Credit Card Application Management System SQL Injection Vulnerability

Credit Card Application Management System is a credit card application management system. Credit Card Application Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in the file...

Car Rental Project Unlimited Upload Vulnerability

Car Rental Project is a car rental program. Car Rental Project has an unlimited upload vulnerability that stems from the lack of valid validation of uploaded files by the parameters img1/img2/img3/img4/img5 in the file /admin/post-avehical.php. No details of the vulnerability are available at thi...

CampCodes Online Shopping Portal /my-account.php File SQL Injection Vulnerability

CampCodes Online Shopping Portal is an online shopping portal from CampCodes, Inc. CampCodes Online Shopping Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Name in the file /my-account.php. An attacker...

D-Link DI-7003GV2 /H5/webgl.data File Information Disclosure Vulnerability

The D-Link DI-7003GV2 is a router from China-based AUO D-Link. The D-Link DI-7003GV2 suffers from an information disclosure vulnerability that originates from improper access control in the file /H5/webgl.data function sub41F0FC, which can be exploited by an attacker to cause information disclosu...

Auto Taxi Stand Management System /admin/index.php File SQL Injection Vulnerability

Auto Taxi Stand Management System is an auto cab stand management system. Auto Taxi Stand Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter Username in the file /admin/index.php. An...

Daily Expense Tracker System SQL Injection Vulnerability (CNVD-2025-30999)

Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. The Daily Expense Tracker System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the fromdate/todate parameter of file...

Fuji Electric V-SFT VS4_SaveEnvFile function buffer overflow vulnerability

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. Fuji Electric V-SFT suffers from a buffer overflow vulnerability that stems from the VS4SaveEnvFile function in VS6EditData failing to properly validate the length and size of input data, which can be exploited by an...

D-Link DI-7003GV2 /H5/backup.asp File Denial of Service Vulnerability

The D-Link DI-7003GV2 is a router from China-based AUO D-Link. The D-Link DI-7003GV2 suffers from a denial of service vulnerability that originates from improper access control in the function sub4983B0 in file /H5/backup.asp, which can be exploited by an attacker to cause a denial of service...

CampCodes Online Shopping Portal /forgot-password.php File SQL Injection Vulnerability

CampCodes Online Shopping Portal is an online shopping portal from CampCodes, Inc. Campcodes Online Shopping Portal suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter email in the file /forgot-password.php. An...

Park Ticketing Management System /foreigner-search.php File SQL Injection Vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter searchdata in the file /foreigner-search.php. An...

IceWarp Mail Server Input Validation Error Vulnerability

IceWarp Mail Server is a mail server product from the Czech company IceWarp IceWarp. The product supports email archiving, SmartAttach attachments, automatic migration and more. An input validation error vulnerability exists in IceWarp Mail Server, which can be exploited to cause users to be...

Beauty Parlour Management System /admin/admin-profile.php File SQL Injection Vulnerability

Beauty Parlour Management System is a software system for standardizing salon business processes and improving management efficiency. Beauty Parlour Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of the contactnumber parameter in the fil...

D-Link DI-7003GV2 /login.data File Information Disclosure Vulnerability

The D-Link DI-7003GV2 is a router from China-based AUO D-Link. The D-Link DI-7003GV2 suffers from an information disclosure vulnerability that originates from improper access control in the file /login.data, which can be exploited by an attacker to cause information disclosure...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14496)

FreeFloat FTP Server is an FTP service from Freefloat. A buffer overflow vulnerability exists in FreeFloat FTP Server, which stems from the component CCC Command Handler failing to properly validate the length size of input data, no details of the vulnerability are provided at this time...

Zoo Management System /admin/view-foreigner-ticket.php File SQL Injection Vulnerability

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter viewid in file /admin/view-foreigner-ticket.php. An attacker can exploit this...

D-Link DCS-932L /bin/gpio file buffer overflow vulnerability

The D-Link DCS-932L is a network surveillance camera from China AUO D-Link. It is used for security and surveillance. The D-Link DCS-932L suffers from a buffer overflow vulnerability that originates from the failure of the parameter CameraName in the file /bin/gpio to properly validate the length...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14497)

FreeFloat FTP Server is an FTP service from Freefloat. A buffer overflow vulnerability exists in FreeFloat FTP Server, which stems from the component CD Command Handler failing to properly validate the length size of input data, no details of the vulnerability are provided at this time...

IceWarp Mail Server Cross-Site Scripting Vulnerability

IceWarp Mail Server is a mail server product from the Czech company IceWarp IceWarp. The product supports email archiving, SmartAttach attachments, automatic migration and more. A cross-site scripting vulnerability exists in IceWarp Mail Server, which stems from the application's lack of effectiv...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14505)

FreeFloat FTP Server is an FTP service from Freefloat. A buffer overflow vulnerability exists in FreeFloat FTP Server, which stems from the failure of the component RECV Command Handler to properly validate the length size of input data, no details of the vulnerability are provided at this time...

Tenda A15 Denial of Service Vulnerability

Tenda A15 is a WiFi extender from Tenda China. Tenda A15 suffers from a denial of service vulnerability that originates from an incorrect operation of the function formArpNerworkSet in the file /goform/ArpNerworkSet, which can be exploited by an attacker to cause a denial of service...

D-Link DI-7003GV2 /install_base.data File Information Disclosure Vulnerability

The D-Link DI-7003GV2 is a router from China-based AUO D-Link. The D-Link DI-7003GV2 suffers from an information disclosure vulnerability that originates from improper access control in the file /installbase.data, which can be exploited by an attacker to cause information disclosure...

