Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
added 2026/06/01 12:00 a.m.29 views

CodeAstro Online Job Portal SQL注入漏洞

CodeAstro Online Job Portal is an online job portal operated by CodeAstro Corporation. Version 1.0 of CodeAstro Online Job Portal has a SQL injection vulnerability. This vulnerability arises from improper handling of the parameter ID in the file admin/jobs-admins/delete-jobs.php, which may lead t...

7.5CVSS7.5AI score0.00263EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/05/30 12:00 a.m.29 views

Yamcs security vulnerabilities

Yamcs is an open-source software framework developed by Yamcs. It is used for commanding and controlling spacecraft, satellites, payloads, ground stations, and ground equipment. Yamcs has a security vulnerability that stems from allowing enumeration of users...

5.8AI score0.01057EPSS
SaveExploits3References1
CNNVD
CNNVD
added 2026/05/29 12:00 a.m.29 views

libsoup 安全漏洞

Libsoup is a GNOME project’s HTTP client/server library. Libsoup has a security vulnerability, which stems from an error in the unsigned-to-signed conversion in the soupbodyinputstreamreadchunked function. This vulnerability could allow remote attackers to bypass security controls by sending...

4.8CVSS5.8AI score0.00872EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/29 12:00 a.m.29 views

FreePBX 信任管理问题漏洞

FreePBX is a set of tools from the FreePBX project that allow configuration of Asterisk an IP telephony system through a GUI graphical web-based interface. Versions of FreePBX prior to 15.0.42, 16.0.45, and 17.0.7 contained a trust management vulnerability. This vulnerability stemmed from the...

9.8CVSS5.8AI score0.00425EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/29 12:00 a.m.29 views

Mautic 安全漏洞

Mautic is an open-source marketing automation software developed by Mautic. This software can monitor and manage websites, send emails, and manage customer resources. Version 7 of Mautic has a security vulnerability, which stems from a cross-site scripting vulnerability stored in the project...

5.4CVSS5.7AI score0.00173EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/29 12:00 a.m.29 views

Sitejo HaPe PKH 跨站请求伪造漏洞

Sitejo HaPe PKH is a community poverty alleviation project management system developed by Sitejo Corporation. Version 1.1 of Sitejo HaPe PKH contains a cross-site request forgeing vulnerability. This vulnerability stems from the lack of verification of the request source, which may allow attacker...

6.9CVSS5.7AI score0.00175EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/29 12:00 a.m.29 views

PHP-SHOP 跨站请求伪造漏洞

PHP-SHOP is an online shopping system developed by joeyrush, based on PHP. Version 1.0 of PHP-SHOP has a cross-site request forgeing vulnerability. This vulnerability stems from the lack of verification of the request source, which may allow unauthenticated attackers to add administrative users...

6.9CVSS5.7AI score0.00162EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/28 12:00 a.m.29 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the kmempath function in mm/damon/sysfs-schemes that is not protected by damonsysfslock. This...

5.8AI score0.00125EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/28 12:00 a.m.29 views

Hono 安全漏洞

Hono is a web framework built in TypeScript for the Hono community. Versions of Hono prior to 4.12.21 contained security vulnerabilities. These vulnerabilities stemmed from the serialize function not verifying the sameSite and priority options. This could allow the application to pass...

5.3CVSS5.8AI score0.00216EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/28 12:00 a.m.29 views

pyLoad 安全漏洞

pyLoad is an open-source download manager written in Python. Versions of pyLoad prior to 0.5.0b3.dev100 contained security vulnerabilities. These vulnerabilities stemmed from the lack of private IP checks based on PREREQFUNCTION being applied to HTTPRequests. Attackers could bypass the isglobalho...

5CVSS5.8AI score0.00176EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/28 12:00 a.m.29 views

Casdoor 安全漏洞

Casdoor is an open-source platform developed by Casdoor that supports various authentication and authorization protocols. Versions of Casdoor prior to 2.362.0 contained a security vulnerability. This vulnerability stemmed from logical flaws in the social login binding process, allowing users to...

