Lucene search
+L

195539 matches found

CNNVD
CNNVD
added 2026/05/27 12:00 a.m.16 views

WordPress plugin Advanced Custom Fields: Font Awesome Field 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.6AI score0.00182EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.21 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a race condition between the cleanup of the hwrngfill function and the thread termination in the...

5.8AI score0.00088EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.18 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from the use of Core components that allowed reusing after release, which could enable remote attackers to achieve...

8.3CVSS5.8AI score0.00182EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.19 views

Phoenix Contact多款产品 代码问题漏洞

PHOENIX CONTACT AXC F 1152 and PHOENIX CONTACT AXC F 2152 are controller devices from the German company PHOENIX CONTACT. Several products from Phoenix Contact have code vulnerabilities. These vulnerabilities allow low-privilege local users to manipulate configuration or application-related files...

8.7CVSS5.9AI score0.0019EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.29 views

FacturaScripts 信息泄露漏洞

FacturaScripts is an open-source ERP software developed by Carlos Garcia, a Spanish developer. Versions of FacturaScripts prior to v2026 contained a vulnerability related to information leakage. This vulnerability stemmed from unvalidated information during the installation of controllers, allowi...

5.3CVSS5.8AI score0.0024EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.15 views

claude-code-cache-fix 代码注入漏洞

claude-code-cache-fix is a caching optimization tool developed by Chris Nighswonger. Versions 3.5.0 to 3.5.2 of claude-code-cache-fix had a code injection vulnerability. This vulnerability stemmed from the use of tools/quota-statusline.sh, which directly inserted the hook’s standard input payload...

8.6CVSS5.9AI score0.00188EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.14 views

GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Security vulnerabilities exist in versions of GitLab CE/EE 12.7 to...

4.3CVSS5.9AI score0.00187EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.15 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an issue with IRQ cleanup in the qat driver. This vulnerability may cause the interrupt handler t...

5.8AI score0.00121EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.14 views

kvf-admin 安全漏洞

kvf-admin is a set of rapid development frameworks, scaffolding, backend management systems, and permission systems developed by KalvinGit’s individual developers. Version 1.1.0 of kvf-admin contains a security vulnerability. This vulnerability stems from improper permission settings in the...

8.8CVSS5.8AI score0.00341EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.17 views

IBM QRadar 安全漏洞

IBM QRadar is a security information and event management platform developed by the American multinational company IBM. There are security vulnerabilities in the version of IBM QRadar 7.5.0 up to 7.5.0 UP15 Interim Fix 002. These vulnerabilities stem from privileged users uploading malicious back...

7.2CVSS5.7AI score0.00463EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.18 views

WordPress plugin Team Master 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. The WordPre...

6.4CVSS5.8AI score0.0019EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.15 views

WordPress plugin Advanced IP Blocker 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.6AI score0.00152EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.16 views

IBM Cognos Analytics和IBM Cognos Transformer 跨站脚本漏洞

IBM Cognos Analytics and IBM Cognos Transformer are products of American International Business Machines IBM. IBM Cognos Analytics is a business intelligence software suite. This software includes reports, dashboards, and scorecards, and can assist businesses in adjusting their decisions by...

5.4CVSS5.9AI score0.0031EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.14 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure of the PWM chip initialization in rust/pwm. As a result of this failure, the allocated...

5.8AI score0.00112EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.19 views

MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECT24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymbCONNECT24 is an internal...

6.9CVSS5.9AI score0.00281EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.21 views

RELATE 代码问题漏洞

RELATE is a web-based course package developed by Andreas Klöckner as an individual project. RELATE has code vulnerabilities; these vulnerabilities stem from Celery workers accepting and deserializing untrusted pickle data, which may lead to remote code execution...

8.7CVSS6.2AI score0.00489EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.13 views

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a buffer overflow vulnerability, which was caused by an out-of-bound read operation in the WebGL component. This vulnerability could allow remote attackers to exploit the system by...

4.3CVSS6.1AI score0.00218EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.19 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a security vulnerability, which was caused by improper implementation of the Tint component. This vulnerability could allow remote attackers to escape the sandbox through specially...

9.6CVSS5.8AI score0.00243EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.17 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from inconsistent conditions for updating the mdbnEntries count in VLAN context during bridge multicas...

5.8AI score0.00159EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.18 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a security vulnerability. This vulnerability stemmed from type confusion in the Skia component, which could allow remote attackers to execute arbitrary code within a sandbox through...

8.8CVSS6.2AI score0.00255EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.19 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a security vulnerability. This vulnerability stemmed from out-of-bound read and write operations in the ANGLE component, which could allow remote attackers to exploit the system...

8.3CVSS5.8AI score0.00214EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.19 views

Tassos Framework Plugin 访问控制错误漏洞

The Tassos Framework Plugin is a Joomla extension and functionality enhancement framework developed by Tassos Marinos. The Tassos Framework Plugin has a security vulnerability related to access control, which allows users to delete any file on the affected site...

9.3CVSS5.8AI score0.00267EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.17 views

Synology BeeDrive 安全漏洞

Synology BeeDrive is a backup and synchronization device developed by the Chinese company Synology. Versions of Synology BeeDrive prior to 1.3.2-13814 contained a security vulnerability. This vulnerability stemmed from the redis-server component, where external access to certain files or...

6.8CVSS5.8AI score0.00112EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.17 views

free5GC 安全漏洞

free5GC is an open-source project for the 5th generation 5G mobile core network. Versions of free5GC prior to 4.2.2 contained security vulnerabilities. These vulnerabilities stemmed from the lack of inbound OAuth2/bearer-token authorization when the NEF route group nnef-pfdmanagement was mounted...

