Open Vulnerabilities
331 vulnerabilities related to Open
- PoC2026-08-25CVE-2023-25826: OpenTSDB <= 2.4.1 - Unauthenticated RCE via Gnuplot Injection
- PoC2026-08-16CVE-2026-53976: OpenChamber <1.13.0 - Unauthenticated Arbitrary File Read
- 2026-08-07Open WebUI /api/v1/retrieval/process/web 服务器端请求伪造漏洞（CVE-2026-70485）
- PoC2026-07-09CVE-2026-8383: LearnPress < 4.3.7 - Information Disclosure
- 2026-06-18OpenBullet2 /api/v1/info/server 权限绕过漏洞（CVE-2026-25555）
- 2026-06-18OpenCATS /index.php 默认口令漏洞
- PoC2026-06-17CVE-2026-25555: OpenBullet2 <= 0.3.2 - Authentication Bypass
- PoC2026-06-17CVE-2026-27760: OpenCATS - Command Injection
- PoC2026-06-17CVE-2026-44551: Open WebUI 'LDAP Empty Password' - Authentication Bypass
- PoC2026-06-17CVE-2026-45397: Open WebUI < 0.9.5 - Information Disclosure
- 2026-06-12Open WebUI /api/v1/retrieval/ 信息泄露漏洞（CVE-2026-45397）
- 2026-06-12夜莺开源监控系统 默认口令漏洞
- 2026-06-02Open WebUI存在信息泄露(CVE-2026-45397)
- 2026-05-29openSIS-Classic /ResetUserInfo.php SQL 注入漏洞（CVE-2024-51211）
- PoC2026-05-09CVE-2026-33439: OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization
- PoC2026-05-09unauthenticated-opencode-web: OpenCode Web - Unauthenticated Access
- 2026-05-07OpenCode 存在任意文件读取漏洞
- 2026-05-06OpenCode网页存在未授权访问
- PoC2026-04-30Openfire /getFavicon 服务端请求伪造漏洞（CVE-2019-18394）
- 2026-04-29OpenCode /file/content 文件读取漏洞
- PoC2026-04-17Open WebUI /api/v1/auths/signin 默认口令漏洞
- PoC2026-04-09openproject-default-login: OpenProject - Default Admin Credentials
- PoC2026-04-09opentext-filr-guest-access: OpenText Filr - Guest Access Enabled
- 2026-03-20OpenProject存在默认口令
- PoC2026-02-28OpenMediaVault /rpc.php 默认口令漏洞
- PoC2026-02-04CVE-2026-22812: OpenCode < 1.0.216 - Unauthenticated Remote Code Execution
- 2026-02-03OpenClaw Gateway 存在未授权访问漏洞
- PoC2026-01-27openvpn-as-config-exposure: OpenVPN Access Server - Configuration Exposure
- PoC2026-01-24openlitespeed-default-login: OpenLiteSpeed WebAdmin - Default Login
- PoC2026-01-24opennms-dashboard-exposure: OpenNMS Dashboard - Exposure Detection
- 2026-01-23OpenCode /session 代码执行漏洞（CVE-2026-22812）
- 2026-01-23OpenCode /session 代码执行漏洞（CVE-2026-22812）
- PoC2026-01-16CVE-2023-33960: OpenProject < 12.5.4 - Project Identifiers Exposure
- PoC2026-01-16opencart-error-log: OpenCart Error Log Disclosure
- 2026-01-13OpenCode AI远程命令执行漏洞（CVE-2026-22812）
- PoC2025-12-12CVE-2024-28253: OpenMetaData - SpEL Injection in PUT /api/v1/policies
- 2025-12-02OpenPrinting CUPS get_addr_and_mask 拒绝服务漏洞
- 2025-12-02OpenPrinting CUPS get_addr_and_mask 拒绝服务漏洞
- PoC2025-11-21openwebui-default-login: Open WebUI - Default Login
- 2025-10-30OpenVPN 未授权 命令注入漏洞
- 2025-10-30OpenVPN 未授权 命令注入漏洞
- 2025-10-10OpenSSH ProxyCommand 命令注入漏洞
- 2025-09-16OpenPrinting CUPS 身份验证缺陷漏洞
- 2025-09-01CVE-2019-18394: Openfire Full Read SSRF
- 2025-08-27openSIS v9.1存在路径遍历(CVE-2023-38879)
- 2025-08-25OpenMetadata存在默认账号密码
- 2025-08-25OpenPLC V3存在默认账号密码
