Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
added 2026/02/17 12:00 a.m.29 views

Dell Avamar Server和Dell Avamar Virtual Edition 路径遍历漏洞

Dell Avamar Server and Dell Avamar Virtual Edition are data backup and recovery software developed by the American company Dell. Both products have a path traversal vulnerability, particularly in versions prior to 19.10 SP1 with CHF338912. This vulnerability stems from improper restrictions on...

6.5CVSS5.9AI score0.00338EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/11 12:00 a.m.29 views

Mealie 安全漏洞

Mealie is a self-hosted recipe manager and meal planner developed by Hayden from the United States. Version 3.3.1 of Mealie contains a security vulnerability, which stems from a storage-type HTML injection in the Recipe Notes rendering component, potentially leading to user interface spoofing...

5.4CVSS5.8AI score0.00239EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/02/11 12:00 a.m.30 views

statping-ng 安全漏洞

Statping-ng is an open-source server monitoring software developed by Statping-ng. Version 0.91.0 of Statping-ng contains a security vulnerability, which stems from improper handling of specially crafted requests for admin parameters, potentially leading to the exposure of sensitive information...

7.5CVSS5.8AI score0.00575EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/02/11 12:00 a.m.29 views

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by the American company Apple for Mac computers. Versions of Apple macOS prior to Sequoia 15.7.4 and Sonoma 14.8.4 contained security vulnerabilities due to authorization issues, which could allow applications to access sensitive user data...

5.5CVSS5.8AI score0.00179EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/02/10 12:00 a.m.29 views

Fortinet FortiOS 格式化字符串错误漏洞

Fortinet FortiOS is a security operating system developed by Fortinet Corporation, specifically for use on the FortiGate network security platform. This system provides users with various security features such as firewalls, antivirus protection, IPSec/SSLVPN, web content filtering, and anti-spam...

7.2CVSS6.1AI score0.01418EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/10 12:00 a.m.29 views

AMD多款产品 安全漏洞

AMD EPYC and other products are developed by American semiconductor company AMD. AMD EPYC is a high-performance server processor. Amd Epyc™ Embedded Processors are embedded processors. AMD EPYC Processors are a series of multi-core processors. Several AMD products have security vulnerabilities;...

5.9CVSS5.8AI score0.00163EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/10 12:00 a.m.29 views

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is a email service program provided by the American company Microsoft. It offers features such as email access, storage, forwarding, voicemail handling, and email filtering. There are security vulnerabilities in Microsoft Exchange Server. Attackers use these...

6.5CVSS6.1AI score0.07972EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/09 12:00 a.m.29 views

Adminer 输入验证错误漏洞

Adminer is an open-source WordPress plugin developed by Adminer. It allows WordPress administrators to perform database management tasks quickly. Versions of Adminer prior to 5.4.1 had a vulnerability related to input validation errors. This vulnerability stemmed from a lack of source verificatio...

7.5CVSS5.8AI score0.01586EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/02/04 12:00 a.m.29 views

n8n 路径遍历漏洞

n8n is an open-source, scalable workflow automation tool developed by n8n. Versions of n8n prior to 1.123.12 and 2.4.0 contained a path traversal vulnerability. This vulnerability stemmed from the lack of validation of metadata when processing uploaded files, which could lead to files being writt...

8.1CVSS6.3AI score0.01781EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/03 12:00 a.m.29 views

Wikimedia MediaWiki 安全漏洞

Wikimedia MediaWiki is a web application developed by the Wikimedia Foundation for building Wiki websites. Versions of MediaWiki prior to 1.39.16, 1.43.6, 1.44.3, and 1.45.1 contained security vulnerabilities due to a flaw in the includes/Api/ApiQueryRevisionsBase.Php file...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/03 12:00 a.m.29 views

CyberArk Endpoint Privilege Manager Agent 安全漏洞

CyberArk Endpoint Privilege Manager Agent is a security software for managing terminal privileges developed by the Israeli company CyberArk. Versions of CyberArk Endpoint Privilege Manager Agent prior to 25.10.0 contain security vulnerabilities, which stem from the ability of local users to...

