Open5GS Access Control Error Vulnerability

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. An Access Control Error vulnerability exists in Open5GS version 2.4.10 and earlier, which stems from a lack of authentication, and can be exploited by an attacker to send an HTTP request to a...

Huawei HarmonyOS and EMUI Security Bypass Vulnerability (CNVD-2023-84322)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A security bypass vulnerability exists in Huawei...

Dell SmartFabric Storage Software Elevation of Privilege Vulnerability

Dell SmartFabric Storage Software is a stand-alone storage software solution from Dell USA. An elevation of privilege vulnerability exists in Dell SmartFabric Storage Software that originates from the inclusion of incorrect input validation. An attacker could exploit the vulnerability to elevate...

Dell SmartFabric Storage Software Path Traversal Vulnerability

Dell SmartFabric Storage Software is a stand-alone storage software solution from Dell USA. A path traversal vulnerability exists in Dell SmartFabric Storage Software, which arises from the program failing to properly filter for specific elements in a resource or file path. An attacker could use...

F5 BIG-IP iControl Security Bypass Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A security bypass vulnerability exists in F5 BIG-IP iControl, which can be exploited by an attacker to allow a...

Open5GS Denial of Service Vulnerability (CNVD-2025-18588)

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS, which can be exploited by an attacker to register new VNF Virtual Network Function values...

Huawei HarmonyOS and EMUI Licensing Issues Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. Huawei HarmonyOS and EMUI are vulnerable to an...

D-Link DIR-823G Buffer Overflow Vulnerability (CNVD-2024-04955)

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-823G A1V1.0.2B05 version, which stems from the CurrentPassword parameter of the CheckPasswdSettings method failing to correctly validate the length size of the input data,...

D-Link DIR-846 Code Execution Vulnerability

The D-Link DIR-846 is a wireless router from China's AUO D-Link. A code execution vulnerability exists in the D-Link DIR-846, which can be exploited by an attacker to execute arbitrary code...

D-Link DIR-823G Mac Parameter Buffer Overflow Vulnerability

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-823G Mac parameter due to incorrect boundary checking in the SetParentsControlInfo function, which can be exploited by an attacker to cause a denial of service...

D-Link DIR-823G Type Parameter Buffer Overflow Vulnerability

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-823G Type parameter due to incorrect boundary checking in the SetWLanRadioSettings function. An attacker could exploit the vulnerability to cause a denial of service...

emlog pro /admin/plugin.php arbitrary file upload vulnerability

emlog is a lightweight blog and CMS builder based on PHP and MySQL. An arbitrary file upload vulnerability exists in emlog pro /admin/plugin.php, which can be exploited by a remote attacker to submit a special request that can upload a malicious file to execute arbitrary code in the application...

mojoPortal File Upload Vulnerability

mojoPortal is a cross-platform object-oriented web framework . A file upload vulnerability exists in mojoPortal, which can be exploited by a remote attacker to submit a special request that can upload malicious files and execute arbitrary code in the context of the application...

Linux Kernel eBPF Local Elevation of Privilege Vulnerability

Linux Kernel is an open source operating system. A security vulnerability exists in the Linux Kernel eBPF processing, which can be exploited by a local attacker to submit a special request that can elevate privileges...

File upload vulnerability in mojoPortal

mojoPortal is a cross-platform object-oriented web framework . A file upload vulnerability exists in mojoPortal, which can be exploited by a remote attacker to submit a special request that can upload malicious files and execute arbitrary code in the context of the application...

Cisco Catalyst SD-WAN Manager Authorization Bypass Vulnerability

Cisco Catalyst SD-WAN Manager is an SD-WAN network management program from Cisco USA. A security vulnerability exists in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature, which can be exploited by a remote attacker to submit a special request for unauthorize...

Dreamer CMS Cross-Site Scripting Vulnerability (CNVD-2023-79682)

Dreamer CMS is a dreamer content management system. Dreamer CMS version v4.1.3 suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the component /admin/u/toIndex, which can be exploited by an attacker to execute...

Arbitrary File Read Vulnerability in ECS Intelligent Logistics Unattended System

ECS Intelligent Logistics Unattended System is an intelligent information platform for the unified control of raw material procurement, finished product sales and in-plant logistics for process manufacturing enterprises. There is an arbitrary file read vulnerability in the ECS Intelligent Logisti...

Google libwebp open source library remote code execution vulnerability

WebP is an image format developed by Google, which supports lossy and lossless compression of network images, and its compression effect and speed have certain advantages over PNG and JPEG formats. libwebp is a C/C++ open source library that implements the coding and decoding of the WebP image...

D-Link DIR-806 Command Execution Vulnerability

The D-Link DIR-806 is a wireless router from China's AUO D-Link. The D-Link DIR-806 suffers from a command execution vulnerability that stems from the REMOTEPORT parameter failing to correctly filter constructed command special characters, commands, etc. An attacker can exploit this vulnerability...