Lucene search
K

130931 matches found

CNVD
CNVD
•added 2025/09/18 12:0 a.m.•1 views

Unspecified Vulnerability in Multiple Apple Products (CNVD-2025-22677)

Apple iOS is an operating system developed for mobile devices.Apple watchOS is a smartwatch operating system.Apple macOS is a specialized operating system developed for Mac computers. A security vulnerability exists in a number of Apple products that stems from improper memory handling when...

9.8CVSS6.5AI score0.00718EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•3 views

JeeWMS Cross-Site Scripting Vulnerability

JeeWMS is a JAVA-based warehouse management system . A cross-site scripting vulnerability exists in JeeWMS 3.7 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data by the logController.do component, and can be exploited by an attacker to disclo...

6.1CVSS6AI score0.00305EPSS
Exploits1References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•4 views

Adobe Substance3D Stager Buffer Overflow Vulnerability

Adobe Substance3D Stager is a set and rendering software for 3D scenes from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance3D Stager 3.1.3 and prior versions, which can be exploited by an attacker to cause code execution in the current user environment...

7.8CVSS7.2AI score0.0021EPSS
Exploits0Affected Software1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•3 views

BMC Control-M Memory Corruption Vulnerability

BMC Control-M is an application from BMC Corporation. Simplifies application and data workflow orchestration locally or as a service. A memory corruption vulnerability exists in BMC Control-M that stems from misconfiguration of SSL/TLS communication, no details of the vulnerability are provided a...

8.9CVSS7.1AI score0.00343EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•1 views

Unspecified Vulnerability in BMC Control-M (CNVD-2025-22541)

BMC Control-M is an application from BMC Corporation. Simplifies application and data workflow orchestration locally or as a service. A security vulnerability exists in BMC Control-M/Agent, which stems from improper ordering of AUTHORIZEDCTMIP validation, and can be exploited by an attacker to...

6.9CVSS6.9AI score0.00362EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•1 views

Unspecified Vulnerability in BMC Control-M (CNVD-2025-22540)

BMC Control-M is an application from BMC Corporation. Simplifies application and data workflow orchestration locally or as a service. A security vulnerability exists in BMC Control-M that stems from the default use of the kdb or PKCS12 keystore with a known password, which can be exploited by an...

5.7CVSS6.8AI score0.00126EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•1 views

BMC Control-M Stack Buffer Overflow Vulnerability (CNVD-2025-22539)

BMC Control-M is an application from BMC Corporation. Simplifies application and data workflow orchestration locally or as a service. BMC Control-M suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to cause a local elevation of privilege...

9.3CVSS7.1AI score0.0015EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•3 views

Unspecified Vulnerability in BMC Control-M

BMC Control-M is an application from BMC Corporation. Simplifies application and data workflow orchestration locally or as a service. A security vulnerability exists in BMC Control-M that originates when an email address in a client certificate stops validating when it encounters a NULL byte, whi...

10CVSS6.8AI score0.00271EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•2 views

Unspecified Vulnerability in Multiple Apple Products (CNVD-2025-22687)

Apple iOS is an operating system developed for mobile devices.Apple watchOS is a smartwatch operating system.Apple macOS is a specialized operating system developed for Mac computers. A security vulnerability exists in a number of Apple products that stems from a permissions issue that can be...

8.8CVSS6.5AI score0.00288EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•1 views

Unspecified Vulnerability in Multiple Apple Products (CNVD-2025-22684)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.Apple iOS is an operating system for mobile devices.Apple tvOS is an operating system for smart TVs.Apple tvOS is an operating system...

5.5CVSS6.4AI score0.00213EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•3 views

Unspecified Vulnerability in Multiple Apple Products (CNVD-2025-22683)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.Apple watchOS is a smart watch operating system.Apple watchOS is a smart watch operating system.Apple watchOS is a smart watch operating...

3.3CVSS6.5AI score0.00301EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•2 views

Denial of Service Vulnerability in Multiple Apple Products (CNVD-2025-22675)

Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems.Apple iOS is a set of operating systems developed for mobile devices.Apple macOS is a set of specialized operating systems developed specifically for Mac computers.Apple Safari is a we...

