131179 matches found
Adobe Framemaker Heap Buffer Overflow Vulnerability (CNVD-2025-16223)
Adobe FrameMaker is a powerful tool for creating complex technical documentation and publishing it to a variety of delivery channels. A heap buffer overflow vulnerability exists in Adobe Framemaker 2020.8, 2022.6 and earlier versions. An attacker can exploit this vulnerability to execute arbitrar...
Adobe Framemaker heap buffer overflow vulnerability (CNVD-2025-16224)
Adobe FrameMaker is a powerful tool for creating complex technical documentation and publishing it to a variety of delivery channels. A heap buffer overflow vulnerability exists in Adobe Framemaker versions 2020.8, 2022.6 and earlier. An attacker can exploit this vulnerability to execute arbitrar...
Adobe InCopy Heap Buffer Overflow Vulnerability
InCopy is a professional typesetting software from Adobe for editing and designing complex layouts. A heap buffer overflow vulnerability exists in InCopy 20.3, 19.5.3 and earlier versions. An attacker can exploit this vulnerability to cause arbitrary code to be executed in the current user contex...
Ivanti Endpoint Manager SQL Injection Vulnerability
Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to manage all endpoint devices in an enterprise network. Ivanti Endpoint Manager suffers from a SQL injection vulnerability that originates from improperly filtered submitted SQL statements, which can be...
Adobe InDesign Desktop Buffer Overflow Vulnerability
Adobe InDesign Desktop is desktop publishing software developed by Adobe, mainly used for the typography of print and digital publications, including books, magazines, newspapers, posters, e-books and so on. Adobe InDesign Desktop suffers from a buffer overflow vulnerability that originates from...
Siemens SINEC NMS SQL Injection Vulnerability (CNVD-2025-16630)
Siemens SINEC NMS is a network management system NMS from Siemens, Germany, that can be used 24/7 to centrally monitor, manage and configure industrial networks with tens of thousands of devices, including safety-related areas. A SQL injection vulnerability exists in Siemens SINEC NMS, which can ...
Siemens SINEC NMS Path Traversal Vulnerability (CNVD-2025-16629)
Siemens SINEC NMS is a network management system NMS from Siemens, Germany, that can be used 24/7 to centrally monitor, manage and configure industrial networks with tens of thousands of devices, including safety-related areas. A path traversal vulnerability exists in Siemens SINEC NMS that stems...
Ivanti Endpoint Manager Mobile OS Command Injection Vulnerability
Ivanti Endpoint Manager Mobile is an enterprise-grade mobile device management MDM solution designed to provide comprehensive mobile device lifecycle management capabilities for organizations. Ivanti Endpoint Manager Mobile suffers from an OS command injection vulnerability that stems from...
Tenda O3V2 setAutoReboot Stack Overflow Vulnerability
Tenda O3V2 is a high power wireless bridge from Tenda. The Tenda O3V2 /goform/setNetworkService contains a stack overflow vulnerability in the setAutoReboot function, which originates from improperly restricting the operation of a memory buffer, that can be exploited by a remote attacker to submi...
Siemens SINEC NMS Access Control Error Vulnerability
Siemens SINEC NMS is a network management system NMS from Siemens, Germany, that can be used 24/7 to centrally monitor, manage and configure industrial networks with tens of thousands of devices, including safety-related areas. An access control error vulnerability exists in Siemens SINEC NMS,...
RT-Thread Input Validation Error Vulnerability (CNVD-2025-16524)
RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from an input validation error vulnerability that originates from the operation of the parameter how in the file rt-thread/components/lwp/lwpsyscall.c, which can be exploited by an attacke...
Advantech iView Parameter Injection Vulnerability
Advantech iView is a Simple Network Protocol SNMP based software from Advantech, China to manage B + B SmartWorx devices. A parameter injection vulnerability exists in Advantech iView, which originates from parameter injection in the NetworkServlet.restoreDatabase function and can be exploited by...
Adobe InDesign Desktop Digital Error Vulnerability
Adobe InDesign Desktop is desktop publishing software developed by Adobe, mainly used for the typography of print and digital publications, including books, magazines, newspapers, posters, e-books and so on. Adobe InDesign Desktop suffers from a numeric error vulnerability that stems from imprope...
Advantech iView SQL Injection Vulnerability (CNVD-2025-17828)
Advantech iView is a Simple Network Protocol SNMP based software from Advantech, China to manage B + B SmartWorx devices. The Advantech iView suffers from an SQL injection vulnerability that originates from improper parameter cleanup in the NetworkServlet.getNextTrapPage function, which can be...
Adobe Experience Manager code issue vulnerability (CNVD-2025-16245)
Adobe Experience Manager is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A code...
