Adobe Photoshop Digital Error Vulnerability

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from a numeric error vulnerability that originates from an integer underflow, which can be exploited by an attacker to execut...

Adobe Photoshop Buffer Overflow Vulnerability

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from a buffer overflow vulnerability that originates from accessing an uninitialized pointer, which can be exploited by an...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2025-10676)

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute malicious JavaScript...

Adobe Lightroom Desktop Buffer Overflow Vulnerability

Adobe Lightroom Desktop is a professional photo management and editing software from the American company Audobee Adobe, designed to provide photographers and image editors with powerful workflow and editing tools. Adobe Lightroom Desktop suffers from a buffer overflow vulnerability that originat...

Adobe Substance 3D Stager Memory Misreference Vulnerability (CNVD-2025-15172)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from a memory misreference vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

TOTOLINK A3002R Command Injection Vulnerability

TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a command injection vulnerability that stems from the FUN00459fdc function failing to properly filter constructed command special characters, commands, etc. The vulnerability can be...

SQL Injection Vulnerability in NetDrive Unified Communication Platform of Beijing NetDrive Network Technology Co.

NetDrive Unified Communications Platform is a comprehensive communications platform designed to enhance users' communication efficiency and convenience and provide a unified communications environment. A SQL injection vulnerability exists in the NetDrive Unified Communications Platform of Beijing...

Vehicle Record Management System /edit-vehicle.php File Cross-Site Scripting Vulnerability

Vehicle Record Management System is a vehicle record management system. Vehicle Record Management System has a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in the vehiclename parameter in /admin/edit-vehicle.php, which...

Vehicle Record Management System profile.php file cross-site scripting vulnerability

Vehicle Record Management System is a vehicle record management system. Vehicle Record Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the name, email, and mobile parameters in...

D-Link DIR-605L mac parameter command injection vulnerability

The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L suffers from a command injection vulnerability that stems from the parameter mac failing to properly filter constructed command special characters, commands, and more. No details of the vulnerability are provide...

Directory Management System /admin/forget-password.php File SQL Injection Vulnerability

Directory Management System is a directory management system. Directory Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /admin/forget-password.php. An attacker can exploi...

Mattermost has an unspecified vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from a failure to lock out an LDAP user, which can be exploited by an attacker to lock out an external LDAP account through repeated failed...

IBM Security Guardium Cross-Site Scripting Vulnerability (CNVD-2025-12590)

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A cross-site scripting vulnerability exists in IBM Security...

Mattermost Permission Issues Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a privilege issue vulnerability that stems from insufficient privilege validation, which can be exploited by an attacker to view group information via an API request...

IBM Infosphere Information Server Information Disclosure Vulnerability (CNVD-2025-12591)

Infosphere Information Server is an enterprise-class software for data integration and data quality from IBM. A security vulnerability exists in Infosphere Information Server version 11.7. An attacker could exploit the vulnerability to obtain sensitive information...

Cyber Cafe Management System search.php File SQL Injection Vulnerability

Cyber Cafe Management System is an internet cafe management system. Cyber Cafe Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter searchdata in the file /search.php. An attacker can exploit this...

Adobe Bridge Access Uninitialized Pointer Vulnerability

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from an Access Uninitialized Pointer vulnerability that originates from an integer overflow, which can be exploited by an attacker to execute arbitrary code...

Adobe Bridge Buffer Overflow Vulnerability (CNVD-2025-10670)

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a buffer overflow vulnerability that originates from uninitialized pointer access, which can be exploited by an attacker to execute arbitrary code...

TOTOLINK A3100R setMacFilterRules function buffer overflow vulnerability

TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. The TOTOLINK A3100R suffers from a buffer overflow vulnerability that stems from the comment parameter in setMacFilterRules failing to correctly validate the length size of the input data, no detailed...

