131891 matches found
D-Link DI-8100 /jingx.asp File Buffer Overflow Vulnerability
The D-Link DI-8100 is a broadband router from D-Link designed for small to medium-sized network environments, supporting up to 4 Internet ports and 4 LAN ports for up to 80 simultaneous users. The D-Link DI-8100 suffers from a buffer overflow vulnerability that originates from the failure of the...
GPT-SoVITS-WebUI code issue vulnerability (CNVD-2025-23576)
GPT-SoVITS-WebUI is a TTS training model. A code issue vulnerability exists in GPT-SoVITS-WebUI, which stems from insecure deserialization of bsroformer.py when receiving serialized data submitted by a user, and can be exploited by an attacker to execute arbitrary commands on the system...
Adobe InCopy Number Error Vulnerability
Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. A numeric error vulnerability exists in Adobe InCopy, which can be exploited by an attacker to cause arbitrary code to be executed...
Online Fire Reporting System all-requests.php File SQL Injection Vulnerability
Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter teamid in the file /admin/all-requests.php. An attacker ca...
Adobe Framemaker heap buffer overflow vulnerability (CNVD-2025-16397)
Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. Adobe Framemaker suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute...
Adobe Substance 3D Designer Out-of-Bounds Write Vulnerability (CNVD-2025-16545)
Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...
Adobe Framemaker Out-of-Bounds Write Vulnerability (CNVD-2025-16390)
Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. An out-of-bounds write vulnerability exists in Adobe Framemaker, which could be exploited by an attacker to execut...
IBM OpenPages with Watson Encryption Issue Vulnerability
IBM OpenPages with Watson is an AI-powered financial risk analytics solution from International Business Machines IBM. The platform is based on AI technology to predict risk factors and minimize risks in financial activities by integrating, automatically identifying, measuring, monitoring,...
Adobe ColdFusion Server-Side Request Forgery Vulnerability
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has a server-side request forgery vulnerability, the vulnerability stems from the serv...
Adobe ColdFusion Cross-Site Scripting Vulnerability (CNVD-2025-16380)
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. A cross-site scripting vulnerability exists in Adobe ColdFusion, which is caused by improper validation...
Ivanti Endpoint Manager Encryption Misuse Vulnerability (CNVD-2025-18155)
Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to manage all endpoint devices in an enterprise network. An encryption misuse vulnerability exists in Ivanti Endpoint Manager, which can be exploited by an attacker to decrypt other users' passwords...
Microsoft Word Code Execution Vulnerability (CNVD-2025-16695)
Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
Adobe Illustrator Numeric Error Vulnerability (CNVD-2025-16549)
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A numeric error vulnerability exists in Adobe Illustrator that originates from an integer underflow and can be exploited by an attacker to cause arbitrary code to be executed...
Adobe Illustrator Input Validation Error Vulnerability (CNVD-2025-16548)
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An input validation error vulnerability exists in Adobe Illustrator that stems from an integer overflow or wrap-around error, which can be exploited by an attacker to cause arbitrary code t...
Adobe Substance 3D Designer Out-of-Bounds Read Vulnerability (CNVD-2025-16541)
Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...
Adobe Substance 3D Designer Out-of-Bounds Read Vulnerability (CNVD-2025-16538)
Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...
Adobe Illustrator Out-of-Bounds Read Vulnerability (CNVD-2025-16404)
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause a sensitive memory leak...
Microsoft Excel Buffer Overflow Vulnerability
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel. An attacker exploiting this vulnerability could gain access to sensitive information...
Microsoft Windows Information Disclosure Vulnerability (CNVD-2025-16944)
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker could exploit this vulnerability to gain access to sensitive information...
Microsoft Word Code Execution Vulnerability (CNVD-2025-17471)
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
Adobe Substance3D Viewer Out-of-Bounds Read Vulnerability
Adobe Substance3D Viewer is a stand-alone desktop application for viewing and editing 3D files from Audobee Adobe USA. Adobe Substance3D Viewer suffers from an out-of-bounds read vulnerability, which can be exploited by attackers to cause a sensitive memory leak...
Adobe Dimension Out-of-Bounds Read Vulnerability (CNVD-2025-16385)
Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. Adobe Dimension suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to obtain sensitive information...
Adobe ColdFusion Access Control Error Vulnerability (CNVD-2025-16382)
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. An access control error vulnerability exists in Adobe ColdFusion, which could be exploited by an attack...
Zoo Management System /admin/manage-animals.php File SQL Injection Vulnerability
Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file /admin/manage-animals.php. An attacker can exploit this vulnerability...
Adobe ColdFusion XXE Vulnerability
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from an XXE vulnerability that can be exploited by attackers to cause a securi...
