Lucene search
+L
CnvdMost viewed

131658 matches found

CNVD
CNVD
added 2018/07/30 12:00 a.m.98 views

Unspecified vulnerability in ARM mbed TLS (CNVD-2021-59609)

ARM mbed TLS formerly PolarSSL is a product from ARM UK that provides secure communication and encryption capabilities for mbed products. A security vulnerability exists in ARM mbed TLS versions prior to 2.12.0, prior to 2.7.5, and prior to 2.1.14. An attacker could exploit this vulnerability to...

4.7CVSS5AI score0.00373EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/08/21 12:00 a.m.97 views

NVIDIA Isaac-GR00T Code Injection Vulnerability

NVIDIA Isaac-GR00T is an open base modeling platform from NVIDIA. The NVIDIA Isaac-GR00T suffers from a code injection vulnerability, which originates in a Python component, that can be exploited by an attacker to perform malicious operations and compromise system stability by bypassing security...

7.8CVSS7.5AI score0.00623EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/01/12 12:00 a.m.97 views

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2024-11162)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

8.8CVSS8.4AI score0.30801EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/11/30 12:00 a.m.98 views

Mattermost Security Bypass Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security bypass vulnerability exists in Mattermost that stems from an inability to check if the "Allow users to view archived channels" setting is enabled during the permalink preview display, even i...

4.3CVSS6.7AI score0.00506EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/11/02 12:00 a.m.97 views

phpMyFAQ FileName parameter cross-site scripting vulnerability

phpMyFAQ is a multi-language, fully database-driven FAQ system. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.2.2, which stems from the lack of effective filtering and escaping of user-supplied data in the FileName parameter of the file attachment upload function, an...

5.4CVSS6.2AI score0.00414EPSS
SaveExploits1References1
CNVD
CNVD
added 2023/04/18 12:00 a.m.97 views

Campcodes Advanced Online Voting System SQL Injection Vulnerability (CNVD-2023-29414)

Campcodes Advanced Online Voting System is an online voting system. Campcodes Advanced Online Voting System v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter voter of the file login.php, which can be exploite...

8.2AI score0.0074EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2023/03/23 12:00 a.m.97 views

Google Chrome Out-of-Bounds Access Vulnerability

Google Chrome is a web browser from Google, an American company. An out-of-bounds access vulnerability exists in versions prior to Google Chrome 111.0.5563.110, which stems from out-of-bounds memory access in the Chrome WebHID, and can be exploited by a remote attacker to potentially leverage hea...

9.8CVSS9.3AI score0.01062EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/12 12:00 a.m.97 views

Microsoft 3D Builder Remote Code Execution Vulnerability

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

7.8CVSS2.6AI score0.00939EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/04 12:00 a.m.97 views

Mozilla Firefox code issue vulnerability (CNVD-2023-05207)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation, U.S. A code issue vulnerability exists in Mozilla Firefox, which stems from an error in the product's handling of JavaScript dialog boxes. A remote attacker could exploit the vulnerability to perform a spoofing attack...

2.2AI score0.0037EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2022/11/30 12:00 a.m.97 views

Google Chrome Live Caption Code Execution Vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Live Caption, which can be exploited by attackers to execute arbitrary code on a system or cause a denial of service...

8.8CVSS7.1AI score0.0083EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/11/21 12:00 a.m.97 views

Siemens syngo Dynamics has an unspecified vulnerability

Siemens syngo Dynamics is a cardiovascular imaging and information solution from Siemens, a German company designed to be a centralized digital hub for complete cardiovascular services. Designed to be a centralized digital hub for complete cardiovascular services, Siemens syngo Dynamics suffers...

7.5CVSS1.9AI score0.00563EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/09/20 12:00 a.m.97 views

Google TensorFlow Denial of Service Vulnerability (CNVD-2023-15783)

Google TensorFlow is an end-to-end open source platform for machine learning from Google. Google TensorFlow has a denial-of-service vulnerability that could be exploited by attackers to trigger a denial-of-service attack...

7.5CVSS4.3AI score0.00583EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/09/16 12:00 a.m.97 views

Apache IoTDB Licensing Issue Vulnerability (CNVD-2022-69472)

Apache IoTDB is an integrated data management engine designed for time-series data from the Apache Foundation that provides data collection, storage, and analysis services, etc. An authorization issue vulnerability exists in Apache IoTDB version 0.13.0, which stems from vulnerability to session i...

