Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
added 2025/10/31 12:00 a.m.29 views

Ubiquiti UniFi Access Application 安全漏洞

Ubiquiti UniFi Access Application is an access control system from Ubiquiti, Inc. A security vulnerability exists in the Ubiquiti UniFi Access Application versions 3.3.22 through 3.4.31, which stems from an exposed management API and lack of proper authentication, which could lead to unauthorized...

10CVSS9.1AI score0.40972EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/25 12:00 a.m.29 views

WordPress plugin Quickcreator 信息泄露漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Quickcreator, which stem...

7.5CVSS5.7AI score0.00311EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/21 12:00 a.m.29 views

DCMTK 安全漏洞

DCMTK is a collection of libraries and applications that implement most of the DICOM standards from the DCMTK open source. Software for inspecting, building, and converting DICOM image files, processing offline media, sending and receiving images over a network connection, and demonstrating image...

5.5CVSS5.5AI score0.00247EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/10/17 12:00 a.m.29 views

Hikvision iSecure Center 安全漏洞

Hikvision iSecure Center is an integrated security management platform from Hikvision China. A security vulnerability exists in Hikvision iSecure Center that stems from insufficient parameter validation, which could lead to a command injection attack...

9.8CVSS7.3AI score0.01423EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/10 12:00 a.m.29 views

编号撤回

cross-zip is a cross-platform zip file creation tool by the individual developer Feross Aboukhadijeh. This CVE number has been withdrawn...

6.6AI score
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/10 12:00 a.m.29 views

FreeRTOS-Plus-TCP 安全漏洞

FreeRTOS-Plus-TCP is an extensible open source and thread-safe TCP/IP stack for FreeRTOS. A security vulnerability exists in FreeRTOS-Plus-TCP that stems from a lack of validation checks in the ICMPv6 packet processing code, which could lead to out-of-bounds reads...

5.4CVSS6.6AI score0.00306EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/02 12:00 a.m.29 views

Creativeitem Ekushey CRM 跨站脚本漏洞

Creativeitem Ekushey CRM is an open source project management script from Creativeitem. A cross-site scripting vulnerability exists in Creativeitem Ekushey CRM version 5.0, which stems from a lack of user input validation and could lead to a stored cross-site scripting attack...

5.4CVSS5.9AI score0.00207EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/30 12:00 a.m.29 views

Finance.js 安全漏洞

Finance.js is a JavaScript library for financial calculations by Essam B. Individual Developer. A security vulnerability exists in Finance.js version 4.1.0, which stems from improper handling of the seekZero parameter and could lead to a denial of service attack...

7.5CVSS6.3AI score0.00532EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/19 12:00 a.m.29 views

Oracle OpenGrok 安全漏洞

Oracle OpenGrok is a fast and efficient source code search and cross-reference tool from Oracle Corporation that supports multiple programming languages for navigating and analyzing large code bases. A security vulnerability exists in Oracle OpenGrok version 1.14.1, which stems from improper...

6.1CVSS6.2AI score0.00202EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/18 12:00 a.m.29 views

Enalean Tuleap Community Edition和Enalean Tuleap Enterprise Edition 安全漏洞

Enalean Tuleap Community Edition and Enalean Tuleap Enterprise Edition are both an open source suite from Enalean Open Source designed to improve the management of software development and collaboration. A security vulnerability exists in Tuleap Community Edition version 16.11.99.1757427600 and...

4.3CVSS6.5AI score0.00332EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/15 12:00 a.m.29 views

DataEase 代码问题漏洞

DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. A code issue vulnerability exists in DataEase 2.10.12 and prior versions that...

9.8CVSS7.7AI score0.00813EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/09/15 12:00 a.m.29 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improperly set completion timeout for the ucsiacpi command, which could result in a null pointer...

5.5CVSS6.4AI score0.00154EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/11 12:00 a.m.29 views

WordPress plugin Coupon API SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

4.9CVSS7.7AI score0.00407EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/10 12:00 a.m.29 views

SolaX Cloud 安全漏洞

SolaX Cloud is a photovoltaic monitoring and management platform from the Chinese company SolaX. A security vulnerability exists in SolaX Cloud that stems from a lack of authorization and could lead to the takeover of a solar inverter...

5.8CVSS6.7AI score0.00274EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/09 12:00 a.m.29 views

Microsoft Office 资源管理错误漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to...

7.8CVSS8AI score0.00709EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/09 12:00 a.m.29 views

Tautulli 安全漏洞

Tautulli is a Tautulli open source application for monitoring Plex Media Server media server. A security vulnerability exists in Tautulli 2.15.3 and earlier versions, which stems from the presence of path traversal in the realpmsimageproxy endpoint, which could lead to arbitrary file reads...

8.6CVSS6.5AI score0.00684EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/09/08 12:00 a.m.29 views

ELADMIN 授权问题漏洞

ELADMIN is a backend management system for elunez individual developers. An authorization issue vulnerability exists in ELADMIN 2.7 and earlier versions, which stems from an improper authorization issue in the /api/logs/error/1 file...