TOTOLINK N300RH Command Injection Vulnerability

TOTOLINK N300RH is a long range wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N300RH suffers from a command injection vulnerability that stems from the parameter FileName in the file /cgi-bin/cstecgi.cgi failing to properly filter constructed command special characters,...

D-Link DAP-2695 /adv_arpspoofing.php file cross-site scripting vulnerability

The D-Link DAP-2695 is a high-performance dual-band wireless access point from China's AUO D-Link. The D-Link DAP-2695 suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the parameter harpmac in the file...

Park Ticketing Management System /view-foreigner-ticket.php File SQL Injection Vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter viewid in the file /view-foreigner-ticket.php. An...

Zoo Management System /admin/contactus.php File SQL Injection Vulnerability

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter mobnum in the file /admin/contactus.php. An attacker can exploit this vulnerability ...

Complaint Management System /admin/admin-profile.php File SQL Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter mobilenumber in the file /admin/admin-profile.php. An attacker can...

Fuji Electric V-SFT CDataRomErrorCheck::MacroCommandCheck function buffer overflow vulnerability

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. A buffer overflow vulnerability exists in FUJI ELECTRIC V-SFT, which originates from the CDataRomErrorCheck::MacroCommandCheck function in VS6EditData that fails to correctly validate the length and size of the input...

D-Link DCS-932L /sbin/udev File Buffer Overflow Vulnerability

The D-Link DCS-932L is a network surveillance camera from China AUO D-Link. It is used for security and surveillance. The D-Link DCS-932L suffers from a buffer overflow vulnerability that originates from the failure of the parameter CameraName in the file /sbin/udev to properly validate the lengt...

Auto Taxi Stand Management System /admin/forgot-password.php File SQL Injection Vulnerability

Auto Taxi Stand Management System is an auto cab stand management system. Auto Taxi Stand Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /admin/forgot-password.php. An...

Online Course Registration coursecode parameter SQL injection vulnerability

Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter coursecode in the file /admin/course.php. An attacker can...

Tenda AC7 /goform/setMacFilterCfg File Buffer Overflow Vulnerability

Tenda AC7 is a wireless router from Tenda, a Chinese company. Tenda AC7 suffers from a buffer overflow vulnerability, which originates from the parameter deviceList in the file /goform/setMacFilterCfg that fails to correctly validate the length of the input data, and can be exploited by an attack...

Daily Expense Tracker System SQL Injection Vulnerability (CNVD-2025-31002)

Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. Daily Expense Tracker System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter fullname/contactnumber in the file...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14499)

FreeFloat FTP Server is an FTP service from Freefloat. A buffer overflow vulnerability exists in FreeFloat FTP Server that stems from the GLOB Command Handler component failing to properly validate the length size of input data, no details of the vulnerability are provided at this time...

D-Link DCS-932L /sbin/ucp file buffer overflow vulnerability

The D-Link DCS-932L is a network surveillance camera from China AUO D-Link. It is used for security and surveillance. The D-Link DCS-932L suffers from a buffer overflow vulnerability that originates from the failure of the parameter CameraName in the file /sbin/ucp to properly validate the length...

Employee Record System getData.php File SQL Injection Vulnerability

Employee Record System is an employee record system. Employee Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter keywords in the file /dashboard/getData.php. An attacker can exploit this...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14504)

FreeFloat FTP Server is an FTP service from Freefloat. A buffer overflow vulnerability exists in FreeFloat FTP Server, which stems from the component MPUT Command Handler failing to properly validate the length size of input data, no details of the vulnerability are provided at this time...

Park Ticketing Management System /normal-search.php File SQL Injection Vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter searchdata in the file /normal-search.php. An attacker c...

GNU C Library Code Problem Vulnerability

The GNU C Library is an open source, free C language compiler from the GNU community released under the LGPL license. A code issue vulnerability exists in GNU C Library, which can be exploited by an attacker to cause dynamic shared library loading...

Notice Board System login.php File SQL Injection Vulnerability

Notice Board System is a bulletin board system. The Notice Board System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the Username parameter of file /login.php. The vulnerability can be exploited by an attacker to...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-10450)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-10451)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which is caused due to a heap buffer overflow. An attacker can exploit this vulnerability to execute arbitrary code on the system...

Shanghai Blade Technology Co., Ltd. BladeX suffers from a logic flaw vulnerability

BladeX is a well-designed microservices architecture that provides a full suite of SpringCloud solutions. Ltd. BladeX has a logic flaw vulnerability that can be exploited by an attacker to overstep his authority to obtain sensitive information and perform unauthorized operations...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-10448)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Office Code Execution Vulnerability (CNVD-2025-10612)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-10449)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on the system...

Nipah virus Testing Management System /edit-phlebotomist.php File SQL Injection Vulnerability

Nipah Virus Testing Management System is an online virus diagnostic platform. Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from improper manipulation of the parameter mobilenumber in the file /edit-phlebotomist.php, no details of the vulnerabili...

Logic Flaw Vulnerability in Forms System of Hunan Zhongda Numerical Information Technology Co.

Hunan Zhongda Numerical Information Technology Co., Ltd. is a technology-based company mainly engaged in regional Internet e-commerce new retail and platform development services. A logic flaw vulnerability exists in the form system of Hunan Zhongda Digital Wei Information Technology Co., Ltd. th...

Microsoft Office Code Execution Vulnerability (CNVD-2025-10613)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-10455)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-10453)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...