Lucene search
+L
CnvdMost viewed

131391 matches found

CNVD
CNVD
added 2023/08/06 12:0 a.m.70 views

Google Chrome Code Execution Vulnerability (CNVD-2023-63464)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is caused by use after release in Blink Task Scheduling. An attacker can exploit this vulnerability to execute arbitrary code on the system or cause an application to...

8.8CVSS7.9AI score0.01096EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/07/14 12:0 a.m.70 views

Apache Pulsar Authorization Issues Vulnerability

Apache Pulsar is the United States Apache Apache Foundation for cloud environments, set of messages, storage, lightweight functional computing as one of the distributed message flow platform. The software supports multi-tenant, persistent storage, multi-machine room cross-region data replication,...

8.2CVSS6.6AI score0.00819EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/07/12 12:0 a.m.70 views

Siemens Tecnomatix Plant Simulation Type Obfuscation Vulnerability

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany, that uses discrete-event simulation to analyze and optimize throughput and thereby improve manufacturing system performance. A type confusion vulnerability exists in Siemens Tecnomatix Plant Simulation, whi...

7.8CVSS7.1AI score0.00226EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/06/14 12:0 a.m.70 views

Siemens SIMOTION and SIMOTION P320 Information Disclosure Vulnerability

SIMOTION is a scalable, high-performance motion control hardware and software system.SIMOTION P320 is an industrial PC for motion control. An information disclosure vulnerability exists in the Siemens SIMOTION and SIMOTION P320, which arises from the device not protecting access to certain servic...

4.6CVSS6.2AI score0.00276EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/06/07 12:0 a.m.70 views

ASUS RT-AC86U OS Command Injection Vulnerability

The ASUS RT-AC86U is a dual-band Wi-Fi router from the Chinese company ASUS. The ASUS RT-AC86U suffers from an operating system command injection vulnerability that originates from not filtering the special characters of parameters in specific URLs, which can be exploited by a remote attacker wit...

8.8CVSS8AI score0.01233EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/04/21 12:0 a.m.70 views

Checkmk Information Disclosure Vulnerability (CNVD-2023-32192)

Checkmk is an editor. An information disclosure vulnerability exists in the Checkmk Appliance that stems from inadequate protection of sensitive information in Webconf. An attacker could exploit the vulnerability by reading log files to retrieve passwords...

5.5CVSS6.1AI score0.00221EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/04/03 12:0 a.m.70 views

Apache UIMA DUCC Command Injection Vulnerability

Apache UIMA DUCC is a cluster management system from the Apache Apache Foundation in the United States. The system provides tools, management and scheduling tools. Apache UIMA DUCC suffers from a command injection vulnerability that arises from improper neutralization of specific elements used wh...

8.8CVSS8.8AI score0.02848EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/03/31 12:0 a.m.70 views

Foxit PDF Editor Remote Code Execution Vulnerability (CNVD-2023-23563)

Foxit PDF Editor is China Foxit Foxit company a PDF editor. Foxit PDF Editor has a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current process...

7.8CVSS7.9AI score0.01025EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/03/16 12:0 a.m.70 views

Microsoft Windows Bluetooth Service Code Execution Vulnerability

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft USA. A security vulnerability exists in Microsoft Windows Bluetooth Service. An attacker could exploit this vulnerability to cause remote code execution...

8.8CVSS9.1AI score0.03217EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/02/20 12:0 a.m.70 views

Fortinet FortiADC Command Injection Vulnerability

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. Fortinet FortiADC suffers from a command injection vulnerability, which stems from an improper neutralization of special elements used in os commands, that can be exploited by an attacker to execute arbitrary shell code a...

7.8CVSS7.9AI score0.00552EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/02/09 12:0 a.m.70 views

ProjectSend Cross-Site Scripting Vulnerability (CNVD-2023-07917)

ProjectSend formerly cFTP is a set of self-hosted applications based on PHP and MySQL.A cross-site scripting vulnerability exists in versions prior to ProjectSend r1606, which could be exploited by attackers to execute arbitrary javascript in the administrator account...

7.2CVSS3.5AI score0.00682EPSS
SaveExploits1References1
CNVD
CNVD
added 2023/02/01 12:0 a.m.70 views

Siretta QUARTZ-GOLD file writing vulnerability

Siretta QUARTZ-GOLD is an industrial router with multiple features and services.A file-writing vulnerability exists in Siretta QUARTZ-GOLD, which can be exploited by attackers to cause arbitrary file uploads via specially crafted HTTP requests...

