131891 matches found
NETGEAR XR300 Stack Buffer Overflow Vulnerability (CNVD-2025-20497)
The NETGEAR XR300 is the entry-level Nighthawk Pro Gaming series wireless router from NETGEAR. The NETGEAR XR300 suffers from a stack buffer overflow vulnerability that stems from a stack buffer overflow in the HTTPD service when processing a POST request from the usbdevice.cgi endpoint, no detai...
NETGEAR XR300 Stack Buffer Overflow Vulnerability (CNVD-2025-20496)
The NETGEAR XR300 is the entry-level Nighthawk Pro Gaming series wireless router from NETGEAR. The NETGEAR XR300 suffers from a stack buffer overflow vulnerability that stems from a stack buffer overflow in the HTTPD service when processing a POST request from the usbdevice.cgi endpoint, no detai...
HCL IEM Information Disclosure Vulnerability (CNVD-2025-20021)
HCL IEM is an intelligent event management platform from HCL India. HCL IEM suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
HCL IEM Information Disclosure Vulnerability
HCL IEM is an intelligent event management platform from HCL India. HCL IEM suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
Taxi Stand Management System admin/new-autoortaxi-entry-form.php file cross-site scripting vulnerability
Taxi Stand Management System is a cab stand management system. Taxi Stand Management System suffers from a cross-site scripting vulnerability that originates from the incorrect operation of the parameter registrationnumber/licensenumber in the file /admin/new-autoortaxi-entry-form.php, for which ...
WordPress WP Get The Table Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress WP Get The Table, which stems from insufficient input cleanup and output escaping, and can be exploited by an...
WordPress Mine CloudVod Cross-Site Scripting Vulnerability
WordPress Mine CloudVod is a plugin for audio and video playback and online education management. WordPress Mine CloudVod suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and output escaping, which can be exploited by an attacker to inject malicious...
WordPress Supreme Addons for Beaver Builder Cross-Site Scripting Vulnerability
WordPress Supreme Addons for Beaver Builder is a plugin that extends the functionality of the Beaver Builder page builder, mainly for enhancing its visual editing capabilities and module extensions. A cross-site scripting vulnerability exists in WordPress Supreme Addons for Beaver Builder, which...
WordPress ebook store cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress ebook store, which stems from a lack of file type validation in the ebookstoresaveform function and can be exploite...
WordPress Taeggie Feed Cross-Site Scripting Vulnerability
WordPress Taeggie Feed is a plugin on WordPress that is mainly used to integrate social media content into a website, supporting dynamic syndication on platforms like Facebook, Instagram, Twitter and LinkedIn. WordPress Taeggie Feed suffers from a cross-site scripting vulnerability that originate...
Small CRM Session Hijacking Vulnerability
Small CRM is a customer relationship management system. Small CRM suffers from a session hijacking vulnerability that stems from the /crm/change-password.php component not terminating a session properly. No details of the vulnerability are available at this time...
Doctor Appointment Management System Session Hijacking Vulnerability
Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a session hijacking vulnerability that stems from the /doctor/change-password.php component not properly terminating a session. No details of the vulnerability are...
Adobe Experience Manager cross-site scripting vulnerability (CNVD-2025-18564)
Adobe Experience Manager is an application developed by Adobe for creating, organizing and publishing digital content. It helps organizations manage their websites, mobile applications and other digital experiences more easily through an integrated interface. Users can utilize different tools and...
WordPress Get Youtube Subs Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress Get Youtube Subs, which stems from insufficient input cleanup and output escaping, and can be exploited by an...
JetBrains TeamCity Cross-Site Request Forgery Vulnerability
JetBrains TeamCity is a Continuous Integration CI/CD tool developed by JetBrains, Inc. to automate the software build, test and deployment process. JetBrains TeamCity suffers from a cross-site request forgery vulnerability that stems from a security flaw in the GitHub application connection...
Tenda AC8V4 Buffer Overflow Vulnerability (CNVD-2025-17342)
The Tenda AC8V4 is a wireless router from Tenda China. The Tenda AC8V4 suffers from a buffer overflow vulnerability that originates from a heap buffer overflow in the mac parameter in /goform/GetParentControlInfo, which can be exploited by an attacker to crash the system by corrupting the memory...
IBM DB2 for Linux Denial of Service Vulnerability
IBM Db2 for Linux is a relational database management system developed by IBM and designed for the Linux operating system to provide high-performance, highly reliable data storage and management services. A denial of service vulnerability exists in IBM DB2 for Linux, which can be exploited by an...
