131391 matches found
D-Link DSP-W110A1 Command Injection Vulnerability
The D-Link DSP-W110A1 is a Wi-Fi smart routing device. The D-Link DSP-W110A1 suffers from a command injection vulnerability that stems from incorrectly filtering input parameters, which can be exploited by an attacker to submit a special request and execute arbitrary commands...
Adobe InCopy Buffer Overflow Vulnerability (CNVD-2025-16550)
Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause the execution of arbitrary code...
Adobe ColdFusion XML Injection Vulnerability
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has an XML injection vulnerability that can be exploited by attackers to access...
Adobe Illustrator Null Pointer Dereference Vulnerability (CNVD-2025-16399)
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A null pointer dereference vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause a denial of service in the application...
Adobe Illustrator Stack Buffer Overflow Vulnerability
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A stack buffer overflow vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to execute arbitrary code in the context of the current user...
TOTOLINK N200RE Command Injection Vulnerability
TOTOLINK N200RE is a SOHO wireless router with 11N wireless technology, the highest wireless transmission rate of up to 300Mbps, support for MIMO architecture and ATCT free channel auto-detection technology, effectively improve wireless performance and stability. TOTOLINK N200RE has a command...
Adobe Framemaker Buffer Overflow Vulnerability (CNVD-2025-16395)
Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A buffer overflow vulnerability exists in Adobe Framemaker, which can be exploited by an attacker to execute...
Adobe After Effects Out-of-Bounds Read Vulnerability (CNVD-2025-16373)
Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. An out-of-bounds read vulnerability exists in Adobe After Effects version...
Unspecified Vulnerability in Microsoft SQL Server (CNVD-2025-16773)
Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A security vulnerability exists in Microsoft SQL Server. An attacker can exploit the vulnerability to gain access to sensitive...
Unspecified Vulnerability in Adobe Audition (CNVD-2025-16374)
Adobe Audition is a set of multi-track editing tools from the American company Audobee Adobe. The product is mainly used to include multi-track, waveforms and spectral display of the perfect toolset for audio content mixing, editing and creation. A security vulnerability exists in Adobe Audition...
Adobe Illustrator Out-of-Bounds Read Vulnerability (CNVD-2025-16400)
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause a sensitive memory leak...
Adobe Substance 3D Stager Out-of-Bounds Read Vulnerability (CNVD-2025-16544)
Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...
Adobe ColdFusion XML External Entity Injection Vulnerability (CNVD-2025-16375)
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has an XML external entity injection vulnerability that originates from improperly...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17169)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server that originates from improper access control of the Optimizer component and can be exploited by an attacker to cause a denial of service...
GPT-SoVITS-WebUI open_slice function command injection vulnerability
GPT-SoVITS-WebUI is a TTS training model. A command injection vulnerability exists in the GPT-SoVITS-WebUI openslice function, which can be exploited by an attacker to execute arbitrary commands on the system...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17172)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server that originates from improper access control of the Optimizer component and can be exploited by an attacker to cause a denial of service...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17108)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server that originates from improper access control of the InnoDB component and can be exploited by an attacker to cause a denial of service and unauthorized modification of data...
Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2025-24088)
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17173)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server that originates from improper access control of the Optimizer component and can be exploited by an attacker to cause a denial of service...
Oracle MySQL Server Resource Management Error Vulnerability (CNVD-2025-17180)
Oracle MySQL Server is a relational database from Oracle Corporation. A resource management error vulnerability exists in Oracle MySQL Server, which stems from improper access control in the Stored Procedure component and can be exploited by an attacker to cause a denial of service...
Hospital Management System view-medhistory.php File SQL Injection Vulnerability
Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter viewid in the file view-medhistory.php. An attack...
Simple Shopping Cart register.php File SQL Injection Vulnerability
Simple Shopping Cart is a simple shopping cart system. Simple Shopping Cart suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ruseremail in the file /register.php. The vulnerability can be exploited by an...
Microsoft Graphics Component Code Execution Vulnerability
Microsoft Graphics Component is a graphics driver component of Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. An attacker can exploit this vulnerability to remotely execute code...
GPT-SoVITS-WebUI Code Issue Vulnerability (CNVD-2025-23582)
GPT-SoVITS-WebUI is a TTS training model. A code issue vulnerability exists in GPT-SoVITS-WebUI that stems from unsafe deserialization processing of processckpt.py when receiving serialized data submitted by a user, which can be exploited by an attacker to execute arbitrary commands on the system...
Unspecified Vulnerability in Oracle Java SE (CNVD-2025-24095)
Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition, which can...
Microsoft PowerPoint Code Execution Vulnerability
Microsoft PowerPoint is a document presentation tool in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft PowerPoint, which can be exploited by an attacker to execute arbitrary code on a system or cause an application to crash...
