WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17296)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data by the parameter Insira o novo tipo in the file /html/matPat/adicionartipoEntrada.php No detailed...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2025-15502)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which can be exploited by attackers to bypass security restrictions...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2025-15497)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which stems from a flaw in Multi-Account Containers, and can be exploited by attackers to bypass security restrictions...

Mozilla Firefox and Firefox ESR Security Bypass Vulnerability (CNVD-2025-15490)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security bypass vulnerability exists in Mozilla Firefox and Firefox ESR, which can be exploited by attackers to bypass security restrictions...

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CNVD-2025-23056)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Simple Pizza Ordering System editcus.php File SQL Injection Vulnerability

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /editcus.php. An attacker can exploit this vulnerabilit...

Zoo Management System manage-foreigners-ticket.php File SQL Injection Vulnerability

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter ID in file /admin/manage-foreigners-ticket.php. An attacker can exploit this vulnerabili...

Zoo Management System view-normal-ticket.php file SQL Injection Vulnerability

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter viewid in file /admin/view-normal-ticket.php. An attacker can exploit this...

FileBrowser has an unspecified vulnerability (CNVD-2025-22704)

FileBrowser is an open source web file browser . Provides a file management interface in a specified directory , can be used to upload , delete , preview , rename and edit your files . FileBrowser has a security vulnerability that originates from an access token passed as a GET parameter, which c...

Unspecified Vulnerability in SAMSUNG rLottie

SAMSUNG rLottie is a platform-independent, standalone c++ library for real-time rendering of vector-based animation and art from Samsung South Korea. A security vulnerability exists in SAMSUNG rLottie, which can be exploited by attackers to cause a buffer over-read...

D-Link DI-8100 Buffer Overflow Vulnerability

The D-Link DI-8100 is a wireless broadband router designed for small to medium-sized network environments from China's D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 16.07.21, which originates from the parameter mschapen in the file /pppoebase.asp that fails to...

Staff Audit System /update_index.php File SQL Injection Vulnerability

Staff Audit System is an employee audit system. Staff Audit System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter updateid in the file /updateindex.php. An attacker can exploit this vulnerability to...

Car Rental System login.php File SQL Injection Vulnerability

Car Rental System is a car rental system. Car Rental System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter uname in the file /login.php. An attacker can exploit this vulnerability to execute illegal SQL...

Car Rental System book_car.php File SQL Injection Vulnerability

Car Rental System is a car rental system. Car Rental System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter fname in the file /bookcar.php. The vulnerability can be exploited to execute illegal SQL...

Old Age Home Management System SQL Injection Vulnerability

Old Age Home Management System is a nursing home management system. Old Age Home Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter emeradd in file /admin/add-scdetails.php. An attacker can...

Student Record System manage-subjects.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter del in the file /manage-subjects.php. An attacker can exploit this vulnerability to...

Student Record System session.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter session in the file /session.php. An attacker can exploit this vulnerability to execute...

Inventory Management System createUser.php File SQL Injection Vulnerability

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the parameter Username in the file /phpaction/createUser.php for externally entered SQL statements. An attacker can...

Microsoft Edge (Chromium-based) Spoofing Vulnerability (CNVD-2025-23054)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by attackers to perform spoofing attacks...

Simple Pizza Ordering System large.php file SQL Injection Vulnerability

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the parameter ID of file /large.php. An attacker can exploit this vulnerability to...

Mozilla Firefox for Android Open Redirect Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An open redirect vulnerability exists in Mozilla Firefox for Android, which can be exploited by an attacker to conduct a phishing attack by opening a link to the URL specified in the query string...

WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17300)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the parameter Nome/Sobrenome in the file /html/funcionario/cadastrofuncionario.php, for which no detailed...

Cross-Site Scripting Vulnerabilities in Multiple Advantech Products

The Advantech WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN are all industrial automation controllers from Advantech of Taiwan, China. A cross-site scripting vulnerability exists in multiple Advantech products. The vulnerability stems from the lack of effective filtering and escaping of...

SQL Injection Vulnerability in Web Webmaster User Login of Xinhua San Technologies Co.

