Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
added 2026/05/27 12:00 a.m.29 views

UTT HiPER 1250GW 安全漏洞

UTT HiPER 1250GW is a wireless gateway device developed by UTT Corporation. Versions of UTT HiPER 1250GW prior to 3.2.7-210907-180535 contained security vulnerabilities. These vulnerabilities were caused by the strcpy function in the Web Management Interface...

9CVSS7.5AI score0.00438EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.29 views

WordPress plugin Cryptocurrency Prijsvergelijking Widget 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.7AI score0.00187EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.29 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. In versions prior to 148.0.7778.216 for Linux, there was a resource management vulnerability. This vulnerability stemmed from the WebRTC component’s ability to be reused after being released, potentially allowing remote attackers to exploit...

8.3CVSS5.8AI score0.00173EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.29 views

WordPress plugin Disable Comments for Any Post Types (Remove comments) 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

7.1CVSS5.8AI score0.00252EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.29 views

IBM Db2 安全漏洞

IBM Db2 is a relational database management system developed by IBM. Versions 11.5.0 to 11.5.9 and 12.1.0 to 12.1.4 of IBM Db2 contain security vulnerabilities. These vulnerabilities arise from the use of range partition tables when special queries are executed, and could lead to denial-of-servic...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

IBM Cloud Pak for Data System 安全漏洞

IBM Cloud Pak for Data System is an enterprise data and AI integration platform provided by IBM. The version 11.3.0.2 of IBM Cloud Pak for Data System, as well as the Interim Fix 002, contain security vulnerabilities. These vulnerabilities stem from the use of default passwords during the...

7.5CVSS5.8AI score0.00269EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

WordPress plugin Mayosis Core 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.00231EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

PbootCMS 安全漏洞

PbootCMS is an open-source enterprise website content management system developed using the PHP language. Version PbootCMS 3.2.11 contains a security vulnerability, which stems from code injection in the site configuration function...

4.3CVSS5.8AI score0.00247EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. There are security vulnerabilities in versions prior to Apple macOS Sequoia 15.7, Sonoma 14.8, and Tahoe 26. These vulnerabilities stem from logical issues and could allow malicious applicatio...

7.8CVSS5.8AI score0.00135EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

luci-app-https-dns-proxy 命令注入漏洞

Luci-app-https-dns-proxy is an OpenWrt DNS-over-HTTPS proxy with a web management interface, developed by Stan Grishin. Versions of Luci-app-https-dns-proxy dated back to December 29, 2025, and earlier have a command injection vulnerability. This vulnerability stems from command injection in the...

8.8CVSS6.1AI score0.06582EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

Delta Electronics DIAView 安全漏洞

Delta Electronics DIAView is an industrial configuration software developed by Delta Electronics in China. Delta Electronics DIAView has a security vulnerability, which stems from the possibility for unverified remote attackers to access the configured database...

9.8CVSS5.8AI score0.00053EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

100xDevs CMS 安全漏洞

100xDevs CMS is an open-source content management system developed by code100x. There is a security vulnerability in 100xDevs CMS, which stems from an authentication bypass in the Mobile API. This vulnerability could allow unauthenticated attackers to impersonate any user by submitting specially...

8.8CVSS5.8AI score0.0049EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

B&R Industrial Automation PPT30 Operating System 安全漏洞

The B&R Industrial Automation PPT30 Operating System is an industrial control terminal operating system developed by B&R Industrial Automation in Austria. Versions of the B&R Industrial Automation PPT30 Operating System prior to 1.8.0 contained security vulnerabilities. These vulnerabilities...

8.7CVSS5.8AI score0.00322EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

WordPress plugin RepairBuddy 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.8AI score0.00217EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

Bugsink 安全漏洞

Bugsink is an open-source, self-hosted bug tracking software developed by Bugsink. Versions of Bugsink prior to 2.2.0 contained security vulnerabilities. These vulnerabilities stemmed from the issue where batch operations did not require the submission of issue IDs belonging to the same project...

