e-Diary Management System login.php File SQL Injection Vulnerability

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the logindetail parameter of the login.php file. An attacker can...

Microsoft Office Code Execution Vulnerability (CNVD-2025-10614)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute...

Patient Record Management System xray_print.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the parameter itrno of the xrayprint.php file. The vulnerability ca...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CNVD-2025-23059)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A remote code execution vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by an attacker to execute arbitrary code on a system...

Patient Record Management System add_patient.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from the validation of externally entered SQL statements that are missing from the parameter itrno in the addpatient.php file. An...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-10511)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Windows DWM Core Library Elevation of Privilege Vulnerability (CNVD-2025-07779)

The Microsoft Windows DWM Core Library is a core library in the Windows operating system. An elevation of privilege vulnerability exists in Microsoft Windows DWM Core Library, which can be exploited by an attacker to elevate privileges...

Microsoft Windows USB Print Driver Elevation of Privilege Vulnerability

Microsoft Windows USB Print Driver is a USB printer device driver provided by Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows USB Print Driver, which can be exploited by an attacker to elevate privileges...

Apache Answer Information Disclosure Vulnerability

Apache Answer is a community platform of the Apache USA Foundation. An information disclosure vulnerability exists in Apache Answer 1.4.2 and earlier versions, which stems from a public method returning a private data structure, and can be exploited by an attacker to cause IP address disclosure...

Online Fire Reporting System /edit-guard-detail.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the validation of externally entered SQL statements that are missing from the editid parameter of the edit-guard-detail.php file. An...

Microsoft Windows Telephony Service Remote Code Execution Vulnerability

Microsoft Windows Telephony Service is based on IBinder to provide phone status and telephony services. A remote code execution vulnerability exists in Microsoft Windows Telephony Service, which can be exploited by an attacker to remotely execute code...

Apache OFBiz Cross-Site Scripting Vulnerability (CNVD-2025-10035)

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. A cross-site scripting vulnerability exists in Apache OFBiz versions prior to 18.12.19, which stems from th...

ForestBlog keywords parameter cross-site scripting vulnerability

ForestBlog is a blogging system. A cross-site scripting vulnerability exists in ForestBlog 20250321 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data by the parameter keywords, and can be exploited by an attacker to execute arbitrary Web...

Online Fire Reporting System search.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the searchdata parameter of the /admin/search.php file. An attacker can us...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-10609)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

Google Chrome Input Validation Error Vulnerability

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability, which stems from an improper implementation in Intents, that can be exploited by an attacker to submit a special Web request that can be elevated in privilege by...

Google Chrome Incorrectly Implemented Vulnerability

Google Chrome is a WEB browser developed by Google Inc. Google Chrome suffers from an incorrect implementation vulnerability, no details of the vulnerability are provided at this time...

Tenda AC15 webCgiGetUploadFile has a buffer overflow vulnerability

The Tenda AC15 is a wireless router from China's Tenda. A buffer overflow vulnerability exists in the Tenda AC15 webCgiGetUploadFile, which can be exploited by an attacker to execute arbitrary code...

Apache Seata Code Issue Vulnerability

Apache Seata is the United States Apache Apache Foundation of a microservices architecture in the United States to provide high-performance and easy to use distributed transaction services in the open source project . Apache Seata suffers from a code issue vulnerability that stems from...

Google Chrome Input Validation Error Vulnerability (CNVD-2025-07516)

Google Chrome is a web browser from Google Inc. in the United States. Google Chrome suffers from an input validation error vulnerability that stems from insufficient validation of untrustworthy input in Extensions. An attacker can exploit this vulnerability to obtain sensitive information...

Apache Kylin code issue vulnerability (CNVD-2025-10036)

Apache Kylin is the United States Apache Apache Foundation of an open source distributed analytical data warehouse . The product mainly provides Hadoop/Spark on top of the SQL query interface and multidimensional analysis OLAP and other functions. Apache Kylin suffers from a code issue...

Google Chrome Elevation of Privilege Vulnerability

Google Chrome is a WEB browser developed by Google Inc. Google Chrome suffers from an elevation of privilege vulnerability that originates from an improper implementation in Extensions, which can be exploited by an attacker to submit a special web request that induces the user to parse and elevat...

Unspecified vulnerability in PyTorch torch.jit.jit_module_from_flatbuffer function

PyTorch is a Python package open-sourced by PyTorch. A security vulnerability exists in the PyTorch torch.jit.jitmodulefromflatbuffer function, which can be exploited by attackers to cause memory corruption...

Tenda RX3 Stack Overflow Vulnerability

The Tenda RX3 is a home wireless router from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda RX3. An attacker could exploit this vulnerability to cause a denial of service or execute arbitrary code...

Apple Xcode Out-of-Bounds Write Vulnerability

Apple Xcode is an integrated development environment developed by Apple Inc. Apple Xcode suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to cause an application to overwrite arbitrary files...

Google Android elevation of privilege vulnerability (CNVD-2025-11433)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from multiple locations containing an eavesdropping hijacking/overwriting attack that can be exploited by an attacker to gain access to a...

