131891 matches found
Hostel Management System hostel_manage.exe file improper authentication vulnerability
Hostel Management System is a hostel management system. Hostel Management System suffers from an improper authentication vulnerability that originates from a misbehavior of the file hostelmanage.exe that results in improper authentication, no details of the vulnerability are available at this tim...
WordPress Billplz Addon for Contact Form 7 plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress Billplz Addon for Contact Form 7 plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escapin...
LibTIFF Buffer Overflow Vulnerability
LibTIFF is LibTIFF open source a library to read and write TIFF Tagged Image File Format files , the library contains a number of command-line tools to deal with TIFF files . LibTIFF has a buffer overflow vulnerability that originates from an incorrect operation of the file tiffcrop.c, which can ...
Online Shopping Portal Project signup.php File SQL Injection Vulnerability
Online Shopping Portal Project is an online shopping portal project. A SQL injection vulnerability exists in Online Shopping Portal Project, which originates from the lack of validation of externally entered SQL statements in the parameter emailid in the file /shopping/signup.php. An attacker can...
WordPress Plugin Build App Online Cross-Site Request Forgery Vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in WordPress plugin Build App Online 1.0.23 and prior...
DELL SupportAssist for Business PCs Elevation of Privilege Vulnerability
DELL SupportAssist for Business PCs is Dell's PC management solution for enterprise users, helping companies improve IT management efficiency and reduce O&M costs through AI-driven automated support, remote deployment and centralized control capabilities. An elevation of privilege vulnerability...
Adobe Animate post-release reuse vulnerability (CNVD-2025-20477)
Adobe Animate is a professional 2D animation software developed by Adobe, formerly known as Flash Professional, which supports HTML5, WebGL and other formats, and is widely used in game development, web design and interactive content creation. Adobe Animate suffers from a post-release reuse...
Adobe Photoshop Out-of-Bounds Write Vulnerability (CNVD-2025-24438)
Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the...
GNU GRUB Buffer Overflow Vulnerability
GNU GRUB is a Linux system boot program from the GNU community. GNU GRUB suffers from a buffer overflow vulnerability, which originates in the UFS module, where the program does not properly manage memory allocation and release when processing data, and can be exploited by an attacker to obtain...
Intel Converged Security and Management Engine Competitive Conditions Vulnerability
The Intel Converged Security and Management Engine is Intel's microcontroller embedded in the chipset to provide system management, security and low-power features. A competitive condition vulnerability exists in Intel Converged Security and Management Engine, and no detailed vulnerability detail...
Netis WF2880 FUN_00470c50 Function Buffer Overflow Vulnerability
The Netis WF2880 is a wireless router from the Chinese company Netis. A buffer overflow vulnerability exists in the Netis WF2880 FUN00470c50 function, which can be exploited by an attacker to cause a denial of service...
Adobe Dimension Out-of-Bounds Read Vulnerability (CNVD-2025-24436)
Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. Adobe Dimension suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...
Adobe Commerce Path Traversal Vulnerability (CNVD-2025-24435)
Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A path traversal vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a bypass of security features and modify limited...
WordPress Alobaidi Captcha plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress Alobaidi Captcha plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied...
Job Diary admin-inbox.php file SQL injection vulnerability
Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID in the file /admin-inbox.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...
Ivanti Avalanche Code Execution Vulnerability
Ivanti Avalanche is an enterprise mobile device management system from Ivanti for managing mobile devices such as smartphones and tablets. A code execution vulnerability exists in Ivanti Avalanche, which stems from an incomplete configuration restriction, and can be exploited by an attacker to...
Tenda AC20 Hardcoded Credentials Vulnerability
Tenda AC20 is a home router from Tenda. The Tenda AC20 suffers from a hard-coded credentials vulnerability that originates from the presence of hard-coded credentials in the file /etcro/shadow. An attacker can exploit the vulnerability to cause confidentiality to be compromised...
DELL CloudLink XML External Entity References Improperly Restricted Vulnerability
DELL CloudLink is a data encryption and key management solution from Dell that is targeted at enterprise-level users and supports public, private and hybrid cloud environments. DELL CloudLink suffers from an improperly restricted XML external entity reference vulnerability that can be exploited b...
Visitor Management System visitor_out.php File SQL Injection Vulnerability
Visitor Management System is a visitor access management system. Visitor Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter rid in the file /visitorout.php. An attacker can exploit this...