7.8CVSS7AI score0.00242EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/03 12:00 a.m.29 views

ASUSTOR ADM 安全漏洞

ASUSTOR ADM is a dedicated operating system developed by ASUSTOR Technology ASUSTOR for all ASUSTOR NAS devices. Vulnerabilities exist in versions 4.1.0 to 4.3.3.ROF1, and from version 5.0.0 to 5.1.1.RCI1 of ASUSTOR ADM. These vulnerabilities stem from improper validation of input parameters...

9.8CVSS7.3AI score0.0081EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/02 12:00 a.m.29 views

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporation. Qualcomm Chipsets have a vulnerability related to input validation errors. This vulnerability arises from insufficient checks during the calculation of the size of large partitions, which may lead to memory corruption...

7.8CVSS5.8AI score0.00098EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/02 12:00 a.m.29 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain security vulnerabilities, which stem from improper handling of modem errors. These vulnerabilities may lead to remote denial-of-service attacks...

6.5CVSS5.8AI score0.00214EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/29 12:00 a.m.29 views

Monkey Server security vulnerabilities

Monkey Server is an open-source HTTP server developed by Monkey I/O. There is a security vulnerability in Monkey Server, which stems from an out-of-bounds read in the mkvhostfdtclose function, potentially leading to a denial-of-service attack...

7.5CVSS5.8AI score0.01108EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/01/28 12:00 a.m.29 views

OpenProject data falsification vulnerability

OpenProject is an open-source web-based project management software. In versions 17.0.0 to 17.0.2 of OpenProject, there was a data manipulation vulnerability. This vulnerability stemmed from the BlockNote editor extension not properly verifying work package IDs, allowing arbitrary GET requests to...

7.3CVSS5.9AI score0.00111EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/28 12:00 a.m.29 views

Google Go 安全漏洞

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google. A denial of service vulnerability exists in Google Go, which stems from an unrestricted number of query parameters, which can be exploited by an attacker to cause excessive memory...

7.5CVSS6.9AI score0.02175EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/01/24 12:00 a.m.30 views

Salesforce Marketing Cloud Engagement security vulnerability

Salesforce Marketing Cloud Engagement is a digital marketing automation platform offered by the American company Salesforce. Versions of Salesforce Marketing Cloud Engagement prior to version 2026.1.21 contained security vulnerabilities, which were caused by hard-coded encryption keys. These...

9.8CVSS5.7AI score0.00616EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/23 12:00 a.m.29 views

Aptsys Gemscms POS Platform security vulnerabilities

Aptsys Gemscms POS Platform is a catering management system developed by the Indian company Aptsys. There is a security vulnerability in the Aptsys Gemscms POS Platform. This vulnerability arises from the PHP backend, which triggers detailed error messages when processing specially crafted HTTP...

5.3CVSS5.8AI score0.00453EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/23 12:00 a.m.29 views

Miniserve security vulnerabilities

Miniserve is a command-line tool developed by Sven-Hendrik Haase. Version 0.32.0 of Miniserve contains a security vulnerability. This vulnerability stems from TOCTOU and symbolic link races during upload completion, which may lead to overwriting files located outside of the expected upload/docume...

6.8CVSS5.8AI score0.0033EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.29 views

WordPress plugin Peach Payments Gateway has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

6.5CVSS5.8AI score0.00386EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/20 12:00 a.m.29 views

Oracle MySQL 安全漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL for MySQL Server versions 9.0.0 through 9.5.0, which can be exploited by attackers to cause a denial ...

6.5CVSS7.1AI score0.00368EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/16 12:00 a.m.29 views

Kafka Connect BigQuery Connector code issues and vulnerabilities

Kafka Connect BigQuery Connector is a high-performance data synchronization middleware developed by Aiven Open. Versions of the connector prior to 2.11.0 contained code vulnerabilities. These vulnerabilities stemmed from the fact that the service did not validate the credentials from external...

7.7CVSS6AI score0.00414EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/01/13 12:00 a.m.29 views

Microsoft Windows SMB Server 竞争条件问题漏洞

Microsoft Windows SMB Server is a network file-sharing protocol from Microsoft. It allows applications on a computer to read and write files and request services from server programs on a computer network. A denial of service vulnerability exists in Microsoft Windows SMB Server, which is caused d...

