FreeScout Security Bypass Vulnerability (CNVD-2025-20796)

FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a security bypass vulnerability that is caused by incorrect configuration of the root folder of the object Storage. An attacker could exploit the...

Wireshark Denial of Service Vulnerability (CNVD-2025-30216)

Wireshark is a very popular network packet analyzer that intercepts various network packets and displays packet details. A denial of service vulnerability exists in Wireshark. The vulnerability exists in Wireshark's column processing feature. When Wireshark attempts to process network packets or...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14380)

FreeFloat FTP Server is an FTP service from FreeFloat. A buffer overflow vulnerability exists in FreeFloat FTP Server that stems from the failure of the MGET command processing component to properly validate the length size of input data, no details of the vulnerability are provided at this time...

Online Shopping Portal Project category.php File SQL Injection Vulnerability

Online Shopping Portal Project is an online shopping portal project. Online Shopping Portal Project suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Product in the file /category.php. An attacker can explo...

Mattermost Unauthorized Access Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an unauthorized access vulnerability that stems from improper cleaning of Google OAuth credentials, which can be exploited by an attacker to cause unauthorized access...

FreeScout Security Bypass Vulnerability (CNVD-2025-20783)

FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a security bypass vulnerability that is due to a logical flaw in the application's allow access feature. An attacker can exploit the vulnerability to...

FreeScout Security Bypass Vulnerability (CNVD-2025-20780)

FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a security bypass vulnerability caused by a failure to check for missing password fields in data from users. An attacker could exploit the...

Tenable Network Monitor Elevation of Privilege Vulnerability

Tenable Network Monitor is an open source system vulnerability scanner developed by Tenable Holdings, Inc. in the United States, mainly used for security assessment of network devices. Tenable Network Monitor suffers from an elevation of privilege vulnerability that originates from a...

Command Execution Vulnerability in Net Video System of Tiandiwei Technology Co.

Net Video System network video system is a video processing and transmission system based on computer network technology, mainly used for real-time monitoring, video storage and remote communication. A command execution vulnerability exists in the Net Video System of Tiandiwei Technology Limited,...

Weak Password Vulnerability in Monitoring System of Kehua Data Co.

The main business of Kehua Data Co., Ltd. covers data center, high-end power supply and new energy, serving customers in more than 100 countries and regions around the world. A weak password vulnerability exists in the monitoring system of Kehua Data Corporation, which can be exploited by attacke...

Binary Vulnerability in Unisys UOS Desktop Professional Edition by Unisys Software Technology Co.

Unisys UOS Desktop Professional Edition is a commercial desktop operating system based on Linux kernel, which supports all CPU architectures including AMD64, ARM64, LoongArch64, SW64 and other mainstream architectures, and is suitable for domestic CPU platforms e.g., Haikuang, Zhaoshen, etc.. The...

Command Execution Vulnerability in SecFox Operations and Maintenance Security Management and Audit System of Chianxin Technology Group Co.

SecFox O&M Security Management and Audit System is an O&M security management solution that integrates authentication, account management, privilege control, and O&M audit, providing unified O&M authentication, fine-grained privilege control, real-time supervision, and after-the-fact traceability...

SQL Injection Vulnerability in DSS Digital Surveillance System of Zhejiang Dahua Technology Co.

DSS Digital Surveillance System is a security video surveillance system with real-time monitoring, PTZ operation, video playback, alarm processing, device management and other functions. DSS Digital Surveillance System of Zhejiang Dahua Technology Co., Ltd. suffers from SQL injection vulnerabilit...

Information Disclosure Vulnerability in Tenda Wireless Router of Shenzhen Jixiang Tenda Technology Co.

Tenda Wireless Router is a brand of network equipment focused on providing stable, easy-to-use wireless router solutions. Shenzhen Jixiang Tenda Technology Co., Ltd Tenda Wireless Router suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive...

Guangzhou Red Sea Cloud Computing Company Limited Red Sea Cloud eHr Exists Information Leakage Vulnerability

Redhaven eHR is a digital human resource management solution launched by Redhaven, focusing on providing state-owned enterprises and large-scale enterprises with systematic and precise services for optimizing salary distribution and incentive system. Guangzhou Red Sea Cloud Computing Co. Red Sea...

Google Chrome Security Bypass Vulnerability (CNVD-2025-15180)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...

Command Execution Vulnerability in Panabit Log Audit System of Beijing Paiwang Software Co.

