Google Android Code Execution Vulnerability (CNVD-2025-19985)

Google Android is a Linux-based open source operating system from Google. A code execution vulnerability exists in Google Android, which can be exploited by an attacker to execute arbitrary code on the system...

Google Android elevation of privilege vulnerability (CNVD-2025-19981)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...

Apartment Management System addcomplain.php File SQL Injection Vulnerability

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file /complain/addcomplain.php. An attacker can exploit...

Apartment Management System add_owner_utility.php File SQL Injection Vulnerability

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter ID in file /ownerutility/addownerutility.php. An attacker can exploit...

D-Link DSL-7740C EXE Parameter Command Injection Vulnerability

The D-Link DSL-7740C is a modem from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DSL-7740C EXE parameter, which can be exploited by an attacker to execute arbitrary commands by serving a crafted GET request...

Google Android elevation of privilege vulnerability (CNVD-2025-19993)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain higher privileges on the system...

Apartment Management System add_m_committee.php File SQL Injection Vulnerability

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements for parameter ID in file /management/addmcommittee.php. An attacker can exploit th...

libbiosig stack buffer overflow vulnerability (CNVD-2025-20245)

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a stack buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

libbiosig heap buffer overflow vulnerability (CNVD-2025-20247)

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a heap buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

D-Link DSL-7740C ping6 function command injection vulnerability

The D-Link DSL-7740C is a modem from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DSL-7740C ping6 function. The vulnerability stems from the ping6 function failing to properly filter construct command special characters, commands, etc. The vulnerability can be...

Google Android Denial of Service Vulnerability (CNVD-2025-19987)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability that is caused by resource exhaustion in multiple locations. An attacker can exploit this vulnerability to cause a denial of service...

QNAP File Station 5 Null Pointer Dereference Vulnerability

QNAP File Station 5 is a core file management application developed by Qualcomm Technologies QNAP for its networked storage NAS devices. QNAP File Station 5 suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause a denial of service...

Unspecified Vulnerability in Google Android (CNVD-2025-19996)

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android, which originates from a logic error in multiple functions in hyp-main.c. An attacker could exploit this vulnerability to cause a local information leak...

Google Android elevation of privilege vulnerability (CNVD-2025-19989)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain higher privileges on the system...

Google Android elevation of privilege vulnerability (CNVD-2025-19984)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a logic error in the main.cpp main code. The vulnerability can be exploited by an attacker to gain elevated privileges on the system...

Google Android rfc_utils.cc file memory misreference vulnerability

Google Android is a Linux-based open source operating system from Google. A memory misreference vulnerability exists in the Google Android rfcutils.cc file, which can be exploited by an attacker to execute arbitrary code on the system...

Apartment Management System addemployee.php File SQL Injection Vulnerability

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /employee/addemployee.php. An attacker can exploit this...

D-Link DSL-7740C traceroute6 function command injection vulnerability

The D-Link DSL-7740C is a modem from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DSL-7740C traceroute6 function, which can be exploited by an attacker to cause arbitrary command execution...

D-Link DSL-7740C ping function command injection vulnerability

The D-Link DSL-7740C is a modem from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DSL-7740C ping function. The vulnerability stems from the ping function failing to properly filter constructed command special characters, commands, etc. The vulnerability can be...

Hospital Management System index.php File SQL Injection Vulnerability

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the username parameter of index.php. No details of the vulnerability a...

libbiosig stack buffer overflow vulnerability (CNVD-2025-20246)

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a stack buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

libbiosig MFER Parsing Function Buffer Overflow Vulnerability

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. A buffer overflow vulnerability exists in the libbiosig MFER parsing function, which can be exploited by an attacker to cause arbitrary code...

libbiosig ISHNE Parsing Function Buffer Overflow Vulnerability

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. A buffer overflow vulnerability exists in the libbiosig ISHNE parsing function, which can be exploited by an attacker to cause arbitrary code...

Google Android Information Disclosure Vulnerability (CNVD-2025-19999)

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android Information Disclosure Vulnerability (CNVD-2025-19997)

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android elevation of privilege vulnerability (CNVD-2025-19963)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a memory misreference vulnerability, which stems from a messed up instruction in sdpserver.cc that is responsible for freeing up memory, which can be exploited by an attacker to gain elevated...

