Lucene search
+L
CnvdMost viewed

131391 matches found

CNVD
CNVD
•added 2022/01/26 12:0 a.m.•70 views

Oracle MySQL Cluster Buffer Overflow Vulnerability (CNVD-2022-07916)

Oracle MySQL Cluster is a write-scalable, real-time, ACID-compatible transactional database developed by Oracle Corporation USA. Oracle MySQL Cluster buffer overflow vulnerability can be exploited by attackers to read the contents of memory or crash the application...

2.9CVSS5.8AI score0.01422EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/01/26 12:0 a.m.•70 views

Oracle MySQL Cluster Buffer Overflow Vulnerability (CNVD-2022-07917)

Oracle MySQL Cluster is a write-scalable, real-time, ACID-compliant transactional database developed by Oracle Corporation USA. Oracle MySQL Cluster buffer overflow vulnerability can be exploited by attackers to read the contents of memory or crash the application...

2.9CVSS5.8AI score0.01443EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/01/26 12:0 a.m.•70 views

Oracle MySQL Cluster Buffer Overflow Vulnerability (CNVD-2022-07918)

Oracle MySQL Cluster is a write-scalable, real-time, ACID-compliant transactional database developed by Oracle Corporation. Oracle MySQL Cluster is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker to read the contents of memory or crash the application...

2.9CVSS4.5AI score0.01443EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/01/25 12:0 a.m.•70 views

Oracle MySQL Cluster Information Disclosure Vulnerability

Oracle MySQL Cluster is the United States Oracle Oracle company developed a write scalable, real-time, ACID-compatible transactional database. An information disclosure vulnerability exists in Oracle MySQL Cluster, which can be exploited by an attacker to read the contents of memory or crash an...

2.9CVSS3.1AI score0.01592EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/01/21 12:0 a.m.•70 views

F5 BIG-IP APM Access Control Error Vulnerability (CNVD-2022-26840)

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. F5 BIG-IP APM suffers from an Access Control Error vulnerability that arises from a connection to the BIG-IP Edge Client on Mac and Windows wh...

5.3CVSS6.7AI score0.00404EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/01/18 12:0 a.m.•70 views

Qnap Qvr has an unspecified vulnerability

Qnap Qvr is a Qnap monitoring system control center from China Welllink Technology Qnap, Inc. A security vulnerability exists in several QVR products, stemming from a stack buffer overflow vulnerability that affects QNAP devices running QVR Elite, QVR Pro, and QVR Guard. An attacker could exploit...

9.8CVSS2.8AI score0.01296EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/01/12 12:0 a.m.•70 views

Adobe Acrobat and Reader Resource Management Error Vulnerability

Adobe Acrobat, a PDF file editing and conversion tool from Adobe, is vulnerable to a resource management error in Adobe Acrobat and Reader, which is caused by a post-release usage error when processing PDF files. A remote attacker could exploit the vulnerability to create a specially crafted PDF...

9.3CVSS3.2AI score0.10801EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/01/06 12:0 a.m.•70 views

DayByDay CRM Cross-Site Scripting Vulnerability (CNVD-2022-68549)

DayByDay CRM is an open source CRM Customer Relationship Management software, based on Laravel, that helps users keep track of clients, tasks, meetings and more. A cross-site scripting vulnerability exists in DayByDay CRM. The vulnerability stems from the title field of a new task in the product...

5.4CVSS5.3AI score0.00531EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/01/04 12:0 a.m.•70 views

Wireshark Injection Vulnerability (CNVD-2022-11197)

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark version 3.6.0 suffers from an injection vulnerability that stems from a crash...

5.5CVSS6.1AI score0.01426EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/01/03 12:0 a.m.•70 views

Trendnet AC2600 TEW-827DRU Information Disclosure Vulnerability

Trendnet AC2600 TEW-827DRU is a wireless router. Trendnet AC2600 TEW-827DRU is vulnerable to an information disclosure vulnerability that stems from a failure to properly disclose credentials for the device's smb functionality. An attacker could exploit the vulnerability to display all mb account...

4.9CVSS1.9AI score0.00725EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/12/17 12:0 a.m.•70 views

GNOME Web Cross-Site Scripting Vulnerability

GNOME Web Epiphany is a Web browser based on the WebKit rendering engine. The product provides paginated browsing, cookie management, pop-up ad control, etc. GNOME Web has a cross-site scripting vulnerability that can be exploited by attackers to conduct exploit attacks via false pages...

6.1CVSS4.3AI score0.01429EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/12/15 12:0 a.m.•70 views

Google Chrome ANGLE security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from an object lifecycle issue in ANGLE. An attacker could use this vulnerability to bypass security restrictions...