10CVSS5.8AI score0.00287EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.19 views

Slican多款产品 安全漏洞

Slican NCP are products of the Polish company Slican. Slican NCP is an IP communication server. Slican IPx is a series of enterprise communication and IP phone switching systems. Slican CCT is also a series of enterprise communication and IP phone switching systems. Several Slican products have...

9.3CVSS5.8AI score0.00662EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.22 views

Synology Safe Access 跨站脚本漏洞

Synology Safe Access is a network access control and parental monitoring system developed by Synology, a Chinese company. Versions of Synology Safe Access prior to 1.3.1-0329 contained a cross-site scripting vulnerability. This vulnerability stemmed from the cross-site scripting feature in the...

5.9CVSS5.7AI score0.00265EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.16 views

MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECTION24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymb CONNECTION24 is an...

7.1CVSS5.9AI score0.00262EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.19 views

MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECTION24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymb CONNECTION24 is an...

7.1CVSS5.9AI score0.00262EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.15 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from the reuse of Input components after they were released, potentially allowing remote attackers to exploit certain...

7.5CVSS5.8AI score0.00222EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.17 views

WordPress plugin hk_shortcode 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.7AI score0.00198EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.16 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a security vulnerability caused by an ANGLE component heap buffer overflow. This vulnerability could allow remote attackers to exploit a compromised rendering process through a...

8.3CVSS6.1AI score0.00246EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.20 views

WordPress plugin Facebook for WooCommerce 输入验证错误漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

4.7CVSS5.8AI score0.00231EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.17 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a security vulnerability. This vulnerability stemmed from improper implementations in the V8 engine, which could allow remote attackers to execute arbitrary code within a sandbox...

8.8CVSS6.2AI score0.00319EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.17 views

Tanium Connect 安全漏洞

Tanium Connect is a data exchange module developed by the American company Tanium. Tanium Connect has a security vulnerability, which stems from an unauthorized code execution flaw...

8.8CVSS6.2AI score0.00391EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.19 views

WordPress plugin My Email Shortcode 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.4CVSS5.8AI score0.00187EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.19 views

OpenLearnX 数据伪造问题漏洞

OpenLearnX is a decentralized adaptive learning and evaluation platform developed by th30d4y. Versions of OpenLearnX prior to 2.0.4 had a data manipulation vulnerability, which stemmed from a critical authentication flaw. This vulnerability could allow unauthorized access to user accounts under...

6.9CVSS5.7AI score0.00207EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.15 views

WordPress plugin EnvíaloSimple: Email Marketing y Newsletters SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

4.9CVSS5.9AI score0.00294EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.23 views

Pi.Alert SQL注入漏洞

Pi.Alert is a WIFI/LAN intrusion detector developed by the individual developer jokob-sk. Versions of Pi.Alert prior to version 2026-05-07 contained an SQL injection vulnerability. This vulnerability stemmed from improper handling of the action and scansource parameters in requests sent to...

8.7CVSS5.9AI score0.00258EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.19 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a security vulnerability, which stemmed from type confusion in the V8 engine. This vulnerability could allow attackers to execute arbitrary code within a sandbox by convincing users...

8.8CVSS6.2AI score0.00151EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.14 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from the WebAppInstalls component reusing resources after release, potentially allowing remote attackers to exploit...

7.5CVSS5.8AI score0.00173EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.20 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from inconsistent inheritance of LOGSUBDOMAINSOFF in landlock. This vulnerability may cause subprocesses to...

5.8AI score0.00118EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.20 views

WordPress plugin Gutenverse 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.1CVSS5.7AI score0.00377EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.17 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. In versions of Google Chrome on Windows before 148.0.7778.216, there was a resource management vulnerability. This vulnerability stemmed from a problem with the Media component, where objects were reused after being released. This could allo...

8.8CVSS6.2AI score0.00303EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.18 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. In versions prior to 148.0.7778.216 for Android, there was a security vulnerability associated with the WebGL component’s improper implementation. This vulnerability could allow remote attackers to exploit the system by using specially craft...

4.3CVSS5.8AI score0.00209EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.18 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome on Windows before 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from a problem with core components that allowed reusing of resources after they had been released. This cou...

8.3CVSS6AI score0.00222EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.16 views

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a buffer overflow vulnerability, which was caused by an out-of-bounds read in WebRTC. This vulnerability could allow remote attackers to obtain sensitive information from the proces...

6.5CVSS6.1AI score0.00191EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.18 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a vulnerability related to input validation. This vulnerability stemmed from insufficient input validation in the OptimizationGuide component, which could allow remote attackers to...

4.2CVSS5.9AI score0.00145EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.23 views

free5GC 代码问题漏洞

free5GC is an open-source project for the 5th generation 5G mobile core network. Versions of free5GC prior to 4.2.2 contained code vulnerabilities. These vulnerabilities stemmed from the UDR DELETE handler’s type assertion panic when the ueId was not present, which could potentially result in a 5...

6.5CVSS5.9AI score0.0042EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.19 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a security vulnerability, which was caused by improper implementation of the Media component. This vulnerability could allow remote attackers to bypass the origin policy using...

6.3CVSS5.8AI score0.00107EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.18 views

WordPress plugin Search Simple Fields 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.7AI score0.0014EPSS
SaveExploits0References3
Total number of security vulnerabilities195539