8.8CVSS5.6AI score0.01244EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/06/30 12:00 a.m.97 views

Advantech iView SQL Injection Vulnerability (CNVD-2023-16475)

Advantech iView, a software based on Simple Network Protocol SNMP for managing B B SmartWorx devices from Advantech, China, is vulnerable to a SQL injection vulnerability in versions prior to Advantech iView 5.7.04.6469, which results from the use of special elements in SQL commands that are not...

7.5CVSS2.9AI score0.10354EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/06/17 12:00 a.m.97 views

Rundeck plaintext storage vulnerability

Rundeck is an open source automation service with a Web console, command line tools and WebAPI from Rundeck, Inc. that is primarily used to run automation tasks. versions 4.2.0 and 4.2.1 of Rundeck contain a plaintext storage vulnerability that stems from not properly enabling the Key Storage...

5CVSS2.5AI score0.00667EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2022/05/20 12:00 a.m.97 views

Artifex Software Artifex MuJS Denial of Service Vulnerability (CNVD-2022-70081)

Artifex Software Artifex MuJS is a lightweight JavaScript interpreter from Artifex Software, Inc. that is used to embed into other software to provide script execution functionality.Artifex Software Artifex MuJS version 1.2.0 and earlier versions are vulnerable to denial of service vulnerability,...

4.3CVSS4.3AI score0.01133EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2022/05/13 12:00 a.m.97 views

Cambium Networks cnMaestro OS Command Injection Vulnerability (CNVD-2022-64237)

Cambium Networks cnMaestro is a cloud-based or native software platform from Cambium Networks for secure end-to-end network control. Cambium Networks cnMaestro suffers from an operating system command injection vulnerability. An attacker could exploit this vulnerability to upload specially crafte...

9.3CVSS7.5AI score0.00784EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/09 12:00 a.m.97 views

WordPress plugin Anti-Malware Security and Brute-Force Firewall跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. WordPress plugin Anti-Malware Security and Brute-Force Firewall is vulnerable to cross-site scripting. The...

6.1CVSS1.9AI score0.03013EPSS
SaveExploits4References1
CNVD
CNVD
added 2022/03/11 12:00 a.m.97 views

Google Android Input Validation Error Vulnerability (CNVD-2022-47679)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an input validation error that could be exploited by attackers to cause a local denial of service without additional privileges...

5.5CVSS6.3AI score0.00135EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/02/09 12:00 a.m.97 views

Google Tensorflow code issue vulnerability (CNVD-2022-09862)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow has a code issue vulnerability that stems from TensorFlow's grappler component that can trigger null pointer dereferences. No detailed vulnerability details are available at th...

6.5CVSS6.6AI score0.01097EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/11 12:00 a.m.97 views

Siemens Mendix Information Disclosure Vulnerability

A security vulnerability exists in Siemens Mendix, a low-code application development platform from Siemens, Germany. The vulnerability stems from the fact that applications built with the affected version of Mendix Studio Pro do not prevent the caching of file documents when opening or downloadi...

5.5CVSS2.3AI score0.00227EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/09/10 12:00 a.m.97 views

Libtiff buffer overflow vulnerability

Libtiff is a library for reading and writing files in the Tagged Image File Format abbreviated as TIFF.A buffer overflow vulnerability exists in LibTiff version 4.0.10. An attacker can exploit this vulnerability to cause a denial of service via the TIFFVGetField function in libtiff/tifdir.c...

6.5CVSS5.4AI score0.01456EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/09/03 12:00 a.m.97 views

ZOHO ManageEngine ServiceDesk Plus Licensing Issue Vulnerability

ZOHO ManageEngine ServiceDesk Plus SDP is a set of ITIL-based IT service management software from ZOHO. The software integrates incident management, issue management, asset management IT project management, procurement and contract management, etc. An authorization issue vulnerability exists in...

9.8CVSS2.9AI score0.99825EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/10 12:00 a.m.97 views

Reg-viz reg-suit code injection vulnerability

Reg-viz reg-suit is an open source command line interface for reg-viz. Reg-viz reg-suit suffers from a code injection vulnerability that can be exploited by an attacker to execute arbitrary commands...

