Baidu vulnerabilities

Products

• Ueditor 4
• Spark Browser 2

Newest

• baidu brcc BRCC Incorrect Access Control vulnerability CVE-2025-45616 9.8 CriticalMay 5, 2025
• baidu ueditor Baidu UEditor cross site scripting CVE-2024-7343 5.3 MediumAugust 1, 2024
• baidu ueditor Baidu UEditor unrestricted upload CVE-2024-7342 5.3 MediumAugust 1, 2024
• baidu openrasp OpenRASP vulnerable to a reflected Cross-Site Scripting (XSS) attack in /login CVE-2024-29183 6.1 MediumApril 19, 2024
• baidu ttplayer DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate... CVE-2023-48861 7.8 HighDecember 7, 2023
• baidu braft Baidu braft 1.1.2 has a memory leak related to use of the new operator in example/atomic... CVE-2023-30637 7.5 HighApril 13, 2023
• baidu baidunetdisk Untrusted search path vulnerability in Baidunetdisk Version 7.4.3 and earlier allows an attacker... CVE-2021-36631 6.7 MediumDecember 22, 2022
• baidu kity minder Server-Side Request Forgery in kityminder CVE-2022-31830 EPSS 16.2% 9.1 CriticalJune 9, 2022
• baidu ueditor Cross Site Scripting (XSS) vulnerability exists in UEditor v1.4.3.3, which can be exploited by an... CVE-2021-37271 5.4 MediumSeptember 28, 2021
• baidu zrender Fix prototype pollution in the zrender merge and clone helper methods CVE-2021-39227 Fix available 6.2 MediumSeptember 17, 2021
• baidu xuperchain An issue was discovered in Xuperchain 3.6.0 that allows for attackers to recover any arbitrary... CVE-2020-22741 7.5 HighJuly 19, 2021
• baidu umeditor Cross Site Scripting (XSS) vulnerability in umeditor v1.2.3 via /public/common/umeditor/php... CVE-2020-18145 6.1 MediumJuly 14, 2021
• baidu, inc. baidu browser, baidu spark browser +1 more Untrusted search path vulnerability in Baidu Browser Version 43.23.1000.500 and earlier allows an... CVE-2018-0692 7.8 HighNovember 15, 2018
• baidu ueditor UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element. CVE-2017-14744 6.1 MediumSeptember 26, 2017
• baidu ime, baidu japan inc. installer of baidu ime +1 more Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an... CVE-2017-2221 7.8 HighAugust 4, 2017
• baidu simeji Untrusted search path vulnerability in the [Simeji for Windows] installer (simeji.exe) allows an... CVE-2017-2219 7.8 HighJune 9, 2017
• baidu navigation The Baidu Navigation (aka com.baidu.navi) application 3.5.0 for Android does not verify X.509... CVE-2014-7444 5.4 MediumOctober 19, 2014
• baidu spark browser Stack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to... CVE-2014-5349 Public exploit 5.0 MediumAugust 19, 2014
• baidu baidux, uitv uiplayer +1 more Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll... CVE-2009-2970 9.3 HighOctober 19, 2009
• baidu hi im NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service (client crash)... CVE-2008-7013 5.0 MediumAugust 19, 2009
• baidu hi Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to... CVE-2008-6444 10.0 HighMarch 9, 2009
• baidu soba search bar A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to... CVE-2007-4105 Public exploit 9.3 HighJuly 31, 2007