- 2025-08-25OpenSearch Dashboard为存在默认口令
- 2025-08-25OpenSearch Dashboard存在未授权访问
- 2025-08-09（CVE-2025-54997）OpenBao特权API操作员通过审计子系统绕过安全限制漏洞
- 2025-08-08OpenOrange Business Framework访问控制错误漏洞（CVE-2024-42048）
- 2025-08-04Richmail 邮件系统openapiservice 存在任意文件上传漏洞
- PoC2025-08-01CVE-2014-0160: OpenSSL Heartbleed Vulnerability
- PoC2025-08-01CVE-2004-1965: Open Bulletin Board (OpenBB) v1.0.6 - Open Redirect/XSS
- PoC2025-08-01CVE-2007-4556: OpenSymphony XWork/Apache Struts2 - Remote Code Execution
- PoC2025-08-01CVE-2008-2398: AppServ Open Project <=2.5.10 - Cross-Site Scripting
- PoC2025-08-01CVE-2012-0991: OpenEMR 4.1 - Local File Inclusion
- PoC2025-08-01CVE-2017-1000028: Oracle GlassFish Server Open Source Edition 4.1 - Local File Inclusion
- PoC2025-08-01CVE-2017-1000029: Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion
- PoC2025-08-01CVE-2017-14135: OpenDreambox 2.0.0 - Remote Code Execution
- PoC2025-08-01CVE-2017-14524: OpenText Documentum Administrator 7.2.0180.0055 - Open Redirect
- PoC2025-08-01CVE-2017-5868: OpenVPN Access Server 2.1.4 - CRLF Injection
- PoC2025-08-01CVE-2018-11231: Opencart Divido - Sql Injection
- PoC2025-08-01CVE-2018-19276: OpenMRS Platform < 2.24.0 - Insecure Object Deserialization
- PoC2025-08-01CVE-2019-14530: OpenEMR <5.0.2 - Local File Inclusion
- PoC2025-08-01CVE-2019-14696: Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting
- PoC2025-08-01CVE-2019-18393: Ignite Realtime Openfire <4.42 - Local File Inclusion
- PoC2025-08-01CVE-2019-18394: Ignite Realtime Openfire <=4.4.2 - Server-Side Request Forgery
- PoC2025-08-01CVE-2020-25495: Xinuo Openserver 5/6 - Cross-Site scripting
- PoC2025-08-01CVE-2020-35476: OpenTSDB <=2.4.0 - Remote Code Execution
- PoC2025-08-01CVE-2020-6637: OpenSIS 7.3 - SQL Injection
- PoC2025-08-01CVE-2021-24214: WordPress OpenID Connect Generic Client 3.8.0-3.8.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-29156: LDAP Injection In OpenAM
- PoC2025-08-01CVE-2021-35464: ForgeRock OpenAM <7.0 - Remote Code Execution
- PoC2025-08-01CVE-2021-38647: Microsoft Open Management Infrastructure - Remote Code Execution
- PoC2025-08-01CVE-2021-40542: Opensis-Classic 8.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-40651: OS4Ed OpenSIS Community 8.0 - Local File Inclusion
- PoC2025-08-01CVE-2021-41691: openSIS Student Information System 8.0 SQL Injection
- PoC2025-08-01CVE-2022-24181: PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-24637: Open Web Analytics 1.7.3 - Remote Code Execution
- PoC2025-08-01CVE-2022-26833: Open Automation Software OAS Platform V16.00.0121 - Missing Authentication