8.8CVSS2.9AI score0.0075EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/12/04 12:0 a.m.•70 views

Delicious Brains Advanced Custom Fields Access Control Error Vulnerability

Delicious Brains Advanced Custom Fields is an advanced custom fields plug-in from Delicious Brains Canada.An access control error vulnerability exists in Delicious Brains Advanced Custom Fields, which stems from a lack of authorization associated with database browsing The vulnerability stems fro...

7.5CVSS3.4AI score0.02462EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/12/01 12:0 a.m.•70 views

Nodebb path traversal vulnerability

NodeBB is a forum system built by the Design Create Play team using Node.js, a web application platform built on top of Google's V8 JavaScript engine. Nodebb is vulnerable to a path traversal vulnerability that could be exploited to access locations outside of restricted directories...

5CVSS1.6AI score0.25843EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/11/23 12:0 a.m.•70 views

Open-xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-90764)

Open-xchange OX App Suite is a Web cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in Open-xchange OX App Suite, which can be exploited by...

6.1CVSS4.6AI score0.01119EPSS
SaveExploits3References1
CNVD
CNVD
•added 2021/11/21 12:0 a.m.•70 views

Lantronix PremierWave 2050 OS Command Injection Vulnerability (CNVD-2022-01599)

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 in version 8.9.0.0R4 contains a security vulnerability that originates when the Web Manager wireless network scanner feature fails to properly filter special characters,...

9.9CVSS2.9AI score0.36234EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/11/11 12:0 a.m.•70 views

Siemens Nucleus ReadyStart Type Obfuscation Vulnerability

Siemens Nucleus ReadyStart is a bundled solution from Siemens, Germany. It is used to accelerate the fast startup of complete systems and provides a rich set of board support packages Bsp. A security vulnerability exists in Siemens Nucleus ReadyStart, which originates from an ICMP echo packet wit...

6.9CVSS5.4AI score0.01409EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/11/09 12:0 a.m.•70 views

GNU Hurd has unspecified vulnerabilities

Gnu Hurd is a Gnu project replacement for the Unix kernel. It is used to implement the file system, network protocols, file access control, and other features implemented by the Unix kernel or similar kernels such as Linux. GNU Hurd suffers from a security vulnerability that stems from the use of...

7CVSS2AI score0.00284EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/11/02 12:0 a.m.•70 views

Google Android Framework Elevation of Privilege Vulnerability (CNVD-2021-101443)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. an elevation of privilege vulnerability exists in the Framework component of Google Android version 12. No detailed vulnerability details are available...

7.8CVSS5AI score0.0011EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/10/27 12:0 a.m.•70 views

Adobe Audition Arbitrary Code Execution Vulnerability (CNVD-2022-00591)

Adobe Audition is an audio editor and post-production suite. Adobe Audition 14.4 and earlier versions contain an arbitrary code execution vulnerability that could be exploited by attackers to execute arbitrary code...

9.3CVSS6.2AI score0.0175EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/10/27 12:0 a.m.•70 views

Adobe Prelude Memory Buffer Out-of-Bounds Access Vulnerability (CNVD-2021-92811)

Adobe Prelude is a video recording and capture tool designed for intuitive and efficient media organization and metadata entry to quickly tag and transcode video footage and quickly create rough cuts.Adobe Prelude 10.1 and earlier versions are vulnerable to an out-of-bounds memory buffer access...

7.8CVSS4AI score0.0169EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/10/21 12:0 a.m.•70 views

ZTE MF971R Profile Control Vulnerability

The ZTE MF971R is a Cat 6 LTE mobile Wi-Fi router with download speeds up to 300mbps and upload speeds up to 50mbps.A configuration file control vulnerability exists in the ZTE MF971R. An attacker could exploit the vulnerability to modify the device's configuration parameters, which could result ...

7.5CVSS4.9AI score0.00825EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/10/14 12:0 a.m.•70 views

Redmine Information Disclosure Vulnerability (CNVD-2022-10738)

Redmine is an open source web-based project management and defect tracking tool. The product provides project management, issue tracking, and role-based access control, among other features.A security vulnerability exists in Redmine, which stems from a configuration or other error in the operatio...

5.3CVSS1.7AI score0.01165EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/10/09 12:0 a.m.•70 views

Xiuno BBS Access Control Error Vulnerability

Xiuno BBS is an open source forum program based on PHP and MySQL. Xiuno BBS suffers from an Access Control Error vulnerability that stems from the product routeuser.php that allows retrieval of usernames. No details of the vulnerability are provided at this time...

