Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
added 2026/05/27 12:00 a.m.31 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a security vulnerability. This vulnerability stemmed from an issue with the ANGLE component where uninitialized resources were used, which could allow a remote attacker with access ...

5CVSS5.8AI score0.00199EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.31 views

free5GC 安全漏洞

free5GC is an open-source project for the 5th generation 5G mobile core network. Versions of free5GC prior to 4.2.2 contained security vulnerabilities. These vulnerabilities stemmed from the UDM component failing to validate the supi path parameters of the six GET processors in the nudm-sdm...

8.7CVSS5.8AI score0.00324EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.31 views

UltraJSON 安全漏洞

UltraJSON is an open-source, ultra-fast JSON encoder and decoder written in pure C language, and compatible with Python 3.7+. Versions of UltraJSON prior to 5.12.1 contained a security vulnerability. This vulnerability occurred when writing object-like data to a file using ujson.dump, where an...

8.7CVSS5.8AI score0.00421EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.31 views

MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECTION24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymb CONNECTION24 is an...

7.1CVSS5.9AI score0.00262EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.31 views

eml_parser 安全漏洞

EmlParser is an open-source Python library for parsing email files, developed by GOVCERT.LU. Versions of EmlParser prior to 3.0.1 contained security vulnerabilities. These vulnerabilities stemmed from the use of EmlParser.getrawbodytext, which performed unrestricted recursive processing on nested...

6.3CVSS5.8AI score0.00396EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.31 views

OpenTelemetry Collector Contrib 信任管理问题漏洞

OpenTelemetry Collector Contrib is an extensible telemetry data collection component library developed by OpenTelemetry - CNCF. Versions of OpenTelemetry Collector Contrib prior to 1.1.0 contained a trust management vulnerability. This vulnerability stemmed from the lack of validation of HTTPS/TL...

6.5CVSS5.8AI score0.00207EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.31 views

FastNetMon 安全漏洞

FastNetMon is a high-performance DDoS detector/sensor developed by Pavel Odintsov. It is built using multiple packet capture engines. Versions of FastNetMon Community Edition prior to 1.2.9 contained security vulnerabilities. These vulnerabilities stemmed from the use of predictable file paths an...

5.5CVSS5.8AI score0.00127EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.31 views

Joomla! CMS 安全漏洞

Joomla! CMS is a content management system developed under the open source Joomla! framework. The Joomla! CMS has a security vulnerability, which stems from the password and username reset function creating plaintext HTTP links for HTTPS connections when a mandatory SSL flag is not set...

9.8CVSS5.8AI score0.00252EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.31 views

algernon 安全漏洞

Algernon is a web server developed by Alexander F. Rødseth. Versions of Algernon prior to 1.17.7 contained security vulnerabilities. These vulnerabilities stemmed from the forced activation of debugging mode in single-file mode, allowing the leakage of the file’s absolute path and complete byte...

7.5CVSS5.8AI score0.00303EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.31 views

kavita 访问控制错误漏洞

Kavita is a fast and feature-rich cross-platform reading server developed by Kavita OpenSource. Versions of Kavita prior to 0.9.0 contained an access control vulnerability. This vulnerability stemmed from the ReaderController.GetImage endpoint, which allowed completely unauthenticated access,...

6.9CVSS5.8AI score0.00281EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.31 views

Edimax EW-7438RPn 安全漏洞

The Edimax EW-7438RPn is a wireless signal extender from Taiwan, China-based Xunzhou Edimax Corporation. A security vulnerability exists in the Edimax EW-7438RPn version 1.31, which originates from the parameter submit-url operation of the function formAccept in the file /goform/formAccept, and m...

9CVSS7.7AI score0.00751EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.31 views

Acer Care Center 安全漏洞

Acer Care Center is a system care center from Acer China that allows you to back up or restore your system settings and network drivers to prevent the effects of a system failure. A security vulnerability exists in Acer Care Center that stems from a Named Pipe created by the ACCSvc service that h...

6.8CVSS5.8AI score0.00173EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/05/24 12:00 a.m.31 views

JPress 授权问题漏洞

JPress is a blog platform developed using the Java language by the JPress team. Versions of JPress 1.0.3 and earlier contained an authorization vulnerability. This vulnerability stemmed from improper handling of the parameter id/userId in the UCenter Article Submission Endpoint component, which...

