131891 matches found
Delta Electronics DIAEnergie Cross-Site Scripting Vulnerability (CNVD-2025-22955)
Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics China for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizin...
Multiple Vulnerabilities in Third-Party Components Prior to SIEMENS SINEC OS V3.2
The RUGGEDCOM RST2428P is a SINEC OS-based Layer 2 Ethernet switch with up to 28 non-blocking interfaces.SCALANCE X switches are used for connecting industrial components such as programmable logic controllers PLCs or human machine interfaces HMIs. Multiple vulnerabilities exist in third-party...
Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC) Multiple Vulnerabilities
RUGGEDCOM CROSSBOW is a secure access management solution designed to provide NERC CIP compliant access to smart electronic devices. Multiple vulnerabilities exist in the Siemens RUGGEDCOM CROSSBOW Station Access Controller SAC, which can be exploited by attackers to execute arbitrary code or cau...
Siemens POWER METER SICAM Q100/Q200 Information Disclosure Vulnerability
SIEMENS POWER METER SICAM Q100 and Siemens POWER METER SICAM Q200 are multifunctional power quality recorders from Siemens. An information disclosure vulnerability exists in the Siemens POWER METER SICAM Q100/Q200, which can be exploited by an attacker to extract the password of an SMTP account a...
Tenda M3 /goform/getMasterPassengerAnalyseData File Stack Buffer Overflow Vulnerability
Tenda M3 is a wireless controller AC from Tenda, which is aimed at scenarios such as hotel chains, low-star hotels and small and medium-sized businesses. Tenda M3 there is a stack buffer overflow vulnerability, the vulnerability stems from /goform/getMasterPassengerAnalyseData file in the...
Siemens RUGGEDCOM APE1808 Nozomi Guardian/CMC Vulnerability
RUGGEDCOM APE1808 is an industrial-grade application hosting platform. The Siemens RUGGEDCOM APE1808 suffers from a Nozomi Guardian/CMC vulnerability that can be exploited by an attacker to execute unauthorized arbitrary operating system commands...
SIEMENS Desigo CC family and SENTRON Powermanager elevation of privilege vulnerability
The Desigo CC product range includes Desigo CC, an integrated building management platform for managing high-performance buildings, Desigo CC Compact, a tailored solution for small and medium-sized buildings, Desigo CC Connect, a software gateway based on the Desigo CC platform, and Cerberus DMS ...
SIEMENS BFCClient has multiple vulnerabilities
SIEMENS BFCClient is to provide equipment networking services to help manufacturing companies achieve cost reduction and efficiency through equipment data collection, visualization and analysis. SIEMENS BFCClient has multiple vulnerabilities that can be exploited by attackers to read memory...
Siemens SIPROTEC 5 Compact 7SX800 (CP050) Local USB Port Network Packet Bandwidth Limit Improperly Vulnerability
The SIPROTEC 5 Compact 7SX800 CP050 offers a range of integrated protection, control, measurement and automation functions for substations and other applications. The Siemens SIPROTEC 5 Compact 7SX800 CP050 suffers from an improper bandwidth limitation of network packets on the local USB port...
Delta Electronics DIAEnergie Cross-Site Scripting Vulnerability (CNVD-2025-22956)
Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics China for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizin...
Delta Electronics DIAEnergie Cross-Site Scripting Vulnerability (CNVD-2025-22954)
Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics China for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizin...
Multiple Vulnerabilities in Siemens SINEC OS Third-Party Components
The RUGGEDCOM RST2428P is a Layer 2 Ethernet switch based on the SINEC operating system with up to 28 non-blocking interfaces. SCALANCE X switches are used to connect industrial components such as programmable logic controllers PLCs or human machine interfaces HMIs. Multiple vulnerabilities exist...
Tenda AC6 Code Execution Vulnerability (CNVD-2025-20158)
Tenda AC6 is a dual-band wireless router from Tenda that supports IPv4 and IPv6 protocols and utilizes the 802.11ac/n wireless standard to provide a wireless transmission rate of 1167Mbps. A code execution vulnerability exists in the Tenda AC6. The vulnerability stems from the presence of insecur...
Elevation of Privilege Vulnerability in Multiple SIEMENS Products
SIMATIC Information Server is used to report and visualize process data stored in SIMATIC Process Historian.SIMATIC PDM MS provides independent field device management, diagnostics, and data acquisition functions across a wide range of communication protocols that are independent of the automatio...
TOTOLINK A3002R fw_ip parameter buffer overflow vulnerability
The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. A buffer overflow vulnerability exists in the TOTOLINK A3002R. The vulnerability stems from the fwip...