3.1CVSS5.8AI score0.00147EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

SailingLab AppLock 安全漏洞

SailingLab AppLock is a mobile application privacy protection tool developed by SailingLab. It supports features such as app locking, PIN verification, and fingerprint unlocking. Version 4.3.8 of SailingLab AppLock contains a security vulnerability. This vulnerability stems from the PIN lock bein...

2.4CVSS5.8AI score0.0019EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.29 views

Joomla! Responsive Portfolio SQL注入漏洞

Joomla! Responsive Portfolio is a Joomla! open source Joomla website portfolio extension. A SQL injection vulnerability exists in Joomla! Responsive Portfolio version 1.6.1, which stems from SQL injection of multiple filter parameters, which could lead to an authenticated attacker injecting...

7.1CVSS5.9AI score0.00284EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.29 views

Code-Projects Employee Management System 代码注入漏洞

Code-Projects Employee Management System is a Code-Projects open source employee management system . Code-Projects Employee Management System version 1.0 suffers from a code injection vulnerability that originates from manipulation of the parameter ID in the file /myprofileup.php, which could lea...

5.3CVSS5.3AI score0.00263EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.29 views

WordPress plugin Organization chart 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

4.3CVSS5.8AI score0.00122EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/24 12:00 a.m.29 views

Edimax EW-7438RPn 操作系统命令注入漏洞

The Edimax EW-7438RPn is a wireless signal extender produced by Edimax of Taiwan, China. Versions of Edimax EW-7438RPn prior to 1.31 contained a vulnerability related to operating system command injection. This vulnerability stemmed from the formWizSurvey function in the webs component files or...

6.5CVSS6.6AI score0.01519EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/24 12:00 a.m.29 views

jasypt-spring-boot 安全漏洞

jasypt-spring-boot is an integration tool developed by Ulises Bocchio, a personal developer, that provides attribute encryption support for Spring Boot applications. There are security vulnerabilities in versions of jasypt-spring-boot 3.0.5 and earlier, as well as versions 4.0.4 and earlier. Thes...

6.3CVSS5.8AI score0.00202EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/05/24 12:00 a.m.29 views

Edimax EW-7438RPn 安全漏洞

The Edimax EW-7438RPn is a wireless signal extender produced by Edimax of Taiwan, China. Versions of Edimax EW-7438RPn prior to 1.31 contained a security vulnerability. This vulnerability stemmed from an unknown function in the webs component files located at goform/mp, which operated on the...

9CVSS7.6AI score0.00445EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/22 12:00 a.m.29 views

Typebot 安全漏洞

Typebot is an open-source chat bot builder developed by Baptiste Arnaud. Versions of Typebot 3.16.0 and earlier contained a security vulnerability. This vulnerability stemmed from the WhatsApp Cloud API webhook endpoint not verifying the x-hub-signature-256 HMAC signature, allowing unauthenticate...

6.5CVSS5.8AI score0.0014EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/22 12:00 a.m.29 views

Dell PowerFlex Manager 安全漏洞

Dell PowerFlex Manager is a product of the American company Dell. Versions of Dell PowerFlex Manager prior to 4.6.2 contained security vulnerabilities. These vulnerabilities were due to incorrect permission allocation, which could allow low-privilege attackers with local access to escalate their...

7.8CVSS5.8AI score0.0009EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/22 12:00 a.m.29 views

Concrete CMS 安全漏洞

Concrete CMS is an open-source content management system developed by Concrete CMS. Versions 9.0 to 9.5.0 of Concrete CMS have security vulnerabilities. These vulnerabilities stem from stored cross-site scripting in page names within the Atomik theme. This could allow malicious editors to inject...

4.8CVSS5.9AI score0.00149EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/21 12:00 a.m.29 views

tickets SQL注入漏洞

Tickets is an open-source public safety scheduling and tracking application developed by Open ISES. Versions of tickets prior to 3.44.2 contained a SQL injection vulnerability. This vulnerability stemmed from the fact that the POST parameters tickid and ftickid were directly concatenated into the...