Xinhua San Technology Co., Ltd. is the industry's leading digital solutions leader, committed to becoming the most trusted partner for customers' business innovation and digital transformation. A SQL injection vulnerability exists in the Web network management user login of Xinhua San Technologie...

Cisco Unified Communications Manager Static SSH Credentials Vulnerability

Cisco Unified Communications Manager is a call processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A static SSH credentials vulnerability exists in Cisco Unified...

FileBrowser has an unspecified vulnerability (CNVD-2025-22705)

FileBrowser is an open source web file browser . Provides a file management interface in a specified directory , can be used to upload , delete , preview , rename and edit your files . FileBrowser has a security vulnerability that stems from the lack of password policy and brute force protection,...

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Shenzhou Vision Han Technology Co., Ltd (CNVD-2025-18623)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

Google Chrome V8 Type Obfuscation Vulnerability (CNVD-2025-14800)

Google Chrome is a web browser from Google, an American company. A type confusion vulnerability exists in Google Chrome V8. The vulnerability is caused due to the V8 engine improperly handling bounds checking and type conversion for certain data types when executing JavaScript code, resulting in...

Command Execution Vulnerability in MSG2200 at Resconda Technology Development Co.

Ltd. is an industry-leading provider of optical networking products and system solutions. A command execution vulnerability exists in the MSG2200 of Riseconda Technology Development Corporation, which can be exploited by an attacker to execute arbitrary commands...

Arbitrary File Read Vulnerability in Privileged Account and Operation and Maintenance Audit System of Sanwei Xinan Technology Co.

Privileged Account and Operation and Maintenance Audit System focuses on the full life cycle management and operation behavior monitoring of high-privileged accounts. The product prevents the risk of unauthorized access by centralizing the control of privileged accounts and implementing mechanism...

COVID19 Testing Management System Input Validation Error Vulnerability

The COVID19 Testing Management System is a new crown pneumonia testing management system. The COVID19 Testing Management System has an input validation error vulnerability that originates from an open redirect due to the operation of the parameter q in the file /search-report-result.php. No detai...

UTT HiPER 840G Buffer Overflow Vulnerability (CNVD-2026-00819)

The UTT HiPER 840G is a full Gigabit Internet behavior management router from Atech UTT, which is aimed at small businesses, community networks, hotels, and other scenarios, providing high-speed network access and intelligent management features. The UTT HiPER 840G suffers from a buffer overflow...

Shenzhen Mingyuan Cloud Technology Co., Ltd Mingyuan Cloud ERP suffers from SQL injection vulnerability (CNVD-2025-18511)

Mingyuan Cloud ERP is a Business Management software developed by Mingyuan Cloud Technology Co. Ltd. Mingyuan Cloud ERP SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...

UTT HiPER 840G Buffer Overflow Vulnerability (CNVD-2026-00818)

The UTT HiPER 840G is a full Gigabit Internet behavior management router from Atech UTT, which is aimed at small businesses, community networks, hotels, and other scenarios, providing high-speed network access and intelligent management features. The UTT HiPER 840G suffers from a buffer overflow...

UTT HiPER 840G Buffer Overflow Vulnerability (CNVD-2026-00820)

The UTT HiPER 840G is a full Gigabit Internet behavior management router from Atech UTT, which is aimed at small businesses, community networks, hotels, and other scenarios, providing high-speed network access and intelligent management features. The UTT HiPER 840G suffers from a buffer overflow...

NETGEAR WNCE3001 Buffer Overflow Vulnerability

The NETGEAR WNCE3001 is a dual-band wireless network adapter designed for smart TVs, Blu-ray players, and other devices that connect wirelessly via an Ethernet interface. The NETGEAR WNCE3001 suffers from a buffer overflow vulnerability that stems from the HTTP POST request handler mishandling th...

Inventory Management System editProduct.php File SQL Injection Vulnerability

Inventory Management System is an inventory management system. Inventory Management System has a SQL injection vulnerability that stems from improper handling of the editProductName parameter in the /phpaction/editProduct.php file. No details of the vulnerability are available at this time...