Adobe Substance3D Viewer Null Pointer Dereference Vulnerability
Adobe Substance3D Viewer is a stand-alone desktop application for viewing and editing 3D files from Audobee Adobe USA. Adobe Substance3D Viewer suffers from a null pointer dereference vulnerability that can be exploited by attackers to cause a denial of service in the application...
UTT HiPER 840G aspRemoteApConfTempSend File Buffer Overflow Vulnerability
The UTT HiPER 840G is a full Gigabit Internet behavior management router from Atech UTT, which is aimed at small businesses, community networks, hotels, and other scenarios, providing high-speed network access and intelligent management features. The UTT HiPER 840G suffers from a buffer overflow...
Microsoft Windows Resource Management Error Vulnerability (CNVD-2025-16951)
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. The vulnerability can be exploited by an attacker to gain elevated privileges...
Microsoft PC Manager Access Control Error Vulnerability (CNVD-2025-17139)
Microsoft PC Manager is a computer management software from Microsoft USA, which can be used for one-click acceleration, system space management, pop-up window management, and comprehensive physical examination. An access control error vulnerability exists in Microsoft PC Manager. An attacker can...
Siemens TIA Administrator Access Control Error Vulnerability
Siemens TIA Administrator is a management program for authorizing and licensing SIMATIC products from Siemens, Germany. An access control error vulnerability exists in Siemens TIA Administrator that can be exploited by an attacker to cause elevation of privilege and arbitrary code execution...
Unspecified Vulnerability in Oracle Java SE (CNVD-2025-24099)
Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition, which can...
Unspecified Vulnerability in Oracle Java SE (CNVD-2025-24096)
Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition, which can ...
Unspecified Vulnerability in Oracle Java SE (CNVD-2025-24092)
Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in Oracle GraalVM for JDK for Oracle Java SE, which can be exploited by attackers to cause ...
AUO DIR-605L Buffer Overflow Vulnerability
The AUO DIR-605L is the first cloud router from AUO designed for home and small office networks. The AUO DIR-605L suffers from a buffer overflow vulnerability that originates from the failure of Language, a parameter of the function sub410DDC in the file switchlanguage.cgi in the httpd component,...
Adobe InDesign Desktop Heap Buffer Overflow Vulnerability (CNVD-2025-16552)
Adobe InDesign Desktop is a page layout software from the American company Audobee Adobe. Adobe InDesign Desktop suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...
GPT-SoVITS-WebUI change_label function command injection vulnerability
GPT-SoVITS-WebUI is a TTS training model. A command injection vulnerability exists in the GPT-SoVITS-WebUI changelabel function that can be exploited by an attacker to execute arbitrary commands on the system...
Car Washing Management System SQL Injection Vulnerability
Car Washing Management System is a car wash management system. Car Washing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter wpid in the file /admin/editcar-washpoint.php. An attacker can...
Microsoft Office 365 Encryption Issue Vulnerability
Microsoft Office 365 is an office software suite product from the American company Microsoft Microsoft. Common components of this product include Word, Excel, Access, Powerpoint, FrontPage, etc. A security vulnerability exists in Microsoft Office 365. An attacker exploiting the vulnerability can...
Microsoft Windows Resource Management Error Vulnerability (CNVD-2025-16947)
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows is vulnerable to a resource management error. No detailed vulnerability details are provided at this time...
Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2025-16779)
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit the vulnerability to elevate privileges...
Online Appointment Booking System cover.php file SQL Injection Vulnerability
Online Appointment Booking System is an online appointment booking system. The Online Appointment Booking System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter uname/psw in the file /cover.php. The...
Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2025-24091)
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...
Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2025-24089)
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...
Tenda AC500 Stack Buffer Overflow Vulnerability
Tenda AC500 is a wireless controller device from Tenda, designed for small and medium-sized businesses, supporting cross-VLAN management of wireless networks. Tenda AC500 has a stack buffer overflow vulnerability, which originates from the parameter radio2g1 in the file /goform/setWtpData fails t...
Online Library Management System Cross-Site Scripting Vulnerability
Online Library Management System is an online library management system. Online Library Management System has a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the parameter stdid in the file...
Dairy Farm Shop Management System invoices.php file SQL injection vulnerability
Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter del in the file invoices.php...
Dairy Farm Shop Management System invoice.php File SQL Injection Vulnerability
Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter del in the file /invoice.php...
Dairy Farm Shop Management System edit-company.php File SQL Injection Vulnerability
Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the edit-company.php parameter companyname...
Unspecified Vulnerability in Oracle Database Server (CNVD-2025-24075)
Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database Materialized View for Oracle Databas...