Lucene search
K

130931 matches found

CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

Siemens Gridscale X Prepay Information Disclosure Vulnerability

Siemens Gridscale X Prepay is an energy prepayment and customer management system from Siemens, Germany. Siemens Gridscale X Prepay suffers from an information disclosure vulnerability that stems from a distinguishable response, which can be exploited by an attacker to cause user enumeration...

6.9CVSS6.3AI score0.00378EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•2 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-00683)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.2AI score0.00186EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•4 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-00686)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.2AI score0.00205EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•4 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-00688)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.2AI score0.0017EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•1 views

Rockwell Automation FactoryTalk DataMosaix Private Cloud SQL Injection Vulnerability

Rockwell Automation FactoryTalk DataMosaix Private Cloud is an industrial data platform product from Rockwell Automation USA. A SQL injection vulnerability exists in Rockwell Automation FactoryTalk DataMosaix Private Cloud, which can be exploited by an attacker to perform sensitive database...

8.7CVSS5.9AI score0.004EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

Adobe DNG Software Development Kit (SDK) Denial of Service Vulnerability

Adobe DNG Software Development Kit SDK is a software development kit from the American company Audobee Adobe. A denial of service vulnerability exists in Adobe DNG Software Development Kit SDK, which can be exploited by attackers to cause a denial of service...

5.5CVSS5.9AI score0.00141EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-0013442)

Adobe Experience Manager is an enterprise-class content management solution from Adobe. A cross-site scripting vulnerability exists in Adobe Experience Manager, which stems from a stored cross-site scripting vulnerability in form fields, for which no detailed vulnerability details are currently...

5.4CVSS6.1AI score0.00205EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•4 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-0013046)

Adobe Experience Manager is an enterprise-class content management solution from Adobe. Adobe Experience Manager suffers from a cross-site scripting vulnerability that stems from a DOM-based cross-site scripting vulnerability, for which no detailed vulnerability details have been provided...

9.3CVSS6.4AI score0.00533EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

Siemens RUGGEDCOM ROX II Injection Vulnerability

Siemens RUGGEDCOM ROX II is an operating system for industrial applications from Siemens, Germany. Siemens RUGGEDCOM ROX II suffers from an injection vulnerability that can be exploited by an attacker to gain root privileges...

8.8CVSS7.7AI score0.00457EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

Adobe ColdFusion Input Validation Improperity Vulnerability (CNVD-2026-0494539)

Adobe ColdFusion is a dynamic Web server platform and application development framework maintained by Adobe for rapidly building and deploying data-driven dynamic Web sites, Web applications, and enterprise-class services. An improper input validation vulnerability exists in Adobe ColdFusion, whi...

8.4CVSS6.1AI score0.037EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•2 views

Adobe ColdFusion XML External Entity References Improperly Restricted Vulnerability (CNVD-2026-0494441)

Adobe ColdFusion is a dynamic Web server platform and application development framework maintained by Adobe for rapidly building and deploying data-driven dynamic Web sites, Web applications, and enterprise-class services. Adobe ColdFusion suffers from an improperly restricted XML external entity...

8.6CVSS6AI score0.00466EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•4 views

Adobe ColdFusion Improper Input Validation Vulnerability

Adobe ColdFusion is a dynamic Web server platform and application development framework maintained by Adobe for rapidly building and deploying data-driven dynamic Web sites, Web applications, and enterprise-class services. An improper input validation vulnerability exists in Adobe ColdFusion, whi...

6.2CVSS6AI score0.00637EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•2 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-0493967)

Adobe Experience Manager is enterprise-grade content management software CMS from Adobe for building, managing, and deploying digital experiences such as websites, mobile apps, digital assets, and forms. Adobe Experience Manager suffers from a cross-site scripting vulnerability that stems from a...

9.3CVSS5.8AI score0.00396EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•2 views

Adobe ColdFusion Improper Access Control Vulnerability

Adobe ColdFusion is a dynamic Web server platform and application development framework maintained by Adobe for rapidly building and deploying data-driven dynamic Web sites, Web applications, and enterprise-class services. An improper access control vulnerability exists in Adobe ColdFusion, which...