Logic Flaw Vulnerability in Operation and Maintenance Management Audit System of Shanghai Shangxun Information Technology Co.

Founded in December 2010, Shanghai SinoCom-ArtM Information Technology Co., Ltd hereinafter referred to as "SinoCom-ArtM" is one of the leading providers of IT intelligent security operation and maintenance, data governance, security services and other fields in China. A logic flaw exists in the...

Dell Unisphere for PowerMax vApp Static Code Injection Vulnerability

Dell Unisphere is a unified storage management platform from Dell. A static code injection vulnerability exists in Dell Unisphere for PowerMax vApp, which arises from failure to properly neutralize instructions in static saved code. An attacker could exploit this vulnerability to execute arbitrar...

TOTOLINK A702R Buffer Overflow Vulnerability

The TOTOLINK A702R is a router device manufactured by China's Gion Electronics TOTOLINK. The TOTOLINK A702R suffers from a buffer overflow vulnerability that originates from improper handling of the submit-url parameter in the /boafrm/formWlSiteSurvey file in the HTTP POST request handling...

Inventory Management System orders.php File SQL Injection Vulnerability

Inventory Management System is an inventory management system. The Inventory Management System suffers from a SQL injection vulnerability that originates from a parameter i in the file /orders.php that is not securely filtered. An attacker can exploit this vulnerability by remotely injecting...

Binary Vulnerability in Unisys UOS Browser at Unisys Software Technology Limited (CNVD-2025-18468)

Unisys Software Technology Co., Ltd. is a company specializing in the development and service of operating systems. A binary vulnerability exists in the Unisys UOS Browser, which can be exploited by attackers to cause a denial of service...

Inventory Management System removeProduct.php File SQL Injection Vulnerability

Inventory Management System is an inventory management system. The Inventory Management System suffers from a SQL injection vulnerability that originates from the /phpaction/removeProduct.php file not securely filtering the productId parameter. An attacker can exploit this vulnerability to remote...

Inventory Management System removeBrand.php File SQL Injection Vulnerability

Inventory Management System is an inventory management system. Inventory Management System has a SQL injection vulnerability that stems from improper handling of the brandId parameter in the /phpaction/removeBrand.php file. No details of the vulnerability are available at this time...

Inventory Management System editOrder.php File SQL Injection Vulnerability

Inventory Management System is an inventory management system. Inventory Management System has a SQL injection vulnerability that stems from insufficient filtering of user input in the /phpaction/editOrder.php file. No details of the vulnerability are available at this time...

Binary Vulnerability in Unisys UOS Browser at Unisys Software Technology Ltd.

Unisys Software Technology Co., Ltd. is a company specializing in the development and service of operating systems. A binary vulnerability exists in the Unisys UOS Browser, which can be exploited by attackers to cause a denial of service...

Inventory Management System createOrder.php File SQL Injection Vulnerability

Inventory Management System is an inventory management system. The Inventory Management System suffers from a SQL injection vulnerability that originates in the /phpaction/createOrder.php file, which does not adequately filter user input. An attacker can exploit this vulnerability by remotely...

HDF5 Buffer Overflow Vulnerability (CNVD-2025-16249)

HDF5 is a data management suite developed by The HDF Group for storing and managing large-scale scientific data. A security vulnerability exists in the H5Omtimenewencode function in the src/H5Omtime.c file of HDF5 version 1.14.6, which stems from improper handling of data boundaries. An attacker...

HDF5 Resource Management Error Vulnerability

HDF5 is a data management suite developed by The HDF Group for storing and managing large-scale scientific data. A security vulnerability exists in HDF5 version 1.14.6, which originates from an exception in the handling of the H5Cloadentry function in the /src/H5Centry.c file. An attacker can...

Binary Vulnerability in Unisys UOS Browser at Unisys Software Technology Limited (CNVD-2025-18469)

Unisys Software Technology Co., Ltd. is a company specializing in the development and service of operating systems. A binary vulnerability exists in the Unisys UOS Browser, which can be exploited by attackers to cause a denial of service...