Skip to content
Noroxi

Baidu records

22 published records for vendor baidu.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
4.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

22 records
  • CVE-2008-6444
    42Plan

    Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, pr

    CriticalCVSS 10.0No exploitEPSS 6%

    baidu · baidu hiMar 9, 2009

  • CVE-2022-31830
    41Plan

    Kity Minder v1.3.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the init function at ImageCapture.class.php.

    CriticalCVSS 9.1No exploitEPSS 16%

    baidu · kity minderJun 9, 2022

  • CVE-2007-4105
    39Monitor

    A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code via a request conta

    CriticalCVSS 9.3Proof of conceptEPSS 7%

    baidu · soba search barJul 31, 2007

  • CVE-2021-39227
    39Monitor

    Fix prototype pollution in the zrender merge and clone helper methods

    CriticalCVSS 9.8No exploitEPSS 1%

    baidu · zrenderSep 17, 2021

  • CVE-2025-45616
    39Monitor

    Incorrect access control in the /admin/** API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request.

    CriticalCVSS 9.8No exploitEPSS 0%

    baidu · brccMay 5, 2025

  • CVE-2009-2970
    38Monitor

    Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used in

    CriticalCVSS 9.3No exploitEPSS 3%

    uitv · uiplayerOct 19, 2009

  • CVE-2017-2219
    31Monitor

    Untrusted search path vulnerability in the [Simeji for Windows] installer (simeji.exe) allows an attacker to gain privileges via a Trojan ho

    HighCVSS 7.8No exploitEPSS 1%

    baidu · simejiJun 9, 2017

  • CVE-2017-2221
    31Monitor

    Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privileges via a Trojan hors

    HighCVSS 7.8No exploitEPSS 1%

    baidu · baidu imeAug 4, 2017

  • CVE-2018-0692
    31Monitor

    Untrusted search path vulnerability in Baidu Browser Version 43.23.1000.500 and earlier allows an attacker to gain privileges via a Trojan h

    HighCVSS 7.8No exploitEPSS 0%

    baidu · spark browserNov 15, 2018

  • CVE-2023-48861
    31Monitor

    DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.d

    HighCVSS 7.8No exploitEPSS 0%

    baidu · ttplayerDec 7, 2023

  • CVE-2020-22741
    30Monitor

    An issue was discovered in Xuperchain 3.6.0 that allows for attackers to recover any arbitrary users' private key after obtaining the partia

    HighCVSS 7.5No exploitEPSS 0%

    baidu · xuperchainJul 19, 2021

  • CVE-2023-30637
    30Monitor

    Baidu braft 1.1.2 has a memory leak related to use of the new operator in example/atomic/atomic_server.

    HighCVSS 7.5No exploitEPSS 0%

    baidu · braftApr 13, 2023

  • CVE-2021-36631
    26Monitor

    Untrusted search path vulnerability in Baidunetdisk Version 7.4.3 and earlier allows an attacker to gain privileges via a Trojan horse DLL i

    MediumCVSS 6.7No exploitEPSS 0%

    baidu · baidunetdiskDec 21, 2022

  • CVE-2020-18145
    24Monitor

    Cross Site Scripting (XSS) vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php.

    MediumCVSS 6.1No exploitEPSS 0%

    baidu · umeditorJul 14, 2021

  • CVE-2017-14744
    24Monitor

    UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element.

    MediumCVSS 6.1No exploitEPSS 0%

    baidu · ueditorSep 26, 2017

  • CVE-2024-29183
    24Monitor

    OpenRASP vulnerable to a reflected Cross-Site Scripting (XSS) attack in /login

    MediumCVSS 6.1No exploitEPSS 0%

    baidu · openraspApr 19, 2024

  • CVE-2014-5349
    21Monitor

    Stack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to cause a denial of service (application crash) v

    MediumCVSS 5.0Proof of conceptEPSS 3%

    baidu · spark browserAug 19, 2014

  • CVE-2021-37271
    21Monitor

    Cross Site Scripting (XSS) vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information

    MediumCVSS 5.4No exploitEPSS 0%

    baidu · ueditorSep 28, 2021

  • CVE-2024-7342
    21Monitor

    Baidu UEditor unrestricted upload

    MediumCVSS 5.3No exploitEPSS 0%

    baidu · ueditorAug 1, 2024

  • CVE-2024-7343
    21Monitor

    Baidu UEditor cross site scripting

    MediumCVSS 5.3No exploitEPSS 0%

    baidu · ueditorAug 1, 2024

  • CVE-2014-7444
    21Monitor

    The Baidu Navigation (aka com.baidu.navi) application 3.5.0 for Android does not verify X.509 certificates from SSL servers, which allows ma

    MediumCVSS 5.4No exploitEPSS 0%

    baidu · baidu navigationOct 19, 2014

  • CVE-2008-7013
    20Monitor

    NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service (client crash) via a crafted login response that triggers a

    MediumCVSS 5.0No exploitEPSS 0%

    baidu · baidu hi imAug 19, 2009