Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
added 2026/05/14 12:00 a.m.29 views

Kubetail 安全漏洞

Kubetail is an open-source Kubernetes real-time log monitoring dashboard developed by Kubetail. Versions of Kubetail prior to 0.14.0 contained security vulnerabilities. These vulnerabilities stemmed from insufficient validation of the Origin header at WebSocket endpoints, which could lead to...

6.5CVSS5.7AI score0.0017EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.29 views

MagicMirror 代码问题漏洞

MagicMirror is an open-source modular smart mirror platform developed by MagicMirror. Versions of MagicMirror prior to 2.36.0 had code vulnerabilities. These vulnerabilities stemmed from unauthorized server-side request forgery through the /cors endpoint, which could allow any remote attacker to...

9.2CVSS6AI score0.01623EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.29 views

GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD continuous integration and delivery. Vulnerabilities exist in versions of GitLab CE/EE 16.7 to 18.9.7, 18.10...

4.3CVSS5.9AI score0.00199EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.29 views

Strapi 代码问题漏洞

Strapi is an open-source content management system CMS developed by the Strapi community in France. Versions of Strapi prior to 5.33.3 had code vulnerabilities. These vulnerabilities stemmed from a lack of default functionality to invalidate existing refresh token sessions when a user’s password...

6.5CVSS5.9AI score0.00272EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.29 views

WordPress plugin Avada Builder 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

6.5CVSS5.9AI score0.00473EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.29 views

Next.js 安全漏洞

Next.js is a React framework open source by Vercel. Versions of Next.js from 12.2.0 to 15.5.16, as well as versions before 16.2.5, have security vulnerabilities. These vulnerabilities arise from using the Pages Router and when configuring i18n and middleware or proxy authorization. In these cases...

7.5CVSS5.8AI score0.0062EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.29 views

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform developed by F5 Technologies in the United States. It integrates functions such as network traffic management, application security management, and load balancing. There is a security vulnerability in F5 BIG-IP. This vulnerability arises from HTTP/2...

8.7CVSS5.8AI score0.00263EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.29 views

Fleet 安全漏洞

Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, MDM operations, etc. There is a security vulnerability in Fleet, which stems...

9.9CVSS5.9AI score0.0039EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.29 views

WordPress plugin Cost Calculator Builder 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

5.3CVSS5.8AI score0.00227EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.29 views

Palo Alto Networks Prisma Browser 代码问题漏洞

Palo Alto Networks Prisma Browser is an enterprise-level security browser developed by Palo Alto Networks. There is a code vulnerability in Palo Alto Networks Prisma Browser, which stems from a race condition issue. This vulnerability may allow non-administrative users with local access to bypass...

5.8CVSS5.9AI score0.0011EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.29 views

Astro 安全漏洞

Astro is a content-driven website framework developed by Astro OpenSource. Versions of Astro prior to 6.1.10 contained security vulnerabilities. These vulnerabilities stemmed from the use of AES-GCM encryption to protect server island attributes and slot parameters, where the ciphertext was not...

6.3CVSS5.7AI score0.00144EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.29 views

Adobe Commerce 安全漏洞

Adobe Commerce is a leading global digital business solution for businesses and brands offered by Adobe in the United States. There is a security vulnerability in Adobe Commerce, which stems from reliance on vulnerable third-party components, potentially causing application denial-of-service...

5.3CVSS5.8AI score0.0062EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.29 views

lemur 注入漏洞

Lemur is an open-source TLS certificate management tool developed by Netflix, Inc. Versions of Lemur prior to 1.9.0 contained a injection vulnerability. This vulnerability stemmed from the LDAP authentication module using uncleaned user input to construct LDAP search filters, which could lead to...

8.1CVSS5.8AI score0.00179EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.29 views

Hugo 路径遍历漏洞

Hugo is a framework based on the Go language used by the Gohugoio community for quickly generating static websites. Versions of Hugo from 0.43 to 0.161.0 had a path traversal vulnerability. This vulnerability occurred due to the lack of restrictions on file system access when calling Node tools,...

8.6CVSS5.9AI score0.00274EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.29 views

Microsoft SSO Plugin for Jira & Confluence 安全漏洞

The Microsoft SSO Plugin for Jira & Confluence is an SSO authentication integration plugin developed by Microsoft for Atlassian collaboration software Jira and Confluence in local deployment. There are security vulnerabilities in the Microsoft SSO Plugin for Jira & Confluence. Attackers can explo...

9.1CVSS6AI score0.05378EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.29 views

Microsoft Power Automate 信息泄露漏洞

Microsoft Power Automate is a low-code automation platform developed by the American company Microsoft. It allows users to create automated workflows that can connect and integrate various applications and services. There is an information leakage vulnerability present in Microsoft Power Automate...

6.5CVSS5.8AI score0.00868EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.29 views

Kura Sushi Official App 信任管理问题漏洞

Kura Sushi Official App is a mobile reservation and membership service app for Kura Sushi restaurants across Japan. The app has vulnerabilities related to trust management, stemming from improper certificate verification. These vulnerabilities may allow for interception by intermediaries or the...

