Huawei HarmonyOS Improper Privilege Control Vulnerability

Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from an Improper Privilege Control vulnerability that stems from improper privilege control in the Contacts module. No details of the vulnerability are available at this time...

Employee Record Management System editmyeducation.php File SQL Injection Vulnerability

Employee Record Management System is an employee record management system. Employee Record Management System suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter coursepg in the file /editmyeducation.php resulting in SQL injection. No details of the...

Park Ticketing Management System foreigner-bwdates-reports-details.php file SQL injection vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from improper handling of the todate parameter in the foreigner-bwdates-reports-details.php file. An attacker can exploit this vulnerabili...

Park Ticketing Management System normal-bwdates-reports-details.php file SQL injection vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from improper handling of the todate parameter in the normal-bwdates-reports-details.php file. An attacker could use this vulnerability to...

Park Ticketing Management System edit-ticket.php File SQL Injection Vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from improper handling of the tprice parameter in the edit-ticket.php file. No details of the vulnerability are available at this time...

ChurchCRM EventEditor.php Page SQL Injection Vulnerability

ChurchCRM is an open source church management system. ChurchCRM suffers from a SQL injection vulnerability that stems from a time-based SQL blind injection vulnerability in the EID POST parameter of the EventEditor.php page. No detailed vulnerability details are provided at this time...

Unspecified Vulnerability in Zoom Workplace Apps for Windows

Zoom Workplace Apps for Windows is an official suite of collaboration tools from Zoom that includes core features such as team chat, whiteboards, notes, and more, and is required to be used through a Zoom Meetings account. A security vulnerability exists in Zoom Workplace Apps for Windows, which...

Linux kernel null pointer dereference vulnerability (CNVD-2025-10176)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a null pointer dereference vulnerability that stems from not verifying the validity of a decoder, which could lead to a null pointer dereference. An...

Cyber Cafe Management System add-computer.php File SQL Injection Vulnerability

Cyber Cafe Management System is an internet cafe management system. Cyber Cafe Management System suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter compname/comploc in the file add-computer.php resulting in SQL injection. No details of the...

Huawei HarmonyOS Unauthorized Access Vulnerability

Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from an unauthorized access vulnerability that stems from unauthorized access to the application lock module. An attacker can exploit the vulnerability to authenticate and access unauthorized resourc...

Huawei HarmonyOS Null Pointer Reference Vulnerability

Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from a null pointer reference vulnerability, no details of the vulnerability have been provided...

Huawei HarmonyOS Permission Issues Vulnerability

Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from a privilege issue vulnerability that stems from an improper implementation of the file system module's authentication logic, which can be exploited by an attacker to steal sensitive information ...

Huawei HarmonyOS Process Residency Vulnerability

Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from a process-resident vulnerability. No details of the vulnerability are available at this time...

COVID19 Testing Management System /login.php File SQL Injection Vulnerability

The COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a SQL injection vulnerability that stems from an incorrect manipulation of the parameter Username in the file /login.php resulting in SQL injection. No details ...

Zoom Workplace Apps for Windows Null Pointer Dereference Vulnerability

Zoom Workplace Apps for Windows is an official suite of collaboration tools from Zoom that includes core features such as team chat, whiteboards, notes, and more, and is required to be used through a Zoom Meetings account. A null pointer dereference vulnerability exists in Zoom Workplace Apps for...

Teacher Subject Allocation Management System /search.php File SQL Injection Vulnerability

Teacher Subject Allocation Management System a teacher subject allocation management system. The Teacher Subject Allocation Management System is vulnerable to a SQL injection vulnerability that results from incorrect manipulation of the searchdata parameter in the file /admin/search.php. No detai...

Park Ticketing Management System add-foreigners-ticket.php File SQL Injection Vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from improper handling of the cprice parameter in the add-foreigners-ticket.php file. An attacker can exploit this vulnerability to query ...

Emergency Ambulance Hiring Portal /admin/edit-ambulance.php File SQL Injection Vulnerability

Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that stems from improper handling of the parameter dconnum in the file /admin/edit-ambulance.php, no details of the vulnerability are available a...

Art Gallery Management System SQL Injection Vulnerability

Art Gallery Management System is an art gallery management system. Art Gallery Management System has a SQL injection vulnerability, the vulnerability stems from improper operation of the parameter arttype in the file /admin/add-art-type.php, which can be exploited by an attacker to query a string...