6.5CVSS6.7AI score0.00252EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/22 12:00 a.m.31 views

Dell PowerFlex Manager 加密问题漏洞

Dell PowerFlex Manager is a software-defined infrastructure deployment and lifecycle management platform developed by the American company Dell. Versions of Dell PowerFlex Manager prior to 4.6.2 contained an encryption vulnerability. This vulnerability stemmed from the use of defective or high-ri...

5.5CVSS5.8AI score0.00067EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/21 12:00 a.m.31 views

tickets 跨站脚本漏洞

Tickets is an open-source public safety scheduling and tracking application developed by Open ISES. Versions of tickets prior to 3.44.2 contained a cross-site scripting vulnerability. This vulnerability stemmed from the direct insertion of the ticketid POST parameter into HTML form input fields...

5.4CVSS5.8AI score0.00172EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/21 12:00 a.m.31 views

tickets 信任管理问题漏洞

Tickets is an open-source public safety scheduling and tracking application developed by Open ISES. Versions of tickets prior to 3.44.2 contained a vulnerability related to trust management. This vulnerability stemmed from the hardcoding of a Google Maps API key in the tables.php file, which coul...

6.9CVSS5.9AI score0.00224EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/20 12:00 a.m.31 views

Splunk AI Toolkit 安全漏洞

The Splunk AI Toolkit is a machine learning and artificial intelligence analysis toolkit developed by Splunk for their own platform. Versions of the Splunk AI Toolkit prior to 5.7.3 contained security vulnerabilities. These vulnerabilities stemmed from modifications to the srchFilter entry in the...

6.5CVSS5.8AI score0.0032EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/20 12:00 a.m.31 views

WordPress plugin Visualizer 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.6AI score0.00166EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/19 12:00 a.m.31 views

SAMSUNG Escargot 代码问题漏洞

SAMSUNG Escargot is a memory-optimized JavaScript engine developed by South Korea’s Samsung Corporation. It is suitable for mid-range devices such as smartphones, tablets, and TVs. SAMSUNG Escargot has a code vulnerability that stems from improper exception or special case handling, which may lea...

5.5CVSS5.9AI score0.00266EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/19 12:00 a.m.31 views

Keycloak 安全漏洞

Keycloak is an open-source identity and access management solution developed by Keycloak. Keycloak has a security vulnerability, which stems from the possibility for low-privilege users to bypass security controls and disable the implicit flow of OIDC clients, potentially leading to the leakage o...

7.1CVSS5.8AI score0.00344EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/19 12:00 a.m.31 views

Rocket.Chat 访问控制错误漏洞

Rocket.Chat is a chat software developed by the Rocket.Chat company. Vulnerabilities in access control existed in versions prior to 8.5.0, 8.4.2, 8.3.4, 8.2.4, 8.1.5, 8.0.6, 7.13.8, and 7.10.12. These vulnerabilities stemmed from the lack of room access checks for the...

5.3CVSS6.1AI score0.00252EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/18 12:00 a.m.31 views

Thermo Fisher Scientific Torrent Suite Dx 安全漏洞

Thermo Fisher Scientific Torrent Suite Dx is a clinical gene sequencing data analysis platform provided by Thermo Fisher Scientific. Versions of Thermo Fisher Scientific Torrent Suite Dx prior to 5.14.2 contained security vulnerabilities. These vulnerabilities were due to issues with privilege...

8.8CVSS5.8AI score0.0026EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/18 12:00 a.m.31 views

webdriverio 操作系统命令注入漏洞

WebdriverIO is an open-source automation testing framework for browsers and mobile devices developed by WebdriverIO. Versions of WebdriverIO prior to 9.24.0 had a vulnerability related to operating system command injection. This vulnerability stemmed from the getGitMetadataForAISelection function...

9.8CVSS6.2AI score0.03308EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/15 12:00 a.m.31 views

Imager 缓冲区错误漏洞

Imager is an image processing program developed by Tony Cook personally. Versions of Imager 1.030 and earlier contained a buffer error vulnerability. This vulnerability stemmed from the ireadgifmultilow function in Imager::File::GIF, which allocates a single buffer for each line of data. The size...