9.8CVSS7.8AI score0.01941EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/05/18 12:00 a.m.97 views

Google TensorFlow EditDistance Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow EditDistance. An attacker can exploit the vulnerability to trigger a null pointer dereference when implementing 'tf.rawuops.EditDistance...

5.5CVSS6.4AI score0.00189EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/04/29 12:00 a.m.97 views

Apache OFBiz Code Issue Vulnerability

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. A code issue vulnerability exists in Apache OFBiz versions prior to 17.12.07 that stems from insecure...

10CVSS7AI score0.81209EPSS
SaveExploits2References1
CNVD
CNVD
added 2020/06/04 12:00 a.m.97 views

CloudBees Jenkins Script Security Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Script Security Plugin is used in one of the...

5.4CVSS6.5AI score0.0076EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/21 12:00 a.m.97 views

Verodin Information Disclosure Vulnerability

Verodin is a suite of network security inspection platforms from Verodin, Inc. in the United States. The platform is primarily used to test the effectiveness of security protections for networks, endpoints, email, and cloud controls.Director is Verodin's console program. An information disclosure...

7.7CVSS6.2AI score0.041EPSS
SaveExploits5References1
CNVD
CNVD
added 2019/06/28 12:00 a.m.97 views

Magento cross-site scripting vulnerability (CNVD-2019-26217)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. A cross-site scripting vulnerability exists in Magento Open Source, Magento Commerce and Magento. The vulnerability...

5.4CVSS6.4AI score0.00566EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/08/10 12:00 a.m.96 views

D-Link DI-8200 ipsec_road_asp function buffer overflow vulnerability

D-Link DI8200 is an Internet behavior management router designed by D-Link for small and medium-sized network environments, which supports multi-line bandwidth overlay, PPPoE authentication billing, and intelligent traffic control. The D-Link DI8200 suffers from a buffer overflow vulnerability,...

3.5CVSS7.5AI score0.00369EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/05/14 12:00 a.m.96 views

Cisco IOS XE Wireless Controller Software Access Control Error Vulnerability

Cisco IOS XE Wireless Controller software is a wireless LAN controller from Cisco. The Cisco IOS XE Wireless Controller Software suffers from an Access Control Error vulnerability that stems from insufficient access control and can be exploited by an attacker to cause the deletion of arbitrary us...

6.5CVSS7.2AI score0.004EPSS
SaveExploits0
CNVD
CNVD
added 2024/01/26 12:00 a.m.96 views

Mozilla Firefox Denial of Service Vulnerability (CNVD-2024-10440)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a denial of service vulnerability caused by a stack buffer overflow in the WebAudio OscillationNode object. An attacker can exploit this vulnerability to cause the browser ...

8.8CVSS7.4AI score0.00662EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/10/16 12:00 a.m.96 views

Google Android elevation of privilege vulnerability (CNVD-2024-10418)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges...

7.8CVSS7.1AI score0.00103EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/06/16 12:00 a.m.96 views

Apache Traffic Server Information Disclosure Vulnerability (CNVD-2023-71727)

Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. Apache Traffic Server suffers from an information disclosure vulnerability that originates when the server exposes sensitive information to unauthorized participants. An attack...

7.5CVSS6AI score0.01496EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/05/08 12:00 a.m.96 views

Apache StreamPark Input Validation Error Vulnerability

Apache StreamPark is the United States Apache Apache Foundation of a streaming media application development framework. Apache StreamPark suffers from an input validation error vulnerability that stems from the fact that when a user modifies his or her profile, the username is passed as a paramet...

9.1CVSS6.7AI score0.01475EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/02/10 12:00 a.m.96 views

Google Android Kernel elevation of privilege vulnerability (CNVD-2023-12019)

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in veritytarget in dm-verity-target.c of the Google Android Kernel, which stems from the program not properly checking for privileges. An attacker could exploit the vulnerabili...

6.7CVSS6.8AI score0.00485EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/12/21 12:00 a.m.96 views

IBM Cognos Analytics Server-Side Request Forgery Vulnerability

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. A server-side request forgery...

9.1CVSS9AI score0.00428EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/12/20 12:00 a.m.96 views

D-Link DIR-3040 Command Injection Vulnerability

D-Link DIR-3040 is a router from China Youxun D-Link. It provides the function of connecting to the network. D-Link DIR-3040 has a command injection vulnerability, which stems from the SetTriggerLEDBlink function fails to properly filter the construct command special characters, commands, etc. An...

