131446 matches found
Vehicle Record Management System /edit-brand.php file cross-site scripting vulnerability
Vehicle Record Management System is a vehicle record management system. Vehicle Record Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in /edit-brand.php, which can be exploited by an attacker t...
Company Visitor Management System /visitors-form.php File SQL Injection Vulnerability
Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter fullname in the file /visitors-form.php. An attacker c...
Apartment Visitors Management System /admin/visitors-form.php File SQL Injection Vulnerability
Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter Category in file...
Adobe InDesign Out-of-Bounds Write Vulnerability (CNVD-2025-15167)
Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe InDesign version ID19.5.2 and ID20.2 and earlier versions, which can be exploited by an attacker to execute arbitrary code...
Patient Record Management System edit_upatient.php File SQL Injection Vulnerability
Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the ID parameter of the /editupatient.php file. An attacker can exploi...
Adobe Animate Access to Uninitialized Pointers Vulnerability (CNVD-2025-10666)
Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from an access to uninitialized pointers vulnerability that can be exploited by an attacker to execute arbitrary code...
TOTOLINK A3002R formIpv6Setup Interface Buffer Overflow Vulnerability
TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that originates from the failure of the staticdns1 parameter in the formIpv6Setup interface to correctly validate the length size of the input data, and no...
TOTOLINK A3002R formDhcpv6s Interface addrPoolEnd Parameter Buffer Overflow Vulnerability
The TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that originates from the failure of the addrPoolEnd parameter in the formDhcpv6s interface to correctly validate the length size of the input data, and...
Adobe Dimension Buffer Overflow Vulnerability
Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. Adobe Dimension suffers from a buffer overflow vulnerability that originates from an out-of-bounds write and can be exploited by an attacker to execute arbitrary code...
Adobe Bridge Input Validation Error Vulnerability (CNVD-2025-10671)
Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from an input validation error vulnerability that stems from an integer overflow that can be exploited by an attacker to execute arbitrary code...
Adobe Animate Digital Error Vulnerability (CNVD-2025-10669)
Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from a numeric error vulnerability that originates from an integer underflow, which can be exploited by an attacker to execute arbitrary code...
Adobe Substance 3D Modeler Uncontrolled Search Path Element Vulnerability
Adobe Substance 3D Modeler is a 3D modeling and sculpting software from the American company Audobee Adobe. Adobe Substance 3D Modeler suffers from an uncontrolled search path element vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...
Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2025-10675)
Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute malicious JavaScript...
Adobe Substance 3D Painter Out-of-Bounds Write Vulnerability (CNVD-2025-15169)
Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. Adobe Substance 3D Painter suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...
TOTOLINK N150RT URL Filtering Page Component Cross-Site Scripting Vulnerability
The TOTOLINK N150RT is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N150RT suffers from a cross-site scripting vulnerability that stems from the URL Filtering Page component's lack of effective filtering and escaping of user-supplied data, and no details of the...
D-Link DIR-619L wake_on_lan Function Command Injection Vulnerability
The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a command injection vulnerability that stems from the wakeonlan function mac parameter failing to correctly filter constructed command special characters, commands, and so on. No details of the...
TOTOLINK N150RT Virtual Server Page Component Cross-Site Scripting Vulnerability
The TOTOLINK N150RT is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N150RT suffers from a cross-site scripting vulnerability that stems from the Virtual Server Page component's lack of effective filtering and escaping of user-supplied data, and no details of the...
D-Link DIR-619L formSetWizard2 function buffer overflow vulnerability
The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the formSetWizard2 function curTime parameter failing to correctly validate the length size of the input data, which can be exploited by an...
Google Web Designer Code Execution Vulnerability
Google Web Designer is a professional-grade HTML5 advertising and web content authoring tool from Google, supporting visual design and code editing. A code execution vulnerability exists in Google Web Designer, which stems from improperly resolved symbolic links in the Preview feature, and can be...
TOTOLINK NR1800X setWiFiEasyCfg function ssid5g parameter buffer overflow vulnerability
TOTOLINK NR1800X is an outstanding 5G NR indoor Wi-Fi and SIP CPE from China's Gion Electronics TOTOLINK. The TOTOLINK NR1800X suffers from a buffer overflow vulnerability that stems from the ssid5g parameter in the setWiFiEasyCfg function failing to properly validate the length size of the input...