Huawei HarmonyOS Unauthorized Access Vulnerability

Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from an unauthorized access vulnerability that stems from unauthorized access to the application lock module. An attacker can exploit the vulnerability to authenticate and access unauthorized resourc...

Huawei HarmonyOS Improper Privilege Control Vulnerability

Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from an Improper Privilege Control vulnerability that stems from improper privilege control of the Media Library module, which affects service confidentiality. No details of the vulnerability are...

Siemens OZW Web Server Code Execution and SQL Injection Vulnerabilities (CNVD-2025-10579 )

The OZW device web server is used for remote monitoring of building controller devices, e.g. for monitoring heating control or air conditioning status. A code execution and SQL injection vulnerability exists in the Siemens OZW672 and OZW772 web servers, which can be exploited by an attacker to...

Siemens OZW Web Servers Code Execution and SQL Injection Vulnerability

The OZW device web server is used for remote monitoring of building controller devices, e.g. for monitoring heating control or air conditioning status. A code execution and SQL injection vulnerability exists in the Siemens OZW672 and OZW772 web servers, which can be exploited by an attacker to...

Huawei HarmonyOS Unauthorized Access Vulnerability (CNVD-2025-11077)

Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from an unauthorized access vulnerability that originates from a web search command authentication module bypass. An attacker can exploit the vulnerability to authenticate and access unauthorized...

Park Ticketing Management System foreigner-bwdates-reports-details.php file cross-site scripting vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a cross-site scripting vulnerability that stems from improper handling of the fromdate and todate parameters in the foreigner-bwdates-reports-details.php file, which can be...

Linux kernel null pointer dereference vulnerability (CNVD-2025-10178)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a null pointer dereference vulnerability that stems from a failure to check the transportadddevice return value in sasphyadd, which could result in a...

Curfew e-Pass Management System /admin/pass-bwdates-reports-details.php File SQL Injection Vulnerability

Curfew e-Pass Management System is an electronic pass management system. Curfew e-Pass Management System suffers from a SQL injection vulnerability that originates from an incorrect operation of the parameter fromdate in the /admin/pass-bwdates-reports-details.php file that results in SQL...

Human Metapneumovirus Testing Management System /add-phlebotomist.php File SQL Injection Vulnerability

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. Human Metapneumovirus Testing Management System has a SQL injection vulnerability that originates from improper manipulation of the parameter empid in the file /add-phlebotomist.php. No details of...

Mattermost Improper Access Control Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an Improper Access Control Vulnerability, no details of the vulnerability are provided at this time...

Unspecified Vulnerability in PyTorch (CNVD-2025-23290)

PyTorch is a Python package open-sourced by PyTorch. PyTorch has a security vulnerability that can be exploited by attackers to cause memory corruption...

Dell Storage Manager Command Injection Vulnerability

Dell Storage Manager is a centralized storage management platform from Dell USA. A command injection vulnerability exists in Dell Storage Manager that stems from improper neutralization of special elements in commands, no details of the vulnerability are available at this time...

SonicWall SMA100 SSL-VPN Remote Command Injection Vulnerability

The SonicWall SMA100 is a secure access gateway appliance from SonicWall USA. An input validation vulnerability exists in the SonicWall SMA100 SSL-VPN, which can be exploited by a remote attacker to submit a special request that can inject shell commands, upload files, and execute arbitrary...

IBM CICS TX gets code execution vulnerability

IBM CICS TX Standard is a comprehensive single transaction runtime package from International Business Machines IBM. A security vulnerability exists in the IBM CICS TX gets function handling DNS return requests, which can be exploited by a local attacker to submit a special request that can be us...

Mattermost has an unspecified vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost has a security vulnerability that stems from the Wrangler plugin that can bypass AI access control. No details of the vulnerability are provided at this time...

SAMSUNG Notes out-of-bounds read vulnerability (CNVD-2025-24712)

SAMSUNG Notes is a South Korean company Samsung SAMSUNG used to provide a record function application software. SAMSUNG Notes suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to read out-of-bounds memory...

Dell PowerScale OneFS Out-of-Bounds Write Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An out-of-bounds write vulnerability exists in Dell PowerScale OneFS, which can be exploited by an attacker to submit a special request that could crash the servi...

