Lucene search
+L
CnnvdMost viewed

195539 matches found

CNNVD
CNNVD
added 2026/05/13 12:00 a.m.24 views

Next.js 安全漏洞

Next.js is a React framework open source by Vercel. Versions of Next.js from 12.2.0 to 15.5.16, as well as versions before 16.2.5, have security vulnerabilities. These vulnerabilities arise from using the Pages Router and when configuring i18n and middleware or proxy authorization. In these cases...

7.5CVSS5.8AI score0.0062EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.24 views

WordPress plugin ProfileGrid 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.8AI score0.00219EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.24 views

WordPress plugin JoomSport SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.5CVSS5.9AI score0.00334EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.24 views

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is a large-scale commercial database system developed by Microsoft Corporation, used under the Microsoft Windows operating system. There are security vulnerabilities in Microsoft SQL Server. Attackers can exploit these vulnerabilities to execute code remotely. The following...

8.8CVSS6AI score0.00555EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.24 views

HPE Aruba Networking Wireless Operating System 安全漏洞

HPE Aruba Networking Wireless Operating System is a wireless network operating system developed by the American company HPE. There is a security vulnerability in the HPE Aruba Networking Wireless Operating System. This vulnerability stems from the lack of cleaning of parameters passed to the...

7.2CVSS5.9AI score0.00315EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.24 views

Scramble 代码注入漏洞

Scramble is a tool developed by de:doc for automatically generating API documentation for Laravel projects. Versions of Scramble from 0.13.2 to 0.13.22 contained a code injection vulnerability. This vulnerability stemmed from the exposed documentation endpoints and the use of validation rules tha...

9.4CVSS6AI score0.0586EPSS
SaveExploits3References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.24 views

Fortinet FortiAuthenticator 访问控制错误漏洞

Fortinet FortiAuthenticator is a centralized user identity management solution provided by the American company Fortinet. Versions 8.0.2, 8.0.0, 6.6.0 to 6.6.8, and 6.5.0 to 6.5.6 of Fortinet FortiAuthenticator contain access control vulnerabilities. These vulnerabilities stem from improper acces...

9.8CVSS6.2AI score0.00551EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.24 views

Microsoft Win32k 输入验证错误漏洞

Microsoft Win32k is a system file used for multi-user management in Windows by Microsoft Corporation. There is an input validation vulnerability present in Microsoft Win32k. The following products and versions are affected: Windows 10 Version 1809 for 32-bit systems, Windows 10 Version 1809 for...

7.8CVSS5.8AI score0.00304EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.24 views

Intel QAT software drivers for Windows 缓冲区错误漏洞

Intel QAT software drivers for Windows are a set of encryption and compression hardware acceleration drivers for the Windows platform developed by Intel Corporation. Versions of Intel QAT software drivers for Windows prior to version 1.13 contain a buffer error vulnerability. This vulnerability...

8.5CVSS6AI score0.0011EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.24 views

Microsoft Windows Secure Boot 安全漏洞

Microsoft Windows Secure Boot is a security boot feature provided by Microsoft Corporation. There are security vulnerabilities associated with Microsoft Windows Secure Boot. Attackers can exploit these vulnerabilities to bypass certain features. The following products and versions are affected:...

6.7CVSS5.8AI score0.01421EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.24 views

Adobe Commerce 代码问题漏洞

Adobe Commerce is a leading global digital business solution for businesses and brands offered by Adobe in the United States. There is a code vulnerability in Adobe Commerce, which stems from server-side request forgeing. This vulnerability may allow security features to be bypassed, enabling...

7.4CVSS5.9AI score0.00586EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.24 views

Microsoft Office 安全漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There are security vulnerabilities in Microsoft Office. Attackers can exploit these...

8.4CVSS6AI score0.00383EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.24 views

Apple多款产品 安全漏洞

Apple iOS, among others, are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple tvOS is an operating system for smart TVs. Apple watchOS is an operating system for smart watches. Several Apple products have security vulnerabilities; these...

6.5CVSS5.8AI score0.00453EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.24 views

SOCFortress CoPilot 授权问题漏洞

SOCFortress CoPilot is an open-source unified security operations platform developed by SOCFortress. Versions of SOCFortress CoPilot prior to 0.1.57 contained authorization-related vulnerabilities. These vulnerabilities stemmed from a hardcoded JWT signing key being used as a backup value, and th...

10CVSS5.8AI score0.0044EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.24 views

WWBN AVideo 安全漏洞

WWBN AVideo is a video platform building system developed by the WWBN team using PHP. Versions of WWBN AVideo prior to 29.0 contained security vulnerabilities. These vulnerabilities stemmed from the plugin/CloneSite/cloneClient.json.php file displaying the local CloneSite shared key in unvalidate...

7.5CVSS5.9AI score0.00255EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.24 views

Open edX Platform 跨站脚本漏洞

The Open edX Platform is an open-source course management system developed by Open edX. This system can be used for MOOCs Massive Open Online Courses as well as smaller courses and training modules. The Open edX Platform has a cross-site scripting vulnerability. This vulnerability arises from the...