5.3CVSS4.8AI score0.00286EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/09/04 12:00 a.m.29 views

NVIDIA BlueField 安全漏洞

NVIDIA BlueField is a series of data processing units from NVIDIA. NVIDIA BlueField has a security vulnerability that can be exploited by attackers to potentially cause a denial of service, elevation of privilege, and information disclosure...

8.7CVSS6.7AI score0.00145EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/26 12:00 a.m.29 views

Citrix NetScaler ADC和Citrix NetScaler Gateway 安全漏洞

Citrix NetScaler ADC and Citrix NetScaler Gateway are both products of Citrix Corporation, U.S.A. Citrix NetScaler ADC is an application delivery and security platform.Citrix NetScaler Gateway is a secure remote access solution. A security vulnerability exists in Citrix NetScaler ADC and Citrix...

8.7CVSS6.5AI score0.02824EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/18 12:00 a.m.29 views

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from improper input validation and could lead to remote elevation of privilege...

9.8CVSS6.8AI score0.01525EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/12 12:00 a.m.29 views

Intel SPS和Intel CSME 安全漏洞

Intel SPS and Intel CSME are both products of Intel Corporation Intel, U.S.A. Intel SPS is a server platform service. Intel CSME is a converged security management engine. A security vulnerability exists in Intel SPS and Intel CSME that stems from an observable time difference that could lead to...

6.8CVSS6.3AI score0.00164EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/01 12:00 a.m.29 views

1Panel 命令注入漏洞

1Panel is an open source Linux server operation and maintenance management panel of the Chinese 1Panel community . 1Panel suffers from a command injection vulnerability that stems from incomplete certificate validation, which can be exploited by an attacker to cause remote code execution...

9.8CVSS8.2AI score0.00934EPSS
SaveExploits5References5
CNNVD
CNNVD
added 2025/07/26 12:00 a.m.29 views

mall 代码注入漏洞

mall is a macro personal developer of a set of e-commerce system, including the front mall system and backend management system. mall 1.0.3 and previous versions of code injection vulnerability, the vulnerability stems from the file / swagger-ui/index.html parameter configUrl lead to cross-site...

5.4CVSS4.7AI score0.01702EPSS
SaveExploits3References8
CNNVD
CNNVD
added 2025/07/18 12:00 a.m.29 views

RSJoomla! RSDirectory! component for Joomla 跨站脚本漏洞

RSJoomla! RSDirectory! component for Joomla is an extension component for the Joomla content management system from RSJoomla! A cross-site scripting vulnerability exists in RSJoomla! RSDirectory! component for Joomla versions 1.0.0 through 2.2.8, which stems from mishandling of the comment reply...

5.1CVSS5.9AI score0.0036EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/07/11 12:00 a.m.29 views

Juniper Networks Junos OS和Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper...

6CVSS6.6AI score0.00209EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/07/03 12:00 a.m.29 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from Bluetooth MGMT not validating the length of the HCICMDSYNC parameter, which could result in an out-of-bounds...

5.5CVSS8AI score0.0014EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/06/30 12:00 a.m.29 views

Code-Projects Library System 代码问题漏洞

Library System is a library system. Library System has a code issue vulnerability that stems from the lack of valid validation of uploaded files by the parameter image in the file /add-book.php. An attacker can exploit this vulnerability to upload malicious files...

9.8CVSS7.2AI score0.00378EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/06/26 12:00 a.m.29 views

WordPress plugin Simple User Registration 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

9.8CVSS6.4AI score0.02268EPSS
SaveExploits5References2
CNNVD
CNNVD
added 2025/06/25 12:00 a.m.29 views

Brother Industries Multiple driver installers for Windows 安全漏洞

Brother Industries Multiple driver installers for Windows is a driver software from Brother Industries, Japan. A security vulnerability exists in Brother Industries Multiple driver installers for Windows, which can be exploited by an unauthenticated attacker to access the /etc/mntinfo.csv path vi...

5.3CVSS8.1AI score0.73201EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2025/06/24 12:00 a.m.29 views

Elecom WRH-733GBK和Elecom WRH-733GWH 操作系统命令注入漏洞

The Elecom WRH-733GBK and Elecom WRH-733GWH are both portable routers from Elecom Japan. The Elecom WRH-733GBK and Elecom WRH-733GWH suffer from an operating system command injection vulnerability that stems from improper neutralization of special elements in the miniigd SOAP service, which could...

9.8CVSS9.6AI score0.02197EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/06/22 12:00 a.m.29 views

Code-Projects School Fees Payment System 代码注入漏洞

School Fees Payment System is a tuition payment system. School Fees Payment System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter translationremark in the file /fees.php, which can be exploited ...

6.1CVSS4.6AI score0.00372EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/06/08 12:00 a.m.29 views

Tenda AC15 安全漏洞

The Tenda AC15 is a wireless router from the Chinese company Tenda. Tenda AC15 suffers from a buffer overflow vulnerability, which originates from the parameter Time in the file /goform/SetLEDCf that fails to correctly validate the length and size of the input data, which can be exploited by an...