Google Android Information Disclosure Vulnerability (CNVD-2025-07521)

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android Denial of Service Vulnerability (CNVD-2025-12377)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial-of-service vulnerability, which stems from a code logic error that can be exploited by an attacker to trigger a factory reset without the user's consent, resulting in a denial of service...

Google Android Cache Overflow Vulnerability (CNVD-2025-07531)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a buffer overflow vulnerability that stems from the program not properly checking boundaries, which can be exploited by an attacker to elevate privileges...

Google Android Cache Overflow Vulnerability (CNVD-2025-07596)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a buffer overflow vulnerability that stems from the program not properly checking boundaries, no details of the vulnerability are provided at this time...

Google Android elevation of privilege vulnerability (CNVD-2025-07522)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which stems from the program's failure to perform privilege checks, and can be exploited by an attacker to gain privileges and elevate privileges without...

Google Android Denial of Service Vulnerability

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability that originates in the buildreadmultirsp function of the gattsr.cc file, which contains a logic error that can be exploited by an attacker to cause a denial of...

Google Android elevation of privilege vulnerability (CNVD-2025-10929)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which originates from the program not properly checking privileges, and can be exploited by an attacker to elevate privileges...

Tenda FH1202 Improper Access Control Vulnerability (CNVD-2025-07533)

The Tenda FH1202 is a wireless router from China's Tenda. An improper access control vulnerability exists in the Tenda FH1202. No detailed vulnerability details are available at this time...

Google Android elevation of privilege vulnerability (CNVD-2025-12378)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a competitive condition flaw in multiple functions in AccountManagerService.java, which can be exploited by an attacker to gain elevated privileges ...

Google Android Code Execution Vulnerability (CNVD-2025-10930)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that is caused due to a flaw in a system component. An attacker can exploit the vulnerability to execute arbitrary code on the system...

Google Android elevation of privilege vulnerability (CNVD-2025-11431)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates in the WindowOrganizerController.java file's applyTaskFragmentOperation function, which contains a logic error that can be exploited by an...

Google Android Cache Overflow Vulnerability (CNVD-2025-07529)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a buffer overflow vulnerability that stems from a code logic error that can be exploited by an attacker to remotely execute code...

Google Android elevation of privilege vulnerability (CNVD-2025-07520)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from insecure deserialization, which can be exploited by an attacker to bypass the parcel mismatch mitigation and elevate privileges...

Google Android Information Disclosure Vulnerability (CNVD-2025-07530)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that stems from a code logic error that can be exploited by an attacker to obtain sensitive information...

Google Android Buffer Overflow Vulnerability (CNVD-2025-07523)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a buffer overflow vulnerability that stems from the program not properly checking boundaries, which can be exploited by an attacker to execute remote code...

Tenda FH1202 Improper Access Control Vulnerability (CNVD-2025-07532)

The Tenda FH1202 is a wireless router manufactured by Tenda. An improper access control vulnerability exists in the Tenda FH1202. The vulnerability stems from improper access control due to manipulation of the parameter 'these' in the file /default.cfg. An attacker could exploit this vulnerabilit...

Google Android elevation of privilege vulnerability (CNVD-2025-11432)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which arises from the program incorrectly retaining setup privileges, and can be exploited by an attacker to elevate privileges without requiring addition...

SQL Injection Vulnerability in Founder Unlimited Media News Editorial System of Beijing Beifang Founder Electronics Co.

Beijing Beifang Founder Electronics Co., Ltd. is a leading technology and service provider in the fields of printing, media, publishing, and character libraries. A SQL injection vulnerability exists in Beijing Founder Electronics Co., Ltd.'s Founder Unlimited All-Media News Gathering and Editing...

Denial of Service Vulnerability in D-Link DIR-823x

The D-Link DIR-823X is a wireless router from China's AUO D-Link. A denial of service vulnerability exists in the D-Link DIR-823x, which can be exploited by attackers to cause a denial of service...

TOTOLINK A800R Command Execution Vulnerability

The TOTOLINK A800R is a wireless router manufactured by TOTOLINK. A command execution vulnerability exists in the TOTOLINK A800R. The vulnerability stems from a flaw in the processing of user input via the NoticeUrl parameter in the setNoticeCfg function, which can be exploited by an attacker to...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2025-06806)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server version 11.7, which stems...

Dell Unity OS Command Injection Vulnerability

Dell Unity is a set of virtual Unity storage environments from Dell USA. Dell Unity 5.4 and prior versions suffer from an OS command injection vulnerability that stems from the application failing to properly filter construct command special characters, commands, and so on. An attacker could...

TOTOLINK A3000RU Access Control Error Vulnerability

The TOTOLINK A3000RU is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3000RU is vulnerable to an access control error vulnerability that stems from an improper access control issue in the IBMS profile handling component. No detailed vulnerability details are available at...

PyTorch Denial of Service Vulnerability (CNVD-2025-23355)

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a denial of service vulnerability caused by a floating point exception in the function torch.mkldnnmaxpool2d. An attacker can exploit this vulnerability to cause a denial of service...