131891 matches found
Apartment Management System addowner.php File SQL Injection Vulnerability
Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file /owner/addowner.php. An attacker can exploit this...
Hospital Management System about-us.php File SQL Injection Vulnerability
Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the pagetitle parameter of about-us.php. An attacker can exploit thi...
Google Android Code Execution Vulnerability (CNVD-2025-19988)
Google Android is a Linux-based open source operating system from Google. A code execution vulnerability exists in Google Android, which can be exploited by an attacker to execute arbitrary code on the system...
Google Android Information Disclosure Vulnerability (CNVD-2025-19998)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability caused by a lack of permission checking in handleBondStateChanged of AdapterService.java. An attacker can exploit this vulnerability to obtain sensitive...
Google Android elevation of privilege vulnerability (CNVD-2025-19982)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused due to logic error code in multiple locations. The vulnerability can be exploited by an attacker to gain elevated privileges on the system...
Google Android Memory Misreference Vulnerability (CNVD-2025-19921)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a memory misreference vulnerability, which stems from a mix-up in sdpdiscovery.cc in the sdpsndservicesearchreq directive responsible for freeing memory, which can be exploited by an attacker to...
Google Android Memory Misreference Vulnerability (CNVD-2025-19922)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a memory misreference vulnerability that stems from a mix-up in the bneputils.cc instruction bnepuchecksendpacket responsible for freeing memory, which can be exploited by an attacker to elevate...
Google Chrome Reuse After Release Vulnerability
Google Chrome is a free web browser developed by Google. It is the world's largest browser in terms of market share due to its speed, security, simplicity, multi-platform support and built-in privacy protection. A post-release reuse vulnerability exists in Google Chrome, which can be exploited by...
Google Android elevation of privilege vulnerability (CNVD-2025-19986)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...
libbiosig stack buffer overflow vulnerability (CNVD-2025-20254)
libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a stack buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...
libbiosig stack buffer overflow vulnerability (CNVD-2025-20249)
libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a stack buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...
libbiosig stack buffer overflow vulnerability (CNVD-2025-20242)
libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a stack buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...
Unspecified Vulnerability in D-Link DSL-7740C
The D-Link DSL-7740C is a modem from China-based AUO D-Link. A security vulnerability exists in the D-Link DSL-7740C, which can be exploited by attackers to escalate privileges via brute force attack...
Google Android Information Disclosure Vulnerability (CNVD-2025-19991)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability due to an obfuscated agent in multiple functions of StatusHint.java and TelecomServiceImpl.java. An attacker could exploit the vulnerability to disclose...
libbiosig RHS2000 parsing function buffer overflow vulnerability
libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. A buffer overflow vulnerability exists in the libbiosig RHS2000 parsing function, which can be exploited by an attacker to cause arbitrary code...
esri Portal for ArcGIS Enterprise Sites Cross-Site Scripting Vulnerability (CNVD-2025-21187)
esri Portal for ArcGIS Enterprise Sites is an enterprise-level geographic information sharing platform from ESRI that allows users within an organization to view, edit, and share geographic information through the portal. A cross-site scripting vulnerability exists in esri Portal for ArcGIS...
Unspecified Vulnerability in JetBrains IntelliJ IDEA (CNVD-2025-19798)
JetBrains IntelliJ IDEA is an integrated development environment IDE developed by JetBrains , designed to improve developer productivity and code quality , mainly for Java programming , but also supports Kotlin, Web, Spring and other languages and frameworks . A security vulnerability exists in...
JetBrains YouTrack Cross-Site Scripting Vulnerability
JetBrains YouTrack is a project management tool developed by the Czech company JetBrains. JetBrains YouTrack suffers from a cross-site scripting vulnerability that stems from the content of Mermaid charts, no details of the vulnerability are provided at this time...
JetBrains TeamCity Elevation of Privilege Vulnerability
JetBrains TeamCity is a Continuous Integration CI/CD tool developed by JetBrains, Inc. to automate the software build, test and deployment process. JetBrains TeamCity suffers from an elevation of privilege vulnerability that stems from incorrect directory ownership, and no details of the...