5.4CVSS5.7AI score0.0021EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.24 views

pyLoad 路径遍历漏洞

pyLoad is an open-source download manager written in Python. Versions of pyLoad prior to 0.5.0b3.dev100 contained a path traversal vulnerability. This vulnerability stemmed from insufficient cleanup of package folder names, which could lead to path traversal attacks...

6.5CVSS5.8AI score0.00342EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.24 views

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. There is a security vulnerability in Apple macOS, which stems from permission issues and may allow applications to obtain root access. The following versions are affected: macOS Sequoia versio...

7.8CVSS5.8AI score0.00139EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.24 views

genie 安全漏洞

Genie is a CLI tool developed by Automagik that automatically converts sentence-based requests into complete pull requests. Version 2.5.27 of Genie has a security vulnerability. This vulnerability stems from command injection in the viewtask parameter of the readTranscriptFromCommit function, whi...

8.1CVSS6.1AI score0.01008EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/10 12:00 a.m.24 views

WordPress plugin Survey & Poll SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

8.8CVSS6.1AI score0.00282EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/10 12:00 a.m.24 views

uBidAuction 跨站脚本漏洞

uBidAuction is an auction website system developed by the uBidAuction company, which supports online bidding and product transaction management. Version 2.0.1 of uBidAuction has a cross-site scripting vulnerability. This vulnerability stems from the improper cleaning of the filter functions for t...

6.1CVSS5.7AI score0.00252EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/09 12:00 a.m.24 views

Auth 授权问题漏洞

Auth is a user authentication and management system open sourced by Supabase. There were vulnerabilities related to authorization in versions of Auth from 1.18.0 to 1.25.2, and from 2.0.0 to 2.1.2. This vulnerability stemmed from the Patreon OAuth provider, which mapped all authenticated Patreon...

9.1CVSS5.8AI score0.00417EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.24 views

zrok 路径遍历漏洞

Zrok is a secure internet sharing tool developed by OpenZiti. Versions of Zrok prior to 2.0.2 contained a path traversal vulnerability. This vulnerability stemmed from the WebDAV driver’s backend, which restricted path traversal through lexical normalization but did not prevent symbolic links fro...

8.7CVSS5.8AI score0.0033EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.24 views

Alkacon OpenCMS 跨站脚本漏洞

Alkacon OpenCMS is a content management system developed by Alkacon Corporation. Versions of Alkacon OpenCMS prior to version 16 contained a cross-site scripting vulnerability, which was caused by the updateModelGroups.jsp file allowing for cross-site scripting attacks...

6.1CVSS5.6AI score0.00149EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.24 views

zebra 数据伪造问题漏洞

Zebra is an open-source Zcash implementation built with Rust by the Zcash Foundation. Versions of Zebra prior to 4.4.0 had a data forgery vulnerability, which stemmed from insufficient error handling when sighash types were invalid, potentially leading to consensus splits...

9.3CVSS5.8AI score0.00188EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.24 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the XDP multiple buffer fragment count in the net mlx5e RX component. This count does not correct...

9.8CVSS5.9AI score0.00414EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.24 views

LINQPad 代码问题漏洞

LINQPad is a lightweight development tool provided by LINQPad Inc., designed for writing and executing LINQ queries and .NET code. Versions of LINQPad 5.52.01 and earlier, including the Pro edition, have code vulnerabilities due to unsafe deserialization in...

7.3CVSS7.4AI score0.00488EPSS
SaveExploits5References1
CNNVD
CNNVD
added 2026/05/07 12:00 a.m.24 views

WordPress plugin Appointment Booking Calendar 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

6.5CVSS5.8AI score0.00492EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/07 12:00 a.m.24 views

OSGeo gdal 缓冲区错误漏洞

OSGeo GDAL is an open-source geospatial raster and vector data processing library developed by OSGeo. OSGeo GDAL versions 3.13.0dev-4 and earlier contain a buffer error vulnerability. This vulnerability stems from a function called memmove in the frmts/hdf4/hdf-eos/SWapi.c file, which is part of...

5.5CVSS6AI score0.00264EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.24 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a symbolic error in the smbdirectpreparenegotiation function within ksmbd. This vulnerability may...

9.8CVSS6.1AI score0.00622EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.24 views

Cisco Network Services Orchestrator和Cisco Crosswork Network Controller 资源管理错误漏洞

Cisco Network Services Orchestrator NSO and Cisco Crosswork Network Controller are both products of Cisco, a US-based company. Cisco Network Services Orchestrator is a suite of network automation solutions. Cisco Crosswork Network Controller is a network controller. There is a resource management...

5.9AI score0.0031EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.24 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the AFXDP binding not verifying whether the device MTU is suitable for the UMEM frame size,...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.24 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the insufficient size of the struct clkhw slot reserved for 9FGV0841 in the clkrs9 section. This...

5.5CVSS5.8AI score0.00127EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.24 views

Jupyter多款产品 跨站脚本漏洞

Jupyter Notebook is an open-source web application developed by Project Jupyter, designed for creating and sharing code along with explanatory text documents. JupyterLab is another open-source project developed by JupyterLab, offering an extensible environment for interactive and reproducible...

