IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-16762)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user-supplied data when parsing DXF files, which can be exploited by an attacker to execute code in the context of the current...

IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-16739)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user-supplied data when parsing DWG files, which can be exploited by an attacker to execute code in the context of the current...

IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-16730)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user-supplied data when parsing DWG files, which can be exploited by an attacker to execute code in the context of the current...

IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-16724)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user-supplied data when parsing DWG files, which can be exploited by an attacker to execute code in the context of the current...

WordPress FG Drupal to WordPress Cross-Site Request Forgery Vulnerability

WordPress FG Drupal to WordPress is a plugin tool for migrating Drupal website content to WordPress, which supports the import of basic content such as articles, images, etc., but the free version does not include the comment import function. WordPress FG Drupal to WordPress suffers from a...

WordPress JetTricks Cross-Site Scripting Vulnerability

WordPress JetTricks is a plugin developed for WordPress to enhance the Elementor page builder. WordPress JetTricks suffers from a cross-site scripting vulnerability that stems from improper input neutralization, which can be exploited by an attacker to trigger the execution of malicious scripts b...

WordPress JetSearch Cross-Site Scripting Vulnerability

WordPress JetSearch is an AJAX-based search plugin for WordPress , designed for Elementor editor , providing a fast , flexible and beautiful search experience . WordPress JetSearch suffers from a cross-site scripting vulnerability that stems from improper input neutralization, which can be...

Online Appointment Booking System adddoctorclinic.php File SQL Injection Vulnerability

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System has a SQL injection vulnerability that originates from improper handling of the parameter clinic in the file /admin/adddoctorclinic.php, which can be exploited by an attacker to access...

Ivanti Avalanche Manager Buffer Overflow Vulnerability

Ivanti Avalanche Manager is an enterprise mobile device management system developed by Ivanti for managing smartphones, tablets and other mobile devices. A buffer overflow vulnerability exists in Ivanti Avalanche Manager, which arises from a program that does not properly manage memory allocation...

Online Appointment Booking System adddoctor.php File SQL Injection Vulnerability

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System has a SQL injection vulnerability that originates from improper handling of the parameter Username in the file /admin/adddoctor.php, which can be exploited by an attacker to obtain sensiti...

Online Appointment Booking System deletedoctor.php File SQL Injection Vulnerability

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System suffers from a SQL injection vulnerability that originates from improper handling of the parameter did in the file /admin/deletedoctor.php, which can be exploited by an attacker to inject...

WordPress WP-BusinessDirectory SQL Injection Vulnerability

WordPress WP-BusinessDirectory is a business directory plugin for the WordPress platform, which is mainly used to create and manage professional business directory websites, supporting the display of service provider information by location, category and other classifications, and monetizing...

WordPress Torod SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. WordPress Torod suffers from a SQL injection vulnerability that stems from improper handling of special elements of SQL commands, which can be exploited by an attacker to...

WordPress News Kit Elementor Addons Missing Authorization Vulnerability

WordPress News Kit Elementor Addons is a visual page builder plugin designed for WordPress websites, mainly for creating news or blog sites. A lack of authorization vulnerability exists in WordPress News Kit Elementor Addons that stems from improperly configured access control, and no details of...

D-Link DIR-513 Buffer Overflow Vulnerability (CNVD-2025-16670)

The D-Link DIR-513 is a wireless router device manufactured by D-Link. A buffer overflow vulnerability exists in the D-Link DIR-513 version 1.0, which originates from improper handling of the curTime parameter in the sprintf function of the /goform/formLanSetupRouterSettings file in the Boa...

Online Banquet Booking System /admin/view-user-queries.php File SQL Injection Vulnerability

Online Banquet Booking System is an online banquet booking system. Online Banquet Booking System is vulnerable to a SQL injection vulnerability that stems from the viewid parameter in the /admin/view-user-queries.php file not being security filtered. No details of the vulnerability are available ...

TOTOLINK T6 Missing Authentication Vulnerability

TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a lack of authentication vulnerability that stems from the setTelnetCfg function of the /cgi-bin/cstecgi.cgi file in the component...

IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-17037)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user data when parsing DXF files, which can be exploited by an attacker to execute code in the context of the current process...

WordPress HT Contact Form 7 File Inclusion Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A file inclusion vulnerability exists in WordPress HT Contact Form 7, which stems from improper file name control and can be exploited by an attacker to cause a PHP native...

Netgear D6400 Remote Command Execution Vulnerability

The Netgear D6400 is a wireless modem from NETGEAR. A remote command execution vulnerability exists in the Netgear D6400, which can be exploited by an attacker to execute arbitrary commands on the system...

WordPress Product XML Feed Manager for WooCommerce Missing Authorization Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A lack of authorization vulnerability exists in WordPress Product XML Feed Manager for WooCommerce, which can be exploited by an attacker to cause the exploitation of a...

D-Link DI-8100 Buffer Overflow Vulnerability

The D-Link DI-8100 is an enterprise-class router device from D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 16.07.26A1, which stems from improper handling of the outaddr/inaddr/outport/proto parameters in the /menunat.asp file in the HTTP request processing component...

IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-16839)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user-supplied data when parsing CGM files, which can be exploited by an attacker to execute code in the context of the current...

IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-16841)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user-supplied data when parsing DXF files, which can be exploited by an attacker to execute code in the context of the current...

IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-16763)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user-supplied data when parsing DWG files, which can be exploited by an attacker to execute code in the context of the current...

IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-16751)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user-supplied data when parsing DWG files, which can be exploited by an attacker to execute code in the context of the current...

IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-16731)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user-supplied data when parsing DWG files, which can be exploited by an attacker to execute code in the context of the current...

IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-17054)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user data when parsing DXF files, which can be exploited by an attacker to execute code in the context of the current process...

IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-17059)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user data when parsing DXF files, which can be exploited by an attacker to execute code in the context of the current process...

WordPress Image Wall Cross-Site Scripting Vulnerability

WordPress Image Wall is a WordPress plugin that allows users to browse blog posts or page content via images. WordPress Image Wall suffers from a cross-site scripting vulnerability that stems from improper input neutralization, which can be exploited by an attacker to execute a phishing attack by...

IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-16733)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user-supplied data when parsing DWG files, which can be exploited by an attacker to execute code in the context of the current...

IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-16752)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user-supplied data when parsing DXF files, which can be exploited by an attacker to execute code in the context of the current...

IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-16755)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user-supplied data when parsing DXF files, which can be exploited by an attacker to execute code in the context of the current...

D-Link DI-8100 Buffer Overflow Vulnerability (CNVD-2025-16668)

The D-Link DI-8100 is an enterprise-class router device from D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 1.0, which originates from the improper handling of the parameters removeextproto/removeextport by the sprintf function in the /upnpctrl.asp file of the...

IrfanView CADImage Plugin Buffer Overflow Vulnerability (CNVD-2025-17032)

IrfanView CADImage Plugin is a CAD plugin from IrfanView. IrfanView CADImage Plugin suffers from a buffer overflow vulnerability that stems from a lack of validation of user-supplied data when parsing DXF files, which can be exploited by an attacker to execute code in the context of the current...

TOTOLINK T6 delDevice function command injection vulnerability

TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a command injection vulnerability that originates from the failure of the function delDevice's parameter ipAddr to correctly filter...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2025-24084)

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Universal Work Queue for Oracle...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2025-24081)

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Mobile Field Service for Oracle...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17183)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which originates from a flaw in the optimizer component and can be exploited by an attacker to cause a denial of service...

GPT-SoVITS-WebUI Code Issue Vulnerability (CNVD-2025-23575)

GPT-SoVITS-WebUI is a TTS training model. A code issue vulnerability exists in GPT-SoVITS-WebUI, which stems from unsafe deserialization handling of the AudioPre class when receiving user-submitted serialized data, and can be exploited by an attacker to execute arbitrary commands on the system...

UTT HiPER 840G aspApBasicConfigUrcp File Buffer Overflow Vulnerability

The UTT HiPER 840G is a full Gigabit Internet behavior management router from Atech UTT, which is aimed at small businesses, community networks, hotels, and other scenarios, providing high-speed network access and intelligent management features. The UTT HiPER 840G suffers from a buffer overflow...

WeGIA SQL Injection Vulnerability (CNVD-2025-17285)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the /WeGIA/html/socio/sistema/processadeletarsocio.php endpoint. An attacker could exploit this vulnerability to...

Oracle MySQL Server Resource Management Error Vulnerability (CNVD-2025-17182)

Oracle MySQL Server is a relational database from Oracle Corporation. A resource management error vulnerability exists in Oracle MySQL Server that stems from improper access control of the Optimizer component and can be exploited by an attacker to cause a denial of service...

Unspecified Vulnerability in Oracle Java SE (CNVD-2025-24094)

Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. Oracle Java SE has a security vulnerability that can be exploited by attackers to cause a system takeover...

Oracle MySQL Server Resource Management Error Vulnerability (CNVD-2025-17105)

Oracle MySQL Server is a relational database from Oracle Corporation. A resource management error vulnerability exists in Oracle MySQL Server, which stems from improper access control on a multi-protocol network and can be exploited by an attacker to cause a denial of service...

Tenda FH1205 Buffer Overflow Vulnerability

The Tenda FH1205 is a wireless router from Tenda China. The Tenda FH1205 version 2.0.0.7775 suffers from a buffer overflow vulnerability that originates from the parameter wpapskcrypto in the file /goform/WifiExtraSet, which fails to correctly validate the length of the input data, which can be...

Voting System positions_edit.php file SQL Injection Vulnerability

Voting System is an election system. Voting System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in parameter ID in file /admin/positionsedit.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...

Voting System positions_row.php file SQL Injection Vulnerability

Voting System is an election system. Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID in the file /admin/positionsrow.php. An attacker can exploit this vulnerability to execute illegal SQL...

Dairy Farm Shop Management System edit-product.php File SQL Injection Vulnerability

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter productname in the file...

Unspecified Vulnerability in Tenda CP3 Pro

Tenda CP3 Pro is a smart wireless PTZ camera that combines 360° panoramic surveillance, 3MP HD camera, and Wi-Fi 6 network technology, and supports human/pet detection, cry detection, and one-button calling. Tenda CP3 Pro suffers from a security vulnerability that originates from the presence of ...