5.3CVSS5.3AI score0.00999EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/10/09 12:0 a.m.•70 views

Xiuno BBS Cross-Site Scripting Vulnerability

Xiuno BBS is an open source forum program based on PHP and MySQL. Xiuno BBS suffers from a cross-site scripting vulnerability that originates from the failure of the product/admin/?setting-base.htm page to properly handle data in the sitebrief field. An attacker can exploit this vulnerability to...

6.1CVSS6.1AI score0.00694EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/09/26 12:0 a.m.•70 views

Discourse server-side request forgery vulnerability

Discourse is an open source community discussion platform. The platform includes community, email and chat room features.Discourse in versions 2.3.2 and 2.6 has a server-side request forgery vulnerability that can be exploited by attackers to upload images from remote websites when writing emails...

5.3CVSS3AI score0.01059EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/09/23 12:0 a.m.•70 views

Mozilla Rust Buffer Overflow Vulnerability (CNVD-2021-85300)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause errors in data contention in concurrent programs...

8.1CVSS5.2AI score0.00766EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/09/15 12:0 a.m.•70 views

Sensitive Information Disclosure Vulnerability in Multiple Siemens SIMATIC Products

SIPLUS extreme products are designed for reliable operation under extreme conditions and are based on SIMATIC, LOGO!, SITOP, SINAMICS, SIMOTION, SCALANCE or other devices.The SIMATIC CP 1543-1 and SIMATIC CP 1545-1 communication processors connect the S7-1500 controller to the Ethernet. It provid...

6.5CVSS6.2AI score0.00253EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/09/08 12:0 a.m.•70 views

Google Android Information Disclosure Vulnerability (CNVD-2021-77622)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA, and the Media Framework component of Google Android is vulnerable to information disclosure. An attacker could use this vulnerability to obtain sensitive information...

6.5CVSS1.6AI score0.00804EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/09/01 12:0 a.m.•70 views

Eclipse Mosquitto License Issue Vulnerability

Eclipse Mosquitto is a set of open source messaging agent software from the Eclipse Foundation. eclipse Mosquitto has a security vulnerability that stems from the fact that in Eclipse mosquito versions 2.0 through 2.0.11, when using the dynamic security plugin, if a client is unsubscribed from a...

5.3CVSS1.9AI score0.01367EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/08/31 12:0 a.m.•70 views

Cacti Cross-Site Scripting Vulnerability (CNVD-2021-70092)

Cacti is an open source set of network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, uses RRDtool drawing graphs for analysis, and provides data and user management features. cacti suffers from a code injection vulnerability that stems from multiple...

6.1CVSS1.8AI score0.02259EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/08/26 12:0 a.m.•70 views

F5 BIG-IP TMUI Remote Command Execution Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A remote command execution vulnerability exists in the F5 BIG-IP TMUI, which can be exploited by an authenticated attacker wi...

8.8CVSS3.9AI score0.02288EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/08/25 12:0 a.m.•70 views

ARM mbed TLS Trust Management Issue Vulnerability

ARM mbed TLS is a product from ARM UK that provides secure communication and encryption for mbed products. ARM mbed TLS has a security vulnerability that stems from the fact that the null algorithm parameter term is the same as the real array of size 0 and therefore the certificate is considered...

7.5CVSS0.9AI score0.0118EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/08/20 12:0 a.m.•70 views

Google TensorFlow Dezero Error Vulnerability (CNVD-2021-64070)

Google TensorFlow is an end-to-end open source machine learning platform. the implementation of tf.rawops.SparseDenseCwiseDiv in versions prior to Google TensorFlow 2.6.0 is vulnerable to a dezero error. No details of the vulnerability are currently available...

5.5CVSS3.9AI score0.00152EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/08/17 12:0 a.m.•70 views

Dolibarr Cross-Site Scripting Vulnerability (CNVD-2021-71264)

Dolibarr is an application. A modern software package that helps manage your organization's activities, Dolibarr ERP CRM versions 2.8.1 through 13.0.2 are vulnerable to a cross-site scripting vulnerability caused by a lack of validation of user-submitted data by the editor module in the software...

9CVSS2.6AI score0.00893EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/08/13 12:0 a.m.•70 views

Google TensorFlow MKL Code Execution Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow versions prior to 2.6.0. An attacker can exploit the vulnerability to execute arbitrary code on the system...

7.8CVSS7.8AI score0.00185EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/08/06 12:0 a.m.•70 views

Libgd out-of-bounds read vulnerability (CNVD-2021-94953)

LibGD is an open source library for programmers to dynamically create images. an out-of-bounds read vulnerability exists in LibGD 2.3.2 and earlier. An attacker can exploit the vulnerability to cause a denial of service via specially crafted TGA files...

