Lucene search
+L
CnvdMost viewed

131658 matches found

CNVD
CNVD
•added 2021/12/09 12:00 a.m.•99 views

WordPress WPS Hide Login plugin authorization issue vulnerability

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. WordPress WPS Hide Login plugin has an authorization issue vulnerability in versions prior to 1.9.1, which ste...

7.5CVSS2.9AI score0.71532EPSS
SaveExploits5References1
CNVD
CNVD
•added 2021/11/23 12:00 a.m.•99 views

PortlandLabs Concrete CMS has an unspecified vulnerability

PortlandLabs Concrete Cms is a team-oriented open source content management system from PortlandLabs, Inc. PortlandLabs Concrete CMS has a security vulnerability that could be exploited by attackers to execute remote code...

7.2CVSS5.3AI score0.03132EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/11/08 12:00 a.m.•99 views

Google TensorFlow heap allocation array out-of-bounds read vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. an out-of-bounds read vulnerability exists in the shape inference function of the QuantizeAndDequantizeV operation in versions prior to TensorFlow 2.7.0 for heap allocation arrays. No detailed vulnerability details are...

7.1CVSS1.8AI score0.00153EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/11/08 12:00 a.m.•99 views

Json-Ptr type obfuscation vulnerability

Json-Ptr is a full implementation of Json pointer Rfc 6901 for Nodejs and modern browsers. a security vulnerability exists in Json-Ptr, which stems from a design or implementation impropriety in the code development process of a web system or product. No details of the vulnerability are currently...

9.8CVSS3.3AI score0.01828EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/10/09 12:00 a.m.•99 views

OpenSNS SQL blind injection vulnerability (CNVD-2021-101547)

OpenSNS is a comprehensive social software developed by Thinking Sky. A SQL blind injection vulnerability exists in the pid parameter in /Controller/ChinaCityController.class.php in OpenSNS version 6.1.0. An attacker can exploit this vulnerability to obtain sensitive database information...

9.8CVSS9.6AI score0.0128EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/09/17 12:00 a.m.•99 views

TinyFileManager path traversal vulnerability

TinyFileManager is a web-based file manager used to store, upload, edit and manage files and folders online via a web browser. A path traversal vulnerability exists in TinyFileManager 2.4.6 and all versions below, which stems from the software's lack of validation and escaping of the fullpath...

6.5CVSS3.2AI score0.08235EPSS
SaveExploits5References1
CNVD
CNVD
•added 2021/08/20 12:00 a.m.•99 views

Google TensorFlow null pointer dereference vulnerability (CNVD-2021-64074)

Google TensorFlow is an end-to-end open source machine learning platform. a null pointer dereference vulnerability exists in the tf.rawops.SparseTensorSliceDataset implementation in versions prior to Google TensorFlow 2.6.0. No detailed vulnerability details are available at this time...

7.7CVSS3.7AI score0.0016EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/06/07 12:00 a.m.•99 views

Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2021-54702)

Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause out-of-bounds reads...

7.1CVSS4.8AI score0.00787EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/06/07 12:00 a.m.•99 views

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2021-54704)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to resource management errors, which can be exploited by remote attackers to execute denial-of-service DoS attacks...

4.3CVSS5.6AI score0.00745EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/05/17 12:00 a.m.•99 views

Artifex Ghostscript Denial of Service Vulnerability

Artifex Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. Postscript file. A security...

5.5CVSS6.8AI score0.01145EPSS
SaveExploits0References1
CNVD
CNVD
•added 2026/03/19 12:00 a.m.•98 views

OpenClaw Information Disclosure Vulnerability (CNVD-2026-14389)

OpenClaw is openclaw open source an intelligent artificial assistant. OpenClaw has an information disclosure vulnerability, the vulnerability stems from the component File Existence Handler's function tools.exec.safeBins for the protection of sensitive information is insufficient, an attacker can...

5.5CVSS5.6AI score0.00134EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/08/11 12:00 a.m.•98 views

TOTOLINK N600R Command Injection Vulnerability

TOTOLINK N600R is a dual-band wireless router launched by Korean brand TOTOLINK in 2013, which supports 2.4GHz and 5GHz bands to work concurrently, with a maximum wireless transmission rate of up to 300Mbps. The TOTOLINK N600R suffers from a command injection vulnerability that stems from the pin...