8.8CVSS2.7AI score0.03697EPSS
SaveExploits1References1
CNVD
CNVD
added 2023/01/17 12:0 a.m.70 views

FFmpeg Denial of Service Vulnerability (CNVD-2023-64453)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A denial of service vulnerability exists in FFmpeg, which stems from a lack of return value checking in the decodemainheader function in the libavformat/nutdec.c file and triggers a null...

5.3CVSS6.6AI score0.00817EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/13 12:0 a.m.70 views

Microsoft Office Visio Remote Code Execution Vulnerability (CNVD-2023-18289)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A remote code execution vulnerability exists in Microsoft Office Visio. An attacker could exploit this vulnerability to execute code on the target host...

7.8CVSS7.8AI score0.00723EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/12 12:0 a.m.70 views

SAP BusinessObjects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2023-03049)

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and deploy...

5.4CVSS5.2AI score0.00345EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/09 12:0 a.m.70 views

Google Android elevation of privilege vulnerability (CNVD-2023-18914)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on the system...

7.8CVSS7.7AI score0.00238EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/11/24 12:0 a.m.70 views

D-Link DIR-823G Command Execution Vulnerability

D-Link DIR-823G is a wireless router from D-Link, a Chinese company. D-Link DIR-823G firmware version 1.02B05 contains a command execution vulnerability that stems from sub42383C's failure to properly filter constructed command special characters, commands, etc. The vulnerability can be exploited...

9.8CVSS6.2AI score0.01228EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/11/24 12:0 a.m.70 views

ToolJet Denial of Service Vulnerability

ToolJet is an extensible, low-code framework for building business applications from ToolJet.A denial-of-service vulnerability exists in ToolJet prior to version 1.27.0, which stems from improper handling of file size limits. An attacker could exploit this vulnerability to cause site downtime...

6.5CVSS4.3AI score0.00753EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/10/13 12:0 a.m.70 views

Multiple Siemens Products Input Validation Error Vulnerability

Siemens SIMATIC HMI Comfort Panels is a touch panel device from Siemens Germany. Multiple Siemens products are vulnerable to an input validation error, which stems from the inability of the affected device to properly validate input sent to certain services over TCP. An unauthenticated remote...

2.8AI score0.00827EPSS
SaveExploits0
CNVD
CNVD
added 2022/10/10 12:0 a.m.70 views

ZoneMinder has an unspecified vulnerability

ZoneMinder is an open source video surveillance software system that supports IP, USB and analog cameras. The system supports IP, USB and analog cameras, etc. A security vulnerability exists in ZoneMinder, which stems from the fact that an authenticated attacker can use the vulnerability to bypas...

8CVSS2.4AI score0.05805EPSS
SaveExploits4References1
CNVD
CNVD
added 2022/09/30 12:0 a.m.70 views

Cisco Catalyst 9200 Series Switch Data Forgery Issue Vulnerability

Cisco Catalyst 9200 Series Switches is a switch from Cisco, U.S. A data forgery vulnerability exists in the software image validation feature of Cisco Catalyst 9200 Series Switches, which could be exploited by an attacker to execute unsigned code at system startup...

2.4AI score0.00209EPSS
SaveExploits0
CNVD
CNVD
added 2022/09/30 12:0 a.m.70 views

NextAuth.js authorization issue vulnerability

NextAuth.js is an authentication for Next.js. NextAuth.js version v3.0.2 is vulnerable to authorization issues, which can be exploited by attackers to perform unauthorized actions...

4.8AI score0.00622EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2022/09/19 12:0 a.m.70 views

Bento4 Denial of Service Vulnerability (CNVD-2023-27653)

Bento4 is an open source C library for reading and writing MP4 files. Bento4 version 1.6.0-639 suffers from a denial-of-service vulnerability that stems from AP4CttsAtom::Create in its Core/Ap4CttsAtom.cpp component, which may consume too much memory. An attacker could exploit the vulnerability t...

6.5CVSS6.1AI score0.00615EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/09/18 12:0 a.m.70 views

Google Chrome Resource Management Error Vulnerability (CNVD-2022-81243)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a Resource Management Error vulnerability that originates from a confusion in the instructions of the program responsible for freeing memory in Frames. An attacker could exploit this vulnerability to cause...

8.8CVSS8.4AI score0.0198EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/09/08 12:0 a.m.70 views

VM2 Remote Code Execution Vulnerability

VM2 is a sandbox that can run untrusted code with built-in modules for whitelisted nodes. versions of VM2 prior to 3.9.11 have a remote code execution vulnerability that can be exploited by an attacker to bypass sandbox protection in order to gain remote code execution privileges on the host...

