Adobe InDesign Buffer Overflow Vulnerability (CNVD-2023-76940)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe InDesign. An attacker could exploit this vulnerability to trigger arbitrary code execution...

Revive Adserver Cross-Site Scripting Vulnerability (CNVD-2025-29407)

Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver suffers from a...

Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2023-76758)

Microsoft Edge is a web browser from Microsoft USA that comes with systems after Windows 10. Microsoft Edge suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on the system...

Apache Airflow Information Disclosure Vulnerability (CNVD-2023-72235)

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An information disclosure vulnerability exists in Apache Airflow versions prior to...

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2023-82284)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

Command Execution Vulnerability in Black Shield Network Security Audit System of Fujian Strait Information Technology Co.

Fujian Strait Information Technology Co., Ltd. is one of the earliest companies in China specializing in independent research and development of network security, product sales and security services. A command execution vulnerability exists in the BlackShield Network Security Audit System of Fuji...

Google Chrome Security Bypass Vulnerability (CNVD-2023-75320)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome prior to version 117.0.5938.62, which stems from an improper implementation of the Picture module. An attacker could exploit the vulnerability to bypass security restrictions...

Google Chrome Buffer Overflow Vulnerability (CNVD-2023-71680)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a buffer overflow vulnerability that originates from a boundary error when the application handles untrusted input, which can be exploited by an attacker to execute arbitrary code on the system or cause th...

Microsoft Office Elevation of Privilege Vulnerability (CNVD-2024-02721)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. Microsoft Office has an elevation of privilege vulnerability that can be exploited by an attacker to...

Siemens SIMATIC PCS neo (Administration Console) Information Disclosure Vulnerability

SIMATIC PCS neo Administration Console is a distributed control system DCS. An information disclosure vulnerability exists in Siemens SIMATIC PCS neo Administration Console, which can be exploited by an attacker to obtain credentials and impersonate an administrator user to gain administrator...

Microsoft Office Spoofing Vulnerability (CNVD-2024-02719)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. Microsoft Office has a spoofing vulnerability that can be exploited by attackers to conduct spoofing...

Microsoft Exchange Server Spoofing Vulnerability (CNVD-2023-72226)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by attackers...

Siemens Industrial Products WIBU System CodeMeter Heap Buffer Overflow Vulnerability

PSSRCAPE is a transmission and distribution network protection simulation software.PSSRE is a power system simulation and analysis tool for transmission operations and planning.PSSRODMS is a CIM-based network modeling management tool with network analysis capabilities for planning and operational...

Siemens QMS Automotive Code Issue Vulnerability (CNVD-2023-71216)

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. A code issue vulnerability exists in Siemens QMS Automotive, which stems from the affected application's QMS.Mobile module not invalidating session tokens upon logout. An attacker could exploi...

Siemens QMS Automotive Access Control Error Vulnerability

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. Siemens QMS Automotive suffers from an Access Control Error vulnerability that stems from a lack of sufficient authorization checks in the QMS.Mobile module of the affected application. An...

Siemens Teamcenter Visualization and JT2Go stack buffer overflow vulnerability (CNVD-2023-69810)

Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios.Siemens JT2GO is a JT file viewer. A stack buffer overflow vulnerability exists in Siemens Teamcenter Visualization and JT2Go, which can be exploited by an attacker to execute code...

Vim buffer overflow vulnerability (CNVD-2023-70067)

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in versions prior to vim 9.0.1847, which stems from an out-of-bounds write problem. An unauthenticated attacker can exploit this vulnerability to execute arbitrary code...

Google Android Information Disclosure Vulnerability (CNVD-2024-02313)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android elevation of privilege vulnerability (CNVD-2023-75539)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by attackers to cause elevation of privilege...

Google Android elevation of privilege vulnerability (CNVD-2023-75543)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by attackers to escalate privileges...