Lucene search
+L

131891 matches found

CNVD
CNVD
•added 2025/08/15 12:00 a.m.•31 views

Adobe InDesign Desktop Buffer Overflow Vulnerability (CNVD-2025-19244)

Adobe InDesign Desktop is a desktop publishing DTP application developed by Adobe, mainly used for typographic editing of printed materials, supporting the creation of books, magazines, posters, flyers and other printed materials. A buffer overflow vulnerability exists in Adobe InDesign Desktop,...

7.8CVSS7.5AI score0.00276EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•11 views

Adobe InDesign Desktop Post-Release Reuse Vulnerability (CNVD-2025-19767)

Adobe InDesign Desktop is desktop publishing DTP software developed by Adobe, mainly used for typography design of print and digital publications, including books, magazines, posters, e-books and so on. Adobe InDesign Desktop suffers from a post-release reuse vulnerability that can be exploited b...

7.8CVSS7.5AI score0.00298EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•15 views

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2025-18824)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

8.8CVSS8.4AI score0.19201EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•15 views

Open5GS Denial of Service Vulnerability (CNVD-2025-18544)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service via the function...

7.5CVSS6.8AI score0.00728EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•10 views

WordPress B Blocks plugin missing authorization vulnerability

WordPress B Blocks plugin is a Gutenberg plugin for WordPress to enhance page editing features. It provides a variety of beautiful blocks such as buttons, sliders, etc., supports highly customizable designs such as fonts, colors, spacing, etc., and includes pre-designed themes and icon libraries...

9.8CVSS6.8AI score0.00478EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•17 views

WordPress B Slider - Gutenberg Slider Block for WP plugin code execution vulnerability

WordPress B Slider - Gutenberg Slider Block for WP plugin is a core editor plugin that comes with WordPress and is part of the Gutenberg editor that was introduced in WordPress version 5.9. A code execution vulnerability exists in WordPress B Slider- Gutenberg Slider Block for WP plugin, which...

8.8CVSS7.6AI score0.00601EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•12 views

GNU libcdio csp_eth_init function buffer overflow vulnerability

GNU libcdio is an American GNU community library for CD-ROM and CD image access. A buffer overflow vulnerability exists in GNU libcdio version 2.0, which stems from the failure of the ifname parameter in the cspethinit function to properly validate the length and size of the input data, and can b...

6.5CVSS8.1AI score0.00265EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•10 views

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21452)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause the plugin to crash...

7.5CVSS6.5AI score0.00337EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•11 views

Huawei EnzoH-W5611T OS Command Injection Vulnerability

Founded in 1987 and headquartered in Shenzhen, Guangdong Province, China, Huawei is a leading global provider of ICT information and communications technology infrastructure and smart terminals, with operations in more than 170 countries and regions and serving more than 3 billion people worldwid...

5CVSS7.5AI score0.0029EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•8 views

WordPress OpenStreetMap for Gutenberg and WPBakery Page Builder plugin cross-site scripting vulnerability

WordPress OpenStreetMap for Gutenberg and WPBakery Page Builder plugin mainly provides the function of embedding interactive maps in the page, supporting customized locations, map styles, marker points and so on. The WordPress OpenStreetMap for Gutenberg and WPBakery Page Builder plugin suffers...

5.9CVSS5.9AI score0.00182EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•32 views

OpenBao has an unspecified vulnerability (CNVD-2025-18600)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao versions 0.1.0 through 2.3.1, which can be exploited by attackers to cause information leakage...

3.7CVSS6.5AI score0.00193EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•42 views

Adobe InCopy Out-of-Bounds Write Vulnerability (CNVD-2025-18934)

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute code on the system or cause the application to crash...

7.8CVSS7.5AI score0.00251EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•13 views

Microsoft Windows Routing and Remote Access Service Remote Code Execution Vulnerability (CNVD-2026-11810)

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft USA that is used to implement features such as network routing, virtual private networks VPNs and dial-up connections. A remote code execution vulnerability exists in Microsoft Windows Routing and Remote Acces...