10CVSS5.6AI score0.47868EPSS
SaveExploits2References1
CNVD
CNVD
added 2022/09/07 12:0 a.m.70 views

Huawei HarmonyOS iAware module malicious application control vulnerability

Huawei HarmonyOS is an operating system from Huawei, China. It provides a microkernel-based, fully distributed operating system. The Huawei HarmonyOS iAware module is vulnerable to a malicious application control vulnerability that could be exploited to cause malicious applications to boot and...

9.8CVSS2.6AI score0.00551EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/09/05 12:0 a.m.70 views

Libraw has an unspecified vulnerability

Libraw is a C library for processing RAW CRW/CR2,NEF,RAF,DNG,andothers format images from Libraw, which supports various operating systems. libraw has a security vulnerability that stems from a memory corruption in the crxFreeSubbandData function when processing cr3 files. No detailed vulnerabili...

5.5CVSS2.8AI score0.00248EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/08/12 12:0 a.m.70 views

Apache Traffic Server Input Validation Vulnerability (CNVD-2022-76238)

Apache Traffic Server ATS or TS is a high-performance, modular HTTP proxy and caching server, similar to Nginx and Squid. Traffic Server was originally a commercial product of Inktomi, a company acquired by Yahoo in 2003, and in August 2009 Yahoo contributed the source code to the In August 2009...

1.2AI score0.0228EPSS
SaveExploits0Affected Software2
CNVD
CNVD
added 2022/08/11 12:0 a.m.70 views

Adobe Illustrator out-of-bounds read vulnerability (CNVD-2023-07323)

Adobe Illustrator is a vector-based image creation software from Adobe. Adobe Illustrator has an out-of-bounds read vulnerability that can be exploited by attackers to bypass mitigation measures such as ASLR and cause sensitive memory leaks...

5.5CVSS4.7AI score0.00371EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/08/09 12:0 a.m.70 views

Siemens SCALANCE product command injection vulnerability

SCALANCE M-800, MUM-800 and S615 and RUGGEDCOM RM1224 industrial routers are used for secure remote access to plants over mobile networks e.g. GPRS or UMTS with integrated security features of firewalls to prevent unauthorized access, and VPNs to protect data transmission.SCALANCE SC-600 devices...

9.1CVSS3.3AI score0.01716EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/28 12:0 a.m.70 views

yasm expand_mmacro function denial of service vulnerability

yasm is yasm open source a completely rewritten Netwide assembler. A denial of service vulnerability exists in yasm version 1.3.0, which stems from the presence of a NULL pointer dereference in the expandmmacro function in modules/preprocs/nasm/nasm-pp.c. An attacker could exploit this...

5.5CVSS5.2AI score0.00321EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/15 12:0 a.m.70 views

Siemens SIMATIC CP SRCS VPN Feature Code Injection Vulnerability

The SIMATIC CP 1242-7 and CP 1243-7 LTE communication processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as firewalls, virtual private networks VPNs, and support for other protocols with data encryption.The SIMATIC CP 1243-8 I...

9.8CVSS4.1AI score0.0221EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:0 a.m.70 views

Dell BSAFE Crypto-C Micro Edition and Dell BSAFE Micro Edition Suite Input Validation Error Vulnerability (CNVD-2022-84619)

Dell BSAFE Micro Edition Suite is a development kit that provides encryption, certificate and transport layer security for c/c applications, devices, systems, etc. Dell BSAFE is a security software product that supports encryption algorithms, certificate chain validation and transport layer...

9.8CVSS1AI score0.01044EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/04 12:0 a.m.70 views

Jenkins Plugin requests-plugin授权问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins Plugin requests-plugin version...

4CVSS2.3AI score0.00528EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2022/06/30 12:0 a.m.70 views

WordPress Limit Login Attempts plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. versions of the WordPress Limit Login Attempts plugin prior to 4.0.72 have a cross-site scripting...

4.8CVSS0.6AI score0.00848EPSS
SaveExploits2References1
CNVD
CNVD
added 2022/06/28 12:0 a.m.70 views

Google Android Resource Management Error Vulnerability in Android (CNVD-2022-53370)

Google Android is a Linux-based open source operating system from Google, Inc. A resource management error vulnerability exists in Google Android, which stems from resource exhaustion in the addAutomaticZenRule of ZenModeHelper.java, and can be exploited by attackers to cause a local denial of...

5.5CVSS4AI score0.00098EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/06/17 12:0 a.m.70 views

Cisco Identity Services Engine授权问题漏洞

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform oversees networks by collecting real-time information from networks, users, and devices to develop and implement appropriate policies.The Cisco Identity Services Engine is...

