Vehicle Management /filter.php File SQL Injection Vulnerability

Vehicle Management is a vehicle management system. Vehicle Management suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter from in the file /filter.php. An attacker can exploit this vulnerability to execute illegal...

AUO DIR-605L Buffer Overflow Vulnerability

The AUO DIR-605L is the first cloud router from AUO designed for home and small office networks. The AUO DIR-605L suffers from a buffer overflow vulnerability that originates from the insecure use of sprintf when processing user-supplied CAPTCHA data via the FILECODE parameter in /goform/formLogi...

WordPress IDonate plugin unauthorized access vulnerability

WordPress IDonate plugin is a WordPress plugin designed for blood donation management, mainly used to create blood donation related website features. An unauthorized access vulnerability exists in WordPress IDonate plugin, which stems from the application's inadequate protection of sensitive...

Alpine iLX-507 Input Validation Error Vulnerability

The Alpine iLX-507 is a multimedia receiver from Alpine USA. The Alpine iLX-507 suffers from an input validation error vulnerability, which stems from improper validation of the TIDAL music streaming application credentials, that can be exploited by an attacker to execute arbitrary code in the ro...

1Panel Command Injection Vulnerability

1Panel is an open source Linux server operation and maintenance management panel of the Chinese 1Panel community . 1Panel suffers from a command injection vulnerability that stems from incomplete certificate validation, which can be exploited by an attacker to cause remote code execution...

GNU GRUB Resource Management Error Vulnerability

GNU GRUB is a Linux system boot program from the GNU community. A resource management error vulnerability exists in GNU GRUB, which originates from a module uninstallation without clearing hooks, and can be exploited by an attacker to initiate a large number of requests, consuming system resource...

GNU GRUB Out-of-Bounds Write Vulnerability

GNU GRUB is a Linux system boot program from the GNU community. GNU GRUB suffers from an out-of-bounds write vulnerability, which stems from an unvalidated UFS symbolic link length, that can be exploited by attackers to inject malicious code and tamper with critical data in memory...

GNU GRUB Buffer Overflow Vulnerability (CNVD-2025-17795)

GNU GRUB is a Linux system boot program from the GNU community. A buffer error vulnerability exists in GNU GRUB, which originates in the grub-core/gettext module, where the system does not properly limit the size of the data, and can be exploited by an attacker to run arbitrary code in the contex...

DELL Client Platform BIOS Weak Authentication Vulnerability

The DELL Client Platform BIOS is a BIOS system developed by Dell for its client devices e.g., laptops, desktops, etc.. The DELL Client Platform BIOS has a weak authentication vulnerability that can be exploited by an attacker to elevate privileges...

Human Resource Integrated System action.php File Cross-Site Scripting Vulnerability

Human Resource Integrated System is a human resource management system. A cross-site scripting vulnerability exists in Human Resource Integrated System, which originates from the unspecified parameter content not being security filtered in the /insert-and-view/action.php file. An attacker could...

Student Result Management System /elms/emp-changepassword.php Component Session Hijacking Vulnerability

Student Result Management System is a student result management system. Student Result Management System suffers from a session hijacking vulnerability that stems from an improperly disabled session in component /elms/emp-changepassword.php, no details of the vulnerability are available at this...

DELL SmartFabric OS10 Software Privilege Issue Vulnerability

DELL SmartFabric OS10 Software is a software-defined network operating system from Dell Networks, based on Linux and open source technologies, and is primarily used to enable flexible management and automated deployment of data center network resources. DELL SmartFabric OS10 Software has a...

Apple macOS Sequoia Out-of-Bounds Read Vulnerability

Apple macOS Sequoia is an operating system from the American company Apple Apple. Apple macOS Sequoia suffers from an out-of-bounds read vulnerability that stems from insufficient input validation, which can be exploited by an attacker to cause the contents of memory to be disclosed when processi...

Student Result Management System /srms/change-password.php Component Session Hijacking Vulnerability

Student Result Management System is a student result management system. Student Result Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /srms/change-password.php, no details of the vulnerability are available at this...

Apple macOS Sequoia has an unspecified vulnerability (CNVD-2025-18406)

Apple macOS Sequoia is an operating system from the American company Apple Apple. Apple macOS Sequoia suffers from a security vulnerability that stems from an insufficient code signature restriction, which can be exploited by an attacker to cause access to private user data...

GLPI Privilege License and Access Control Issues Vulnerability (CNVD-2025-17791)

GLPI is a free asset and IT management software suite that provides ITIL service desk functionality, license tracking and software auditing. A security vulnerability exists in GLPI versions 9.1.0 through 10.0.18, which stems from a failure to perform privilege checks on specific resource deletion...