5.6CVSS5.9AI score0.00106EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•4 views

Adobe ColdFusion Credential Protection Insufficiency Vulnerability

Adobe ColdFusion is a dynamic Web server platform and application development framework maintained by Adobe for rapidly building and deploying data-driven dynamic Web sites, Web applications, and enterprise-class services. Adobe ColdFusion suffers from an insufficiently protected credentials...

5.3CVSS5.9AI score0.00322EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•2 views

Siemens RUGGEDCOM ROX II Injection Vulnerability (CNVD-2026-00019)

Siemens RUGGEDCOM ROX II is an operating system for industrial applications from Siemens, Germany. Siemens RUGGEDCOM ROX II suffers from an injection vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

8.6CVSS7.7AI score0.00574EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

Siemens RUGGEDCOM ROX II Injection Vulnerability (CNVD-2026-00020)

Siemens RUGGEDCOM ROX II is an operating system for industrial applications from Siemens, Germany. Siemens RUGGEDCOM ROX II suffers from an injection vulnerability that stems from insufficient validation of SCEP client fields, which can be exploited by an attacker to cause execution of arbitrary...

8.6CVSS7.7AI score0.00367EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•4 views

Siemens RUGGEDCOM ROX II Injection Vulnerability (CNVD-2026-00018)

Siemens RUGGEDCOM ROX II is an operating system for industrial applications from Siemens, Germany. Siemens RUGGEDCOM ROX II suffers from an injection vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

7.5CVSS7.7AI score0.00574EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

Siemens Gridscale X Prepay Security Bypass Vulnerability

Siemens Gridscale X Prepay is an energy prepayment and customer management system from Siemens, Germany. A security bypass vulnerability exists in Siemens Gridscale X Prepay, which stems from authentication token replay, and can be exploited by an attacker to cause session hijacking...

6.3CVSS7.1AI score0.00259EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•2 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-0012849)

Adobe Experience Manager is an enterprise-class content management solution from Adobe. A cross-site scripting vulnerability exists in Adobe Experience Manager, which stems from a stored cross-site scripting vulnerability in form fields, for which no detailed vulnerability details are currently...

5.4CVSS6.1AI score0.00205EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-0012948)

Adobe Experience Manager is an enterprise-class content management solution from Adobe. Adobe Experience Manager suffers from a cross-site scripting vulnerability that originates from a low-privilege attacker who can inject malicious script into form fields, no details of the vulnerability are...

5.4CVSS6.2AI score0.00205EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-0013145)

Adobe Experience Manager is an enterprise-class content management solution from Adobe. A cross-site scripting vulnerability exists in Adobe Experience Manager that originates in a form field, and no details of the vulnerability are provided at this time...

5.4CVSS6.2AI score0.00167EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•4 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-0013244)

Adobe Experience Manager is an enterprise-class content management solution from Adobe. Adobe Experience Manager suffers from a cross-site scripting vulnerability that originates from a low-privilege attacker who can inject malicious script into form fields, no details of the vulnerability are...

5.4CVSS6.2AI score0.00205EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•1 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-0013343)

Adobe Experience Manager is an enterprise-class content management solution from Adobe. Adobe Experience Manager suffers from a cross-site scripting vulnerability that originates from a low-privilege attacker who can inject malicious script into form fields, no details of the vulnerability are...

5.4CVSS6.2AI score0.00205EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-00684)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.2AI score0.0017EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•6 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-00687)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.2AI score0.0017EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•2 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-00690)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.2AI score0.00167EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•4 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-00691)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.2AI score0.00205EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

Employee Profile Management System edit_personnel.php File SQL Injection Vulnerability

Employee Profile Management System is an employee profile management system. The Employee Profile Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter perid in the file editpersonnel.php. An...

9.8CVSS8.3AI score0.00326EPSS
Exploits1References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•4 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-00678)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6AI score0.00205EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•2 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-00679)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6AI score0.00205EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•2 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-00681)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.2AI score0.00205EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•2 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-00682)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.2AI score0.00167EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

AzeoTech DAQFactory Use After Release Vulnerability

AzeoTech DAQFactory is a data acquisition and monitoring software developed by AzeoTech, Inc. and commonly used in industrial automation. AzeoTech DAQFactory suffers from a release-after-use vulnerability that originates from a release-after-reuse vulnerability in the parsing of a specially craft...