- PoC2025-08-01CVE-2022-2733: Openemr < 7.0.0.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-32195: Open edX <2022-06-06 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-43014: OpenCATS 0.9.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-43015: OpenCATS 0.9.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-43016: OpenCATS 0.9.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-43017: OpenCATS 0.9.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-43018: OpenCATS 0.9.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-48012: OpenCATS 0.9.7 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-27292: OpenCATS - Open Redirect
- PoC2025-08-01CVE-2023-2948: OpenEMR < 7.0.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-2949: OpenEMR < 7.0.1 - Cross-site Scripting
- PoC2025-08-01CVE-2023-32315: Openfire Administration Console - Authentication Bypass
- PoC2025-08-01CVE-2023-38879: openSIS v9.0 - Path Traversal
- PoC2025-08-01CVE-2023-42343: OpenCMS - Cross-Site Scripting
- PoC2025-08-01CVE-2023-42344: OpenCMS - XML external entity (XXE)
- PoC2025-08-01CVE-2023-6379: OpenCMS 14 & 15 - Cross Site Scripting
- PoC2025-08-01CVE-2023-6380: OpenCms 14 & 15 - Open Redirect
- PoC2025-08-01CVE-2024-28255: OpenMetadata - Authentication Bypass
- PoC2025-08-01CVE-2024-35219: OpenAPI Generator <= 7.5.0 - Arbitrary File Read/Delete
- PoC2025-08-01CVE-2024-35584: openSIS < 9.1 - SQL Injection
- PoC2025-08-01CVE-2024-41667: OpenAM<=15.0.3 FreeMarker - Template Injection
- PoC2025-08-01CVE-2024-51211: openSIS Classic v9.1 - SQL Injection
- PoC2025-08-01CVE-2025-6197: Open Redirect via Organization Switching
- PoC2025-08-01CVE-2020-7247: OpenSMTPD 6.4.0-6.6.1 - Remote Code Execution
- PoC2025-08-01CVE-2023-48795: OpenSSH Terrapin Attack - Detection
- PoC2025-08-01CNVD-2021-34590: OpenSNS Application ShareController.class.php 远程命令执行漏洞
- PoC2025-08-01CVE-2007-4556: OpenSymphony XWork/Apache Struts2 - Remote Code Execution S2-001
- PoC2025-08-01CVE-2020-35476: OpenTSDB 2.4.0 Remote Code Execution
- PoC2025-08-01ec2-unrestricted-opensearch: Unrestricted OpenSearch Access
- PoC2025-08-01CVE-2023-32315-2: Openfire身份认证绕过漏洞
- PoC2025-08-01CVE-2023-32315: Openfire Console authentication bypass
- PoC2025-08-01nacl-open-inbound: Open Inbound NACL Traffic
- PoC2025-08-01CVE-2024-28255: OpenMetadata RCE
- PoC2025-08-01azure-openai-cmk-not-enabled: Azure OpenAI Encryption using Customer-Managed Keys Not Enabled
- PoC2025-08-01azure-openai-managed-identity-not-used: Azure OpenAI Service Instance Managed Identity Not Used
- PoC2025-08-01azure-openai-private-endpoints-unconfigured: Azure OpenAI Service Instances Not Using Private Endpoints
- PoC2025-08-01azure-openai-public-access-disabled: Azure OpenAI Public Network Access Not Disabled
- PoC2025-08-01openemr-default-login: OpenEMR - Default Admin Discovery
- PoC2025-08-01openerp-default-password: Openerp Default Password
- PoC2025-08-01openfire-default-password: OpenFire 默认账号密码
- PoC2025-08-01openwrt-default-login: Opentwrt - Admin Login Page
- PoC2025-08-01openvpn-monitor-disclosure: OpenVPN Monitor Disclosure
- PoC2025-08-01metadata-service-openstack: Openstack Metadata Service Check
- PoC2025-08-01openstack-config: Openstack - Infomation Disclosure
