131891 matches found
TOTOLINK EX1200T Command Execution Vulnerability
The TOTOLINK EX1200T is a wireless router from TOTOLINK that offers convenient network connectivity and management features. The TOTOLINK EX1200T suffers from a command execution vulnerability that originates from the presence of a pre-authenticated remote command execution of the webWlanIdx...
TOTOLINK N600R setWiFiWpsConfig function buffer overflow vulnerability
The TOTOLINK N600R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N600R suffers from a buffer overflow vulnerability that stems from the pin parameter in the setWiFiWpsConfig function failing to properly validate the length size of the input data, which can be exploited...
Dell PowerScale OneFS Integer Overflow Vulnerability
Dell PowerScale OneFS is an operating system from Dell USA. Dell PowerScale OneFS suffers from an integer overflow vulnerability that stems from a failure to properly validate user input, which can be exploited by an attacker to cause a denial of service...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-09030)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL Server, which stems from improper handling of the Server: DDL component and can be exploited by an...
Mattermost Information Disclosure Vulnerability
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an information disclosure vulnerability. The vulnerability stems from an under-restricted LLM request domain. An attacker can exploit the vulnerability to perform prompt injecti...
Google Chrome OS out-of-bounds write vulnerability (CNVD-2025-09154)
Google Chrome OS is a lightweight, open source, web-based operating system from Google. Google Chrome OS suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to bypass operating system authentication...
Google Chrome OS Out-of-Bounds Write Vulnerability (CNVD-2025-09153)
Google Chrome OS is a lightweight, open source, web-based operating system from Google. Google Chrome OS suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to bypass operating system authentication...
Growatt Cloud Applications Information Disclosure Vulnerability
Growatt Cloud Applications is a monitoring platform from Growatt in China. An information disclosure vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by an unauthenticated attacker to query API endpoints and obtain device details...
Growatt Cloud Applications Security Bypass Vulnerability
Growatt Cloud Applications is a monitoring platform from Growatt in China. A security bypass vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by unauthenticated attackers to send configuration settings and potentially perform physical...
SAP NetWeaver Visual Composer Metadata Uploader File Upload Vulnerability
SAP NetWeaver Visual Composer Metadata Uploader is a tool for modeling assistance from SAP. A file upload vulnerability exists in SAP NetWeaver Visual Composer Metadata Uploader. The vulnerability is due to an unauthenticated agent uploading potentially malicious executable binaries because the...
Growatt Cloud Applications Information Disclosure Vulnerability (CNVD-2025-14959)
Growatt Cloud Applications is a monitoring platform from Growatt in China. An information disclosure vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by an unauthenticated attacker to obtain a user's plant list by username...
Growatt Cloud Applications Authorization Bypass Vulnerability (CNVD-2025-14960)
Growatt Cloud Applications is a monitoring platform from Growatt in China. An authorization bypass vulnerability exists in Growatt Cloud Applications 3.6.0 and prior versions, which can be exploited by an unauthenticated attacker to obtain a user's email by knowing the username, resulting in a...
Dell PowerScale OneFS Out-of-Bounds Write Vulnerability
Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS suffers from an out-of-bounds write vulnerability that stems from an application boundary error when processing untrusted input. No detailed...
TOTOLINK N600R setWanConfig function buffer overflow vulnerability
The TOTOLINK N600R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N600R suffers from a buffer overflow vulnerability that originates from the macCloneMac parameter in the setWanConfig function failing to properly validate the length and size of the input data, which can...
Growatt Cloud Applications Information Disclosure Vulnerability (CNVD-2025-14965)
Growatt Cloud Applications is a monitoring platform from Growatt in China. An information disclosure vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by an unauthenticated attacker to obtain information about another user's electric vehic...
D-Link DIR-832x 0x42232c Function Command Injection Vulnerability
The D-Link DIR-832x is a wireless router from China's AUO D-Link. The D-Link DIR-832x suffers from a command injection vulnerability that stems from the macaddr key value and the function 0x42232c failing to properly filter constructed command special characters, commands, and so on. An attacker...
Dell PowerScale OneFS Default Password Vulnerability
Dell PowerScale OneFS is an operating system from Dell USA. Dell PowerScale OneFS suffers from a default password vulnerability that stems from the use of default passwords, which can be exploited by an attacker to cause an elevated privilege account to be taken over...
Tenda AC10 mac2 parameter buffer overflow vulnerability
The Tenda AC10 is a wireless router from the Chinese company Tenda. The Tenda AC10 suffers from a buffer overflow vulnerability that originates from the mac2 parameter in AdvSetMacMtuWan failing to properly validate the length and size of the input data, which can be exploited by an attacker to...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-09010)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause a denial of service...