Intel Tiber Edge Platform Edge Orchestrator Improper Access Control Vulnerability
Intel Tiber Edge Platform Edge Orchestrator is an edge computing platform from Intel designed to simplify the edge application development and deployment process by supporting modular tools to build and run edge applications. Intel Tiber Edge Platform Edge Orchestrator suffers from an Improper...
D-Link DIR-818L Injection Vulnerability
The D-Link DIR-818L is a WiFi router from the Chinese company AUO D-Link. The D-Link DIR-818L suffers from an injection vulnerability that originates from a misbehavior in the file /htdocs/cgibin, which can be exploited by an attacker to bypass authentication and access restricted data by injecti...
Netis WF2880 FUN_00471994 Function Buffer Overflow Vulnerability
The Netis WF2880 is a wireless router from the Chinese company Netis. A buffer overflow vulnerability exists in the Netis WF2880 FUN00471994 function, which can be exploited by an attacker to cause a denial of service...
ImageMagick Buffer Overflow Vulnerability (CNVD-2025-19249)
ImageMagick is ImageMagick open source suite of open source image processing software that can read, convert or write images in a variety of formats. ImageMagick suffers from a buffer overflow vulnerability that originates from not handling reference values greater than 1024 during Log to sRGB...
Intel Distribution for Python Improper Privileges Vulnerability
Intel Distribution for Python is the official Python distribution from Intel, designed to improve the performance of Python code by optimizing high-performance mathematical and scientific computing libraries, with support for multi-core CPUs and the latest instruction set acceleration. Intel...
Adobe Substance3D Modeler Out-of-Bounds Read Vulnerability
Adobe Substance3D Modeler is the core tool in the Adobe Substance 3D series of software, designed for 3D modeling, supporting digital clay sculpting, symmetry tools, automated UV management, and other features for seamless switching across computer VR environments. An out-of-bounds read...
Netis WF2880 FUN_0046ed68 function buffer overflow vulnerability
The Netis WF2880 is a wireless router from the Chinese company Netis. A buffer overflow vulnerability exists in the Netis WF2880 FUN0046ed68 function, which can be exploited by an attacker to cause a denial of service...
WordPress BaiduXZH Submit plugin cross-site scripting vulnerability
WordPress BaiduXZH Submit plugin is a third-party WordPress plugin, mainly used for automatic submission of website content to Baidu Bear Paw, to achieve rapid inclusion within 24 hours, and support for original protection features. WordPress BaiduXZH Submit plugin has a cross-site scripting...
Ivanti Avalanche SQL Injection Vulnerability
Ivanti Avalanche is an enterprise mobile device management system from Ivanti for managing mobile devices such as smartphones and tablets. Ivanti Avalanche suffers from a SQL injection vulnerability that originates when the program does not properly validate user-entered SQL statements, which can...
Apache Superset Authorization Problem Vulnerability (CNVD-2025-19101)
Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset suffers from an authorization issue vulnerability that stems from improper access control on the /explore endpoint, which could be exploited by an attacker to obtain metadata abou...
Adobe Animate Post-Release Reuse Vulnerability
Adobe Animate is a professional 2D animation software developed by Adobe, formerly known as Flash Professional, which supports HTML5, WebGL and other formats, and is widely used in game development, web design and interactive content creation. Adobe Animate suffers from a post-release reuse...
Medical Store Management System UpdateCompany.java File SQL Injection Vulnerability
Medical Store Management System is a pharmacy management system. The Medical Store Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter companyNameTxt in the file UpdateCompany.java. An...
Travel Management System /updatepackage.php File SQL Injection Vulnerability
Travel Management System is a travel management system. Travel Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in parameter s1 in file /updatepackage.php. An attacker can exploit this vulnerability to execute...
Intel 700 Series Ethernet Input Validation Error Vulnerability
Intel 700 Series Ethernet is a family of high-performance Ethernet controllers from Intel Corporation. An input validation error vulnerability exists in Intel 700 Series Ethernet that stems from improper input validation, and no detailed vulnerability details are available at this time...
WordPress plugin Classified Listing cross-site scripting vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site scripting vulnerability exists in WordPress plugin Classified Listing 5.0.0 and earlier...
Intel 800 Series Ethernet Input Validation Improperity Vulnerability
Intel 800 Series Ethernet is a new generation of high-speed Ethernet technology from Intel that supports 25GbE and 100GbE speeds and is backward compatible with 10GbE. Intel 800 Series Ethernet suffers from an improper input validation vulnerability that can be exploited by an attacker to cause a...