5.3CVSS5.8AI score0.00923EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/13 12:00 a.m.29 views

Tenable Nessus Agent Tray App 安全漏洞

Tenable Nessus Agent Tray App is a tray component from Tenable USA. A security vulnerability exists in Tenable Nessus Agent Tray App that stems from an installation/uninstallation issue on Windows hosts that could lead to elevated privileges...

8.8CVSS5.8AI score0.00128EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/13 12:00 a.m.29 views

Microsoft Windows SMB Server 竞争条件问题漏洞

Microsoft Windows SMB Server is a network file-sharing protocol from Microsoft. It allows applications on a computer to read and write files and request services from server programs on a computer network. An elevation of privilege vulnerability exists in Microsoft Windows SMB Server due to...

7.5CVSS5.9AI score0.00811EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/12 12:00 a.m.29 views

wlc 信任管理问题漏洞

wlc is an open source command line client for Weblate. A trust management issue vulnerability exists in versions of wlc prior to 1.17.0, which stems from the fact that SSL authentication is skipped for certain specially crafted URLs...

5.5CVSS6.7AI score0.00156EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/01/09 12:00 a.m.29 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Jan-2026 Release 1 prior to Release 1, which stems from an improperly exported Andro...

4.8CVSS6.4AI score0.00128EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.29 views

WordPress plugin WPBakery Visual Composer WHMCS Elements 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.9CVSS6.1AI score0.0021EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.29 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc USA. A resource management error vulnerability exists in versions of Google Chrome prior to 143.0.7499.147, which stems from reuse of the WebGPU after release and can lead to heap corruption...

8.8CVSS6.2AI score0.02997EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.29 views

CTCMS 代码注入漏洞

CTCMS Chibi CMS is a video content management system from China Chibi CMS CTCMS company. A code injection vulnerability exists in CTCMS 2.1.2 and earlier versions, which stems from the improper handling of the parameter CjAdd/CjEdit by the unknown function in the file /ctcms/libs/CtConfig.php,...

7.2CVSS5.5AI score0.00458EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/10 12:00 a.m.29 views

Aqara多款产品 安全漏洞

Aqara Camera Hub G3 and others are a smart surveillance camera from Aqara USA. A security vulnerability exists in various Aqara products, which stems from a malicious domain name that results in command injection, which could lead to the execution of arbitrary commands. The following products and...

7.3CVSS7AI score0.00803EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/12/10 12:00 a.m.29 views

Sony IPELA Network Camera 缓冲区错误漏洞

Sony IPELA Network Camera is a webcam from Sony Japan. A buffer error vulnerability exists in Sony IPELA Network Camera version 1.82.01, which stems from a stack buffer overflow in the ftpclient.cgi endpoint that could lead to remote code execution...

9.8CVSS8.2AI score0.01229EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/08 12:00 a.m.29 views

jshop_mall SQL注入漏洞

jshopmall Jshop small program mall is China Jihai technology hnjihai open source an e-commerce system. SQL injection vulnerability exists in jshopmall version 2.9.0, the vulnerability stems from the incorrect operation of the parameter catid in the file /index.php/api.html, which may lead to SQL...

6.5CVSS7AI score0.00229EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/11/21 12:00 a.m.29 views

WordPress plugin Custom Post Type 跨站请求伪造漏洞

WordPress Custom Post Type plugin is a collective term for a class of plugins that are designed to help users easily create and manage custom post types through a graphical interface. A cross-site request forgery vulnerability exists in the WordPress Custom Post Type plugin, which arises from a w...

4.3CVSS6.7AI score0.00124EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/16 12:00 a.m.29 views

DataX-Web 访问控制错误漏洞

DataX-Web is a distributed data synchronization tool developed on top of DataX by WeiYe's personal developer. An access control error vulnerability exists in DataX-Web 2.1.2 and earlier versions, which stems from incorrect operation of the function remove/update/pause/start/triggerJob in the...