9.1CVSS7.1AI score0.0016EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.29 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Versions of Mozilla Firefox prior to 150.0.3 contained a security vulnerability, which was caused by a compilation error in the JavaScript Engine’s JIT component...

7.3CVSS5.8AI score0.00331EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.29 views

Pandora FMS SQL注入漏洞

Pandora FMS is a monitoring system developed by the American company Pandora FMS. This system provides visual monitoring of networks, servers, virtual infrastructure, and applications. Versions 777 to 800 of Pandora FMS have a SQL injection vulnerability. This vulnerability arises from improper...

9.8CVSS5.9AI score0.00274EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.29 views

arcadedb 安全漏洞

Arcadedb is a high-performance multi-model database management system developed by Arcade Data. Versions of ArcadeDB prior to 2.6.4 contained security vulnerabilities. These vulnerabilities stemmed from two defects: the ServerSecurityUser.getDatabaseUser function returned a database user with an...

9CVSS5.8AI score0.00397EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.29 views

Intel QAT software drivers for Windows 缓冲区错误漏洞

Intel QAT software drivers for Windows are a set of encryption and compression hardware acceleration drivers for the Windows platform developed by Intel Corporation. Versions of Intel QAT software drivers for Windows prior to version 1.13 contain a buffer error vulnerability. This vulnerability...

8.5CVSS6AI score0.0011EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.29 views

Microsoft Windows Secure Boot 安全漏洞

Microsoft Windows Secure Boot is a security boot feature provided by Microsoft Corporation. There are security vulnerabilities associated with Microsoft Windows Secure Boot. Attackers can exploit these vulnerabilities to bypass certain features. The following products and versions are affected:...

6.7CVSS5.8AI score0.01421EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.29 views

Microsoft Word 安全漏洞

Microsoft Word is a word processing software within the Office suite developed by Microsoft Corporation. There are security vulnerabilities in Microsoft Word. Attackers can exploit these vulnerabilities to execute code remotely. The following products and versions are affected: Microsoft SharePoi...

8.4CVSS5.9AI score0.00453EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.29 views

Microsoft Windows 访问控制错误漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There is a vulnerability related to access control in Microsoft Windows. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected: Windo...

7.8CVSS5.8AI score0.00272EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.29 views

Summarize 安全漏洞

Summarize is a multi-source rapid summarization tool developed by Peter Steinberger. Versions of Summarize prior to 0.14.1 contain security vulnerabilities. These vulnerabilities stem from the use of default file system permissions for the configuration directory and files of the daemon process. ...

6.9CVSS5.8AI score0.00098EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.29 views

Apple多款产品 安全漏洞

Apple iOS, among others, are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple tvOS is an operating system for smart TVs. Apple watchOS is an operating system for smart watches. Several Apple products have security vulnerabilities; these...

6.2CVSS6AI score0.00166EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.29 views

WWBN AVideo 安全漏洞

WWBN AVideo is a video platform building system developed by the WWBN team using PHP. Versions of WWBN AVideo prior to 29.0 contained security vulnerabilities. These vulnerabilities stemmed from the plugin/CloneSite/cloneClient.json.php file displaying the local CloneSite shared key in unvalidate...

7.5CVSS5.9AI score0.00255EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.29 views

Open5GS 安全漏洞

Open5GS is an open-source implementation of 5G Core and EPC in C language, which serves as the core network for LTE/NR networks. Versions of Open5GS 2.7.7 and earlier contain security vulnerabilities. These vulnerabilities stem from a null pointer dereferencing in the smfnsmfhandlecreatedatainhsm...

6.5CVSS5.8AI score0.00378EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.29 views

WordPress plugin Custom css-js-php 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

7.3CVSS6.2AI score0.01195EPSS
SaveExploits3References1
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.29 views

Apple多款产品 安全漏洞

Apple iOS, among others, are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system designed for Mac computers. Apple iPadOS is an operating system for iPad tablets. Several of Apple’s products have...

7.5CVSS5.8AI score0.00411EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.29 views

Apple多款产品 安全漏洞

Apple iOS, among others, are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system designed for Mac computers. Apple iPadOS is an operating system for iPad tablets. Several of Apple’s products have...

6.2CVSS5.8AI score0.00147EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.29 views

pgAdmin 安全漏洞

pgAdmin is an open-source management and development platform for the open-source database PostgreSQL. Versions of pgAdmin prior to 4.9.15 contained a security vulnerability caused by symbolic link path traversal. This vulnerability could allow authenticated users to create symbolic links within...

8.1CVSS5.9AI score0.00359EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.29 views

genie 安全漏洞

Genie is a CLI tool developed by Automagik that automatically converts sentence-based requests into complete pull requests. Version 2.5.27 of Genie has a security vulnerability. This vulnerability stems from command injection in the viewtask parameter of the readTranscriptFromCommit function, whi...

