Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
•added 2024/11/26 12:00 a.m.•33 views

EditorConfig 安全漏洞

EditorConfig is an application of EditorConfig open source. Makes it easy to maintain correct coding style when switching between different text editors and different projects. A security vulnerability exists in EditorConfig that stems from the possibility of multiple overflows when the input...

4.8CVSS6.5AI score0.00204EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/11/22 12:00 a.m.•33 views

7-Zip 数字错误漏洞

7-Zip is a compression software from the 7-Zip open source. A numeric error vulnerability exists in 7-Zip that stems from improper validation of user-supplied data during the Zstandard decompression process, which could result in an integer overflow and execution of arbitrary code before writing ...

7.8CVSS8AI score0.22561EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/11/20 12:00 a.m.•33 views

Querydsl 安全漏洞

Querydsl is a framework from the Querydsl open source that supports building type-safe SQL-like queries for multiple backends. A security vulnerability exists in Querydsl version 5.1.0 that stems from allowing SQL or HQL injection in orderBy in JPAQuery...

7.5AI score0.00408EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•33 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is caused by type confusion in V8. An attacker can exploit the vulnerability to execute arbitrary code on the system...

8.8CVSS8AI score0.00419EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/10/22 12:00 a.m.•33 views

Jamf Pro 安全漏洞

Jamf Pro is an Apple device management solution from Jamf USA. A security vulnerability exists in Jamf Pro that stems from a flaw in the Jamf Remote Assist tool that allows a local, unprivileged user to elevate their privileges to root privileges on MacOS systems...

5.2CVSS6.6AI score0.00143EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/10/20 12:00 a.m.•33 views

WordPress plugin LiteSpeed Cache 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS9.3AI score0.82335EPSS
SaveExploits7References7
CNNVD
CNNVD
•added 2024/10/08 12:00 a.m.•33 views

Siemens JT2GO 安全漏洞

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with available JT, VFZ, CGM and TIF data. Siemens JT2Go suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.6AI score0.00191EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/10/01 12:00 a.m.•33 views

uPlot 安全漏洞

uPlot is a fast, memory-efficient Canvas 2D-based chart for drawing time series, lines, areas, ohlc, and bars from leeoniya personal developer. A security vulnerability exists in uPlot versions prior to 1.6.31, which stems from a lack of checking whether attributes resolve to object prototypes...

8.2CVSS7.9AI score0.00705EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/09/23 12:00 a.m.•33 views

Entrust Instant Financial Issuance 安全漏洞

Entrust Instant Financial Issuance Entrust Cardwizard is an instant financial card issuance solution from Entrust Corporation, USA. A security vulnerability exists in Entrust Instant Financial Issuance that stems from the configuration file WebAPI.cfg.xml left behind after installation without...

5.9CVSS6.2AI score0.00197EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/09/10 12:00 a.m.•33 views

WordPress plugin Community by PeepSo – Social Network, Membership, Registration, User Profiles 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin...

4.8CVSS5.6AI score0.00336EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/08/29 12:00 a.m.•33 views

WordPress plugin Viral Signup 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.8CVSS6.7AI score0.00373EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/08/21 12:00 a.m.•33 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue in the sched/core component in dupusercpusptr...

7.8CVSS6.5AI score0.00249EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/08/01 12:00 a.m.•33 views

WordPress plugin PowerPack for Beaver Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.7AI score0.00418EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/07/31 12:00 a.m.•33 views

Homebrew 安全漏洞

Homebrew is a package manager in the Homebrew open source. A security vulnerability exists in Homebrew versions prior to 4.2.20, which stems from os/linux/elf.rb's use of ldd to load ELF files obtained from untrusted sources. An attacker can achieve code execution via an ELF file with a custom...

8.3CVSS7.3AI score0.00647EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/07/15 12:00 a.m.•33 views

Openfind Mail2000 Cross-Site Scripting Vulnerability

Openfind Mail2000 is a Web-based email system from China's Openfind. A cross-site scripting vulnerability exists in Openfind Mail2000, which originates from not properly validating email attachments, allowing an unauthenticated, remote attacker to inject JavaScript code into the attachments and...

6.1CVSS6.2AI score0.00502EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/07/09 12:00 a.m.•33 views

Microsoft SQL Server Security Vulnerability

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

8.8CVSS7.3AI score0.01675EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/06/20 12:00 a.m.•33 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the incorrect use of portid by the ASoC:codecs:wcd938x module...