Unspecified Vulnerability in JetBrains IntelliJ IDEA
JetBrains IntelliJ IDEA is an integrated development environment IDE developed by JetBrains , designed to improve developer productivity and code quality , mainly for Java programming , but also supports Kotlin, Web, Spring and other languages and frameworks . A security vulnerability exists in...
JetBrains TeamCity Injection Vulnerability
JetBrains TeamCity is a Continuous Integration CI/CD tool developed by JetBrains, Inc. to automate the software build, test and deployment process. JetBrains TeamCity suffers from an injection vulnerability that stems from SMTP injection allowing modification of email content, which can be...
JetBrains IntelliJ IDEA HTML Injection Vulnerability
JetBrains IntelliJ IDEA is an integrated development environment IDE developed by JetBrains , designed to improve developer productivity and code quality , mainly for Java programming , but also supports Kotlin, Web, Spring and other languages and frameworks . JetBrains IntelliJ IDEA suffers from...
JetBrains TeamCity Information Disclosure Vulnerability
JetBrains TeamCity is a Continuous Integration/Continuous Deployment CI/CD tool developed by JetBrains to automate the software build, test, and deployment process with support for multiple programming languages and tools. JetBrains TeamCity suffers from an information disclosure vulnerability th...
DELL iDRAC Service Module Code Execution Vulnerability
The DELL iDRAC Service Module is a lightweight software service on Dell servers that is primarily used to enhance the functionality of iDRAC Integrated Dell Remote Control Card and improve server management efficiency by consolidating operating system information. A code execution vulnerability...
esri Portal for ArcGIS Enterprise Sites Cross-Site Scripting Vulnerability (CNVD-2025-21188)
esri Portal for ArcGIS Enterprise Sites is an enterprise-level geographic information sharing platform from ESRI that allows users within an organization to view, edit, and share geographic information through the portal. A cross-site scripting vulnerability exists in esri Portal for ArcGIS...
IBM Edge Application Manager Code Issue Vulnerability
IBM Edge Application Manager is an application from International Business Machines IBM that provides powerful solutions to address the need to deliver enterprise computing power at the edge of the cloud, closer to where the data is being created and at the edge of the enterprise where action nee...
esri Portal for ArcGIS Enterprise Sites Cross-Site Scripting Vulnerability (CNVD-2025-21186)
esri Portal for ArcGIS Enterprise Sites is an enterprise-level geographic information sharing platform from ESRI that allows users within an organization to view, edit, and share geographic information through the portal. A cross-site scripting vulnerability exists in esri Portal for ArcGIS...
esri Portal for ArcGIS Enterprise Sites Cross-Site Scripting Vulnerability
esri Portal for ArcGIS Enterprise Sites is an enterprise-level geographic information sharing platform from ESRI that allows users within an organization to view, edit, and share geographic information through the portal. A cross-site scripting vulnerability exists in esri Portal for ArcGIS...
DELL iDRAC Service Module Elevation of Privilege Vulnerability
The DELL iDRAC Service Module is a lightweight software service on Dell servers that is primarily used to enhance the functionality of iDRAC Integrated Dell Remote Control Card and improve server management efficiency by consolidating operating system information. An elevation of privilege...
JetBrains IntelliJ IDEA Improper Access Control Vulnerability
JetBrains IntelliJ IDEA is an integrated development environment IDE developed by JetBrains , designed to improve developer productivity and code quality , mainly for Java programming , but also supports Kotlin, Web, Spring and other languages and frameworks . JetBrains IntelliJ IDEA suffers from...
D-Link DIR-619L formWlanSetup function buffer overflow vulnerability
D-Link DIR-619L is a home wireless router from AUO D-Link, designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the fwdswepKe...
Apache OFBiz Code Execution Vulnerability (CNVD-2025-20870)
Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. A code execution vulnerability exists in Apache OFBiz versions prior to 24.09.02 that stems from improper...
Mozilla Firefox for Android Information Disclosure Vulnerability (CNVD-2025-19560)
Mozilla Firefox for Android is a web browser designed for Android devices by the US-based Mozilla Foundation. An information disclosure vulnerability exists in Mozilla Firefox for Android prior to version 141, which originates from a sandboxed iframe without the allow-downloads attribute that can...
Mozilla Firefox for iOS Security Bypass Vulnerability (CNVD-2025-19564)
Mozilla Firefox for iOS is a web browser designed for iOS devices by the US-based Mozilla Foundation. A security bypass vulnerability exists in Mozilla Firefox for iOS prior to version 141, which stems from a QR scanner that may allow arbitrary websites to be opened. An attacker could exploit the...
