快速搜索提示：
按厂商查询（如：microsoft）|
按产品查询（如：microsoft sql_server）
漏洞列表 353262
| CVE ID | 标题 | 严重程度 | CVSS | 发布时间 | 受影响产品 | 数据源 | 操作 |
|---|---|---|---|---|---|---|---|
| CVE-2025-65019 |
Astro Cloudflare adapter has a Stored Cross Site Scripting vulnerability in /_image endpoint
|
MEDIUM | 5.4 | 2025-11-19 |
withastro astro
astro astro
|
CVE NVD | |
| CVE-2025-64757 |
Astro Development Server is Vulnerable to Arbitrary Local File Read
|
LOW | 3.5 | 2025-11-19 |
withastro astro
astro astro
|
CVE NVD | |
| CVE-2025-34335 |
AudioCodes Fax/IVR Appliance <= 2.6.23 Authenticated Command Injection via ActivateLicense.php
|
HIGH | 8.7 | 2025-11-19 |
AudioCodes Limited AudioCodes Fax/IVR Appliance
audiocodes fax_server
+1个
|
CVE NVD | |
| CVE-2025-34334 |
AudioCodes Fax/IVR Appliance <= 2.6.23 Authenticated Command Injection via TestFax.php & LPE
|
HIGH | 8.7 | 2025-11-19 |
AudioCodes Limited AudioCodes Fax/IVR Appliance
audiocodes fax_server
+1个
|
CVE NVD | |
| CVE-2025-34332 |
AudioCodes Fax/IVR Appliance <= 2.6.23 Insecure Service Control Scripts LPE
|
HIGH | 8.5 | 2025-11-19 |
AudioCodes Limited AudioCodes Fax/IVR Appliance
audiocodes fax_server
+1个
|
CVE NVD | |
| CVE-2025-34329 |
AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Backup Upload RCE via ajaxBackupUploadFile.php
|
CRITICAL | 9.3 | 2025-11-19 |
AudioCodes Limited AudioCodes Fax/IVR Appliance
audiocodes fax_server
+1个
|
CVE NVD | |
| CVE-2025-34331 |
AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated File Read via download.php
|
HIGH | 8.7 | 2025-11-19 |
AudioCodes Limited AudioCodes Fax/IVR Appliance
audiocodes fax_server
+1个
|
CVE NVD | |
| CVE-2025-34328 |
AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated File Upload RCE via ajaxScript.php
|
CRITICAL | 9.3 | 2025-11-19 |
AudioCodes Limited AudioCodes Fax/IVR Appliance
audiocodes fax_server
+1个
|
CVE NVD | |
| CVE-2025-34330 |
AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Prompt File Upload via ajaxPromptUploadFile.php
|
MEDIUM | 6.9 | 2025-11-19 |
AudioCodes Limited AudioCodes Fax/IVR Appliance
audiocodes fax_server
+1个
|
CVE NVD | |
| CVE-2025-34333 |
AudioCodes Fax/IVR Appliance <= 2.6.23 World-Writable Webroot LPE
|
HIGH | 8.5 | 2025-11-19 |
AudioCodes Limited AudioCodes Fax/IVR Appliance
audiocodes fax_server
+1个
|
CVE NVD | |
| CVE-2025-34336 |
eGovFramework <= 4.3.1 Unauthenticated File Upload via Web Editor Image Upload Endpoints
|
MEDIUM | 6.9 | 2025-11-19 |
eGovFramework/egovframe-common-components eGovFramework/egovframe-common-components
|
CVE NVD | |
| CVE-2025-34337 |
eGovFramework <= 4.3.1 Unauthenticated Encryption Oracle via Web Editor Image Upload Endpoints
|
HIGH | 8.7 | 2025-11-19 |
eGovFramework/egovframe-common-components eGovFramework/egovframe-common-components
|
CVE NVD | |
| CVE-2025-12766 |
Insecure Direct Object Reference (IDOR) vulnerability in the Management Console of affected versions of BlackBerry AtHoc.
|
MEDIUM | 5.0 | 2025-11-19 |
BlackBerry BlackBerry® AtHoc® (OnPrem)
blackberry athoc
|
CVE NVD | |
| CVE-2025-65022 |
i-Educar Authenticated Time-based SQL Injection in `agenda.php`
|
HIGH | 7.2 | 2025-11-19 |
portabilis i-educar
portabilis i-educar
|
CVE NVD | |
| CVE-2025-65023 |
i-Educar Authenticated Time-based SQL Injection in `funcionario_vinculo_cad.php`
|
HIGH | 7.2 | 2025-11-19 |
portabilis i-educar
portabilis i-educar
|
CVE NVD | |
| CVE-2025-65024 |
i-Educar Authenticated Time-based SQL Injection in `agenda_admin_cad.php`
|
HIGH | 7.2 | 2025-11-19 |
portabilis i-educar
portabilis i-educar
|
CVE NVD | |
| CVE-2025-10703 |
Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Conne...
|
HIGH | 8.6 | 2025-11-19 |
Progress DataDirect Connect for JDBC for Amazon Redshift
Progress DataDirect Connect for JDBC for Apache Cassandra
+30个
|
CVE NVD | |
| CVE-2025-10702 |
Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Conne...
|
HIGH | 8.6 | 2025-11-19 |
Progress DataDirect Connect for JDBC for Amazon Redshift
Progress DataDirect Connect for JDBC for Apache Cassandra
+30个
|
CVE NVD | |
| CVE-2025-13397 |
mrubyc alloc.c mrbc_raw_realloc null pointer dereference
|
MEDIUM | 4.8 | 2025-11-19 |
s-itoc mruby\/c
|
CVE NVD | |
| CVE-2025-13396 |
code-projects Courier Management System add-office.php sql injection
|
MEDIUM | 5.3 | 2025-11-19 |
code-projects Courier Management System
carmelogarcia courier_management_system
|
CVE NVD |