9.8CVSS6.5AI score0.00459EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/06/18 12:00 a.m.•33 views

WordPress plugin Divi security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.4CVSS5.8AI score0.00263EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/05/17 12:00 a.m.•33 views

Submariner Operator 安全漏洞

Submariner Operator is a Submariner open source for installing Submariner components on Kubernetes clusters. A security vulnerability exists in Submariner Operator, which stems from unnecessary role-based access control privileges that allow a privileged attacker to steal service account tokens a...

6.6CVSS6.4AI score0.00507EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/05/09 12:00 a.m.•33 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a memory misreference vulnerability that is due to free usage in Visuals. An attacker can exploit this vulnerability to execute arbitrary code on a system...

9.6CVSS9.3AI score0.08348EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/05/07 12:00 a.m.•33 views

Desdev DedeCMS 跨站请求伪造漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Desdev Network Desdev. The system has content publishing, content management, content editing and content retrieval functions. A cross-site request forgery vulnerability...

5CVSS5AI score0.00428EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/05/06 12:00 a.m.•33 views

HSC Cybersecurity HC Mailinspector 路径遍历漏洞

HSC Cybersecurity HC Mailinspector is a cloud email security solution from HSC Cybersecurity. A path traversal vulnerability exists in HSC Cybersecurity HC Mailinspector versions 5.2.17-3 through v.5.2.18, which stems from an unauthenticated path traversal vulnerability in /public/loader.php, whe...

8.6CVSS9AI score0.06699EPSS
SaveExploits5References2
CNNVD
CNNVD
•added 2024/05/06 12:00 a.m.•33 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when an IOCTL call is interrupted by a signal...

8.4CVSS6.7AI score0.00156EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/05/01 12:00 a.m.•33 views

LOGINT LoMag Inventory Management 安全漏洞

LOGINT LoMag Inventory Management is an inventory management system from LOGINT. A security vulnerability exists in LOGINT LoMag Inventory Management v1.0.20.120 and earlier versions, which stems from a vulnerability that could allow a local attacker to obtain sensitive information via the...

8.1CVSS6.1AI score0.0087EPSS
SaveExploits4References2
CNNVD
CNNVD
•added 2024/04/26 12:00 a.m.•33 views

ASUS RT-N12 安全漏洞

ASUS RT-N12 is a router from Asus China. A security vulnerability exists in the ASUS RT-N12 that originates from storing credentials in clear text, which could allow a local attacker to gain unauthorized access and modify router settings...

6.1CVSS6.7AI score0.00146EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/04/10 12:00 a.m.•33 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 123.0.6312.122, which originated from a vulnerability that allows remote attackers to corrupt GPU processes and perform sandbox escapes via specific UI gesture...

9.6CVSS8.9AI score0.00848EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/04/10 12:00 a.m.•33 views

WordPress Plugin Wholesale for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in...

7.5CVSS8.3AI score0.00442EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•33 views

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute code. T...

8.8CVSS8.8AI score0.024EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/03/29 12:00 a.m.•33 views

WordPress Plugin Zotpress SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Zotpress is vulnerabl...

8.8CVSS8.7AI score0.00594EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/20 12:00 a.m.•33 views

Microsoft Xbox Gaming Services 安全漏洞

Microsoft Xbox Gaming Services is an Xbox-related gaming service from Microsoft Corporation USA. A security vulnerability exists in Microsoft Xbox Gaming Services that stems from the presence of an elevation of privilege vulnerability...

8.8CVSS8.4AI score0.00646EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/03/18 12:00 a.m.•33 views

FitNesse Security Breach

FitNesse is a fully integrated standalone wiki and acceptance testing framework. A security vulnerability exists in versions prior to FitNesse 20220319, which stems from a cross-site scripting vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary scripts on a...

6.1CVSS6.5AI score0.0057EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/03/11 12:00 a.m.•33 views

WordPress plugin User Registration security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.5CVSS6.7AI score0.00554EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2024/03/09 12:00 a.m.•33 views

GPAC Security Vulnerabilities

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.3-DEV-rev588-g7edc40fee-mastergpac, which originated from a null pointer reference in gfdashsetupperiod in mediatools/dashclient that allows remote attackers to obtain sensitive information...

9.8CVSS6.7AI score0.01101EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/03/01 12:00 a.m.•33 views

Dell BIOS Security Vulnerability

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. A security vulnerability exists in Dell BIOS that stems from the inclusion of an incorrect null termination vulnerability...

6.8CVSS6.8AI score0.00493EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/31 12:00 a.m.•33 views

stereoscope path traversal vulnerability

stereoscope is a library for working with container image contents, layer file trees, and compressed file trees. A path traversal vulnerability exists in stereoscope versions prior to 0.0.1, which stems from an attempt by Stereoscope to unarchive content that will result in writing to a path...