7.1CVSS5.9AI score0.00218EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/21 12:00 a.m.29 views

WordPress plugin Avada (Fusion) Builder 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.8AI score0.00337EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/21 12:00 a.m.29 views

Mattermost Mobile Apps 跨站请求伪造漏洞

Mattermost Mobile Apps is a messaging mobile application developed by the American company Mattermost. Versions of Mattermost Mobile Apps prior to 2.0.37, 11.0.4 and earlier, 11.1.3 and earlier, 11.3.2 and earlier, as well as 10.11.11.0 and earlier, contain a cross-site request forgeing...

6.1CVSS5.7AI score0.00117EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/20 12:00 a.m.29 views

Twig 安全漏洞

Twig is an open-source PHP template engine developed by Twig contributors. Versions 2.16.x and 3.9.0 to 3.25.x of Twig contain security vulnerabilities. These vulnerabilities stem from sandbox bypasses when using the SourcePolicyInterface, allowing attackers to circumvent sandbox restrictions and...

9.9CVSS6AI score0.00758EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/20 12:00 a.m.29 views

Trilium Notes 路径遍历漏洞

Trilium Notes is a hierarchical note application developed by Zadam’s individual developer. It focuses on building large personal knowledge bases. Versions of Trilium Notes prior to 0.102.1 contained a path traversal vulnerability. This vulnerability originated from local files and could allow...

6.8CVSS5.9AI score0.00621EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/20 12:00 a.m.29 views

Microsoft Defender 后置链接漏洞

Microsoft Defender is a threat protection software developed by the American company Microsoft. Microsoft Defender has a postback link vulnerability, which stems from improper link resolution before file access. This vulnerability could allow authorized attackers to gain local privileges...

7.8CVSS6AI score0.08202EPSS
SaveExploits3References1
CNNVD
CNNVD
added 2026/05/20 12:00 a.m.29 views

WordPress plugin Boost 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

9.8CVSS6.1AI score0.00573EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/20 12:00 a.m.29 views

WordPress plugin All in One SEO 信息泄露漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

4.3CVSS5.8AI score0.00285EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/19 12:00 a.m.29 views

Qt 代码问题漏洞

Qt is an open-source, cross-platform application development framework. Qt has code vulnerabilities, which stem from an issue with uncontrolled search path elements in the backend of OpenSSL TLS. This vulnerability allows local attackers to load malicious CA certificates as trusted system...

1.8CVSS5.8AI score0.00092EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/19 12:00 a.m.29 views

CtrlPanel.gg 访问控制错误漏洞

CtrlPanel.gg is an open-source host service billing management tool developed by CtrlPanel.gg. Versions of CtrlPanel.gg 1.1.1 and earlier contained a security vulnerability related to access control. This vulnerability arose from multiple administrator controllers performing permission checks on...

8.1CVSS5.8AI score0.00297EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/19 12:00 a.m.29 views

libheif 信息泄露漏洞

LibHEIF is a open-source decoder and encoder for the ISO/IEC 23008-12:2017 HEIF file format developed by Struktur. Versions of LibHEIF prior to 1.21.2 contained a vulnerability known as information leakage. This vulnerability occurred when decoding grid images, where tile regions that failed to...

6.5CVSS5.8AI score0.00311EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/19 12:00 a.m.29 views

ZTE MU5250 信息泄露漏洞

The ZTE MU5250 is a 5G mobile Wi-Fi device produced by ZTE Corporation. The ZTE MU5250 has a vulnerability related to information leakage, which stems from improper control of web interface permissions. Unauthorized attackers can modify the configuration through these interfaces...

6.3CVSS5.8AI score0.00252EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/18 12:00 a.m.29 views

Thermo Fisher Scientific Torrent Suite Dx 安全漏洞

Thermo Fisher Scientific Torrent Suite Dx is a clinical gene sequencing data analysis platform provided by Thermo Fisher Scientific. Versions of Thermo Fisher Scientific Torrent Suite Dx prior to 5.14.2 contained security vulnerabilities. These vulnerabilities were due to issues with privilege...

