Lucene search
+L
CnvdMost viewed

131658 matches found

CNVD
CNVD
•added 2022/02/18 12:00 a.m.•99 views

KiCad EDA Buffer Overflow Vulnerability (CNVD-2022-18330)

KiCad Eda is a cross-platform and open source electronic design automation suite from the KiCad community. KiCad EDA is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker with a specially crafted gerber or excellon file to cause code execution...

7.8CVSS5.1AI score0.01643EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/02/18 12:00 a.m.•99 views

Google TensorFlow code issue vulnerability (CNVD-2022-14996)

Google TensorFlow is an end-to-end open source platform for machine learning from Google Google. Google Tensorflow is vulnerable to a code issue that stems from an undefined behavior in the QuantizedMaxPool implementation, where user-controlled input can trigger a reference binding to a null...

6.5CVSS2AI score0.00783EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/02/16 12:00 a.m.•99 views

Google TensorFlow buffer overflow vulnerability (CNVD-2022-11509)

Google TensorFlow is an end-to-end open source platform for machine learning from Google Google. Google Tensorflow has a buffer overflow vulnerability that stems from the fact that Dequantize's implementation does not fully validate the value of axis, which can be exploited by an attacker to caus...

8.8CVSS2.5AI score0.00818EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/02/09 12:00 a.m.•99 views

Google Tensorflow code issue vulnerability (CNVD-2022-09900)

Google TensorFlow is an end-to-end open source platform for machine learning from Google Google. Google TensorFlow has a code issue vulnerability that could be exploited by an attacker to cause a crash due to a failed assertion...

6.5CVSS2.3AI score0.00992EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/02/09 12:00 a.m.•99 views

Google Tensorflow has an unspecified vulnerability (CNVD-2022-09882)

Google TensorFlow is an end-to-end open source platform for machine learning from Google. Google Tensorflow has a security vulnerability that could be exploited to cause a denial of service by modifying SavedModel to trigger a CHECK failure...

6.5CVSS3AI score0.00821EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/02/09 12:00 a.m.•99 views

Fleet Licensing Issue Vulnerability (CNVD-2022-08935)

Fleet is a suite of host monitoring platforms. fleet suffers from an authorization issue vulnerability that stems from a limited ability to spoof SAML authentication with missing user authentication. No detailed vulnerability details are currently available...

6.5CVSS2.7AI score0.00896EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/01/18 12:00 a.m.•99 views

Frontier numeric error vulnerability

Frontier is an ethereum-compatible layer of Substrate. A numeric error vulnerability exists in Frontier, which stems from a bug in Frontier's pre-compiled implementation of MODEXP that could lead to integer underflow in some cases. This would cause the node of the debug build to crash. No detaile...

6.5CVSS2.5AI score0.01331EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/12/29 12:00 a.m.•99 views

Minio MinIO has an unspecified vulnerability

Minio MinIO is an open source object storage server from MinIO USA. The product supports building infrastructure for machine learning, analytics, and application data workloads.MinIO has a security vulnerability that stems from the fact that MinIO is a native application for Kubernetes cloud...

8.8CVSS8.6AI score0.35462EPSS
SaveExploits3References1
CNVD
CNVD
•added 2021/12/27 12:00 a.m.•99 views

Lantronix PremierWave 2050 path traversal vulnerability (CNVD-2022-01589)

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. It is used to provide reliable and always-on 5G Wi-Fi connectivity. The Lantronix PremierWave 2050 suffers from a path traversal vulnerability that stems from the lack of effective restrictions and filters ...

9.1CVSS9.1AI score0.02399EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/12/20 12:00 a.m.•99 views

Mattermost Input Validation Error Vulnerability (CNVD-2022-08350)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost 6.0 and earlier versions, which can be exploited by an authenticated attacker to cause a WEB application client to crash via a maliciously crafted post...

5.7CVSS5.3AI score0.00835EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/12/09 12:00 a.m.•99 views

WordPress WPS Hide Login plugin authorization issue vulnerability

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. WordPress WPS Hide Login plugin has an authorization issue vulnerability in versions prior to 1.9.1, which ste...

7.5CVSS2.9AI score0.71532EPSS
SaveExploits5References1
CNVD
CNVD
•added 2021/11/25 12:00 a.m.•99 views

Redash Code Issue Vulnerability (CNVD-2021-95242)

Redash is a data integration and analysis solution from the Israeli company Redash. The product supports data integration, data visualization, query editing, and data sharing.Redash 10.0.0 and earlier versions are vulnerable to a code issue that stems from the fact that the program is vulnerable ...

