Adobe Framemaker Out-of-Bounds Write Vulnerability (CNVD-2025-16391)

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. An out-of-bounds write vulnerability exists in Adobe Framemaker, which could be exploited by an attacker to execut...

Unspecified Vulnerability in Oracle Java SE (CNVD-2025-24095)

Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition, which can...

Microsoft Office Code Execution Vulnerability (CNVD-2025-16689)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute...

Adobe ColdFusion Cross-Site Scripting Vulnerability (CNVD-2025-16380)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. A cross-site scripting vulnerability exists in Adobe ColdFusion, which is caused by improper validation...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2025-16944)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker could exploit this vulnerability to gain access to sensitive information...

Rockwell Automation Arena Code Execution Vulnerability

Rockwell Automation Arena is a discrete-event simulation software developed by Rockwell Automation for a wide range of manufacturing, logistics, and service industries. A code execution vulnerability exists in Rockwell Automation Arena, which is caused by out-of-bounds writes to specially crafted...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17169)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server that originates from improper access control of the Optimizer component and can be exploited by an attacker to cause a denial of service...

Adobe ColdFusion Cross-Site Scripting Vulnerability (CNVD-2025-16384)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. A cross-site scripting vulnerability exists in Adobe ColdFusion, which is caused by improper validation...

Microsoft Graphics Component Code Execution Vulnerability

Microsoft Graphics Component is a graphics driver component of Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. An attacker can exploit this vulnerability to remotely execute code...

Zoo Management System /admin/add-foreigners-ticket.php File SQL Injection Vulnerability

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter cprice in the file /admin/add-foreigners-ticket.php. An attacker can exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17160)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server that originates from improper access control of the Components Services component and can be exploited by an attacker to cause a denial of service...

Oracle MySQL Server Resource Management Error Vulnerability (CNVD-2025-17165)

Oracle MySQL Server is a relational database from Oracle Corporation. A resource management error vulnerability exists in Oracle MySQL Server, which stems from improper access control in the Security: Encryption component and can be exploited by an attacker to cause a denial of service...

Adobe Framemaker heap buffer overflow vulnerability (CNVD-2025-16397)

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. Adobe Framemaker suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute...

Chat System fetch_member.php File SQL Injection Vulnerability

Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID in the file /user/fetchmember.php. An attacker can exploit this vulnerability to execute illegal SQL commands to ste...

Siemens SINEC NMS Path Traversal Vulnerability (CNVD-2025-16627)

Siemens SINEC NMS is a network management system NMS from Siemens, Germany, that can be used 24/7 to centrally monitor, manage and configure industrial networks with tens of thousands of devices, including safety-related areas. A path traversal vulnerability exists in Siemens SINEC NMS that stems...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17174)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which originates from improper access control of the Optimizer component and can be exploited by an attacker to cause unauthorized modification of critical data...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2025-24082)

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle iStore for Oracle E-Business...

Adobe ColdFusion XML External Entity Injection Vulnerability (CNVD-2025-16375)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has an XML external entity injection vulnerability that originates from improperly...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17173)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server that originates from improper access control of the Optimizer component and can be exploited by an attacker to cause a denial of service...

Chat System addmember.php File SQL Injection Vulnerability

Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the file /user/addmember.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...

Zoo Management System /admin/manage-animals.php File SQL Injection Vulnerability

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file /admin/manage-animals.php. An attacker can exploit this vulnerability...

jonnys Liquor browse.php file SQL injection vulnerability

jonnys Liquor is a content and management system. jonnys Liquor suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Search in the file /browse.php. An attacker can exploit this vulnerability to execute illeg...

Microsoft Brokering File System Resource Management Error Vulnerability (CNVD-2025-16872)

Microsoft Brokering File System is a file system from the American company Microsoft. A security vulnerability exists in Microsoft Brokering File System. An attacker could exploit the vulnerability to elevate privileges...

Adobe After Effects Null Pointer Dereference Vulnerability (CNVD-2025-16372)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. A null pointer dereference vulnerability exists in Adobe After Effects...

Library System approve.php File SQL Injection Vulnerability

Library System is a library system. Library System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID of the file /approve.php. An attacker can exploit this vulnerability to execute illegal SQL commands to ste...

Microsoft Azure Monitor Code Injection Vulnerability

Microsoft Azure Monitor is a new observability tool from Microsoft that enables end-to-end monitoring capabilities for applications, infrastructure and networks. A security vulnerability exists in Microsoft Azure Monitor. An attacker exploiting this vulnerability could remotely execute code...