9.8CVSS7.9AI score0.01811EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/10/10 12:00 a.m.•98 views

Siemens JT2Go Stack Buffer Overflow Vulnerability

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with available JT, VFZ, CGM and TIF data. Siemens JT2Go suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.4AI score0.00191EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/03/15 12:00 a.m.•98 views

RiteCMS Cross-Site Scripting Vulnerability (CNVD-2025-21552)

RiteCMS is an open source content management system based on PHP and SQLite. RiteCMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the component mainmenu/editsection, which can be exploited by an attacker to...

6.1CVSS6.4AI score0.01317EPSS
SaveExploits4References1
CNVD
CNVD
•added 2023/07/19 12:00 a.m.•98 views

IBM DB2 is a relational database management system from International Business Machines (IBM). The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a denial of service.

CasaOS is a simple, easy-to-use and elegant open source home cloud system. An Access Control Error vulnerability exists in CasaOS versions prior to 0.4.4 that stems from a lack of authenticated IP addresses. An attacker can exploit the vulnerability to execute arbitrary commands as root...

9.8CVSS7.5AI score0.07356EPSS
SaveExploits1References1
CNVD
CNVD
•added 2023/01/18 12:00 a.m.•98 views

Apache Superset Cross-Site Request Forgery Vulnerability

A cross-site request forgery vulnerability exists in Apache Superset, a data visualization and data exploration platform from the Apache Foundation. The vulnerability stems from the failure of two legacy REST APIs for granting and requesting access to properly validate user input, which could be...

8.8CVSS4AI score0.00572EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/11/23 12:00 a.m.•98 views

Google TensorFlow tf.raw_ops.TensorListConcat denial of service vulnerability

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A denial of service vulnerability exists in Google TensorFlow versions prior to 2.8.4, 2.9.0 and later, 2.9.3 and later, 2.10.0 and later, and 2.10.1. TensorListConcat" is given "elementshape=", resulti...

4.9AI score0.00446EPSS
SaveExploits1Affected Software3
CNVD
CNVD
•added 2022/11/21 12:00 a.m.•98 views

Siemens syngo Dynamics path traversal vulnerability

Siemens syngo Dynamics is a cardiovascular imaging and information solution from Siemens, a German company designed to be a centralized digital hub for complete cardiovascular services. Designed to be a centralized digital hub for complete cardiovascular services, Siemens syngo Dynamics is...

5.3CVSS2.2AI score0.00591EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/11/10 12:00 a.m.•98 views

Microsoft Exchange Server Elevation of Privilege Vulnerability (CNVD-2022-89608)

Microsoft Exchange Server is a set of email service programs from Microsoft Corporation USA. It provides mail access, storage, forwarding, voice mail, mail filtering and other functions. An attacker could exploit this vulnerability to elevate privileges...

9.8CVSS3.2AI score0.77326EPSS
SaveExploits4References1
CNVD
CNVD
•added 2022/09/20 12:00 a.m.•98 views

Google TensorFlow DrawBoundingBoxes Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A denial-of-service vulnerability exists in Google TensorFlow, which stems from the fact that when DrawBoundingBoxes receives input boxes that do not belong to the float dtype, it gives the assertion...

7.5CVSS3.6AI score0.00423EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/19 12:00 a.m.•98 views

D-Link DIR-2150 OS Command Injection Vulnerability (CNVD-2023-21660)

The D-Link DIR-2150 is a wireless router device from D-Link.The D-Link DIR-2150 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to execute code in the context of a service account...

8.8CVSS9AI score0.01578EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/08/18 12:00 a.m.•98 views

Google Chrome Intents security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Intents, which is caused by an untrusted input that does not adequately validate intent and can be exploited by attackers to bypass security restrictions...

6.5CVSS4.8AI score0.0453EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/28 12:00 a.m.•98 views

Wire Cross-Site Scripting Vulnerability (CNVD-2022-65920)

Wire is a chat software from the German company Wire. The software supports Web, WindowsiOS, Android, and OS X platforms, has group functionality, can make voice calls, send photos, and its original greeting method, PING. Wire has a cross-site scripting vulnerability that stems from insufficient...

4.3CVSS2.5AI score0.00813EPSS
SaveExploits0
CNVD
CNVD
•added 2022/06/14 12:00 a.m.•98 views

Powertek PDU Buffer Overflow Vulnerability

Powertek is a company that manufactures data center-grade intelligent PDUs Power Distribution Units, i.e., heavy-duty power strips for server racks. The Powertek PDUs suffer from a buffer overflow vulnerability that can be exploited by an attacker to cause disclosure of the active session id of t...