D-Link DIR-605L formSetWAN_Wizard55 Function Buffer Overflow Vulnerability
The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L suffers from a buffer overflow vulnerability that stems from the formSetWANWizard55 function parameter curTime failing to correctly validate the length and size of the input data, which can be exploited by an...
TOTOLINK NR1800X setWiFiGuestCfg function Buffer Overflow Vulnerability
TOTOLINK NR1800X is an outstanding 5G NR indoor Wi-Fi and SIP CPE from China's Gion Electronics TOTOLINK. The TOTOLINK NR1800X suffers from a buffer overflow vulnerability that stems from the ssid parameter in the setWiFiGuestCfg function failing to properly validate the length size of the input...
Wyse Management Suite Authentication Bypass Vulnerability
Wyse Management Suite is Dell's hybrid cloud security management solution for thin client devices, designed to simplify IT management and enhance security. An authentication bypass vulnerability exists in Wyse Management Suite, which could be exploited by an attacker to cause an information...
SonicWall SMA1000 Cross-Site Request Forgery Vulnerability
The SonicWALL SMA1000 is a series of secure mobile access solutions from SonicWALL, Inc. simplifies end-to-end secure remote access to enterprise resources hosted across local, cloud and hybrid data centers. The SonicWALL SMA1000 suffers from a cross-site request forgery vulnerability that stems...
Adobe InDesign Null Pointer Dereference Vulnerability (CNVD-2025-15166)
Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A null pointer dereference vulnerability exists in Adobe InDesign version ID19.5.2 and ID20.2 and earlier versions, which can be exploited by an attacker to cause a denial of service in the...
Mattermost Permission Issues Vulnerability
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a privilege issue vulnerability that stems from insufficient privilege validation, which can be exploited by an attacker to add guest users via the API...
SQL Injection Vulnerability in UFIDA NC65 of UFIDA Network Technology Co.
UFIDA NC65 is a group-level ERP system for medium and large enterprises. A SQL injection vulnerability exists in UFIDA NC65, which can be exploited by attackers to obtain sensitive information from the database...
TOTOLINK A3100R setMacQos function buffer overflow vulnerability
TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. The TOTOLINK A3100R suffers from a buffer overflow vulnerability that originates from the failure of the priority parameter of the setMacQos interface in /lib/cstemodules/firewall.so to correctly validate the...
Yonyou Changjietong UFIDA CRM SQL Injection Vulnerability
Yonyou Changjietong UFIDA CRM is a customer relationship management system for small and medium-sized enterprises SMEs from China's Yonyou, integrating sales automation and marketing analytics. Yonyou Changjietong UFIDA CRM suffers from a SQL injection vulnerability that originates from the lack ...
TOTOLINK A3002R formDhcpv6s Interface Buffer Overflow Vulnerability
The TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. TOTOLINK A3002R suffers from a buffer overflow vulnerability that originates from the failure of the addrPoolStart parameter in the formDhcpv6s interface to correctly validate the length size of the input data, no...
TOTOLINK A3002R formDhcpv6s interface dnsaddr parameter buffer overflow vulnerability
The TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that originates from the failure of the dnsaddr parameter in the formDhcpv6s interface to correctly validate the length and size of the input data, whi...
Dell PowerScale OneFS Denial of Service Vulnerability
Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. A denial of service vulnerability exists in Dell PowerScale OneFS, which arises from uncontrolled resource consumption and can be exploited by an attacker to caus...
Tenda AC10 formSetPPTPUserList Buffer Overflow Vulnerability
Tenda AC10 is a dual-band Gigabit wireless router from Tenda China. The Tenda AC10 suffers from a buffer overflow vulnerability that originates from the formSetPPTPUserList handler failing to properly validate the length of input data, which can be exploited by an attacker to execute arbitrary co...
Tenda FH451 Code Execution Vulnerability
The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 suffers from a code execution vulnerability that stems from the formSafeEmailFilter function failing to properly filter special elements of the constructed snippet. No details of the vulnerability are available at this ti...
Command Execution Vulnerability in SuperMap iServer of Beijing SuperMap Software Co.
SuperMap iServer is a cloud GIS application server based on high-performance cross-platform GIS kernel, providing full-featured GIS service publishing, management and aggregation capabilities, and supporting multi-level extension development. A command execution vulnerability exists in SuperMap...
IBM WebSphere Application Server Cross-Site Scripting Vulnerability
IBM WebSphere Application Server WAS is an application server product from International Business Machines IBM. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A cross-site scripting vulnerability exists in IBM...