IBM Sterling Control Center Cross-Site Scripting Vulnerability (CNVD-2025-09285)
IBM Sterling Control Center is an application system from International Business Machines IBM. A centralized monitoring and management system. IBM Sterling Control Center suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping o...
Google ChromeOS Memory Misreference Vulnerability
Google ChromeOS is a set of Web-based lightweight open source operating system from Google Google. Google ChromeOS suffers from a memory misreference vulnerability that is caused by a flaw in ComponentInstaller. An attacker could exploit the vulnerability to intercept device management requests b...
Information Disclosure Vulnerability in Oracle E-Business Suite
Oracle E-Business Suite is a fully integrated set of global business management software from Oracle. An information disclosure vulnerability exists in Oracle User Management for Oracle E-Business Suite, which arises from a flaw in the search and register users component and can be exploited by a...
SonicWall NetExtender Windows client Improper Link Resolution Vulnerability
SonicWALL NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from SonicWALL USA. The SonicWALL NetExtender Windows client suffers from an improper link resolution vulnerability that stems from improper link resolution, which can be exploited by an...
D-Link DIR-832x 0x417234 Function Command Injection Vulnerability
The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-832x suffers from a command injection vulnerability that stems from the failure of function 0x417234 to correctly filter construct command special characters, commands, and so on. An attacker can exploit this...
IBM Aspera Console Encryption Issue Vulnerability
IBM Aspera Console is a Web-based application from International Business Machines IBM. Allows users to centrally manage, monitor and control Aspera servers nodes and transports. An encryption issue vulnerability exists in IBM Aspera Console 3.4.4 and prior versions, which stems from the use of a...
Google Chrome OS Access Control Error Vulnerability (CNVD-2025-09151)
Google Chrome OS is a lightweight, open source, web-based operating system from Google. Google Chrome OS suffers from an Access Control Error vulnerability that stems from insufficient configuration access control in the Gerrit project, which can be exploited by an attacker to cause remote code...
Growatt Cloud Applications Information Disclosure Vulnerability (CNVD-2025-14963)
Growatt Cloud Applications is a monitoring platform from Growatt in China. An information disclosure vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by an unauthenticated attacker to query the total energy consumption information of any...
Unspecified Vulnerability in Oracle MySQL (CNVD-2025-17362)
Oracle MySQL is an open source relational database management system.MySQL Client is a MySQL client, a program used to communicate with a server to process information in a database managed by the server. A security vulnerability exists in MySQL Client for Oracle MySQL that originates from a...
Apache Roller Code Issue Vulnerability
Apache Roller is the United States Apache Apache Foundation of a Java-based multi-user open source blogging system. A code issue vulnerability exists in Apache Roller 6.1.4 and earlier versions, which stems from a password change that does not properly invalidate the session and can be exploited ...
Edimax BR-6478AC formDiskCreateGroup function command execution vulnerability
Edimax BR-6478AC is a dual-band Gigabit router from China Xunzhou Edimax. The Edimax BR-6478AC suffers from a command execution vulnerability that originates from the groupname parameter in /boafrm/formDiskCreateGroup failing to correctly filter construct command special characters, commands, etc...
TOTOLINK X18 Command Execution Vulnerability
The TOTOLINK X18 is a wireless router from TOTOLINK that provides a high-speed and stable wireless network connection. The TOTOLINK X18 suffers from a command execution vulnerability that originates in the enable parameter of the sub41105C function of the cstecgi.cgi file. An attacker can exploit...
TOTOLINK A810R Command Execution Vulnerability
The TOTOLINK A810R is a wireless dual-band router from China's Gion Electronics TOTOLINK. The TOTOLINK A810R suffers from a command execution vulnerability that stems from the failure of the NoticeUrl parameter in the setNoticeCfg function to correctly filter constructed command special character...
Growatt Cloud Applications Authorization Bypass Vulnerability
Growatt Cloud Applications is a monitoring platform from Growatt in China. An authorization bypass vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by an unauthenticated attacker to obtain restricted information about a user's smart devic...
Denial of Service Vulnerability in Oracle Application Object Library
Oracle Application Object Library is a system management component of Oracle Corporation. A denial of service vulnerability exists in Oracle Application Object Library, which can be exploited by an attacker to cause a denial of service...
TOTOLINK EX1200T Code Execution Vulnerability
The TOTOLINK EX1200T is a dual-band wireless signal amplifier that is primarily used to extend the coverage of an existing wireless network. A code execution vulnerability exists in the TOTOLINK EX1200T. The vulnerability stems from the FileName parameter in the setUpgradeFW function for...
