SAMSUNG Blockchain Keystore Code Execution Vulnerability

SAMSUNG Blockchain Keystore is a system tool for creating, storing, managing and backing up private keys from Samsung South Korea. A code execution vulnerability exists in SAMSUNG Blockchain Keystore, which can be exploited by an attacker to execute arbitrary code on the system...

Adobe Substance3D Modeler Out-of-Bounds Write Vulnerability (CNVD-2025-19229)

Adobe Substance3D Modeler is the core tool in the Adobe Substance 3D series of software, designed for 3D modeling, supporting digital clay sculpting, symmetry tools, automated UV management, and other features for seamless switching across computer VR environments. An out-of-bounds write...

Huawei HarmonyOS Out-of-Bounds Read Vulnerability (CNVD-2025-22263)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a usability impact...

SAP NetWeaver Application Server for ABAP Cross-Site Scripting Vulnerability (CNVD-2025-21207)

SAP NetWeaver Application Server for ABAP is a powerful development and runtime platform that is at the heart of many basic SAP business applications. A cross-site scripting vulnerability exists in SAP NetWeaver Application Server for ABAP. An attacker could exploit this vulnerability by...

Adobe Substance3D Modeler Out-of-Bounds Read Vulnerability (CNVD-2025-19225)

Adobe Substance3D Modeler is the core tool in the Adobe Substance 3D series of software, designed for 3D modeling, supporting digital clay sculpting, symmetry tools, automated UV management, and other features for seamless switching across computer VR environments. An out-of-bounds read...

Unspecified Vulnerability in Emby MediaBrowser

Emby MediaBrowser is a media server software from Emby. A security vulnerability exists in Emby MediaBrowser, which can be exploited by an attacker to bypass authorization via a user control key...

Emby MediaBrowser Access Control Error Vulnerability

Emby MediaBrowser is a media server software from Emby. Emby MediaBrowser is vulnerable to an Access Control Error vulnerability, no details of the vulnerability are provided at this time...

Huawei HarmonyOS cjwindow Module Pointer Dangling Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A pointer dangling vulnerability exists in the Huawei HarmonyOS cjwindow module, which can be exploited by an attacker to cause functional stability to be...

Unspecified Vulnerability in Emby MediaBrowser (CNVD-2025-19597)

Emby MediaBrowser is a media server software from Emby. A security vulnerability exists in Emby MediaBrowser that can be exploited by an attacker to change passwords without verification...

Bottinelli Informatical Vedo Suite File Inclusion Vulnerability

Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. A file inclusion vulnerability exists in Bottinelli Informatical Vedo Suite, which stems from an uncleaned readfile function call that can be exploited by an...

Huawei HarmonyOS NearLink stack SSAP module out-of-bounds read vulnerability (CNVD-2025-22260)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An out-of-bounds read vulnerability exists in the SSAP module of the Huawei HarmonyOS NearLink protocol stack, which can be exploited by an attacker to affec...

NVIDIA Triton Inference Server Information Disclosure Vulnerability

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. NVIDIA Triton Inference Server suffers from an information disclosure vulnerability that is caused by an out-of-bounds read flaw in the...

NVIDIA Triton Inference Server Security Bypass Vulnerability

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. A security bypass vulnerability exists in NVIDIA Triton Inference Server, which can be exploited by attackers to cause a denial of service...

Adobe InCopy Out-of-Bounds Write Vulnerability (CNVD-2025-18935)

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute code on the system or cause the application to crash...

WordPress WP Private Content Plus plugin information disclosure vulnerability

WordPress WP Private Content Plus plugin is a WordPress plugin that is mainly used for permission control of website content and supports access restrictions on posts, pages, custom content types, navigation menus, plugins and attachments. WordPress WP Private Content Plus plugin suffers from an...

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CNVD-2025-23048)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based for Android. An attacker can exploit this vulnerability to conduct spoofing attacks when visiting specially crafted websit...

OpenBao suffers from an unspecified vulnerability (CNVD-2025-18606)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by an attacker to cause bypassing of internal rate limiting and reuse of existing MFA code...

Adobe InDesign Desktop Out-of-Bounds Write Vulnerability (CNVD-2025-19248)

Adobe InDesign Desktop is a desktop publishing DTP application developed by Adobe, mainly used for typographic editing of printed materials, supporting the creation of books, magazines, posters, flyers and other printed materials. Adobe InDesign Desktop suffers from an out-of-bounds write...

Microsoft Word Information Disclosure Vulnerability (CNVD-2025-18825)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. An information disclosure vulnerability exists in Microsoft Word, which is caused due to a buffer over-read error. An attacker could exploit the vulnerability to obtain sensitive information...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-18821)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which is caused due to a type confusion error when opening a specially crafted file. An attacker could exploit this vulnerability to execute...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-18820)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel that is caused by a heap buffer overflow when opening a specially crafted file. An attacker can exploit this vulnerability to execute arbitrary cod...

Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2025-24452)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An elevation of...

Microsoft Office Code Execution Vulnerability (CNVD-2025-21408)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code execution vulnerability exists in Microsoft Office, which is caused due to a post-release usage...

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CNVD-2025-23049)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based for Android, which can be exploited by attackers to conduct spoofing attacks when visiting specially crafted websites...

