Huawei HarmonyOS and EMUI out-of-bounds access vulnerability (CNVD-2025-22606)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. An out-of-bounds access vulnerability exists in Huawei...

Huawei HarmonyOS multi-mode input module iterator failure vulnerability Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. The Huawei HarmonyOS multi-mode input module suffers from an Iterator Failure Vulnerability vulnerability that can be exploited by attackers to affect...

Huawei HarmonyOS ability module untrusted data deserialization vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An untrusted data deserialization vulnerability exists in the Huawei HarmonyOS ability module, which can be exploited by an attacker to cause availability to...

Huawei HarmonyOS Out-of-Bounds Read Vulnerability (CNVD-2025-22263)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a usability impact...

Huawei HarmonyOS home screen module input validation class vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An input validation type vulnerability exists in the Huawei HarmonyOS home screen module, which can be exploited by an attacker to cause the usability to be...

Huawei HarmonyOS virtualization file module path traversal vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A path traversal vulnerability exists in the Huawei HarmonyOS virtualization file module, which can be exploited by an attacker to compromise the...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-22267)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS has a security vulnerability that can be exploited by an attacker to cause the device to be set at random screen orientation by an exploit...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-22269)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from ParcelMismatch in attribute deserialization, and can be exploited by an attacker to cau...

Adobe Substance3D Painter Out-of-Bounds Read Vulnerability (CNVD-2025-19218)

Adobe Substance3D Painter provides real-time 3D texture painting with intelligent material system and physical rendering viewport, supporting 8K resolution material output. An out-of-bounds read vulnerability exists in Adobe Substance3D Painter, which can be exploited by attackers to cause...

Huawei HarmonyOS kernel file system module Competitive Condition Vulnerability Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A competitive condition vulnerability exists in the Huawei HarmonyOS kernel file system module, which can be exploited by attackers to affect availability...

Kenwood DMX958XR Command Injection Vulnerability (CNVD-2025-20302)

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

Unspecified Vulnerability in Huawei HarmonyOS and EMUI HVB Modules

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A security vulnerability exists in Huawei HarmonyOS an...

Huawei HarmonyOS devicemanager module out-of-bounds read vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An out-of-bounds read vulnerability exists in the Huawei HarmonyOS devicemanager module, which can be exploited by attackers to affect availability...

NVIDIA Triton Inference Server Security Bypass Vulnerability

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. A security bypass vulnerability exists in NVIDIA Triton Inference Server, which can be exploited by attackers to cause a denial of service...

Adobe Substance3D Modeler Out-of-Bounds Read Vulnerability (CNVD-2025-19230)

Adobe Substance3D Modeler is the core tool in the Adobe Substance 3D series of software, designed for 3D modeling, supporting digital clay sculpting, symmetry tools, automated UV management, and other features for seamless switching across computer VR environments. An out-of-bounds read...

NVIDIA Triton Inference Server Information Disclosure Vulnerability

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. NVIDIA Triton Inference Server suffers from an information disclosure vulnerability that is caused by an out-of-bounds read flaw in the...

SAMSUNG Blockchain Keystore Code Execution Vulnerability (CNVD-2025-20015)

SAMSUNG Blockchain Keystore is a system tool for creating, storing, managing and backing up private keys from Samsung South Korea. A code execution vulnerability exists in SAMSUNG Blockchain Keystore, which can be exploited by an attacker to execute arbitrary code on the system...

SAP NetWeaver Application Server ABAP HTML Injection Vulnerability

SAP NetWeaver Application Server ABAP is an application server developed by SAP to run ABAP applications. An HTML injection vulnerability exists in SAP NetWeaver Application Server ABAP. An attacker could exploit this vulnerability to construct URLs containing malicious scripts that could be...

Adobe Framemaker Post-Release Reuse Vulnerability (CNVD-2025-19625)

Adobe FrameMaker is Adobe's development of professional-grade technical document creation and layout software, mainly used to deal with complex long-form structured content such as technical manuals, aviation documents, etc., support for XML/DITA standards, multilingual publishing and cross-media...

Huawei HarmonyOS devicemanager bind authentication bypass vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A bind authentication bypass vulnerability exists in Huawei HarmonyOS devicemanager, which can be exploited by an attacker to compromise confidentiality...

Adobe Substance3D Modeler Out-of-Bounds Write Vulnerability (CNVD-2025-19229)

Adobe Substance3D Modeler is the core tool in the Adobe Substance 3D series of software, designed for 3D modeling, supporting digital clay sculpting, symmetry tools, automated UV management, and other features for seamless switching across computer VR environments. An out-of-bounds write...

Huawei HarmonyOS cjwindow Module Pointer Dangling Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A pointer dangling vulnerability exists in the Huawei HarmonyOS cjwindow module, which can be exploited by an attacker to cause functional stability to be...

Unspecified Vulnerability in Emby MediaBrowser (CNVD-2025-19597)

Emby MediaBrowser is a media server software from Emby. A security vulnerability exists in Emby MediaBrowser that can be exploited by an attacker to change passwords without verification...

Huawei HarmonyOS and EMUI Resource Read Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A resource read vulnerability exists in Huawei HarmonyOS...

Bottinelli Informatical Vedo Suite Server-Side Request Forgery Vulnerability

Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. Bottinelli Informatical Vedo Suite suffers from a server-side request forgery vulnerability, which originates from the /apivedo/video/preview endpoint that do...

