Lucene search
K

130931 matches found

CNVD
CNVD
•added 2026/04/20 12:0 a.m.•8 views

PraisonAI OS Command Injection Vulnerability (CNVD-2026-18145)

PraisonAI is a low-code multi-intelligent body collaboration framework. PraisonAI suffers from an operating system command injection vulnerability that stems from the fact that SubprocessSandbox relies on string pattern matching to block dangerous commands in all modes and the block list does not...

10CVSS5.5AI score0.00368EPSS
Exploits1
CNVD
CNVD
•added 2026/04/20 12:0 a.m.•3 views

PraisonAI SQL Injection Vulnerability

PraisonAI is a low-code multi-intelligent body collaboration framework. PraisonAI suffers from a SQL injection vulnerability that stems from the getalluserthreads function constructing raw SQL queries using unescaped thread IDs, which can be exploited by an attacker to cause SQL injection and gai...

9.8CVSS5.7AI score0.00533EPSS
Exploits1
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•1 views

Google Chrome PDFium Component Heap Buffer Overflow Vulnerability

Google Chrome is a web browser from Google, an American company. A heap buffer overflow vulnerability exists in the PDFium component of Google Chrome, which can be exploited by an attacker to execute arbitrary code in the sandbox via specially crafted PDF files...

8.3CVSS6.3AI score0.0031EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•3 views

Google Chrome Video Component Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Video component, which can be exploited by an attacker to perform out-of-bounds memory access via specially crafted HTML pages...

8.8CVSS5.3AI score0.00252EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•2 views

Google Chrome Codecs Component Memory Misreference Vulnerability (CNVD-2026-17817)

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Codecs component, which can be exploited by an attacker to execute arbitrary code in a sandbox via specially crafted HTML pages...

8.8CVSS6AI score0.00334EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•2 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17656)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability caused by incorrect bounds checking of parameters in the /xwglref.asp endpoint, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6.1AI score0.00492EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•1 views

Google Chrome Permissions Component Memory Misreference Vulnerability

Google Chrome on Android is an American web browser for Android by Google. A memory misreference vulnerability exists in the Google Chrome Permissions component, which can be exploited by an attacker to execute arbitrary code via specially crafted HTML pages...

8.8CVSS6AI score0.00323EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•8 views

Google Chrome Payments Memory Misreference Vulnerability

Google Chrome is a web browser developed by Google. A memory misreference vulnerability exists in Google Chrome. The vulnerability stems from a failure of the Payments component for Android to properly handle memory objects, which can be exploited by an attacker to execute arbitrary code by...

7.5CVSS6.2AI score0.00293EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•0 views

Cisco Webex Contact Center Desktop Agent Cross-Site Scripting Vulnerability

Cisco Webex Contact Center is a cloud contact center solution for customer service and call center management. A cross-site scripting vulnerability exists in Cisco Webex Contact Center. The vulnerability stems from a failure of the Desktop Agent feature to properly handle HTML and scripted conten...

6.1CVSS5.6AI score0.00222EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•1 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17657)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability is caused due to incorrect parameter boundary checking in the /yyxzdlink.asp endpoint and can be exploited by an attacker to cause a denial of servi...

7.5CVSS6AI score0.00412EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•3 views

D-Link DI-8003 and DI-8003G Buffer Overflow Vulnerability

The D-Link DI-8003 and DI-8003G are both wireless routers from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003 and DI-8003G. The vulnerability is caused due to incorrect boundary checking in the wanping.asp script and can be exploited by an attacker to cause a...

7.5CVSS6AI score0.00412EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•2 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17655)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability caused by incorrect bounds checking of parameters in the /xwglref.asp endpoint, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6.1AI score0.00492EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•1 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17654)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability caused by incorrect boundary checking of the httplanport parameter in the /webgl.asp endpoint, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6.1AI score0.00408EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•1 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17652)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability caused by incorrect boundary checking in webpost.aspscript, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6.1AI score0.00599EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•5 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17650)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability is caused due to incorrect boundary checking in the usergroup.asp script and can be exploited by an attacker to cause a denial of service...

