Lucene search
K

130931 matches found

CNVD
CNVD
•added 2025/04/18 12:0 a.m.•3 views

Patient Record Management System edit_dpatient.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the /editdpatient.php file. An attacker can exploit...

8.8CVSS8.2AI score0.00443EPSS
Exploits1References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•2 views

Huawei HarmonyOS Buffer Overflow Vulnerability

Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from a buffer overflow vulnerability, which originates in the codec module, that can be exploited by an attacker to affect availability...

7.5CVSS6.8AI score0.00317EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•3 views

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15527)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a security issue that can be exploited by attackers to affect availability...

7.5CVSS7AI score0.00226EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•3 views

Huawei HarmonyOS Buffer Overflow Vulnerability Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a buffer overflow vulnerability that can be exploited by attackers to affect availability...

7.5CVSS7.6AI score0.00226EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•16 views

Huawei HarmonyOS and EMUI Security Bypass Vulnerability (CNVD-2025-10512)

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. A security bypass vulnerability exists in Huawei HarmonyOS and EMUI.The vulnerability stems from an access contro...

9.1CVSS7.4AI score0.00189EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•1 views

PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10871)

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from a flaw in some unknown function of the FEAT command handler. No detailed vulnerability details are provided at this time...

9.8CVSS7.6AI score0.00658EPSS
Exploits1References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•2 views

Huawei HarmonyOS Privilege Bypass Vulnerability

Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from a privilege bypass vulnerability that originates from a kernel futex module memory write privilege bypass, which can be exploited by an attacker to affect service confidentiality...

8.8CVSS6.3AI score0.00101EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•3 views

Huawei HarmonyOS Path Traversal Vulnerability

Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from a path traversal vulnerability that stems from a security issue in the DFS module, no details of the vulnerability are available at this time...

7.5CVSS6.3AI score0.00356EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•4 views

Patient Record Management System dental_pending.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the /dentalpending.php file. An attacker can exploit...

8.8CVSS8.2AI score0.00443EPSS
Exploits1References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•7 views

Tenda AC7 Buffer Overflow Vulnerability (CNVD-2025-08782)

Tenda AC7 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda AC7 version 15.03.06.44, which is caused by improper handling of the pptpserverstartip/pptpserverendip parameters in the formSetPPTPServer function in the /goform/SetPptpServerCfg file...

9CVSS8.1AI score0.05479EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•1 views

PCMan FTP Server Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from the CDUP Command Handler not checking the input for valid length when processing CDUP commands, no details of the vulnerability are provided at this time...

9.8CVSS7.7AI score0.00658EPSS
Exploits1References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•0 views

PCMan FTP Server SITE CHMOD Command Handler Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from SITE CHMOD Command Handler failing to properly validate the length and size of the input data, which can be exploited by an attacker to cause a denial of...

9.8CVSS7.5AI score0.00658EPSS
Exploits1References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•3 views

PCMan FTP Server MKDIR Command Handler Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from MKDIR Command Handler failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a denial of service...

9.8CVSS7.5AI score0.00658EPSS
Exploits1References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•1 views

PCMan FTP Server CCC Command Handler Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from CCC Command Handler failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a denial of service...

9.8CVSS7.5AI score0.00658EPSS
Exploits1References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•2 views

PCMan FTP Server CONF Command Handler Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from CONF Command Handler failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a denial of service...

9.8CVSS7.5AI score0.00658EPSS
Exploits1References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•3 views

Huawei HarmonyOS and EMUI Security Bypass Vulnerability (CNVD-2025-10514)

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. A security bypass vulnerability exists in Huawei HarmonyOS and EMUI.The vulnerability stems from a DSoftBus modul...

8.4CVSS7.2AI score0.00207EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•3 views

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15558)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that originates from a kernel file system module file read permission bypass, which can be exploited b...

6.8CVSS6.9AI score0.00098EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•6 views

Huawei HarmonyOS and EMUI Access Control Vulnerability (CNVD-2025-10517)

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An access control vulnerability exists in Huawei HarmonyOS and EMUI.The vulnerability stems from improper access...

9.1CVSS7AI score0.00189EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•2 views

Huawei HarmonyOS and EMUI Access Control Vulnerability (CNVD-2025-10516)

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An access control vulnerability exists in Huawei HarmonyOS and EMUI.The vulnerability stems from improper access...

9.1CVSS7.3AI score0.00189EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•3 views

Huawei HarmonyOS Resource Misuse Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a resource mismanagement vulnerability that can be exploited by attackers to affect availability...

7.5CVSS7AI score0.00322EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•2 views

Huawei HarmonyOS and EMUI Access Control Vulnerability (CNVD-2025-10515)

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An access control vulnerability exists in Huawei HarmonyOS and EMUI.The vulnerability stems from improper access...