Belkin F9K1009 and Belkin F9K1010 Hardcoded Credential Vulnerabilities

The Belkin F9K1009 and Belkin F9K1010 are both a wireless router from Belkin Canada. The Belkin F9K1009 and Belkin F9K1010 have a hard-coded credential vulnerability that can be exploited by an attacker to gain access to the devices...

Google Chrome Competitive Conditions Issue Vulnerability (CNVD-2025-24504)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a Competitive Condition Issue vulnerability that is due to a competitive condition in V8. An attacker can exploit this vulnerability to execute arbitrary code on the system...

Google Chrome Security Bypass Vulnerability (CNVD-2025-24505)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...

WordPress AnWP Football Leagues plugin code execution vulnerability

WordPress AnWP Football Leagues plugin is designed for WordPress website soccer tournament management plugin, support a variety of tournament modes such as knockout, round-robin, etc., including player data management, scheduling, match results statistics and other features. A code execution...

WordPress WPExperts Post SMTP plugin authentication bypass vulnerability

WordPress WPExperts Post SMTP plugin is a plugin for optimizing the WordPress email sending process. The main features include custom email services, email logging, DNS authentication and OAuth authorization. An authentication bypass vulnerability exists in the WordPress WPExperts Post SMTP plugi...

WordPress Mosaic Generator plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress Mosaic Generator plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-suppli...

Adobe InCopy Out-of-Bounds Write Vulnerability (CNVD-2025-18937)

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute code on the system or cause the application to crash...

Adobe InDesign Desktop Post-Release Reuse Vulnerability

Adobe InDesign Desktop is desktop publishing DTP software developed by Adobe, mainly used for typography design of print and digital publications, including books, magazines, posters, e-books and so on. Adobe InDesign Desktop suffers from a post-release reuse vulnerability that can be exploited b...

Adobe InDesign Desktop Uninitialized Pointer Vulnerability

Adobe InDesign Desktop is desktop publishing DTP software developed by Adobe, mainly used for typography design of print and digital publications, including books, magazines, posters, e-books and so on. Adobe InDesign Desktop suffers from an uninitialized pointer vulnerability that can be exploit...

Adobe InDesign Desktop Buffer Overflow Vulnerability (CNVD-2025-19245)

Adobe InDesign Desktop is a desktop publishing DTP application developed by Adobe, mainly used for typographic editing of printed materials, supporting the creation of books, magazines, posters, flyers and other printed materials. A buffer overflow vulnerability exists in Adobe InDesign Desktop,...

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21453)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause unauthorized channel subscriptions...

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21454)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause the plugin to crash...

Open5GS Denial of Service Vulnerability (CNVD-2025-18545)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS has a security vulnerability that can be exploited by an attacker to cause a denial of service via the functions gmmstatederegistered/gmmstateexception in the file...

OpenBao suffers from an unspecified vulnerability (CNVD-2025-18607)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao versions 0.1.0 through 2.3.1, which stems from the TOTP key engine being able to accept valid code multiple times, and no details of the vulnerability are provided at this time...

Open5GS has an unspecified vulnerability (CNVD-2025-18543)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS has a security vulnerability that can be exploited by an attacker to cause local manipulation...

Open5GS has an unspecified vulnerability (CNVD-2025-18568)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a security vulnerability that can be exploited by an attacker to cause reachable assertions via the function ngapbuilddownlinknastransport in the...

OpenBao has an unspecified vulnerability (CNVD-2025-18598)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions, which can be exploited by attackers to cause MFA requirements to be bypassed...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-18822)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel that is caused by a heap buffer overflow when opening a specially crafted file. An attacker can exploit this vulnerability to execute arbitrary cod...

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21457)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause the plugin to crash...

WordPress GMap Generator plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress GMap Generator plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied...

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21459)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause an edit channel subscription...

Adobe InCopy Out-of-Bounds Write Vulnerability (CNVD-2025-18936)

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute code on the system or cause the application to crash...

WordPress Software Issue Manager plugin cross-site scripting vulnerability

The WordPress Software Issue Manager plugin is a project-based WordPress plugin for tracking software defects, issues, tasks, and product feature requests, with support for customized reporting. The WordPress Software Issue Manager plugin suffers from a cross-site scripting vulnerability that ste...

WordPress The7 plugin cross-site scripting vulnerability

WordPress The7 plugin is a highly customizable WordPress theme. WordPress The7 plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary web...

WordPress Advanced Custom Fields Plugin HTML Injection Vulnerability

WordPress Advanced Custom Fields Plugin is a powerful custom fields plugin for WordPress that allows you to add many types of custom fields such as images, checkboxes, files, text, etc. to posts, pages, categories, users, and other objects, and supports exporting to XML or PHP code, and can be...

Tenda AC20 Stack Buffer Overflow Vulnerability (CNVD-2026-00674)

The Tenda AC20 is a wireless router from the Chinese company Tenda. The Tenda AC20 suffers from a stack buffer overflow vulnerability that originates from a misuse of the parameter rebootTime in the file /goform/SetSysAutoRebbotCfg, which can be exploited by an attacker to cause a stack buffer...