Apple macOS Sequoia has an unspecified vulnerability (CNVD-2025-18411)

Apple macOS Sequoia is an operating system from the American company Apple Apple. Apple macOS Sequoia contains a security vulnerability that can be exploited by attackers to cause iCloud Private Relay to fail to activate when multiple users are logged in at the same time...

Apple macOS Sequoia has an unspecified vulnerability (CNVD-2025-18402)

Apple macOS Sequoia is an operating system from the American company Apple Apple. A security vulnerability exists in Apple macOS Sequoia versions prior to 15.6, which can be exploited by attackers to cause a denial of service...

WordPress Smart Slider plugin SQL Injection Vulnerability

WordPress Smart Slider plugin is a powerful WordPress plugin that is mainly used to create responsive slideshows/sliders that support images, videos, posts and other forms of content presentation. WordPress Smart Slider plugin suffers from a SQL injection vulnerability that stems from the...

Exam Form Submission /register.php File SQL Injection Vulnerability

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter USN in the file /register.php. An attacker can exploit this vulnerability to execute illegal SQL...

Exam Form Submission delete_s7.php file SQL injection vulnerability

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in parameter ID in file /admin/deletes7.php. An attacker can exploit this vulnerability to execute illegal SQL commands...

Vehicle Management edit1.php File SQL Injection Vulnerability

Vehicle Management is a vehicle management system. Vehicle Management suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter sno in the file /edit1.php. An attacker can exploit this vulnerability to execute illegal S...

Unspecified Vulnerability in Apple macOS (CNVD-2025-22277)

Apple macOS is a specialized operating system developed by Apple for Mac computers. Apple macOS has a security vulnerability that can be exploited by an attacker to gain root access...

Unspecified vulnerability in Online Library Management System

Online Library Management System is an online library management system. A security vulnerability exists in Online Library Management System, which originates from an improperly disabled session in the component /library/change-password.php, and can be exploited by an attacker to cause a session...

Unspecified Vulnerability in Apple macOS (CNVD-2025-18453)

Apple macOS is a specialized operating system developed by Apple for Mac computers. Apple macOS has a security vulnerability that can be exploited by attackers to view sensitive user information...

Unspecified Vulnerability in Apple macOS (CNVD-2025-18450)

Apple macOS is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in Apple macOS, which can be exploited by an attacker to modify protected portions of the file system...

Apple macOS Access Control Error Vulnerability (CNVD-2025-18452)

Apple macOS is a specialized operating system developed by Apple for Mac computers. An access control error vulnerability exists in Apple macOS, which can be exploited by an attacker to read files outside of the sandbox...

Unspecified vulnerability in Apple macOS Sequoia and Apple macOS Sonoma (CNVD-2025-18434)

Apple macOS Sequoia and Apple macOS Sonoma are both operating systems from the American company Apple. Apple macOS Sequoia and Apple macOS Sonoma contain a security vulnerability that can be exploited by attackers to gain root privileges...

Unspecified vulnerability in Apple macOS Sequoia and Apple macOS Sonoma (CNVD-2025-18415)

Apple macOS Sequoia and Apple macOS Sonoma are both operating systems from the American company Apple. Apple macOS Sequoia and Apple macOS Sonoma contain a security vulnerability that originates from memory mishandling, which can be exploited by an attacker to cause a malicious application to rea...

Apple macOS Sequoia and Apple macOS Sonoma have unspecified vulnerabilities

Apple macOS Sequoia and Apple macOS Sonoma are both operating systems from the American company Apple. Apple macOS Sequoia and Apple macOS Sonoma contain a security vulnerability that can be exploited by attackers to access sensitive user data...

Unspecified vulnerability in Apple macOS Sequoia (CNVD-2025-18412)

Apple macOS Sequoia is an operating system from the American company Apple Apple. Apple macOS Sequoia contains a security vulnerability that can be exploited by an attacker to cause a sandboxed process to bypass sandboxing restrictions...

Unspecified vulnerability in Apple macOS Sequoia and Apple macOS Sonoma (CNVD-2025-18435)

Apple macOS Sequoia and Apple macOS Sonoma are both operating systems from the American company Apple. A security vulnerability exists in Apple macOS Sequoia and Apple macOS Sonoma, which stems from an insufficient configuration restriction, and can be exploited by an attacker to cause...