6.5CVSS6.1AI score0.00321EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/15 12:00 a.m.31 views

Open WebUI 跨站脚本漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI that is open source. Versions of Open WebUI prior to 0.9.3 had a cross-site scripting vulnerability. This vulnerability stemmed from the audio transcription upload endpoint, which extracted the file extension from the...

8.7CVSS5.7AI score0.00186EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/05/15 12:00 a.m.31 views

Open WebUI 访问控制错误漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Versions of Open WebUI prior to 0.3.16 contained a access control vulnerability. This vulnerability stemmed from the lack of permission checks for file-related API endpoints, which could allow any...

8.1CVSS5.8AI score0.00273EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/05/15 12:00 a.m.31 views

libjwt 加密问题漏洞

LibJWT is a C-language library developed by Ben Collins, designed for generating and verifying JSON Web Tokens. Versions 3.0.0 to 3.3.2 of LibJWT contain vulnerabilities related to encryption. These vulnerabilities arise from accepting RSA JWKs without an alg parameter as the verification key for...

9.1CVSS5.8AI score0.00209EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/15 12:00 a.m.31 views

Open WebUI 安全漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under the open source Open WebUI project. Versions of Open WebUI prior to 0.9.5 contained security vulnerabilities. These vulnerabilities stemmed from the POST /api/v1/evaluations/feedback endpoint, which had a batch...

5.4CVSS5.8AI score0.00307EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/15 12:00 a.m.31 views

Open WebUI 安全漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Versions of Open WebUI prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from the GET /api/v1/channels/id/members endpoint, which only checked group and DM channel type...

4.3CVSS5.8AI score0.00221EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/15 12:00 a.m.31 views

Open WebUI 安全漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Versions of Open WebUI prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from API keys sent via the x-api-key header, allowing bypass of endpoint restrictions and...

6.5CVSS5.8AI score0.00309EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.31 views

Gotenberg 安全漏洞

Gotenberg is an open-source, developer-friendly API developed by Gotenberg. It is used to convert various document formats into PDF files. Versions of Gotenberg prior to 8.32.0 contained security vulnerabilities. These vulnerabilities stemmed from the lack of protection for URL routing using...

5.9CVSS5.8AI score0.00277EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.31 views

Fleet 安全漏洞

Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, MDM operations, etc. Versions of Fleet prior to 4.80.1 contained security...

7.5CVSS5.8AI score0.00276EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.31 views

MCP Registry 安全漏洞

MCP Registry is an open-source MCP server application store developed by Model Context Protocol. Versions of MCP Registry prior to 1.7.9 contained security vulnerabilities. These vulnerabilities stemmed from OCI ownership verification skipping tag matching checks during HTTP 429 requests, which...

3.5CVSS5.8AI score0.00206EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.31 views

gst-plugins-good 数字错误漏洞

GStreamer-plugins-good is a GStreamer plugin developed under open source. Versions of GStreamer-plugins-good prior to 1.28.2 contained a numerical error vulnerability. This vulnerability stemmed from the qtdemuxaudiocaps function in the isomp4 plugin, which did not properly validate atomic data...

9.1CVSS5.8AI score0.00208EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.31 views

WordPress plugin Essential Addons for Elementor 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.5CVSS5.8AI score0.00238EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.31 views

Gotenberg 安全漏洞

Gotenberg is an open-source, developer-friendly API developed by Gotenberg. It is used to convert various document formats into PDF files. Versions of Gotenberg prior to 8.31.0 contained security vulnerabilities. These vulnerabilities stemmed from a flaw where only whether the tag was “FileName”...

8.2CVSS5.8AI score0.00347EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.31 views

VMware ESXi 安全漏洞

VMware ESXi is a server virtualization platform developed by the American company VMware, which can be directly installed on physical servers. VMware ESXi has a security vulnerability that stems from unreliable pointer dereferencing. This vulnerability could allow attackers to access kernel memor...

7.2CVSS5.8AI score0.00097EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.31 views

vm2 代码注入漏洞

vm2 is a high-level virtual machine/sandbox for Node.js developed by Czech developer Patrik Simek. It runs untrusted code using Node’s built-in modules listed in the allowlist. Versions of vm2 prior to 3.11.0 had a code injection vulnerability; this vulnerability stemmed from the possibility of...