6.5CVSS5AI score0.01869EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/08/05 12:0 a.m.•70 views

WordPress Quiz Maker plugin SQL Injection Vulnerability

WordPress is a set of blogging platform developed by Wordpress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Quiz Maker plugin is an application plugin for WordPress. A SQL injection vulnerability exists in WordPress Quiz Maker...

7.2CVSS7.2AI score0.01292EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/07/23 12:0 a.m.•70 views

CASAP Automated Enrollment SQL Injection Vulnerability (CNVD-2021-57785)

CASAP Automated Enrollment is an automated enrollment system for the CASAP organization. The goal of this project is to provide CASAP with an automated enrollment system to streamline the school's processes and make them more effective, efficient and easily retrievable. SourceCodester Alumni...

9.8CVSS3.2AI score0.01517EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/07/14 12:0 a.m.•70 views

Adobe Illustrator 2021 Out-of-Bounds Write Vulnerability (CNVD-2021-55965)

Adobe Illustrator 2021 is a vector drawing software. An out-of-bounds write vulnerability exists in Adobe Illustrator 2021 25.2.3 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

7.8CVSS8AI score0.0194EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/06/17 12:0 a.m.•70 views

Nextcloud server processing logic error vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A processing logic error vulnerability exists in the Nextcloud server, which stems from the fact that the Nextcloud server is vulnerable to brute-force attack...

9.8CVSS6.4AI score0.01739EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/05/07 12:0 a.m.•70 views

Cisco HyperFlex HX Data Platform Access Control Error Vulnerability

Cisco HyperFlex HX Data Platform is a network appliance from Cisco USA. Provides enterprise-class agility, scalability, security and lifecycle management capabilities. An access control error vulnerability exists in Cisco HyperFlex HX Data Platform, which can be exploited by an attacker to upload...

5.3CVSS6.7AI score0.80426EPSS
SaveExploits5References1
CNVD
CNVD
•added 2021/04/28 12:0 a.m.•70 views

Buffalo WSR-2533DHPL2 and WSR-2533DHP3 Access Control Error Vulnerability

Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are routers from Buffalo Japan.The Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are vulnerable to an access control error that could be exploited by an attacker to gain access to unauthorized content...

7.5CVSS5.6AI score0.0817EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/03/26 12:0 a.m.•70 views

Netop Vision Pro Misauthorization Vulnerability

Netop Vision Pro is a student monitoring system for teachers to facilitate student learning while using school computers. A security vulnerability exists in Netop Vision Pro. An attacker could exploit the vulnerability to replay network traffic...

5.9CVSS6.7AI score0.00771EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/03/09 12:0 a.m.•70 views

Atlassian Jira Server and Data Center Cross-Site Scripting Vulnerability

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is a server version of a defect tracking management system. Atlassian JIRA Data Center is the data center version of Atlassian JIRA. validation, an attacker could exploit the...

6.1CVSS4.9AI score0.01274EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/02/25 12:0 a.m.•70 views

Cisco NX-OS Denial of Service Vulnerability (CNVD-2021-12829)

Cisco NX-OS is the network operating system for the Cisco Nexus family of Ethernet switches and the MDS family of Fibre Channel storage area network switches. A denial of service vulnerability exists in the Protocol Independent Multicast PIM feature of the Cisco NX-OS, which can be exploited by a...

4.3CVSS6.6AI score0.00391EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/06/15 12:0 a.m.•70 views

WordPress Cross-Site Scripting Vulnerability (CNVD-2021-24378)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress, which stems from the lack of proper validation of...

5.4CVSS6.1AI score0.02153EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/06/03 12:0 a.m.•70 views

VMware Spring Cloud Config Path Traversal Vulnerability

VMware Spring Cloud Config is a configuration management solution for distributed systems from VMware. The product is mainly for the external configuration of distributed systems to provide server and client support. A path traversal vulnerability exists in the Spring-cloud-config-server module i...

7.5CVSS9.5AI score0.95586EPSS
SaveExploits3References1
CNVD
CNVD
•added 2020/05/27 12:0 a.m.•70 views

Inductive Automation Ignition Access Control Error Vulnerability

Inductive Automation Ignition is a suite of integrated software platforms for SCADA systems from Inductive Automation, Inc. The platform supports SCADA data acquisition and monitoring systems, HMI human machine interface and more. An access control error vulnerability exists in Inductive Automati...

7.5CVSS6.8AI score0.13639EPSS
SaveExploits4References1
CNVD
CNVD
•added 2020/04/20 12:0 a.m.•70 views

WordPress Gtranslate Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Gtranslate versions prior to 2.8.52, which stems from...

6.1CVSS6.5AI score0.04457EPSS
SaveExploits1References1
Total number of security vulnerabilities5000