9.6AI score0.03945EPSS
SaveExploits1
CNVD
CNVD
added 2022/11/30 12:00 a.m.96 views

Google Chrome Lacros Graphics code execution vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Lacros Graphics, which can be exploited by attackers to execute arbitrary code on a system or cause a denial of service...

8.8CVSS6.8AI score0.00607EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/11/24 12:00 a.m.96 views

Apache Airflow OS Command Injection Vulnerability (CNVD-2022-83589)

Apache Airflow is an open source platform for creating, managing, and monitoring workflows from the Apache Foundation. The platform features scalable and dynamic monitoring. Apache Airflow suffers from an operating system command injection vulnerability that stems from an improper neutralization ...

9.8CVSS3.2AI score0.04105EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/11/10 12:00 a.m.96 views

Google Chrome Buffer Overflow Vulnerability (CNVD-2022-76513)

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which stems from a heap buffer overflow issue in Crashpad. No details of the vulnerability are currently available...

9.6CVSS1.8AI score0.00847EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/10/13 12:00 a.m.96 views

Cross-site scripting vulnerability in Import Files function of multiple Siemens products

Siemens Desigo PX is a building automation control system from Siemens, a German company. A cross-site scripting vulnerability exists in several Siemens products. The vulnerability stems from an incorrect neutralization of input during web page generation in the Import Files function of the...

2.4AI score0.00505EPSS
SaveExploits0
CNVD
CNVD
added 2022/10/11 12:00 a.m.96 views

Bento4 AP4_Processor::ProcessFragments Denial of Service Vulnerability

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0-639 contains a denial of service vulnerability that stems from a segmentation violation in the AP4Processor::ProcessFragments method of the mp4decrypt component. An attacker could exploit the vulnerability to caus...

6.5CVSS4.1AI score0.00637EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/10/09 12:00 a.m.96 views

Bento4 Ap4DataBuffer.cpp Denial of Service Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A denial of service vulnerability exists in Bento4 version 1.6.0-639, which stems from excessive memory consumption in the AP4DataBuffer::ReallocateBuffer function in Core/Ap4DataBuffer.cpp. An attacker can exploit the...

5.5CVSS5.3AI score0.00297EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/09/30 12:00 a.m.96 views

Rdiffweb Information Disclosure Vulnerability

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. Provides quick access to your archives through an efficient web interface. An information disclosure vulnerability exists in Rdiffweb versions prior to 2.4.8, which stems from the use of a cache containing...

4.6CVSS4.2AI score0.00508EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/09/28 12:00 a.m.96 views

Apache Pulsar Trust Management Issues Vulnerability

Apache Pulsar is the United States Apache Apache Foundation for cloud environments, set of messages, storage, lightweight functional computing as one of the distributed message flow platform. The software supports multi-tenancy, persistent storage, multi-machine room cross-region data replication...

5.9CVSS5.9AI score0.00623EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/09/15 12:00 a.m.96 views

Unspecified Vulnerability in Microsoft Windows Common Log File System Driver

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

7.8CVSS8.4AI score0.28275EPSS
SaveExploits5References1
CNVD
CNVD
added 2022/08/23 12:00 a.m.96 views

Tenda AC18 Remote Command Execution Vulnerability

Tenda AC18 is a router from Tenda, a Chinese company. Tenda AC18 is vulnerable to remote command execution, which can be exploited by attackers to execute arbitrary commands on the system...

9.8CVSS6.4AI score0.03422EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/01 12:00 a.m.96 views

GitLab Remote Code Execution Vulnerability

GitLab is an open source, end-to-end software development platform from the U.S. company GitLab, with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. GitLab has a remote code execution vulnerability, the vulnerability...

9.9CVSS9.4AI score0.76884EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/06/30 12:00 a.m.96 views

lettersanitizer Denial of Service Vulnerability

lettersanitizer is a DOM-based HTML email cleaner for in-browser email rendering. A denial of service vulnerability exists in lettersanitizer versions prior to 1.0.2. The vulnerability stems from a failure to properly handle incoming error messages and can be exploited by an attacker to cause a...

7.5CVSS7.2AI score0.01447EPSS
SaveExploits0References1
Total number of security vulnerabilities5000