8.8CVSS5.8AI score0.0026EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/17 12:00 a.m.29 views

DataEase 注入漏洞

DataEase is an open-source data visualization and analysis tool developed by DataEase. It helps users quickly analyze data and gain insights into business trends, thereby enabling improvements and optimizations in operations. Version 2.10.20 of DataEase contains a injection vulnerability. This...

7.2CVSS5.9AI score0.00387EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/05/16 12:00 a.m.29 views

Cybertron Privacy Drive 代码问题漏洞

Cybertron Privacy Drive is a security software from Cybertron Corporation that supports disk encryption, creation of virtual encrypted volumes, and protection of privacy data. Version 3.17.0 of Cybertron Privacy Drive has a code vulnerability. This vulnerability stems from an unreferenced service...

8.5CVSS6.2AI score0.0012EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/16 12:00 a.m.29 views

OpenSolution Quick.CMS 跨站脚本漏洞

OpenSolution Quick.CMS is a lightweight website content management system developed by the Polish company OpenSolution. Version 6.7 of OpenSolution Quick.CMS contains a cross-site scripting vulnerability. This vulnerability stems from a cross-site scripting flaw in the sliders form, allowing...

5.4CVSS5.9AI score0.00178EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/16 12:00 a.m.29 views

WordPress plugin Backup and Restore 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.8CVSS5.9AI score0.00397EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/15 12:00 a.m.29 views

MLflow 安全漏洞

MLflow is an open-source platform that simplifies machine learning development. It includes features like tracking experiments, packaging code for reproducible runs, and sharing and deploying models. Versions of mlflow prior to 3.9.0 contain security vulnerabilities. These vulnerabilities stem fr...

8.6CVSS7.5AI score0.20783EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/15 12:00 a.m.29 views

Open WebUI 安全漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Versions of Open WebUI prior to 0.6.19 contained security vulnerabilities. These vulnerabilities stemmed from the IDOR in the channel message management system, allowing authenticated users to modify...

7.1CVSS5.8AI score0.00266EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/05/15 12:00 a.m.29 views

Open WebUI 跨站脚本漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Versions of Open WebUI prior to 0.8.0 had a cross-site scripting vulnerability. This vulnerability stemmed from improper cleanup order in the Banner component, leading to storage-based cross-site...

8.1CVSS5.6AI score0.00335EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.29 views

GitLab 跨站脚本漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Versions of GitLab prior to 18.9.7, 18.10.6, and 18.11.3 contained a...

8.7CVSS6AI score0.00256EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.29 views

Flowsint 跨站脚本漏洞

Flowsint is an open-source intelligence visualization tool developed by reconurge. Versions of Flowsint prior to 1.2.3 contained a cross-site scripting vulnerability. This vulnerability stemmed from node descriptions containing arbitrary HTML, allowing remote attackers to create nodes with...

5.4CVSS5.8AI score0.00192EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.29 views

Kubetail 安全漏洞

Kubetail is an open-source Kubernetes real-time log monitoring dashboard developed by Kubetail. Versions of Kubetail prior to 0.14.0 contained security vulnerabilities. These vulnerabilities stemmed from insufficient validation of the Origin header at WebSocket endpoints, which could lead to...

6.5CVSS5.7AI score0.0017EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.29 views

MagicMirror 代码问题漏洞

MagicMirror is an open-source modular smart mirror platform developed by MagicMirror. Versions of MagicMirror prior to 2.36.0 had code vulnerabilities. These vulnerabilities stemmed from unauthorized server-side request forgery through the /cors endpoint, which could allow any remote attacker to...

9.2CVSS6AI score0.01623EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.29 views

GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD continuous integration and delivery. Vulnerabilities exist in versions of GitLab CE/EE 16.7 to 18.9.7, 18.10...

4.3CVSS5.9AI score0.00199EPSS
SaveExploits0References1
Total number of security vulnerabilities5000