8.1CVSS6.1AI score0.01008EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/10 12:00 a.m.29 views

Wavlink NU516U1 命令注入漏洞

Wavlink NU516U1 is a wireless printing server developed by Wavlink Corporation. The Wavlink NU516U1 240425 version has a command injection vulnerability. This vulnerability stems from the OS command injection present in the function wzdapMesh located in the file/cgi-bin/adm.cgi, which may lead to...

8.8CVSS6.6AI score0.05909EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/10 12:00 a.m.29 views

WordPress plugin GetPaid 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.4CVSS5.9AI score0.00169EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/09 12:00 a.m.29 views

Net::IMAP 安全漏洞

Net::IMAP is a Ruby client API for the IMAP message access protocol, developed by Ruby Open Source. Versions of Net::IMAP prior to 0.4.24, 0.5.14, and 0.6.4 contained security vulnerabilities. These vulnerabilities stemmed from the use of ResponseReader, which had a quadratic time complexity when...

7.5CVSS5.8AI score0.0041EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.29 views

SourceCodester Comment System 注入漏洞

The SourceCodester Comment System is an open-source comment system developed by SourceCodester. Version 1.0 of the SourceCodester Comment System has a vulnerability caused by SQL injection due to the parameter manipulation in the file postcomment.php. This vulnerability could be exploited through...

7.5CVSS7.1AI score0.00254EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.29 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the use of signed integers in bloblen and nummon functions within cephmonmapdecode. This can lead...

7.5CVSS5.8AI score0.0049EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.29 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which may lead to a zero-division error when the sampling frequency is not specified...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.29 views

OpenMcdf 安全漏洞

OpenMcdf is an open-source .NET library for manipulating compound file binary formats. Versions of OpenMcdf prior to 3.1.3 contained security vulnerabilities, which stemmed from undetected loops in the red-black tree used to manage directory entries, potentially leading to infinite loops...

6.2CVSS5.8AI score0.00187EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.29 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the fact that flagsvalid was not initialized before calling vfsfileattrget, potentially leading t...

5.5CVSS5.8AI score0.00112EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/07 12:00 a.m.29 views

WordPress plugin Appointment Booking Calendar 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

6.5CVSS5.8AI score0.00492EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/07 12:00 a.m.29 views

PHOENIX CONTACT多款产品 安全漏洞

PHOENIX CONTACT FL MGUARD 2102, among others, are products of the German company PHOENIX CONTACT. PHOENIX CONTACT FL MGUARD 2102 is a router. PHOENIX CONTACT FL MGUARD 2105 is also a router. PHOENIX CONTACT FL MGUARD represents a series of routers. Several products from PHOENIX CONTACT have...

8CVSS5.9AI score0.0034EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.29 views

PhpSpreadsheet 跨站脚本漏洞

PhpSpreadsheet is a PHP library developed by PHPOffice, designed for reading and writing spreadsheet files. Versions prior to PhpSpreadsheet 5.7.0, 3.10.5, 2.4.5, 2.1.16, and 1.30.4 contained a cross-site scripting vulnerability. This vulnerability stemmed from HTML writers skipping...

5.4CVSS5.8AI score0.00225EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.29 views

Jupyter多款产品 跨站脚本漏洞

Jupyter Notebook is an open-source web application developed by Project Jupyter, designed for creating and sharing code along with explanatory text documents. JupyterLab is another open-source project developed by JupyterLab, offering an extensible environment for interactive and reproducible...

8.4CVSS5.8AI score0.00476EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.29 views

Apache Wicket 路径遍历漏洞

Apache Wicket is an open-source, lightweight, component-based framework developed by the Apache Foundation in the United States. It provides an object-oriented approach for developing web-based dynamic UI applications. Versions 8.0.0 to 8.17.0, 9.0.0 to 9.22.0, and 10.0.0 to 10.8.0 of Apache Wick...

6.5CVSS5.9AI score0.00732EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.29 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the fact that the task handling process continues to run when the FarSync T series cards a...

8.8CVSS5.8AI score0.00387EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.29 views

mistune 安全漏洞

Mistune is a fast and powerful Python Markdown parser developed by Hsiaoming Yang. Versions of Mistune from 3.0.0a1 to 3.2.0 contain security vulnerabilities. These vulnerabilities stem from a denial-of-service attack involving regular expressions in LINKTITLERE, which could allow attackers to...

8.7CVSS5.8AI score0.00528EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.29 views

WatchGuard Agent 安全漏洞

WatchGuard Agent is a terminal security protection and device management agent provided by the American company WatchGuard. There is a security vulnerability in WatchGuard Agent, which stems from a stack-based buffer overflow issue. Unauthorized attackers within the same local network may exploit...

7.1CVSS6.1AI score0.00252EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.29 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the srcugpstartifneeded function in tiny SRCU directly calling schedulework. This could lead to...

5.5CVSS5.8AI score0.001EPSS
SaveExploits0References1
Total number of security vulnerabilities5000