Unauthorized Access Vulnerability in the Integration Platform of Beijing UFIDA Government Affairs Software Co.

Beijing UFIDA Government Software Co., Ltd. is an all-round business management informatization solution provider for government departments, institutions and non-profit organizations. An unauthorized access vulnerability exists in the integration platform of Beijing UFIDA Government Affairs...

TOTOLINK A3700R Access Control Error Vulnerability (CNVD-2025-12019)

The TOTOLINK A3700R is a wireless router that provides network connectivity for homes and small offices. The TOTOLINK A3700R suffers from an Access Control Error vulnerability that originates from improper access control of the setDdnsCfg function in the /cgi-bin/cstecgi.cgi file. No detailed...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08604)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UnlockGeneralSettings, which can be exploited by an attacker to bypass...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17380)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server that originates from improper handling of the Server: DDL component and can be exploited by an attacker to cause a denial of service...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17364)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which originates from a flaw in the stored procedure component and can be exploited by an attacker to cause a complete denial of service...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17372)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which originates from a flaw in the replication component and can be exploited by an attacker to cause a complete denial of service...

Dell ECS Information Disclosure Vulnerability

Dell ECS is an enterprise-class object storage solution from Dell Technologies. Dell ECS suffers from an information disclosure vulnerability that originates from the system failing to properly validate certificates. An attacker could exploit the vulnerability to cause an information disclosure...

TOTOLINK A3700R Access Control Error Vulnerability

The TOTOLINK A3700R is a wireless router that provides wireless network connectivity. TOTOLINK A3700R suffers from an access control error vulnerability that originates from improper access control of the setL2tpServerCfg function in the /cgi-bin/cstecgi.cgi file, for which no detailed...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-09141)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that stems from the lack of proper filtering of input in the internally used 'DeleteProject' method. An attacker could exploit th...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08603)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method LockSmtpSettings, which can be exploited by an attacker to bypass...

PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10695)

PCMan FTP Server is an FTP server software that provides file transfer services. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from the failure of the HOST Command Handler module to properly process input when handling a specific request. No detailed vulnerability detai...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08353)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UpdateDatabaseSettings, which can be exploited by an attacker to bypas...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08361)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method GetProjects, which can be exploited by an attacker to bypass...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08595)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the LockBufferingSettings method, which can be exploited by an attacker to bypass...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08593)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the UpdateWebServerGatewaySettings method, which can be exploited by an attacker to cause...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08617)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method UpdateConnectionVariablesWithImport, which can be exploited by an attacker to bypass...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08352)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UpdateTcmSettings, which can be exploited by an attacker to bypass...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17374)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server that originates from mishandling of the Server: Optimizer component and can be exploited by an attacker to cause a denial of service...

Siemens TeleControl Server Basic SQL Injection Vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UpdateBufferingSettings, which can be exploited by an attacker to bypa...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08367)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the GetLogs method, which can be exploited by an attacker to bypass authorization contro...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08355)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UpdateProjectConnections, which can be exploited by an attacker to...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-09143)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from the internally used 'UpdateOpcSettings' method. An attacker could exploit the vulnerability to cause bypass o...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08618)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method, UnlockProjectUserRights, which can be exploited by an attacker to bypass authorization...

PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10692)

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from mishandling of specific requests. No detailed vulnerability details are provided at this time...

Unauthorized Access Vulnerability in Unicom Software Technology Co.

Unisys Software Technology Co., Ltd. is a leading domestic operating system research and development enterprise in China. Unauthorized access vulnerability exists in Unixin Software Technology Co., Ltd.'s Write Online, which can be exploited by attackers to obtain sensitive information...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08619)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method UpdateProjectUserRights, which can be exploited by an attacker to bypass authorization...

Tenda W12 Buffer Overflow Vulnerability

The Tenda W12 is a wireless router that provides wireless network connectivity. A buffer overflow vulnerability exists in Tenda W12 version 3.0.0.5, which originates from the cgiWifiRadioSet function in the /bin/httpd file that fails to properly validate input data when processing a specific...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17377)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which originates from a flaw in the replication component and can be exploited by an attacker to cause a complete denial of service...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-09148)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method UpdateProjectCrossCommunications that can be exploited by an attacker to bypass...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08606)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method UpdateGeneralSettings, which can be exploited by an attacker to bypass authorization...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08607)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method, UnlockUser, which can be exploited by an attacker to bypass authorization controls and...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08592)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the LockWebServerGatewaySettings method, which can be exploited by an attacker to bypass...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08368)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the CreateBackup method, which can be exploited by an attacker to bypass authorization...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17368)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which originates from a flaw in the InnoDB component, and can be exploited by an attacker to cause a complete denial of service attack or data tampering...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17367)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which originates from a flaw in the PS component and can be exploited by an attacker to cause a complete denial of service...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-09140)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that stems from the internally used 'UnlockProject' method. An attacker could exploit the vulnerability to cause bypass of...

PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10691)

PCMan FTP Server is an FTP server software for file transfer. A buffer overflow vulnerability exists in PCMan FTP Server that stems from the SIZE command handler failing to properly validate input when processing a specific request. No detailed vulnerability details are provided at this time...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08615)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method GetConnectionVariables, which can be exploited by an attacker to bypas...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08598)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UnlockDatabaseSettings, which can be exploited by an attacker to bypas...

Mattermost Information Disclosure Vulnerability (CNVD-2025-11083)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an information disclosure vulnerability that can be exploited by an attacker to obtain sensitive information in archived channels...

JetBrains Toolbox App Command Injection Vulnerability

JetBrains Toolbox App is an application for managing JetBrains development tools, providing installation, update, and management capabilities. JetBrains Toolbox App suffers from a command injection vulnerability that stems from the SSH plugin handling input improperly. An attacker could exploit t...

Unspecified vulnerability in JetBrains rubymine

JetBrains rubymine is an integrated development environment IDE for Ruby development, providing code editing, debugging, and more. JetBrains rubymine suffers from a security vulnerability that originates from a remote interpreter overriding the port that listens to all interfaces. An attacker can...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-09145)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from the internally used 'UpdateGateways' method. An attacker could use this vulnerability to bypass authorization...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08358)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UpdateConnectionVariables, which can be exploited by an attacker to...

Delta Electronics COMMGR Code Execution Vulnerability

Delta Electronics COMMGR is a communication management software from Delta Electronics China. A code execution vulnerability exists in Delta Electronics COMMGR that stems from insufficient randomness in session ID generation, which can be exploited by an attacker to brute-force break the session ...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08364)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that stems from an SQL injection in the ImportCertificate method, which can be exploited by an attacker to bypass authorization...

PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10694)

PCMan FTP Server is a server software for file transfer protocol. A buffer overflow vulnerability exists in PCMan FTP Server that stems from the LANG Command Handler component failing to properly validate input data when processing a specific request. No detailed vulnerability details are availab...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17369)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which originates from a flaw in the InnoDB component, and can be exploited by an attacker to cause a complete denial of service attack or data tampering...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17375)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which originates from a flaw in the InnoDB component that can be exploited by attackers to cause data tampering...

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08357)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method RestoreFromBackup, which can be exploited by an attacker to bypass...