8.8CVSS6.8AI score0.00936EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•12 views

Microsoft Office Code Execution Vulnerability (CNVD-2025-18818)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which is caused due to a heap buffer overflow wh...

7.8CVSS8.3AI score0.00484EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•41 views

OpenBao Code Injection Vulnerability

OpenBao is OpenBao open source a sensitive data management software . A code injection vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by attackers to cause unauthorized code execution and network access...

9.1CVSS7.8AI score0.00384EPSS
SaveExploits0Affected Software1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•16 views

Microsoft Excel Code Execution Vulnerability (CNVD-2025-18823)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which is caused by free use when opening specially crafted files. An attacker can exploit the vulnerability to execute arbitrary code on the syste...

7.8CVSS8.1AI score0.00561EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•28 views

Adobe InDesign Desktop Out-of-Bounds Write Vulnerability (CNVD-2025-19246)

Adobe InDesign Desktop is a desktop publishing DTP application developed by Adobe, mainly used for typographic editing of printed materials, supporting the creation of books, magazines, posters, flyers and other printed materials. Adobe InDesign Desktop suffers from an out-of-bounds write...

7.8CVSS7.3AI score0.00226EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•11 views

Adobe InCopy Heap Buffer Overflow Vulnerability (CNVD-2025-18931)

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause a buffer overflow that can be used to execute arbitrary code on the system or cause th...

7.8CVSS8.2AI score0.003EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•17 views

Open5GS Denial of Service Vulnerability (CNVD-2025-18546)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a denial of service vulnerability, which can be exploited by an attacker to cause a denial of service via the function esmhandlepdnconnectivityrequest...

7.5CVSS6.8AI score0.00588EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•17 views

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21455)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause access to subscription details...

3.7CVSS6.5AI score0.00249EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•26 views

Adobe InCopy Heap Buffer Overflow Vulnerability (CNVD-2025-18932)

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on the system or cause the application to crash...

7.8CVSS8.2AI score0.003EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•25 views

Microsoft Excel Code Execution Vulnerability (CNVD-2025-18819)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which is caused due to an error when opening a specially crafted file. An attacker could exploit this vulnerability to execute arbitrary code on t...

7.8CVSS8AI score0.00521EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•27 views

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21458)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause the creation of subscriptions...

5CVSS6.5AI score0.00212EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•30 views

Adobe InDesign Desktop Out-of-Bounds Write Vulnerability (CNVD-2025-19628)

Adobe InDesign Desktop is desktop publishing DTP software developed by Adobe, mainly used for typography design of print and digital publications, including books, magazines, posters, e-books and so on. Adobe InDesign Desktop suffers from an out-of-bounds write vulnerability that can be exploited...

7.8CVSS7.7AI score0.00243EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•84 views

GNU libopts Buffer Overflow Vulnerability

GNU libopts is a C language library for parsing command line options from the US GNU community. A buffer overflow vulnerability exists in GNU libopts version 27.6 and earlier, which stems from a boundary error in the function strstrsse2 when processing untrusted input. An attacker could exploit...

5.5CVSS7.3AI score0.00217EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•11 views

Adobe InCopy Memory Misreference Vulnerability (CNVD-2025-18938)

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. A memory misreference vulnerability exists in Adobe InCopy, which can be exploited by an attacker to execute code on the system or cause the application to crash...

7.8CVSS7.3AI score0.0029EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•47 views

WordPress Elementor Plugin Arbitrary File Read Vulnerability

WordPress Elementor Plugin is a visual page design plugin that allows users to create professional web pages with drag-and-drop modules and a visual editor without writing code. WordPress Elementor Plugin suffers from an arbitrary file read vulnerability that stems from the program failing to...

4.9CVSS6.7AI score0.00508EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•13 views

WordPress RT Easy Builder - Advanced addons for Elementor plugin cross-site scripting vulnerability

WordPress RT Easy Builder - Advanced addons for Elementor plugin is a plugin designed for WordPress websites, mainly used to extend the design features of Elementor pages. The WordPress RT Easy Builder - Advanced addons for Elementor plugin suffers from a cross-site scripting vulnerability that...