- PoC2025-08-01openstack-user-secrets: OpenStack User Secrets Exposure
- PoC2025-08-01open-redirect-bypass: Open Redirect Bypass
- PoC2025-08-01open-redirect: Open Redirect Detection
- PoC2025-08-01opendatasoft-docs-csp-bypass: Content-Security-Policy Bypass - Opendatasoft Docs
- PoC2025-08-01openexchangerates-csp-bypass: Content-Security-Policy Bypass - OpenExchangeRates
- PoC2025-08-01openstreetmap-nominatim-csp-bypass: Content-Security-Policy Bypass - OpenStreetMap Nominatim
- PoC2025-08-01CNVD-2024-15077: AJ-Report Open Source Data Screen - Remote Code Execution
- PoC2025-08-01openemr-default-login: OpenEMR - Default Admin Discovery
- PoC2025-08-01openmediavault-default-login: OpenMediaVault - Default Login
- PoC2025-08-01openmetadata-default-login: OpenMetadata - Default Login
- PoC2025-08-01openplc-default-login: OpenPLC Webserver v3 - Default Login
- PoC2025-08-01opensearch-dashboard-default-login: OpenSearch Dashboard - Default Login
- PoC2025-08-01opencats-default-login: OpenCATS - Default Login
- PoC2025-08-01openmetadata-admin-userenum: OpenMetadata - Admin User Enumeration
- PoC2025-08-01openstack-user-secrets: OpenStack User Secrets Exposure
- PoC2025-08-01opentsdb-status: OpenTSDB - Detect
- PoC2025-08-01open-mjpg-streamer: open-mjpg-streamer
- PoC2025-08-01deos-openview-panel: DEOS OPENview Admin Panel Unauthenticated Access
- PoC2025-08-01ojs-installer: Open Journal Systems Installer - Exposure
- PoC2025-08-01open-web-analytics-installer: Open Web Analytics Installer - Exposure
- PoC2025-08-01openemr-setup-installer: OpenEMR Setup Installation Page - Exposure
- PoC2025-08-01openfire-setup: Openfire Setup - Exposure
- PoC2025-08-01openmage-install: OpenMage Installation Wizard
- PoC2025-08-01openshift-installer-panel: OpenShift Assisted Installer Panel - Detect
- PoC2025-08-01opensis-installer: openSIS Installation Wizard
- PoC2025-08-01jenkins-openuser-register: Jenkins Open User registration
- PoC2025-08-01office365-open-redirect: Office365 Autodiscover - Open Redirect
- PoC2025-08-01openbmcs-secret-disclosure: OpenBMCS 2.4 - Information Disclosure
- PoC2025-08-01openbmcs-ssrf: OpenBMCS 2.4 - Server-Side Request Forgery / Remote File Inclusion
- PoC2025-08-01opensearch-dashboard-unauth: OpenSearch Dashboard - Unauth Access
- PoC2025-08-01openstack-config: Openstack - Infomation Disclosure
- PoC2025-08-01metadata-service-openstack: Openstack Metadata Service Check
- PoC2025-08-01open-proxy-external: Open Proxy To External Network
- PoC2025-08-01open-proxy-internal: Open Proxy To Internal Network
- PoC2025-08-01open-proxy-localhost: Open Proxy to Other Web Ports via Proxy's localhost Interface
- PoC2025-08-01open-proxy-portscan: Open Proxy to Ports on the Proxy's localhost Interface
- PoC2025-08-01shibboleth-open-redirect: Shibboleth SSO - Open Redirect
- PoC2025-08-01deos-open500ems-panel: DEOS OPEN 500EMS Controller - Admin Exposure
