131391 matches found
Crime Reporting System registration.php File SQL Injection Vulnerability
Crime Reporting System is a crime reporting system. Crime Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Name in the file /registration.php. An attacker can exploit this vulnerability to...
Online Fire Reporting System workin-progress-requests.php File SQL Injection Vulnerability
Online Fire Reporting System is an online fire reporting system. Online Fire Reporting System has a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter teamid in the file /admin/workin-progress-requests.php. An attacker can...
Zoo Management System /admin/manage-normal-ticket.php File SQL Injection Vulnerability
Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter ID in file /admin/manage-normal-ticket.php. An attacker can exploit this vulnerability t...
Voting System voters_edit.php file SQL Injection Vulnerability
Voting System is an election system. Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements for parameter ID in file /admin/votersedit.php. An attacker can exploit this vulnerability to execute illegal SQL commands...
Online Library Management System /admin/student-history.php File SQL Injection Vulnerability
Online Library Management System is an online library management system. A SQL injection vulnerability exists in Online Library Management System, which originates from the lack of validation of externally-entered SQL statements in the parameter stdid in the file /admin/student-history.php. An...
Online Fire Reporting System add-team.php File SQL Injection Vulnerability
Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from an SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter teammember in file /admin/add-team.php. An attacker can...
Online Fire Reporting System assigned-requests.php File SQL Injection Vulnerability
Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter teamid in the file /admin/assigned-requests.php. An...
Dairy Farm Shop Management System edit-category.php File SQL Injection Vulnerability
Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter categorycode in the file...
Voting System positions_add.php file SQL Injection Vulnerability
Voting System is an election system. Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter description in file /admin/positionsadd.php. An attacker can exploit this vulnerability to execute illega...
Online Fire Reporting System team-ontheway-requests.php File SQL Injection Vulnerability
Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter teamid in file /admin/team-ontheway-requests.php. An...
Online Fire Reporting System new-requests.php File SQL Injection Vulnerability
Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter teamid in the file /admin/new-requests.php. An attacker ca...
D-Link DIR-645 Command Injection Vulnerability
D-Link DIR-645 is a Gigabit wireless router for home and SMB users launched by D-Link in 2012. The D-Link DIR-645 suffers from a command injection vulnerability that stems from the failure of the file /htdocs/cgibin function ssdpcgimain in the component ssdpcgi to correctly filter constructed...
Chat System fetch_chat.php file SQL Injection Vulnerability
Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID in the file /user/fetchchat.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...
Rockwell Automation Arena Code Execution Vulnerability (CNVD-2025-19255)
Rockwell Automation Arena is a discrete-event simulation software developed by Rockwell Automation for a wide range of manufacturing, logistics, and service industries. A code execution vulnerability exists in Rockwell Automation Arena, which is caused by out-of-bounds writes to specially crafted...
Adobe Framemaker Out-of-Bounds Write Vulnerability (CNVD-2025-16391)
Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. An out-of-bounds write vulnerability exists in Adobe Framemaker, which could be exploited by an attacker to execut...
Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2025-16778)
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit the vulnerability to elevate privileges...
Fuji Electric V-SFT/TELLUS Buffer Overflow Vulnerability
Fuji Electric TELLUS and Fuji Electric V-SFT are both products of Fuji Electric, Japan.Fuji Electric TELLUS is a specialized software for advanced functionality, user-friendliness and remote control.Fuji Electric V-SFT is a screen configuration software. Fuji Electric V-SFT and Fuji Electric TELL...
Microsoft Windows Resource Management Error Vulnerability (CNVD-2025-16948)
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. The vulnerability can be exploited by an attacker to gain elevated privileges...
Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2025-17497)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...
Microsoft Brokering File System Code Issue Vulnerability
Microsoft Brokering File System is a file system from the American company Microsoft. A security vulnerability exists in Microsoft Brokering File System. An attacker could exploit the vulnerability to elevate privileges...
Microsoft Windows Numeric Error Vulnerability
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. The vulnerability can be exploited by an attacker to gain elevated privileges...
Adobe Experience Manager cross-site scripting vulnerability (CNVD-2025-16388)
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
Microsoft Graphics Component elevation of privilege vulnerability (CNVD-2025-17137)
Microsoft Graphics Component is a graphics driver component of Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. An attacker could exploit the vulnerability to elevate privileges...
Microsoft Windows Resource Management Error Vulnerability (CNVD-2025-16945)
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A security vulnerability exists in Microsoft Windows. An attacker could exploit the vulnerability to remotely execute code...
Microsoft Windows Resource Management Error Vulnerability (CNVD-2025-16950)
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. The vulnerability can be exploited by an attacker to gain elevated privileges...
Microsoft Azure Monitor Code Injection Vulnerability
Microsoft Azure Monitor is a new observability tool from Microsoft that enables end-to-end monitoring capabilities for applications, infrastructure and networks. A security vulnerability exists in Microsoft Azure Monitor. An attacker exploiting this vulnerability could remotely execute code...