6.4CVSS6.5AI score0.00212EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•15 views

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21447)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause an editorial subscription...

6.4CVSS6.5AI score0.00181EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•24 views

Microsoft Word Code Execution Vulnerability (CNVD-2025-18826)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. Microsoft Word Code Execution Vulnerability, the vulnerability is caused due to incorrect conversion between number types. An attacker could exploit this vulnerability to execute arbitrary co...

8.4CVSS7.8AI score0.00546EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•18 views

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21456)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause access to subscription details...

3.7CVSS6.5AI score0.00208EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•22 views

Google Chrome Heap Buffer Overflow Vulnerability

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a heap buffer overflow vulnerability due to improper boundary checking by libaom. An attacker can exploit the vulnerability to overflow a buffer, which can be used to execute arbitrary code on the system o...

8.8CVSS8.2AI score0.00286EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•26 views

Google Chrome Buffer Overflow Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome, which can be exploited by remote attackers to perform out-of-bounds memory access via a crafted HTML page...

8.8CVSS7.7AI score0.00314EPSS
SaveExploits0Affected Software1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•15 views

Adobe InDesign Desktop Out-of-Bounds Read Vulnerability (CNVD-2025-19764)

Adobe InDesign Desktop is desktop publishing DTP software developed by Adobe, mainly used for typography design of print and digital publications, including books, magazines, posters, e-books and so on. Adobe InDesign Desktop suffers from an out-of-bounds read vulnerability that can be exploited ...

5.5CVSS6.8AI score0.00261EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/14 12:00 a.m.•15 views

Microsoft GitHub Copilot Remote Code Execution Vulnerability

GitHub Copilot is an AI-driven code assistant developed by Microsoft, widely used in Visual Studio Code, Visual Studio and other development environments, providing intelligent code completion and generation services for millions of developers worldwide. Microsoft GitHub Copilot remote code...

7.8CVSS8.9AI score0.03241EPSS
SaveExploits2References1
CNVD
CNVD
•added 2025/08/13 12:00 a.m.•9 views

NVIDIA Triton Inference Server HTTP Service Input Validation Vulnerability

Triton Inference Server is a high-performance inference service engine developed by NVIDIA, designed for AI model deployment in production environments, with support for a variety of frameworks TensorFlow, PyTorch, ONNX, etc. and optimized inference performance for GPUs and CPUs. An input...

9.8CVSS7.6AI score0.0203EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/13 12:00 a.m.•17 views

NVIDIA Triton Inference Server Python Out-of-Bounds Read Vulnerability

Triton Inference Server is a high-performance inference service engine developed by NVIDIA, designed for AI model deployment in production environments, with support for a variety of frameworks TensorFlow, PyTorch, ONNX, etc. and optimized inference performance for GPUs and CPUs. An out-of-bounds...

7.5CVSS7AI score0.00949EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/13 12:00 a.m.•9 views

Apple macOS Sequoia code execution vulnerability (CNVD-2025-19511)

Apple macOS Sequoia is an operating system from the American company Apple Apple. Apple macOS Sequoia suffers from a code execution vulnerability that is caused due to an error in the model I/O component when opening a specially crafted file. An attacker can exploit the vulnerability to execute...

7.9AI score0.00427EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/13 12:00 a.m.•13 views

NVIDIA Triton Inference Server Integer Overflow Vulnerability

Triton Inference Server is a high-performance inference service engine developed by NVIDIA, designed for AI model deployment in production environments, with support for a variety of frameworks TensorFlow, PyTorch, ONNX, etc. and optimized inference performance for GPUs and CPUs. An integer...

7.5CVSS7.1AI score0.00536EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/13 12:00 a.m.•12 views

NVIDIA Triton Inference Server Code Execution Vulnerability

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. A code execution vulnerability exists in NVIDIA Triton Inference Server, which can be exploited by attackers to execute arbitrary code, cau...