8.8CVSS2.2AI score0.01005EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/11/23 12:00 a.m.•99 views

PortlandLabs Concrete CMS has an unspecified vulnerability

PortlandLabs Concrete Cms is a team-oriented open source content management system from PortlandLabs, Inc. PortlandLabs Concrete CMS has a security vulnerability that could be exploited by attackers to execute remote code...

7.2CVSS5.3AI score0.03132EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/11/08 12:00 a.m.•99 views

Google TensorFlow heap allocation array out-of-bounds read vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. an out-of-bounds read vulnerability exists in the shape inference function of the QuantizeAndDequantizeV operation in versions prior to TensorFlow 2.7.0 for heap allocation arrays. No detailed vulnerability details are...

7.1CVSS1.8AI score0.00153EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/11/08 12:00 a.m.•99 views

Json-Ptr type obfuscation vulnerability

Json-Ptr is a full implementation of Json pointer Rfc 6901 for Nodejs and modern browsers. a security vulnerability exists in Json-Ptr, which stems from a design or implementation impropriety in the code development process of a web system or product. No details of the vulnerability are currently...

9.8CVSS3.3AI score0.01828EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/10/09 12:00 a.m.•99 views

OpenSNS SQL blind injection vulnerability (CNVD-2021-101547)

OpenSNS is a comprehensive social software developed by Thinking Sky. A SQL blind injection vulnerability exists in the pid parameter in /Controller/ChinaCityController.class.php in OpenSNS version 6.1.0. An attacker can exploit this vulnerability to obtain sensitive database information...

9.8CVSS9.6AI score0.0128EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/09/03 12:00 a.m.•99 views

Apache Zeppelin Command Injection Vulnerability

Apache Zeppelin is a Web-based open source notebook application from the Apache Foundation. The application supports interactive data analysis and collaborative documentation. Apache Zeppelin 0.9.0 and earlier versions contain a command injection vulnerability that could be exploited by an attack...

10CVSS3.4AI score0.05747EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/08/20 12:00 a.m.•99 views

Google TensorFlow null pointer dereference vulnerability (CNVD-2021-64074)

Google TensorFlow is an end-to-end open source machine learning platform. a null pointer dereference vulnerability exists in the tf.rawops.SparseTensorSliceDataset implementation in versions prior to Google TensorFlow 2.6.0. No detailed vulnerability details are available at this time...

7.7CVSS3.7AI score0.0016EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/07/19 12:00 a.m.•99 views

sharkdp BAT code issue vulnerability

sharkdp BAT is an open source cat syntax highlighting and Git integrated cloning tool . A security vulnerability exists in sharkdp BAT prior to 0.18.2, which stems from the execution of less.exe from the current working directory. No details of the vulnerability are provided at this time...

7.8CVSS7.5AI score0.00356EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/06/07 12:00 a.m.•99 views

Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2021-54702)

Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause out-of-bounds reads...

7.1CVSS4.8AI score0.00787EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/06/07 12:00 a.m.•99 views

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2021-54704)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to resource management errors, which can be exploited by remote attackers to execute denial-of-service DoS attacks...

4.3CVSS5.6AI score0.00745EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/11 12:00 a.m.•98 views

TOTOLINK N600R Command Injection Vulnerability

TOTOLINK N600R is a dual-band wireless router launched by Korean brand TOTOLINK in 2013, which supports 2.4GHz and 5GHz bands to work concurrently, with a maximum wireless transmission rate of up to 300Mbps. The TOTOLINK N600R suffers from a command injection vulnerability that stems from the pin...

9.8CVSS7.9AI score0.01811EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/02/17 12:00 a.m.•98 views

GNU Binutils nm.c File Buffer Overflow Vulnerability

GNU Binutils GNU Binary Utilities is a set of programming language utility programs developed by the American GNU community. The programs are primarily designed to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...

5.3CVSS8.1AI score0.00658EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/03/15 12:00 a.m.•98 views

RiteCMS Cross-Site Scripting Vulnerability (CNVD-2025-21552)

RiteCMS is an open source content management system based on PHP and SQLite. RiteCMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the component mainmenu/editsection, which can be exploited by an attacker to...

6.1CVSS6.4AI score0.01317EPSS
SaveExploits4References1
CNVD
CNVD
•added 2023/10/11 12:00 a.m.•98 views

Siemens Tecnomatix Plant Simulation Out-of-Bounds Write Vulnerability (CNVD-2023-75586)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. An out-of-bounds write vulnerability exists in Siemens...