7.3CVSS7.3AI score0.00193EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•2 views

AzeoTech DAQFactory Memory Corruption Vulnerability

AzeoTech DAQFactory is a data acquisition and monitoring software developed by AzeoTech, Inc. and commonly used in industrial automation. AzeoTech DAQFactory suffers from a memory corruption vulnerability that exists when parsing a specially crafted .ctl file and can be exploited by an attacker t...

7.3CVSS7.6AI score0.00022EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•4 views

AzeoTech DAQFactory Buffer Overflow Vulnerability

AzeoTech DAQFactory is a data acquisition and monitoring software developed by AzeoTech, Inc. and commonly used in industrial automation. AzeoTech DAQFactory suffers from a buffer overflow vulnerability that originates from accessing an uninitialized pointer and can be exploited by an attacker to...

8.4CVSS7.9AI score0.00242EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•2 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2025-30922)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6AI score0.00205EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•2 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2025-30923)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.9AI score0.00167EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•2 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2025-30924)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.1AI score0.00224EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2025-30926)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.2AI score0.00167EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•2 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2025-30929)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.2AI score0.00205EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•4 views

Adobe Experience Manager Cross-Site Scripting Vulnerability

Adobe Experience Manager is an enterprise-class content management solution from Adobe. Adobe Experience Manager suffers from a cross-site scripting vulnerability that stems from a DOM-based cross-site scripting vulnerability, for which no detailed vulnerability details have been provided...

5.4CVSS6.4AI score0.0017EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-0494065)

Adobe Experience Manager is enterprise-grade content management software CMS from Adobe for building, managing, and deploying digital experiences such as websites, mobile apps, digital assets, and forms. Adobe Experience Manager suffers from a cross-site scripting vulnerability that stems from a...

9.3CVSS5.8AI score0.00698EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•4 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2026-0013541)

Adobe Experience Manager is an enterprise-class content management solution from Adobe. A cross-site scripting vulnerability exists in Adobe Experience Manager, which stems from a stored cross-site scripting vulnerability in form fields, for which no detailed vulnerability details are currently...

5.4CVSS6.1AI score0.00205EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

Rockwell Automation 432ES-IG3 Series A Denial of Service Vulnerability

The Rockwell Automation 432ES-IG3 Series A is a safety I/O module from Rockwell Automation. A denial of service vulnerability exists in the Rockwell Automation 432ES-IG3 Series A, which can be exploited by an attacker to cause a denial of service...

8.7CVSS5.9AI score0.00314EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

Siemens RUGGEDCOM ROX II Command Injection Vulnerability (CNVD-2026-00016)

Siemens RUGGEDCOM ROX II is an operating system for industrial applications from Siemens, Germany. Siemens RUGGEDCOM ROX II suffers from a command injection vulnerability that is caused by insufficient authentication during the installation and loading of certain configuration files. An attacker...

8.6CVSS8.5AI score0.00466EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•2 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2025-30928)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.2AI score0.00205EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•4 views

Adobe Experience Manager cross-site scripting hole (CNVD-2026-00685)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.3AI score0.00167EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•3 views

AzeoTech DAQFactory Stack Buffer Overflow Vulnerability

AzeoTech DAQFactory is a data acquisition and monitoring software developed by AzeoTech, Inc. and commonly used in industrial automation. AzeoTech DAQFactory suffers from a stack buffer overflow vulnerability that originates from a stack buffer overflow when parsing a specially crafted .ctl file,...

7.3CVSS7.7AI score0.00022EPSS
Exploits0References1
CNVD
CNVD
•added 2025/12/15 12:0 a.m.•5 views

Adobe ColdFusion XML External Entity References Improperly Restricted Vulnerability

Adobe ColdFusion is a dynamic Web server platform and application development framework maintained by Adobe for rapidly building and deploying data-driven dynamic Web sites, Web applications, and enterprise-class services. Adobe ColdFusion suffers from an improperly restricted XML external entity...

6.2CVSS6AI score0.00413EPSS
Exploits0References1
Total number of security vulnerabilities130931