Beijing PaiNet Software Co., Ltd. is a technology company focusing on providing network application layer solutions for the government and enterprise industries. A command execution vulnerability exists in the panabit log auditing system of Beijing Pai Networks Software Co. Ltd, which can be...

Hospital Management System In PHP Code Execution Vulnerability

Hospital Management System In PHP is a PHP and MySQL based hospital management system. A code execution vulnerability exists in Hospital Management System In PHP, which originates in the hms/doctor/edit-profile.php file could lead to the execution of arbitrary code. No details of the vulnerabilit...

Google Chrome Security Bypass Vulnerability (CNVD-2025-15181)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...

Command Execution Vulnerability in Brother Technology Corporation HL-L2360D series

The HL-L2360D series is a line of compact monochrome laser printers, with key models such as the HL-L2360DW. A command execution vulnerability exists in the Brother Technology Corporation HL-L2360D series, which can be exploited by an attacker to execute commands...

Command Execution Vulnerability in Cube OCS Management System of Hangzhou Cube Holding Co.

Cube OCS Management System is an access control management platform, mainly used for enterprise production management and access control scenarios. A command execution vulnerability exists in the Cube OCS Management System of Hangzhou Cube Holding Company Limited, which can be exploited by an...

Unauthorized Access Vulnerability in NPort 5410 of Mosaic Technology (Shanghai) Co.

The NPort 5410 is an industrial-grade serial communication processor, mainly used to connect traditional serial devices to the network for remote management and monitoring. The NPort 5410 has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

AUO DIR-605L and AUO DIR-816L Hardcoded Vulnerabilities

AUO DIR-605L is the first cloud router, mainly for home and small office network environments. AUO DIR-816L is a dual-band wireless router that supports 2.4GHz and 5GHz bands , and is compliant with network standards such as IEEE 802.11ac and IEEE 802.11n, with a maximum transmission rate of...

Command Execution Vulnerability in Hikvision Integrated Security Management Platform of Hangzhou Hikvision Digital Technology Co.

Hangzhou Hikvision Digital Technology Co., Ltd. is a technology company that focuses on technological innovation. Command execution vulnerability exists in the Hikvision Integrated Security Management Platform of Hangzhou Hikvision Digital Technology Co. Ltd, which can be exploited by an attacker...

Microsoft Edge (Chromium-based) Update elevation of privilege vulnerability (CNVD-2025-23057)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An elevation of privilege vulnerability exists in Microsoft Edge Chromium-based Update, which is caused by improper link resolution before file access. An attacker could exploit the...

Google Chrome Out-of-Bounds Read/Write Vulnerability

Google Chrome is a web browser developed by Google Inc. Google Chrome suffers from an out-of-bounds read/write vulnerability that stems from an out-of-bounds read/write issue in the V8 engine, which can be exploited by an attacker to trigger the vulnerability via a malicious web page, bypassing t...

Document Uploading Vulnerability in Online Entrustment System of Zhuhai Xinhua Tong Software Co.

Zhuhai Xinhua Tong Software Co., Ltd. is a professional software company focusing on the research and development of informatization products and services in the industries of smart city and smart housing construction. A file upload vulnerability exists in the online entrustment system of Zhuhai...

Xiamen Very Good Software Information Technology Company Limited XSS Vulnerability in Very Good Enterprise Management System

Xiamen Very Good Software Information Technology Co., Ltd. specializes in software development, information system integration, data processing and digital content services. Xiamen Very Good Software Information Technology Co., Ltd. very good enterprise management system XSS vulnerability,...

Binary Vulnerability in AC6V2.0 of Shenzhen Jixiang Tengda Technology Co.

The AC6V2.0 is a wireless router model that is primarily used to provide network connectivity. Ltd. AC6V2.0 suffers from a binary vulnerability that can be exploited by an attacker to cause a stack overflow...

Unauthorized Access Vulnerability in Visitor System of Shandong Admiral Technology Group Co.

Shandong Admiralty Science and Technology Group Co., Ltd. is a state-owned joint-stock enterprise. There is an unauthorized access vulnerability in the visitor system of Shandong Admiral Technology Group Co. Ltd, which can be exploited by attackers to obtain sensitive information...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14492)

FreeFloat FTP Server is an FTP service from FreeFloat. A buffer overflow vulnerability exists in FreeFloat FTP Server that stems from the failure of the LITERAL Command Handler component to properly validate the length size of input data, no details of the vulnerability are provided at this time...

