131179 matches found
Adobe InDesign Desktop Buffer Overflow Vulnerability (CNVD-2025-14823)
Adobe InDesign Desktop is a page layout software from the American company Audobee Adobe. Adobe InDesign Desktop suffers from a buffer overflow vulnerability that stems from an out-of-bounds write problem that can be exploited by an attacker to cause arbitrary code execution...
Microsoft Word Code Execution Vulnerability (CNVD-2025-17473)
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
Adobe Commerce Access Control Error Vulnerability
Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce has a security vulnerability that can be exploited by an attacker to cause a security feature bypass...
Unspecified Vulnerability in Ivanti Workspace Control (CNVD-2025-15108)
Ivanti Workspace Control is a desktop management solution from Ivanti. Ivanti Workspace Control suffers from a security vulnerability that originates from hard-coded keys, which can be exploited by an attacker to decrypt stored SQL credentials...
Unspecified Vulnerability in Ivanti Workspace Control
Ivanti Workspace Control is a desktop management solution from Ivanti. A security vulnerability exists in Ivanti Workspace Control, which is rooted in a hard-coded key that can be exploited by an attacker to decrypt stored environment variable credentials and obtain sensitive information...
Adobe InDesign Desktop Code Issue Vulnerability
Adobe InDesign Desktop is a page layout software from the American company Audobee Adobe. Adobe InDesign Desktop suffers from a code issue vulnerability that originates from a null pointer dereference, which can be exploited by an attacker to cause a denial of service...
Dmacroweb DM Corporative CMS Path Disclosure Vulnerability
Dmacroweb DM Corporative CMS is a content management system from the Spanish company Dmacroweb. Dmacroweb DM Corporative CMS suffers from a path disclosure vulnerability that can be exploited by an attacker to view the contents of webroot/file...
Code Injection Vulnerabilities in Various ABB Products
ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications...
Adobe InCopy Input Validation Error Vulnerability (CNVD-2025-13325)
Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from an input validation error vulnerability that is caused by an integer overflow error. An attacker could exploit this vulnerability to execute code on the system or cause...
Adobe Commerce License Issue Vulnerability (CNVD-2025-14274)
Adobe Commerce is the United States of America Odobie Adobe company's a kind of merchants and brands for the world's leading digital commerce solutions. Adobe Commerce suffers from an authorization issue vulnerability that stems from an improper authorization issue that could be exploited by an...
Code Injection Vulnerability in Various ABB Products (CNVD-2025-13767)
ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...
Adobe InDesign Memory Misreference Vulnerability
Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A memory misreference vulnerability exists in Adobe InDesign, which can be exploited by an attacker to execute arbitrary code on the system or cause the application to crash...
Dmacroweb DM Corporative CMS SQL Injection Vulnerability (CNVD-2025-14355)
Dmacroweb DM Corporative CMS is a content management system from the Spanish company Dmacroweb. Dmacroweb DM Corporative CMS suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter name in the file /antcatalogue.as...
WordPress Grill and Chow plugin path traversal vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A path traversal vulnerability exists in the WordPress Grill and Chow plugin that stems from not doing effective filtering of local file resource calls, which can be exploited b...
Vehicle Record Management System /search-vehicle.php File SQL Injection Vulnerability
Vehicle Record Management System is a vehicle record management system. Vehicle Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter searchinputdata in file /admin/search-vehicle.php. ...
Dmacroweb DM Corporative CMS SQL Injection Vulnerability (CNVD-2025-14356)
Dmacroweb DM Corporative CMS is a content management system from the Spanish company Dmacroweb. Dmacroweb DM Corporative CMS suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter codform in the file...
SQL Injection Vulnerabilities in Various ABB Products (CNVD-2025-13770)
ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...
WordPress Broadstreet plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Broadstreet plugin that stems from uncleaned and escaped parameters, which can be exploited by an attacker to execut...
WordPress CraftXtore plugin file inclusion vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A file inclusion vulnerability exists in the WordPress CraftXtore plugin that stems from not doing effective filtering of local file resource calls, which can be exploited by an...
TOTOLINK EX1200T /boafrm/formIpQoS file buffer overflow vulnerability
The TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1200T suffers from a buffer overflow vulnerability that originates from the failure of the file /boafrm/formIpQoS in the HTTP POST Request Handler component to properly validate the length and si...
Information Disclosure Vulnerability in Various ABB Products (CNVD-2025-13766)
ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...
Denial of Service Vulnerability in Various ABB Products
ABB ASPECT and others are products of ABB Switzerland.ABB ASPECT is a scalable building energy management and control solution.ABB MATRIX is an embedded building automation network controller.ABB NEXUS is a wireless and wired solution. A denial-of-service vulnerability exists in various ABB...
Information Disclosure Vulnerability in Various ABB Products (CNVD-2025-13423)
ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...
WordPress CryptoCloud - Crypto Payment Gateway plugin elevation of privilege vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An elevation of privilege vulnerability exists in the WordPress CryptoCloud - Crypto Payment Gateway plugin, which stems from improperly configured access control, for which no...