8.4CVSS5.8AI score0.00476EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.24 views

Cisco IoT Field Network Director 命令注入漏洞

The Cisco IoT Field Network Director is an end-to-end IoT management system developed by Cisco, Inc. This system offers features such as device management, asset tracking, and intelligent metering. The Cisco IoT Field Network Director has a command injection vulnerability, which stems from...

6.4CVSS5.9AI score0.0021EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.24 views

WatchGuard Agent 安全漏洞

WatchGuard Agent is a terminal security protection and device management agent provided by the American company WatchGuard. There is a security vulnerability in WatchGuard Agent, which stems from a stack-based buffer overflow issue. Unauthorized attackers within the same local network may exploit...

7.1CVSS6.1AI score0.00252EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.24 views

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.4.10 contained security vulnerabilities. These vulnerabilities were caused by improper binding of the sandbox browser CDP relay network, which may allow attackers to access the...

9.6CVSS5.8AI score0.00214EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/05 12:00 a.m.24 views

WordPress plugin ElementsKit Elementor Addons 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

6.5CVSS5.8AI score0.00355EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/05 12:00 a.m.24 views

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.96 contained a buffer overflow vulnerability, which was caused by out-of-bounds read operations in fonts. This vulnerability could allow remote attackers to execute out-of-bounds memory reads...

4.3CVSS6.2AI score0.00193EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/05 12:00 a.m.24 views

FluentCMS 安全漏洞

FluentCMS is a .NET-based content management system CMS that is primarily used to quickly build websites and manage web content. A cross-site scripting vulnerability exists in the FluentCMS TextHTML plugin. The vulnerability stems from insufficient validation of user input and failure to properly...

6.1CVSS5.7AI score0.00194EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/05 12:00 a.m.24 views

Sandboxie-Plus 安全漏洞

Sandboxie-Plus is a sandbox isolation software developed by Sandboxie-Plus Inc. Versions of Sandboxie-Plus 1.17.2 and earlier contained security vulnerabilities. These vulnerabilities were caused by a stack buffer overflow in the RunSbieCtrl processor of the SbieIniServer module, which could lead...

7.8CVSS6.1AI score0.00172EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/05/04 12:00 a.m.24 views

GeoVision GV-IP Device Utility 安全漏洞

The GeoVision GV-IP Device Utility is a network configuration tool developed by the Chinese company GeoVision, designed for discovering and managing IP monitoring devices. Version 9.0.5 of the GeoVision GV-IP Device Utility contains a security vulnerability. This vulnerability stems from...

9.3CVSS5.8AI score0.00223EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/04 12:00 a.m.24 views

Yeapook WDR201A WiFi Extender 操作系统命令注入漏洞

The Yeapook WDR201A WiFi Extender is a wireless signal extension device produced by the Yeapook company. The Yeapook WDR201A WiFi Extender in the HW V2.1 version and FW LFMZX28040922V1.02 version contain vulnerabilities related to operating system command injection. This vulnerability stems from...

9.3CVSS6.1AI score0.03387EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/04 12:00 a.m.24 views

CodeAstro Online Classroom 注入漏洞

CodeAstro Online Classroom is an online classroom platform provided by CodeAstro Inc. Version 1.0 of CodeAstro Online Classroom has a SQL injection vulnerability. This vulnerability arises from an unknown function in the file/OnlineClassroom/facultylogin that operates on the parameter fid, allowi...

6.5CVSS6.7AI score0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/04 12:00 a.m.24 views

Open5GS 安全漏洞

Open5GS is an open-source implementation of 5G Core and EPC in C language, which serves as the core network for Lte/Nr networks. Versions of Open5GS 2.7.7 and earlier contain security vulnerabilities. These vulnerabilities stem from issues with the amf-3gpp-access endpoint in the file...

5.3CVSS5.8AI score0.00271EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/04 12:00 a.m.24 views

Claude SDK for TypeScript 安全漏洞

Claude SDK for TypeScript is an open-source development toolkit by Anthropic, designed for calling the Claude API using TypeScript. There were security vulnerabilities in versions of Claude SDK for TypeScript from 0.79.0 to 0.91.1. These vulnerabilities stemmed from BetaLocalFilesystemMemoryTool...

4.8CVSS5.8AI score0.00119EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/04 12:00 a.m.24 views

Apache Atlas 代码注入漏洞

Apache Atlas is a scalable and extensible core feature governance service developed by the Apache Foundation in the United States. Version 0.8 to 2.4.0 of Apache Atlas contains a code injection vulnerability. This vulnerability stems from the DSL search endpoint accepting query strings provided b...

8.1CVSS5.9AI score0.00464EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/02 12:00 a.m.24 views

WordPress plugin Geo Mashup SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.5CVSS5.9AI score0.01003EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/02 12:00 a.m.24 views

WordPress plugin Gravity Forms 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

7.2CVSS5.8AI score0.00251EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/01 12:00 a.m.24 views

WordPress多款产品 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

6.1CVSS5.7AI score0.00276EPSS
SaveExploits0References1
Total number of security vulnerabilities5000