Netgear SPH200D Directory Traversal Vulnerability

The Netgear SPH200D is a wireless Internet phone from Netgear USA. The Netgear SPH200D suffers from a directory traversal vulnerability that can be exploited by an attacker to view arbitrary files on the system by sending a crafted URL request...

D-Link DIR-600 Command Injection Vulnerability

The D-Link DIR-600 is a wireless router from China's AUO D-Link. A command injection vulnerability exists in the D-Link DIR-600 rev B version 2.14b01, which stems from not properly handling cmd parameters and can be exploited by an attacker to potentially cause command injection...

Foxit Reader Plugin Buffer Overflow Vulnerability

Foxit Reader Plugin is a U.S. Foxit company's PDF reading plug-ins. A buffer overflow vulnerability exists in Foxit Reader Plugin version 2.2.1.530, which stems from incorrect handling of URL query strings and can be exploited by an attacker to cause a buffer overflow and arbitrary code execution...

Adobe Experience Manager Code Execution Vulnerability

Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. A code execution vulnerability exists in Adobe Experience Manag...

Delta Electronics DIAView Catalog Traversal Vulnerability

Delta Electronics DIAView is an industrial configuration software from Delta Electronics China. A directory traversal vulnerability exists in Delta Electronics DIAView, which stems from a lack of validity checking of paths used by the program to process directory requests, and can be exploited by...

OpenEXR code issue vulnerability (CNVD-2025-24797)

OpenEXR is a high dynamic range image file format designed for the movie industry. A null pointer dereference vulnerability exists in OpenEXR version 3.3.2 when reading a deep scanline image containing a large number of sample points in reduceMemory mode, which stems from a null pointer exception...

Google Chrome Cross-Site Scripting Vulnerability (CNVD-2025-18922)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a cross-site scripting vulnerability that stems from an improperly implemented extension. An attacker can exploit the vulnerability to disclose cross-domain data using a constructed HTML page...

TOTOLINK N600R Command Injection Vulnerability

TOTOLINK N600R is a dual-band wireless router launched by Korean brand TOTOLINK in 2013, which supports 2.4GHz and 5GHz bands to work concurrently, with a maximum wireless transmission rate of up to 300Mbps. The TOTOLINK N600R suffers from a command injection vulnerability that stems from the pin...

IBM Cloud Pak for Business Automation Licensing Issues Vulnerability

IBM Cloud Pak for Business Automation is an enterprise-class business process automation platform from IBM that provides intelligent document processing, workflow management and decision automation. A security vulnerability exists in IBM Cloud Pak for Business Automation that originates from a us...

Google Chrome Input Validation Error Vulnerability

Google Chrome is a free web browser developed by Google. It is the world's largest browser in terms of market share due to its speed, security, simplicity, multi-platform support and built-in privacy protection. Google Chrome suffers from an input validation error vulnerability that stems from...

Dell Unity Cross-Site Scripting Vulnerability (CNVD-2025-18244)

Dell Unity is a set of virtual Unity storage environments from Dell USA. A cross-site scripting vulnerability exists in Dell Unity 5.5 and earlier versions, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to...

Adobe Experience Manager XML Entity Injection Vulnerability (CNVD-2025-21172)

Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. Adobe Experience Manager suffers from an XML entity injection...

WordPress WP Import Export Lite plugin missing file type validation vulnerability

WordPress WP Import Export Lite plugin is a free plugin for WordPress, mainly used for batch import and export website data. WordPress WP Import Export Lite plugin suffers from a missing file type validation vulnerability that can be exploited by attackers to cause arbitrary file uploads and remo...

OpenEXR Buffer Overflow Vulnerability (CNVD-2025-24799)

OpenEXR is an open standard for high dynamic range image HDR file formats. A heap buffer overflow vulnerability exists in OpenEXR versions 3.3.0 through 3.3.2 when decompressing ZIPS-compressed deep scanline EXR files, which originates from a write operation out of bounds when processing...

OpenEXR Buffer Overflow Vulnerability (CNVD-2025-24798)

OpenEXR is an open standard for high dynamic range image HDR file formats. A buffer overflow vulnerability exists in OpenEXR version 3.3.2, which stems from incorrect pointer arithmetic leading to an out-of-bounds read operation when decompressing a DWAA compressed scanline EXR file with...

WordPress WP-Property plugin file upload vulnerability

WordPress WP-Property plugin is a real estate industry-specific plugin for the WordPress platform, which is mainly used to help users manage property listings, display listing information and attract potential customers. A file upload vulnerability exists in the WordPress WP-Property plugin, whic...

