Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15511)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a stack overflow risk when parsing vector images, and can be...

UTT HiPER 840G Buffer Overflow Vulnerability (CNVD-2026-00817)

The UTT HiPER 840G is a full Gigabit Internet behavior management router from Atech UTT, which is aimed at small businesses, community networks, hotels, and other scenarios, providing high-speed network access and intelligent management features. The UTT HiPER 840G suffers from a buffer overflow...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15510)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a stack overflow risk when parsing vector images, and can be...

UTT HiPER 840G Buffer Overflow Vulnerability (CNVD-2026-00816)

The UTT HiPER 840G is a full Gigabit Internet behavior management router from Atech UTT, which is aimed at small businesses, community networks, hotels, and other scenarios, providing high-speed network access and intelligent management features. The UTT HiPER 840G suffers from a buffer overflow...

Belkin F9K1122 Stack Buffer Overflow Vulnerability (CNVD-2025-20827)

The Belkin F9K1122 is a WiFi signal extender. The Belkin F9K1122 suffers from a stack buffer overflow vulnerability that results from the incorrect operation of the parameter submit-url-ok in the file /goform/formBSSetSitesurvey. No detailed vulnerability details are provided at this time...

WordPress Team Showcase plugin cross-site scripting vulnerability

WordPress Team Showcase Plugin is a plugin for displaying team members on a website, which is mainly used on the official website of a business or studio to display core member information in a visual way to enhance the sense of trust. The WordPress Team Showcase plugin suffers from a cross-site...

Marvell QConvergeConsole Path Traversal Vulnerability (CNVD-2025-20442)

Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. A path traversal vulnerability exists in Marvell QConvergeConsole due to an error in the compressFirmwareDumpFiles method. An attacker could exploit this vulnerability to disclose information i...

Marvell QConvergeConsole Path Traversal Vulnerability (CNVD-2025-20443)

Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. A path traversal vulnerability exists in Marvell QConvergeConsole due to an error in the deleteAppFile method. An attacker could exploit the vulnerability to delete a file in the SYSTEM context...

Marvell QConvergeConsole path traversal vulnerability (CNVD-2025-20449)

Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. A path traversal vulnerability exists in Marvell QConvergeConsole due to an error in getFileUploadSize. An attacker could exploit the vulnerability to disclose information in the SYSTEM context...

Google ChromeOS Access Control Error Vulnerability

Google ChromeOS is an operating system from the American company Google. Google ChromeOS suffers from an Access Control Error vulnerability that stems from improper access control of the Stylus Tools component, which can be exploited by an attacker to obtain information about a user's files...

Unspecified vulnerability in Huawei HarmonyOS and EMUI (CNVD-2025-16591)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A security vulnerability exists in Huawei HarmonyOS an...

Tenda AC6 fromSetRouteStatic function buffer overflow vulnerability

Tenda AC6 is a dual-band wireless router from Tenda. Tenda AC6 suffers from a buffer overflow vulnerability that stems from the list parameter in the fromSetRouteStatic function failing to properly validate the length size of the input data, no detailed vulnerability details are provided at this...

Endress+Hauser MEAC300-FNADE4 Information Disclosure Vulnerability (CNVD-2025-16346)

The Endress+Hauser MEAC300-FNADE4 is a cost-effective emissions data management computer from Endress+Hauser Vietnam. An information disclosure vulnerability exists in the Endress+Hauser MEAC300-FNADE4 that stems from the authentication mechanism based on the challenge response system using the...

Marvell QConvergeConsole Path Traversal Vulnerability (CNVD-2025-20451)

Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. A path traversal vulnerability exists in Marvell QConvergeConsole due to an error in the restoreESwitchConfig method. An attacker could exploit this vulnerability to disclose information in a...

Tenda AC6 Buffer Overflow Vulnerability

Tenda AC6 is a dual-band wireless router from Tenda. Tenda AC6 has a buffer overflow vulnerability, the vulnerability stems from the formSetFirewallCfg function firewallEn parameter fails to correctly validate the length and size of the input data, an attacker can use this vulnerability to cause ...

WeGIA fid parameter denial of service vulnerability

WeGIA is a web manager for welfare organizations. WeGIA suffers from a denial of service vulnerability that stems from the length of the fid parameter not being validated, which can be exploited by an attacker to cause a denial of service...