7.8CVSS7.4AI score0.00216EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/07/19 12:00 a.m.•98 views

IBM DB2 is a relational database management system from International Business Machines (IBM). The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a denial of service.

CasaOS is a simple, easy-to-use and elegant open source home cloud system. An Access Control Error vulnerability exists in CasaOS versions prior to 0.4.4 that stems from a lack of authenticated IP addresses. An attacker can exploit the vulnerability to execute arbitrary commands as root...

9.8CVSS7.5AI score0.07356EPSS
SaveExploits1References1
CNVD
CNVD
•added 2023/04/23 12:00 a.m.•98 views

Google Android elevation of privilege vulnerability (CNVD-2023-55363)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates in the multiple functions obfuscation agent of the AccountManagerService.java component, which can be exploited by an attacker to elevate...

7.8CVSS6.9AI score0.00101EPSS
SaveExploits2References1
CNVD
CNVD
•added 2023/01/18 12:00 a.m.•98 views

Apache Superset Cross-Site Request Forgery Vulnerability

A cross-site request forgery vulnerability exists in Apache Superset, a data visualization and data exploration platform from the Apache Foundation. The vulnerability stems from the failure of two legacy REST APIs for granting and requesting access to properly validate user input, which could be...

8.8CVSS4AI score0.00572EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/11/23 12:00 a.m.•98 views

Google TensorFlow tf.raw_ops.TensorListConcat denial of service vulnerability

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A denial of service vulnerability exists in Google TensorFlow versions prior to 2.8.4, 2.9.0 and later, 2.9.3 and later, 2.10.0 and later, and 2.10.1. TensorListConcat" is given "elementshape=", resulti...

4.9AI score0.00446EPSS
SaveExploits1Affected Software3
CNVD
CNVD
•added 2022/11/21 12:00 a.m.•98 views

Siemens syngo Dynamics path traversal vulnerability

Siemens syngo Dynamics is a cardiovascular imaging and information solution from Siemens, a German company designed to be a centralized digital hub for complete cardiovascular services. Designed to be a centralized digital hub for complete cardiovascular services, Siemens syngo Dynamics is...

5.3CVSS2.2AI score0.00591EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/11/10 12:00 a.m.•98 views

Microsoft Exchange Server Elevation of Privilege Vulnerability (CNVD-2022-89608)

Microsoft Exchange Server is a set of email service programs from Microsoft Corporation USA. It provides mail access, storage, forwarding, voice mail, mail filtering and other functions. An attacker could exploit this vulnerability to elevate privileges...

9.8CVSS3.2AI score0.77326EPSS
SaveExploits4References1
CNVD
CNVD
•added 2022/09/28 12:00 a.m.•98 views

Kitty Code Execution Vulnerability

kitty is a fast, feature-rich, GPU-based terminal emulator developed by kovidgoyal. A code execution vulnerability exists in versions prior to Kitty 0.26.2 that stems from insufficient validation in the desktop notification escape sequence and can be exploited by an attacker to cause execution of...

7.8CVSS7.7AI score0.00491EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/09/20 12:00 a.m.•98 views

Google TensorFlow DrawBoundingBoxes Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A denial-of-service vulnerability exists in Google TensorFlow, which stems from the fact that when DrawBoundingBoxes receives input boxes that do not belong to the float dtype, it gives the assertion...

7.5CVSS3.6AI score0.00423EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/19 12:00 a.m.•98 views

D-Link DIR-2150 OS Command Injection Vulnerability (CNVD-2023-21660)

The D-Link DIR-2150 is a wireless router device from D-Link.The D-Link DIR-2150 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to execute code in the context of a service account...

8.8CVSS9AI score0.01578EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/08/18 12:00 a.m.•98 views

Google Chrome Intents security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Intents, which is caused by an untrusted input that does not adequately validate intent and can be exploited by attackers to bypass security restrictions...

6.5CVSS4.8AI score0.0453EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/28 12:00 a.m.•98 views

Wire Cross-Site Scripting Vulnerability (CNVD-2022-65920)

Wire is a chat software from the German company Wire. The software supports Web, WindowsiOS, Android, and OS X platforms, has group functionality, can make voice calls, send photos, and its original greeting method, PING. Wire has a cross-site scripting vulnerability that stems from insufficient...

4.3CVSS2.5AI score0.00813EPSS
SaveExploits0
CNVD
CNVD
•added 2022/06/14 12:00 a.m.•98 views

Powertek PDU Buffer Overflow Vulnerability

Powertek is a company that manufactures data center-grade intelligent PDUs Power Distribution Units, i.e., heavy-duty power strips for server racks. The Powertek PDUs suffer from a buffer overflow vulnerability that can be exploited by an attacker to cause disclosure of the active session id of t...