Fortinet FortiSIEM Operating System Command Injection Vulnerability (CNVD-2025-21176)
Fortinet FortiSIEM is a suite of security information and event management systems from the American company Fiat Fortinet. The system includes features such as asset discovery, workflow automation and unified management. Fortinet FortiSIEM has an operating system command injection vulnerability,...
Apache Tomcat Authorization Problem Vulnerability (CNVD-2025-19105)
Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server for the implementation of Servlet and JavaServer Page JSP support. Apache Tomcat suffers from an authorization problem vulnerability that stems from a rewrite valve session fixation flaw. An attack...
Online Medicine Guide browsemdcn.php File SQL Injection Vulnerability
Online Medicine Guide is an online medical guide. Online Medicine Guide suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter Search in the file /browsemdcn.php. The vulnerability can be exploited by an attacker to...
Tenda AC20 Buffer Overflow Vulnerability (CNVD-2025-19579)
The Tenda AC20 is a wireless router from the Chinese company Tenda. The Tenda AC20 suffers from a buffer overflow vulnerability that originates from the failure of the savevirtualserdata function parameter list in the /goform/formSetVirtualSer file to correctly validate the length of the input...
Tenda AC20 Buffer Overflow Vulnerability (CNVD-2025-19581)
The Tenda AC20 is a wireless router from the Chinese company Tenda. The Tenda AC20 suffers from a buffer overflow vulnerability that originates from the failure of the sub48E628 function parameter list in the /goform/SetIpMacBind file to properly validate the length of the input data, which can b...
WordPress Plugin Barcode Scanner with Inventory & Order Manager Path Traversal Vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal vulnerability exists in the WordPress plugin Barcode Scanner with Inventory & Order...
Intel Tiber Edge Platform Edge Orchestrator Denial of Service Vulnerability (CNVD-2025-19837)
Intel Tiber Edge Platform Edge Orchestrator is an edge computing platform from Intel designed to simplify the edge application development and deployment process by supporting modular tools to build and run edge applications. Intel Tiber Edge Platform Edge Orchestrator suffers from a denial of...
Online Shopping Portal Project password-recovery.php File SQL Injection Vulnerability
Online Shopping Portal Project is an online shopping portal project. A SQL injection vulnerability exists in Online Shopping Portal Project, which originates from the lack of validation of externally-entered SQL statements in the parameter emailid in the file /shopping/password-recovery.php. An...
WordPress AL Pack plugin unauthorized access vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An unauthorized access vulnerability exists in the WordPress AL Pack plugin, which stems from a lack of functionality checking of the checkactivatepermission permission callback...
WordPress Anber Elementor Addon plugin cross-site scripting vulnerability
WordPress Anber Elementor Addon plugin is an Elementor plugin extension for WordPress, designed to provide more customization for website design. WordPress Anber Elementor Addon plugin suffers from a cross-site scripting vulnerability that stems from insufficient parameter input cleanup, which ca...
Tenda AC15 Data Forgery Issue Vulnerability
Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol and is mainly designed for home network environment. Tenda AC15 is vulnerable to a data forgery issue, which stems from insufficient data authenticity...
Hostel Management System hostel_manage.exe File Stack Buffer Overflow Vulnerability
Hostel Management System is a hostel management system. Hostel Management System suffers from a stack buffer overflow vulnerability that stems from the parameter uname in the file hostelmanage.exe not properly validating the length of input data, which can be exploited by an attacker to cause a...
Tenda CH22 /goform/editFileName File Buffer Overflow Vulnerability
The Tenda CH22 is an enterprise-grade wireless router from the Tenda brand. Tenda CH22 suffers from a buffer overflow vulnerability, which originates from the failure of the function formeditFileName in the file /goform/editFileName to correctly validate the length and size of the input data, whi...
WordPress Advanced iFrame plugin cross-site scripting vulnerability
WordPress Advanced iFrame plugin is a plugin for WordPress platform which is mainly used for embedding iframe content in websites. The WordPress Advanced iFrame plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of...
Beauty Parlour Management System book-appointment.php File SQL Injection Vulnerability
Beauty Parlour Management System is a software system for standardizing salon business processes and improving management efficiency. Beauty Parlour Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of externally entered SQL statements in t...