Mattermost Permission Issues Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a privilege issue vulnerability that stems from not properly enforcing channel member management privileges, which can be exploited by an attacker to enable unauthorized users t...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CNVD-2025-23050)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A remote code execution vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by an attacker to execute arbitrary code on a system...

Endress+Hauser MEAC300-FNADE4 Cross-Site Scripting Vulnerability

The Endress+Hauser MEAC300-FNADE4 is a cost-effective emissions data management computer from Endress+Hauser Vietnam. The Endress+Hauser MEAC300-FNADE4 is vulnerable to a cross-site scripting vulnerability due to improper validation of user input via dashboard name. An attacker could exploit the...

WeGIA SQL Injection Vulnerability (CNVD-2025-17291)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a SQL injection vulnerability that stems from a lack of validation of the idfuncionario parameter against externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...

Unspecified Vulnerability in Endress+Hauser MEAC300-FNADE4 (CNVD-2025-16349)

The Endress+Hauser MEAC300-FNADE4 is a cost-effective emissions data management computer from Endress+Hauser Vietnam. A security vulnerability exists in the Endress+Hauser MEAC300-FNADE4 that stems from the reuse of the same credentials across multiple services and different scopes within the sam...

Belkin F9K1122 Stack Buffer Overflow Vulnerability (CNVD-2025-20831)

The Belkin F9K1122 is a WiFi signal extender. The Belkin F9K1122 suffers from a stack buffer overflow vulnerability that originates from the incorrect manipulation of the parameter L2TPUserName in the file /goform/formL2TPSetup, for which no detailed vulnerability details are provided at this tim...

Belkin F9K1122 Stack Buffer Overflow Vulnerability (CNVD-2025-20835)

The Belkin F9K1122 is a WiFi signal extender from Belkin Canada. The Belkin F9K1122 version 1.00.33 suffers from a buffer overflow vulnerability that stems from the incorrect operation of the parameter pppUserName in the file /goform/formWanTcpipSetup, no details of the vulnerability are provided...

Endress+Hauser MEAC300-FNADE4 Information Disclosure Vulnerability (CNVD-2025-16353)

The Endress+Hauser MEAC300-FNADE4 is a cost-effective emissions data management computer from Endress+Hauser Vietnam. A security vulnerability exists in the Endress+Hauser MEAC300-FNADE4, which stems from the fact that all communications are not encrypted, and can be exploited by an attacker to...

Unspecified Vulnerability in Endress+Hauser MEAC300-FNADE4 (CNVD-2025-16350)

The Endress+Hauser MEAC300-FNADE4 is a cost-effective emissions data management computer from Endress+Hauser Vietnam. A security vulnerability exists in the Endress+Hauser MEAC300-FNADE4 that stems from the HttpOnly flag not being set, which can be exploited by an attacker to cause session...

WordPress PrivateContent-Mail Actions File Inclusion Vulnerability

WordPress PrivateContent-Mail Actions is the name of the plugin or feature module for mail actions and member management. WordPress PrivateContent-Mail Actions suffers from a file inclusion vulnerability that stems from improper file inclusion control, which can be exploited by an attacker to cau...

Apache Apisix elevation of privilege vulnerability (CNVD-2025-20873)

Apache Apisix is a cloud-native microservices API gateway service of the U.S. Apache Apache Foundation. The software is based on OpenResty and etcd to realize , with dynamic routing and plug-in hot loading , suitable for microservice system under the API management . An elevation of privilege...

Marvell QConvergeConsole Path Traversal Vulnerability (CNVD-2025-20448)

Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. A path traversal vulnerability exists in Marvell QConvergeConsole due to an error in the getFileUploadBytes method. An attacker could exploit the vulnerability to disclose information in the...

Tenda AC6 formSetQosBand function buffer overflow vulnerability

Tenda AC6 is a dual-band wireless router from Tenda. Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the list parameter in the formSetQosBand function failing to correctly validate the length and size of the input data, which can be exploited by an attacker to cause ...