TOTOLINK A3002R and A3002RU Command Injection Vulnerability

The TOTOLINK A3002R and A3002RU are routers from TOTOLINK that support a wide range of network features and services. The TOTOLINK A3002R and A3002RU are vulnerable to a command injection vulnerability that originates from misuse of the /boafrm/formMapDelDevice file of the HTTP POST request...

ASUS Armoury Crate Stack Buffer Overflow Vulnerability

ASUS Armoury Crate is a utility software developed by ASUS to centrally control and manage ROG Gamerland and some ASUS gaming products. ASUS Armoury Crate suffers from a stack buffer overflow vulnerability that originates from a boundary error when the application handles untrusted input, which c...

GNU GRUB Access Control Error Vulnerability

GNU GRUB is a Linux system boot program from the GNU community. An Access Control Error vulnerability exists in GNU GRUB, which stems from GRUB not clearing the key in memory during automatic TPM decryption, and can be exploited by an attacker to obtain unencrypted data...

Mozilla Thunderbird Cross-Site Scripting Vulnerability (CNVD-2025-18673)

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A cross-site scripting vulnerability exists in Mozilla Thunderbird, which stems from...

TOTOLINK N150RT /boafrm/formWsc File Buffer Overflow Vulnerability

The TOTOLINK N150RT is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N150RT suffers from a buffer overflow vulnerability, which originates from the parameter localPin in the file /boafrm/formWsc that fails to properly validate the length of the input data, which can be...

Adobe ColdFusion Path Traversal Vulnerability (CNVD-2025-10673)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from a path traversal vulnerability that originates from an improperly...

TOTOLINK A3100R setParentalRules function buffer overflow vulnerability

TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. TOTOLINK A3100R suffers from a buffer overflow vulnerability that stems from the urlKeyword parameter in setParentalRules failing to correctly validate the length size of the input data, no details of the...

Tenda AC10 GetParentControlInfo function buffer overflow vulnerability

The Tenda AC10 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda AC10, which stems from the GetParentControlInfo function failing to properly validate the length and size of the input data, no details of the vulnerability are available at thi...

TOTOLINK A3002R and A3002RU Buffer Overflow Vulnerability

The TOTOLINK A3002R and A3002RU are routers from TOTOLINK that support a wide range of network features and services. The TOTOLINK A3002R and A3002RU are vulnerable to a buffer overflow vulnerability that originates from incorrect manipulation of the /boafrm/formPortFw file of the component HTTP...

D-Link DI-8100 Stack Buffer Overflow Vulnerability

The D-Link DI-8100 is a network device designed to provide network connectivity and management capabilities. The D-Link DI-8100 suffers from a stack buffer overflow vulnerability that stems from insufficient handling of the parameters defmax/deftime/deftcpmax/deftcptime/defudpmax/defudptime/defic...

Adobe ColdFusion Improper Authorization Vulnerability

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion suffers from an improper authorization vulnerability that stems from the system failing to properly process authorization requests. An attacker could exploit the vulnerabili...

Adobe ColdFusion Improper Access Control Vulnerability

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion suffers from an Improper Access Control vulnerability that stems from the system failing to properly restrict access to the file system. No details of the vulnerability are...

Adobe ColdFusion Input Validation Error Vulnerability

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion suffers from an input validation error vulnerability that stems from a failure to properly validate input data. An attacker could exploit the vulnerability to execute...

SAP NetWeaver Visual Composer Metadata Uploader Deserialization Vulnerability

SAP NetWeaver Visual Composer Metadata Uploader is a component in SAP NetWeaver for uploading metadata. A deserialization vulnerability exists in SAP NetWeaver Visual Composer Metadata Uploader that originates from deserializing malicious content, which can be exploited by an attacker to cause a...

Apartment Visitors Management System /admin/pass-details.php File SQL Injection Vulnerability

Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that originates from a misbehavior of the parameter pid in the file /admin/pass-details.php that results in SQL injection. An attacker ca...

