131179 matches found
Company Visitor Management System /visitors-form.php File SQL Injection Vulnerability
Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter fullname in the file /visitors-form.php. An attacker c...
TOTOLINK NR1800X setWiFiEasyGuestCfg Function Buffer Overflow Vulnerability
TOTOLINK NR1800X is an outstanding 5G NR indoor Wi-Fi and SIP CPE from China's Gion Electronics TOTOLINK. The TOTOLINK NR1800X suffers from a buffer overflow vulnerability that stems from the ssid5g parameter in the setWiFiEasyGuestCfg function failing to properly validate the length size of the...
TOTOLINK A3002R formMapDelDevice interface bandstr parameter buffer overflow vulnerability
TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK A3002R, which stems from the bandstr parameter in the formMapDelDevice interface failing to correctly validate the length size of the input data, no detailed...
IBM Infosphere Information Server Information Disclosure Vulnerability (CNVD-2025-12591)
Infosphere Information Server is an enterprise-class software for data integration and data quality from IBM. A security vulnerability exists in Infosphere Information Server version 11.7. An attacker could exploit the vulnerability to obtain sensitive information...
Adobe Animate Access to Uninitialized Pointers Vulnerability (CNVD-2025-10666)
Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from an access to uninitialized pointers vulnerability that can be exploited by an attacker to execute arbitrary code...
Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2025-10674)
Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute malicious JavaScript...
Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2025-10676)
Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute malicious JavaScript...
Dell PowerScale OneFS Denial of Service Vulnerability
Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. A denial of service vulnerability exists in Dell PowerScale OneFS, which arises from uncontrolled resource consumption and can be exploited by an attacker to caus...
Tenda FH451 Buffer Overflow Vulnerability
The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 suffers from a buffer overflow vulnerability that originates from the P2pListFilter function failing to properly validate the length of input data, which can be exploited by an attacker to execute arbitrary code on the...
TOTOLINK A3002R formDnsv6 Interface Buffer Overflow Vulnerability
TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that originates from the failure of the routername parameter in the formDnsv6 interface to correctly validate the length and size of the input data, which...
ASUS Armoury Crate Stack Buffer Overflow Vulnerability
ASUS Armoury Crate is a utility software developed by ASUS to centrally control and manage ROG Gamerland and some ASUS gaming products. ASUS Armoury Crate suffers from a stack buffer overflow vulnerability that originates from a boundary error when the application handles untrusted input, which c...
TOTOLINK A3002R formMapDelDevice interface macstr parameter buffer overflow vulnerability
TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that arises from the macstr parameter in the formMapDelDevice interface failing to properly validate the length and size of the input data, which can be...
TOTOLINK A3002R Command Injection Vulnerability
TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a command injection vulnerability that stems from the FUN00459fdc function failing to properly filter constructed command special characters, commands, etc. The vulnerability can be...
e-Diary Management System /my-profile.php File SQL Injection Vulnerability
The e-Diary Management System is an electronic diary management system. An SQL injection vulnerability exists in e-Diary Management System, which originates from the lack of validation of an externally entered SQL statement in the parameter fname in the file /my-profile.php. An attacker can explo...
SQL Injection Vulnerability in NetDrive Unified Communication Platform of Beijing NetDrive Network Technology Co.
NetDrive Unified Communications Platform is a comprehensive communications platform designed to enhance users' communication efficiency and convenience and provide a unified communications environment. A SQL injection vulnerability exists in the NetDrive Unified Communications Platform of Beijing...
D-Link DIR-619L formSysCmd Function Command Injection Vulnerability
The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a command injection vulnerability that stems from the formSysCmd function sysCmd parameter failing to properly filter construct command special characters, commands, etc. No details of the...
TOTOLINK A3002R formDhcpv6s interface dnsaddr parameter buffer overflow vulnerability
The TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that originates from the failure of the dnsaddr parameter in the formDhcpv6s interface to correctly validate the length and size of the input data, whi...