- PoC2025-08-01open-redirect-generic: Open Redirect - Detection
- PoC2025-08-01opencpu-rce: OpenCPU - Remote Code Execution
- PoC2025-08-01opencart-core-sqli: OpenCart Core 4.0.2.3 'search' - SQL Injection
- PoC2025-08-01opencti-lfi: OpenCTI 3.3.1 - Local File Inclusion
- PoC2025-08-01opennms-log4j-rce: OpenNMS - JNDI Remote Code Execution (Apache Log4j)
- PoC2025-08-01openshift-log4j-rce: OpenShift - Remote Code Execution (Apache Log4j)
- PoC2025-08-01opensis-lfi: openSIS 5.1 - Local File Inclusion
- PoC2025-08-01opensns-rce: OpenSNS - Remote Code Execution
- PoC2025-08-01pkp-lib-open-redirect: Open Journal Systems pkp-lib - Open Redirect
- PoC2025-08-01eol-openssh-debian: EOL Debian OpenSSH - Detect
- PoC2025-08-01openemr-detect: OpenEMR Product Registration Panel - Detect
- PoC2025-08-01opengear-panel: Opengear Management Console Login Panel - Detect
- PoC2025-08-01openstack-dashboard-login: OpenStack Dashboard Login Panel - Detect
- PoC2025-08-01openvpn-admin: OpenVPN Admin Login Panel - Detect
- 2025-07-21openBI /index/screen/dlfile 代码执行漏洞（CVE-2024-1117）
- 2025-07-21openBI /index/screen/dlfile 代码执行漏洞（CVE-2024-1117）
- 2025-06-23OpenAgents 路径遍历漏洞
- 2025-06-20openSIS v9.0 /DownloadWindow.php 目录遍历漏洞（CVE-2023-38879）
- 2025-06-20openSIS v9.0 /DownloadWindow.php 目录遍历漏洞（CVE-2023-38879）
- 2025-04-09opencms 路径遍历漏洞
- 2025-03-07OpenSSL 心脏滴血漏洞（CVE-2014-0160）
- 2025-03-07OpenSSL 心脏滴血漏洞（CVE-2014-0160）
- 2025-02-14OpenSNS 开源社交系统 ChinaCityController.class.php 存在SQL注入漏洞
- 2025-01-17openBI /plugins/upload 文件上传漏洞（CVE-2024-1116）
- 2025-01-17openBI /plugins/upload 文件上传漏洞（CVE-2024-1116）
- 2024-12-27openBI /websocket/Setting/set 命令执行漏洞 （CVE-2024-1115）
- 2024-12-27openBI /index/icon/uploadIcon 文件上传漏洞
- 2024-12-27openBI /websocket/Setting/set 命令执行漏洞 （CVE-2024-1115）
- 2024-12-27openBI /index/icon/uploadIcon 文件上传漏洞
- 2024-12-10OpenWrt Attended SysUpgrade 命令注入漏洞
- 2024-11-01open-scratch Teaching SQL注入漏洞
- 2024-09-27OpenPrinting CUPS-libcupsfilters 输入验证不当漏洞 可导致远程代码执行
- 2024-09-27OpenPrinting CUPS-libppd 输入验证不当漏洞 可导致远程代码执行
- 2024-09-27OpenPrinting CUPS-browsed 未授权 输入验证不当漏洞 可导致远程代码执行
- 2024-09-27OpenPrinting CUPS-filters命令注入漏洞
- 2024-09-26OpenIdentityPlatform OpenAM 需授权 代码注入漏洞
- 2024-07-25OpenMetadata CVE-2024-28255 认证绕过漏洞
- 2024-07-18Opencart Divido CVE-2024-21514 SQL注入漏洞
- 2024-07-12Oracle GlassFish Server Open Source Edition 目录遍历漏洞 （CVE-2017-1000028）
- 2024-07-12OpenSIS 8.0 CVE-2021-39378 SQL 注入漏洞
- 2024-07-12Oracle GlassFish Server Open Source Edition 目录遍历漏洞 （CVE-2017-1000028）
- 2024-07-04Apache OpenMeetings 事件说明组件跨站脚本漏洞
- 2024-06-04OpenStack 弱口令漏洞
- 2024-06-03OpenShift-ConSole 弱口令漏洞
- 2024-05-31GUnet OpenEclass E-learning platform CVE-2024-31777 命令注入漏洞
- 2024-05-23OpenMetadata CVE-2024-28253 代码执行漏洞
- 2024-05-23OpenMetadata CVE-2024-28848 代码执行漏洞
- 2024-05-23OpenMetadata CVE-2024-28254 代码执行漏洞
- 2024-05-23OpenMetadata CVE-2024-28847 代码执行漏洞
- 2024-05-15OpenWrt 存在弱口令漏洞