Tenda AC10 cloneType2 parameter buffer overflow vulnerability
The Tenda AC10 is a wireless router from the Chinese company Tenda. The Tenda AC10 suffers from a buffer overflow vulnerability that stems from the cloneType2 parameter in AdvSetMacMtuWan failing to correctly validate the length and size of the input data, which can be exploited by an attacker to...
Mattermost Authorization Issues Vulnerability
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an authorization issue vulnerability that stems from improper privilege validation, which can be exploited by an attacker to make unauthorized changes to the system administrato...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17363)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server that originates from improper handling of the Server: Options component and can be exploited by an attacker to cause a denial of service...
D-Link DIR-832x Command Injection Vulnerability
The D-Link DIR-832x is a wireless router manufactured by D-Link. A command injection vulnerability exists in the D-Link DIR-832x. The vulnerability stems from improper handling of the targetaddr key value and function 0x41737c. An attacker can exploit this vulnerability to execute arbitrary code...
Apple MacOS Denial of Service Vulnerability (CNVD-2025-25573)
Apple MacOS is a graphical operating system developed by Apple Inc. for the Macintosh series of computers. Apple MacOS suffers from a denial of service vulnerability that originates from processing a file resulting in a denial of service or disclosure of memory contents. An attacker could exploit...
Apple MacOS Denial of Service Vulnerability
Apple MacOS is a graphical operating system developed by Apple Inc. for the Macintosh series of computers. Apple MacOS suffers from a denial of service vulnerability that originates from processing a file to cause a denial of service or disclose the contents of memory. An attacker could exploit t...
Tenda W12 and i24 cgiSysScheduleRebootSet Stack Overflow Vulnerability
The Tenda W12 and i24 is a wireless router made by Tenda. A stack overflow vulnerability exists in the Tenda W12 and i24. The vulnerability stems from improper handling of the rebootDate parameter in the cgiSysScheduleRebootSet function in the /bin/httpd file. An attacker can exploit the...
Apple MacOS Denial of Service Vulnerability (CNVD-2025-25572)
Apple MacOS is a graphical operating system developed by Apple Inc. for the Macintosh series of computers. Apple MacOS suffers from a denial of service vulnerability that originates from processing a file to cause a denial of service or disclose the contents of memory. An attacker could exploit t...
NETGEAR R61 Buffer Overflow Vulnerability
The NETGEAR R61 is a wireless router from NETGEAR. The NETGEAR R61 suffers from a buffer overflow vulnerability that stems from improper handling of the QUERYSTRING key value, which can be exploited by an attacker to execute arbitrary code...
SQL Injection Vulnerability in Changjitong T+ of Changjitong Information Technology Co., Ltd (CNVD-C-2025-129102)
T+ is a dynamic, intelligent and fashionable Internet management software, mainly for small and medium-sized industrial, trade and commerce enterprises with integrated financial and business applications, incorporating elements of socialization, mobility, Internet of Things, e-commerce and Intern...
Arbitrary File Read Vulnerability in Linkworks Collaborative Office Management Platform at Quanta Technology Co.
Linkworks Collaboration Management Platform is a collaborative office management platform designed to provide collaboration and information sharing among members of an organization. An arbitrary file read vulnerability exists in Linkworks Collaborative Office Management Platform of Quanta...
Tenda W12/i24 cgiSysUplinkCheckSet Stack Overflow Vulnerability
The Tenda W12 and i24 is a wireless router manufactured by Tenda. A stack overflow vulnerability exists in the Tenda W12 and i24. The vulnerability stems from improper handling of cgiSysUplinkCheckSet. An attacker can exploit this vulnerability to execute arbitrary code...
D-Link DIR-832x Command Injection Vulnerability
The D-Link DIR-832x is a wireless router from D-Link. A command injection vulnerability exists in the D-Link DIR-832x. The vulnerability stems from improper handling of the targetaddr key value and function 0x41710c. An attacker can exploit this vulnerability to execute arbitrary code...
Apple MacOS Elevation of Privilege Vulnerability
Apple MacOS is a graphical operating system developed by Apple Inc. for the Macintosh series of computers. Apple MacOS suffers from an elevation of privilege vulnerability that can be exploited by attackers to cause a data leak...
Tenda AC10 Buffer Overflow Vulnerability (CNVD-2025-08348)
The Tenda AC10 is a home wireless router that provides a stable and fast internet connection. A buffer overflow vulnerability exists in Tenda AC10. The vulnerability stems from the AdvSetMacMtuWan function not validly checking the length of the incoming data when processing the wanMTU2 parameter...