Adobe ColdFusion Input Validation Error Vulnerability

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion is vulnerable to an input validation error vulnerability that originates from the system failing to properly process a specific input. No detailed vulnerability details are...

Adobe ColdFusion Improper Authorization Vulnerability (CNVD-2025-10391)

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion suffers from an improper authorization vulnerability that stems from the system failing to properly process authorization requests. An attacker could use this vulnerability ...

Adobe Substance3D-Stager Out-of-Bounds Write Vulnerability

Adobe Substance3D-Stager is a 3D design and rendering software developed by Adobe for creating and presenting 3D scenes. Adobe Substance3D-Stager suffers from an out-of-bounds write vulnerability that stems from the program failing to properly handle specific input. An attacker can exploit the...

Adobe ColdFusion Improper Access Control Vulnerability (CNVD-2025-10394)

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion suffers from an Improper Access Control vulnerability that stems from the system failing to properly restrict access to the file system. No details of the vulnerability are...

SAP Data Services Management Console Cross-Site Scripting Vulnerability

SAP Data Services Management Console is a console for managing and monitoring data services. A cross-site scripting vulnerability exists in SAP Data Services Management Console that stems from the system failing to adequately encode user-controlled input. An attacker could exploit the vulnerabili...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-10510)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on the system...

Apartment Visitors Management System /admin/bwdates-passreports-details.php File SQL Injection Vulnerability

Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability, which originates from improper manipulation of the parameters fromdate/todate in the file /admin/bwdates-passreports-details.php. An...

Apartment Visitors Management System /admin/bwdates-reports-details.php File SQL Injection Vulnerability

Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that originates from improper manipulation of the parameter fromdate/todate in the file /admin/bwdates-reports-details.php. An attacker c...

SAP supplier relationship management input validation error vulnerability

SAP supplier relationship management is a supplier relationship management software developed by SAP Germany. An input validation error vulnerability exists in SAP supplier relationship management, which stems from the use of a deprecated Java applet component that can be exploited by an attacker...

SAP Supplier Relationship Management Cross-Site Scripting Vulnerability

SAP Supplier Relationship Management Master Data Management Catalog is a system for managing supplier relationships that provides master data management functionality. A cross-site scripting vulnerability exists in SAP Supplier Relationship Management Master Data Management Catalog that allows an...

Adobe Substance3D-Stager Resource Management Error Vulnerability (CNVD-2025-10387)

Adobe Substance3D-Stager is a 3D design and rendering software developed by Adobe for creating and presenting 3D scenes. Adobe Substance3D-Stager suffers from a resource management error vulnerability that can be exploited by attackers to execute arbitrary code...

Adobe Substance3D-Stager Resource Management Error Vulnerability

Adobe Substance3D-Stager is a 3D design and rendering software developed by Adobe for creating and presenting 3D scenes. Adobe Substance3D-Stager suffers from a Resource Management Error vulnerability that originates from the continued use of freed memory after memory release. An attacker can...

SAP supplier relationship management information leakage vulnerability

SAP supplier relationship management is a supplier relationship management software developed by SAP Germany. An information disclosure vulnerability exists in SAP supplier relationship management, which stems from the use of a deprecated Java applet component, and can be exploited by an attacker...

SAP supplier relationship management cross-site scripting vulnerability

SAP supplier relationship management is a supplier relationship management software developed by SAP Germany. A cross-site scripting vulnerability exists in SAP supplier relationship management, which stems from the use of a deprecated Java applet component that can be exploited by an attacker to...

File Upload Vulnerability in MetaCRM of Beijing Meta Software Technology Co.

MetaCRM6 is a customer relationship management system. A file upload vulnerability exists in MetaCRM, which can be exploited by attackers to upload malicious files and gain server privileges...

Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

Ivanti Endpoint Manager Mobile EPMM is an enterprise-grade mobile device management solution for centralized management and protection of mobile devices in the enterprise, supporting device enrollment, application distribution, security policy enforcement, and more. An authentication bypass...