MediaWiki suffers from an unspecified vulnerability (CNVD-2024-31364)

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. MediaWiki has a security vulnerability that stems from the presence of a stored cross-site scripting XSS...

Tenda A301 Buffer Overflow Vulnerability (CNVD-2024-31395)

Tenda A301 is a wireless signal extender from Tenda, China. A buffer overflow vulnerability exists in Tenda A301 version 15.13.08.12, which is caused by the /goform/SetOnlineDevName parameter devName failing to correctly validate the length of the input data, and can be exploited by a remote...

lunary access control error vulnerability (CNVD-2025-09699)

lunary is lunary open source a production toolkit for LLM . An access control error vulnerability exists in lunary that stems from improper access control and can be exploited by an attacker to change the name of an organization...

CMSimple_XH cross-site scripting vulnerability (CNVD-2026-02655)

CMSimpleXH is a PHP-based content management system derived from the original CMSimple project and belongs to its offshoot version. CMSimpleXH suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, for...

Autodesk AutoCAD Memory Corruption Vulnerability (CNVD-2024-33012)

Autodesk AutoCAD is a set of professional 3D drawing software from the American Autodesk Corporation. A memory corruption vulnerability exists in Autodesk AutoCAD, which can be exploited by an attacker to execute code in the current process...

OpenEMR has an unspecified vulnerability (CNVD-2024-31488)

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in OpenEMR version 7.0.2. An attacker can exploit...

Unspecified Vulnerability in JetBrains YouTrack (CNVD-2025-16878)

JetBrains YouTrack is a project management tool that supports cloud hosting and local deployment, and is primarily geared towards team collaboration management, especially suitable for software development, human resources, marketing, and other scenarios. JetBrains YouTrack suffers from a securit...

Google Chrome Security Bypass Vulnerability (CNVD-2024-36090)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability previously existed in Google Chrome version 126.0.6478.54, which can be exploited by attackers to bypass security restrictions...

lunary access control error vulnerability (CNVD-2025-09703)

lunary is lunary open source a production toolkit for LLM . An access control error vulnerability exists in lunary that originates from an unauthorized user being able to view any project. An attacker could exploit this vulnerability to cause information disclosure...

Apache OFBiz path traversal vulnerability (CNVD-2024-26187)

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. A path traversal vulnerability exists in Apache OFBiz versions prior to 18.12.14, which can be exploited by...

Ivanti EPM SQL Injection Vulnerability (CNVD-2024-26091)

Ivanti EPM is a one-stop shop for managing user profiles and all client devices from Ivanti USA. An SQL injection vulnerability exists in Ivanti EPM 2022 SU5 and prior versions, which can be exploited by an attacker to execute arbitrary code...

Ivanti EPM SQL Injection Vulnerability (CNVD-2024-26092)

Ivanti EPM is a one-stop shop for managing user profiles and all client devices from Ivanti USA. An SQL injection vulnerability exists in Ivanti EPM 2022 SU5 and prior versions, which can be exploited by an attacker to execute arbitrary code...

Ivanti EPM SQL Injection Vulnerability (CNVD-2024-26094)

Ivanti EPM is a one-stop shop for managing user profiles and all client devices from Ivanti USA. An SQL injection vulnerability exists in Ivanti EPM 2022 SU5 and prior versions, which can be exploited by an attacker to execute arbitrary code...

Ivanti EPM SQL Injection Vulnerability (CNVD-2024-26096)

Ivanti EPM is a one-stop shop for managing user profiles and all client devices from Ivanti USA. An SQL injection vulnerability exists in Ivanti EPM 2022 SU5 and prior versions, which can be exploited by an attacker to execute arbitrary code...

Adobe Acrobat Reader Buffer Overflow Vulnerability (CNVD-2024-24750)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has a security vulnerability that can be exploited by attackers to cause a sensitive memory leak...

Siemens RUGGEDCOM CROSSBOW SQL Injection Vulnerability (CNVD-2024-24515)

Siemens RUGGEDCOM CROSSBOW is a proven secure access management solution from Siemens, Germany. Siemens RUGGEDCOM CROSSBOW suffers from a SQL injection vulnerability that can be exploited by an attacker to send arbitrary SQL commands to a SQL server...

Open5GS Denial of Service Vulnerability (CNVD-2025-18583)

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a denial of service vulnerability that can be exploited by an attacker to cause AMF to crash...

Open5GS has an unspecified vulnerability (CNVD-2025-18584)

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS has a security vulnerability that can be exploited by an attacker to cause AMF to crash...

RuvarOA id parameter SQL injection vulnerability (CNVD-2024-33617)

RuvarOA is an office automation system of Ruvar China. A SQL injection vulnerability exists in RuvarOA v6.01 and v12.01, which originates from the lack of validation of the templateid parameter in the /SysManage/wftemplatechildfieldlist.aspx file against external SQL input. An attacker can exploi...

RuvarOA SQL Injection Vulnerability (CNVD-2024-33154)

RuvarOA is an office automation system of Ruvar China. A SQL injection vulnerability exists in RuvarOA v6.01 and v12.01, which originates from the id parameter of the /PersonalAffair/worklogtemplateshow.aspx file that lacks validation of externally entered SQL statements. An attacker can exploit...