9.8CVSS7.5AI score0.01711EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/13 12:00 a.m.•98 views

Vapor Denial of Service Vulnerability

Vapor is a Swift web development framework. Can be used to develop high-performance Web applications , support for iOS, OS X and Ubuntu systems. A denial-of-service vulnerability exists in Vapor versions prior to 4.61.1 that stems from not properly handling incoming error messages and can be...

7.5CVSS7.3AI score0.01637EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/03/04 12:00 a.m.•98 views

Qt path traversal vulnerability

Qt is a cross-platform C application development framework from the Norwegian company Qt. It is widely used for developing GUI programs, in which case it is also known as the widget toolkit. It can also be used to develop non-GUI programs, such as console tools and servers.Qt versions prior to...

7.5CVSS2.9AI score0.0196EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/03/01 12:00 a.m.•98 views

Tp-link TL-WR840N has an unspecified vulnerability

Tp-link TL-WR840N is a wireless router from Tp-link, China. TP-LINK TL-WR840NES V6.20 version 180709 is vulnerable due to a lack of filtering and escaping of command parameters in the component oalstartPing. No details of the vulnerability are available at this time...

10CVSS3.6AI score0.4015EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/02/16 12:00 a.m.•98 views

Sqlite has an unspecified vulnerability (CNVD-2022-18011)

Sqlite is a lightweight database, a relational database management system that adheres to ACID. SQLite3 versions 3.35.1 and 3.37.0 contain a security vulnerability that can be exploited by attackers to query records and leak subsequent memory bytes beyond the record to obtain sensitive informatio...

4.3CVSS3AI score0.01614EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/02/09 12:00 a.m.•98 views

Linux kernel information disclosure vulnerability (CNVD-2022-68595)

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel has a security vulnerability that can be exploited by attackers to obtain internal kernel memory information...

4.4CVSS2.4AI score0.00246EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/01/19 12:00 a.m.•98 views

OnionShare has an unspecified vulnerability (CNVD-2022-06479)

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. OnionShare has a security vulnerability, and no details of the vulnerability are available...

5.3CVSS0.6AI score0.01258EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/08/13 12:00 a.m.•98 views

Google TensorFlow integer overflow vulnerability (CNVD-2021-64532)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google TensorFlow caused by converting a signed integer value to an unsigned integer value and then allocating memory based on that value. No details of the...

5.5CVSS2.6AI score0.00154EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/08/04 12:00 a.m.•98 views

Nexus Control Panel Code Issue Vulnerability

Swisslog Healthcare Nexus Panel is a medical device from Swisslog Healthcare. A code download without integrity check vulnerability exists in Nexus Control Panel versions prior to 7.2.5.7. The vulnerability stems from no file validation during the upload of an update. No details of the...

9.8CVSS9.5AI score0.08227EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/07/27 12:00 a.m.•98 views

tinyexr denial of service vulnerability

tinyexr is a small library for loading and saving OpenEXR .exr images. tinyexr version 0.9.5 suffers from a denial-of-service vulnerability. The vulnerability stems from an array indexing error in the tinyexr::DecodeEXRImage component. An attacker could exploit this vulnerability to cause a denia...

7.5CVSS4.2AI score0.01267EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/03/12 12:00 a.m.•98 views

Unspecified vulnerability in GLPI (CNVD-2021-17770)

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...

7.5CVSS6.7AI score0.02252EPSS
SaveExploits4References1
CNVD
CNVD
•added 2021/01/06 12:00 a.m.•98 views

Unspecified vulnerability in Mozilla Rust arr crate

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Mozilla Rust versions prior to 2020-08-25 in arr crate, which stems from a buffer overflow in Index and IndexMut. No details of the vulnerability are provided at this time...

9.8CVSS7.1AI score0.01476EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/10/12 12:00 a.m.•98 views

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2021-54004)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. Versions prior to Mozilla Firefox 80 and versions prior to Android-based Firefox 80 are vulnerable to an information disclosure vulnerability that could be exploited by an attacker to obtain the login status of ...

6.5CVSS3.1AI score0.01234EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/10/12 12:00 a.m.•98 views

Wireshark Infinite Loop Vulnerability (CNVD-2021-11320)

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. An infinite loop vulnerability...

7.5CVSS6.3AI score0.03116EPSS
SaveExploits0References1
Total number of security vulnerabilities5000