Adobe InDesign Heap Overflow Vulnerability
Adobe InDesign is a desktop publishing DTP application from Adobe, mainly used for layout editing of various printed materials. A heap overflow vulnerability exists in Adobe InDesign processing files, which originates from a partial overwrite of heap memory, and can be exploited by a remote...
Ivanti Endpoint Manager Encryption Misuse Vulnerability
Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to manage all endpoint devices in an enterprise network. Ivanti Endpoint Manager suffers from a cryptographic misuse vulnerability that stems from an incorrect cryptographic implementation, which can be...
Tenable Agent Code Execution Vulnerability
Tenable Agent is a vulnerability scanning program from Tenable USA. Tenable Agent suffers from a code execution vulnerability that originates from a non-administrative user being able to execute code with SYSTEM privileges. No details of the vulnerability are provided at this time...
Adobe ColdFusion Trust Management Issues Vulnerability
Adobe ColdFusion is a dynamic Web server platform maintained by Adobe. Adobe ColdFusion suffers from a trust management issue vulnerability that stems from the use of hard-coded credentials, which can be exploited by an attacker to cause elevation of privilege...
Adobe ColdFusion Improper Authorization Vulnerability
Adobe ColdFusion is a dynamic Web server platform maintained by Adobe. An improper authorization vulnerability exists in Adobe ColdFusion, which can be exploited by an attacker to submit a special request to bypass security restrictions and gain unauthorized access to the system...
Adobe Substance 3D Viewer Heap Buffer Overflow Vulnerability
Adobe Substance 3D Viewer is a standalone desktop application from Adobe for viewing and editing 3D files and seamlessly integrates with applications such as Photoshop to support non-destructive 2D/3D co-creation. Adobe Substance 3D Viewer suffers from a heap buffer overflow vulnerability that...
Adobe InDesign Buffer Overflow Vulnerability (CNVD-2025-16225)
Adobe InDesign is a desktop publishing DTP application from Adobe, mainly used for layout editing of various printed materials. A security vulnerability exists in Adobe InDesign processing files, which originates from out-of-bounds memory buffer data writes, and can be exploited by a remote...
Tenable Agent Elevation of Privilege Vulnerability
Tenable Agent is a vulnerability scanning program from Tenable USA. Tenable Agent has an elevation of privilege vulnerability, which originates from a non-administrative user deleting arbitrary local system files with SYSTEM privileges, and can be exploited by an attacker to tamper with the syste...
Advantech iView path traversal vulnerability (CNVD-2025-17831)
Advantech iView is a Simple Network Protocol SNMP based software from Advantech, China to manage B + B SmartWorx devices. A path traversal vulnerability exists in Advantech iView due to an error in NetworkServlet.processImportRequest. error in NetworkServlet.processImportRequest. An attacker coul...
Dell iDRAC Access Control Error Vulnerability
Dell iDRAC is an embedded remote management controller in Dell servers that provides hardware monitoring, remote control, and troubleshooting, and runs independently of the operating system. An Access Control Error vulnerability exists in Dell iDRAC that stems from improper access control and can...
Unspecified Vulnerability in Tenable Agent
Tenable Agent is a vulnerability scanning program from Tenable USA. Tenable Agent suffers from a security vulnerability that originates from a non-administrative user being able to overwrite arbitrary local system files with SYSTEM privileges. No details of the vulnerability are provided at this...
Siemens Solid Edge SE2025 Out-of-Bounds Read Vulnerability
Siemens Solid Edge SE2025 is a development software from Siemens Germany. Siemens Solid Edge SE2025 suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute code in the context of the current process...
RT-Thread buffer overflow vulnerability (CNVD-2025-16523)
RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from a buffer overflow vulnerability that originates from the operation of the parameter timeout in the file rt-thread/components/lwp/lwpsyscall.c, which can be exploited by an attacker to...
Siemens Solid Edge SE2025 Out-of-Bounds Read Vulnerability (CNVD-2025-16628)
Siemens Solid Edge SE2025 is a development software from Siemens Germany. Siemens Solid Edge SE2025 suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute code in the context of the current process...
Advantech iView SQL Injection Vulnerability (CNVD-2025-17830)
Advantech iView is a Simple Network Protocol SNMP based software from Advantech, China to manage B + B SmartWorx devices. An SQL injection vulnerability exists in Advantech iView, which can be exploited by an attacker to perform SQL injection and execute code in the context of the 'nt...
UTT Progressive 750W Buffer Overflow Vulnerability (CNVD-2026-02643)
The UTT Progress 750W is an enterprise-grade dual-band wireless router from Atech Technology UTT, which is aimed at SMB network environments. The UTT Progress 750W suffers from a buffer overflow vulnerability that originates from improper handling of the parameter ssid in the file...