8.8CVSS6.4AI score0.00379EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/10/31 12:00 a.m.29 views

Ubiquiti UniFi Access Application 安全漏洞

Ubiquiti UniFi Access Application is an access control system from Ubiquiti, Inc. A security vulnerability exists in the Ubiquiti UniFi Access Application versions 3.3.22 through 3.4.31, which stems from an exposed management API and lack of proper authentication, which could lead to unauthorized...

10CVSS9.1AI score0.40972EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/25 12:00 a.m.29 views

WordPress plugin Quickcreator 信息泄露漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Quickcreator, which stem...

7.5CVSS5.7AI score0.00311EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/21 12:00 a.m.29 views

DCMTK 安全漏洞

DCMTK is a collection of libraries and applications that implement most of the DICOM standards from the DCMTK open source. Software for inspecting, building, and converting DICOM image files, processing offline media, sending and receiving images over a network connection, and demonstrating image...

5.5CVSS5.5AI score0.00247EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/10/17 12:00 a.m.29 views

Hikvision iSecure Center 安全漏洞

Hikvision iSecure Center is an integrated security management platform from Hikvision China. A security vulnerability exists in Hikvision iSecure Center that stems from insufficient parameter validation, which could lead to a command injection attack...

9.8CVSS7.3AI score0.01423EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/10 12:00 a.m.29 views

编号撤回

cross-zip is a cross-platform zip file creation tool by the individual developer Feross Aboukhadijeh. This CVE number has been withdrawn...

6.6AI score
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/10 12:00 a.m.29 views

FreeRTOS-Plus-TCP 安全漏洞

FreeRTOS-Plus-TCP is an extensible open source and thread-safe TCP/IP stack for FreeRTOS. A security vulnerability exists in FreeRTOS-Plus-TCP that stems from a lack of validation checks in the ICMPv6 packet processing code, which could lead to out-of-bounds reads...

5.4CVSS6.6AI score0.00306EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/02 12:00 a.m.29 views

Creativeitem Ekushey CRM 跨站脚本漏洞

Creativeitem Ekushey CRM is an open source project management script from Creativeitem. A cross-site scripting vulnerability exists in Creativeitem Ekushey CRM version 5.0, which stems from a lack of user input validation and could lead to a stored cross-site scripting attack...

5.4CVSS5.9AI score0.00207EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/30 12:00 a.m.29 views

Finance.js 安全漏洞

Finance.js is a JavaScript library for financial calculations by Essam B. Individual Developer. A security vulnerability exists in Finance.js version 4.1.0, which stems from improper handling of the seekZero parameter and could lead to a denial of service attack...

7.5CVSS6.3AI score0.00532EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/19 12:00 a.m.29 views

Oracle OpenGrok 安全漏洞

Oracle OpenGrok is a fast and efficient source code search and cross-reference tool from Oracle Corporation that supports multiple programming languages for navigating and analyzing large code bases. A security vulnerability exists in Oracle OpenGrok version 1.14.1, which stems from improper...

6.1CVSS6.2AI score0.00202EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/18 12:00 a.m.29 views

Enalean Tuleap Community Edition和Enalean Tuleap Enterprise Edition 安全漏洞

Enalean Tuleap Community Edition and Enalean Tuleap Enterprise Edition are both an open source suite from Enalean Open Source designed to improve the management of software development and collaboration. A security vulnerability exists in Tuleap Community Edition version 16.11.99.1757427600 and...

4.3CVSS6.5AI score0.00332EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/15 12:00 a.m.29 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improperly set completion timeout for the ucsiacpi command, which could result in a null pointer...

5.5CVSS6.4AI score0.00154EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/15 12:00 a.m.29 views

DataEase 代码问题漏洞

DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. A code issue vulnerability exists in DataEase 2.10.12 and prior versions that...

9.8CVSS7.7AI score0.00813EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/09/11 12:00 a.m.29 views

WordPress plugin Coupon API SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

4.9CVSS7.7AI score0.00407EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/10 12:00 a.m.29 views

SolaX Cloud 安全漏洞

SolaX Cloud is a photovoltaic monitoring and management platform from the Chinese company SolaX. A security vulnerability exists in SolaX Cloud that stems from a lack of authorization and could lead to the takeover of a solar inverter...

5.8CVSS6.7AI score0.00274EPSS
SaveExploits0References2
Total number of security vulnerabilities5000