9.8CVSS6.8AI score0.00393EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/01/16 12:00 a.m.•33 views

Drupal Security Vulnerabilities

Drupal is an open source content management system developed in PHP by the Drupal community. A security vulnerability exists in Drupal version 9.3.6, which stems from the presence of a Denial of Service DoS vulnerability...

7.5CVSS6.9AI score0.00791EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/12/21 12:00 a.m.•33 views

Projectworlds Online Examination System SQL Injection Vulnerability

Projectworlds Online Examination System is an online examination system from Projectworlds India. Projectworlds Online Examination System v1.0 suffers from a SQL injection vulnerability, which stems from the "ch" parameter of update.php not validating received characters and sending them to the...

8.8CVSS7.9AI score0.00673EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/12/20 12:00 a.m.•33 views

WordPress Plugin Corsa Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

9.9CVSS6.8AI score0.00785EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/12/13 12:00 a.m.•33 views

Fortinet FortiVoice Security Vulnerability

Fortinet FortiSwitch and others are products of Fortinet, Inc. FortiSwitch is a switch product and Fortinet FortiVoice is a product of tine and others are products of tine, Inc. tine is a team collaboration software. A security vulnerability exists in Fortinet FortiVoiceEnterprise, FortiSwitch,...

8.8CVSS7AI score0.00491EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/12/11 12:00 a.m.•33 views

Google Chromecast Security Breach

Google Chromecast is a technology from the American company Google Google. It allows you to stream your favorite entertainment and apps from your phone, tablet or laptop directly to your TV or speakers. Google Chromecast has a security vulnerability that stems from the presence of a code executio...

9.8CVSS7.5AI score0.00373EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/11/14 12:00 a.m.•33 views

Microsoft Windows Kernel Security Vulnerability

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions are affected:Windows 10...

7CVSS6.8AI score0.00363EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/10/20 12:00 a.m.•33 views

VMware Workstation Buffer Error Vulnerability

VMware Workstation is a set of virtual machine software from VMware. The software provides the ability to run multiple virtual machines with different operating systems at the same time. A security vulnerability exists in VMware Workstation version 17.x prior to 17.5, which stems from an...

7.1CVSS6.2AI score0.00202EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/12 12:00 a.m.•33 views

WordPress plugin Contact Form by Supsystic Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.6AI score0.00208EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/11 12:00 a.m.•33 views

Inspect Element Echo.ac Security Vulnerability

Inspect Element Echo.ac is an application from Inspect Element, Inc. A security vulnerability exists in Inspect Element Echo.ac prior to version v.5.2.1.0, which stems from a vulnerability that allows a local attacker to gain privileges via the echodriver.sys component using a crafted command...

7.8CVSS6.9AI score0.00456EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2023/10/03 12:00 a.m.•33 views

WordPress Plugin Meks Audio Player Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00434EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2023/10/02 12:00 a.m.•33 views

free5GC Cross-Site Request Forgery Vulnerability

free5GC is a 5th Generation 5G mobile core network open source project by free5GC open source. free5GC suffers from a cross-site request forgery vulnerability that stems from the presence of a cross-site request forgery CSRF vulnerability. An attacker can exploit this vulnerability to create,...

9.8CVSS6.7AI score0.00434EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/09/05 12:00 a.m.•33 views

SaltStack Salt Security Vulnerabilities

SaltStack Salt is a set of open source tools for managing infrastructure from SaltStack. The tool provides configuration management, remote execution, and other features. A security vulnerability exists in SaltStack Salt versions prior to 3005.2 or 3006.2, which stems from the Git provider progra...

7.8CVSS6.6AI score0.00318EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/08/28 12:00 a.m.•33 views

Spinnaker 日志信息泄露漏洞

Spinnaker is a continuous delivery platform. It is used to release software changes with high speed and confidence. Spinnaker suffers from a log information disclosure vulnerability that stems from the possibility of granting elevated access to an uncontrolled repository...

5.3CVSS5.7AI score0.00381EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/08/14 12:00 a.m.•33 views

CyberPower PowerPanel Business Edition Security Vulnerability

Cyber Power Systems CyberPower PowerPanel Business Edition is a suite of power management software from Cyber Power Systems, USA. The software automates the shutdown of physical and virtual infrastructures and monitors and manages CyberPower UPS systems and network-connected PDUs Power Distributi...

9.8CVSS6.7AI score0.00882EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/07/18 12:00 a.m.•33 views

WordPress Plugin YARPP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

6.4CVSS6.4AI score0.0051EPSS
SaveExploits0References4
Total number of security vulnerabilities5000