Adobe Illustrator Numeric Error Vulnerability (CNVD-2025-16549)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A numeric error vulnerability exists in Adobe Illustrator that originates from an integer underflow and can be exploited by an attacker to cause arbitrary code to be executed...

Microsoft Brokering File System Code Issue Vulnerability

Microsoft Brokering File System is a file system from the American company Microsoft. A security vulnerability exists in Microsoft Brokering File System. An attacker could exploit the vulnerability to elevate privileges...

jonnys Liquor delete-row.php file SQL injection vulnerability

jonnys Liquor is a content and management system. jonnys Liquor suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter ID in file /admin/delete-row.php. An attacker can exploit this vulnerability to execute illegal...

Online Fire Reporting System new-requests.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter teamid in the file /admin/new-requests.php. An attacker ca...

Tenda FH1205 Buffer Overflow Vulnerability

The Tenda FH1205 is a wireless router from Tenda China. The Tenda FH1205 version 2.0.0.7775 suffers from a buffer overflow vulnerability that originates from the parameter wpapskcrypto in the file /goform/WifiExtraSet, which fails to correctly validate the length of the input data, which can be...

Online Fire Reporting System completed-requests.php file SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter teamid in the file /admin/completed-requests.php. An attacker...

Microsoft Windows Resource Management Error Vulnerability (CNVD-2025-16948)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. The vulnerability can be exploited by an attacker to gain elevated privileges...

GPT-SoVITS-WebUI code issue vulnerability (CNVD-2025-23576)

GPT-SoVITS-WebUI is a TTS training model. A code issue vulnerability exists in GPT-SoVITS-WebUI, which stems from insecure deserialization of bsroformer.py when receiving serialized data submitted by a user, and can be exploited by an attacker to execute arbitrary commands on the system...

jonnys Liquor admin-area.php file SQL injection vulnerability

jonnys Liquor is a content and management system. jonnys Liquor suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter drink in file /admin/admin-area.php. An attacker can exploit this vulnerability to execute...

Microsoft Word Code Execution Vulnerability (CNVD-2025-16695)

Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Windows Resource Management Error Vulnerability (CNVD-2025-16951)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. The vulnerability can be exploited by an attacker to gain elevated privileges...

Unspecified Vulnerability in Tenda CP3 Pro

Tenda CP3 Pro is a smart wireless PTZ camera that combines 360° panoramic surveillance, 3MP HD camera, and Wi-Fi 6 network technology, and supports human/pet detection, cry detection, and one-button calling. Tenda CP3 Pro suffers from a security vulnerability that originates from the presence of ...

Oracle MySQL Server Resource Management Error Vulnerability (CNVD-2025-17105)

Oracle MySQL Server is a relational database from Oracle Corporation. A resource management error vulnerability exists in Oracle MySQL Server, which stems from improper access control on a multi-protocol network and can be exploited by an attacker to cause a denial of service...

Oracle MySQL Server Resource Management Error Vulnerability (CNVD-2025-17106)

Oracle MySQL Server is a relational database from Oracle Corporation. A resource management error vulnerability exists in Oracle MySQL Server that stems from improper access control of the InnoDB component and can be exploited by an attacker to cause a denial of service...

Microsoft Office 365 Encryption Issue Vulnerability

Microsoft Office 365 is an office software suite product from the American company Microsoft Microsoft. Common components of this product include Word, Excel, Access, Powerpoint, FrontPage, etc. A security vulnerability exists in Microsoft Office 365. An attacker exploiting the vulnerability can...

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2025-24088)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2025-24086)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

Adobe Substance 3D Designer Out-of-Bounds Read Vulnerability (CNVD-2025-16538)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

Crime Reporting System registration.php File SQL Injection Vulnerability

Crime Reporting System is a crime reporting system. Crime Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Name in the file /registration.php. An attacker can exploit this vulnerability to...

Microsoft Windows Input Validation Error Vulnerability (CNVD-2025-16780)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit the vulnerability to elevate privileges...

Adobe ColdFusion Cross-Site Scripting Vulnerability (CNVD-2025-16379)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. A cross-site scripting vulnerability exists in Adobe ColdFusion, which is caused by improper validation...

Unspecified Vulnerability in Oracle Fusion Middleware (CVE-2025-50064)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

Voting System voters_add.php file SQL Injection Vulnerability

Voting System is an election system. Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of the parameter firstname/lastname in the file /admin/votersadd.php for externally entered SQL statements. An attacker can exploit this vulnerability to execu...

Adobe Illustrator Null Pointer Dereference Vulnerability (CNVD-2025-16399)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A null pointer dereference vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause a denial of service in the application...