Marvell QConvergeConsole path traversal vulnerability (CNVD-2025-20447)

Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. A path traversal vulnerability exists in Marvell QConvergeConsole due to an error in the getFileUploadBytes method. An attacker could exploit the vulnerability to disclose information in the...

Belkin F9K1122 Stack Buffer Overflow Vulnerability (CNVD-2025-20838)

The Belkin F9K1122 is a WiFi signal extender from Belkin Canada. The Belkin F9K1122 suffers from a stack buffer overflow vulnerability that originates from the incorrect operation of the parameter pinCode in the file /goform/formWpsStart, no details of the vulnerability are provided at this time...

Unspecified vulnerability in Huawei HarmonyOS and EMUI (CNVD-2025-16592)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A security vulnerability exists in Huawei HarmonyOS an...

Huawei HarmonyOS PDF preview module null pointer dereference vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A null pointer dereference vulnerability exists in the Huawei HarmonyOS PDF preview module, which can be exploited by an attacker to cause a functional...

Marvell QConvergeConsole Path Traversal Vulnerability (CNVD-2025-20441)

Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. A path traversal vulnerability exists in Marvell QConvergeConsole due to an error in the compressDriverFiles method. An attacker could exploit the vulnerability to disclose information in the...

HDF5 Memory Leak Vulnerability

HDF5 is a library of HDF open source . HDF5 memory leakage vulnerability , the vulnerability stems from the file src/H5FL.c function H5FLmalloc did not release or can not release has been dynamically allocated heap memory , an attacker can use this vulnerability leads to denial-of-service attacks...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15520)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS version 5.1.0, which stems from a null pointer dereference in the Application Exit Reason module, and can...

Marvell QConvergeConsole Path Traversal Vulnerability (CNVD-2025-20452)

Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. A path traversal vulnerability exists in Marvell QConvergeConsole due to an error in the saveNICParamsToFile method. An attacker could exploit the vulnerability to write a file in the SYSTEM...

Unspecified Vulnerability in Huawei HarmonyOS (CNVD-2025-15509)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a null pointer dereference in the PDF Preview module, and can ...

Unspecified Vulnerability in Huawei HarmonyOS (CNVD-2025-15505)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a null pointer dereference in the PDF Preview module, and can ...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15514)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a stack overflow risk when parsing vector images, and can be...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15521)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a stack overflow risk when parsing vector images, and can be...

Huawei HarmonyOS and EMUI calendar storage module privilege bypass vulnerability

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. A privilege bypass...

Marvell QConvergeConsole path traversal vulnerability (CNVD-2025-20446)

Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. Marvell QConvergeConsole has a path traversal vulnerability that is caused by an error in the getDriverTmpPath method. An attacker could exploit the vulnerability to disclose information in the...

Belkin F9K1122 Command Injection Vulnerability (CNVD-2025-20839)

The Belkin F9K1122 is a WiFi signal extender from Belkin Canada. The Belkin F9K1122 suffers from a command injection vulnerability that stems from the parameter command in the file /goform/mp failing to properly filter constructed command special characters, commands, and so on. An attacker can...

Huawei HarmonyOS and EMUI calendar storage module privilege bypass vulnerability (CNVD-2025-16594)

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. A privilege bypass...

Unspecified Vulnerability in Endress+Hauser MEAC300-FNADE4 (CNVD-2025-16345)

The Endress+Hauser MEAC300-FNADE4 is a cost-effective emissions data management computer from Endress+Hauser Vietnam. A security vulnerability exists in the Endress+Hauser MEAC300-FNADE4, which can be exploited by attackers to cause a brute force attack...

WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17288)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the idfuncionario parameter in the cadastrodependentepessoanova.php endpoint, for which no detailed...

WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17292)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in novomemorando.php, which can be exploited by an attacker to execute injected scripts in a browser...

HDF5 H5FS__sect_link_size function buffer overflow vulnerability

HDF5 is a library of HDF open source . HDF5 version 1.14.6 there is a buffer overflow vulnerability , the vulnerability stems from the file src/H5FSsection.c function H5FSsectlinksize failed to correctly validate the length of the input data size , a remote attacker can use this vulnerability on...

Unspecified Vulnerability in Huawei HarmonyOS (CNVD-2025-15506)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a null pointer dereference in the PDF Preview module, and can ...