5.3CVSS5.9AI score0.00322EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/28 12:00 a.m.29 views

Sensorweb ScadaBR 安全漏洞

Sensorweb ScadaBR is a set of open-source software developed by Sensorweb Corporation, designed for developing automated data acquisition and monitoring applications. There is a security vulnerability in Sensorweb ScadaBR. This vulnerability stems from an exposed method that allows authenticated...

9.9CVSS6.2AI score0.00411EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/28 12:00 a.m.29 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the batman-adv module’s failure to release the backbonegw reference when inserting a statement in...

5.8AI score0.00119EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/28 12:00 a.m.29 views

rustfs 安全漏洞

RustFS is a high-performance object storage system developed by RustFS. Versions of RustFS prior to 1.0.0-beta.2 contained a security vulnerability. This vulnerability arises when RUSTFSCORSALLOWEDORIGINS is not set; in such cases, ConditionalCorsLayer reflects the Origin value and sets a relaxed...

6CVSS5.8AI score0.00108EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/28 12:00 a.m.29 views

Tigera Calico 安全漏洞

Tigera Calico is an open-source network security solution developed by the American company Tigera, designed for container, virtual machine, and host workload scenarios. There is a security vulnerability in Tigera Calico. This vulnerability stems from the install-cni init container recording CNI...

6CVSS5.8AI score0.00504EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.29 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the vfio/cdx driver’s failure to verify whether MSI is configured during the interrupt trigger...

5.8AI score0.00135EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.29 views

WordPress plugin Yoast SEO 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

4.3CVSS5.9AI score0.00288EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.29 views

WordPress plugin PropertyHive 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.6AI score0.00181EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.29 views

UTT HiPER 1250GW 安全漏洞

UTT HiPER 1250GW is a wireless gateway device developed by UTT Corporation. Versions of UTT HiPER 1250GW prior to 3.2.7-210907-180535 contained security vulnerabilities. These vulnerabilities were caused by the strcpy function in the Web Management Interface...

9CVSS7.5AI score0.00438EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.29 views

WordPress plugin Cryptocurrency Prijsvergelijking Widget 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.7AI score0.00187EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.29 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. In versions prior to 148.0.7778.216 for Linux, there was a resource management vulnerability. This vulnerability stemmed from the WebRTC component’s ability to be reused after being released, potentially allowing remote attackers to exploit...

8.3CVSS5.8AI score0.00173EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.29 views

WordPress plugin Disable Comments for Any Post Types (Remove comments) 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

7.1CVSS5.8AI score0.00252EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.29 views

IBM Db2 安全漏洞

IBM Db2 is a relational database management system developed by IBM. Versions 11.5.0 to 11.5.9 and 12.1.0 to 12.1.4 of IBM Db2 contain security vulnerabilities. These vulnerabilities arise from the use of range partition tables when special queries are executed, and could lead to denial-of-servic...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

IBM Cloud Pak for Data System 安全漏洞

IBM Cloud Pak for Data System is an enterprise data and AI integration platform provided by IBM. The version 11.3.0.2 of IBM Cloud Pak for Data System, as well as the Interim Fix 002, contain security vulnerabilities. These vulnerabilities stem from the use of default passwords during the...

7.5CVSS5.8AI score0.00269EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

WordPress plugin Mayosis Core 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.00231EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

PbootCMS 安全漏洞

PbootCMS is an open-source enterprise website content management system developed using the PHP language. Version PbootCMS 3.2.11 contains a security vulnerability, which stems from code injection in the site configuration function...

4.3CVSS5.8AI score0.00247EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. There are security vulnerabilities in versions prior to Apple macOS Sequoia 15.7, Sonoma 14.8, and Tahoe 26. These vulnerabilities stem from logical issues and could allow malicious applicatio...

