox Gaming Services is an Xbox-related gaming service from Microsoft Corporation USA. A security vulnerability exists in Microsoft Xbox Gaming Services that stems from the presence of an elevation of privilege vulnerability...

8.8CVSS8.4AI score0.00646EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/03/11 12:00 a.m.•33 views

WordPress plugin User Registration security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.5CVSS6.7AI score0.00554EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2024/03/09 12:00 a.m.•33 views

GPAC Security Vulnerabilities

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.3-DEV-rev588-g7edc40fee-mastergpac, which originated from a null pointer reference in gfdashsetupperiod in mediatools/dashclient that allows remote attackers to obtain sensitive information...

9.8CVSS6.7AI score0.01101EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/03/01 12:00 a.m.•33 views

Dell BIOS Security Vulnerability

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. A security vulnerability exists in Dell BIOS that stems from the inclusion of an incorrect null termination vulnerability...

6.8CVSS6.8AI score0.00493EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/31 12:00 a.m.•33 views

stereoscope path traversal vulnerability

stereoscope is a library for working with container image contents, layer file trees, and compressed file trees. A path traversal vulnerability exists in stereoscope versions prior to 0.0.1, which stems from an attempt by Stereoscope to unarchive content that will result in writing to a path...

9.8CVSS6.8AI score0.00393EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/01/16 12:00 a.m.•33 views

Drupal Security Vulnerabilities

Drupal is an open source content management system developed in PHP by the Drupal community. A security vulnerability exists in Drupal version 9.3.6, which stems from the presence of a Denial of Service DoS vulnerability...

7.5CVSS6.9AI score0.00791EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/12/21 12:00 a.m.•33 views

Projectworlds Online Examination System SQL Injection Vulnerability

Projectworlds Online Examination System is an online examination system from Projectworlds India. Projectworlds Online Examination System v1.0 suffers from a SQL injection vulnerability, which stems from the "ch" parameter of update.php not validating received characters and sending them to the...

8.8CVSS7.9AI score0.00673EPSS
SaveExploits1References3
Total number of security vulnerabilities5000