9.8CVSS3.9AI score0.01068EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/06/15 12:0 a.m.70 views

FacturaScripts Cross-Site Scripting Vulnerability

FacturaScripts is an ERP software. A cross-site scripting vulnerability exists in FacturaScripts versions prior to 2022.06, which can be exploited by an attacker to execute JavaScript code on the client side...

7.1CVSS5.9AI score0.00927EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/06/14 12:0 a.m.70 views

IBM Spectrum Copy Data Management Access Control Error Vulnerability

IBM Spectrum Copy Data Management, an IBM company that modernizes, simplifies, and automates data center copy management processes, has an access control error in IBM Spectrum Copy Data Management Admin versions 2.2.0.0 through 2.2.15.0. vulnerability, which stems from a lack of proper session...

2.1CVSS4.3AI score0.0023EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2022/06/09 12:0 a.m.70 views

Rescue Dispatch Management System SQL注入漏洞(CNVD-2022-53910)

Rescue Dispatch Management System is a rescue dispatch management system from Carlo Montero's personal developer. rescue dispatch management system v1.0 is vulnerable to SQL injection, which originates from /rdms/admin/ respondenttypes/managerespondenttype.php?id=The page lacks validation for...

9.8CVSS2.6AI score0.01105EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/06/09 12:0 a.m.70 views

Online Ordering System SQL注入漏洞

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/user/index.php?view=edit&id=page The lack of validation of externally entered SQL...

9.8CVSS4.9AI score0.0109EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/27 12:0 a.m.70 views

Rancher Labs Rancher Sensitive Data Encryption Missing Vulnerability

Rancher Labs Rancher is an open source, enterprise-class container management platform from Rancher Labs, Inc. Rancher Labs Rancher is vulnerable to a sensitive data encryption miss vulnerability, which stems from the presence of sensitive data encryption misses. An attacker could exploit this...

3.6CVSS1.6AI score0.00388EPSS
SaveExploits1Affected Software2
CNVD
CNVD
added 2022/05/19 12:0 a.m.70 views

Unspecified vulnerability exists in moodle (CNVD-2022-54952)

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. a security vulnerability exists in Moodle, which stems from the description user field failing to hide when set to hidden. No details o...

5.3CVSS1.8AI score0.01311EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/19 12:0 a.m.70 views

Elgg Cross-Site Scripting Vulnerability (CNVD-2022-38755)

Elgg is a set of open source social networking engine. The product blogs, file sharing, groups and other features. elgg has a cross-site scripting vulnerability, there are no details of the vulnerability provided...

9CVSS1.6AI score0.00697EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/07 12:0 a.m.70 views

Rancher Labs Rancher Information Disclosure Vulnerability

Rancher Labs Rancher is an open source, enterprise-class container management platform from Rancher Labs, U.S. Rancher Labs Rancher is vulnerable to an information disclosure vulnerability that stems from exposing repository credentials to an external third-party source, which could be exploited ...

7.5CVSS1.7AI score0.00727EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/15 12:0 a.m.70 views

nconf has unspecified vulnerabilities

nconf is a TOML-formatted plugin. nconf versions prior to 0.11.4 have a security vulnerability that stems from the .set function, which is responsible for setting configuration properties, being vulnerable to prototype contamination, which can be exploited by attackers to override JavaScript...

7.5CVSS3.3AI score0.01753EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/14 12:0 a.m.70 views

Rancher Labs Rancher Access Control Error Vulnerability (CNVD-2022-65016)

Rancher Labs Rancher is an open source, enterprise-class container management platform from Rancher Labs, U.S. Rancher Labs Rancher is vulnerable to an access control error that could be exploited by an attacker to retain privileges that should have been revoked...

8.8CVSS2.7AI score0.00955EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/08 12:0 a.m.70 views

Fortinet FortiClient for Windows权限提升漏洞

Fortinet FortiClient is a mobile endpoint security solution from Fortinet, Inc. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication when connected to a FortiGate firewall appliance. executable file in the FortiClient installer...

8.8CVSS4.1AI score0.00373EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/07 12:0 a.m.70 views

MingSoft MCMS SQL Injection Vulnerability (CNVD-2022-85104)

MingSoft MCMS is a complete open source J2ee system from MingSoft, a Chinese company. mingsoft MCMS has a SQL injection vulnerability, which originates from the lack of filtering and escaping of SQL data in the categoryId parameter of /cms/content/list, and can be used by attackers to execute...

9.8CVSS4.6AI score0.05617EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/31 12:0 a.m.70 views

Wordpress Plugin Paid Memberships Pro SQL Injection Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in Wordpress Plugin Paid Memberships Pro versions prior to 2.6....

9.8CVSS9.8AI score0.81828EPSS
SaveExploits2References1
Total number of security vulnerabilities5000