D-Link DIR-615H1 Command Injection Vulnerability

The D-Link DIR-615H1 is a wireless router from China's AUO D-Link. The D-Link DIR-615H1 suffers from a command injection vulnerability, which stems from insufficient cleanup of the toolsvct.htm endpoint input, that can be exploited by an attacker to cause remote code execution...

Dell Unity OS Command Injection Vulnerability

Dell Unity is a mid-range hybrid flash storage platform from Dell that supports a wide range of workloads, including files and data blocks, and offers flexible deployment options and modern management capabilities. Dell Unity suffers from an operating system command injection vulnerability that c...

Dell PowerProtect Data Domain Operating System Command Injection Vulnerability

Dell PowerProtect Data Domain Dell PowerProtect DD is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell, USA. A security vulnerability exists in Dell PowerProtect Data Domain, which can be exploited by an attacker to execute arbitrary commands...

Netgear DGN1000B Code Execution Vulnerability

The Netgear DGN1000B is a wireless router from the American company Netgear. A code execution vulnerability exists in the Netgear DGN1000B version 1.1.00.24 and 1.1.00.45, which stems from insufficient cleanup of setup.cgi endpoint inputs, and can be exploited by an attacker to potentially cause...

WordPress HT Mega plugin path traversal vulnerability

WordPress HT Mega plugin is an Elementor page builder plugin designed for WordPress, offering over 100 custom widgets, 360+ preset modules, and a variety of templates for blogs, sliders, collapsible menus, and other page elements. A path traversal vulnerability exists in the WordPress HT Mega...

Unspecified Vulnerability in NVIDIA GPU Display Driver (CNVD-2025-21193)

NVIDIA GPU Display Driver is a driver software from NVIDIA for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver, which can be exploited by attackers to potentially cause code execution, denial of service,...

Unspecified Vulnerability in NVIDIA GPU Display Driver (CNVD-2025-21190)

NVIDIA GPU Display Driver is a display driver from NVIDIA. A security vulnerability exists in NVIDIA GPU Display Driver, which can be exploited by attackers to potentially cause an information leak...

AUO DIR-605L Buffer Overflow Vulnerability

The AUO DIR-605L is the first cloud router from AUO designed for home and small office networks. The AUO DIR-605L suffers from a buffer overflow vulnerability that originates from the insecure use of sprintf when processing user-supplied CAPTCHA data via the FILECODE parameter in /goform/formLogi...

Logic Flaw Vulnerability in Founder's All-Media News Gathering and Editing System of Beijing Beifang Founder Electronics Co.

Beijing Beifang Founder Electronics Co., Ltd. covers the fields of printing, font, media publishing and big data, providing inkjet printing equipment, digital publishing technology and media convergence solutions. A logic flaw vulnerability exists in Beijing Beifang Founder Electronics Co., Ltd.'...

Alpine iLX-507 Stack Buffer Overflow Vulnerability

The Alpine iLX-507 is a multimedia receiver from Alpine USA. The Alpine iLX-507 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute code in a root context...

Alpine iLX-507 UPDM_wstpCBCUpdStart Function OS Command Injection Vulnerability

The Alpine iLX-507 is a multimedia receiver from Alpine USA. The Alpine iLX-507 UPDMwstpCBCUpdStart function suffers from an operating system command injection vulnerability that stems from the failure of the UPDMwstpCBCUpdStart function to correctly filter constructed command special characters,...

D-Link DI-8200 ipsec_road_asp function buffer overflow vulnerability

D-Link DI8200 is an Internet behavior management router designed by D-Link for small and medium-sized network environments, which supports multi-line bandwidth overlay, PPPoE authentication billing, and intelligent traffic control. The D-Link DI8200 suffers from a buffer overflow vulnerability,...

Vehicle Management updatebal.php File SQL Injection Vulnerability

Vehicle Management is a vehicle management system. Vehicle Management suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter company in the file /updatebal.php. An attacker can exploit this vulnerability to execute...

Vehicle Management addvehicle.php File SQL Injection Vulnerability

Vehicle Management is a vehicle management system. Vehicle Management suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter vehicle in the file /addvehicle.php. An attacker can exploit this vulnerability to execute...

Alpine iLX-507 Stack Buffer Overflow Vulnerability (CNVD-2025-20813)

The Alpine iLX-507 is a multimedia receiver from Alpine USA. The Alpine iLX-507 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the root context...

WordPress Stratum plugin cross-site scripting vulnerability

WordPress Stratum plugin is a third-party extension plugin that is mainly used to enhance page building functionality. It offers 20+ free business-oriented extension components that support automatic adaptation of the current theme's visual style while keeping the site running efficiently...