SQL Injection Vulnerability in UFIDA NC65 of UFIDA Network Technology Co.
UFIDA NC65 is a group-level ERP system for medium and large enterprises. A SQL injection vulnerability exists in UFIDA NC65, which can be exploited by attackers to obtain sensitive information from the database...
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation is a multimedia development library from Microsoft that aims to provide a unified multimedia solution for the Windows platform, allowing developers to play video and sound files, encode audio and video, or transcode multimedia files. Media Foundation allows...
Mattermost has an unspecified vulnerability
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from not checking the RestrictSystemAdmin setting, which can be exploited by an attacker to cause a system administrator to access...
e-Diary Management System /manage-notes.php File SQL Injection Vulnerability
The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file /manage-notes.php. An attacker can...
GNU GRUB Access Control Error Vulnerability
GNU GRUB is a Linux system boot program from the GNU community. An Access Control Error vulnerability exists in GNU GRUB, which stems from GRUB not clearing the key in memory during automatic TPM decryption, and can be exploited by an attacker to obtain unencrypted data...
Directory Management System /admin/forget-password.php File SQL Injection Vulnerability
Directory Management System is a directory management system. Directory Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /admin/forget-password.php. An attacker can exploi...
TOTOLINK N150RT URL Filtering Page Component Cross-Site Scripting Vulnerability
The TOTOLINK N150RT is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N150RT suffers from a cross-site scripting vulnerability that stems from the URL Filtering Page component's lack of effective filtering and escaping of user-supplied data, and no details of the...
Dell PowerScale InsightIQ Denial of Service Vulnerability
Dell PowerScale InsightIQ is a powerful performance monitoring and reporting tool from Dell, Inc. A denial of service vulnerability exists in Dell PowerScale InsightIQ, which arises from uncontrolled resource consumption and can be exploited by an attacker to cause a denial of service...
Mattermost Permission Issues Vulnerability
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a privilege issue vulnerability that stems from insufficient privilege validation, which can be exploited by an attacker to view group information via an API request...
TOTOLINK NR1800X setWiFiGuestCfg function Buffer Overflow Vulnerability
TOTOLINK NR1800X is an outstanding 5G NR indoor Wi-Fi and SIP CPE from China's Gion Electronics TOTOLINK. The TOTOLINK NR1800X suffers from a buffer overflow vulnerability that stems from the ssid parameter in the setWiFiGuestCfg function failing to properly validate the length size of the input...
TOTOLINK A950RG Command Execution Vulnerability
The TOTOLINK A950RG is an ultra-generation Giga wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A950RG suffers from a command execution vulnerability that originates from the failure of the setNoticeCfg interface IpTo parameter in /lib/cstemodules/system.so to correctly filte...
Adobe Substance 3D Stager Memory Misreference Vulnerability (CNVD-2025-15172)
Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from a memory misreference vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...
Adobe Animate Digital Error Vulnerability (CNVD-2025-10669)
Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from a numeric error vulnerability that originates from an integer underflow, which can be exploited by an attacker to execute arbitrary code...
TOTOLINK A3100R setParentalRules function buffer overflow vulnerability
TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. TOTOLINK A3100R suffers from a buffer overflow vulnerability that stems from the urlKeyword parameter in setParentalRules failing to correctly validate the length size of the input data, no details of the...
IBM Storage Scale Command Injection Vulnerability
IBM Storage Scale is a storage solution from International Business Machines IBM designed to help organizations effectively manage and scale storage resources to meet growing data storage needs. A command injection vulnerability exists in IBM Storage Scale versions 5.2.2.0 and 5.2.2.1 that stems...
Apartment Visitors Management System /admin/visitors-form.php File SQL Injection Vulnerability
Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter Category in file...
IBM App Connect Enterprise Encryption Issue Vulnerability
IBM App Connect Enterprise is an operating system from International Business Machines IBM, Inc. that combines existing industry-trusted IBM Integration Bus technology with IBM App Connect Professional and new cloud native IBM App Connect Enterprise combines existing industry-trusted IBM...