- 2024-05-15OpenMetadata SEPL注入漏洞
- 2024-05-10OpenMetadata SPEL注入漏洞
- 2024-04-28OpenMetadata /api/v1 命令执行漏洞 (CVE-2024-28255)
- 2024-04-28OpenMetadata /api/v1 命令执行漏洞 (CVE-2024-28255)
- 2024-04-25Red Hat OpenShift Container Platform 安全漏洞(CVE-2024-1139)
- 2024-04-23O2OA open 后台任意文件读取漏洞
- 2024-04-08OpenMetadata policies/validation/condition 存在命令执行洞
- 2024-04-04OpenMetadata存在命令执行漏洞
- 2024-03-21Phoenix Contact Automationworx PLCOpen XML 栈缓冲区溢出漏洞
- 2024-03-19Ignite Realtime Openfire <=4.4.2存在服务端请求伪造漏洞(CVE-2019-18394)
- 2024-03-07Openfire CVE-2019-18394 未授权服务器端请求伪造漏洞
- 2024-02-28OpenCms XML外部实体注入(CVE-2023-42344)
- 2024-02-28OpenCart So Newsletter Custom Popup 4.0 模块 email 参数 SQL 注入漏洞
- 2024-02-22Open Automation Software REST API 认证绕过漏洞
- 2024-02-22OpenCart CVE-2022-24108不安全的反序列化漏洞
- 2024-02-22Linux内核 openvswitch 权限提升漏洞
- 2024-02-22Open-Falcon Falcon-Plus CVE-2022-26245 SQL注入漏洞
- 2024-02-22OpenCATS反射型跨站脚本漏洞
- 2024-02-22OpenEMR fee_sheet_options_ajax.php 反射型跨站脚本漏洞
- 2024-02-22OpenEMR new_comprehensive_save.php 存储型跨站脚本漏洞
- 2024-02-22OpenEMR Rules CVE-2022-1179跨站脚本漏洞
- 2024-02-22Open Web Analytics (OWA) 远程代码执行漏洞
- 2024-02-22Open Web Analytics (OWA) 远程代码执行漏洞
- 2024-02-22OpenEMR C_DocumentCategory.class.php存储型跨站脚本漏洞
- 2024-02-22OpenEMR CVE-2022-24643跨站脚本漏洞
- 2024-02-07OpenEMR Admin edit_globals.php Application Title 存储型跨站脚本漏洞
- 2024-02-07Openfire CVE-2023-32315权限绕过漏洞
- 2024-02-07OpenTSDB 2.4.1未授权命令注入漏洞
- 2024-02-07OpenCATS Calendar Event CVE-2023-27294 存储型跨站脚本漏洞
- 2024-02-07OpenEMR share_template.php list_id 反射型XSS漏洞
- 2024-02-07OpenText Content Suite Platform 任意文件删除漏洞
- 2024-02-07OpenTSDB CVE-2023-25826 远程命令执行漏洞
- 2024-01-31openBI ploadIcon 任意文件上传漏洞
- 2023-12-20Openfire Console 存在弱口令
- 2023-12-20OpenSSH 命令注入漏洞(CVE-2023-51385)
- 2023-12-07OpenCms 存在重定向漏洞
- 2023-09-22HWL-2511-SS popen.cgi 命令执行漏洞（CVE-2022-36553）
- 2023-09-22HWL-2511-SS popen.cgi 命令执行漏洞（CVE-2022-36553）
- 2023-09-18OpenRefine 任意文件读取漏洞(CVE-2023-41886)
- 2023-07-28OpenStack openstack-neutron 资源管理错误漏洞
- 2023-07-11Openfire Console 存在鉴权绕过漏洞
- 2023-06-07openfire web管理员控制台验证绕过漏洞(CVE-2023-32315)
- 2023-03-13Openfire URI 路径存在任意文件读取漏洞
- 2023-03-10CoreDial sipXcom sipXopenfire 操作系统命令注入漏洞
- 2022-02-21OpenBMCS 2.4远程文件包含
- 2022-02-21OpenBMCS 2.4目录泄露
- 2022-02-14OpenTSDB 命令注入漏洞（CVE-2020-35476）
- 2022-02-08Openfire XMPP Server XMPP-Layer Compression 远程拒绝服务漏洞
- 2022-02-08Openfire 跨站脚本漏洞
- 2022-01-17OpenDreamBox 2.0.0 - Plugin WebAdmin 远程命令执行
- 2022-01-04openNMS 基于log4J组件的远程命令执行漏洞
- 2021-12-20OpenTSDB 控制台 未授权访问
- 2021-12-20OpenTSDB web端 start 远程命令执行漏洞(CVE-2018-12972)
- 2021-10-15ForgeRock AM远程代码执行漏洞（CVE-2021-35464）
- 2021-09-15Open Management Infrastructure 远程代码执行漏洞
- 2021-09-13openSIS登录口SQL注入漏洞(CVE-2020-6141,CVE-2020-6637)
- 2021-07-01OpenSNS 远程代码执行漏洞
- 2021-01-19opennms-弱口令
- 2021-01-19Opengear-默认账号
- 2021-01-19OpenFaaS开源faas框架-未授权访问
- 2021-01-19IBM OpenAdmin Tool SOAP welcomeServer PHP-代码执行(CVE-2017-1092)
- 2020-12-16OpenTSDB <= 2.4.0 远程代码执行漏洞