9.1CVSS7.3AI score0.00189EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•4 views

Huawei HarmonyOS Buffer Overflow Vulnerability (CNVD-2025-10520)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a buffer overflow vulnerability that can be exploited by attackers to affect availability...

7.5CVSS7.6AI score0.00226EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•2 views

Huawei HarmonyOS and EMUI Access Control Vulnerability

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An access control vulnerability exists in Huawei HarmonyOS and EMUI.The vulnerability stems from improper access...

9.1CVSS7AI score0.00189EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•3 views

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15556)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an SVG parsing module exception capture failure, and can be exploited by an attacker to...

7.5CVSS7.1AI score0.00322EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•4 views

Huawei HarmonyOS buffer overflow vulnerability (CNVD-2025-10519)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a buffer overflow vulnerability that can be exploited by attackers to affect availability...

7.5CVSS7.6AI score0.00226EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•5 views

Huawei HarmonyOS buffer overflow vulnerability (CNVD-2025-11087)

Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from a buffer overflow vulnerability that stems from a security issue in the SVG parsing module, which can be exploited by an attacker to affect availability...

7.5CVSS6.8AI score0.00192EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•4 views

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15557)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an SVG parsing module exception capture failure, and can be exploited by an attacker to...

7.5CVSS7.1AI score0.00322EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•2 views

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15528)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a security issue in the SVG parsing module, and can be exploited by an attacker to affe...

7.5CVSS7AI score0.00192EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/18 12:0 a.m.•3 views

GNU Binutils objdump Memory Leak Vulnerability

GNU Binutils is a toolset for creating, assembling and linking programs. A memory leak vulnerability exists in GNU Binutils. The vulnerability stems from improper memory management in the displayinfo function in the bucomm.c file. No details of the vulnerability are provided at this time...

5.5CVSS3.4AI score0.00243EPSS
Exploits1References1
CNVD
CNVD
•added 2025/04/16 12:0 a.m.•1 views

Arbitrary File Read Vulnerability in Smart School Management System of Beijing Software Branch of KDDI (Beijing) Co.

Ltd. focuses on the research and development of core artificial intelligence technology and industrialization landing. An arbitrary file read vulnerability exists in the Smart School Management System of Beijing Software Branch of KDDI Beijing Limited, which can be exploited by attackers to obtai...

6.9AI score
Exploits0
CNVD
CNVD
•added 2025/04/16 12:0 a.m.•3 views

Multiple SQL Injection Vulnerabilities in Siemens TeleControl Server Basic

TeleControl Server Basic is Siemens' software for the TeleControl Basic control center, which allows remote monitoring and control of devices via WAN/LAN. Siemens TeleControl Server Basic versions prior to v3.1.2.2 contain multiple SQL injection vulnerabilities that can be exploited by an attacke...

8.6AI score
Exploits0References1
CNVD
CNVD
•added 2025/04/16 12:0 a.m.•3 views

Siemens RUGGEDCOM APE1808 Multiple Vulnerabilities in Fortigate NGFW

The RUGGEDCOM APE1808 is a powerful utility-grade application hosting platform that allows you to deploy a range of commercial applications for edge computing and network security in harsh industrial environments. Siemens RUGGEDCOM APE1808 Fortigate NGFW has multiple vulnerabilities that can be...

7.3AI score
Exploits0References1
CNVD
CNVD
•added 2025/04/16 12:0 a.m.•6 views

Adobe Framemaker Buffer Overflow Vulnerability (CNVD-2025-09269)

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. Adobe Framemaker suffers from a buffer overflow vulnerability that originates from a stack buffer overflow that ca...

7.8CVSS7.8AI score0.0022EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/16 12:0 a.m.•4 views

Kentico Xperience Denial of Service Vulnerability

Kentico Xperience is a digital experience platform from Kentico. A denial of service vulnerability exists in Kentico Xperience, which can be exploited by an attacker to cause a denial of service...

8.7CVSS5.9AI score0.0041EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/16 12:0 a.m.•5 views

Tenda FH1202 Access Control Error Vulnerability (CNVD-2025-08788)

The Tenda FH1202 is a wireless router from Tenda China. The Tenda FH1202 is vulnerable to an access control error vulnerability that stems from improper access control. No detailed vulnerability details are available at this time...

6.9CVSS6.7AI score0.00556EPSS
Exploits1References1
CNVD
CNVD
•added 2025/04/16 12:0 a.m.•6 views

Adobe Framemaker Code Issue Vulnerability

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A code issue vulnerability exists in Adobe Framemaker that originates from a null pointer dereference, which can b...