IBM Db2 for Linux Buffer Overflow Vulnerability
IBM Db2 for Linux is a relational database management system from IBM. A stack-based buffer overflow vulnerability exists in IBM Db2 for Linux versions 12.1.0, 12.1.1, and 12.1.2, which stems from the db2fm component not adequately checking boundaries. A local user can exploit this vulnerability ...
Tenda AC8V4 Buffer Overflow Vulnerability (CNVD-2025-17344)
The Tenda AC8V4 is a wireless router from Tenda China. Tenda AC8V4 suffers from a buffer overflow vulnerability that originates from a stack buffer overflow in the timeZone parameter in /goform/fastsettingwifiset, no detailed vulnerability details are provided at this time...
JetBrains TeamCity Cross-Site Scripting Vulnerability
JetBrains TeamCity is a Continuous Integration CI/CD tool developed by JetBrains, Inc. to automate the software build, test and deployment process. JetBrains TeamCity suffers from a cross-site scripting vulnerability that stems from the presence of reflective cross-site scripting on the...
HCL IEM Information Disclosure Vulnerability (CNVD-2025-20023)
HCL IEM is an intelligent event management platform from HCL India. HCL IEM suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
Integer Overflow Vulnerability in Multiple VMWare Products
VMWare ESXi and others are products of VMWare, Inc. VMWare ESXi is an enterprise-grade Type-1 hypervisor developed by VMWare, Inc. that can be installed and run directly on physical server hardware without relying on the underlying operating system for efficient creation and management of virtual...
JetBrains TeamCity Information Disclosure Vulnerability (CNVD-2025-22935)
JetBrains TeamCity is a Continuous Integration/Continuous Deployment CI/CD tool developed by JetBrains to automate the software build, test, and deployment process with support for multiple programming languages and tools. JetBrains TeamCity suffers from an information disclosure vulnerability th...
JetBrains TeamCity Information Disclosure Vulnerability
JetBrains TeamCity is a Continuous Integration CI/CD tool developed by JetBrains, Inc. to automate the software build, test and deployment process. JetBrains TeamCity suffers from an information disclosure vulnerability that stems from an hg pull command line parameter resulting in an exposed...
IBM Db2 Denial of Service Vulnerability (CNVD-2025-18013)
IBM Db2 is a relational database management system from IBM that supports a variety of operating systems, including Linux. A denial of service vulnerability exists in IBM Db2 for Linux versions 12.1.0, 12.1.1, and 12.1.2, which originates from executable segments waiting for each other to release...
FileBrowser Denial of Service Vulnerability
FileBrowser is an open source web file browser . Provides a file management interface in a specified directory , can be used to upload , delete , preview , rename and edit your files . FileBrowser has a denial of service vulnerability , the vulnerability stems from a flaw in the file handling log...
WordPress My Reservation System plugin cross-site scripting vulnerability
WordPress My Reservation System plugin is a booking system plugin based on the WordPress platform, which is mainly used for the development of online booking functions for hotels, B&Bs, villas and other accommodation scenarios. WordPress My Reservation System plugin suffers from a cross-site...
WordPress WP Wallcreeper Authorization Issues Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. An authorization issue vulnerability exists in WordPress WP Wallcreeper, which stems from a lack of capability checking in the adminnotices hook, and can be exploited by an...
WordPress FunnelCockpit Cross-Site Scripting Vulnerability
WordPress FunnelCockpit is an open source tool for tracking and analyzing the entire process of lead generation from initial contact to final closing, developed on the WordPress platform. WordPress FunnelCockpit suffers from a cross-site scripting vulnerability that stems from insufficient input...
NVIDIA Jetson AGX Orin and NVIDIA IGX Orin Input Validation Error Vulnerability
The NVIDIA Jetson AGX Orin and NVIDIA IGX Orin are both products of NVIDIA Corporation, the NVIDIA Jetson AGX Orin is a compact, powerful computer and the NVIDIA IGX Orin is an industrial-grade edge AI platform that delivers high-performance, advanced functional security and information security...
HCL IEM Information Disclosure Vulnerability (CNVD-2025-20024)
HCL IEM is an intelligent event management platform from HCL India. HCL IEM suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
WordPress iThoughts Advanced Code Editor Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in WordPress iThoughts Advanced Code Editor, which stems from missing or incorrect random number validation, and can be...
WordPress WP Applink Cross-Site Scripting Vulnerability
WordPress WP Applink is a WordPress plugin for generating iTunes affiliate links, which is mainly used for embedding promotional links to iTunes products such as iPhone, iPad, Mac apps and music, movies and so on in posts. WordPress WP Applink suffers from a cross-site scripting vulnerability tha...