Microsoft Excel Resource Management Error Vulnerability
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel. An attacker exploiting this vulnerability could remotely execute code...
Microsoft PowerPoint Code Execution Vulnerability
Microsoft PowerPoint is a document presentation tool in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft PowerPoint, which can be exploited by an attacker to execute arbitrary code on a system or cause an application to crash...
Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2025-16687)
SharePoint Server is a locally deployed enterprise collaboration platform from Microsoft that supports content sharing, knowledge management, and application integration, and works seamlessly with Microsoft 365 subscriptions to access the latest features. A spoofing vulnerability exists in...
Microsoft Office Remote Code Execution Vulnerability
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A security vulnerability exists in Microsoft Office. An attacker can exploit the vulnerability to remotely...
Microsoft Office Code Execution Vulnerability (CNVD-2025-16688)
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which is caused due to improper boundary checkin...
Microsoft Office Resource Management Error Vulnerability (CNVD-2025-16943)
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A security vulnerability exists in Microsoft Office. An attacker can exploit this vulnerability to remotely...
Microsoft Office Code Execution Vulnerability (CNVD-2025-16689)
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute...
Adobe ColdFusion Cross-Site Scripting Vulnerability (CNVD-2025-16381)
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. A cross-site scripting vulnerability exists in Adobe ColdFusion, which is caused by improper validation...
Oracle MySQL Server Resource Management Error Vulnerability (CNVD-2025-17161)
Oracle MySQL Server is a relational database from Oracle Corporation. A resource management error vulnerability exists in Oracle MySQL Server that stems from improper access control of the DDL component and can be exploited by an attacker to cause a denial of service...
GPT-SoVITS-WebUI Code Issue Vulnerability
GPT-SoVITS-WebUI is a TTS training model. A code issue vulnerability exists in GPT-SoVITS-WebUI that stems from unsafe deserialization handling of the AudioPreDeEcho class when receiving serialized data submitted by the user, which can be exploited by an attacker to execute arbitrary commands on...
GPT-SoVITS-WebUI open_denoise function command injection vulnerability
GPT-SoVITS-WebUI is a TTS training model. A command injection vulnerability exists in the GPT-SoVITS-WebUI opendenoise function, which can be exploited by an attacker to execute arbitrary commands on the system...
Oracle MySQL Access Control Error Vulnerability
Oracle MySQL is an open source relational database management system.MySQL Client is a MySQL client, a program used to communicate with a server to process information in a database managed by the server. An access control error vulnerability in Oracle MySQL's MySQL Client versions 8.0.0 through...
GPT-SoVITS-WebUI code issue vulnerability (CNVD-2025-23578)
GPT-SoVITS-WebUI is a TTS training model. A code issue vulnerability exists in GPT-SoVITS-WebUI that stems from insecure deserialization of referencewebui.py when receiving serialized data submitted by a user, which can be exploited by an attacker to execute arbitrary commands on the system...
Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2025-24085)
Oracle E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Universal Work Queue of Oracle...
Oracle MySQL Server Resource Management Error Vulnerability (CNVD-2025-17178)
Oracle MySQL Server is a relational database from Oracle Corporation. A resource management error vulnerability exists in Oracle MySQL Server that stems from improper access control of the Optimizer component and can be exploited by an attacker to cause a denial of service...
Unspecified Vulnerability in Oracle Database Server (CNVD-2025-24087)
Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. Oracle Database Server's Oracle Database has a security vulnerability that can be...
Adobe Substance 3D Designer Out-of-Bounds Write Vulnerability (CNVD-2025-16542)
Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...
Adobe Framemaker Out-of-Bounds Write Vulnerability (CNVD-2025-16394)
Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. Adobe Framemaker suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute...
Cisco Unified Intelligence Center Arbitrary File Upload Vulnerability
Cisco Unified Intelligence Center is a web-based reporting platform from Cisco that consolidates contact center data and provides visual reporting capabilities. An arbitrary file upload vulnerability exists in the Cisco Unified Intelligence Center web interface, which stems from a lack of file...
Oracle MySQL Server Resource Management Error Vulnerability (CNVD-2025-17361)
Oracle MySQL Server is a relational database from Oracle Corporation. A resource management error vulnerability exists in Oracle MySQL Server that stems from improper access control of the Optimizer component and can be exploited by an attacker to cause a denial of service...
Unspecified Vulnerability in Microsoft Windows (CNVD-2025-16774)
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A security vulnerability exists in Microsoft Windows. The vulnerability is exploited by attackers to perform spoofing attacks...
Chat System addmember.php File SQL Injection Vulnerability
Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the file /user/addmember.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17164)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server that originates from improper access control of the Optimizer component and can be exploited by an attacker to cause a partial denial of service...
Siemens SIMATIC CN 4100 Input Validation Error Vulnerability (CNVD-2025-16622)
The Siemens SIMATIC CN 4100 is a communication node from Siemens, Germany. An input validation error vulnerability exists in the Siemens SIMATIC CN 4100, which can be exploited by an attacker to cause a denial of service...