WordPress MapSVG Cross-Site Scripting Vulnerability
WordPress MapSVG is a powerful WordPress map plugin that not only supports the creation of interactive maps, but also offers a wide range of customization and integration features. A cross-site scripting vulnerability exists in WordPress MapSVG, which stems from insufficient input cleanup and...
Microsoft Word Code Execution Vulnerability (CNVD-2025-17476)
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
Servlet Injection Vulnerabilities in Various ABB Products
ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...
Adobe InCopy Heap Buffer Overflow Vulnerability (CNVD-2025-13324)
Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on the system or cause the application to crash...
Unspecified Vulnerability in Tenda TDSEE App
Tenda TDSEE App is an application from Tenda China for managing Tenda brand camera products. A security vulnerability exists in the Tenda TDSEE App that can be exploited by attackers to cause excessive authentication attempts...
Adobe Acrobat Reader Out-of-Bounds Read Vulnerability (CNVD-2025-13313)
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...
Restaurant Table Booking System manage-subadmins.php file cross-site scripting vulnerability
Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter fullname in the file...
Microsoft Word Code Execution Vulnerability (CNVD-2025-17472)
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which is caused due to improper boundary checking. An attacker could exploit the vulnerability to execute arbitrary code on the system...
WordPress Animated Buttons Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress Animated Buttons, which stems from insufficient cleanup and escaping of user-supplied attribute inputs in the...
Adobe Acrobat Reader Information Disclosure Vulnerability (CNVD-2025-13316)
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
Unspecified Vulnerabilities in Various ABB Products
ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...
TOTOLINK EX1200T /boafrm/formWsc File Buffer Overflow Vulnerability
The TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1200T suffers from a buffer overflow vulnerability that originates from the failure of the file /boafrm/formWsc in the HTTP POST Request Handler component to properly validate the length and size...
Microsoft Word Code Execution Vulnerability (CNVD-2025-17475)
Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
Various ABB products code issues vulnerabilities
ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...
Wyse Management Suite WMS Cross-Site Request Forgery Vulnerability
Wyse Management Suite WMS is a cloud and local management platform from Dell, Inc. It is used to centrally manage Wyse lightweight endpoint devices and supports remote configuration, firmware updates, security policy management and other features. A cross-site request forgery vulnerability exists...
AC6 /goform/setPptpUserList File Buffer Overflow Vulnerability in Shenzhen Jixiang Tengda Technology Co.
AC6 is a wireless router from Tenda, a Chinese company. Ltd. AC6 15.03.05.16 version of the buffer overflow vulnerability, the vulnerability stems from the file / goform / setPptpUserList parameter list fails to correctly validate the length of the input data size, a remote attacker can be used t...
WordPress Apptha Slider Gallery plugin path traversal vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A path traversal vulnerability exists in the WordPress Apptha Slider Gallery plugin, which stems from improper path restriction. An attacker can exploit the vulnerability to cau...
Adobe Acrobat Reader Memory Misreference Vulnerability (CNVD-2025-13319)
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. A memory misreference vulnerability exists in Adobe Acrobat Reader, which can be exploited by an attacker to execute code on the system or cause the application to...
Adobe Acrobat Reader Null Pointer Dereference Vulnerability
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has a null pointer dereference vulnerability that can be exploited by an attacker to cause a denial of service...
Dell Wyse Management Suite WMS Cross-Site Scripting Vulnerability (CNVD-2025-15006)
Wyse Management Suite WMS is a cloud and local management platform from Dell, Inc. It is used to centrally manage Wyse lightweight endpoint devices and supports remote configuration, firmware updates, security policy management and other features. A cross-site scripting vulnerability exists in Wy...
Unspecified vulnerability in WordPress Password Policy Manager plugin
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress Password Policy Manager plugin that stems from vulnerability to authentication bypass attacks, no detailed vulnerability details...
FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14364)
FreeFloat FTP Server is an FTP service from FreeFloat. FreeFloat FTP Server suffers from a buffer overflow vulnerability that is caused by incorrect boundary checking in the MDIR component command handler. No detailed vulnerability details are provided at this time...
FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14365)
FreeFloat FTP Server is an FTP service from FreeFloat. A buffer overflow vulnerability exists in FreeFloat FTP Server due to incorrect boundary checking in the APPEND component command handler. No detailed vulnerability details are provided at this time...
WordPress Raisely Donation Form Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress Raisely Donation Form, which stems from insufficient cleanup and escaping of user-supplied attribute inputs in the...
WordPress Affiliate Sales in Google Analytics and other tools Input Validation Error Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An input validation error vulnerability exists in WordPress Affiliate Sales in Google Analytics and other tools, which stems from insufficient validation of the redirect URL...
Laundry System Authentication Missing Vulnerability
Laundry System is a laundry system. The Laundry System suffers from a missing authentication vulnerability that could be exploited by an attacker to compromise confidentiality, integrity, and availability...