10CVSS6.1AI score0.00976EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.31 views

WordPress plugin Hostinger Reach 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

5.3CVSS5.8AI score0.00378EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.31 views

Canon GUARDIANWALL MailSuite和Canon GUARDIANWALL Mail Security Cloud 安全漏洞

Canon GUARDIANWALL MailSuite and Canon GUARDIANWALL Mail Security Cloud are products of Canon, a Japanese company. Canon GUARDIANWALL MailSuite is an enterprise-level email security and filtering system. Canon GUARDIANWALL Mail Security Cloud is an enterprise-level cloud-based email security...

9.8CVSS7.9AI score0.00472EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.31 views

HPE Aruba Networking Wireless Operating System 安全漏洞

HPE Aruba Networking Wireless Operating System is a wireless network operating system developed by the American company HPE. There is a security vulnerability in the HPE Aruba Networking Wireless Operating System. This vulnerability stems from the lack of cleaning of parameters passed to the...

7.2CVSS5.9AI score0.00315EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.31 views

granian 安全漏洞

Granian is a high-performance Python HTTP server developed by Emmett under open source principles, using Rust as the programming language. Versions of Granian from 0.2.0 to 2.7.4 contain security vulnerabilities. These vulnerabilities occur when the WSGI application returns invalid HTTP response...

5.9CVSS5.8AI score0.00222EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.31 views

Craft CMS 安全漏洞

Craft CMS is an open-source content management system developed by Craft Studio. Versions of Craft CMS from 5.0.0-RC1 to 5.9.18 contained security vulnerabilities. These vulnerabilities stemmed from the AssetsController::actionShowInFolder method, which did not check user permissions when...

7.1CVSS5.8AI score0.00337EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.31 views

lemur 注入漏洞

Lemur is an open-source TLS certificate management tool developed by Netflix, Inc. Versions of Lemur prior to 1.9.0 contained a injection vulnerability. This vulnerability stemmed from the LDAP authentication module using uncleaned user input to construct LDAP search filters, which could lead to...

8.1CVSS5.8AI score0.00179EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.31 views

Microsoft Win32k 输入验证错误漏洞

Microsoft Win32k is a system file used for multi-user management in Windows by Microsoft Corporation. There is an input validation vulnerability present in Microsoft Win32k. The following products and versions are affected: Windows 10 Version 1809 for 32-bit systems, Windows 10 Version 1809 for...

7.8CVSS5.8AI score0.00304EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.31 views

Craft CMS 安全漏洞

Craft CMS is an open-source content management system developed by Craft CMS. Versions of Craft CMS from 4.0.0 to 4.17.12 and 5.9.18 contained security vulnerabilities. These vulnerabilities stemmed from input handling defects in the Yii object creation path, which could allow any authenticated...

8.6CVSS6AI score0.00359EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.31 views

Microsoft Office 安全漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There are security vulnerabilities in Microsoft Office. Attackers can exploit these...

8.4CVSS6AI score0.00383EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.31 views

Microsoft Windows 安全漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There are security vulnerabilities in Microsoft Windows. Attackers can exploit these vulnerabilities to execute code remotely. The following products and versions are affected: Windows 10 Version...

6.2CVSS6AI score0.00462EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.31 views

Microsoft Azure Machine Learning 注入漏洞

Microsoft Azure Machine Learning is a machine learning service provided by Microsoft Corporation in the United States. There is an injection vulnerability present in Microsoft Azure Machine Learning. Attackers utilize this vulnerability to carry out phishing attacks...

8.2CVSS5.8AI score0.00498EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/10 12:00 a.m.31 views

Open5GS 安全漏洞

Open5GS is an open-source implementation of 5G Core and EPC in C language, which serves as the core network for LTE/NR networks. Versions of Open5GS 2.7.7 and earlier contain security vulnerabilities. These vulnerabilities stem from the updateauthorizedpccruleandqos function in the SMF component...

6.5CVSS5.8AI score0.00372EPSS
SaveExploits1References1
Total number of security vulnerabilities5000