漏洞标题 Artica Pandora FMS未授权访问(CVE-2020-8497) 漏洞描述 Artica Pandora FMS是西班牙Artica公司的一套监控系统，在 Artica Pandora FMS 到 7.42中，未经身份验证的攻击者可以读取聊天...

漏洞标题 CVE-2022-40734: UniSharp aka Laravel Filemanager v2.5.1 - Directory Traversal 漏洞描述 UniSharp laravel-filemanager (aka Laravel Filemanager) through 2.5.1 allows download...

漏洞标题 CVE-2022-32430: Lin CMS Spring Boot - Default JWT Token 漏洞描述 An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information a...

漏洞标题 CVE-2006-6565: FileZilla Server < 0.9.22 - DoS via Wildcard Commands 漏洞描述 FileZilla Server versions prior to 0.9.22 are vulnerable to remote denial of service (cras...

漏洞标题 Atlassian Confluence 远程代码执行漏洞(CVE-2021-26084) 漏洞描述 Atlassian 官方发布了Confluence Server Webwork OGNL注入漏洞（CVE-2021-26084）的安全公告，远程攻击者在经过身份...

漏洞标题 CVE-2014-3704: Drupal SQL Injection 漏洞描述 The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepar...

漏洞标题 CVE-2021-46073: Vehicle Service Management System 1.0 - Cross Site Scripting 漏洞描述 Vehicle Service Management System 1.0 contains a cross-site scripting vulnerability v...

漏洞标题 CVE-2022-22954: VMware Workspace ONE Access - Server-Side Template Injection 漏洞描述 VMware Workspace ONE Access is susceptible to a remote code execution vulnerability d...

漏洞标题 CVE-2023-39002: OPNsense - Cross-Site Scripting 漏洞描述 A cross-site scripting (XSS) vulnerability in the act parameter of system_certmanager.php in OPNsense before 23.7 ...

漏洞标题 CVE-2023-34659: JeecgBoot 3.5.0 - SQL Injection 漏洞描述 jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show in...

漏洞标题 CVE-2021-39211: GLPI 9.2/<9.5.6 - Information Disclosure 漏洞描述 GLPI 9.2 and prior to 9.5.6 is susceptible to information disclosure via the telemetry endpoint, which...

漏洞标题 CVE-2022-0189: WordPress RSS Aggregator < 4.20 - Authenticated Cross-Site Scripting 漏洞描述 WordPress RSS Aggregator < 4.20 is susceptible to cross-site scripting. ...

漏洞标题 CVE-2020-14864: Oracle Fusion - Directory Traversal/Local File Inclusion 漏洞描述 Oracle Business Intelligence Enterprise Edition 5.5.0.0.0, 12.2.1.3.0, and 12.2.1.4.0 are...

漏洞标题 CVE-2025-54782: NestJS DevTools Integration - Remote Code Execution 漏洞描述 Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 ...

漏洞标题 CVE-2024-24112: Exrick XMall 开源商城 SQL注入漏洞 漏洞描述 xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter. fofa: app="X...

漏洞标题 CVE-2019-25213: WordPress Advanced Access Manager - Path Traversal 漏洞描述 The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary Fil...