TOTOLINK A950RG Command Execution Vulnerability
The TOTOLINK A950RG is an ultra-generation Giga wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A950RG suffers from a command execution vulnerability that originates from the failure of the setNoticeCfg interface IpTo parameter in /lib/cstemodules/system.so to correctly filte...
TOTOLINK NR1800X setSmsCfg Function Buffer Overflow Vulnerability
TOTOLINK NR1800X is an outstanding 5G NR indoor Wi-Fi and SIP CPE from China's Gion Electronics TOTOLINK. The TOTOLINK NR1800X suffers from a buffer overflow vulnerability that stems from the text parameter in the setSmsCfg function failing to correctly validate the length size of the input data,...
DELL PowerScale OneFS Competitive Conditions Vulnerability
DELL PowerScale OneFS is Dell's horizontally scalable clustered file system designed to manage unstructured data and support enterprise-class storage capabilities. A competitive condition vulnerability exists in DELL PowerScale OneFS, which can be exploited by attackers to cause a denial of servi...
TOTOLINK NR1800X setWiFiEasyGuestCfg Function Buffer Overflow Vulnerability
TOTOLINK NR1800X is an outstanding 5G NR indoor Wi-Fi and SIP CPE from China's Gion Electronics TOTOLINK. The TOTOLINK NR1800X suffers from a buffer overflow vulnerability that stems from the ssid5g parameter in the setWiFiEasyGuestCfg function failing to properly validate the length size of the...
D-Link DIR-605L sysCmd Parameter Command Injection Vulnerability
The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L suffers from a command injection vulnerability that stems from the parameter sysCmd failing to properly filter constructed command special characters, commands, and so on. No details of the vulnerability are...
e-Diary Management System /my-profile.php File SQL Injection Vulnerability
The e-Diary Management System is an electronic diary management system. An SQL injection vulnerability exists in e-Diary Management System, which originates from the lack of validation of an externally entered SQL statement in the parameter fname in the file /my-profile.php. An attacker can explo...
GNU PSPP Buffer Overflow Vulnerability
GNU PSPP is an application for data sampling, statistics and analysis from the American GNU community. GNU PSPP suffers from a buffer overflow vulnerability that stems from inflateread failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a...
Google Chrome Information Disclosure Vulnerability (CNVD-2025-11417)
Google Chrome is a web browser developed by Google to provide a fast and secure browsing experience. Google Chrome suffers from an information disclosure vulnerability that stems from insufficient policy enforcement in Loader. An attacker can exploit the vulnerability to obtain cross-origin data...
TOTOLINK A3002R and A3002RU Buffer Overflow Vulnerability
The TOTOLINK A3002R and A3002RU are routers from TOTOLINK that support a wide range of network features and services. The TOTOLINK A3002R and A3002RU are vulnerable to a buffer overflow vulnerability that originates from incorrect manipulation of the /boafrm/formPortFw file of the component HTTP...
TOTOLINK A3002R and A3002RU Buffer Overflow Vulnerability (CNVD-2025-11996)
The TOTOLINK A3002R and A3002RU are routers from TOTOLINK that support a wide range of network features and services. The TOTOLINK A3002R and A3002RU suffer from a buffer overflow vulnerability that stems from improper handling of the file /boafrm/formIpQoS in the HTTP POST request handler. No...
IBM Security QRadar Encryption Issue Vulnerability
IBM Security QRadar is a modernized threat detection and response solution from International Business Machines IBM, Inc. designed to unify and integrate the security analyst experience and improve their response speed throughout the incident lifecycle. IBM Security QRadar version 3.12 EDR suffer...
D-Link DIR-619L formSetWAN_Wizard52 Function Buffer Overflow Vulnerability
The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the formSetWANWizard52 function curTime parameter failing to correctly validate the length size of the input data, which can be exploited by an...
D-Link DIR-619L formEasySetupWizard function buffer overflow vulnerability
The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the curTime parameter of the formEasySetupWizard function failing to properly validate the length of the input data, which can be exploited by an...
Adobe Dreamweaver Type Obfuscation Vulnerability
Adobe Dreamweaver is the United States of America Odooby Adobe company a Windows-based platform to support visual HTML editing and code editing software. Adobe Dreamweaver suffers from a type confusion vulnerability that originates from type confusion and can be exploited by an attacker to execut...