4.3CVSS6.3AI score0.00717EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•3 views

Unspecified Vulnerability in Multiple Apple Products (CNVD-2025-22674)

Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems.Apple iOS is a suite of operating systems developed for mobile devices.Apple iPadOS is a suite of operating systems for the iPad tablet computer. A security vulnerability exists in...

5.4CVSS6.5AI score0.00484EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•3 views

Apple macOS Tahoe Privilege Mismanagement Vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

5.5CVSS6.6AI score0.00183EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•2 views

Apple macOS Tahoe Permission Check Insufficiency Vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

6.2CVSS6.6AI score0.00187EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•3 views

Apple macOS Tahoe Out-of-Bounds Read Vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

3.3CVSS6.6AI score0.00367EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•3 views

Apple macOS Tahoe Permission Issues Vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

5.5CVSS6.5AI score0.00183EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•2 views

Unspecified vulnerability in Apple macOS Tahoe (CNVD-2025-22390)

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

7.5CVSS6.6AI score0.00444EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•3 views

Apple macOS Tahoe Symbolic Link Mishandling Vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

5.5CVSS6.6AI score0.00177EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•3 views

Apple macOS Tahoe Memory Corruption Vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

7.1CVSS6.7AI score0.00211EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•2 views

Apple macOS Tahoe Permission Issue Vulnerability (CNVD-2025-22598)

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

7.8CVSS6.8AI score0.00321EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•2 views

Apple macOS Tahoe Permission Issues Vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

7.8CVSS6.7AI score0.00181EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•4 views

Apple macOS Tahoe Permission Issues Vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

5.1CVSS6.6AI score0.00183EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•2 views

Apple macOS Tahoe has an unspecified vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

7.8CVSS6.6AI score0.00321EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•2 views

Apple macOS Tahoe Underchecked Vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

4CVSS6.5AI score0.00177EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•2 views

Apple macOS Tahoe Permission Issues Vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

3.3CVSS6.6AI score0.00154EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•4 views

Apple macOS Tahoe Sandboxing Insufficient Restrictions Vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

5.5CVSS6.6AI score0.00183EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•2 views

Apple macOS Tahoe state mismanagement vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

7.5CVSS6.6AI score0.00373EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•1 views

Online Library Management System adminlogin.php Component Elevation of Privilege Vulnerability

Online Library Management System is an online library management system. An elevation of privilege vulnerability exists in the Online Library Management System, which is caused by a flaw in the adminlogin.php component and the Login function, and can be exploited by an attacker to cause an...

9.8CVSS7.1AI score0.00539EPSS
Exploits1References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•1 views

Online Library Management System Elevation of Privilege Vulnerability

Online Library Management System is an online library management system. An elevation of privilege vulnerability exists in Online Library Management System, which stems from a mismanagement of privileges in index.php and can be exploited by an attacker to cause an elevation of privilege...

9.8CVSS7.2AI score0.00527EPSS
Exploits1References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•2 views

Beauty Parlour Management System admin/all-appointment.php File SQL Injection Vulnerability

Beauty Parlour Management System is an application system. Beauty Parlour Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter delid in the file /admin/all-appointment.php. An attacker can...

9.8CVSS7.9AI score0.00387EPSS
Exploits1References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•2 views

TOTOLINK X6000R sub_417D74 function command injection vulnerability

TOTOLINK X6000R is a wireless router supporting Wi-Fi 6 technology from China's Gion Electronics TOTOLINK, focusing on high concurrent connections and dual-band transmission capabilities. The TOTOLINK X6000R suffers from a command injection vulnerability that stems from the failure to properly...

9.8CVSS7.8AI score0.04374EPSS
Exploits1References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•4 views

ZTE T5400 License Issue Vulnerability

The ZTE T5400 is a router from China's ZTE Corporation ZTE. The ZTE T5400 suffers from an authorization issue vulnerability, which stems from improper control of web module interface privileges, and can be exploited by an attacker to obtain sensitive information...

5.7CVSS5.7AI score0.00249EPSS
Exploits0
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•5 views

Unspecified vulnerability in Apple macOS Tahoe (CNVD-2025-22385)

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

4CVSS7AI score0.00177EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•2 views

Denial of Service Vulnerability in Multiple Apple Products (CNVD-2025-22688)

Apple macOS Sequoia and others are an operating system of the American company Apple. A security vulnerability exists in several Apple products that stems from insufficient authentication and can be exploited by an attacker to cause a denial of service...