7.5CVSS6AI score0.00605EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•2 views

Cisco Unity Connection Web Management Interface SQL Injection Vulnerability

Cisco Unity Connection is a unified communications messaging platform that focuses on providing voicemail and messaging capabilities. An SQL injection vulnerability exists in Cisco Unity Connection. The vulnerability stems from insufficient validation of user-supplied input and can be exploited b...

4.3CVSS5.8AI score0.00228EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•1 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17638)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability that originates from improper handling of the pid parameter in the /trace.asp endpoint, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6.1AI score0.00516EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•1 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17643)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability that originates from improper handling of the name parameter in the /urlgroup.asp endpoint, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6.1AI score0.00516EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•0 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17648)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability that originates from improper handling of multiple parameters in the /urlrule.asp endpoint, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6.1AI score0.00605EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•4 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17634)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability that originates from improper validation of the id parameter in the /thdmember.asp endpoint, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6.1AI score0.00516EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•2 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17635)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability caused by incorrect boundary checking in the timegroup.asp script, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6.1AI score0.00516EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•1 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17633)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability is caused due to incorrect boundary checking in the thdgroup.asp script and can be exploited by an attacker to cause a denial of service...

7.5CVSS6AI score0.00516EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•2 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17632)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability caused by incorrect boundary checking in the tggl.asp script, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6.1AI score0.00516EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•2 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17631)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability is caused due to incorrect boundary checking in the shutset.asp script and can be exploited by an attacker to cause a denial of service...

7.5CVSS6AI score0.00516EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•4 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17630)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability is caused due to improper handling of the id parameter in the /saveparmusb.asp endpoint and can be exploited by an attacker to cause a denial of...

7.5CVSS6AI score0.00467EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•2 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17627)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability is caused due to incorrect boundary checking in the qostypeasp.asp script and can be exploited by an attacker to cause a denial of service...

7.5CVSS6AI score0.00516EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•4 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17623)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability that stems from the s parameter in the pppoelistopt.asp endpoint failing to properly validate the length size of the input data, which can be exploited by an attack...

7.5CVSS6.1AI score0.00516EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•0 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17537)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability stems from the name parameter in the /urlmember.asp endpoint failing to properly validate the length and size of the input data, which can be...

7.5CVSS6AI score0.00516EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•0 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17622)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability that originates from the qj.asp endpoint failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a denial of...

7.5CVSS6.1AI score0.00516EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•7 views

Google Chrome Media Component Out-of-Bounds Read Vulnerability

Google Chrome is a web browser developed by Google. An out-of-bounds read vulnerability exists in the Media component of Google Chrome. The vulnerability stems from a failure of the Media component to properly handle certain UI gestures and can be exploited by an attacker to execute arbitrary cod...

7.5CVSS6.2AI score0.00293EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•6 views

Google Chrome Viz Component Memory Misreference Vulnerability

Google Chrome is a web browser developed by Google. A memory misreference vulnerability exists in the Viz component of Google Chrome. The vulnerability stems from a failure of the Viz component to properly handle memory objects, which can be exploited by an attacker to potentially sandbox escape ...

8.3CVSS5.8AI score0.00251EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•5 views

Google Chrome GPU out-of-bounds write vulnerability (CNVD-2026-19171)

Google Chrome is a web browser developed by Google. Google Chrome suffers from a GPU out-of-bounds write vulnerability. The vulnerability stems from a failure of the GPU component to properly handle boundary checks and can be exploited by an attacker to achieve sandbox escape via specially crafte...

8.3CVSS5.8AI score0.00251EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•5 views

Google Chrome XR Memory Misreference Vulnerability

Google Chrome is a web browser developed by Google. Google Chrome suffers from a memory misreference vulnerability. The vulnerability stems from a memory object misreference in the XR component of the Android version and can be exploited by an attacker to perform an out-of-bounds memory read via ...

8.8CVSS5.8AI score0.00269EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•7 views

Google Chrome V8 Type Obfuscation Vulnerability (CNVD-2026-19167)

Google Chrome is a web browser developed by Google with a V8 engine for executing JavaScript code. A type confusion vulnerability exists in Google Chrome's V8 engine. The vulnerability stems from the engine's failure to properly handle object types and can be exploited by an attacker to perform...