- 2020-12-13Openfire /create-bookmark.jsp 路径存在跨站脚本漏洞
- 2020-12-13Openfire /spark-form.jsp 路径存在跨站脚本漏洞
- 2020-12-13Openfire /create-bookmark.jsp 路径存在跨站脚本漏洞
- 2020-12-13Openfire /db-access.jsp 路径存在跨站脚本漏洞
- 2020-12-11Openfire /create-bookmark.jsp 路径存在跨站脚本漏洞
- 2020-09-02Openfire /server-properties.jsp 路径存在跨站脚本漏洞
- 2020-09-02Openfire /server-properties.jsp 路径存在跨站脚本漏洞
- 2020-09-02Openfire /server-properties.jsp 路径存在跨站脚本漏洞
- 2020-03-20Openfire /setup-datasource-standard.jsp 路径存在跨站脚本漏洞
- 2020-03-20Openfire /setup-datasource-standard.jsp 路径存在跨站脚本漏洞
- 2020-03-19Openfire /setup-datasource-standard.jsp 路径存在跨站脚本漏洞
- 2020-03-19Openfire /setup-datasource-standard.jsp 路径存在跨站脚本漏洞
- 2020-01-30OpenSMTPD < 6.6.2 远程代码执行漏洞
- 2020-01-09Openfire 多个路径存在跨站脚本漏洞
- 2020-01-09Openfire 多个路径存在跨站脚本漏洞
- 2020-01-09Openfire 多个路径存在跨站脚本漏洞
- 2020-01-09Openfire 多个路径存在跨站脚本漏洞
- 2019-10-24Openfire /getFavicon 路径存在SSRF漏洞
- 2019-10-24Openfire PluginServlet 存在任意文件读取漏洞
- 2019-08-23Openfire /setup-admin-settings.jsp 路径存在跨站脚本漏洞
- 2018-06-14Ignite Realtime Openfire 跨站脚本漏洞
- 2017-10-27Openfire /setup-host-settings.jsp 路径存在跨站脚本漏洞
- 2016-08-05Apache OpenOffice 远程代码执行漏洞
- 2015-11-10Debian openjdk-7 package 远程代码执行漏洞
- 2015-10-05Openfire /user-edit-form.jsp 路径存在鉴权绕过漏洞
- 2015-09-17Ignite Realtime Openfire 多个跨站请求伪造漏洞
- 2015-09-17Openfire /create-bookmark.jsp 路径存在跨站脚本漏洞
- 2014-04-11Ignite Realtime Openfire 拒绝服务漏洞
- 2011-05-08HP OpenView Storage Data Protector备份客户端服务HPFGConfig远程代码执行漏洞
- 2011-05-08HP OpenView Storage Data Protector备份客户端服务EXEC_INTEGUTIL远程代码执行漏洞
- 2011-05-08HP OpenView Storage Data Protector备份客户端服务EXEC_BAR远程代码执行漏洞
- 2011-05-08HP OpenView Storage Data Protector备份客户端服务bm消息处理远程代码执行漏洞
- 2011-05-08HP OpenView Storage Data Protector备份客户端服务stutil消息处理远程代码执行漏洞
- 2011-05-08HP OpenView Storage Data Protector备份客户端服务EXEC_SCRIPT远程代码执行漏洞
- 2011-05-08HP OpenView Storage Data Protector备份客户端服务omniiaputil消息处理远程代码执行漏洞
- 2011-05-08HP OpenView Storage Data Protector备份客户端服务GET_FILE远程代码执行漏洞
- 2010-05-14HP OpenView Network Node Manager未明远程代码执行漏洞
- 2010-05-14HP OpenView Network Node Manager未明远程代码执行漏洞
- 2010-05-14HP OpenView Network Node Manager未明远程代码执行漏洞
- 2009-11-29OpenX banner-edit.php脚本任意文件上传漏洞
- 2009-05-11Igniterealtime Openfire jabber:iq:auth "passwd_change"请求远程更改口令漏洞
- 2009-05-11Igniterealtime Openfire jabber:iq:auth "passwd_change"请求远程更改口令漏洞
- 2009-03-24Openfire /login.jsp 路径存在 URL重定向
- 2009-03-24Openfire /sipark-log-summary.jsp 路径存在SQL注入漏洞
- 2009-03-24Openfire /setup/setup-/ 存在目录遍历漏洞
- 2009-03-24Openfire /login.jsp 路径存在跨站脚本漏洞
- 2009-02-10Openfire /log.jsp 存在目录遍历漏洞
- 2009-02-10Openfire /logviewer.jsp 路径存在跨站脚本漏洞
- 2008-04-12Openfire 未明远程拒绝服务漏洞
- 2007-06-01Openfire DWR 接口存在未授权访问
- 2006-12-31Openfire /login.jsp 路径存在跨站脚本漏洞
- 2005-12-31Ignite Realtime Openfire 跨站脚本漏洞
- 2005-12-31Ignite Realtime Openfire 跨站脚本漏洞
- 2004-04-25OpenBB头像任意文件上传漏洞
- Openfind Mail2000 - XSS (Reflected Cross-site scripting)
- Openfind Mail2000 - XSS