WordPress All in One Time Clock Lite plugin cross-site scripting vulnerability

WordPress All in One Time Clock Lite plugin is a plugin for tracking employee's working hours and supports employee/volunteer/contractor attendance recording and report generation. The WordPress All in One Time Clock Lite plugin suffers from a cross-site scripting vulnerability that stems from th...

Wazifa System updatesettings.php file SQL injection vulnerability

Wazifa System is a content management system. Wazifa System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Password in the file /controllers/updatesettings.php. An attacker can use this vulnerability to...

WordPress BerqWP plugin file upload vulnerability

WordPress BerqWP plugin is an automated performance optimization plugin for the WordPress platform, which is mainly used to improve website loading speed, Core Web Vitals score and search engine ranking. A file upload vulnerability exists in the WordPress BerqWP plugin, which stems from a missing...

Online Admission System viewdoc.php File SQL Injection Vulnerability

Online Admission System is an online admission system. The Online Admission System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID in the file /viewdoc.php. An attacker can exploit this vulnerability to...

Online Admission System SQL Injection Vulnerability

Online Admission System is an online admission system. The Online Admission System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the file /adminac.php. An attacker can exploit this vulnerability to...

NVIDIA GPU Display Driver Information Disclosure Vulnerability

NVIDIA GPU Display Driver is a display driver from NVIDIA. A security vulnerability exists in NVIDIA GPU Display Driver, which can be exploited by attackers to potentially cause an information leak...

Unspecified Vulnerability in NVIDIA GPU Display Driver (CNVD-2025-21194)

NVIDIA GPU Display Driver is a driver software from NVIDIA for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver, which can be exploited by attackers to potentially cause a denial of service...

WordPress IDonate plugin unauthorized access vulnerability

WordPress IDonate plugin is a WordPress plugin designed for blood donation management, mainly used to create blood donation related website features. An unauthorized access vulnerability exists in WordPress IDonate plugin, which stems from the application's inadequate protection of sensitive...

Online Medicine Guide pharsignup.php File SQL Injection Vulnerability

Online Medicine Guide is an online medical guide. Online Medicine Guide suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter phuname in the file /pharsignup.php. The vulnerability can be exploited by an attacker to...

WordPress HT Mega plugin has unspecified vulnerability

WordPress HT Mega plugin is an Elementor page builder plugin designed for WordPress, offering over 100 custom widgets, 360+ preset modules, and a variety of templates for blogs, sliders, collapsible menus, and other page elements. A security vulnerability exists in WordPress HT Mega plugin, which...

D-Link DI-8200 ipsec_net_asp function buffer overflow vulnerability

D-Link DI8200 is an Internet behavior management router designed by D-Link for small and medium-sized network environments, which supports multi-line bandwidth overlay, PPPoE authentication billing, and intelligent traffic control. The D-Link DI8200 suffers from a buffer overflow vulnerability th...

Unspecified Vulnerability in NVIDIA GPU Display Driver (CNVD-2025-21191)

NVIDIA GPU Display Driver is a display driver from NVIDIA. A security vulnerability exists in NVIDIA GPU Display Driver, which can be exploited by attackers to potentially cause an information leak...

Alpine iLX-507 Input Validation Error Vulnerability

The Alpine iLX-507 is a multimedia receiver from Alpine USA. The Alpine iLX-507 suffers from an input validation error vulnerability, which stems from improper validation of the TIDAL music streaming application credentials, that can be exploited by an attacker to execute arbitrary code in the ro...

D-Link DI-8200 yyxz_dlink_asp function buffer overflow vulnerability

D-Link DI8200 is an Internet behavior management router designed by D-Link for small and medium-sized network environments, which supports multi-line bandwidth overlay, PPPoE authentication billing, and intelligent traffic control. D-Link DI8200 suffers from a buffer overflow vulnerability, which...

Online Medicine Guide login.php File SQL Injection Vulnerability

Online Medicine Guide is an online medical guide. Online Medicine Guide suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter uname in the file /login.php. The vulnerability can be exploited by an attacker to execute...

Alpine iLX-507 Stack Buffer Overflow Vulnerability (CNVD-2025-20811)

The Alpine iLX-507 is a multimedia receiver from Alpine USA. The Alpine iLX-507 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute code in a root context...

Exam Form Submission update_s5.php file SQL injection vulnerability

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter credits in file /admin/updates5.php. An attacker can exploit this vulnerability to execute illegal SQL...

Apache JSPWiki Image plugin cross-site scripting vulnerability

Apache JSPWiki is the United States Apache Apache Foundation of a Java, Servlet and JSP-based open source WikiWiki engine to build . A cross-site scripting vulnerability exists in the Apache JSPWiki Image plugin, which can be exploited by an attacker to execute javascript in the victim's browser...