Siemens Solid Edge SE2025 Stack Buffer Overflow Vulnerability
Siemens Solid Edge SE2025 is a development software from Siemens Germany. Siemens Solid Edge SE2025 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute code in the context of the current process...
Adobe ColdFusion Code Issue Vulnerability
Adobe ColdFusion is a dynamic Web server platform maintained by Adobe. Adobe ColdFusion suffers from a code issue vulnerability that arises from improperly restricting XML external entity references, which can be exploited by an attacker to submit a special request, obtain sensitive information o...
D-Link DI-500WF Buffer Overflow Vulnerability
D-Link DI-500WF is a panel type wireless AP access point, designed with international wireless standards, supporting 2.4GHz band, wireless transmission speed up to 300Mbps, in line with the green concept. A buffer overflow vulnerability exists in the D-Link DI-500WF. The vulnerability stems from...
WordPress Events Manager Plugin SQL Injection Vulnerability
WordPress Events Manager plugin is a full-featured event management tool that supports event registration, ticket sales, booking management and recurring event settings. The WordPress Events Manager plugin suffers from a SQL injection vulnerability that stems from the plugin's failure to adequate...
WordPress Support Board Plugin Path Traversal Vulnerability
Support Board is an online customer service communication plugin for WordPress platform, which is mainly used to improve the user experience and customer service efficiency of the website. WordPress Support Board plugin has a path traversal vulnerability, the vulnerability stems from the...
WordPress Amazon Products to WooCommerce plugin code issue vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A code issue vulnerability exists in the WordPress Amazon Products to WooCommerce plugin that stems from insufficient validation of the function wcta2wgeturls, which can be...
Marvell QConvergeConsole Trail Traversal Vulnerability (CNVD-2025-20450)
Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. A path traversal vulnerability exists in Marvell QConvergeConsole due to an error in the QLogicDownloadImpl class. An attacker could exploit the vulnerability to delete files and disclose...
Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15521)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a stack overflow risk when parsing vector images, and can be...
Unspecified Vulnerability in Huawei HarmonyOS (CNVD-2025-15507)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a stack overflow risk when parsing vector images, and can be...
Tenda AC6 Buffer Overflow Vulnerability
Tenda AC6 is a dual-band wireless router from Tenda. Tenda AC6 has a buffer overflow vulnerability, the vulnerability stems from the formSetFirewallCfg function firewallEn parameter fails to correctly validate the length and size of the input data, an attacker can use this vulnerability to cause ...
Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15508)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from an authentication vulnerability in the Distributed Collaborati...
Marvell QConvergeConsole Path Traversal Vulnerability (CNVD-2025-20452)
Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. A path traversal vulnerability exists in Marvell QConvergeConsole due to an error in the saveNICParamsToFile method. An attacker could exploit the vulnerability to write a file in the SYSTEM...
Unspecified Vulnerability in Redis (CNVD-2025-16525)
Redis is the United States Redis company's set of open-source use of ANSI C written to support the network , can be based on memory can also be a persistent log-type , key-value Key-Value storage database , and provides a variety of languages API. Redis has a security vulnerability that can be...
WeGIA SQL Injection Vulnerability (CNVD-2025-17291)
WeGIA is a web manager for welfare organizations. WeGIA suffers from a SQL injection vulnerability that stems from a lack of validation of the idfuncionario parameter against externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...
WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17292)
WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in novomemorando.php, which can be exploited by an attacker to execute injected scripts in a browser...
Unspecified Vulnerability in Endress+Hauser MEAC300-FNADE4 (CNVD-2025-16354)
The Endress+Hauser MEAC300-FNADE4 is a cost-effective emissions data management computer from Endress+Hauser Vietnam. A security vulnerability exists in the Endress+Hauser MEAC300-FNADE4, which can be exploited by attackers to conduct clickjacking attacks...
Unspecified Vulnerability in Huawei HarmonyOS (CNVD-2025-15505)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a null pointer dereference in the PDF Preview module, and can ...
Belkin F9K1122 Stack Buffer Overflow Vulnerability (CNVD-2025-20836)
The Belkin F9K1122 is a WiFi signal extender from Belkin Canada. The Belkin F9K1122 suffers from a stack buffer overflow vulnerability that results from the incorrect manipulation of multiple parameters in the file /goform/formWlanMP, no details of the vulnerability are provided at this time...
UTT HiPER 840G Buffer Overflow Vulnerability (CNVD-2026-00816)
The UTT HiPER 840G is a full Gigabit Internet behavior management router from Atech UTT, which is aimed at small businesses, community networks, hotels, and other scenarios, providing high-speed network access and intelligent management features. The UTT HiPER 840G suffers from a buffer overflow...