8.8CVSS5.8AI score0.00275EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•4 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-19420)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability caused by incorrect boundary checking in the wanlinedetection.asp script, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6AI score0.00412EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•1 views

Google Chrome on Windows Uninitialized Usage Vulnerability

Google Chrome is a web browser from Google, an American company. An uninitialized use vulnerability exists in Google Chrome on Windows, which can be exploited by an attacker to perform a sandbox escape via a specially crafted HTML page...

8.3CVSS5.3AI score0.00273EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•1 views

Unspecified Vulnerability in Google Chrome (CNVD-2026-17821)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security vulnerability that stems from insufficient policy enforcement in the Passwords component, which can be exploited by an attacker to disclose cross-domain data via specially crafted HTML pages...

3.1CVSS5.2AI score0.00219EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•4 views

Google Chrome FileSystem Component Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome FileSystem component, which can be exploited by an attacker to leverage object corruption via specially crafted HTML pages...

8.8CVSS5.5AI score0.00253EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•1 views

Google Chrome Skia Component Out-of-Bounds Read Vulnerability

Google Chrome is a web browser from Google, an American company. An out-of-bounds read vulnerability exists in the Google Chrome Skia component, which can be exploited by attackers to obtain sensitive information...

6.5CVSS5.3AI score0.00234EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•1 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17698)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability is caused due to incorrect boundary checking in the user.asp script and can be exploited by an attacker to cause a denial of service...

7.5CVSS5.7AI score0.00516EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•2 views

IBM Tivoli Netcool Impact Log Information Disclosure Vulnerability

IBM Tivoli Netcool Impact is a suite of network management software from International Business Machines IBM. The software has the ability to automate business-critical functions and provide a platform that provides unified access to real-time data, events and indicators. IBM Tivoli Netcool Impac...

8.4CVSS5.4AI score0.00116EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•1 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17696)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability stems from improper handling of the name parameter in the /usbpaswd.asp endpoint, which can be exploited by an attacker to cause a denial of service...

7.5CVSS5.7AI score0.00516EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•1 views

Apache Airflow Security Bypass Vulnerability

Apache Airflow is the United States Apache Apache Foundation's set of open source platform with the creation, management and monitoring of workflow functions. The platform is scalable and dynamic monitoring and other features. Apache Airflow has a security bypass vulnerability that stems from...

7.5CVSS5.3AI score0.00439EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•3 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17624)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability caused by incorrect boundary checking in the qos.asp script, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6.1AI score0.00516EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•3 views

Google Chrome Codecs Component Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Codecs component, which can be exploited by an attacker to gain out-of-bounds memory access via specially crafted video files...

6.3CVSS5.3AI score0.00221EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•7 views

IBM Langflow Desktop Deserialization Vulnerability

IBM Langflow Desktop is an AI process orchestration desktop application from International Business Machines IBM. A deserialization vulnerability exists in IBM Langflow Desktop versions 1.8.2 and earlier. The vulnerability stems from an insecure default setting that allows deserialization of...

8.8CVSS6.2AI score0.00466EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•1 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17628)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability is caused due to incorrect boundary checking in the router.asp script and can be exploited by an attacker to cause a denial of service...

7.5CVSS6AI score0.00516EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•6 views

Google Chrome Cast Memory Misreference Vulnerability

Google Chrome is a web browser developed by Google. Google Chrome suffers from a memory misreference vulnerability. The vulnerability stems from a failure of the Cast component to properly handle memory objects and can be exploited by an attacker to execute arbitrary code via a specially crafted...

8.8CVSS6.2AI score0.00323EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•1 views

Google Chrome Access Control Error Vulnerability (CNVD-2026-17820)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an Access Control Error vulnerability that can be exploited by attackers to disclose cross-origin data via specially crafted HTML pages...

3.1CVSS5.2AI score0.00207EPSS
Exploits0
CNVD
CNVD
•added 2026/04/16 12:0 a.m.•8 views

Google Chrome Dawn Component Memory Misreference Vulnerability

Google Chrome is a web browser developed by Google with a Dawn component to handle WebGPU related functions. A memory misreference vulnerability exists in the Dawn component of Google Chrome. The vulnerability stems from improper management of the lifecycle of specific objects in the Dawn compone...

8.3CVSS5.8AI score0.00251EPSS
Exploits0
Total number of security vulnerabilities130931