Men Salon Management System /admin/edit-services.php File SQL Injection Vulnerability

Men Salon Management System a men's salon management system. The Men Salon Management System suffers from an SQL injection vulnerability that stems from a lack of proper validation and cleanup of inputs to the cost parameter in the /admin/edit-services.php file. An attacker could exploit this...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08353)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UpdateDatabaseSettings, which can be exploited by an attacker to bypas...

Patient Record Management System edit_fpatient.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from a lack of adequate validation of inputs to the ID parameter in the file /editfpatient.php. No details of the vulnerability are...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08619)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method UpdateProjectUserRights, which can be exploited by an attacker to bypass authorization...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08365)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that stems from an SQL injection in the GetTraces method, which can be exploited by an attacker to bypass authorization controls a...

PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10859)

PCMan FTP Server is a server software for File Transfer Protocol FTP. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from the failure of the DIR Command Handler module DIR Command Handler to properly handle a specific request. No detailed vulnerability details are provid...

PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10693)

PCMan FTP Server is a server software for File Transfer Protocol FTP. A buffer overflow vulnerability exists in PCMan FTP Server that originates when the MODE Command Handler component fails to properly validate input data when processing a specific request. No detailed vulnerability details are...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08598)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UnlockDatabaseSettings, which can be exploited by an attacker to bypas...

Delta Electronics COMMGR Code Execution Vulnerability

Delta Electronics COMMGR is a communication management software from Delta Electronics China. A code execution vulnerability exists in Delta Electronics COMMGR that stems from insufficient randomness in session ID generation, which can be exploited by an attacker to brute-force break the session ...

Siemens TeleControl Server Basic SQL Injection Vulnerability

TeleControl Server Basic is a server software for remote monitoring and control, widely used in industrial automation. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that stems from the internal use of the LockProjectCrossCommunications method that fails to properly...

Unspecified Vulnerability in Oracle MySQL (CNVD-2025-17379)

Oracle MySQL is an open source relational database management system from Oracle Corporation.MySQL Connectors is one of the drivers for connecting applications that use MySQL. A security vulnerability exists in MySQL Connectors for Oracle MySQL, which can be exploited by attackers to conduct an...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08616)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method UpdateConnectionVariableArchivingBuffering, which can be exploited by an attacker to bypa...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08368)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the CreateBackup method, which can be exploited by an attacker to bypass authorization...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17367)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which originates from a flaw in the PS component and can be exploited by an attacker to cause a complete denial of service...

Command Execution Vulnerability in YAPI of Shanghai Accenture Software Systems Co.

YAPI is an efficient, easy-to-use and powerful open source API management platform designed for developers, product and testers to provide elegant interface management services. A command execution vulnerability exists in YAPI of Shanghai Erlinger Software Systems Corporation, which can be...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08600)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UnlockTcmSettings, which can be exploited by an attacker to bypass...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08614)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method GetActiveConnectionVariables, which can be exploited by an attacker to...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08358)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UpdateConnectionVariables, which can be exploited by an attacker to...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08363)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the MigrateDatabase method, which can be exploited by an attacker to bypass authorizatio...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08350)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method CreateProject, which can be exploited by an attacker to bypass...

Dell ECS Input Validation Error Vulnerability

Dell ECS is an enterprise-class object storage solution from Dell Technologies. Dell ECS suffers from an input validation error vulnerability that stems from the system failing to properly process specific inputs. No details of the vulnerability are provided at this time...

PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10696)

PCMan FTP Server is an FTP server software for file transfer. A buffer overflow vulnerability exists in PCMan FTP Server that stems from the MDTM Command Handler failing to properly handle input data when processing a specific request. No detailed vulnerability details are available at this time...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08372)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the UpdateTraceLevelSettings method, which can be exploited by an attacker to bypass...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-09145)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from the internally used 'UpdateGateways' method. An attacker could use this vulnerability to bypass authorization...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08367)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the GetLogs method, which can be exploited by an attacker to bypass authorization contro...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08355)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UpdateProjectConnections, which can be exploited by an attacker to...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08369)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the GetSettings method, which can be exploited by an attacker to bypass authorization...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08366)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the ExportCertificate method, which can be exploited by an attacker to bypass...

Mattermost Information Disclosure Vulnerability (CNVD-2025-11083)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an information disclosure vulnerability that can be exploited by an attacker to obtain sensitive information in archived channels...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08591)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the UnlockWebServerGatewaySettings method, which can be exploited by an attacker to cause...

TOTOLINK A3700R cstecgi.cgi setSmartQosCfg Access Control Error Vulnerability

The TOTOLINK A3700R is a wireless router that provides wireless network connectivity and management. The TOTOLINK A3700R suffers from an access control error vulnerability that originates from improper access control of the setSmartQosCfg function in the /cgi-bin/cstecgi.cgi file. No detailed...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-09144)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from the internally used 'UpdateProject' method. An attacker could use this vulnerability to bypass authorization...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08615)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method GetConnectionVariables, which can be exploited by an attacker to bypas...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08596)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from an internal method, UnlockOpcSettings, which can be exploited by an attacker to bypass authorization controls...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08618)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method, UnlockProjectUserRights, which can be exploited by an attacker to bypass authorization...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08352)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UpdateTcmSettings, which can be exploited by an attacker to bypass...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08360)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method ActivateProject, which can be exploited by an attacker to bypass...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08359)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method LockProjectUserRights, which can be exploited by an attacker to bypass authorization...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08613)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method, ImportConnectionVariables, which can be exploited by an attacker to bypass authorization...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08593)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the UpdateWebServerGatewaySettings method, which can be exploited by an attacker to cause...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08602)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method, UnlockSmtpSettings, which can be exploited by an attacker to bypass authorization contro...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-09140)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that stems from the internally used 'UnlockProject' method. An attacker could exploit the vulnerability to cause bypass of...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08597)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method LockOpcSettings, which can be exploited by an attacker to bypass...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08356)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method, ImportDatabase, which can be exploited by an attacker to bypass authorization controls a...

PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10692)

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from mishandling of specific requests. No detailed vulnerability details are provided at this time...

PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10695)

PCMan FTP Server is an FTP server software that provides file transfer services. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from the failure of the HOST Command Handler module to properly process input when handling a specific request. No detailed vulnerability detai...

PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10691)

PCMan FTP Server is an FTP server software for file transfer. A buffer overflow vulnerability exists in PCMan FTP Server that stems from the SIZE command handler failing to properly validate input when processing a specific request. No detailed vulnerability details are provided at this time...

TOTOLINK A3700R Improper Access Control Vulnerability

The TOTOLINK A3700R is a wireless router that provides wireless network connectivity. The TOTOLINK A3700R suffers from an improper access control vulnerability that stems from the setWiFiEasyCfg/setWiFiEasyGuestCfg functions in the /cgi-bin/cstecgi.cgi file failing to properly handle specific...

PCMan FTP Server CD Command Buffer Overflow Vulnerability

PCMan FTP Server is a lightweight FTP server software that provides basic file transfer functionality. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from the CD Command Handler component failing to properly validate input data when processing a specific request. An...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08364)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that stems from an SQL injection in the ImportCertificate method, which can be exploited by an attacker to bypass authorization...