NVIDIA Merlin Transformers4Rec Code Injection Vulnerability
NVIDIA Merlin Transformers4Rec is a software for building serialized and conversational recommender systems from NVIDIA. NVIDIA Merlin Transformers4Rec suffers from a code injection vulnerability, which originates from a Python dependency, that can be exploited by an attacker to perform malicious...
NVIDIA WebDataset OS Command Injection Vulnerability
NVIDIA WebDataset is a high-performance data storage method from NVIDIA. NVIDIA WebDataset suffers from an operating system command injection vulnerability that can be exploited by an attacker to bypass the authentication process and take over the accounts of other web application users under...
TOTOLINK A7000R Certification Bypass Vulnerability
TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A7000R suffers from an authentication bypass vulnerability that stems from formLoginAuth.htm not properly validating a login request, which can be exploited by an attacker to bypass authentication, tamper wi...
NVIDIA Megatron-LM Code Injection Vulnerability (CNVD-2025-19536)
NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. NVIDIA Megatron-LM suffers from a code injection vulnerability that originates in the megatron/training/arguments.py component, which can be exploited b...
Rockwell Automation FLEX 5000 Resource Management Error Vulnerability (CNVD-2025-19531)
Rockwell Automation FLEX 5000 is a high-speed counter module from Rockwell Automation. A resource management error vulnerability exists in the Rockwell Automation FLEX 5000 that stems from incorrect processing of a CIP Class 32 request causing the module to enter a fault state. No details of the...
NVIDIA NeMo library path traversal vulnerability
NVIDIA NeMo library is a library of deep learning tools from NVIDIA. The NVIDIA NeMo library suffers from a path traversal vulnerability, which originates in the model loading component, that can be exploited by an attacker to obtain sensitive files by accessing locations outside of a restricted...
NVIDIA NeMo Framework Code Issue Vulnerability
NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A code issue vulnerability exists in the NVIDIA NeMo Framework, which can be exploited by an attacker to execute malicious code by uploading arbitrary files and bypassing file size limits...
TOTOLINK EX1200T Certification Bypass Vulnerability
The TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1200T suffers from an authentication bypass vulnerability that originates from formLoginAuth.htm not properly validating the login request, which can be exploited by an attacker to gain system...
NVIDIA Isaac-GR00T Code Injection Vulnerability
NVIDIA Isaac-GR00T is an open base modeling platform from NVIDIA. The NVIDIA Isaac-GR00T suffers from a code injection vulnerability, which originates in a Python component, that can be exploited by an attacker to perform malicious operations and compromise system stability by bypassing security...
NVIDIA Apex Code Injection Vulnerability
NVIDIA Apex is a set of utility kits from NVIDIA. NVIDIA Apex suffers from a code injection vulnerability, which originates in a Python component, that can be exploited by an attacker to perform malicious operations and compromise system stability by bypassing security mechanisms...
NVIDIA Megatron-LM Code Injection Vulnerability
NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. NVIDIA Megatron-LM suffers from a code injection vulnerability that originates in a tool component and can be exploited by an attacker to modify the...
TOTOLINK N350R Injection Vulnerability
The TOTOLINK N350R is a WiFi router from China's Gion Electronics TOTOLINK. The TOTOLINK N350R suffers from an injection vulnerability that originates from a misbehavior in the file /boafrm/formSysCmd, which can be exploited by an attacker to cause an application to crash or behave abnormally by...
soosyze brute force login vulnerability
soosyze is Soosyze open source a content management system . soosyze has a brute force vulnerability , the vulnerability stems from the /user/login endpoint lack of rate limiting and locking mechanism , an attacker can use this vulnerability to cause brute force attack...
Dell PowerEdge Platform 14G AMD BIOS Information Disclosure Vulnerability
Dell PowerEdge Platform 14G AMD BIOS is a BIOS system from Dell USA. The Dell PowerEdge Platform 14G AMD BIOS suffers from an information disclosure vulnerability that originates from end-of-buffer memory location access, which can be exploited by an attacker to gain access to internal system...
Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2025-27459)
Foxit PDF Reader is a Chinese Foxit Foxit company's a PDF document reader. Foxit PDF Reader suffers from a buffer overflow vulnerability that originates from an uninitialized pointer, which can be exploited by an attacker to obtain system privileges and modify the system configuration by executin...
Online Shopping Portal Project bill-ship-addresses.php File SQL Injection Vulnerability
Online Shopping Portal Project is an online shopping portal project. Online Shopping Portal Project suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter billingpincode in the file...