9.8CVSS7.9AI score0.00714EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/13 12:00 a.m.•24 views

NVIDIA Triton Inference Server Python Backend Out-of-Bounds Write Vulnerability

Triton Inference Server is a high-performance inference service engine developed by NVIDIA, designed for AI model deployment in production environments, with support for a variety of frameworks TensorFlow, PyTorch, ONNX, etc. and optimized inference performance for GPUs and CPUs. An out-of-bounds...

9.8CVSS8.1AI score0.01605EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/13 12:00 a.m.•19 views

NVIDIA Triton Inference Server Code Execution Vulnerability (CNVD-2025-20011)

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. A code execution vulnerability exists in NVIDIA Triton Inference Server, which can be exploited by attackers to execute arbitrary code, cau...

9.8CVSS7.9AI score0.02646EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/13 12:00 a.m.•13 views

NVIDIA Triton Inference Server Integer Overflow Vulnerability

Triton Inference Server is a high-performance inference service engine developed by NVIDIA, designed for AI model deployment in production environments, with support for a variety of frameworks TensorFlow, PyTorch, ONNX, etc. and optimized inference performance for GPUs and CPUs. An integer...

7.5CVSS7.1AI score0.00471EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/13 12:00 a.m.•15 views

Apple macOS Sequoia code execution vulnerability

Apple macOS Sequoia is an operating system from the American company Apple Apple. A code execution vulnerability exists in Apple macOS Sequoia, which is caused due to an error in the model I/O component when opening a specially crafted file, and can be exploited by an attacker to execute arbitrar...

7.9AI score0.00401EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/13 12:00 a.m.•8 views

Apple macOS Sequoia code execution vulnerability (CNVD-2025-19510)

Apple macOS Sequoia is an operating system from the American company Apple Apple. Apple macOS Sequoia suffers from a code execution vulnerability that is caused due to an issue in the CoreMedia component when opening specially crafted files. An attacker can exploit the vulnerability to execute...

8AI score0.00465EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/13 12:00 a.m.•31 views

NVIDIA Triton Inference Server Denial of Service Vulnerability (CNVD-2025-20009)

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. A denial of service vulnerability exists in NVIDIA Triton Inference Server, which stems from an invalid request that could result in a...

7.5CVSS6.7AI score0.00483EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/13 12:00 a.m.•11 views

Dell SupportAssist OS Recovery Privilege Elevation Vulnerability

Dell SupportAssist OS Recovery is a Dell USA company that provides a recovery environment that contains tools for diagnosing and resolving problems that may occur before the computer boots into the operating system. A security vulnerability exists in Dell SupportAssist OS Recovery Temporary File...

7.8CVSS6.7AI score0.00146EPSS
SaveExploits0Affected Software1
CNVD
CNVD
•added 2025/08/13 12:00 a.m.•8 views

IBM WebSphere Application Server Liberty Cross-Site Scripting Vulnerability (CNVD-2025-18592)

IBM WebSphere Application Server Liberty is a lightweight Java application server from IBM for rapid development and deployment of cloud-native applications. A stored cross-site scripting XSS vulnerability exists in IBM WebSphere Application Server Liberty versions 17.0.0.3 through 25.0.0.8, whic...

4.8CVSS5.9AI score0.00177EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/13 12:00 a.m.•15 views

NVIDIA Triton Inference Server Stack Overflow Vulnerability

Triton Inference Server is a high-performance inference service engine developed by NVIDIA, designed for AI model deployment in production environments, with support for a variety of frameworks TensorFlow, PyTorch, ONNX, etc. and optimized inference performance for GPUs and CPUs. A stack overflow...

9.8CVSS8AI score0.0188EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/12 12:00 a.m.•10 views

WordPress Exclusive Addons For Elementor Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress Exclusive Addons For Elementor, which stems from insufficient input cleanup and escaping, and can be exploited by a...

6.4CVSS6.2AI score0.00222EPSS
SaveExploits0References1
Total number of security vulnerabilities131891