7.8CVSS5.8AI score0.00135EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

luci-app-https-dns-proxy 命令注入漏洞

Luci-app-https-dns-proxy is an OpenWrt DNS-over-HTTPS proxy with a web management interface, developed by Stan Grishin. Versions of Luci-app-https-dns-proxy dated back to December 29, 2025, and earlier have a command injection vulnerability. This vulnerability stems from command injection in the...

8.8CVSS6.1AI score0.06582EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

Delta Electronics DIAView 安全漏洞

Delta Electronics DIAView is an industrial configuration software developed by Delta Electronics in China. Delta Electronics DIAView has a security vulnerability, which stems from the possibility for unverified remote attackers to access the configured database...

9.8CVSS5.8AI score0.00053EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

100xDevs CMS 安全漏洞

100xDevs CMS is an open-source content management system developed by code100x. There is a security vulnerability in 100xDevs CMS, which stems from an authentication bypass in the Mobile API. This vulnerability could allow unauthenticated attackers to impersonate any user by submitting specially...

8.8CVSS5.8AI score0.0049EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

B&R Industrial Automation PPT30 Operating System 安全漏洞

The B&R Industrial Automation PPT30 Operating System is an industrial control terminal operating system developed by B&R Industrial Automation in Austria. Versions of the B&R Industrial Automation PPT30 Operating System prior to 1.8.0 contained security vulnerabilities. These vulnerabilities...

8.7CVSS5.8AI score0.00322EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

WordPress plugin RepairBuddy 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.8AI score0.00217EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

Bugsink 安全漏洞

Bugsink is an open-source, self-hosted bug tracking software developed by Bugsink. Versions of Bugsink prior to 2.2.0 contained security vulnerabilities. These vulnerabilities stemmed from the issue where batch operations did not require the submission of issue IDs belonging to the same project...

3.1CVSS5.8AI score0.00147EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.29 views

SailingLab AppLock 安全漏洞

SailingLab AppLock is a mobile application privacy protection tool developed by SailingLab. It supports features such as app locking, PIN verification, and fingerprint unlocking. Version 4.3.8 of SailingLab AppLock contains a security vulnerability. This vulnerability stems from the PIN lock bein...

2.4CVSS5.8AI score0.0019EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.29 views

Joomla! Responsive Portfolio SQL注入漏洞

Joomla! Responsive Portfolio is a Joomla! open source Joomla website portfolio extension. A SQL injection vulnerability exists in Joomla! Responsive Portfolio version 1.6.1, which stems from SQL injection of multiple filter parameters, which could lead to an authenticated attacker injecting...

7.1CVSS5.9AI score0.00284EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.29 views

Code-Projects Employee Management System 代码注入漏洞

Code-Projects Employee Management System is a Code-Projects open source employee management system . Code-Projects Employee Management System version 1.0 suffers from a code injection vulnerability that originates from manipulation of the parameter ID in the file /myprofileup.php, which could lea...

5.3CVSS5.3AI score0.00263EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.29 views

WordPress plugin Organization chart 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

4.3CVSS5.8AI score0.00122EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/24 12:00 a.m.29 views

Edimax EW-7438RPn 操作系统命令注入漏洞

The Edimax EW-7438RPn is a wireless signal extender produced by Edimax of Taiwan, China. Versions of Edimax EW-7438RPn prior to 1.31 contained a vulnerability related to operating system command injection. This vulnerability stemmed from the formWizSurvey function in the webs component files or...

6.5CVSS6.6AI score0.01519EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/24 12:00 a.m.29 views

jasypt-spring-boot 安全漏洞

jasypt-spring-boot is an integration tool developed by Ulises Bocchio, a personal developer, that provides attribute encryption support for Spring Boot applications. There are security vulnerabilities in versions of jasypt-spring-boot 3.0.5 and earlier, as well as versions 4.0.4 and earlier. Thes...

