CVE-2025-45616 | Critical | 9.8 | 2025-05-05 | Incorrect access control in the /admin/** API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request. |
CVE-2024-7343 | Low | 3.5 | 2024-08-01 | A vulnerability was found in Baidu UEditor 1.4.2. It has been declared as problematic. This vulnerability affects unknown code of the file /ueditor142/php/cont… |
CVE-2024-7342 | Low | 3.5 | 2024-08-01 | A vulnerability was found in Baidu UEditor 1.4.3.3. It has been classified as problematic. This affects an unknown part of the file /ueditor/php/controller.php… |
CVE-2024-29183 | Medium | 6.1 | 2024-04-19 | OpenRASP is a RASP solution that directly integrates its protection engine into the application server by instrumentation. There exists a reflected XSS in the… |
CVE-2023-48861 | High | 7.8 | 2023-12-07 | DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll. |
CVE-2023-30637 | High | 7.5 | 2023-04-13 | Baidu braft 1.1.2 has a memory leak related to use of the new operator in example/atomic/atomic_server. NOTE: installations with brpc-0.14.0 and later are unaf… |
CVE-2021-36631 | Medium | 6.7 | 2022-12-22 | Untrusted search path vulnerability in Baidunetdisk Version 7.4.3 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified di… |
CVE-2022-31830 | Critical | 9.1 | 2022-06-09 | Kity Minder v1.3.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the init function at ImageCapture.class.php. |
CVE-2021-37271 | Medium | 5.4 | 2021-09-28 | Cross Site Scripting (XSS) vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information. |
CVE-2021-39227 | Medium | 6.2 | 2021-09-17 | ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to 5.2.1, using `merge` and `clone` helper methods in the `src… |
CVE-2020-22741 | High | 7.5 | 2021-07-19 | An issue was discovered in Xuperchain 3.6.0 that allows for attackers to recover any arbitrary users' private key after obtaining the partial signature in mult… |
CVE-2020-18145 | Medium | 6.1 | 2021-07-14 | Cross Site Scripting (XSS) vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php. |
CVE-2018-0692 | High | 7.8 | 2018-11-15 | Untrusted search path vulnerability in Baidu Browser Version 43.23.1000.500 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unsp… |
CVE-2017-14744 | Medium | 6.1 | 2017-09-26 | UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element. |
CVE-2017-2221 | High | 7.8 | 2017-08-04 | Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspeci… |
CVE-2017-2219 | High | 7.8 | 2017-06-09 | Untrusted search path vulnerability in the [Simeji for Windows] installer (simeji.exe) allows an attacker to gain privileges via a Trojan horse DLL in an unspe… |
CVE-2014-7444 | | | 2014-10-19 | The Baidu Navigation (aka com.baidu.navi) application 3.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle att… |
CVE-2014-5349 | | | 2014-08-19 | Stack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to cause a denial of service (application crash) via nested calls to… |
CVE-2009-2970 | | | 2009-10-19 | Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used in BaiduX and other p… |
CVE-2008-7013 | | | 2009-08-19 | NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service (client crash) via a crafted login response that triggers a divide-by-zero err… |
CVE-2008-6444 | | | 2009-03-09 | Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to a… |
CVE-2007-4105 | | | 2007-07-31 | A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code via a request containing "a link to do… |