9CVSS8.2AI score0.06246EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/06/01 12:00 a.m.29 views

Blogbook 注入漏洞

Blogbook is a content management system project by the individual developer Chaitak Gorai. Blogbook 92f5cf90f8a7e6566b576fe0952e14e1c6736513 and earlier versions have an injection vulnerability that stems from SQL injection of the parameter postid in the file /admin/viewallposts.php...

8.8CVSS6.9AI score0.00474EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/05/21 12:00 a.m.29 views

Yandex Browser 安全漏洞

Yandex Browser is a desktop version of a web browser from the Russian company Yandex. A security vulnerability exists in Yandex Browser for Android prior to version 21.3.0, which originates from a remote attacker who can perform an IDN homomorphism attack...

6.9CVSS6.7AI score0.00436EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.29 views

IBM i 信任管理问题漏洞

IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. IBM i is vulnerable to a trust management issue vulnerability that stems from improper handling of IBM i Netserver authentication, no details of the vulnerability are...

5.4CVSS6.7AI score0.0025EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/06 12:00 a.m.29 views

WordPress plugin LayoutBoxx 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

7.3CVSS8.3AI score0.00486EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/01 12:00 a.m.29 views

goTenna V1 安全漏洞

goTenna V1 is a portable offline communication device from goTenna that enables long-distance peer-to-peer communication between smartphones via mesh network technology. A security vulnerability exists in goTenna V1, which stems from the default use of a phone number as the GID, which may lead to...

6.5CVSS6.5AI score0.00156EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/09 12:00 a.m.29 views

WordPress plugin MapSVG Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

6.5CVSS6.7AI score0.00287EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/14 12:00 a.m.29 views

WordPress plugin ShareThis Dashboard for Google Analytics 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

5.3CVSS6.6AI score0.00277EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/03/04 12:00 a.m.29 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege checking vulnerability exists in the Huawei HarmonyOS media library module, which can be exploited by an attacker to compromise confidentiality...

5.5CVSS6.8AI score0.00101EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/02/12 12:00 a.m.29 views

Lenovo Vantage 安全漏洞

Lenovo Vantage is a computer management application from the Chinese company Lenovo Lenovo. The program supports features such as driver updates, device status diagnostics, and computer configuration. A security vulnerability exists in Lenovo Vantage, which stems from improper BIOS customization...

8.5CVSS6.4AI score0.00181EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/07 12:00 a.m.30 views

FileVista 安全漏洞

FileVista is a web file manager from GleamTech Individual Developers. A security vulnerability exists in FileVista version 9.2.0.0 that originates from directory traversal during file uploads and allows remote attackers to execute code, disclose information, and elevate privileges...

6.3CVSS6.6AI score0.03206EPSS
SaveExploits3References2
CNNVD
CNNVD
added 2025/01/31 12:00 a.m.29 views

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a code issue vulnerability that stems from the bnxt driver not properly recalculating network device characteristics after XDP is disabled, which...

5.5CVSS8.1AI score0.00233EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/02 12:00 a.m.29 views

WordPress plugin Convertful 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS8.7AI score0.00345EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/24 12:00 a.m.29 views

Hanwha Vision NVR 安全漏洞

Hanwha Vision NVR is a series of network video recorder devices from Hanwha Vision, a South Korean company. A security vulnerability exists in Hanwha Vision NVR that stems from improper handling of large data inputs when processing URL parameters, which could lead to a stack overflow...

6.9CVSS6.4AI score0.00799EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/23 12:00 a.m.29 views

Rizin 操作系统命令注入漏洞

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used to analyze binary files, disassemble code, debug programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. An operating system command injection...

7.8CVSS7.1AI score0.012EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/14 12:00 a.m.29 views

Menlo Security On-Premise 安全漏洞

Menlo Security On-Premise is a secure enterprise browser-native program from Menlo Security. A security vulnerability exists in Menlo Security On-Premise versions prior to 2.88 that stems from the possibility that Web policies may not always be applied correctly to intentionally misformatted clie...

9.1CVSS6.6AI score0.00443EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/22 12:00 a.m.29 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is a PDF reader from the Chinese company Foxit. A resource management error vulnerability exists in Foxit PDF Reader, which arises from manipulating AcroForms without verifying the existence of the object, which could lead to remote code execution...

7.8CVSS7.7AI score0.00399EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/06 12:00 a.m.29 views

DiDi Super-Jacoco 安全漏洞

DiDi Super-Jacoco is a one-stop JAVA code full/diff coverage collection platform from China's Dripping DiDi company. A security vulnerability exists in DiDi Super-Jacoco version 1.0, which stems from an operating system command injection in the parameter uuid...

9.8CVSS7AI score0.05135EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/10/22 12:00 a.m.29 views

Liferay Portal和Liferay DXP 安全漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

9CVSS7.6AI score0.00611EPSS
SaveExploits0References2
Total number of security vulnerabilities5000