6.3CVSS5.8AI score0.00202EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/05/24 12:00 a.m.29 views

Edimax EW-7438RPn 安全漏洞

The Edimax EW-7438RPn is a wireless signal extender produced by Edimax of Taiwan, China. Versions of Edimax EW-7438RPn prior to 1.31 contained a security vulnerability. This vulnerability stemmed from an unknown function in the webs component files located at goform/mp, which operated on the...

9CVSS7.6AI score0.00445EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/22 12:00 a.m.29 views

Typebot 安全漏洞

Typebot is an open-source chat bot builder developed by Baptiste Arnaud. Versions of Typebot 3.16.0 and earlier contained a security vulnerability. This vulnerability stemmed from the WhatsApp Cloud API webhook endpoint not verifying the x-hub-signature-256 HMAC signature, allowing unauthenticate...

6.5CVSS5.8AI score0.0014EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/22 12:00 a.m.29 views

Dell PowerFlex Manager 安全漏洞

Dell PowerFlex Manager is a product of the American company Dell. Versions of Dell PowerFlex Manager prior to 4.6.2 contained security vulnerabilities. These vulnerabilities were due to incorrect permission allocation, which could allow low-privilege attackers with local access to escalate their...

7.8CVSS5.8AI score0.0009EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/22 12:00 a.m.29 views

Concrete CMS 安全漏洞

Concrete CMS is an open-source content management system developed by Concrete CMS. Versions 9.0 to 9.5.0 of Concrete CMS have security vulnerabilities. These vulnerabilities stem from stored cross-site scripting in page names within the Atomik theme. This could allow malicious editors to inject...

4.8CVSS5.9AI score0.00149EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/21 12:00 a.m.29 views

tickets SQL注入漏洞

Tickets is an open-source public safety scheduling and tracking application developed by Open ISES. Versions of tickets prior to 3.44.2 contained a SQL injection vulnerability. This vulnerability stemmed from the fact that the POST parameters tickid and ftickid were directly concatenated into the...

7.1CVSS5.9AI score0.00218EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/21 12:00 a.m.29 views

WordPress plugin Avada (Fusion) Builder 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.8AI score0.00337EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/21 12:00 a.m.29 views

Mattermost Mobile Apps 跨站请求伪造漏洞

Mattermost Mobile Apps is a messaging mobile application developed by the American company Mattermost. Versions of Mattermost Mobile Apps prior to 2.0.37, 11.0.4 and earlier, 11.1.3 and earlier, 11.3.2 and earlier, as well as 10.11.11.0 and earlier, contain a cross-site request forgeing...

6.1CVSS5.7AI score0.00117EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/20 12:00 a.m.29 views

Twig 安全漏洞

Twig is an open-source PHP template engine developed by Twig contributors. Versions 2.16.x and 3.9.0 to 3.25.x of Twig contain security vulnerabilities. These vulnerabilities stem from sandbox bypasses when using the SourcePolicyInterface, allowing attackers to circumvent sandbox restrictions and...

9.9CVSS6AI score0.00758EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/20 12:00 a.m.29 views

Trilium Notes 路径遍历漏洞

Trilium Notes is a hierarchical note application developed by Zadam’s individual developer. It focuses on building large personal knowledge bases. Versions of Trilium Notes prior to 0.102.1 contained a path traversal vulnerability. This vulnerability originated from local files and could allow...

6.8CVSS5.9AI score0.00621EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/20 12:00 a.m.29 views

Microsoft Defender 后置链接漏洞

Microsoft Defender is a threat protection software developed by the American company Microsoft. Microsoft Defender has a postback link vulnerability, which stems from improper link resolution before file access. This vulnerability could allow authorized attackers to gain local privileges...

7.8CVSS6AI score0.08202EPSS
SaveExploits3References1
CNNVD
CNNVD
added 2026/05/20 12:00 a.m.29 views

WordPress plugin Boost 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

9.8CVSS6.1AI score0.00573EPSS
SaveExploits0References1
Total number of security vulnerabilities5000