Apple macOS Access Control Error Vulnerability (CNVD-2025-18439)

Apple macOS is a specialized operating system developed by Apple for Mac computers. Apple macOS suffers from a security vulnerability that stems from insufficient user consent prompts, which can be exploited by attackers to potentially bypass sensitive settings...

Apple macOS Access Control Error Vulnerability (CNVD-2025-18455)

Apple macOS is a specialized operating system developed by Apple for Mac computers. An access control error vulnerability exists in Apple macOS, which can be exploited by an attacker to cause unauthorized access to a local network...

GLPI Privilege License and Access Control Issues Vulnerability (CNVD-2025-17792)

GLPI is a free asset and IT management software suite. A security vulnerability exists in GLPI versions 0.80 through 10.0.18, which originates from the system not validating permissions on some resource access requests. An attacker could exploit the vulnerability to gain unauthorized access to...

GLPI Permission License and Access Control Issues Vulnerability

GLPI is an open source IT asset and service management software suite that provides ITIL service desk functionality, license tracking and software auditing capabilities. A security vulnerability exists in GLPI versions 0.65 through 10.0.18, which originates from a technician being able to utilize...

DELL XtremIO Log Message Disclosure Vulnerability

DELL XtremIO is an all-flash enterprise-class storage array from EMC, a Dell Technologies company, designed to enhance the performance of virtualization, database and analytics applications. DELL XtremIO suffers from a log information disclosure vulnerability that originates from the system...

Unspecified vulnerability in Apple macOS Sequoia (CNVD-2025-18410)

Apple macOS Sequoia is an operating system from the American company Apple Apple. A security vulnerability exists in Apple macOS Sequoia, which can be exploited by an attacker to cause a sandboxed process to launch arbitrary applications...

Apple iOS and iPadOS Information Disclosure Vulnerability

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. An information disclosure vulnerability exists in Apple iOS and iPadOS due to a logic issue in the Accessibility component when using specially crafted applications. An...

Apple macOS Sequoia Heap Buffer Overflow Vulnerability

Apple macOS Sequoia is an operating system from the American company Apple Apple. Apple macOS Sequoia suffers from a heap buffer overflow vulnerability that can be exploited by attackers to cause heap corruption...

Apple macOS Sequoia Out-of-Bounds Write Vulnerability

Apple macOS Sequoia is an operating system from the American company Apple Apple. An out-of-bounds write vulnerability exists in Apple macOS Sequoia versions prior to 15.6, which can be exploited by an attacker to cause an unexpected system termination...

IBM Aspera Faspex Access Control Error Vulnerability

IBM Aspera Faspex is IBM's high-performance file transfer solution designed for fast, secure transfer of large-volume data. A security vulnerability exists in IBM Aspera Faspex versions 5.0.0 through 5.0.12.1, which originates from a client not properly implementing server-side security mechanism...

Online Farm System /forgot_pass.php File SQL Injection Vulnerability

Online Farm System is an online farm system. Online Farm System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /forgotpass.php. An attacker can exploit this vulnerability to execute illeg...

Vehicle Management /filter3.php File SQL Injection Vulnerability

Vehicle Management is a vehicle management system. Vehicle Management suffers from an SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the parameter company in file /filter3.php. An attacker can exploit this vulnerability to execute illega...

Exam Form Submission delete_s8.php file SQL injection vulnerability

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in parameter ID in file /admin/deletes8.php. An attacker can exploit this vulnerability to execute illegal SQL commands...

Dell SmartFabric OS10 Software Code Issue Vulnerability

Dell SmartFabric OS10 Software is network operating system software developed by Dell to simplify the management and automation of data center network architectures. A security vulnerability exists in Dell SmartFabric OS10 Software versions prior to 10.6.0.5 that stems from improper handling of X...

Apple macOS Access Control Error Vulnerability (CNVD-2025-18438)

Apple macOS is a specialized operating system developed by Apple for Mac computers. An access control error vulnerability exists in Apple macOS, which can be exploited by an attacker to access sensitive user data...

Apple macOS path traversal vulnerability

Apple macOS is a specialized operating system developed by Apple for Mac computers. Apple macOS suffers from a path traversal vulnerability that stems from improper handling of directory paths, which can be exploited by an attacker to gain access to protected user data...

Unspecified Vulnerability in Apple iOS/iPadOS (CNVD-2025-17891)

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and Apple iPadOS contain a security vulnerability that originates from improper state management and...

Unspecified Vulnerability in Apple macOS (CNVD-2025-18457)

Apple macOS is a specialized operating system developed by Apple for Mac computers. Apple macOS has a security vulnerability that can be exploited by attackers to modify the contents of system files...