FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14499)

FreeFloat FTP Server is an FTP service from Freefloat. A buffer overflow vulnerability exists in FreeFloat FTP Server that stems from the GLOB Command Handler component failing to properly validate the length size of input data, no details of the vulnerability are provided at this time...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14506)

FreeFloat FTP Server is an FTP service from Freefloat. A buffer overflow vulnerability exists in FreeFloat FTP Server, which stems from the component TRACE Command Handler failing to properly validate the length size of input data, no details of the vulnerability are provided at this time...

Tenda AC10 Buffer Overflow Vulnerability

The Tenda AC10 is a wireless router from the Chinese company Tenda. Tenda AC10 suffers from a buffer overflow vulnerability, which originates from the parameter getuid in the file /goform/UserCongratulationsExec that fails to correctly validate the length and size of the input data, which can be...

PCMan FTP Server Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server suffers from a buffer overflow vulnerability, which originates from the component REST Command Handler fails to properly validate the length and size of the input data, and can be exploited by an attacker to cause ...

Fuji Electric V-SFT MakeItemGlidZahyou Function Buffer Overflow Vulnerability

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. Fuji Electric V-SFT suffers from a buffer overflow vulnerability that originates from the MakeItemGlidZahyou function in VS6ComFile failing to correctly validate the length and size of input data, which can be...

CVE-2025-20258

A vulnerability in the self-service portal of Cisco Duo could allow an unauthenticated, remote attacker to inject arbitrary commands into emails that are sent by the service. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting...

CVE-2025-20258

CVE-2025-20258 affects Cisco Duo Self-Service Portal. A vulnerability due to insufficient input validation allows unauthenticated remote attackers to inject arbitrary commands into emails sent by the service, potentially delivering emails with malicious content to users. The issue is described in...

CVE-2025-41228

VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal cookies or redirect to malicious website...

CVE-2025-41228 VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability

VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal cookies or redirect to malicious website...

TOTOLINK A3100R setParentalRules function buffer overflow vulnerability

TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. TOTOLINK A3100R suffers from a buffer overflow vulnerability that stems from the urlKeyword parameter in setParentalRules failing to correctly validate the length size of the input data, no details of the...

CVE-2025-1627

The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-10865

Improper Input validation leads to XSS or Cross-site Scripting vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5...

CVE-2024-10631

The CVE-2024-10631 entry concerns the WordPress Countdown Timer for Block Editor plugin (versions up to 1.0.5). The issue is that the plugin does not validate and escape certain block options before outputting them in pages or posts where the block is embedded, which could allow Stored Cross-Site...

Adobe ColdFusion 2021.x < 2021u20 / 2023.x < 2023u14 / 2025.x < 2025u2 Multiple Vulnerabilities (APSB25-52)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2021.x update 20, 2023.x update 14, or 2025.x update 2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-52 advisory. - ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are...

Security Bulletin: Vulnerability in jshttp cookie affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in jshttp cookie has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

CVE-2024-10865

CVE-2024-10865 affects OpenText Advanced Authentication prior to 6.5. The issue arises from improper input validation, enabling Cross-site Scripting (XSS). Affected component is OpenText Advanced Authentication; root cause is input validation failure leading to XSS. Impact is consistent with high...

CVE-2025-20032

Improper input validation for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to potentially enable denial of service via local access...

CVE-2025-20031

CVE-2025-20031 describes improper input validation in Intel® Graphics Drivers that may let an authenticated local attacker cause a denial of service. Affected products include Intel® Arc™, Arc™ Pro, Iris® Xe and Data Center GPU Flex Series drivers, plus older Core/Atom lines, with multiple versio...

CVE-2025-43559 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security mechanisms and...

CVE-2025-43560 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security mechanisms and...