Mozilla Firefox for iOS Cross-Site Scripting Vulnerability (CNVD-2025-19567)
Mozilla Firefox for iOS is a web browser designed for iOS devices by the US-based Mozilla Foundation. A cross-site scripting vulnerability exists in Mozilla Firefox for iOS prior to version 142, which stems from an improper handling of the Content-Disposition header and can be exploited by an...
Tenda AC6 fromSetSysTime function buffer overflow vulnerability
Tenda AC6 is a dual-band wireless router from Tenda that supports IPv4 and IPv6 protocols and utilizes the 802.11ac/n wireless standard to provide a wireless transmission rate of 1167Mbps. Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the time parameter in the...
Tenda AC6 fromSetSysTime function ntpServer parameter buffer overflow vulnerability
Tenda AC6 is a dual-band wireless router from Tenda that supports IPv4 and IPv6 protocols and utilizes the 802.11ac/n wireless standard to provide a wireless transmission rate of 1167Mbps. Tenda AC6 suffers from a buffer overflow vulnerability that originates from the ntpServer parameter in the...
Tenda AC6 Denial of Service Vulnerability
Tenda AC6 is a dual-band wireless router from Tenda that supports IPv4 and IPv6 protocols and utilizes the 802.11ac/n wireless standard to provide a wireless transmission rate of 1167Mbps. A denial of service vulnerability exists in the Tenda AC6, which originates from a problem with the HTTP...
Sports Management System sports.php File SQL Injection Vulnerability
Sports Management System a sports management system. The Sports Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter code in the file /Admin/sports.php. An attacker can exploit this vulnerabili...
Code execution vulnerability in multiple Mozilla products (CNVD-2025-26893)
Mozilla Firefox is an open source web browser.Mozilla Thunderbird is a set of e-mail client software separate from the Mozilla Application Suite. The software supports IMAP, POP mail protocols and HTML mail format. A code execution vulnerability exists in multiple Mozilla products, which can be...
Mozilla Focus for iOS Cross-Site Scripting Vulnerability (CNVD-2025-19557)
Mozilla Focus for iOS is a privacy browser from the US-based Mozilla Foundation designed for iOS devices. A cross-site scripting vulnerability exists in versions prior to Mozilla Focus for iOS 142, which can be exploited by an attacker to execute arbitrary web script or HTML via injection of a...
Online Course Registration sesssion parameter SQL injection vulnerability
Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter sesssion. An attacker can exploit this vulnerability to execute...
Unspecified Vulnerability in Mozilla Firefox for Android (CNVD-2025-19561)
Mozilla Firefox for Android is a web browser designed for Android devices by the US-based Mozilla Foundation. A security vulnerability exists in Mozilla Firefox for Android prior to version 141, which stems from a blob:URI that may hide the true origin of a page and can be exploited by an attacke...
Adobe Experience Manager cross-site scripting vulnerability (CNVD-2025-19503)
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
Adobe Experience Manager cross-site scripting vulnerability (CNVD-2025-19507)
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2025-19505)
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2025-19508)
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
Apache Log4cxx Input Validation Error Vulnerability (CNVD-2025-20868)
Apache Log4cxx is the United States Apache Apache Foundation of a C + + logging framework patterned on Apache log4j . An input validation error vulnerability exists in Apache Log4cxx versions prior to 1.5.0, which stems from JSONLayout not properly escaping all payload bytes, and can be exploited...
Mozilla Firefox for Android Security Bypass Vulnerability (CNVD-2025-19559)
Mozilla Firefox for Android is a web browser designed for Android devices by the US-based Mozilla Foundation. A security bypass vulnerability exists in Mozilla Firefox for Android prior to version 141, which stems from improper truncation of URL display in the address bar and can be exploited by...
Lingdang CRM SQL Injection Vulnerability
Lingdang CRM Lingdang CRM is a customer relationship management system of China Lingdang Lingdang company. Lingdang CRM SQL injection vulnerability exists, the vulnerability stems from the improper operation of the getvaluestring parameter in the /crm/crmapi/erp/tabdetailmoduleSave.php file, whic...