9.8CVSS7.5AI score0.01711EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/13 12:00 a.m.•98 views

Vapor Denial of Service Vulnerability

Vapor is a Swift web development framework. Can be used to develop high-performance Web applications , support for iOS, OS X and Ubuntu systems. A denial-of-service vulnerability exists in Vapor versions prior to 4.61.1 that stems from not properly handling incoming error messages and can be...

7.5CVSS7.3AI score0.01637EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/03/04 12:00 a.m.•98 views

Qt path traversal vulnerability

Qt is a cross-platform C application development framework from the Norwegian company Qt. It is widely used for developing GUI programs, in which case it is also known as the widget toolkit. It can also be used to develop non-GUI programs, such as console tools and servers.Qt versions prior to...

7.5CVSS2.9AI score0.0196EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/03/01 12:00 a.m.•98 views

Tp-link TL-WR840N has an unspecified vulnerability

Tp-link TL-WR840N is a wireless router from Tp-link, China. TP-LINK TL-WR840NES V6.20 version 180709 is vulnerable due to a lack of filtering and escaping of command parameters in the component oalstartPing. No details of the vulnerability are available at this time...

10CVSS3.6AI score0.4015EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/02/18 12:00 a.m.•98 views

Unspecified vulnerability in snapd

Snapd is an open source, cross-platform package management tool. snapd suffers from a security vulnerability that can be exploited by local attackers to cause snapd to restrict the execution of other arbitrary binaries, thereby gaining privileged escalation...

8.8CVSS4.6AI score0.00351EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/02/16 12:00 a.m.•98 views

Sqlite has an unspecified vulnerability (CNVD-2022-18011)

Sqlite is a lightweight database, a relational database management system that adheres to ACID. SQLite3 versions 3.35.1 and 3.37.0 contain a security vulnerability that can be exploited by attackers to query records and leak subsequent memory bytes beyond the record to obtain sensitive informatio...

4.3CVSS3AI score0.01614EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/02/09 12:00 a.m.•98 views

Linux kernel information disclosure vulnerability (CNVD-2022-68595)

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel has a security vulnerability that can be exploited by attackers to obtain internal kernel memory information...

4.4CVSS2.4AI score0.00246EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/01/19 12:00 a.m.•98 views

OnionShare has an unspecified vulnerability (CNVD-2022-06479)

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. OnionShare has a security vulnerability, and no details of the vulnerability are available...

5.3CVSS0.6AI score0.01258EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/12/29 12:00 a.m.•98 views

Minio MinIO has an unspecified vulnerability

Minio MinIO is an open source object storage server from MinIO USA. The product supports building infrastructure for machine learning, analytics, and application data workloads.MinIO has a security vulnerability that stems from the fact that MinIO is a native application for Kubernetes cloud...

8.8CVSS8.6AI score0.35462EPSS
SaveExploits3References1
CNVD
CNVD
•added 2021/12/24 12:00 a.m.•98 views

GPAC Code Issue Vulnerability (CNVD-2022-03661)

GPAC is an open source multimedia framework. GPAC is vulnerable to a code issue that could be exploited by attackers to cause segmentation errors and application crashes...

5.5CVSS5AI score0.00667EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/09/03 12:00 a.m.•98 views

Apache Zeppelin Command Injection Vulnerability

Apache Zeppelin is a Web-based open source notebook application from the Apache Foundation. The application supports interactive data analysis and collaborative documentation. Apache Zeppelin 0.9.0 and earlier versions contain a command injection vulnerability that could be exploited by an attack...

10CVSS3.4AI score0.05747EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/08/13 12:00 a.m.•98 views

Google TensorFlow integer overflow vulnerability (CNVD-2021-64532)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google TensorFlow caused by converting a signed integer value to an unsigned integer value and then allocating memory based on that value. No details of the...

5.5CVSS2.6AI score0.00154EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/08/04 12:00 a.m.•98 views

Nexus Control Panel Code Issue Vulnerability

Swisslog Healthcare Nexus Panel is a medical device from Swisslog Healthcare. A code download without integrity check vulnerability exists in Nexus Control Panel versions prior to 7.2.5.7. The vulnerability stems from no file validation during the upload of an update. No details of the...

9.8CVSS9.5AI score0.08227EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/07/27 12:00 a.m.•98 views

tinyexr denial of service vulnerability

tinyexr is a small library for loading and saving OpenEXR .exr images. tinyexr version 0.9.5 suffers from a denial-of-service vulnerability. The vulnerability stems from an array indexing error in the tinyexr::DecodeEXRImage component. An attacker could exploit this vulnerability to cause a denia...