Google Android Elevation of Privilege Vulnerability

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which stems from a mix-up in rfctsframes.cc in the rfcsendbufuih directive responsible for freeing memory, which can be exploited by an attacker to elevat...

Delta Electronics EIP Builder XML External Entity Injection Vulnerability

Delta Electronics EIP Builder is a configuration tool for connecting various devices from Delta Electronics China. Delta Electronics EIP Builder suffers from an XML External Entity Injection vulnerability that stems from improper handling of XML external entities in file parsing, which can be...

Delta Electronics COMMGR Command Injection Vulnerability

Delta Electronics COMMGR is a communication management software from Delta Electronics China. Delta Electronics COMMGR suffers from a command injection vulnerability due to improper boundary checking when creating specially designed .isp files, no details of the vulnerability are available at thi...

Apartment Management System add_maintenance_cost.php File SQL Injection Vulnerability

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements for parameter ID in file /maintenance/addmaintenancecost.php. An attacker can exploit thi...

D-Link DSL-7740C DELT_file.xgi Endpoint Access Control Error Vulnerability

The D-Link DSL-7740C is a modem from China-based AUO D-Link. An access control error vulnerability exists in the D-Link DSL-7740C DSL7740C.V6.TR069.20211230 version, which stems from improper access control of the DELTfile.xgi endpoint, and can be exploited by an attacker to modify arbitrary...

Apartment Management System addunit.php File SQL Injection Vulnerability

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /unit/addunit.php. An attacker can exploit this...

Google Android Code Execution Vulnerability (CNVD-2025-19983)

Google Android is a Linux-based open source operating system from Google. A code execution vulnerability exists in Google Android due to a free use of processserviceattrrsp in sdpdiscovery.cc. An attacker can exploit the vulnerability to execute arbitrary code on the system...

Apartment Management System add_bill.php File SQL Injection Vulnerability

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the mishandling of the ID parameter in the file /bill/addbill.php that can be exploited by an attacker to execute illegal SQL commands to stea...

Hospital Management System add-doctor.php File SQL Injection Vulnerability

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the docname parameter of add-doctor.php. No details of the...

D-Link DI-8100 buffer overflow vulnerability (CNVD-2026-32594)

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a buffer overflow vulnerability, which stems from the en, val, and id parameters in the qjasp function not properly verifying the length of the input...

D-Link DSL-7740C Maintenance Module Access Control Error Vulnerability

The D-Link DSL-7740C is a modem from China-based AUO D-Link. An access control error vulnerability exists in the D-Link DSL-7740C Maintenance module, which can be exploited by an attacker to arbitrarily change the password of an elevated privilege account and escalate privileges...

libbiosig stack buffer overflow vulnerability (CNVD-2025-20254)

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a stack buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

libbiosig stack buffer overflow vulnerability (CNVD-2025-20249)

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a stack buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

libbiosig stack buffer overflow vulnerability (CNVD-2025-20248)

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a stack buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

libbiosig stack buffer overflow vulnerability (CNVD-2025-20242)

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a stack buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

libbiosig Heap Buffer Overflow Vulnerability

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a heap buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

libbiosig Out-of-Bounds Read Vulnerability

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. An out-of-bounds read vulnerability exists in libbiosig, which can be exploited by an attacker to execute arbitrary code on a system...

libbiosig input validation error vulnerability (CNVD-2025-20232)

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has an input validation error vulnerability , the vulnerability stems from the ABF parsing function fails to correctly validate the user...

Google Android elevation of privilege vulnerability (CNVD-2025-19994)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain higher privileges on the system...

Google Android Information Disclosure Vulnerability (CNVD-2025-19991)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability due to an obfuscated agent in multiple functions of StatusHint.java and TelecomServiceImpl.java. An attacker could exploit the vulnerability to disclose...

Apartment Management System addowner.php File SQL Injection Vulnerability

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file /owner/addowner.php. An attacker can exploit this...

Google Android elevation of privilege vulnerability (CNVD-2025-19982)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused due to logic error code in multiple locations. The vulnerability can be exploited by an attacker to gain elevated privileges on the system...

Google Android Code Execution Vulnerability (CNVD-2025-19988)

Google Android is a Linux-based open source operating system from Google. A code execution vulnerability exists in Google Android, which can be exploited by an attacker to execute arbitrary code on the system...

Hospital Management System about-us.php File SQL Injection Vulnerability

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the pagetitle parameter of about-us.php. An attacker can exploit thi...