NETGEAR EX8000 action_wireless command injection vulnerability

The NETGEAR EX8000 is a tri-band WiFi wireless extender , which is mainly used to extend WiFi coverage, eliminate WiFi dead spots, and provide faster network speeds. The NETGEAR EX8000 suffers from a command injection vulnerability that originates from the Iface parameter in the actionwireless...

Tenda W18E Stack Buffer Overflow Vulnerability

The Tenda W18E is a wireless router from the Chinese company Tenda. The Tenda W18E suffers from a stack buffer overflow vulnerability that originates from a stack buffer overflow in the formSetAccountList function's handling of the parameter Password. An attacker could exploit this vulnerability ...

Dell Storage Manager Elevation of Privilege Vulnerability

Dell Storage Manager is a centralized storage management platform from Dell USA. An elevation of privilege vulnerability exists in Dell Storage Manager, which can be exploited by an attacker to submit a special request for elevation of privilege...

SonicWall SMA100 Path Traversal Vulnerability

The SonicWall SMA100 is a secure access gateway appliance from SonicWall USA. A path traversal vulnerability exists in the SonicWall SMA100, which can be exploited by an attacker to delete arbitrary files, resulting in a reboot of factory settings...

TOTOLINK A3100R comment buffer overflow vulnerability

TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. The TOTOLINK A3100R suffers from a buffer overflow vulnerability, which originates from the comment parameter in setIpPortFilterRules, that can be exploited by an attacker to crash an application or execute...

JetBrains IntelliJ IDEA Log Information Disclosure Vulnerability

JetBrains IntelliJ IDEA is a Czech JetBrains set of integrated development environment for the Java language . JetBrains IntelliJ IDEA suffers from a log information disclosure vulnerability that originates from code being logged in the idea.log file. An attacker could exploit this vulnerability ...

Tenda RX3 fromSetWifiGusetBasic Stack Overflow Vulnerability

The Tenda RX3 is a home wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda RX3 fromSetWifiGusetBasic function when handling the shareSpeed parameter, which can be exploited by an attacker to submit a special request that crashes the application and...

Tenda RX3 GetParentControlInfo Stack Overflow Vulnerability

The Tenda RX3 is a home wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda RX3 GetParentControlInfo function when handling the mac parameter, no detailed vulnerability details are provided at this time...

D-Link DIR-619L wan_connected buffer overflow vulnerability

The D-Link DIR-619L is a cost-effective wireless router designed for home office Internet needs. The D-Link DIR-619L suffers from a buffer overflow vulnerability that stems from the improper handling of the wanconnected parameter in the formEasySetupWizard3 function, which can be exploited by an...

SonicWall SMA100 SSL-VPN Path Traversal Vulnerability

The SonicWall SMA100 is a secure access gateway appliance from SonicWall USA. A path traversal vulnerability exists in the SonicWall SMA100, which can be exploited by a user with SSLVPN privileges to inject a path traversal sequence that can be used by an attacker to make any directory writable...

Cisco IOS XE Software Web Interface Command Injection Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in the Cisco IOS XE Software web interface, which can be exploited by a remote attacker to submit a special request that can execute arbitrary command...

D-Link DIR-619L curTime Buffer Overflow Vulnerability

The D-Link DIR-619L is a cost-effective wireless router designed for home office Internet needs. The D-Link DIR-619L suffers from a buffer overflow vulnerability that stems from the formSetEasyWizard function mishandling the curTime parameter, which can be exploited by an attacker to submit a...

IBM Jazz Reporting Service Code Issue Vulnerability

IBM Jazz Reporting Service is a suite of ready-to-use reporting components from International Business Machines IBM. The product includes features such as report generation, data collection and lifecycle queries. A code issue vulnerability exists in IBM Jazz Reporting Service that stems from a...

Information Leakage Vulnerability in Ruiyou Tianyi Virtual System of Xi'an Ruiyou Information Technology Information Co.

Xi'an Ruiyou Information Technology Co., Ltd. is a professional virtualization and cloud computing solution provider. Xi'an Ruiyou Information Technology Information Co., Ltd Ruiyou Tianyi Virtual System has an information leakage vulnerability, which can be exploited by attackers to obtain...