Adobe Substance3D Painter Out-of-Bounds Write Vulnerability (CNVD-2025-19237)

Adobe Substance3D Painter provides real-time 3D texture painting with intelligent material system and physical rendering viewport, supporting 8K resolution material output. An out-of-bounds write vulnerability exists in Adobe Substance3D Painter, which can be exploited by attackers to execute...

SAMSUNG Blockchain Keystore Code Execution Vulnerability

SAMSUNG Blockchain Keystore is a system tool for creating, storing, managing and backing up private keys from Samsung South Korea. A code execution vulnerability exists in SAMSUNG Blockchain Keystore, which can be exploited by an attacker to execute arbitrary code on the system...

NVIDIA Triton Inference Server Denial of Service Vulnerability

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. A denial of service vulnerability exists in NVIDIA Triton Inference Server, which can be exploited by attackers to cause segmentation error...

Huawei HarmonyOS DMA Module Register Configuration Out-of-Bounds Read Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An out-of-bounds read vulnerability exists in the Huawei HarmonyOS DMA module register configuration, which can be exploited by an attacker to compromise...

Huawei HarmonyOS distributed notification service memory misreference vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A memory misreference vulnerability exists in the Huawei HarmonyOS distributed notification service, which can be exploited by an attacker to cause an...

SAP NetWeaver Application Server for ABAP Cross-Site Scripting Vulnerability (CNVD-2025-21207)

SAP NetWeaver Application Server for ABAP is a powerful development and runtime platform that is at the heart of many basic SAP business applications. A cross-site scripting vulnerability exists in SAP NetWeaver Application Server for ABAP. An attacker could exploit this vulnerability by...

WordPress Software Issue Manager plugin cross-site scripting vulnerability

The WordPress Software Issue Manager plugin is a project-based WordPress plugin for tracking software defects, issues, tasks, and product feature requests, with support for customized reporting. The WordPress Software Issue Manager plugin suffers from a cross-site scripting vulnerability that ste...

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CNVD-2025-23049)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based for Android, which can be exploited by attackers to conduct spoofing attacks when visiting specially crafted websites...

Google Chrome Competitive Conditions Issue Vulnerability (CNVD-2025-24504)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a Competitive Condition Issue vulnerability that is due to a competitive condition in V8. An attacker can exploit this vulnerability to execute arbitrary code on the system...

WordPress Mosaic Generator plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress Mosaic Generator plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-suppli...

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CNVD-2025-23048)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based for Android. An attacker can exploit this vulnerability to conduct spoofing attacks when visiting specially crafted websit...

WordPress Advanced Custom Fields Plugin HTML Injection Vulnerability

WordPress Advanced Custom Fields Plugin is a powerful custom fields plugin for WordPress that allows you to add many types of custom fields such as images, checkboxes, files, text, etc. to posts, pages, categories, users, and other objects, and supports exporting to XML or PHP code, and can be...

Open5GS has an unspecified vulnerability (CNVD-2025-18543)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS has a security vulnerability that can be exploited by an attacker to cause local manipulation...

Belkin F9K1009 and Belkin F9K1010 Hardcoded Credential Vulnerabilities

The Belkin F9K1009 and Belkin F9K1010 are both a wireless router from Belkin Canada. The Belkin F9K1009 and Belkin F9K1010 have a hard-coded credential vulnerability that can be exploited by an attacker to gain access to the devices...

Open5GS Denial of Service Vulnerability (CNVD-2025-18545)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS has a security vulnerability that can be exploited by an attacker to cause a denial of service via the functions gmmstatederegistered/gmmstateexception in the file...

Open5GS has an unspecified vulnerability (CNVD-2025-18568)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a security vulnerability that can be exploited by an attacker to cause reachable assertions via the function ngapbuilddownlinknastransport in the...

Tenda AC20 Stack Buffer Overflow Vulnerability (CNVD-2026-00674)

The Tenda AC20 is a wireless router from the Chinese company Tenda. The Tenda AC20 suffers from a stack buffer overflow vulnerability that originates from a misuse of the parameter rebootTime in the file /goform/SetSysAutoRebbotCfg, which can be exploited by an attacker to cause a stack buffer...

Adobe InDesign Desktop Buffer Overflow Vulnerability (CNVD-2025-19245)

Adobe InDesign Desktop is a desktop publishing DTP application developed by Adobe, mainly used for typographic editing of printed materials, supporting the creation of books, magazines, posters, flyers and other printed materials. A buffer overflow vulnerability exists in Adobe InDesign Desktop,...

Adobe InDesign Desktop Out-of-Bounds Write Vulnerability (CNVD-2025-19248)

Adobe InDesign Desktop is a desktop publishing DTP application developed by Adobe, mainly used for typographic editing of printed materials, supporting the creation of books, magazines, posters, flyers and other printed materials. Adobe InDesign Desktop suffers from an out-of-bounds write...

Adobe InDesign Desktop Post-Release Reuse Vulnerability

Adobe InDesign Desktop is desktop publishing DTP software developed by Adobe, mainly used for typography design of print and digital publications, including books, magazines, posters, e-books and so on. Adobe InDesign Desktop suffers from a post-release reuse vulnerability that can be exploited b...

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21459)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause an edit channel subscription...

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21457)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause the plugin to crash...

WordPress The7 plugin cross-site scripting vulnerability

WordPress The7 plugin is a highly customizable WordPress theme. WordPress The7 plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary web...

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21454)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause the plugin to crash...

OpenBao suffers from an unspecified vulnerability (CNVD-2025-18606)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by an attacker to cause bypassing of internal rate limiting and reuse of existing MFA code...