JetBrains TeamCity elevation of privilege vulnerability (CNVD-2025-20489)
JetBrains TeamCity is a Continuous Integration CI/CD tool developed by JetBrains, Inc. to automate the software build, test and deployment process. JetBrains TeamCity suffers from an elevation of privilege vulnerability that stems from improperly set directory permissions. An attacker can exploit...
JetBrains TeamCity Cross-Site Request Forgery Vulnerability
JetBrains TeamCity is a Continuous Integration/Continuous Deployment CI/CD tool developed by JetBrains to automate the software build, test, and deployment process with support for multiple programming languages and tools. JetBrains TeamCity suffers from a cross-site request forgery vulnerability...
MedDream PACS Premium Cross-Site Scripting Vulnerability (CNVD-2026-10671)
MedDream PACS Premium is an enterprise-class image storage and management server suite from MedDream. MedDream PACS Premium suffers from a cross-site scripting vulnerability that is caused by improper validation of user-supplied input by the radiationDoseReport.php function. No detailed...
Online Course Registration Session Hijacking Vulnerability
Online Course Registration is an online course registration system. A session hijacking vulnerability exists in Online Course Registration, which stems from improper session expiration of the component /crm/change-password.php. No details of the vulnerability are available at this time...
e-Diary Management System Session Hijacking Vulnerability
The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /edms/change-password.php. No details of the vulnerability are available at this time...
Online Ordering System File Upload Vulnerability
Online Ordering System is an online ordering system. A file upload vulnerability exists in Online Ordering System, which stems from the image parameter in the /admin/product.php file not effectively limiting file uploads. No details of the vulnerability are available at this time...
HCL IEM Information Disclosure Vulnerability (CNVD-2025-20022)
HCL IEM is an intelligent event management platform from HCL India. HCL IEM suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
Pre-School Enrollment System SQL Injection Vulnerability
Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the /admin/password-recovery.php file not adequately validating the username parameter. An attacker can exploit this...
Car Rental Project Session Hijacking Vulnerability
Car Rental Project is a car rental program. Car Rental Project suffers from a session hijacking vulnerability that stems from the /carrental/update-password.php component not properly terminating a session. No details of the vulnerability are provided at this time...
MedDream PACS Premium Security Bypass Vulnerability
MedDream PACS Premium is an enterprise-class image storage and management server suite from MedDream. A security bypass vulnerability exists in MedDream PACS Premium that stems from improper default permissions in the CServerSettings::SetRegistryValues function, which can be exploited by an...
WordPress Security Ninja Arbitrary File Read Vulnerability
WordPress Security Ninja is a plugin that focuses on website security protection, providing automated security scanning, login protection, IP blocking, and two-factor authentication to help users proactively identify security risks and prevent hacker attacks. WordPress Security Ninja has an...
Tenda AC8V4 Buffer Overflow Vulnerability (CNVD-2025-17345)
The Tenda AC8V4 is a wireless router from Tenda China. The Tenda AC8V4 suffers from a buffer overflow vulnerability that originates from a stack buffer overflow in the timeZone and timeType parameters in /goform/SetSysTimeCfg, which can be exploited by an attacker to crash the application...
Tenda AC8V4 Buffer Overflow Vulnerability (CNVD-2025-17346)
The Tenda AC8V4 is a wireless router from Tenda China. Tenda AC8V4 suffers from a buffer overflow vulnerability that originates from a stack buffer overflow in the time parameter in /goform/saveParentControlInfo, no detailed vulnerability details are available at this time...
Tenda AC18 Weak Password Vulnerability
Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a weak password vulnerability that originates from a code flaw in the /etcro/smb.conf file in the Samba component. No detailed...
TOTOLINK A702R Buffer Overflow Vulnerability (CNVD-2025-18346)
TOTOLINK A702R is a wireless router device manufactured by China's Gion Electronics TOTOLINK, mainly used for home network connection and signal coverage. The TOTOLINK A702R suffers from a buffer overflow vulnerability that originates from a flaw in the handling of the ip6addr parameter in the...
Tenda AC20 Buffer Overflow Vulnerability
Tenda AC20 is a dual-band wireless router with IPv6 protocol support, featuring a triple-core 1GHz main controller with six 6dBi external antennas and a maximum wireless transmission rate of 2033Mbps. The Tenda AC20 suffers from a buffer overflow vulnerability that originates from improper handli...
D-Link DIR-513 Buffer Overflow Vulnerability
D-Link DIR-513 is a portable wireless router that focuses on thin and light design and easy-to-use features, and supports IEEE 802.11n, 802.11g/b standards with a maximum transmission rate of 300Mbps. The D-Link DIR-513 suffers from a buffer overflow vulnerability that originates from improper...