5.5CVSS6.8AI score0.00164EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/16 12:0 a.m.•10 views

Adobe Framemaker Buffer Overflow Vulnerability (CNVD-2025-09268)

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A buffer overflow vulnerability exists in Adobe Framemaker that originates from an out-of-bounds read and can be...

5.5CVSS6.9AI score0.00184EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/16 12:0 a.m.•3 views

Huawei PCs Authentication Bypass Vulnerability

Huawei PCs are a line of computers from the Chinese company Huawei. Huawei PCs suffer from an authentication bypass vulnerability that originates from a low-privileged user being able to bypass SDDL privilege checks, which can be exploited by an attacker to cause certain system processes to...

5.5CVSS7AI score0.00095EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/16 12:0 a.m.•3 views

Kentico Xperience cross-site scripting vulnerability (CNVD-2026-05132)

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from a cross-site scripting vulnerability that can be exploited by an attacker to allow an authenticated user to distribute malicious content via specific interactions with the media library file upload...

6.4CVSS5.8AI score0.00233EPSS
Exploits1References1
CNVD
CNVD
•added 2025/04/16 12:0 a.m.•6 views

Tenda FH1202 Access Control Error Vulnerability (CNVD-2025-08790)

The Tenda FH1202 is a wireless router from Tenda China. The Tenda FH1202 is vulnerable to an access control error vulnerability that stems from improper access control. No detailed vulnerability details are available at this time...

6.9CVSS6.7AI score0.00561EPSS
Exploits1References1
CNVD
CNVD
•added 2025/04/16 12:0 a.m.•7 views

Tenda FH1202 Access Control Error Vulnerability (CNVD-2025-08791)

The Tenda FH1202 is a wireless router from Tenda China. The Tenda FH1202 is vulnerable to an access control error vulnerability that stems from improper access control. No detailed vulnerability details are available at this time...

6.9CVSS6.7AI score0.00707EPSS
Exploits1References1
CNVD
CNVD
•added 2025/04/16 12:0 a.m.•5 views

Tenda FH1202 Access Control Error Vulnerability (CNVD-2025-08789)

The Tenda FH1202 is a wireless router from Tenda China. The Tenda FH1202 is vulnerable to an access control error vulnerability that stems from improper access control. No detailed vulnerability details are available at this time...

6.9CVSS6.7AI score0.0069EPSS
Exploits1References1
CNVD
CNVD
•added 2025/04/16 12:0 a.m.•6 views

Adobe Framemaker Buffer Overflow Vulnerability

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A buffer overflow vulnerability exists in Adobe Framemaker that originates from an out-of-bounds read, and no...

5.5CVSS7.2AI score0.00184EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/16 12:0 a.m.•5 views

JetBrains TeamCity Cross-Site Scripting Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a cross-site...

6.1CVSS5.9AI score0.26623EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/15 12:0 a.m.•3 views

Command Execution Vulnerability in the Management Server of Guangdong Paulan Electronics Co.

Ltd. is a high-tech enterprise integrating R&D, design, production, sales and service of audio-visual system overall solution products. There is a command execution vulnerability in the itc center management server of Guangdong Paulan Electronics Co., Ltd, which can be exploited by attackers to...

7.9AI score
Exploits0
CNVD
CNVD
•added 2025/04/15 12:0 a.m.•2 views

SQL Injection Vulnerability in NC Cloud of UFIDA Network Technology Co.

NC Cloud is a large enterprise digitalization platform that supports flexible deployment models of public, hybrid and proprietary clouds. A SQL injection vulnerability exists in NC Cloud of UFIDA Network Technology Corporation, which can be exploited by attackers to obtain sensitive information...

7.5AI score
Exploits0
CNVD
CNVD
•added 2025/04/15 12:0 a.m.•3 views

Wyse Management Suite Code Issue Vulnerability

The Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints, providing centralized management, asset tracking and automated device discovery. A code issue vulnerability exists in Wyse Management Suite. The vulnerability stems from the program failing to adequately...

7.2CVSS7.6AI score0.00437EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/14 12:0 a.m.•7 views

Adobe ColdFusion Improper Input Validation Vulnerability

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from an improper input validation vulnerability that can be exploited by an...

9.1CVSS6.5AI score0.01412EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/14 12:0 a.m.•12 views

Adobe ColdFusion Improper Authentication Vulnerability

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from an improper authentication vulnerability that could be exploited by an...

9.1CVSS7.2AI score0.01445EPSS
Exploits0References1
CNVD
CNVD
•added 2025/04/14 12:0 a.m.•9 views

Adobe ColdFusion untrustworthy data deserialization vulnerability (CNVD-2025-07249)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has an untrusted data deserialization vulnerability that can be exploited by an attack...

8.4CVSS7.1AI score0.01598EPSS
Exploits0References1
Total number of security vulnerabilities130931