Tenda AC10 formSetPPTPUserList Buffer Overflow Vulnerability
Tenda AC10 is a dual-band Gigabit wireless router from Tenda China. The Tenda AC10 suffers from a buffer overflow vulnerability that originates from the formSetPPTPUserList handler failing to properly validate the length of input data, which can be exploited by an attacker to execute arbitrary co...
Tenda FH451 Code Execution Vulnerability
The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 suffers from a code execution vulnerability that stems from the formSafeEmailFilter function failing to properly filter special elements of the constructed snippet. No details of the vulnerability are available at this ti...
GNU PSPP Buffer Overflow Vulnerability
GNU PSPP is an application for data sampling, statistics and analysis from the American GNU community. GNU PSPP suffers from a buffer overflow vulnerability that stems from inflateread failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a...
Adobe Photoshop Buffer Overflow Vulnerability
Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from a buffer overflow vulnerability that originates from accessing an uninitialized pointer, which can be exploited by an...
Mozilla Thunderbird Cross-Site Scripting Vulnerability (CNVD-2025-18673)
Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A cross-site scripting vulnerability exists in Mozilla Thunderbird, which stems from...
TOTOLINK A3002R formIpv6Setup Interface Buffer Overflow Vulnerability
TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that originates from the failure of the staticdns1 parameter in the formIpv6Setup interface to correctly validate the length size of the input data, and no...
Dell PowerScale InsightIQ Elevation of Privilege Vulnerability
Dell PowerScale InsightIQ is a powerful performance monitoring and reporting tool from Dell, Inc. An elevation of privilege vulnerability exists in Dell PowerScale InsightIQ that stems from improper privilege management and can be exploited by an attacker to cause an elevation of privilege...
Adobe Animate Out-of-Bounds Write Vulnerability (CNVD-2025-10667)
Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code...
Adobe Illustrator Buffer Overflow Vulnerability
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to execute arbitrary code...
Wyse Management Suite Authentication Bypass Vulnerability
Wyse Management Suite is Dell's hybrid cloud security management solution for thin client devices, designed to simplify IT management and enhance security. An authentication bypass vulnerability exists in Wyse Management Suite, which could be exploited by an attacker to cause an information...
Vehicle Record Management System profile.php file cross-site scripting vulnerability
Vehicle Record Management System is a vehicle record management system. Vehicle Record Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the name, email, and mobile parameters in...
TOTOLINK A3002R and A3002RU Buffer Overflow Vulnerability
The TOTOLINK A3002R and A3002RU are routers from TOTOLINK that support a wide range of network features and services. The TOTOLINK A3002R and A3002RU are vulnerable to a buffer overflow vulnerability that originates from incorrect manipulation of the /boafrm/formPortFw file of the component HTTP...
TOTOLINK A3002R formDhcpv6s Interface addrPoolEnd Parameter Buffer Overflow Vulnerability
The TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that originates from the failure of the addrPoolEnd parameter in the formDhcpv6s interface to correctly validate the length size of the input data, and...
TOTOLINK NR1800X setWiFiBasicCfg function ssid parameter buffer overflow vulnerability
TOTOLINK NR1800X is an outstanding 5G NR indoor Wi-Fi and SIP CPE from China's Gion Electronics TOTOLINK. The TOTOLINK NR1800X suffers from a buffer overflow vulnerability that stems from the ssid parameter in the setWiFiBasicCfg function failing to properly validate the length size of the input...
D-Link DIR-619L wake_on_lan Function Command Injection Vulnerability
The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a command injection vulnerability that stems from the wakeonlan function mac parameter failing to correctly filter constructed command special characters, commands, and so on. No details of the...
TOTOLINK A950RG /lib/cste_modules/system.so file buffer overflow vulnerability
The TOTOLINK A950RG is an ultra-generation Giga wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A950RG suffers from a buffer overflow vulnerability that originates from the failure of the setNoticeCfg interface NoticeUrl parameter in /lib/cstemodules/system.so to correctly...