Netis WF2880 Function_00465620 Function Buffer Overflow Vulnerability
The Netis WF2880 is a wireless router from the Chinese company Netis. A buffer overflow vulnerability exists in the Netis WF2880 Function00465620 function, which can be exploited by an attacker to cause a denial of service...
Intel AI Playground Improper Privilege Vulnerability
Intel AI Playground is an open source application based on AI acceleration technology launched by Intel, which is mainly used to simplify the threshold of AI development, supporting features such as image generation, enhancement and chatbots. Intel AI Playground suffers from a privilege improprie...
Intel DSA Search Path Uncontrolled Vulnerability
Intel DSA is a hardware gas pedal built into Intel® Xeon® Scalable processors that accelerates storage, networking, and data analytics workloads by offloading data transfer tasks to dedicated hardware, freeing up CPU resources for other tasks. Intel DSA suffers from an uncontrolled search path...
Intel 700 Series Ethernet Denial of Service Vulnerability
Intel 700 Series Ethernet is a family of high-performance Ethernet controllers from Intel Corporation. A denial of service vulnerability exists in Intel 700 Series Ethernet, which arises from uncontrolled resource consumption and can be exploited by an attacker to cause a denial of service...
Intel 700 Series Ethernet Denial of Service Vulnerability (CNVD-2025-19268)
Intel 700 Series Ethernet is a family of high-performance Ethernet controllers from Intel Corporation. A denial of service vulnerability exists in Intel 700 Series Ethernet, which arises from uncontrolled resource consumption and can be exploited by an attacker to cause a denial of service...
Intel Tiber Edge Platform Edge Orchestrator Denial of Service Vulnerability (CNVD-2025-19835)
Intel Tiber Edge Platform Edge Orchestrator is an edge computing platform from Intel designed to simplify the edge application development and deployment process by supporting modular tools to build and run edge applications. Intel Tiber Edge Platform Edge Orchestrator suffers from a denial of...
Adobe Illustrator Out-of-Bounds Write Vulnerability
Adobe Illustrator is an industry-standard vector graphic design software developed by Adobe, mainly used for creating and editing vector graphics, illustrations, logo design, etc., widely used in publishing, multimedia and online image fields. Adobe Illustrator suffers from an out-of-bounds write...
Adobe Illustrator Null Pointer Dereference Vulnerability
Adobe Illustrator is an industry-standard vector graphic design software developed by Adobe, mainly used for creating and editing vector graphics, illustrations, logo design, etc., widely used in publishing, multimedia and online image fields. Adobe Illustrator suffers from a null pointer...
Intel E810 Ethernet Input Validation Improperity Vulnerability
Intel E810 Ethernet is a new generation of Ethernet network adapters launched by Intel, mainly for data center and cloud computing scenarios, supporting high-speed network connectivity and virtualization technologies. The Intel E810 Ethernet suffers from an improper input validation vulnerability...
Netis WF2880 FUN_0047151c Function Buffer Overflow Vulnerability
The Netis WF2880 is a wireless router from the Chinese company Netis. A buffer overflow vulnerability exists in the Netis WF2880 FUN0047151c function, which can be exploited by an attacker to cause a denial of service attack...
Job Diary user-apply.php file SQL Injection Vulnerability
Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter jobtitle in the file /user-apply.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...
Fortinet FortiSIEM Operating System Command Injection Vulnerability (CNVD-2025-21176)
Fortinet FortiSIEM is a suite of security information and event management systems from the American company Fiat Fortinet. The system includes features such as asset discovery, workflow automation and unified management. Fortinet FortiSIEM has an operating system command injection vulnerability,...
Visitor Management System front.php File SQL Injection Vulnerability
Visitor Management System is a visitor access management system. The Visitor Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter rid in the file /front.php. An attacker can exploit this...
Teachers Record Management System admin/search.php File SQL Injection Vulnerability
Teachers Record Management System is a teacher record management system. The Teachers Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter searchdata in file /admin/search.php. An...
WordPress Plugin CaptionPix Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress plugin CaptionPix 1.8 and earlier versions, whi...
Hospital Management System SQL Injection Vulnerability
Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter doctorspecilization in the file...
Simple Cafe Ordering System portal.php File SQL Injection Vulnerability
Simple Cafe Ordering System is a simple coffee ordering system. Simple Cafe Ordering System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter ID of the file /portal.php. An attacker can exploit this...
Unspecified Vulnerability in D-Link DIR-619L
D-Link DIR-619L is a home wireless router from AUO D-Link, designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. A security vulnerability exists in the D-Link DIR-619L, which stems from insufficient validation of...
WordPress plugin Blocksy cross-site scripting vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Blocksy 2.1.6 and previous versions of cross-site scripting vulnerability , the...