5.5CVSS6.7AI score0.00216EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•2 views

Computer Laboratory System File Upload Vulnerability

Computer Laboratory System is a computer laboratory system. A file upload vulnerability exists in Computer Laboratory System that stems from the file upload feature not restricting file types, no details of the vulnerability are available at this time...

7.3CVSS7AI score0.00312EPSS
Exploits1References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•2 views

Apple Xcode Path Mishandling Vulnerability

Apple Xcode is an integrated development tool that runs on the operating system Mac OS X. It is used for the development of the Mac OS X software. Apple Xcode suffers from a path mishandling vulnerability that can be exploited by an attacker to cause a process crash...

4CVSS6.6AI score0.00321EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•1 views

Code execution vulnerability in multiple Mozilla products (CNVD-2025-24638)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A code...

7.1CVSS7.8AI score0.00258EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•4 views

Apple Xcode Sandbox Check Insufficiency Vulnerability

Apple Xcode is an integrated development tool that runs on the operating system Mac OS X. It is used for the development of the Mac OS X software. Apple Xcode suffers from an insufficient sandbox checking vulnerability that can be exploited by an attacker to read and write files outside the sandb...

7.1CVSS6.7AI score0.00197EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•6 views

Unspecified Vulnerability in Multiple Apple Products (CNVD-2025-22673)

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Tahoe is an operating system.... A security vulnerability exists in several Apple products that stems from improper handling of sensitive information and can be exploited...

5.5CVSS6.3AI score0.00215EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•2 views

Apple macOS Tahoe sandbox under-limit vulnerability (CNVD-2025-22593)

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

5.5CVSS6.6AI score0.00178EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•9 views

Code execution vulnerability in multiple Mozilla products (CNVD-2025-26891)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A code...

8.8CVSS7.9AI score0.00687EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•3 views

Apple macOS Sonoma Logic Issue Vulnerability

Apple macOS Sonoma is an operating system launched on June 5, 2023 by Apple. Apple macOS Sonoma has a logic problem vulnerability that can be exploited by an attacker to cause an application to access sensitive user data...

5.5CVSS6.5AI score0.00211EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•4 views

Mattermost Input Validation Error Vulnerability (CNVD-2025-22091)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an input validation error vulnerability that stems from an unvalidated redirectto parameter, which can be exploited by an attacker to cause theft of a user's cookie via a...

7.6CVSS6.4AI score0.00161EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•4 views

Apple macOS Tahoe Boundary Check Insufficiency Vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

5.5CVSS6.6AI score0.00197EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•3 views

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2025-24635)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

7.5CVSS6AI score0.00293EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•5 views

Kubernetes Trust Management Issues Vulnerabilities

Kubernetes K8s is an open source system of Kubernetes open source for automating the deployment, scaling, and management of containerized applications. Kubernetes suffers from a trust management issue vulnerability that stems from the certificate validation logic not properly validating the chain...

6.8CVSS6.5AI score0.00288EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/18 12:0 a.m.•3 views

Apple macOS Tahoe Permission Issue Vulnerability (CNVD-2025-22393)

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

5.5CVSS6.8AI score0.00183EPSS
Exploits0References1
CNVD
CNVD
•added 2025/09/16 12:0 a.m.•4 views

Axios Resource Management Error Vulnerability

Axios is Axios open source a Promise asynchronous programming a solution based on the HTTP client . Axios versions prior to 1.11.0 have a resource management error vulnerability that stems from unrestricted memory allocation when handling data scheme URLs, which can be exploited by an attacker to...

7.5CVSS6.4AI score0.01099EPSS
Exploits1References1
CNVD
CNVD
•added 2025/09/16 12:0 a.m.•9 views

RuoYi License Issue Vulnerability

RuoYi is a backend management system for individual developers in China RuoYi RuoYi. RuoYi 4.8.1 and previous versions of the authorization problem vulnerability, the vulnerability stems from the file / system / role / authUser / cancelAll in the parameter roleId and userIds there is improper...

5.5CVSS5.5AI score0.00338EPSS
Exploits0References1
Total number of security vulnerabilities130931