7.5CVSS4.2AI score0.01267EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/03/12 12:00 a.m.•98 views

Unspecified vulnerability in GLPI (CNVD-2021-17770)

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...

7.5CVSS6.7AI score0.02252EPSS
SaveExploits4References1
CNVD
CNVD
•added 2021/01/06 12:00 a.m.•98 views

Unspecified vulnerability in Mozilla Rust arr crate

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Mozilla Rust versions prior to 2020-08-25 in arr crate, which stems from a buffer overflow in Index and IndexMut. No details of the vulnerability are provided at this time...

9.8CVSS7.1AI score0.01476EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/10/12 12:00 a.m.•98 views

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2021-54004)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. Versions prior to Mozilla Firefox 80 and versions prior to Android-based Firefox 80 are vulnerable to an information disclosure vulnerability that could be exploited by an attacker to obtain the login status of ...

6.5CVSS3.1AI score0.01234EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/10/12 12:00 a.m.•98 views

Wireshark Infinite Loop Vulnerability (CNVD-2021-11320)

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. An infinite loop vulnerability...

7.5CVSS6.3AI score0.03116EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/07/30 12:00 a.m.•98 views

Unspecified vulnerability in ARM mbed TLS (CNVD-2021-59609)

ARM mbed TLS formerly PolarSSL is a product from ARM UK that provides secure communication and encryption capabilities for mbed products. A security vulnerability exists in ARM mbed TLS versions prior to 2.12.0, prior to 2.7.5, and prior to 2.1.14. An attacker could exploit this vulnerability to...

4.7CVSS5AI score0.00373EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/01/12 12:00 a.m.•97 views

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2024-11162)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

8.8CVSS8.4AI score0.30801EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/12/18 12:00 a.m.•97 views

ZTE MC801A and MC801A1 Web Interface Buffer Overflow Vulnerability

The ZTE MC801A/MC801A1 are both a 5g indoor WiFi router from China's ZTE ZTE. The ZTE MC801A and MC801A1 suffer from a buffer overflow vulnerability, which stems from insufficient validation of web interface parameters and can be exploited by attackers to conduct denial of service attacks...

7.5CVSS7.3AI score0.007EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/11/30 12:00 a.m.•98 views

Mattermost Security Bypass Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security bypass vulnerability exists in Mattermost that stems from an inability to check if the "Allow users to view archived channels" setting is enabled during the permalink preview display, even i...

4.3CVSS6.7AI score0.00506EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/11/02 12:00 a.m.•97 views

phpMyFAQ FileName parameter cross-site scripting vulnerability

phpMyFAQ is a multi-language, fully database-driven FAQ system. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.2.2, which stems from the lack of effective filtering and escaping of user-supplied data in the FileName parameter of the file attachment upload function, an...

5.4CVSS6.2AI score0.00414EPSS
SaveExploits1References1
CNVD
CNVD
•added 2023/10/11 12:00 a.m.•97 views

Siemens Tecnomatix Plant Simulation Out-of-Bounds Write Vulnerability (CNVD-2023-75586)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. An out-of-bounds write vulnerability exists in Siemens...

7.8CVSS7.4AI score0.00216EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/04/23 12:00 a.m.•97 views

Google Android elevation of privilege vulnerability (CNVD-2023-55363)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates in the multiple functions obfuscation agent of the AccountManagerService.java component, which can be exploited by an attacker to elevate...

7.8CVSS6.9AI score0.00101EPSS
SaveExploits2References1
CNVD
CNVD
•added 2023/04/18 12:00 a.m.•97 views

Campcodes Advanced Online Voting System SQL Injection Vulnerability (CNVD-2023-29414)

Campcodes Advanced Online Voting System is an online voting system. Campcodes Advanced Online Voting System v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter voter of the file login.php, which can be exploite...

8.2AI score0.0074EPSS
SaveExploits1Affected Software1
CNVD
CNVD
•added 2023/03/23 12:00 a.m.•97 views

Google Chrome Out-of-Bounds Access Vulnerability

Google Chrome is a web browser from Google, an American company. An out-of-bounds access vulnerability exists in versions prior to Google Chrome 111.0.5563.110, which stems from out-of-bounds memory access in the Chrome WebHID, and can be exploited by a remote attacker to potentially leverage hea...

9.8CVSS9.3AI score0.01062EPSS
SaveExploits0References1
Total number of security vulnerabilities5000