Employee Record Management System /myprofile.php File SQL Injection Vulnerability

Employee Record Management System is an employee record management system. Employee Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter EmpCode in the file /myprofile.php. An attacker...

News Portal Project /edit-subadmin.php File SQL Injection Vulnerability

News Portal Project is a news portal project. News Portal Project suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter emailid in the file /admin/edit-subadmin.php. An attacker can exploit this vulnerability t...

Company Visitor Management System /forgot-password.php File SQL Injection Vulnerability

Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter email in the file /forgot-password.php. An attacker can...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14493)

FreeFloat FTP Server is an FTP service from FreeFloat. A buffer overflow vulnerability exists in FreeFloat FTP Server that stems from the failure of the QUOTE Command Handler component to properly validate the length size of input data, no details of the vulnerability are provided at this time...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14389)

FreeFloat FTP Server is an FTP service from FreeFloat. FreeFloat FTP Server suffers from a buffer overflow vulnerability that is caused by incorrect boundary checking in the component LANG command handler. No detailed vulnerability details are provided at this time...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14384)

FreeFloat FTP Server is an FTP service from FreeFloat. FreeFloat FTP Server suffers from a buffer overflow vulnerability that is caused by incorrect boundary checking in the component LS command handler. No detailed vulnerability details are provided at this time...

Google Chrome Information Disclosure Vulnerability

Google Chrome is a web browser from Google, an American company. Google Chrome has an information disclosure vulnerability that can be exploited by attackers to obtain user information...

Google Pixel elevation of privilege vulnerability

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from an elevation of privilege vulnerability that can be exploited by an attacker to cause a local elevation of privilege...

GNU Screen Information Disclosure Vulnerability

GNU Screen is an application from the American GNU community. It provides the effect of getting multiple virtual terminals on one physical terminal. GNU Screen suffers from an information disclosure vulnerability that can be exploited by attackers to infer path information...

Employee Record Management System /admin/editempexp.php File SQL Injection Vulnerability

Employee Record Management System is an employee record management system. Employee Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter emp1name in the file /admin/editempexp.php. An...

D-Link DCS-5020L Buffer Overflow Vulnerability

D-Link DCS-5020L is a DCS series IP camera from China AUO D-Link. The D-Link DCS-5020L suffers from a buffer overflow vulnerability, which originates from the parameter Authorization in the file /rame/ptdc.cgi that fails to correctly validate the length of the input data, which can be exploited b...

SAP Service Parts Management Authorization Issues Vulnerability

SAP Service Parts Management is an intelligent spare parts supply chain solution for after-sales service from SAP. An authorization issue vulnerability exists in SAP Service Parts Management, which stems from a lack of authorization checking, no details of the vulnerability are available at this...

GNU PSPP Heap Buffer Overflow Vulnerability

GNU PSPP is an application for data sampling, statistics and analysis from the American GNU community. GNU PSPP suffers from a heap buffer overflow vulnerability. The vulnerability stems from the failure of the inflateread function called indirectly by spvreadxmlmember in zip-reader.c to properly...

Student Record System /login.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID in the file /login.php. An attacker can exploit this vulnerability to execute...

Employee Record Management System /loginerms.php File SQL Injection Vulnerability

Employee Record Management System is an employee record management system. Employee Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Email in the file /loginerms.php. An attacker c...

Apache NuttX Buffer Overflow Vulnerability (CNVD-2025-12572)

Apache NuttX is a real-time embedded operating system from the Apache Foundation. A buffer overflow vulnerability exists in Apache NuttX versions prior to 12.9.0, which originates from an application boundary error when handling untrusted input, and can be exploited by an attacker to cause a syst...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14385)

FreeFloat FTP Server is an FTP service from FreeFloat. FreeFloat FTP Server suffers from a buffer overflow vulnerability that is caused by incorrect boundary checking in the component TYPE command handler. No detailed vulnerability details are provided at this time...

Google Pixel Information Disclosure Vulnerability (CNVD-2025-11247)

Google Pixel is a smartphone from the American company Google Google. Google Pixel has an information disclosure vulnerability that can be exploited by an attacker to cause Bluetooth adapter details to be disclosed...

IBM Tivoli Monitoring Remote Code Execution Vulnerability (CNVD-2025-12571)

IBM Tivoli Monitoring is a suite of enterprise-class monitoring solutions designed to help organizations manage complex IT environments and ensure system availability and performance. A remote code attack vulnerability exists in IBM Tivoli Monitoring. The vulnerability is due to improper validati...