Library System books.php File SQL Injection Vulnerability
Library System is a library system. The Library System suffers from an SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter Search in the file /user/teacher/books.php. An attacker can exploit this vulnerability to execute...
Adobe Framemaker Numeric Error Vulnerability (CNVD-2025-16398)
Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A numeric error vulnerability exists in Adobe Framemaker, which can be exploited by an attacker to execute arbitra...
Library System approve.php File SQL Injection Vulnerability
Library System is a library system. Library System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID of the file /approve.php. An attacker can exploit this vulnerability to execute illegal SQL commands to ste...
Adobe Illustrator Stack Buffer Overflow Vulnerability (CNVD-2025-16547)
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A stack buffer overflow vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to execute arbitrary code in the context of the current user...
Microsoft Office Elevation of Privilege Vulnerability (CNVD-2025-16690)
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. An elevation of privilege vulnerability exists in Microsoft Office, which is due to untrusted data...
Library System notapprove.php File SQL Injection Vulnerability
Library System is a library system. The Library System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /notapprove.php. An attacker can exploit this vulnerability to execute illegal SQL commands t...
Adobe Illustrator Out-of-Bounds Write Vulnerability (CNVD-2025-16403)
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to execute arbitrary code in the context of the current user...
Microsoft Office Code Execution Vulnerability (CNVD-2025-16691)
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute...
Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2025-24082)
Oracle E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle iStore for Oracle E-Business...
Cyber Cafe Management System /index.php File SQL Injection Vulnerability
Cyber Cafe Management System is an internet cafe management system. Cyber Cafe Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in file /index.php. An attacker can exploit this...
Unspecified Vulnerability in Oracle Java SE (CNVD-2025-24093)
Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in Oracle Java SE for Oracle Java SE and Oracle GraalVM for JDK, which can be exploited by...
D-Link DI-8100 /arp_sys.asp File Buffer Overflow Vulnerability
The D-Link DI-8100 is a broadband router from D-Link designed for small to medium-sized network environments, supporting up to 4 Internet ports and 4 LAN ports for up to 80 simultaneous users. The D-Link DI-8100 suffers from a buffer overflow vulnerability that originates from the failure of the...
Adobe ColdFusion Cross-Site Scripting Vulnerability (CNVD-2025-16379)
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. A cross-site scripting vulnerability exists in Adobe ColdFusion, which is caused by improper validation...
Voting System voters_row.php file SQL Injection Vulnerability
Voting System is an election system. Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements for parameter ID in file /admin/votersrow.php. An attacker can exploit this vulnerability to execute illegal SQL commands ...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17181)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which originates from a flaw in the optimizer component and can be exploited by an attacker to cause a denial of service...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17166)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which originates from improper access control of the Thread Pooling component, and can be exploited by an attacker to cause a partial denial of service...
Oracle MySQL Server Resource Management Error Vulnerability (CNVD-2025-17106)
Oracle MySQL Server is a relational database from Oracle Corporation. A resource management error vulnerability exists in Oracle MySQL Server that stems from improper access control of the InnoDB component and can be exploited by an attacker to cause a denial of service...
Oracle MySQL Server Resource Management Error Vulnerability (CNVD-2025-17179)
Oracle MySQL Server is a relational database from Oracle Corporation. A resource management error vulnerability exists in Oracle MySQL Server that stems from improper access control of the InnoDB component and can be exploited by an attacker to cause a denial of service...
Oracle MySQL Server Resource Management Error Vulnerability
Oracle MySQL Server is a relational database from Oracle Corporation. A resource management error vulnerability exists in Oracle MySQL Server that stems from improper access control of the DDL component and can be exploited by an attacker to cause a denial of service...
Unspecified Vulnerability in Oracle Database Server (CNVD-2025-24076)
Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Unified Audit of Oracle Database Server, which can b...
E-Commerce Site Arbitrary File Upload Vulnerability
E-Commerce Site is an e-commerce site. E-Commerce Site suffers from an arbitrary file upload vulnerability that stems from improper manipulation of the parameter photo in the file /admin/usersphoto.php, no details of the vulnerability are available at this time...
Zoo Management System /admin/add-foreigners-ticket.php File SQL Injection Vulnerability
Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter cprice in the file /admin/add-foreigners-ticket.php. An attacker can exploit this...
Microsoft Brokering File System Resource Management Error Vulnerability (CNVD-2025-16872)
Microsoft Brokering File System is a file system from the American company Microsoft. A security vulnerability exists in Microsoft Brokering File System. An attacker could exploit the vulnerability to elevate privileges...
Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2025-16776)
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit the vulnerability to elevate privileges...
Microsoft Windows Resource Management Error Vulnerability (CNVD-2025-16946)
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. The vulnerability can be exploited by an attacker to gain elevated privileges...